Building Automation Knowledge Base

Issue Can't receive "Power Factor" values from ABB's M-bus meters. Environment Xenta 913 Xenta 701 Xenta 711 Xenta 721 Xenta 731 Cause Earlier versions of X700/ X913 system software did not support M-bus manufacturer specific data that contains extra status information in the VIFE Resolution For Xenta 700, there is a hotfix for v5.1.8 that adds support for this type (also included in v5.1.9 and later) . For Xenta 913, v5.1.9 and later includes this hotfix.

Issue Alarm window either does or does not display on alarm as desired Product Line EcoStruxure Building Operation Environment Building Operation Workstation Cause The Alarm View Properties are not set correctly Resolution Right Click in the Alarm View window and select Alarm View Settings>Properties Change the Display on Alarm Property to the desired state.

Access Expert Bosch Appliance

Issue R2 UNC won't boot and standard output shows the following: FATAL: Cannot boot station from sns java.lang.NoClassDefFoundError: tridium/foundation/prism/Subscription Environment R2 UNC's Cause Typical of corruption to the operating system Resolution  To recover: reinstall the OS, nre and modules and then the station. 

Issue User keeps getting re-prompted for login for each station even though using virtual domain. Each station file has been edited to include the cookieDomain slot.  Also, each station’s “hosts” file has mapped every station’s IP address in the virtual domain to their hostnames. Everything seems to be configured correctly. Environment Niagara R2 Cause Host (station) names contained underscores. The hostname cannot contain underscores. Resolution The station must be renamed without underscores. Change the hostname to match the new station name.

Issue The user is unable to log in to a WebClient session from a web browser even though the number of client session currently established is less than what the license provides for./p> After applying the Continuum Virtual License for WebClient, the ACCWebServerProxy indicates a maximum client seat count that is less than what the license specified.  Product Line Andover Continuum Environment Continuum WebClient Server Continuum Virtual Software License Cause In some cases, it is possible to apply two licenses to the same WebClient host.  When this happens the client seat count is dictated by the first license that was installed even though subsequent licenses may have a larger number of seats. Resolution If the license Key Type is SL Admin Rehostable, one of the licenses can be moved to another host temporarily while the remaining license is tested. Contact Schneider Electric Buildings Product Support for assistance in determining which license should remain on the machine and which should be moved to another host machine. If the license is not hostable contact Buildings Product Support.

Issue Trying to configure door on AC1 to use HID Corporate 1000 and custom card and getting error... “Can't configure HID Corp 1000 and Custom formats simultaneously on AC1 module” Environment CyberStation CX9680 Cause Since the AC1 module only supports one custom format and the HID_1000_35 requires it, the controller can not allow the user the configure a door for both HID_1000_35 and Custom at the same time. An attempt to violate the rule above shall result in the following error: “Can’t configure HID Corp 1000 and Custom formats simultaneously on AC1 module” Resolution If door is on AC1 then Custom and HIDCorp 1000 can't be selected simultaneously. Also, if the AccessFormat is present the doors cant be configured for HIDCorp1000 regardless of the module type. SOLUTIONS: Replace the AC1 with the AC1Plus. Use AccessFormat2 (or 3 or 4) for the custom cards if using AC1Plus modules

Issue Is there a way to determine which version of Operator Interface is installed without actually running the program? Environment DMS Operator Interface Cause Determine the version without running the program Resolution Open the file LANGUAGE.TXT in the DMS folder using Notepad and line 12 will indicate the version installed:

Issue TAC EGWP 120 is obsolete and needs be replaced. Product Line Field Devices Environment 5122781000 TAC EGWP 120 5123106010 STP100-150 Cause Obsolete product needs replacement. Resolution TAC EGWP 120 (5122781000) is replaced by STP100-150 (5123106010)

Issue Need to serve data via Web Services to 3rd party systems.  Product Line EcoStruxure Building Operation Environment Building Operation Enterprise Server Building Operation Enterprise Central Building Operation Automation Server Cause Generic Web Services SOAP, Simple XML or Script Web Services cannot act as a server. They can only act as a client to other web servers. Resolution EcoStruxure BMS servers can serve information to another EcoStruxure system using the EcoStruxure Web Services standard. For 3rd party systems, SmartConnector RESTful EWS Gateway can be used to serve EBO data to 3rd party system in a RESTful manner, refer to: Configure SmartConnector RESTful EWS Gateway to serve EBO data - Schneider Electric Community

