Building Automation Knowledge Base

Issue Help with Creating Custom Reports for EcoStruxure Reports Server Product Line EcoStruxure Building Operation Environment SQL Report Builder 3.0 Cause In order to create a custom report for EcoStruxure, the user must have a basic knowledge of SQL and writing SQL SELECT Statements.  Report Builder 3.0 can walk a user through most of the process but there is a bit of a learning curve. Resolution If you are attempting to create a custom report the most difficult piece of information is determining what Tables store which information.  To get definitions of Table Rows, run the provided Database Schema report in the Web Reports browser.  This will show primary/foreign key relationships as well as give you information on what is stored in each column. Information on Extended Trend Logs is stored in the tbLoggedEntities table and the tbLogTimeValues Tables.   Additional Metering information can be found in tbMeter, tbMeteringLogFilter, tbEntityData and tbEntityRelation

Issue Performing Load Sources in the EcoStruxure ETL tool causes errors with the following headers:   There was no endpoint listening at http://localhost:8080/EcoStruxure/DataExchange that could accept the message. This is often caused by an incorrect address or SOAP action. See InnerException, if present, for more details. The HTTP request is unauthorized with client authentication scheme 'Digest'. The authentication header received from the server was 'Digest realm="ews@SxWBM",qop="auth",nonce="AEEE5A9347E49ECADC753B5AA17EECE0",OPAQUE="5B4718"'. Product Line EcoStruxure Building Operation Environment EcoStruxure Energy Expert (formally Power Manager) Enterprise Server Automation Server Cause The EBO EWS Extract Task settings are incorrect in regards to the EcoStruxure ES or AS that it is trying to access.    There was no endpoint listening at... This error is due to the use of the incorrect port numbers in the EWS Web Service URL.   The HTTP request is unauthorized with client authentication scheme 'Digest'... This error is due to the use of the incorrect admin Username and/or Password.  Resolution The settings of EBO EWS Extract Task need to be verified and corrected.    Click on the Tasks tab in the ETL tool and select the "EWS Extract Task". The extract task settings will be displayed on the right side of the screen.                                                                               Verify that the port number in Web Service URL address corresponds to the port number being used by the ES or AS  Verify that a valid Username and Password has been entered into the EWS Web Service User Name and Web Service Password fields. 

Issue When evaluating Inet Transition sites, a common error seen when uploading I/NET controllers under the  Inet Interface is an upload failure.  The Background Status and trace log will contain a changeset error as shown below: UploadDevice failed to process changeset on link: 93 station: 10, type index: 17 cannot continue upload Product Line EcoStruxure Building Operation, TAC INET Environment Ecostruxure Building Operation Inet Interface  Cause Understanding the ChangeSet Indices used by the developers will help pinpoint where the issue is originating from.  The message typically isolates the Link and Station but does not identify where within this controller the problem may lie.  Resolution The current list of ChangeSet Indices are listed below and attached Changeset_index.txt Index Affected 9 DCU passwords, States, Eng units, Conversion Coeff., Controls, Holidays, DDC history, Override access, Sunrise/Sunset 11 Points 15 Action message, DCU DDC, Event sequences 17 Calculation 19 Event extension 21 Extension general (can be one of: Runtime, Consumption, or Alarm inhibit - depends on DCU type) 23 ATS 25 ATC 27 Extension application (can be one of: Demand, ORB, ORBEM, UC, LZ, LC, Elevator - depends on DCU type) 29 Trend 31 Lookup table (raw data) 33 Demand load (raw data) 35 MCU 37 MR DDC 39 AIC sequence (raw data) 43 LCD page, Istat param, IAS (raw data) 45 Access control (raw data) Note: "raw data" indicates user cannot manipulate in EBO but it is uploaded and save in raw form to allow for a download/restore Working with the example shown in the Issue, the message indicates a changeset value of Index: 17.  Using the attached list, Index 17 indicates that the issue is within the Calculation Editor. Using the SAV file from the site and working offline within I/NET open this SAV file and check each of the editors, in this case, calculations. In most cases, it will either be an invalid character or invalid point address - which will be shown as 'blank' as seen below: Correcting this and updating the SAV file to the controller (Station Restore) will typically correct this issue. If the same error persists then please provide an Export of the Inet Interface and the SAV files of the controllers having this problem through your local support channel.   

