Building Automation Knowledge Base

Issue If more than 3 Operators are created in Security Expert, the License page of the Thick Client will show more Licenses in use than the maximum three (3) clients provided with the standard SX-SRVR License. To see what the site is using, select About > License and scroll down to the Feature: Web Operators. As shown below, there are four web operators active out of the three (4/3) allowed. Product Line EcoStruxure Security Expert Environment Licensing Cause A Web Operator is defined as any Operator who can log onto the Security Expert Server using a browser.                           In the example shown below there are four Operators: admin 2nd Operator 3rd Operator 4th Operator The system allows each to log in successfully: The License option SX-WEB-OPR enables 'x' number of browser connections depending on customer needs and should effectively ensure that the correct number of Operators are purchased. However, the feature is currently in development and is not yet enforcing limits on the number of web operator connections.  This allows the number of connections to exceed the maximum limit (I.e.4/3) for the time being. Resolution Note: The Operator does NOT even need to be logged on for the count to register 4/3, the fact that 4 operators have been created is enough. The restriction of operators via Web Client could be enabled/enforced at any time in the next release of the software, so it is strongly advised to purchase the correct number of Licenses required at the time of installation, to prevent a loss of user connectivity going forward.

Issue Request for database schemas for SecurityExpert and SecurityExpertEvents databases. Product Line EcoStruxure Security Expert Environment Security Expert Client, Security ExpertServer Cause Various entities request database schemas for SecurityExpert and SecurityExpertEvents databases for reasons like access to the stored data for third party reporting packages. Resolution Schneider Electric does not publish or provide the Security Expert database schemas. Database schemas change over time with new revisions which may result in broken tables. Anything required should be available using the Security Expert SOAP Web Service Software Development Kit (SX-SOAP-SDK). The SDK will allow the extracting, transforming and storing of data into a separate database. Third-party applications/tools can then report on that data stored in a separate database. This allows the integrity of the Security Expert databases to remain intact. The Security Expert SOAP SDK can be purchased as part number SX-SOAP-SDK.

Issue Does Security Expert meet "FIPS Compliance"  Product Line EcoStruxure Security Expert Environment Security Expert Cause Unable to locate documentation for the FIPS compliance. Need to verify before Continuum access control system is migrated to Security Expert. Resolution Security Expert Software is currently not FIPS compliant. See Transition Guide Security Expert - Continuum Access Control to Security Expert - Reference Guide for more more details on what is, and is not, supported with a Continuum Transition to Security Expert.

Issue How to estimate the disk space required to accommodate a given Security Expert installation. Product Line EcoStruxure Security Expert Environment Security Expert Microsoft SQL Server Cause The Security Expert databases will grow in size depending on the configuration and logging requirements. Therefore, estimating how much a database will grow over time should be done to determine which Microsoft Database solution and hard drive requirements. Resolution The Installation Guide does have some hardware recommendations under the System Requirements section, and these should be used as a baseline for allowing appropriate database storage. 10 controllers w/ 16 modules each - 40GB More than 10 controllers w/ any number of modules each - 100GB. The configuration database (SecurityExpert) is relatively small and will typically not grow much. The events database (SecurityExpertEvents) is what logs all events and alarms, and it will grow over time, rapidly depending on what is being logged and how often. There are many variables in play from one site to another. The space required for a standard Security Expert Database is dependent on, but not exclusive to: The amount of Inputs/Outputs/Readers you have with Log Events enabled. The amount of traffic through the site. The number of Expanders and other Records. The frequency of backups and purging of events from the SecurityExpertEvents database. As a guideline, we can broadly calculate storage requirements based on the size of each event being logged. Typically this will be 564 bytes per event. If you have 2000 Events per day, here is the calculation for how many MB will be used per day: 564 B x 2000 = 1128000 B = 1.07 MB per day If those events that are being logged are alarms as well, then this total would be doubled. Another way to calculate this is to take what a typical usage requirement would be for a site or monitor a live site over a week/month to calculate the sites' average usage and extrapolate that to fit. For example, a site with 130 doors being used 8 hours a day and with door openings and closings 10 times an hour would equate to just under 1GB a month. Please note these are very rough guesses; individual sites might be busier/quieter. Performing regular SecurityExpertEvents database backups and purges will ensure that the database size does not get too large for the installation. For instructions, see the System Backups section in the Installation Guide and AN 279 Security Expert Differential Backups.

