Issue DSS error occurs while importing users into Security Expert Product Line EcoStruxure Security Expert Environment Continuum Transition Tool I/NET Transition Tool Data Sync Service Warning Potential for Data Loss: The steps detailed in the resolution of this article may result in a loss of critical data if not performed properly. Before beginning these steps, make sure all important data is backed up in the event of data loss. If you are unsure or unfamiliar with any complex steps detailed in this article, please contact Product Support for assistance. Cause The Data Sync Service settings file contains a mapping for a credential named “User ID” but cannot find the User ID credential type. The User ID credential was not created before starting the Data Sync Service.  It is important to determine if the site is using user PINs and whether they are all unique before selecting the following option in the transition tools.   By default, SX does not allow duplicate PINs. A unique PIN is a requirement for signing into intrusion keypads with only a PIN number. Resolution Option 1: The site does not have user PINs in the legacy database or PINs are unique. Stop the data sync and transition services Uncheck the 'Allow PIN Duplication' option Click the 'Create Data Sync Service Settings File' button below   Delete the export history of Users   Start both Data Sync and Continuum Database Transitions services. (All users will get exported again) Option 2: The site uses PIN numbers and there may be duplicates. Keep the “Allow PIN Duplication” option checked In Security Expert, Go to Global | Sites| Site Defaults Tab Scroll down and expand the Site security enhancement section Enable the top 3 checkboxes (Require dual credential...; Auto Populate User ID... and Allow PIN duplication)   Click Save.

Issue Creating a report that shows which visitor is being visited Product Line EcoStruxure Security Expert Environment Security Expert Controller Warning Potential for Data Loss: The steps detailed in the resolution of this article may result in a loss of critical data if not performed properly. Before beginning these steps, make sure all important data is backed up in the event of data loss. If you are unsure or unfamiliar with any complex steps detailed in this article, please contact Product Support for assistance. Cause The standard visitor report does not record who at the site is being visited Resolution This video demonstrates how to create a visitor report that includes which users have been visited in the Security Expert System.   The advanced Visitor Report is created in 4 main steps: 1. Create an Access level for each user who receives visitors 2. Assign this Access level to the user's visitor tab 3. Create (or use existing) User report with the new "access level" column selected 4. Configure and run the user report   Creating Access levels 1. In Security Expert client, go to Users|Users a-Select a user who receives visitors (ex: John Doe) b-Go to the Visitor tab c-Check the "User supports visitors" box d-Click the ellipsis (3 dots) to open the Access Level window e-Click Add button f-Name it '[User]'s Visitors' (ex: John Doe's Visitors) g-In the configuration section, configure the access level required for the user's visitors h-Save and repeat for each user who normally receives visitors. Close the window and go back to the User table.   Assign Access level 2. Select "John Doe's Visitors" for Visitor access level -Save changes   Create User Report 3. Go to Report|Setup|User -Create (or use existing) report for visitors -Go to the Columns tab -Click Add and choose "Access Level" User Field -Save report setup   Configure User Report 4. Return to the general tab and expand the "Default user report filter" section. Press "edit in report view" and edit your desired layout -Save report view   The next time you run the visitor report it will print who's being visited in the "Access level 1" column

Issue How to configure the relative path permissions Product Line EcoStruxure Building Operation Environment Building Operation Enterprise Server Warning Potential for Data Loss: The steps detailed in the resolution of this article may result in a loss of critical data if not performed properly. Before beginning these steps, make sure all important data is backed up in the event of data loss. If you are unsure or unfamiliar with any complex steps detailed in this article, please contact Product Support for assistance. Cause Relative path permissions help configure the path permission for multiple modules (i.e.100 AS-Ps) or many different folders Resolution Here's how to give 'read-only' analog value permissions for 2 separate folders: 1. Go to Relative path permissions. Select the type of permissions desired (Full permissions for Analog Value/ NO permissions for Digital Value) 2. Go to the Local Account Group and select the Permissions tab. Under Path Permissions, add (+) the created path permissions to the desired folders. 'Folder' and 'Folder 2' are selected to have the same path permissions. Save and apply configuration.   3. When viewing the system tree, both 'Folder' and 'Folder 2' have read permission for Analog Value

