Building Automation Knowledge Base

Warning Potential for Data Loss: The steps detailed in the resolution of this article may result in a loss of critical data if not performed properly. Before beginning these steps, make sure all important data is backed up in the event of data loss. If you are unsure or unfamiliar with any complex steps detailed in this article, please contact Product Support for assistance. Issue Security Expert Installation steps for separate SQL, SX application Server, and Client for use with Windows Authentication and Active Directory Product Line EcoStruxure Security Expert Environment Microsoft SQL Server Microsoft Windows10 Security Expert Server and Client  Cause Access Denied error appears when attempting to log into Security Expert with Windows Authentication with a multiple PC Security Expert Installation Resolution Important considerations when connecting Security Expert to an external SQL Server: Machines should be on the same network and Domain. When you install Security Expert, reference the SQL database in this form:  Machine Name\SQL Instance Name The Windows user account doing the installation must have admin rights on both machines. The windows login you're using to install on the Security Expert machine has to have admin privileges to alter the SQL Database on the remote machine. The easiest way to do this is to use the same account to set up all machines. Different accounts can be used, but the accounts have to have privileges added to the SQL Database manually. (Not covered in this document)   Assumptions: Active Directory server has a domain user that can be used to install the applications on all machines. Licenses cover all machines Security Expert users are set up to use Windows Authentication (snapshots at the end of the document) If the SQL server ever had Security Expert Installed on it, uninstall Security Expert and reboot. If the Security Expert application server had SQL on it, uninstall SQL, reboot and reinstall Security Expert without local SQL. If the Client PC had Server components installed, uninstall Security Expert, reboot and install the client only.   Perform the SQL Server Installation onto a separate Server per the Security Expert Installation Instructions Security Expert Application Server/Client installation (No SQL) If this box is selected, the install may fail because the service has not been installed yet. With this option selected, the install will finish and then the service can be configured later. 3. Change the database server to NOT be localhost\SecurityExpert Use machinenameofSQLServer\SecurityExpert (Ex. SECEXPERTVM\SecurityExpert) 4. Select Windows Authentication Complete the installation.   5. Open Windows Services on the Security Expert Application Server (Run> services.msc) Right-click on Security Expert Data Service> Properties Select the Log On tab Deselect Login As Local System Account Select This account and then click browse to search for the domain admin user   Start the service. Security Expert Data Service, Security Expert Event Service, and Security Expert Update should all start   Client only setup - Ensure the Server option is deselected In the following dialog select Custom   7. Select the drop-down next to Server> then select “This feature will not be available” Complete the installation   A successful login with the domain admin account using Windows Authentication from the Security Expert machine and also the client PC should work.   From the Client PC – Security Expert application server = 10.169.90.170 From the Security Expert Server/Client SecurityExpertSV.exe.config (Server) – This file did not have to be changed    SecurityExpert.exe.config (Client) - This file did not have to be changed   Note: There may be circumstances where these files do need to be configured. See LL https://community.se.com/t5/Knowledge-Base/Security-Expert-Error-Server-Has-Rejected-Client-Credentials/ta-p/698   Domain Tab example set up in Security Expert for Active Directory Windows Authentication   Operator Example setup in Security Expert for Windows Authentication   Global Support Lab Testing SX Application Server (Windows10 1803) SQL Server – Server 2012 R2 with SQL 2016 SP1 (VM) SX Client – Window 8.1 Pro