Issue Activation of the Security Expert SSN with a new installation of the client software, software extensions (e.g. SX-VIM, SX-DOR-50) and integration licenses (e.g. SX-NVR, SX-CAM-10) need to be completed manually because there is no Interne access. Product Line EcoStruxure Security Expert Environment Licensing Cause The computer which the Security Expert client is installed on, does not have Internet access to use the 'Automatic License Update' method to activate the license. The manual method must be used to register and obtain the new license. Resolution In the Security Expert client go to About | License | information make a note of your system's SSN In the Security Expert client go to About | License | License Update and select Generate a License Request File for this System Copy the 'ICT_LicenceRequest.req' license request file produced onto a machine that has Internet access. Navigate to https://se.ict.co/license/ and enter your details on this web page. Enter the SSN for your system Upload the 'ICT_LicenceRequest.req' license request file generated previously and Submit. You should then be able to download a 'Security Expert YJWB...............O4PJ5W License.lic' file. Return to your offline Security Expert Client and go to About | License | License Update , Select Browse for your Downloaded License file Select the 'Security Expert YJWB...............O4PJ5W License.lic' file downloaded previously. Once the license update is complete shut down the client and restart the services   Support for manual activation: v4.2.194 - Manual activation is supported. v4.2.216 - Manual license activation's are no longer supported and an Internet connection is required on the Security Expert installation to be able to perform a new activation or update a license. v4.2.243 - Manual activation is supported. v4.3.x - Manual activation is supported.

Issue A previous version of the client software badged SecureStruxure is installed, and needs to be upgraded to Security Expert. Product Line EcoStruxure Security Expert Environment Security Expert SecureStruxure Cause The offer had the name changed between versions and it's not straight forward how to update the software, and databases, to the newer version. Resolution SecureStruxure can be upgraded to Security Expert by following these steps: Contact Product Support to upgrade the site license to Security Expert.. Backup the SecureStruxureOperations and SecureStruxureOperationsEvents databases via SQL Server Management Studio. Uninstall SecureStruxure. Rename the SecureStruxureOperations and SecureStruxureOperationsEvents databases to SecurityExpert and SecurityExpertEvents When you run the Security Expert installer, use the new Security Expert SSN. You will need to point Security Expert at the MS SQL database instance you were previously using for SecureStruxure (this is likely "localhost\SECURESTRUXURE"). The installation wizard should pick up the databases and upgrade them, retaining all the SecureStruxure programming. Log into Security Expert and re-license the software by going to the About | License menu option.. If you are unable to connect to the license server (no internet connection), you can use the manual method for registering a license.

Issue Require details on how to setup multiple inputs to popup the same camera window if any of them are true. Product Line EcoStruxure Security Expert Environment Security Expert Client Cause Unsure how to setup program for multiple inputs to display video from one camera when any of them are set to true Resolution 1. Under Events | Event Filters create a new Event filter 2. On the Event Types tab untick "Include All Event types" and select the Add button  3. Browse for "All Input Events", select "Input <ZONE_NAME> Opened" and click OK 4. On the Records tab select the Add button, select Device Type "Input" and your Controller, then the inputs that you want to popup this video 5. Save the Event Filter 6. Under Events | Actions create a new Action 7. Select the Type "Popup Camera Window", select the Event Filter you created in step 1, select the camera you want 8. Save the changes and test the scenario.

Warning Potential for Data Loss: The steps detailed in the resolution of this article may result in a loss of critical data if not performed properly. Before beginning these steps, make sure all important data is backed up in the event of data loss. If you are unsure or unfamiliar with any complex steps detailed in this article, please contact Product Support for assistance. Issue When adding a new Domain an error shows “Object does not exist – The domain “your Domain Name” does not exist, and the Domain is not created.   Using control panel Or using System/Domains folder Product Line EcoStruxure Building Operation Environment Building Operation Automation Server Building Operation Enterprise Server Building Operation Enterprise Central Cause A Content Type rule could be incorrectly configured Resolution Navigate to /Your Server Name/System/Content Types/Rules/ If there is a “*” in the “Container Name Pattern” of any of the rules, correct this or delete the rule.     Once completed, new domains can be added.