Issue Create a report of all expired cards Product Line EcoStruxure Security Expert Environment Security Expert Controller Warning Potential for Data Loss: The steps detailed in the resolution of this article may result in a loss of critical data if not performed properly. Before beginning these steps, make sure all important data is backed up in the event of data loss. If you are unsure or unfamiliar with any complex steps detailed in this article, please contact Product Support for assistance. Cause A custom report and its configuration are needed to find all expired cards at the site Resolution This video demonstrates how to create and configure a report to find all expired cards in a system   Create a User Report: 1. In Security Expert Client, go to Reports|Setup|User and Add a new (or use an existing) report. 2. Configure the desired Report Type and Sorting 3. Go to the Columns tab, click the Add button and select Columns.  Make sure to have: -Expiration date of badge AND/OR Expiry date 4. Save your report   Please note: The "Expiration date of badge" column pulls the date from Users|Users|Extended Tab|Expiration date of badge. The "Expiry date" column pulls the date from Users|Users|General Tab|User expiry date/time section's End date.   Customize the User Report's layout: 1. Go to Reports|Setup|User| General Tab| Default user report filter and click the "Edit in report view" button 2. Right-click "Expiration date of badge" (or "Expiry date") column and select the Filter Editor 3. Change the "And" condition (in red) to "Or" 4. Change Equals to DateTime Operators: Is Yesterday 5. Click "+" sign in green circle to a line and repeat changes 5 more times for the following: - Is Earlier This Week - Is Last Week - Is Earlier this Month - Is Earlier This Year - Is Prior This Year 6. Click Save Report Layout

Issue Continuum cardholders with PINs that start with "0" (zero) are not importing into Security Expert using Data Sync Tool Product Line EcoStruxure Security Expert Environment Security Expert Continuum Transition Warning Potential for Data Loss: The steps detailed in the resolution of this article may result in a loss of critical data if not performed properly. Before beginning these steps, make sure all important data is backed up in the event of data loss. If you are unsure or unfamiliar with any complex steps detailed in this article, please contact Product Support for assistance. Cause Due to the database's configuration, Any PIN in Continuum starting with a "0" (zero) will be truncated. When DSS runs, the personnel (cardholders) with truncated PINs will be rejected by the PIN length restriction and sent to the error folder. Example: If you have a Continuum site with four-digit PINs and a PIN is entered into Continuum as 0123, will be truncated to 123 in Continuum (Continuum ignores the zero at the reader keypad as well). If you have SX configured for a 4-digit PIN length. This cardholder will not import. Resolution Option 1: Identify the truncated PINs in the Continuum database by running a query and have those users' PINs updated before running CTT and DSS. This should be done as part of your system cleanup before transitioning. Option 2: If you have a minimum PIN length configured in Security Expert, Stop DSS if running. Go to Global|Sites|Site Defaults tab and scroll to Site security enhancements. Set minimum PIN length to "0". Save changes. Start DSS. You will still have to correct any PIN that are less than the site minimum before enabling this feature again.       Note: This option should only be chosen for a one-time sync. If you are running a continuous/lengthy transition, you should use Option 1. Otherwise, you will run into this problem again.

