Building Automation Knowledge Base

Issue Does Security Expert meet "FIPS Compliance"  Product Line EcoStruxure Security Expert Environment Security Expert Cause Unable to locate documentation for the FIPS compliance. Need to verify before Continuum access control system is migrated to Security Expert. Resolution Security Expert Software is currently not FIPS compliant. See Transition Guide Security Expert - Continuum Access Control to Security Expert - Reference Guide for more more details on what is, and is not, supported with a Continuum Transition to Security Expert.

Issue How to estimate the disk space required to accommodate a given Security Expert installation. Product Line EcoStruxure Security Expert Environment Security Expert Microsoft SQL Server Cause The Security Expert databases will grow in size depending on the configuration and logging requirements. Therefore, estimating how much a database will grow over time should be done to determine which Microsoft Database solution and hard drive requirements. Resolution The Installation Guide does have some hardware recommendations under the System Requirements section, and these should be used as a baseline for allowing appropriate database storage. 10 controllers w/ 16 modules each - 40GB More than 10 controllers w/ any number of modules each - 100GB. The configuration database (SecurityExpert) is relatively small and will typically not grow much. The events database (SecurityExpertEvents) is what logs all events and alarms, and it will grow over time, rapidly depending on what is being logged and how often. There are many variables in play from one site to another. The space required for a standard Security Expert Database is dependent on, but not exclusive to: The amount of Inputs/Outputs/Readers you have with Log Events enabled. The amount of traffic through the site. The number of Expanders and other Records. The frequency of backups and purging of events from the SecurityExpertEvents database. As a guideline, we can broadly calculate storage requirements based on the size of each event being logged. Typically this will be 564 bytes per event. If you have 2000 Events per day, here is the calculation for how many MB will be used per day: 564 B x 2000 = 1128000 B = 1.07 MB per day If those events that are being logged are alarms as well, then this total would be doubled. Another way to calculate this is to take what a typical usage requirement would be for a site or monitor a live site over a week/month to calculate the sites' average usage and extrapolate that to fit. For example, a site with 130 doors being used 8 hours a day and with door openings and closings 10 times an hour would equate to just under 1GB a month. Please note these are very rough guesses; individual sites might be busier/quieter. Performing regular SecurityExpertEvents database backups and purges will ensure that the database size does not get too large for the installation. For instructions, see the System Backups section in the Installation Guide and AN 279 Security Expert Differential Backups.

Issue Activation of the Security Expert SSN with a new installation of the client software, software extensions (e.g. SX-VIM, SX-DOR-50) and integration licenses (e.g. SX-NVR, SX-CAM-10) need to be completed manually because there is no Interne access. Product Line EcoStruxure Security Expert Environment Licensing Cause The computer which the Security Expert client is installed on, does not have Internet access to use the 'Automatic License Update' method to activate the license. The manual method must be used to register and obtain the new license. Resolution In the Security Expert client go to About | License | information make a note of your system's SSN In the Security Expert client go to About | License | License Update and select Generate a License Request File for this System Copy the 'ICT_LicenceRequest.req' license request file produced onto a machine that has Internet access. Navigate to https://se.ict.co/license/ and enter your details on this web page. Enter the SSN for your system Upload the 'ICT_LicenceRequest.req' license request file generated previously and Submit. You should then be able to download a 'Security Expert YJWB...............O4PJ5W License.lic' file. Return to your offline Security Expert Client and go to About | License | License Update , Select Browse for your Downloaded License file Select the 'Security Expert YJWB...............O4PJ5W License.lic' file downloaded previously. Once the license update is complete shut down the client and restart the services   Support for manual activation: v4.2.194 - Manual activation is supported. v4.2.216 - Manual license activation's are no longer supported and an Internet connection is required on the Security Expert installation to be able to perform a new activation or update a license. v4.2.243 - Manual activation is supported. v4.3.x - Manual activation is supported.

Issue A previous version of the client software badged SecureStruxure is installed, and needs to be upgraded to Security Expert. Product Line EcoStruxure Security Expert Environment Security Expert SecureStruxure Cause The offer had the name changed between versions and it's not straight forward how to update the software, and databases, to the newer version. Resolution SecureStruxure can be upgraded to Security Expert by following these steps: Contact Product Support to upgrade the site license to Security Expert.. Backup the SecureStruxureOperations and SecureStruxureOperationsEvents databases via SQL Server Management Studio. Uninstall SecureStruxure. Rename the SecureStruxureOperations and SecureStruxureOperationsEvents databases to SecurityExpert and SecurityExpertEvents When you run the Security Expert installer, use the new Security Expert SSN. You will need to point Security Expert at the MS SQL database instance you were previously using for SecureStruxure (this is likely "localhost\SECURESTRUXURE"). The installation wizard should pick up the databases and upgrade them, retaining all the SecureStruxure programming. Log into Security Expert and re-license the software by going to the About | License menu option.. If you are unable to connect to the license server (no internet connection), you can use the manual method for registering a license.