Issue If the AS is configured to get the time from an NTP server the customer need to know how often the AS will ask the NTP server for the time.    Product Line EcoStruxure Building Operation Environment EcoStruxure Building Operation Enterprise Central  EcoStruxure Building Operation Enterprise Server EcoStruxure Building Operation Automation Server (AS/ASB/ASP) Cause In version 1.4, the AS asked the NTP server 1 time per minute. Starting in version 1.5, this was changed so the AS is using the standard solution for the NPT protocol. Resolution When using the standard solution in the NTP protocol as the AS does starting in version 1.5, it depends on how much the AS drifts from the NTP server. The faster the AS drifts, the more frequently the time is updated.   For more information regarding Network Time, please see WebHelp article 6370 and corresponding articles. 

Issue When a local user belonging to the administrator group on an AS-P is logged in to the AS-P using Workstation the user can for example via a Link in a graphic access the system folder in the ES the AS-P is connected to.  The local user in the AS-P can even change the admin password on the ES. How can this be avoided? Product Line EcoStruxure Building Operation Environment Building Operation Automation Server Building Operation Enterprise Server Cause In EBO v3.2.1 and later versions, it is possible to restrict access of the logged-in user to only the server that they are logged into, i.e. it is possible to prevent access to the ES\Servers folder when logged directly into an AS-P that is a sub server of the ES, thus preventing access to the whole system. Resolution In the ES Control Panel open Security Settings: Mark the option "Restrict root permission to logged in server"

Warning Potential for Data Loss: The steps detailed in the resolution of this article may result in a loss of critical data if not performed properly. Before beginning these steps, make sure all important data is backed up in the event of data loss. If you are unsure or unfamiliar with any complex steps detailed in this article, please contact Product Support for assistance. Issue PCT client can't start properly with "Hardware virtualization is not enabled" error. Product Line EcoStruxure Building Operation Environment Building Operation Project Configuration Tool (PCT) (All Versions) Cause Hardware Virtualization is Disabled or not available for PCT Resolution  Install "Intel® Processor Identification Utility" then verify the status of "Intel® Virtualization Technology" from the Utility. Using the table below, you can see if your processor supports Intel® Virtualization(provided by Intel).  The above information can also be found on Intel® Virtualization Technology web page If Virtualization is disabled in BIOS then enable it from BIOS else identify other software utilizing the Virtualization and stop the application.  Use Win key or press the Windows Start button Type: cmd Select Run as Administrator  Verify command prompt window title bar is Administrator: Command Prompt Type: shutdown /r /fw/ /f  Press enter and the computer will shut down immediately forcing all applications to close (/f) and restart (/r) into firmware interface (/fw)   If the issue persists, the following article may provide the answer Knowledge Base article - PCT error Hardware-virtualization is not enabled-Please-enable.

Issue Unwanted hardware and other alarms received at Enterprise Server Product Line Satchwell BAS & Sigma, EcoStruxure Building Operation Environment EcoStruxure Building Operation Sigma Release 4_08 (Build 3_46_57) Cause Unwanted Sigma hardware and other alarms received at Enterprise Server. Resolution Navigate through the “Sigma interface”, to the controller (OSN) that the alarms need to be disabled from. Select the controller’s property (basic tab), Device monitoring can be enabled or disabled.     If you need to disable the alarms for multiple controllers, this can be done by multi selecting the required controllers, opening the property panel and change the setting there.  

Issue The BACnet Interface Contains a Yellow Exclamation Icon and when you hover over to read the tooltip it states, “Contains Unresolved BACnet Reference”. Product Line EcoStruxure Building Operation Environment EcoStruxure Building Operation Building Operation Multi-Purpose Controller Building Operation Multi-purpose VAV Building Operation Room Controller Building Operation IP-IO Cause There is a reference misconfiguration within the “Time Synchronization Recipients” under the BACnet Interface. Resolution Select and highlight the BACnet Interface then select the Time Synchronization Recipients TAB Compare the list Names with the list to the left under the IP Network Tree. In this example, we can see that MPV-9A is not a controller within my database under the IP Network_2. Highlight/Select the controller under Time Synchronization recipients and edit the details by clicking on the pencil icon. Within the Time Synchronization Recipient screen, we want to adjust this device to match the ACTUAL device located under our IP Network_2 named MP-9A_Roof. Click on the “three dots|ellipsis “to browse to the correct Recipient device identifier. In this example: Select the BACnet Interface > IP Network_2 > MPV-9A_Roof as this is the correct path for this device. At this point, we have the correct path under the Recipient device object reference. Adjust the Recipient name to match the BACnet name you configured for that device. In this example, it was set to MPV-9A_Roof. TIP: Click the BACnet button to fill in the recipient name field with the BACnet name of the device referenced in the recipient device object reference field. Click OK. If this is the only device you need to modify then you can click the SAVE icon. If you have more devices to adjust, then you will repeat the process until you're done with all the devices. You have now resolved the reference errors against the BACnet Interface.