Issue If SOAP is already enabled, what functionality is added with SX SDK Enabled? Product Line Security Expert Expert Environment Security Expert Controller Security Expert SOAP Web Service Software Development Kit (SX-SOAP-SDK) Warning Potential for Data Loss: The steps detailed in the resolution of this article may result in a loss of critical data if not performed properly. Before beginning these steps, make sure all important data is backed up in the event of data loss. If you are unsure or unfamiliar with any complex steps detailed in this article, please contact Product Support for assistance. Cause The SDK license allows you to develop and deploy new and custom third-party integrations Resolution SOAP itself is included with Security Expert. You can use first-party apps like web client(s) or existing integrations. If you are building your interface or integration (third-party apps), then the SDK license is required. There is no change in the product itself. The SDK license includes all the development tools necessary (API documentation and sample codes) to develop a custom interface and build custom integration to the Security Expert Server

Issue If you lose access to your comms expander or need to reset all of the settings how do you default the module? Product Line Security Expert Expert Environment Security Expert SP-MNR2 Firmware 1.0.27 (and higher) Warning Hazard of Electric Shock: Remove all power from all devices before removing any covers or doors of the system. Disconnect power at the device and at the power source. Electrostatic Discharge Required: Always discharge static electricity from your person by touching metal prior to handling any hardware. Failure to do so may result in damage to devices.   Cause A physical link is needed to default the module Resolution These are the settings that are resets Password to admin Repeater Mode to RS-485 mode UDP IP/Host to 192.168.1.2   1. Link the N+ N- NA and NB connections between all three COM ports 2. Cycle power to the device   Please note: this does not reset the IP address, so you may need to default the IP address separately. 1. Unlink all COM3 terminals and leave COM 1 and 2 linked 2. Cycle power and connect to the built-in web interface at 192.168.111.222 3. Configure IP address as desired 

Issue SP-C has a valid gateway specified and it's not receiving communications Product Line EcoStruxure Security Expert Environment Security Expert Controller firmware .1248 (or higher) Security Expert 4.0.128 (or higher) Security Expert Controller w/ USB port 2.08.582 (or higher) SX-ELV-HLI-TK license to enable the integration USB to Ethernet adaptor dongle TKE Controller (American) v2r0 (only supported version) Warning Potential for Data Loss: The steps detailed in the resolution of this article may result in a loss of critical data if not performed properly. Before beginning these steps, make sure all important data is backed up in the event of data loss. If you are unsure or unfamiliar with any complex steps detailed in this article, please contact Product Support for assistance. Cause It is a known issue. SP-C sends a heartbeat message to TKE but it is not being sent/received as a broadcast message. The controller still sends a heartbeat message to TKE but it is not sending it as a broadcast message with a destination of FF:FF:FF:FF:FF:FF. The gateway being valid causes it to send a Unicast message to the gateway itself (eg router) which does not pass it on to the rest of the network. (This is a known issue and has been logged with engineers). Resolution The workaround is to enable the USB Eth NIC on the SP-C and use: - The onboard NIC to connect to the Security Expert Server that requires a valid gateway to be set - The USB to ethernet adaptor (USB NIC) to connect to the TKE Network where we would set any gateway to avoid this bug Note: The USB NIC can only be configured when using OTIS elevator HLI type. The USB NIC hardcodes the required OTIS IP info to the Onboard NIC for connection to Security Expert. To enable Web UI: 1. In Security Expert, Go to Sites|Controllers|Configuration Tab. 2. Scroll down and expand the Elevator HLI section. Set Elevator HLI type to choose OTIS 3. Return to the General Tab, Scroll down and expand the Commands section and enter OTISUseUSBForMainComms = true 4. Save changes and wait for the programming to be downloaded. 5. Power cycle the SP-C. 6. Go to SP-C Web UI. The USB Eth adaptor will have the original IP. Configure both IP adresses 7. Once The NICs are configured, change the Elevator HLI type back to Thyssen Krupp, choose Cable Network type 8. Click Save and restart the SP-C.

Issue The list of visitors has become very large on the VMS front page Product Line EcoStruxure Security Expert Environment Security Expert Controller Warning Potential for Data Loss: The steps detailed in the resolution of this article may result in a loss of critical data if not performed properly. Before beginning these steps, make sure all important data is backed up in the event of data loss. If you are unsure or unfamiliar with any complex steps detailed in this article, please contact Product Support for assistance. Cause By default, visitor users are not deleted automatically from the system Resolution 1. In The Security Expert client, go to Visitor | Template | General Tab. Select the template you want to edit. 2. Scroll down and expand the Configuration section. In the Checkout mode, select 'delete user'. 3. Click Save.