Issue Require details on how to setup multiple inputs to popup the same camera window if any of them are true. Product Line EcoStruxure Security Expert Environment Security Expert Client Cause Unsure how to setup program for multiple inputs to display video from one camera when any of them are set to true Resolution 1. Under Events | Event Filters create a new Event filter 2. On the Event Types tab untick "Include All Event types" and select the Add button  3. Browse for "All Input Events", select "Input <ZONE_NAME> Opened" and click OK 4. On the Records tab select the Add button, select Device Type "Input" and your Controller, then the inputs that you want to popup this video 5. Save the Event Filter 6. Under Events | Actions create a new Action 7. Select the Type "Popup Camera Window", select the Event Filter you created in step 1, select the camera you want 8. Save the changes and test the scenario.

Warning Potential for Data Loss: The steps detailed in the resolution of this article may result in a loss of critical data if not performed properly. Before beginning these steps, make sure all important data is backed up in the event of data loss. If you are unsure or unfamiliar with any complex steps detailed in this article, please contact Product Support for assistance. Issue When adding a new Domain an error shows “Object does not exist – The domain “your Domain Name” does not exist, and the Domain is not created.   Using control panel Or using System/Domains folder Product Line EcoStruxure Building Operation Environment Building Operation Automation Server Building Operation Enterprise Server Building Operation Enterprise Central Cause A Content Type rule could be incorrectly configured Resolution Navigate to /Your Server Name/System/Content Types/Rules/ If there is a “*” in the “Container Name Pattern” of any of the rules, correct this or delete the rule.     Once completed, new domains can be added.

Issue If the AS is configured to get the time from an NTP server the customer need to know how often the AS will ask the NTP server for the time.    Product Line EcoStruxure Building Operation Environment EcoStruxure Building Operation Enterprise Central  EcoStruxure Building Operation Enterprise Server EcoStruxure Building Operation Automation Server (AS/ASB/ASP) Cause In version 1.4, the AS asked the NTP server 1 time per minute. Starting in version 1.5, this was changed so the AS is using the standard solution for the NPT protocol. Resolution When using the standard solution in the NTP protocol as the AS does starting in version 1.5, it depends on how much the AS drifts from the NTP server. The faster the AS drifts, the more frequently the time is updated.   For more information regarding Network Time, please see WebHelp article 6370 and corresponding articles. 

Issue When a local user belonging to the administrator group on an AS-P is logged in to the AS-P using Workstation the user can for example via a Link in a graphic access the system folder in the ES the AS-P is connected to.  The local user in the AS-P can even change the admin password on the ES. How can this be avoided? Product Line EcoStruxure Building Operation Environment Building Operation Automation Server Building Operation Enterprise Server Cause In EBO v3.2.1 and later versions, it is possible to restrict access of the logged-in user to only the server that they are logged into, i.e. it is possible to prevent access to the ES\Servers folder when logged directly into an AS-P that is a sub server of the ES, thus preventing access to the whole system. Resolution In the ES Control Panel open Security Settings: Mark the option "Restrict root permission to logged in server"

Warning Potential for Data Loss: The steps detailed in the resolution of this article may result in a loss of critical data if not performed properly. Before beginning these steps, make sure all important data is backed up in the event of data loss. If you are unsure or unfamiliar with any complex steps detailed in this article, please contact Product Support for assistance. Issue PCT client can't start properly with "Hardware virtualization is not enabled" error. Product Line EcoStruxure Building Operation Environment Building Operation Project Configuration Tool (PCT) (All Versions) Cause Hardware Virtualization is Disabled or not available for PCT Resolution  Install "Intel® Processor Identification Utility" then verify the status of "Intel® Virtualization Technology" from the Utility. Using the table below, you can see if your processor supports Intel® Virtualization(provided by Intel).  The above information can also be found on Intel® Virtualization Technology web page If Virtualization is disabled in BIOS then enable it from BIOS else identify other software utilizing the Virtualization and stop the application.  Use Win key or press the Windows Start button Type: cmd Select Run as Administrator  Verify command prompt window title bar is Administrator: Command Prompt Type: shutdown /r /fw/ /f  Press enter and the computer will shut down immediately forcing all applications to close (/f) and restart (/r) into firmware interface (/fw)   If the issue persists, the following article may provide the answer Knowledge Base article - PCT error Hardware-virtualization is not enabled-Please-enable.