Issue An SP-RDM2 will be used to add doors to an I/NET-transitioned site. The readers connected to the SP-RDM2 will need to read Hex Card Number credentials. Product Line EcoStruxure Security Expert, TAC INET Environment Security Expert Controller (SP-C) Security Expert Reader Module (SP-RDM2). Cause After transitioning an INET site to Security Expert, you may find it necessary to add one or more new doors. In Security Expert, you add doors to your system by attaching one or more SP-RDM2 modules to the RS-485 bus of an SP-C (up to two doors per SP-RDM2). That is still true for the transitioned system; however, some configuration tasks must be performed to allow the SP-RDM2 to coexist with the SCUs and DCUs that are already communicating with the SP-C.  You will also configure the SP-RDM2 to use the custom Hex Card Number credential you created as part of the INET transition process. Resolution For an SP-RDM2 module to work in conjunction with I/NET modules it must be configured in a specific way. You will need: SP-C firmware 2.08 build 911 or later SP-RDM2 firmware 1.12 build 546 or later Configuring the SP-RDM2: To the existing transitioned I/NET site, add a new Reader Expander for the additional SP-RDM2 reader module. (Note that the last reader expander defined in your existing system may be assigned to a dual-address SCU. If this is the case, make sure the address you assign to the SP-RDM2 is at least two addresses higher than the SCU to avoid address conflict.)  Set the Reader 1 Format and the Reader 2 Format to "Custom Credential". (Note that if the Port 1 Network Type or Port 2 Network Type is set to "Schneider Electric RS485" then this will need to be changed to "Wiegand" to allow you to set the reader format; it is greyed out otherwise. The network type can be set back to "Schneider Electric RS485" afterward.) Set the Port 1 Network Type and Port 2 Network Type according to the type of readers that are connected. In order to correctly convert the card read to the hexadecimal credential format that is programmed for the users, the reader expander must know what card format is being presented. This is done using commands. For the reader on port 1, add the command "R1RawFmt = #" where # is one of the descriptions shown in the table below. Similarly for the reader on port 2, add the command "R2RawFmt = #" where # is one of the descriptions shown in the table below.  If the command is absent, then Wiegand 26 is used as a default. Command Card Type R1RawFmt = Wiegand 26 26-bit Wiegand R1RawFmt = Wiegand 32 32-bit Wiegand R1RawFmt = Wiegand 34 34-bit Wiegand R1RawFmt = Wiegand 66 66-bit Wiegand R1RawFmt = Custom Wiegand Any Wiegand card - parity check is skipped Additionally, the SP-C controller must know which reader expanders to expect on the I/NET network and which reader expanders to expect on the Security Expert module comms network. By default, if the controller command "INET = true" is present in the SP-C, then all modules are considered to be on the I/NET network. Adding an SP-RDM2 to the Security Expert module comms network with no additional commands will result in partial operation but there will be problems. To use a mixture of I/NET modules and Security Expert modules, a command must be added to the programming of all I/NET modules. This command is: "HardwareType = INET" If this command has never been added to any module, and the command "INET = true" is present in the SP-C, then all modules are treated as I/NET. This maintains backward compatibility with existing sites. As soon as the "HardwareType = INET" command has been added to even one module, then it must be added to the programming of all I/NET modules from then on for the site to function as expected. Configuring the SP-RDM Doors to Accept Hex Card Number Credentials Create a new Door Type for reading cards as a Hex Card Number credential and configure it as follows. In the Entry section on the General tab, set the Entry Reading Mode to "Custom". In the Entry Credential Types section, add the "Hex Card Number" credential type. Save the Door Type. Configure each door on the SP-RDM2 to use the new Door Type as follows: In the Setup section on the General tab of the door, set the Door Type to the name of the Door Type you just created in step 1. Save the door.

Warning Hazard of Electric Shock: Battery terminals and leads are not power-limited. Short circuits can cause a fire or an explosion. Use extreme caution while connecting or disconnecting standby batteries. Electrostatic Discharge Required: Always discharge static electricity from your person by touching metal prior to handling any hardware. Failure to do so may result in damage to devices. Issue The panel displays a Low Battery Voltage (With Charger Trouble) condition. This is accompanied by General Trouble and Power Trouble LEDs being ON. Product Line ESMI Fire Detection. Environment FFSULH1001. FFSULH1002. FFSULH1003. Cause Possible causes of this issue include: Battery impedance exceeds acceptable limits This can occur after several years of use as batteries degrade. Mixing different battery brands or using batteries of the same brand but with different ages (e.g., one new and one old) can also cause this issue. Faulty power supply If the power supply is malfunctioning, it may not charge the batteries correctly, triggering the fault. Resolution Step 1: Replace the existing batteries with a new set from the same brand. This often resolves the issue if battery impedance was the root cause. Step 2: If the issue persists after replacing the batteries, the power supply may be faulty. In this case, replace the power supply unit. After replacing either the batteries or the power supply, the panel should return to normal operation.