Issue Testing Modbus device with a Modbus simulator. Product Line EcoStruxure Building Operation. Environment Building Operation Automation Server Building Operation Enterprise Server Modbus Protocol Cause The field device and Modbus registers can be tested with the Modbus simulator to ensure the device is set up correctly and communication is working. Resolution Once a device is tested with the Modbus simulator, the live Modbus device can be implemented with confidence knowing that the setup in the Server is correct.   Here you can download the Modbus Simulator    Review the following video to assist with the following: Run the ModRSim application Setup the simulator to display the values you need to test Adjust values checking that they are updated by the polling device Display the Modbus traffic and capture traffic if fault finding is needed.  

Issue Need to ensure that there are not any unresolved or invalid bindings Product Line EcoStruxure Building Operation Environment EcoStruxure Building Operation Workstation v1.5 and above Bindings Diagnostics Cause Bindings are invalid because they point to something that cannot be bound together or they are unresolved because the binding points to an object that is not in the database. Resolution From the Workstation run the Bindings Diagnostics to check for invalid or unresolved bindings.   Open the Control Panel To Check the Status of Bindings  click the option for Bindings Diagnostics.   Observe the Status to identify any invalid or unresolved bindings. Refer to the EBO Webhelp Binding Status Icons topic for more information Right-click the invalid or unresolved binding, edit the binding or view properties, and correct as appropriate.

Issue What mode must a LoyTec L-IP be configured to work with EcoStruxure Building Operation? Product Line EcoStruxure Building Operation Environment Loytec L-IP Building Operation Enterprise Server Cause The operating mode limits the capabilities of the LoyTec L-IP when used with an Enterprise Server Resolution Smart Switch Mode Ensure that the LoyTec L-IP is in Smart Switch mode. This is achieved by using the DIP switch settings for switches 1 and 2 in the ON position.     Reset Forwarding Tables Press the status button for at least 20 seconds. This will clear the forwarding group, the subnet/node forwarding, and the router domain table when used in smart switch mode. Important: If the L-IP is operated in smart switch mode and is moved from one location to another or if major changes to the configuration of the network are made, it is recommended to reset the L-IP forwarding tables Important: Wait at least 30 seconds after power-up of the L-IP before pressing the Status Button to ensure that the L-IP has booted properly!     For additional detail please reference the LoyTec L-IP user manual.

Warning Electrostatic Discharge Required: Always discharge static electricity from your person by touching metal prior to handling any hardware. Failure to do so may result in damage to devices. Issue Difficulty getting b3 controller online in order to replace a failed one Product Line EcoStruxure Building Operation Environment EcoStruxure Building Operation Continuum b3 Controller Cause A b3 controller has failed and needs to replace with the same model. Resolution Remove the failed b3 controller. In EcoStruxure Building Operation Workstation change the serial number of the failed b3 to that of the replacement b3. Install the replacement b3 and ensure the MSTP bus is connected so it autobauds to the correct rate. Then power it up. Remove the battery tab from the replacement b3 (if applicable). In Workstation right-click on the replacement b3 and select Device -> Commission. A green progress bar should appear with a success status message. In Workstation right-click on the replacement b3 and select Download all objects. A green progress bar should appear with a success status message. In Workstation right-click on the replacement b3 and select Device -> Backup to flash.

Issue Requirement to set the BACnet max master setting on a SE8000 series room controller Product Line EcoStruxure Building Operation Environment EcoStruxure Building Operation Automation Server SE8000 BACnet MS/TP Cause The BACnet max master setting is not available to be set locally on the SE8000 room controller Resolution The max master setting of the SE8000 can be changed in EcoStruxure Building Operation Workstation.  Add the SE8000 to the EcoStruxure Server Open the SE8000 device properties On the Advanced tab, change the Maximum master property (which is a read/write property) to the required value. 