Issue Unwanted hardware and other alarms received at Enterprise Server Product Line Satchwell BAS & Sigma, EcoStruxure Building Operation Environment EcoStruxure Building Operation Sigma Release 4_08 (Build 3_46_57) Cause Unwanted Sigma hardware and other alarms received at Enterprise Server. Resolution Navigate through the “Sigma interface”, to the controller (OSN) that the alarms need to be disabled from. Select the controller’s property (basic tab), Device monitoring can be enabled or disabled.     If you need to disable the alarms for multiple controllers, this can be done by multi selecting the required controllers, opening the property panel and change the setting there.  

Issue The BACnet Interface Contains a Yellow Exclamation Icon and when you hover over to read the tooltip it states, “Contains Unresolved BACnet Reference”. Product Line EcoStruxure Building Operation Environment EcoStruxure Building Operation Building Operation Multi-Purpose Controller Building Operation Multi-purpose VAV Building Operation Room Controller Building Operation IP-IO Cause There is a reference misconfiguration within the “Time Synchronization Recipients” under the BACnet Interface. Resolution Select and highlight the BACnet Interface then select the Time Synchronization Recipients TAB Compare the list Names with the list to the left under the IP Network Tree. In this example, we can see that MPV-9A is not a controller within my database under the IP Network_2. Highlight/Select the controller under Time Synchronization recipients and edit the details by clicking on the pencil icon. Within the Time Synchronization Recipient screen, we want to adjust this device to match the ACTUAL device located under our IP Network_2 named MP-9A_Roof. Click on the “three dots|ellipsis “to browse to the correct Recipient device identifier. In this example: Select the BACnet Interface > IP Network_2 > MPV-9A_Roof as this is the correct path for this device. At this point, we have the correct path under the Recipient device object reference. Adjust the Recipient name to match the BACnet name you configured for that device. In this example, it was set to MPV-9A_Roof. TIP: Click the BACnet button to fill in the recipient name field with the BACnet name of the device referenced in the recipient device object reference field. Click OK. If this is the only device you need to modify then you can click the SAVE icon. If you have more devices to adjust, then you will repeat the process until you're done with all the devices. You have now resolved the reference errors against the BACnet Interface.

Issue Testing Modbus device with a Modbus simulator. Product Line EcoStruxure Building Operation. Environment Building Operation Automation Server Building Operation Enterprise Server Modbus Protocol Cause The field device and Modbus registers can be tested with the Modbus simulator to ensure the device is set up correctly and communication is working. Resolution Once a device is tested with the Modbus simulator, the live Modbus device can be implemented with confidence knowing that the setup in the Server is correct.   Here you can download the Modbus Simulator    Review the following video to assist with the following: Run the ModRSim application Setup the simulator to display the values you need to test Adjust values checking that they are updated by the polling device Display the Modbus traffic and capture traffic if fault finding is needed.  

Issue Need to ensure that there are not any unresolved or invalid bindings Product Line EcoStruxure Building Operation Environment EcoStruxure Building Operation Workstation v1.5 and above Bindings Diagnostics Cause Bindings are invalid because they point to something that cannot be bound together or they are unresolved because the binding points to an object that is not in the database. Resolution From the Workstation run the Bindings Diagnostics to check for invalid or unresolved bindings.   Open the Control Panel To Check the Status of Bindings  click the option for Bindings Diagnostics.   Observe the Status to identify any invalid or unresolved bindings. Refer to the EBO Webhelp Binding Status Icons topic for more information Right-click the invalid or unresolved binding, edit the binding or view properties, and correct as appropriate.

Issue What mode must a LoyTec L-IP be configured to work with EcoStruxure Building Operation? Product Line EcoStruxure Building Operation Environment Loytec L-IP Building Operation Enterprise Server Cause The operating mode limits the capabilities of the LoyTec L-IP when used with an Enterprise Server Resolution Smart Switch Mode Ensure that the LoyTec L-IP is in Smart Switch mode. This is achieved by using the DIP switch settings for switches 1 and 2 in the ON position.     Reset Forwarding Tables Press the status button for at least 20 seconds. This will clear the forwarding group, the subnet/node forwarding, and the router domain table when used in smart switch mode. Important: If the L-IP is operated in smart switch mode and is moved from one location to another or if major changes to the configuration of the network are made, it is recommended to reset the L-IP forwarding tables Important: Wait at least 30 seconds after power-up of the L-IP before pressing the Status Button to ensure that the L-IP has booted properly!     For additional detail please reference the LoyTec L-IP user manual.