Warning Hazard of Electric Shock: Battery terminals and leads are not power-limited. Short circuits can cause a fire or an explosion. Use extreme caution while connecting or disconnecting standby batteries. Electrostatic Discharge Required: Always discharge static electricity from your person by touching metal prior to handling any hardware. Failure to do so may result in damage to devices. Issue The panel displays a Low Battery Voltage (No Charger Trouble) condition. This is accompanied by General Trouble and Power Trouble LEDs being ON. Product Line ESMI Fire Detection. Environment FFSULH1001. FFSULH1002. FFSULH1003. Cause The issue may arise due to one of the following scenarios: Newly Installed Batteries Battery voltage may be low initially. Allow the system to charge for a few hours. The trouble condition should clear automatically. Panel Running on Batteries (No AC Supply) Extended battery use without AC supply can drain voltage. Once AC power is restored, charge for a few hours. The issue should resolve itself. Panel on AC Supply but Still Showing Trouble Batteries may be aged or degraded. If the issue persists after charging, replace the batteries. After replacement and charging, the panel should return to normal operation.   Resolution Scenario Action New batteries Charge for a few hours No AC supply Restore AC supply and charge Aged batteries Replace and charge

Issue Access to the Platform on a PC without administrative privileges is, by default, not allowed. Product Line TAC IA Series Environment I/A Series N4 /AX Workbench Cause Default Platform access is restricted to persons logging on to the PC with administrative privileges Resolution To run a station on a Workbench, you must open the Platform to install and start the station. Consult with your IT department about getting a temporary local admin account or have them assist you with this process.   Start the daemon you wish to run the station in Open Workbench of the running daemon Open the Platform  Follow the steps in the screen capture Now you can open the Platform and run stations without having administrative rights on your PC.           Notes: This must be done for each version of Niagara Workbench If you have a Schneider Electric laptop with CyberArk EPM installed, obtain a CyberArk JIT for administrative privileges from SE Support. If you have a Schneider Electric laptop, when logging in to the "Update Authentication" in the Platform, use your SESA login.

Issue There is currently no summary KB article for all the data collection available in EBO systems. Product Line EcoStruxure Building Operation Environment Building Operation Enterprise Server Building Operation Enterprise Central Building Operation Workstation Building Operation Webstation Building Operation Automation Server Premium Building Operation Automation Server Bundled Cause Identified the need to review data from EBO to analyze performance or issues. Resolution Purposes for Data Collection Provide visual information about the issue Screenshots (from Windows Snip & Sketch or other tools) Video Capture or Mobile Device Video Device LEDs, provide any information about them and when they change. Provide information about your configuration/installation Network devices, including routers, switches, and any configuration you can provide BMS Routers Site Topology, including all devices included in the communications path Provide server (EC/ES/AS) XBK backup Configuration only is smaller and useful when investigating configuration, bindings, and/or programming All Data is larger and recommended when need to see trends or events to help investigate the issue's timeline. Provide any information to replicate the issue. Provide as specific as possible steps used to create that outcome Provide VERSIONS of ALL software, hardware, and protocols involved If submit any captures or logs, perform the following: Provide any steps performed in EBO during the capture or log with the date & time, so these events can be matched.   Servers (EC/ES/AS) Collect logs from an Automation Server Collect logs from the Enterprise Server and Enterprise Central Backing Up EcoStruxure BMS Servers Manually  (Configuration Only or All Data) Server Fieldbus Protocols Infinet: Gathering Trace Log information for the Infinet bus in EBO Lon: (Video included) Analyze Lon communication using trace log in EBO Modbus: Capture a Modbus trace log in EBO/SBO   Software EBO Webstation Collect EBO Webstation browser logs EBO Workstation Collect EBO Workstation logs EBO Project Configuration Tool (PCT) Collect log files from Project Configuration Tool (PCT) Windows Review the Windows Event Logs. What specifically happens when an error occurs? Follow this KB article to view and save the Windows Events: Viewing, Saving, Sharing Windows Event Logs for Troubleshooting Purposes Wireshark For extended period capturing, use this article to set up a Ring Buffer in Wireshark. Wireshark capture ring buffer for continuous capturing Hardware b3/Infinet Controller Collect log from a b3 or Infinet controller BACnet/IP Controller Workstation method - BACnet/IP Controller Diagnostics Building Commission method - Viewing and Exporting Diagnostic Files (WebHelp) or Viewing Diagnostic Files (YouTube)   Protocols & Electrical Interfaces Ethernet Capture any ethernet traffic, including IP: Using WireShark to analyse communications on an Ethernet network Capture Loopback (127.0.0.1) traffic between applications and/or servers running on the same host OS: How to capture localhost traffic with Wireshark to help troubleshoot EWS communication issues Lon Using Loytec LPA with SpaceLogic Server AS-P RS-485 Fieldbuses include BACnet MS/TP, I/Net, Infinet, Modbus RTU BACnet MSTP Capture Application - Communities (se.com) aka mstpcap.exe BACnet - PicoScope Basics Picoscope Configuration for Modbus RTU capturing and decoding Modbus RTU capturing in Wireshark