Issue CX level controller was once online and now appears as offline Product Line Andover Continuum Environment Continuum Netcontroller CX ACX BCX Cause From time to time issues will be reported that controllers are offline at the IP level. Resolution Troubleshooting steps to perform:   From one of the existing sites Cyberstations perform a ping of the controller. If there are responses, verify that the response is from the controller and not another device. Verification of the response can be done via Wireshark capture if the CX appears to be responding. If there are responses to the ping, then attempt to open up the web-configuration page for second generation controllers. Verify the site’s Cyberstation is online itself. (Right-Click/edit the workstation and view the Comm Status. It will be either Online or Offline.) With CyberStation installed on technician’s laptop with the same version as the site version. Plug an Ethernet cable into the same hub the controller is plugged into. Connect to the site database with the local laptop's CyberStation and start Continuum. Check the controller in Continuum Explorer to see if it shows offline to the local laptop's CyberStation. If the controller is online to the local laptop's Cyberstation, then it is clearly a site network issue. At that point we will need to make sure all the IP address info is correct; there is no port blocking, subnet masks, gateways etc… Standard network troubleshooting. If the controller shows offline to the local laptop's CyberStation, then look at the CPU lights on the controller for activity. Watch the link light, CPU, IO bus lights if there is IO modules, etc… If those look abnormal and you have a smart phone it will be worthwhile to try and get a video of them to send into support for review. If there is no link light then try disconnecting the Ethernet cable from the NETWORK SWITCH and plug it back in to check if it brings the controller back online. If that does not bring the controller back online try disconnecting the Ethernet cable from the CONTROLLER and then immediately put it back and check if the controller comes back online. If all of the above fail then the next step will be to power cycle the controller to try and bring it back online. If communications cannot be established, contact support and open up a case for additional troubleshooting to determine if the controller needs to be sent to repair. If communications is restored and further investigation is required, please retrieve the following information and open a case with support for review. Controller error log Controller offline listview exported to CSV A Wireshark LAN capture at the controller level with peak traffic occurring Additional information may be requested including a controller core dump. This is a very intensive process. Support will supply the Core Dump Utility if needed.   Please click HERE for a copy of these instructions in PDF format.

Warning   Potential for Data Loss: The steps detailed in the resolution of this article may result in a loss of critical data if not performed properly. Before beginning these steps, make sure all important data is backed up in the event of data loss. If you are unsure or unfamiliar with any complex steps detailed in this article, please contact Product Support for assistance. Issue Confirming compatible Modbus data types available for a Sigma IC3 Modbus Product Line Satchwell Sigma Environment Sigma Release 4_05-SEB (Build 3_43_18) Sigma Release 4_05-SP2 (Build 3_42_48) Sigma Release 4_06 (Build 3_44_14) Sigma Release 4_06 SP1 (Build 3_44_16) Sigma Release 4_07 (Build 3_45_48) Sigma Release 4_07-SP1 (Build 3_45_51) Sigma Release 4_07-SP2 (Build 3_45_58) Sigma Release 4_08 (Build 3_46_57) IC3 Modbus Cause The use of 64-bit is not mentioned in documentation Resolution 16-bit registers are supported with all versions of Sigma. From Sigma release 4 05 SEB (Build 3_43_18) 32-bit registers are supported. 62-bit registers are not supported with Sigma IC3.   The ba077 Modbus 32-bit application note provides information on the engineering of 32-bit registers. https://ecoxpert.se.com/search?documentUUID=74eaf0dd-fbd9-4429-9c82-eb205aa9be07&title=BA077%20Modbus%2032%20Bit%20Values%20-%20Satchwell%20-%20Application%20Note Sigma 4.06 IC3 Modbus Firmware and Release Note https://ecoxpert.se.com/search?documentUUID=cb99b073-d9ab-400e-8e67-2f8343447768&title=Sigma%204.06%20IC3-Modbus%20Firmware%20-%20Release%20Notes Sigma IC3 Modbus 1.n.2 firmware is the latest available version https://ecoxpert.se.com/search?documentUUID=02d88785-9d13-4184-b74a-d1a0b5ce7edd&title=Sigma%20IC3%20Modbus%201.n.2%20-%20Firmware