Issue In some cases, the event and trend database can grow really big, although not all the space in the files is used. In extreme cases, there is more free space than used space and it is quicker to create a separate file. Product Line EcoStruxure Building Operation Environment SQlite Building Operation Enterprise Server Building Operation Enterprise Central Warning Potential for Data Loss: The steps detailed in the resolution of this article may result in a loss of critical data if not performed properly. Before beginning these steps, make sure all important data is backed up in the event of data loss. If you are unsure or unfamiliar with any complex steps detailed in this article, please contact Product Support for assistance. Cause Frequent inserts, updates, and deletes can cause the database file to become fragmented - where data for a single table or index is scattered around the database file. Running VACUUM ensures that each table and index is largely stored contiguously within the database file. In some cases, VACUUM may also reduce the number of partially filled pages in the database, reducing the size of the database file further. Read further information here: https://www.sqlite.org/lang_vacuum.html Resolution Stop the Enterprise Server or Enterprise Central. Open SQLiteStudio (link to download) Select "Databases" --> "Add database" Find the event.db or trend.db file from the "historical" folder of the EBO database folder. Use this article to locate for your installation - Clean db for Enterprise Server or Enterprise Central On the added database, right-click and select Connect to the database In the query tab, paste the following command: VACUUM main INTO 'C:\ProgramData\Schneider Electric EcoStruxure\Building Operation 6.0\Enterprise Server\db\Historical\event2.db'; Update the path to match your installation. One can SHIFT-RIGHT-CLICK the event.db or trend.db and select Copy as Path, then select everything inside the single quotes and paste. The paste will include double quotes, so delete those and leave the single quotes Update the database name to ensure it is unique. Click the blue play button above the Query tab. Depending on the size and amount of free space, this can take seconds to days to complete. One can monitor the progress in Windows Explorer by seeing the Size and Date Modified field update. Append .old to the end of the original file and rename the new file, event.db or trend.db, so it replaces the original. Start the Enterprise Server or Enterprise Central.

Issue In some cases, the event and trend databases can grow really big, although not all the space in the files is used. Therefore, one needs a way to verify that vacuuming the database will help. Product Line EcoStruxure Building Operation Environment SQLite Building Operation Enterprise Server Building Operation Enterprise Central Warning Potential for Data Loss: The steps detailed in the resolution of this article may result in a loss of critical data if not performed properly. Before beginning these steps, make sure all important data is backed up in the event of data loss. If you are unsure or unfamiliar with any complex steps detailed in this article, please contact Product Support for assistance. Cause Frequent inserts, updates, and deletes can cause the database file to become fragmented - where data for a single table or index is scattered around the database file. Running VACUUM ensures that each table and index is largely stored contiguously within the database file. In some cases, VACUUM may also reduce the number of partially filled pages in the database, reducing the size of the database file further. Read further information here: https://www.sqlite.org/lang_vacuum.html Definitions are documented here: https://www.sqlite.org/pragma.html  PRAGMA schema.freelist_count; Returns the number of unused pages in the database file. PRAGMA schema.page_count; Returns the total number of pages in the database file. PRAGMA schema.page_size; Returns the page size in bytes (B), which must be a power of two between 512 and 65536. Resolution Stop the Enterprise Server or Enterprise Central. Open SQLiteStudio (link to download) Select "Databases" --> "Add database" Find the event.db or trend.db file from the "historical" folder of the EBO database folder. Use this article to locate for your installation - Clean db for Enterprise Server or Enterprise Central On the added database, right-click and select Connect to the database In the query tab, paste the following command: SELECT (SELECT freelist_count FROM pragma_freelist_count()) AS FreeList_Count, (SELECT page_count FROM pragma_page_count()) AS Page_Count, ((SELECT page_count FROM pragma_page_count()) - (SELECT freelist_count FROM pragma_freelist_count())) AS Used_Page_Count, ROUND(CAST((CAST((SELECT freelist_count FROM pragma_freelist_count()) AS REAL) / CAST((SELECT page_count FROM pragma_page_count()) AS REAL)) * 100 AS NUMERIC),2) AS Percent_Free, (SELECT page_size FROM pragma_page_size()) AS Page_Size_B, ROUND(CAST(((SELECT freelist_count FROM pragma_freelist_count()) * (SELECT page_size FROM pragma_page_size())) / (1024.0 * 1024.0) AS NUMERIC),3) AS Estimated_Space_MB; Click the blue play button above the Query tab.  Review the Percent_Free and Estimated_Space_MB, which will be returned at a minimum, to decide if you want to perform the 'vacuum' command. The vacuum process is slow, as it was designed to operate in the background. Shrink the SQLite event and trend databases. If the Percent_Free is above 80, this is the better option: Shrink the SQLite event and trends databases (Option 2) by creating a new file.