Issue Need to analyze Modbus RTU communication packets for SpaceLogic controllers. Product Line EcoStruxure Building Operation Environment Building Operation Automation Server Building Operation Multi-purpose Controller (MPC) Building Operation Room Controller (RPC) Cause MP and RP controllers do not support packet logging or viewing on their modbus serial ports. Additionally, RP controllers lack transmit/receive LEDs for Modbus, making diagnostics more difficult. For differences between Automation Server and MP/RP controller Modbus operations, refer to the article: Modbus in the MP and RP Controller Introduction  Resolution Wireshark Installation Install the latest Wireshark application from: Wireshark • Go Deep | Download Click on the "download" icon and select your operating system Launch the downloaded setup file to install Wireshark. The default installation options can typically be used, unless the user has a specific reason to select others. Modbus RTU capture extension for Wireshark The Github project can be found at: GitHub - jzhvymetal/WiresharkSerialAdapter: Wireshark Serial Adapter for Windows Navigate to the latest version and download WireSharkSerialAdapter.exe  With this file downloaded, navigate to the Wireshark application folder and locate the following subfolder. If it does not exist, create it.  Copy WireSharkSerialAdapter.exe into this folder. NOTE: This is not an executable to be launched by the user. Wireshark will execute it as an additional capture option. USB-to-RS485 communications adapter Install the USB-to-RS485 adapter to PC. Wire the RS-485 adapter to the SpaceLogic RS-485 port to be captured. Check Device Manager -> Ports to determine the COM port number it is using. Wireshark Configuration Launch the Wireshark application. The initial start-up screen will list the available capture ports. This list will be different for each user’s computer, depending on its configuration. Below is an example of what this screen looks like:  In this list, Serial Port Adapter (WireSharkSerialAdapter.exe) should be an option. Click on the settings icon  to the left to bring up the setup options:  Launch Windows Device Manager to confirm the COM port assigned to the connected USB-485 adapter Select this COM port and set the baud rate, byte size, parity and stop bits of the Modbus RTU channel to be monitored. Use the Interframe settings shown in the screenshot above. Select User DLT 147 as the Wireshark DLT. Save these settings. Returning to the main screen, select Preferences from the Edit pull-down menu and navigate to Protocols:  Expand Protocols and select DLT_User. Click on Edit to add an entry to the Encapsulation Tables. Click the “+” button to add a DLT  Select User 0 (DLT = 147) and manually edit the Payload dissector to be mbrtu:  Click OK and return to the main screen Wireshark Capturing With the COM port properly configured, a traffic capture is initiated by double-clicking the selected COM port. The content of the capture will depend on the connected devices. The following is an example of the active window panes:  The main pane is an overall summary of the Modbus RTU traffic, with a brief description of each message type. When a frame is selected in this pane, the lower-left pane contains a breakdown of the packet content by field-type, and the lower-right packet is the packet content in hexadecimal format. The selected frame number is displayed in the packet details frame on the lower left, as well as the contents of the Modbus message. In this example, the results of the Modbus Read Holding Request for 6 registers is shown. The Wireshark capture is stopped by clicking on the red square, second from the left