Warning Electrostatic Discharge Required: Always discharge static electricity from your person by touching metal prior to handling any hardware. Failure to do so may result in damage to devices. Issue Difficulty getting b3 controller online in order to replace a failed one Product Line EcoStruxure Building Operation Environment EcoStruxure Building Operation Continuum b3 Controller Cause A b3 controller has failed and needs to replace with the same model. Resolution Remove the failed b3 controller. In EcoStruxure Building Operation Workstation change the serial number of the failed b3 to that of the replacement b3. Install the replacement b3 and ensure the MSTP bus is connected so it autobauds to the correct rate. Then power it up. Remove the battery tab from the replacement b3 (if applicable). In Workstation right-click on the replacement b3 and select Device -> Commission. A green progress bar should appear with a success status message. In Workstation right-click on the replacement b3 and select Download all objects. A green progress bar should appear with a success status message. In Workstation right-click on the replacement b3 and select Device -> Backup to flash.

Issue Requirement to set the BACnet max master setting on a SE8000 series room controller Product Line EcoStruxure Building Operation Environment EcoStruxure Building Operation Automation Server SE8000 BACnet MS/TP Cause The BACnet max master setting is not available to be set locally on the SE8000 room controller Resolution The max master setting of the SE8000 can be changed in EcoStruxure Building Operation Workstation.  Add the SE8000 to the EcoStruxure Server Open the SE8000 device properties On the Advanced tab, change the Maximum master property (which is a read/write property) to the required value. 

Issue CX level controller was once online and now appears as offline Product Line Andover Continuum Environment Continuum Netcontroller CX ACX BCX Cause From time to time issues will be reported that controllers are offline at the IP level. Resolution Troubleshooting steps to perform:   From one of the existing sites Cyberstations perform a ping of the controller. If there are responses, verify that the response is from the controller and not another device. Verification of the response can be done via Wireshark capture if the CX appears to be responding. If there are responses to the ping, then attempt to open up the web-configuration page for second generation controllers. Verify the site’s Cyberstation is online itself. (Right-Click/edit the workstation and view the Comm Status. It will be either Online or Offline.) With CyberStation installed on technician’s laptop with the same version as the site version. Plug an Ethernet cable into the same hub the controller is plugged into. Connect to the site database with the local laptop's CyberStation and start Continuum. Check the controller in Continuum Explorer to see if it shows offline to the local laptop's CyberStation. If the controller is online to the local laptop's Cyberstation, then it is clearly a site network issue. At that point we will need to make sure all the IP address info is correct; there is no port blocking, subnet masks, gateways etc… Standard network troubleshooting. If the controller shows offline to the local laptop's CyberStation, then look at the CPU lights on the controller for activity. Watch the link light, CPU, IO bus lights if there is IO modules, etc… If those look abnormal and you have a smart phone it will be worthwhile to try and get a video of them to send into support for review. If there is no link light then try disconnecting the Ethernet cable from the NETWORK SWITCH and plug it back in to check if it brings the controller back online. If that does not bring the controller back online try disconnecting the Ethernet cable from the CONTROLLER and then immediately put it back and check if the controller comes back online. If all of the above fail then the next step will be to power cycle the controller to try and bring it back online. If communications cannot be established, contact support and open up a case for additional troubleshooting to determine if the controller needs to be sent to repair. If communications is restored and further investigation is required, please retrieve the following information and open a case with support for review. Controller error log Controller offline listview exported to CSV A Wireshark LAN capture at the controller level with peak traffic occurring Additional information may be requested including a controller core dump. This is a very intensive process. Support will supply the Core Dump Utility if needed.   Please click HERE for a copy of these instructions in PDF format.