Issue During the installation of PCT 2 and 'Starting VM pct' step, one encounters the error: "Error: System.InvalidOperationException: Failed to run: Start-Vm -Name pct". Open Hyper-V Manager and confirm the 'pct' VM was created. Manually trying to start produces this error: Product Line EcoStruxure Building Operation Environment Project Configuration Tool 2.0 Warning Potential for Data Loss: The steps detailed in the resolution of this article may result in a loss of critical data if not performed properly. Before beginning these steps, make sure all important data is backed up in the event of data loss. If you are unsure or unfamiliar with any complex steps detailed in this article, please contact Product Support for assistance. Cause Hyper-V is not set to start on boot automatically. Resolution DO NOT perform these instructions if PCT 1 is installed on the same OS. Contact Product Support for assistance. Launch Command Prompt as Administrator. Type: bcdedit /enum​  Ensure 'Hypervisorlaunchtype' is not 'Off' and set to 'Auto' by running the following command: bcdedit /set hypervisorlaunchtype auto​ Reboot the PC Rerun PCT 2 installer

Issue When viewing License Information, the Activated count still shows 0 for all features. Product Line EcoStruxure Building Operation Environment Building Operation License Administrator Building Operation License Server Warning Potential for Data Loss: The steps detailed in the resolution of this article may result in a loss of critical data if not performed properly. Before beginning these steps, make sure all important data is backed up in the event of data loss. If you are unsure or unfamiliar with any complex steps detailed in this article, please contact Product Support for assistance. Cause There are multiple causes for this, as we are aware: Running Demo license License Server not running / uninstalled.  It is possible to activate licenses and then uninstall the License Server, and licenses will still be active and available to EBO components.   Firewall setting Recently, we have located an issue where multiple paths exist for the License Server in the Windows Registry. The specifics of how this occurs is still unknown, but it has been seen on a few installations.   Resolution Before starting, remove the demo license and restart the license server.  The systems, that is, the Enterprise Central/Server, will continue to run until the servers are restarted.   This will be necessary after completing the registry reset.    SBO License Server Reset Has been updated to check the known locations of the registry and provide the ability to make these entries the same as those entered in the License Administrator      A pop-up will appear during the initial running of the Reset Tool to indicate this, as shown below.   If the tool is unavailable or you wish to check this manually, then a Windows Registry search for the key TACLIC_LICENSE_FILE and its data should show its value and indicate the different (or the same) paths. Updating the TACLIC_LICENSE_FILE data to match the License Server path shown in the License Administrator should resolve the issues.     SBO License Setup This registry check is also included in the SBO License Setup tool.  In this instance, it automatically details the changes.  After selecting OK (in the screenshot below), you'll have the option to Apply (or cancel) any of the changes applied by the tool.        