Issue You need to forward specific events from Security Expert to a third-party Syslog server for monitoring or logging purposes. Product Line EcoStruxure Security Expert Environment Security Expert software Syslog server (e.g., SolarWinds) Cause There is a requirement to send filtered Security Expert events (e.g., operator activity, user access, door unlocks, output activations) to an external system for analysis or integration. Resolution Security Expert allows you to forward events using the Send Event action. Follow these steps to configure it: Step 1: Create an Event Filter In Security Expert, go to the Events menu. Create a new Event Filter that captures the specific events you want to forward. Example: Filter for events like  Output <PGM_NAME> On By <DOOR_NAME> Function <DOOR_FUNCTION> . Tip: You can trigger these events by manually unlocking a door from the client to test the filter. event filter Step 2: Create a Send Event Action Still under the Events menu, create a new Action. Set the following parameters: Type:  Send Event Event Filter: Select the filter you created in Step 1. IP Address: Enter the IP address of the Syslog server. Port: Enter the port number used by the Syslog server (e.g., 514 for standard Syslog, or a custom port used by Packet Sender). action Step 3: Test with Packet Sender Use Packet Sender to simulate a Syslog server. In Packet Sender: Note the TCP port number shown in the bottom right corner. Ensure this matches the port configured in your Security Expert Action. The IP address should be the one assigned to your Security Expert server (e.g., your laptop’s IP if testing locally). Manually trigger the event (e.g., unlock a door or activate a relay). status page Confirm that the event is received in Packet Sender’s log window. packet sender

Warning Hazard of Electric Shock: Remove all power from all devices before removing any covers or doors of the system. Disconnect power at the device and at the power source. Electrostatic Discharge Required: Always discharge static electricity from your person by touching metal prior to handling any hardware. Failure to do so may result in damage to devices. Potential for Data Loss: The steps detailed in the resolution of this article may result in a loss of critical data if not performed properly. Before beginning these steps, make sure all important data is backed up in the event of data loss. If you are unsure or unfamiliar with any complex steps detailed in this article, please contact Product Support for assistance. Issue Installing a Flex server/gateway that supports multiple industrial and building automation protocols (e.g., BACnet IP, BACnet MSTP, Modbus RTU, Modbus TCP/IP, SNMP, OpenThread, and LoRaWAN) at a live site is complex and requires careful planning. Product Line EcoStruxure Building Activate Environment EcoStruxure Building Activate Flex Server EcoStruxure Building Activate Partner Portal Cause Improper installation often leads to degraded performance or unreliable device behavior Resolution Site Survey & Environmental Considerations Physical Location: Choose a secure, climate-controlled, and accessible location (e.g., equipment room or control panel). Install in a locked cabinet or secure room to restrict access. Power Availability: Ensure a dedicated, stable power supply with proper grounding. Use a UPS for critical applications to prevent data loss during outages. Network Infrastructure: Confirm availability of Ethernet ports for BACnet/IP, Modbus TCP/IP, and internet access. Install Ethernet cables in wall cavities or conduits. For cellular networks, monitor data usage and set up alerts to avoid over usage charges. RF Environment (LoRaWAN & OpenThread) LoRaWAN: Conduct a radio-mapping survey to determine optimal gateway placement. Use high placement, clear line-of-sight, and low-loss coaxial cables (e.g., LMR-400). Select appropriate antenna gain (e.g., 6 dBi for urban areas). Consider multiple gateways for redundancy. OpenThread: Identify interference sources (e.g., Wi-Fi, Bluetooth in the 2.4 GHz band). Ensure strong signal strength for reliable mesh networking. RS-485 Cabling (BACnet MSTP, Modbus RTU) Cable Type: Use shielded twisted-pair cables (e.g., Belden 3105A). Termination: Install 120-ohm resistors at both ends of the bus. Topology: Use a daisy-chain layout. Avoid star or stub configurations. Length Limits: Follow RS-485 specs (typically up to 1200 meters). Grounding: Maintain a common ground to prevent loops. Polarity: Verify A (+) and B (-) connections. Device Compatibility & Data Mapping Object/Register Mapping: Map BACnet objects, Modbus registers, and SNMP MIBs to internal gateway points. Document data types, scaling factors, and offsets. Device IDs & MAC Addresses: Assign unique IDs for Modbus (1–255) and BACnet MS/TP (1–127). Document all assignments. Adjust network priority if BACnet uses Ethernet and Wi-Fi is used for internet. Baud Rates & Serial Settings: Match baud rate, data bits, stop bits, and parity across all serial devices. Disable unused interfaces to reduce noise and resource usage. Conclusion By following these best practices, you can ensure a successful and reliable Flex server/gateway installation, enabling seamless communication across diverse automation protocols.