Issue How to setup OSDP Readers on Access Expert Product Line Access Expert Environment Access Expert Hosted Software Access Expert Premise Software Cause Clear recommendations and instructions needed for the process Resolution OSDP Readers with Access Expert Overview OSDP stands for Open Supervised Device Protocol. It is the replacement of the older clock and data style and Weigand protocols that have been used across the industry for many years.OSDP is based upon an industry-standard from SIA (Security Industry Association) and has various levels.  The original version was called OSDPv1 which was followed by OSDPv2 then Secured Channel Communications was added to OSDPv2. This document will address how to add an OSDPv2 and/or OSDPv2 Secured Channel reader to an Access Expert system. As we move more into a data secured and encrypted environment, it is recommended that all deployments be installed based upon OSDPv2 at a minimum.  More information on OSDP can be found at https://www.securityindustry.org/industry-standards/open-supervised-device-protocol/. When compared to Weigand, OSDP offers various technological advancements with the increased level of security being one of the key benefits associated with OSDPv2 Secured Channel. More Security: OSDP v2 with Secure Channel protects readers against hacking using AES-128 encryption and OSDP constantly monitors wiring to protect against tampering. OSDP helps overcome the growing threat of “man in the middle” attack. More Functionality: OSDP uses fewer wires, allows for multi-drop installation, supervises connections to indicate reader malfunctions, and can disable the reader automatically when removed from the wall. Bidirectional communication: OSDP supports bidirectional communication. This means that the reader configuration can be set at the software and then sent to the reader via the intelligent controller More Interoperability: Using OSDP enables communication among different manufacturers' devices. More Consistency:  Not only does OSDP provide a concise set of commonly used commands and responses, but it also eliminates guesswork since encryption and authentication are predefined. Ease of Use: Low cost of implementation on an embedded device and simplification of the encryption and authentication process. Most readers come with both Weigand and OSDP support already available. Reader Wiring & Prerequisites Prerequisites: Readers wired for OSDP Readers that support OSDP HID Mobile Reader Manager App (iTunes or Google Play) HID Reader configured for OSDP and addressed It is possible to deploy OSDP readers on Access Expert without using the HID Reader Manager App provided you are not “stacking” readers on the same controller port.Stacking is a process of putting multiple readers on the same controller and the same port. If stacking is being used, the HID Reader Manager App will be required to set the 2 nd readers' address. As an example: Application Need Reader Port 1 Reader Port 2 Parking Garage The project will have 2 Parking gates where each will have dual readers Reader 1 on Port 1 is set to address 0 Reader 2 on Port 1 is set to address 1 Reader 1 on Port 1 is set to address 0 Reader 2 on Port 1 is set to address 1 When deploying OSDP, the reader and port address designation for each reader port will default to address 0. This means you can deploy a system without using the HID Reader Manager App provide only a single reader is being used per controller port. Note that the AX-MR62e supports a total of 4 OSDP readers but only has a single reader port. This means the HID Reader Manager App is needed to set the addresses accordingly for readers 2 through 4.   OSDP wiring is different from what most installers are accustom to. Rather than Weigand which takes 6 wires to the reader, OSDP is an RS-485 connection where 2 wires are used for data, and 2 are used for power as noted in the images below. These pictures show an HID R900 reader is connected to an AX-MR52-S3 controller for OSDP. The same wiring method is used when deploying OSDPv2 Secured Channel.  No additional wiring is needed for the reader to pick up additional signals such as Reader Tamper alarms.   Adding OSDP Readers to Access Expert To Add an OSDP Reader to your Access Expert system: Open the desired downstream controller or right-click the downstream and select Add OSDP Reader. Click “Add OSDP Reader”. Enter the Reader Display Name. Select the Address.  This field will default to 0 or 1and represents the controller port. Complete the Reader Information for the other fields similar to how a traditional Weigand Reader is configured. Click "Save & Close".   Take note of the Addressing being used on your system. The address is the Controllers Port address while OSDP Address is the Readers address and will vary when Stacking is being used. At this point, the OSDP reader is added to the Access Expert system without Secured Channel being enabled. Leaving the Assurance Profile to None and using the Default Baud Rate settings will leave the reader connected to the system without using the Secured Channel. It is recommended to set up as default first then enable Secured Channel.  OSDP readers have many of the same fields as a Weigand reader so the setup processes will be similar. Assurance Profile: This is used only by PIV class cards for FIPS deployments. Use Default: Using the default sets the Baud Rate to 9600, the address to 0, and does not use a secure channel. Use Secure Channel: To leverage the extra security that comes from OSDP readers, it is best practice to turn on a secure channel. Baud Rate: Because OSDP readers have bi-directional communication, the downstream and the reader need to be using the same rate of the communication (baud rate). Make sure this is set according to the reader's needs. It is recommended that 9600 be used for OSDPv2 and that Auto Negotiate be used for OSDPv2 Secured Channel. OSDP Address: Multiple OSDP readers can be connected to the same reader port on a controller. As an example, the MR-62E supports a total of 4 Readers on the controller but nly has one reader port.  When this is done, each reader on that port needs a unique address and is set in the HID Reader Manager App. Setting up OSDPv2 Secure Channel The reader must first be configured as an OSDP reader in Access Expert to be successfully configured for Secure Channel communications. Right Click the Reader and select View Live Monitoring. This will allow you to monitor the reader communications as you enable Secured Channel.   Check the "Use Secure Channel" option. Set baud rate to auto-negotiate. Click "Save" The reader will show as offline in the hardware tree. From the Reader setup page, Click Actions then Select Start Linking mode. The linking mode is automatic, and the process can be monitored from the Live Monitoring page. The reader will negotiate the secure communication with the controller and come online. With Secure Mode, if the Reader Tamper is in alarm, the reader will not process any card reads by design. How to - Remove Secure Channel on an OSDP reader At some point, you may need to remove an OSDP reader which has been connected to a system via Secured Channel. Uncheck Secure Channel. Click "Save". From the "Actions" drop-down menu, select "Send OSDP Command". Select the Manufacturer. Choose "Set Install Mode". Click "Execute". The LED on the reader should blink green once completed Note: The 'Send OSDP Command' modal has several OSDP Command options so make sure you are selecting the correct manufacturer and command. How to - Know if a reader is in Secure Channel There will be an event indicating the reader mode changed to card only after the start linking mode command. As the reader comes on/offline, you will notice an event/message that says “OSDP Secured Channel for, Reader Name, is Enabled but not Online or Encrypted” and “OSDP Secure Channel for, Reader Name, is Online and Encrypted.”