Warning Potential for Data Loss: The steps detailed in the resolution of this article may result in a loss of critical data if not performed properly. Before beginning these steps, make sure all important data is backed up in the event of data loss. If you are unsure or unfamiliar with any complex steps detailed in this article, please contact Product Support for assistance. Issue How to bring a BACnet controller online after restoring a backup Product Line EcoStruxure Building Operation Environment EcoStruxure Building Operation Cause Customers may want to take a backup from a site and use it on other setups. If there would be any BACnet controller under the Backup, they may need to know the process of hosting the BACnet controllers under the restored backup on the physical BACnet controllers.   Resolution This video will demonstrate how to bring a BACnet controller online after restoring a backup. NOTE After matching up the Device ID of the BACnet controller under the restored server and the Object ID of the physical BACnet controller, if the hosting status shows “Not hosted”, users need to perform a "Repair Hosting". Please refer to Repair Hosting a BACnet/IP controller 

Issue Configuring Security Expert Readers Product Line EcoStruxure Security Expert Environment Security Expert Smart Card Readers Cause Security Expert Smart Card Readers have options such as Mifare Reading Mode, LED colors, etc. that can be configured. How the readers are configured will depend on the reader's firmware. Resolution The method used to configure a Security Expert Smart Card Reader depends on the firmware version it is using. There is no way to visually determine the firmware version. To identify what firmware the reader was shipped with from the factory refer to Knowledge Base article Identifying Security Expert Smart Card Readers Firmware. 1. Smart Card Readers with firmware below build 200 - (I.e. 1.04.64) These are older readers which were configured with a serial terminal program by connecting to the reader using a USB-RS485 converter. Please refer to the 'Installer Programming' section of the attached Smart Card Reader Installation Manual - Feb 2017. This has been replaced by a newer version of the manual on Exchange which no longer includes this information. 2. Smart Card Readers with firmware build 200 or above (I.e. 1.04.229) These newer readers do not have a serial interface and will require a configuration card to change reader options. The configuration card (SX-ISO-CONFIG) is ordered from Schneider Electric, see the Security Expert Credentials Order Form for details.

Issue How can the firmware version of Security Expert Smart Card Readers be determined. Product Line EcoStruxure Security Expert Environment Security Expert Smart Card Readers Cause It is not possible to easily identify the firmware which a reader has been shipped with. Serial Numbers are not sequential and cannot be used as general guide. Resolution To find out a reader's original shipped firmware version raise a case with Product Support including the Reader's Serial Number and they will be able to check with manufacturing to determine which firmware version was loaded at the time.

Issue If more than 3 Operators are created in Security Expert, the License page of the Thick Client will show more Licenses in use than the maximum three (3) clients provided with the standard SX-SRVR License. To see what the site is using, select About > License and scroll down to the Feature: Web Operators. As shown below, there are four web operators active out of the three (4/3) allowed. Product Line EcoStruxure Security Expert Environment Licensing Cause A Web Operator is defined as any Operator who can log onto the Security Expert Server using a browser.                           In the example shown below there are four Operators: admin 2nd Operator 3rd Operator 4th Operator The system allows each to log in successfully: The License option SX-WEB-OPR enables 'x' number of browser connections depending on customer needs and should effectively ensure that the correct number of Operators are purchased. However, the feature is currently in development and is not yet enforcing limits on the number of web operator connections.  This allows the number of connections to exceed the maximum limit (I.e.4/3) for the time being. Resolution Note: The Operator does NOT even need to be logged on for the count to register 4/3, the fact that 4 operators have been created is enough. The restriction of operators via Web Client could be enabled/enforced at any time in the next release of the software, so it is strongly advised to purchase the correct number of Licenses required at the time of installation, to prevent a loss of user connectivity going forward.