Warning Hazard of Electric Shock: Remove all power from all devices before removing any covers or doors of the system. Disconnect power at the device and at the power source. Electrostatic Discharge Required: Always discharge static electricity from your person by touching metal prior to handling any hardware. Failure to do so may result in damage to devices. Potential for Data Loss: The steps detailed in the resolution of this article may result in a loss of critical data if not performed properly. Before beginning these steps, make sure all important data is backed up in the event of data loss. If you are unsure or unfamiliar with any complex steps detailed in this article, please contact Product Support for assistance. Issue When the Flex Server/Gateway is unable to connect to the internet, it's important to verify the network priority settings to understand how the device attempts to connect to the cloud. Product Line EcoStruxure Building Activate Environment EcoStruxure Building Activate Flex Server EcoStruxure Building Activate Partner Portal Cause The Flex Server/Gateway is not designed for direct exposure to public networks. Improper network priority settings may cause the device to go offline when connected to the internet. Resolution The Flex Server/Gateway supports multiple internet connectivity options: Cellular (GSM): Supports two SIM cards for redundancy. Ethernet Wi-Fi (via Wi-Fi receiver) USB Tethering (via the top USB port, usb0, for troubleshooting) Learn more about USB tethering: USB Tethering for Flex Server   Connectivity Priority (Default Order) USB Tethering (usb0) Cellular (GSM) Ethernet Wi-Fi Note: If GSM fails and Ethernet is connected, the server will automatically switch to Ethernet. If both GSM and Ethernet are unavailable, it will switch to Wi-Fi (if configured). SIM Card Failover If one SIM card loses internet connectivity, the server automatically switches to the second SIM after a few minutes.   Best Practices Install the server in a secure location to prevent tampering (e.g., unplugging Ethernet or removing LTE antenna). Avoid direct exposure to public internet to maintain security and stability.

  Issue Unable to perform AET license registration online Product Line Automated Engineering Tool Environment Automated Engineering Tool Cause If a license file for AET is not found on the computer, the License Registration screen will be displayed when AET is started. By default, the New Registration button launches an online registration process, if the computer is offline or there is a problem contacting the AET License server then Offline registration is needed. Resolution AET Offline license registration process If a license file for AET is not found on the computer, the License Registration screen will be displayed when AET is started. Click the "Offline registration" button. Fill in your name, company, email address and select the license type you want. Then click "Save to file". Select a location to save the license request file, once the file has been saved to the computer, instruction on how to proceed are shown. Click OK and AET will close. Email the saved file to aet.support@schneider-electric.com the AET Support team will respond with a license. Place the supplied license in the C:\ProgramData\Schneider Electric\AET\License File folder on the computer and run AET.

  Issue When viewing the Modbus property in EcoStruxure Building Operation, the status displays "Attention". Product Line EcoStruxure Building Operation Environment Building Operation Automation Server Building Operation Enterprise Server Cause The "Attention" status is not documented in the Web Help, which can make it unclear what is causing this state. This status typically indicates that there is an issue occurring within the Modbus system. One common cause is an unrealistic poll rate set on a Modbus group. . Resolution If the poll rate on a Modbus group is set too fast for the server to handle—especially in large Modbus networks—this can trigger the "Attention" state. Recommended Action: Review the poll rate configured for the Modbus group. If it is set to a very low value (e.g., 1 second), increase it to a more realistic interval. For busy networks, a poll rate of 5 seconds or more is typically more achievable. Once the poll rate is adjusted to a manageable value, the Modbus status should return to "Online".