Issue In some recent versions of Security Expert there is unexpectedly high data usage on controllers connected by 4G modems.  Product Line Security Expert Environment Security Expert Server SP-C 4G Modem Warning Potential for Data Loss: The steps detailed in the resolution of this article may result in a loss of critical data if not performed properly. Before beginning these steps, make sure all important data is backed up in the event of data loss. If you are unsure or unfamiliar with any complex steps detailed in this article, please contact Product Support for assistance. Cause This can be caused by the Security Expert regularly contacting all controllers to improve status reporting from the event service. Resolution If you are experiencing high data usage on metered (low data) connections, you can turn off these regular "check-ins". Be aware that this may increase the chance of controllers dropping offline.   Stop the Security Expert services.   In the File Explorer, navigate to the installation directory: ..\Program Files (x86)\Schneider Electric\Security Expert  Open SecurityExpertSV.exe.config. Files in this directory require administrator permissions to edit. You may need to open the file as an administrator using an application like Notepad++, or make a copy in a different directory to edit and replace the original.   Add the following code under the <configuration> node, between </configSections> and <microsoft.scripting>:  <appSettings>     <add key="gx:EnableUnknownStatusMitigation" value="false" /> </appSettings> Save the file.  Open SecurityExpertEvtSvr.exe.config.   Under the <appSettings> node, add the following code:  <add key="EnableControllerConnectionWatchdog" value="0" /> Save the file.  Restart the Security Expert services.  

Issue SmartX SpaceLogic/EasyLogic device is offline, inspection of the device's status LED reveals a solid red pattern instead of the normal solid green.   Product Line EcoStruxure Building Operation Environment SmartX SpaceLogic Controller SmartX EasyLogic Controller Warning Electrostatic Discharge Required: Always discharge static electricity from your person by touching metal prior to handling any hardware. Failure to do so may result in damage to devices. Cause A solid red status LED indicates the application can't be launched, typically there could be two reasons as the root cause of this situation: The application has become corrupted, this happens very rarely. Application keeps crashing on startup. To prevent an infinite startup->crash->startup loop, the firmware in the SmartX SpaceLogic/EasyLogic devices implement a feature known as the application startup retry counter, if the application has crashed multiple times, never running for longer than an internally defined time (typically 10 minutes), the boot applet will stop all attempts to launch the application. Resolution We can attempt to recover the device by performing the following steps: Cycle power to the device. Cold start the device by holding down the reset button for more than 5 seconds but less than 9 If the controller starts up and shows a normal status LED (solid green), immediately start  a device upgrade firmware operation, the goal is to get the uprev operation going before the application crashes again.

Issue How to uninstall PCT 2.0. Product Line EcoStruxure Building Operation Environment Project Configuration Tool. Warning Potential for Data Loss: The steps detailed in the resolution of this article may result in a loss of critical data if not performed properly. Before beginning these steps, make sure all important data is backed up in the event of data loss. If you are unsure or unfamiliar with any complex steps detailed in this article, please contact Product Support for assistance. Cause The uninstalling instruction isn't documented. Resolution Launch Hyper-V. Shut Down PCT VM. After the VM is shut down, select Delete from the bottom right window. Select Delete if the confirmation window prompts. It may take some time depending on the VM size.   Go to the VM location selected during the PCT installation The default installation path is  "C:\ProgramData\Schneider Electric EcoStruxure\Building Operation\Project Configuration Tool 2.0"     Right-click on the pct folder then select Delete (This action will delete all the data in PCT including projects and servers created)    