Issue Which format will emails be transmitted in? Environment SmartStruxure Cause IT departments may need to know the format of system generated emails, especially if they use an internal mail server. Resolution The email is sent with text/plain;charset=utf-8 encoding with Transfer-Encoding: quoted-printable.

Issue Sending nvoSpaceTemp to nviSpaceTemp in TAC Xenta 102-AX does not work even if we are using SCPTmaxSendTime and SCPTmaxrcvTime. Environment TAC Xenta 102-AX Cause SCPTmaxSendTime of 60 means that the value is sent at least once every 60 second. SCPTminSendTime of 10 means that you could not send more often than once every 10th second. But, SCPTmaxRcvTime of 10 means that if the device has not got a new update within 10 seconds of the latest value, the value goes back to default value.   Resolution SCPTmaxRcvTime in the receiver has to be set to at least longer than the SCPTmaxSendTime in the sender, to avoid timing issues, there the receiver resets its value before the sender sends out a new value.  

Issue The specification data sheet for the ETR803 sensor shows a supply voltage connection and controller input connection but does not provide any further details for reading the setpoint. Environment ETR803 temperature sensor with setpoint Cause ETR803 is being used for space temperature sensing and needs to be able to read the setpoint in an I/A Series controller. Resolution The ETR803 Space Temperature Sensor with setpoint adjuster is marketed as an equivalent for the TS-90250-850 and similar device. The space temperature sensor is a 10kohm type 3 thermistor with an 11kohm shunt resistor.  This space temperature sensor can be read by any of the I/A Series controllers that support the 10k thermistor with 11k shunt resistor. The setpoint adjuster is an uncalibrated Cool / Warm slider that be read by the I/A series controller as a voltage input. Note: Unlike other ETR sensors, voltage detailed below must be applied to the ETR803 setpoint (SP+ and common) for proper operation. The power source can be the 5.1VDC power from the MNL-800 or the 20VDC source, with a 4500 ohm series resistor, from the MNB-1000. For the other controllers, an AO can be configured as a 5 VDC output.  This voltage source is connected to the SP+ terminal on the ETR803. The SPST output of the ETR803 is then connected to a spare analog input on the controller. This analog input is configured to read a voltage in the range of 1.2 to 4.8 volts. Since the ETR803 setpoint slider is uncalibrated, being labeled "Cool" on the left and "Warm" on the right, the AO reading this value could be configured to read an absolute temperature range such as 50 to 90 degrees or could be configured as a +/- setpoint offset.

Issue Veris temperature transmitter - control system is reading an inaccurate temperature reading Environment Veris temperature sensor with voltage transmitter output Cause The Veris sensor and the controller are located at different locations and using a different common as they are being powered by different power sources.  Resolution Refer to the sensor's installation instructions and ensure that the sensor and controller uses the same common. 