Issue Request for database schemas for SecurityExpert and SecurityExpertEvents databases. Product Line EcoStruxure Security Expert Environment Security Expert Client, Security ExpertServer Cause Various entities request database schemas for SecurityExpert and SecurityExpertEvents databases for reasons like access to the stored data for third party reporting packages. Resolution Schneider Electric does not publish or provide the Security Expert database schemas. Database schemas change over time with new revisions which may result in broken tables. Anything required should be available using the Security Expert SOAP Web Service Software Development Kit (SX-SOAP-SDK). The SDK will allow the extracting, transforming and storing of data into a separate database. Third-party applications/tools can then report on that data stored in a separate database. This allows the integrity of the Security Expert databases to remain intact. The Security Expert SOAP SDK can be purchased as part number SX-SOAP-SDK.

Issue Does Security Expert meet "FIPS Compliance"  Product Line EcoStruxure Security Expert Environment Security Expert Cause Unable to locate documentation for the FIPS compliance. Need to verify before Continuum access control system is migrated to Security Expert. Resolution Security Expert Software is currently not FIPS compliant. See Transition Guide Security Expert - Continuum Access Control to Security Expert - Reference Guide for more more details on what is, and is not, supported with a Continuum Transition to Security Expert.

Issue How to estimate the disk space required to accommodate a given Security Expert installation. Product Line EcoStruxure Security Expert Environment Security Expert Microsoft SQL Server Cause The Security Expert databases will grow in size depending on the configuration and logging requirements. Therefore, estimating how much a database will grow over time should be done to determine which Microsoft Database solution and hard drive requirements. Resolution The Installation Guide does have some hardware recommendations under the System Requirements section, and these should be used as a baseline for allowing appropriate database storage. 10 controllers w/ 16 modules each - 40GB More than 10 controllers w/ any number of modules each - 100GB. The configuration database (SecurityExpert) is relatively small and will typically not grow much. The events database (SecurityExpertEvents) is what logs all events and alarms, and it will grow over time, rapidly depending on what is being logged and how often. There are many variables in play from one site to another. The space required for a standard Security Expert Database is dependent on, but not exclusive to: The amount of Inputs/Outputs/Readers you have with Log Events enabled. The amount of traffic through the site. The number of Expanders and other Records. The frequency of backups and purging of events from the SecurityExpertEvents database. As a guideline, we can broadly calculate storage requirements based on the size of each event being logged. Typically this will be 564 bytes per event. If you have 2000 Events per day, here is the calculation for how many MB will be used per day: 564 B x 2000 = 1128000 B = 1.07 MB per day If those events that are being logged are alarms as well, then this total would be doubled. Another way to calculate this is to take what a typical usage requirement would be for a site or monitor a live site over a week/month to calculate the sites' average usage and extrapolate that to fit. For example, a site with 130 doors being used 8 hours a day and with door openings and closings 10 times an hour would equate to just under 1GB a month. Please note these are very rough guesses; individual sites might be busier/quieter. Performing regular SecurityExpertEvents database backups and purges will ensure that the database size does not get too large for the installation. For instructions, see the System Backups section in the Installation Guide and AN 279 Security Expert Differential Backups.

Issue Activation of the Security Expert SSN with a new installation of the client software, software extensions (e.g. SX-VIM, SX-DOR-50) and integration licenses (e.g. SX-NVR, SX-CAM-10) need to be completed manually because there is no Interne access. Product Line EcoStruxure Security Expert Environment Licensing Cause The computer which the Security Expert client is installed on, does not have Internet access to use the 'Automatic License Update' method to activate the license. The manual method must be used to register and obtain the new license. Resolution In the Security Expert client go to About | License | information make a note of your system's SSN In the Security Expert client go to About | License | License Update and select Generate a License Request File for this System Copy the 'ICT_LicenceRequest.req' license request file produced onto a machine that has Internet access. Navigate to https://se.ict.co/license/ and enter your details on this web page. Enter the SSN for your system Upload the 'ICT_LicenceRequest.req' license request file generated previously and Submit. You should then be able to download a 'Security Expert YJWB...............O4PJ5W License.lic' file. Return to your offline Security Expert Client and go to About | License | License Update , Select Browse for your Downloaded License file Select the 'Security Expert YJWB...............O4PJ5W License.lic' file downloaded previously. Once the license update is complete shut down the client and restart the services   Support for manual activation: v4.2.194 - Manual activation is supported. v4.2.216 - Manual license activation's are no longer supported and an Internet connection is required on the Security Expert installation to be able to perform a new activation or update a license. v4.2.243 - Manual activation is supported. v4.3.x - Manual activation is supported.