Issue Need to setup SAML SSO with Azure EntraID Product Line EcoStruxure Building Operation Environment Building Operation Workstation Azure Warning Potential for Data Loss: The steps detailed in the resolution of this article may result in a loss of critical data if not performed properly. Before beginning these steps, make sure all important data is backed up in the event of data loss. If you are unsure or unfamiliar with any complex steps detailed in this article, please contact Product Support for assistance. Cause The SAML configuration requires details setup Resolution Part 1: EBO configuration Creating and Configuring the SAML Configuration Object To create and configure a SAML configuration object. In WorkStation, in the System Tree pane, expand the System folder. Expand the Federated Authentication folder. Select the SAML Authenticator object. On the File menu, click New object. Select SAML Configuration. Enter a name, path, and description on the object you want to create. Click Create. Configure the settings. Enabling Federated Authentication To enable federated authentication In WorkStation, in the System Tree pane, select the EcoStruxure BMS server you want to configure. Click the Control Panel tab. Click Security Settings. Select Enable federated authentication. Click the Save button. Configure SAML Configuration object Service Provider To configure the service provider. In WorkStation, in the System Tree pane, click the SAML Configuration object. Click the Service Provider Settings tab. Configure the settings. Identity Provider To configure the identity provider. In WorkStation, in the System Tree panel, click the SAML Configuration object. Click the Identity Provider Settings tab. Configure the settings. Configuring the Security To configure the security. In WorkStation, in the System Tree pane, click the SAML Configuration object. Click the Security Settings tab. Configure the settings. Create and configure domains Create and configure a domain to be used for Federated Authentication. Create a Domains Create a group Configure the permission for the group Part 2: Azure Configuration Login to https://azure.microsoft.com/ Create SAML application under Entra ID Click Microsoft Entra ID Click Enterprise Application Select Create your down application Enter the name of the App Select “Integrate any other application you don’t find in the gallery (Non-gallery)” An Enterprise Application is created with the name Create a group Select Groups Click New Group Select “Microsoft 365” for the Group type Enter the name of the group, the “Group name” must match the Domains Groups name in EBO. Add Owners and Members to the group Configure Entra ID Select Assign users and groups in the Enterprise Application Overview Select Add user/group then click Assign The selected group is under the application Select Set up single sign on in the Enterprise Application Overview Under Basic SAML configuration Enter the information from EBO SAML Authenticator Basic Tab The Sign on URL is Base URL The Identifier is Entity ID The Reply URL is AAssertion Consumer Service URL Click on Edit from Attributes & Claims Click on “Add a group claim” Select Groups assigned to the application Select Cloud-only group display names under Source attribute update the “Unique User Identifier” Value to user.displayname Download the “Federation Metadata XML” certificate Open the XML file and find the line with certificate, it will start with <XXXXCertificate> Copy the string between the two brackets and paste it in Public key certificate under Identity Provider Settings Copy the Entity id and Single Sign On Service URL from Azure to EBO. The Entity Id is Microsoft Entra Identifier. The Single Sign On Service URL is Login URL. Part 3: Testing Test Single Sign On Go to Webstation by entering the SmartX Server network address. Click on Log on with SSO Select the account within the Azure Group Successful login screen

Issue A full backup immediately fails on the Automation Server.  Performing a configuration-only backup completes successfully. Product Line EcoStruxure Building Operation Environment Building Operation 3.x - first detected Building Operation Automation Server  Building Operation Automation Server Premium (AS-P) Building Automation Server AS-B Warning Potential for Data Loss: The steps detailed in the resolution of this article may result in a loss of critical data if not performed properly. Before beginning these steps, make sure all important data is backed up in the event of data loss. If you are unsure or unfamiliar with any complex steps detailed in this article, please contact Product Support for assistance. Cause A directory under the DB folder, called tc [TypeCache], within the database of the Automation Server, had grown close to 1 GB in size.  The combination of this with the large TrendDb caused the backup failure with the following message seen in the trace log:    nsp.csc.bar.BarBackupOperation BarBackupOperation Execute failed with: Internal Server Error: Insufficient_Space_For_Backup (0x80008) in module Bar_Manager(51). "/<servername>": Insufficient space for backup, XXXXXXXXX bytes estimated for new backup but only XXXXX available   This tc directory contains types fetched from other servers that are used in runtime. These are loaded either from the local database or the tc directory. If a type for another server is not found in the tc directory when accessed, it will first be fetched from that server.   There may be other reasons for the backup failure, presenting this Insufficient_Space_For_Backup message in the trace.log. Clearing this Type Cache does not adversely affect the controller and can be cleared as the first step to see if this will allow the full backup to occur.    The issue has only been seen in Building Operation 3.x, if the issue is presented in a later revision or you continue to have failures, then contact your local support and reference this article.     Resolution To clear the Type Cache contents, follow these steps: Navigate to the RuntimeDBManager object under /System/Modules/RuntimeDBManager/ Right-click on the TypeCache object. Select Type Cache Clear All Attempt a full backup of the server again.  If failures continue to concur, then contact your local support