Warning   Potential for Data Loss: The steps detailed in the resolution of this article may result in a loss of critical data if not performed properly. Before beginning these steps, make sure all important data is backed up in the event of data loss. If you are unsure or unfamiliar with any complex steps detailed in this article, please contact Product Support for assistance. Issue Confirming compatible Modbus data types available for a Sigma IC3 Modbus Product Line Satchwell Sigma Environment Sigma Release 4_05-SEB (Build 3_43_18) Sigma Release 4_05-SP2 (Build 3_42_48) Sigma Release 4_06 (Build 3_44_14) Sigma Release 4_06 SP1 (Build 3_44_16) Sigma Release 4_07 (Build 3_45_48) Sigma Release 4_07-SP1 (Build 3_45_51) Sigma Release 4_07-SP2 (Build 3_45_58) Sigma Release 4_08 (Build 3_46_57) IC3 Modbus Cause The use of 64-bit is not mentioned in documentation Resolution 16-bit registers are supported with all versions of Sigma. From Sigma release 4 05 SEB (Build 3_43_18) 32-bit registers are supported. 62-bit registers are not supported with Sigma IC3.   The ba077 Modbus 32-bit application note provides information on the engineering of 32-bit registers. https://ecoxpert.se.com/search?documentUUID=74eaf0dd-fbd9-4429-9c82-eb205aa9be07&title=BA077%20Modbus%2032%20Bit%20Values%20-%20Satchwell%20-%20Application%20Note Sigma 4.06 IC3 Modbus Firmware and Release Note https://ecoxpert.se.com/search?documentUUID=cb99b073-d9ab-400e-8e67-2f8343447768&title=Sigma%204.06%20IC3-Modbus%20Firmware%20-%20Release%20Notes Sigma IC3 Modbus 1.n.2 firmware is the latest available version https://ecoxpert.se.com/search?documentUUID=02d88785-9d13-4184-b74a-d1a0b5ce7edd&title=Sigma%20IC3%20Modbus%201.n.2%20-%20Firmware    

Issue Troubleshooting Sigma IC LON Values going on and offline Product Line Satchwell Sigma Environment Sigma Release 4_05-SEB (Build 3_43_18) Sigma Release 4_05-SP2 (Build 3_42_48) Sigma Release 4_06 (Build 3_44_14) Sigma Release 4_06 SP1 (Build 3_44_16) Sigma Release 4_07 (Build 3_45_48) Sigma Release 4_07-SP1 (Build 3_45_51) Sigma Release 4_07-SP2 (Build 3_45_58) Sigma Release 4_08 (Build 3_46_57) IC LON Cause Lon Values going into and out of default Resolution Compare the IC-LON’s Receive heartbeat set in the “gateway.txt” file in the IC-LON controller, to the send heartbeat set in the controller. The recommendation is for the receive heartbeat be set to 2-5 times the send heartbeat of the field controller. Starting at 2 times, then increasing if the problem persists. If the controller doesn’t have a heartbeat and the LON value rarely changes, disable the receiver heartbeat in the IC-LON’s gateway.txt file by setting the heartbeat to 0. Example: 1     2     3        4      5   6  7 2,   2,  112,  1293,  0,  0, 0   The Sigma system is now out of its support period, consideration should be given to transitioning or upgrading to SpaceLogic - EcoStruxure Building Operation.

Issue Need to send Continuum alarm messages to email addresses  Product Line Andover Continuum Environment Continuum Cyberstation Cause Alarm delivery required to remote users via email.  Resolution Please note this resolution is applicable to all versions of Continuum Cyberstattion and requires Microsoft Exchange or Outlook to send emails.  However, CyberStation version 2.xx does not necessarily require Microsoft Exchange or Outlook to send emails for alarm notifications. Instead, it is possible to configure an SMTP server on the network and use it to send alarm email notifications directly to the intended recipient.  Please refer to SMTP Email Alarm Configuration in Continuum 2.00 to 2.03    Here are some requirements for forwarding Continuum workstation alarm events via email and paging: The Continuum workstations that have been designated primary and backup email and/or page handlers must have an email client such as Microsoft Exchange or Outlook. The email client application must communicate with an existing email server application, such as MS Exchange Server. The primary or backup email/paging workstation must be running Continuum at the time an alarm is generated. Each EventNotification object associated with the alarms that you wish to email or page must have its own email distribution list in the personal address book of the client email application using a specified naming convention as outlined in the table below. This email distribution list must be stored in the first address book shown in the list of available address books in the email client application. For example, if you create an EventNotification distribution list in the Personal Address Book in Microsoft Outlook, then the Personal Address Book must be the first one showing in the address list dropdown box when you open the Address Book.   How to Create an EventNotification Distribution List Note: The following steps are based on Microsoft Outlook. Other mail applications may have different menu names and choices but the general procedure is the same. Step Action 1 Open the Address Book for the email account on the Continuum workstation that will be providing the email/paging services. Your toolbar may have a button for this. If not, use the Address Book option of the Tools menu. 2 Select New Entry from the Address Book File menu. 3 Select the entry type Personal Distribution List and put this entry in the Personal Address Book. 4 In the Name field enter a name for the distribution list using the following format: For E-mail: ACC.name For Paging: ACC.page.name where name is the name of the EventNotification. 5 Add members (the email addresses or pager and service numbers of those to whom the notification of the alarm will be sent) to your personal distribution lists. 6 Set address book options so that the address book where your personal distribution lists are stored is the first one to be searched when sending emails or pages.