Issue A previous version of the client software badged SecureStruxure is installed, and needs to be upgraded to Security Expert. Product Line EcoStruxure Security Expert Environment Security Expert SecureStruxure Cause The offer had the name changed between versions and it's not straight forward how to update the software, and databases, to the newer version. Resolution SecureStruxure can be upgraded to Security Expert by following these steps: Contact Product Support to upgrade the site license to Security Expert.. Backup the SecureStruxureOperations and SecureStruxureOperationsEvents databases via SQL Server Management Studio. Uninstall SecureStruxure. Rename the SecureStruxureOperations and SecureStruxureOperationsEvents databases to SecurityExpert and SecurityExpertEvents When you run the Security Expert installer, use the new Security Expert SSN. You will need to point Security Expert at the MS SQL database instance you were previously using for SecureStruxure (this is likely "localhost\SECURESTRUXURE"). The installation wizard should pick up the databases and upgrade them, retaining all the SecureStruxure programming. Log into Security Expert and re-license the software by going to the About | License menu option.. If you are unable to connect to the license server (no internet connection), you can use the manual method for registering a license.

Issue Require details on how to setup multiple inputs to popup the same camera window if any of them are true. Product Line EcoStruxure Security Expert Environment Security Expert Client Cause Unsure how to setup program for multiple inputs to display video from one camera when any of them are set to true Resolution 1. Under Events | Event Filters create a new Event filter 2. On the Event Types tab untick "Include All Event types" and select the Add button  3. Browse for "All Input Events", select "Input <ZONE_NAME> Opened" and click OK 4. On the Records tab select the Add button, select Device Type "Input" and your Controller, then the inputs that you want to popup this video 5. Save the Event Filter 6. Under Events | Actions create a new Action 7. Select the Type "Popup Camera Window", select the Event Filter you created in step 1, select the camera you want 8. Save the changes and test the scenario.

Warning Potential for Data Loss: The steps detailed in the resolution of this article may result in a loss of critical data if not performed properly. Before beginning these steps, make sure all important data is backed up in the event of data loss. If you are unsure or unfamiliar with any complex steps detailed in this article, please contact Product Support for assistance. Issue When adding a new Domain an error shows “Object does not exist – The domain “your Domain Name” does not exist, and the Domain is not created.   Using control panel Or using System/Domains folder Product Line EcoStruxure Building Operation Environment Building Operation Automation Server Building Operation Enterprise Server Building Operation Enterprise Central Cause A Content Type rule could be incorrectly configured Resolution Navigate to /Your Server Name/System/Content Types/Rules/ If there is a “*” in the “Container Name Pattern” of any of the rules, correct this or delete the rule.     Once completed, new domains can be added.

Issue If the AS is configured to get the time from an NTP server the customer need to know how often the AS will ask the NTP server for the time.    Product Line EcoStruxure Building Operation Environment EcoStruxure Building Operation Enterprise Central  EcoStruxure Building Operation Enterprise Server EcoStruxure Building Operation Automation Server (AS/ASB/ASP) Cause In version 1.4, the AS asked the NTP server 1 time per minute. Starting in version 1.5, this was changed so the AS is using the standard solution for the NPT protocol. Resolution When using the standard solution in the NTP protocol as the AS does starting in version 1.5, it depends on how much the AS drifts from the NTP server. The faster the AS drifts, the more frequently the time is updated.   For more information regarding Network Time, please see WebHelp article 6370 and corresponding articles. 

Issue When a local user belonging to the administrator group on an AS-P is logged in to the AS-P using Workstation the user can for example via a Link in a graphic access the system folder in the ES the AS-P is connected to.  The local user in the AS-P can even change the admin password on the ES. How can this be avoided? Product Line EcoStruxure Building Operation Environment Building Operation Automation Server Building Operation Enterprise Server Cause In EBO v3.2.1 and later versions, it is possible to restrict access of the logged-in user to only the server that they are logged into, i.e. it is possible to prevent access to the ES\Servers folder when logged directly into an AS-P that is a sub server of the ES, thus preventing access to the whole system. Resolution In the ES Control Panel open Security Settings: Mark the option "Restrict root permission to logged in server"