Issue An explanation of Hosted backup options is needed to understand which objects are backed up and which are not. Product Line EcoStruxure Access Expert Environment Access Expert Hosted V3 Warning Potential for Data Loss: The steps detailed in the resolution of this article may result in a loss of critical data if not performed properly. Before beginning these steps, make sure all important data is backed up in the event of data loss. If you are unsure or unfamiliar with any complex steps detailed in this article, please contact Product Support for assistance. Cause It's important to understand the backup options available for an instance. Resolution By default, each instance includes a one-year transactional history retention, giving one year of Event History backup. Additional event history retention time can be purchased if required, and such purchases will be visible under "Manage License." Example: Note: There are currently no configuration specific backups that are retained or that can be restored to reinstate deleted hardware or objects into an instance.    Recommendations: Exercise caution when deleting objects, especially controllers, from Access Expert. A prompt requests confirmation before deletion. Generate snapshots of controller configurations and other detailed objects. These snapshots serve as references in case of accidental object deletion, assisting the reconstruction of controllers or other objects with their original configurations. Summary reports can also be useful when trying to rebuild objects. For example: Inputs, Outputs, Readers, etc.

Issue Upgrading a JACE-8000 or Edge-10 from 4.10U7 to 4.11 or 4.12 will prevent Niagara Daemon from starting.  You will be unable to connect via Workbench or Browser. Product Line TAC IA Series Environment I/A Series N4 Jace 8000 Tridium Edge 10 Warning Potential for Data Loss: The steps detailed in the resolution of this article may result in a loss of critical data if not performed properly. Before beginning these steps, make sure all important data is backed up in the event of data loss. If you are unsure or unfamiliar with any complex steps detailed in this article, please contact Product Support for assistance. Cause The software in builds 4.10u7 and later LTS builds (4.10u8, 4.10u9, 4.10u10) was released after 4.11 and 4.12 reached EOL.   4.10u7 contains a newer signing key that is not recognized by 4.11 and 4.12. Resolution When upgrading JACE-8000 and/or Edge 10 running 4.10 LTS builds 4.10u7 and later, please skip over 4.11 and 4.12 and instead upgrade to 4.13u3 or newer. Alternatively, you may apply the dist that reverts JACE-8000 to clean 4.9u1 state, or for Edge-10, the dist that reverts it to clean 4.7 state. You can then install 4.11u2 or 4.12u2, if that's the version you have to use.  If you've already attempted the commissioning operation and bricked a device, and have backups, you can connect to the debug port and use the factory reset process per the documentation.  For Edge 10, consult the section titled Factory Default Recovery  in the Niagara Edge 10 Install and Startup Guide.  For JACE-8000, consult the section titled Restoring factory defaults  in the JACE-8000 Backup and Restore Guide. If you are lacking any backups for the host, then before performing the factory reset, you should enable SSH/SFTP via the debug port, and then copy out the Station files using Filezilla or WinSCP or equivalent.  Reach out to your support channel if you have difficulty finding the location of station files. Typically, the files will be in a subfolder of /home/niagara/stations. The config.bog file will be keyring encrypted, and you'll have to reset it using the Bog File Protection Tool. See Editing the .bog file passphrase offline in the Niagara Platform Guide  for details on using the Bog File Protection Tool.  For details on using the debug port on JACE-8000, see Debug port  in the JACE-8000 Install and Startup Guide.  For details on using the debug port on Edge-10, see Connecting to the debug system shell  in the Niagara Edge 10 Install and Startup Guide.