Issue Does Building Operation use Unicast or Multicast? Product Line EcoStruxure Building Operation Environment Building Operation Enterprise Server Building Operation Automation Server Building Operation Workstation Cause Does Building Operation use Unicast or Multicast? Definitions: Unicast packets are sent from host to host. The communication is from a single host to another single host. There is one device transmitting a message destined for one receiver. Multicast is a protocol for use with IP. Multicast enables a single device to communicate with a specific set of hosts, not defined by any standard IP address and mask combination. This allows for communication that resembles a conference call. Anyone from anywhere can join the conference, and everyone at the conference hears what the speaker has to say. The speaker's message is not broadcasted everywhere, but only to those in the conference call itself. A special set of addresses is used for multicast communication. Broadcast is when a single device is transmitting a message to all other devices in a given address range. This broadcast could reach all hosts on the subnet, all subnets, or all hosts on all subnets. Broadcast packets have the host (and/or subnet) portion of the address set to all ones. By design, most modern routers will block IP broadcast traffic and restrict it to the local subnet. Resolution Building Operation is using only IPv4 and therefore Unicast only. This may change when Building Operation begins using IPv6. At that time, a site may want to use the IPv6 multicast features to address groups of targets.

Issue Is it possible to configure the system so that one or more users have different access requirements to the standard default access settings for each door? Product Line Security Expert Environment Security Expert Client. Cause Although doors within Security Expert may be configured for Card Only, Pin Only and Card + Pin etc, in some circumstances it may be desirable to give an individual access which is different to a door’s normal settings. For example A cleaner may have to use Card + Pin where a regular employee may only require a Card. The CEO of a company may only be asked for a Pin so that he or she can move around the building without needing a Card at all. In each case the user level of security may more secure or less secure than the standard default settings of the door depending on the scenario. Resolution The Security Expert Software Version 4.2.251.15. The SP-C Firmware Version 2.08.843. The default building door access is Card + Pin Specific First Aid Technician door access should be Card Only to allow them to move more quickly through the building

Issue How do I read unsigned 8-bit (byte) values from a Modbus holding register and represent the analog value in Building Operation? Product Line EcoStruxure Building Operation Environment Building Operation Enterprise Server Building Operation Automation Server Building Operation Automation Server Premium Building Operation Automation Server Bundled Cause In this case, the Modbus holding register is a 16-bit unsigned value that is used by the Modbus device to represent two individual 8-bit values.  The 16-bit unsigned value is an integer with a range of 0 to 65,535 and needs to be converted into two analog values. Resolution Use a Building Operation Modbus Analog Input Point for each value required.  Each object will be configured to read the same Modbus register address with the bitmask value applied before evaluating the value to determine the output. For example: Read Modbus holding register 40001 which is a 16-bit unsigned value and decode as two analog values. Under the Modbus device object - create a Modbus Register Group Under the Modbus Register Group - create two Modbus Analog Input Points Configure each point as follows: Modbus Analog Input Point 40001 (AI-HighByte) Register number 1 Register type 16-bit unsigned Read function code 03 Bitmask - enable all bits 8 through 15 Modbus Digital Input Point 40001 (AI-LowByte) Register number 1 Register type 16-bit unsigned Read function code 03 Bitmask - enable all bits 0 through 7 Additional information can be found in the Building Operation Technical Reference Guide - Modbus Point Configuration (Bitmask) or WebHelp at Point and Value Configuration

Issue How to use Plain English programming to mirror the output controlling the door's striker to a second output on the Continuum controller. Product Line Andover Continuum Environment Continuum Net Controller II Continuum ACX 2 Controller Cause Sample PE program needed for guidance. Resolution Here are three samples of the same program for guidance on how to accomplish the desired application 'This program makes the Auxiliary output of the AC1 (Out chan 2) mirror the value of the output that controls the door 'striker (Out chan 1) 'Program is Looping/Autostart 'The MODE variable is used to control when Out2 should mirror Out1 as follows... ' '1=Always including manual override '2=On valid card or REX only Numeric MODE Line Init AuxOutput = 0 MODE = 2 Basedon MODE Goto Always, ValidAndRex Line Always AuxOutput = Door1 OverrideValue * 65535 Line ValidAndRex AuxOutput = Door1 * 65535 Line E If TS > 10 then Goto Init Program code has also been supplied in the attached dump file below.

Issue Vulnerability affecting certain versions of OpenSSL. Product Line Andover Continuum, EcoStruxure Building Expert, EcoStruxure Building Operation, Satchwell MicroNet, Satchwell Sigma, TAC IA Series, TAC INET, TAC Vista Environment OpenSSL Cause Software vulnerability Resolution Information and Customer Statement located at the following link on the community: Schneider Electric Security Statement Regarding the Heartbleed Vulnerability. A corporate statement on this can also be found here: Schneider_Electric_Heartbleed_Customer_Statement_APR_15_2014.pdf.