Warning Potential for Data Loss: The steps detailed in the resolution of this article may result in a loss of critical data if not performed properly. Before beginning these steps, make sure all important data is backed up in the event of data loss. If you are unsure or unfamiliar with any complex steps detailed in this article, please contact Product Support for assistance. Issue PCT client can't start properly with "Hardware virtualization is not enabled" error. Product Line EcoStruxure Building Operation Environment Building Operation Project Configuration Tool (PCT) (All Versions) Cause Hardware Virtualization is Disabled or not available for PCT Resolution  Install "Intel® Processor Identification Utility" then verify the status of "Intel® Virtualization Technology" from the Utility. Using the table below, you can see if your processor supports Intel® Virtualization(provided by Intel).  The above information can also be found on Intel® Virtualization Technology web page If Virtualization is disabled in BIOS then enable it from BIOS else identify other software utilizing the Virtualization and stop the application.  Use Win key or press the Windows Start button Type: cmd Select Run as Administrator  Verify command prompt window title bar is Administrator: Command Prompt Type: shutdown /r /fw/ /f  Press enter and the computer will shut down immediately forcing all applications to close (/f) and restart (/r) into firmware interface (/fw)   If the issue persists, the following article may provide the answer Knowledge Base article - PCT error Hardware-virtualization is not enabled-Please-enable.

Issue Unwanted hardware and other alarms received at Enterprise Server Product Line Satchwell BAS & Sigma, EcoStruxure Building Operation Environment EcoStruxure Building Operation Sigma Release 4_08 (Build 3_46_57) Cause Unwanted Sigma hardware and other alarms received at Enterprise Server. Resolution Navigate through the “Sigma interface”, to the controller (OSN) that the alarms need to be disabled from. Select the controller’s property (basic tab), Device monitoring can be enabled or disabled.     If you need to disable the alarms for multiple controllers, this can be done by multi selecting the required controllers, opening the property panel and change the setting there.  

Issue The BACnet Interface Contains a Yellow Exclamation Icon and when you hover over to read the tooltip it states, “Contains Unresolved BACnet Reference”. Product Line EcoStruxure Building Operation Environment EcoStruxure Building Operation Building Operation Multi-Purpose Controller Building Operation Multi-purpose VAV Building Operation Room Controller Building Operation IP-IO Cause There is a reference misconfiguration within the “Time Synchronization Recipients” under the BACnet Interface. Resolution Select and highlight the BACnet Interface then select the Time Synchronization Recipients TAB Compare the list Names with the list to the left under the IP Network Tree. In this example, we can see that MPV-9A is not a controller within my database under the IP Network_2. Highlight/Select the controller under Time Synchronization recipients and edit the details by clicking on the pencil icon. Within the Time Synchronization Recipient screen, we want to adjust this device to match the ACTUAL device located under our IP Network_2 named MP-9A_Roof. Click on the “three dots|ellipsis “to browse to the correct Recipient device identifier. In this example: Select the BACnet Interface > IP Network_2 > MPV-9A_Roof as this is the correct path for this device. At this point, we have the correct path under the Recipient device object reference. Adjust the Recipient name to match the BACnet name you configured for that device. In this example, it was set to MPV-9A_Roof. TIP: Click the BACnet button to fill in the recipient name field with the BACnet name of the device referenced in the recipient device object reference field. Click OK. If this is the only device you need to modify then you can click the SAVE icon. If you have more devices to adjust, then you will repeat the process until you're done with all the devices. You have now resolved the reference errors against the BACnet Interface.

Issue Testing Modbus device with a Modbus simulator. Product Line EcoStruxure Building Operation. Environment Building Operation Automation Server Building Operation Enterprise Server Modbus Protocol Cause The field device and Modbus registers can be tested with the Modbus simulator to ensure the device is set up correctly and communication is working. Resolution Once a device is tested with the Modbus simulator, the live Modbus device can be implemented with confidence knowing that the setup in the Server is correct.   Here you can download the Modbus Simulator    Review the following video to assist with the following: Run the ModRSim application Setup the simulator to display the values you need to test Adjust values checking that they are updated by the polling device Display the Modbus traffic and capture traffic if fault finding is needed.