Warning Potential for Data Loss: The steps detailed in the resolution of this article may result in a loss of critical data if not performed properly. Before beginning these steps, make sure all important data is backed up in the event of data loss. If you are unsure or unfamiliar with any complex steps detailed in this article, please contact Product Support Services for assistance. Issue The size of ContinuumDB has reached or is near the 2Gb limit imposed by MSDE. The size of ContinuumDB has reached or is near the 4Gb limit imposed by SQL Express. Environment MSDE SQL Express Continuum Stand Alone. Cause The database is well over the SQL size limit (2Gb for MSDE, 4Gb for SQL Express) Since the database size has already exceeded SQL's limitations it is not possible to use the deletion query statement to truncate the log tables.  This is because SQL will attempt to guard against data loss during the deletion process by making a copy of the tables contents before deletion occurs. Before a single row has been deleted from the table the size of the database will actually grow larger, exacerbating the problem. Resolution You must delete the contents of each log table entirely (Alarm, event, error, log) using the TRUNCATE statement. This will delete the contents of these tables entirely without first storing them the data. Please note, you must... Make arrangements with the customer so that they can archive any log and event data they wish to retain. Backup the database before using the TRUNCATE TABLE command. Here is the syntax for the TRUNCATE statements TRUNCATE TABLE ContinuumDB.dbo.AlarmEvent TRUNCATE TABLE ContinuumDB.dbo.AccessEvent TRUNCATE TABLE ContinuumDB.dbo.ActivityEvent TRUNCATE TABLE ContinuumDB.dbo.ErrorEvent TRUNCATE TABLE ContinuumDB.dbo.ExtendedLog Once the table have been truncated, Right click on ContinuumDB and select Shrink > Database. Once the database size has been reduced, check the size and retest. Please note that once the database size has exceeded SQL's limit it is likely that the database has been damaged.  This process may or may not correct damage that has occurred to the database.  

Issue Provides additional setup information for the N4 ASD (tacAsd) driver implementation. Product Line TAC IA Series Environment I/A Series N4 Jace 8000/9000 I/A Series N4 ASD driver Cause Configuration Guidelines Resolution N4 ASD (tacAsd) driver setup basics ...  Monitor properties Ping Enabled = true Ping Frequency = 5m change to 1m Alarm On Failure = true Startup Alarm Delay = 5m The baud rate sync properties are the mechanism that synchronizes the baud rates for the ASD bus. Upon reset, ASD devices initialize to 1200 baud, and it is this mechanism that locates those devices and sets the baud rate to 19.2K or 9.6K (if PEMs are used on the bus). These values are part of the ASD specification and should not be changed. Last Time Sync is the last time a successful sync occurred Baud Rate Sync Time = 1m Baud Rate Set Timeout = 0.2s Baud Rate Set Repeat = 1 Baud Rate Change Millis = 800 Total Devices indicates the total number of devices active. Total Down indicates the total number of down devices. Scan Time indicates the total time to poll through the list of devices. The ASD communications protocol is designed to exchange most data between the host (Jace) and device with one transaction. This means that typical data (e.g. EMS, etc.) is written to the device as part of the request and response data (e.g. Window, Output, Diagnostics, etc.) in one transaction. In this case, the scan time is 6.9 seconds for 33 devices or approximately 4.5 devices per second. Tuning Policies (Default Policy) Min Write Time = 0 Max Write Time = 0 Write On Start = false Write On Up = false Write On Enabled = false Stale Time = 0 Note: The stale time actually involves the proxy point objects. The polling mechanism still continues and the internal point information is still updated. The driver does not implement the interaction between the point updates and proxy point stale. The values should be left at their default settings. Poll Scheduler Poll Enabled = true Fast Rate = 5s (defaults to 1s) Normal Rate = 10s (defaults to 5s) Slow Rate = 30s (defaults to 30s) Typically set the Normal Rate based upon the rules specified in the R2 documentation or (Normal Rate seconds = Number of devices / 3.5). For example, a network with 33 devices would be set to (33 / 3.5 = 10 seconds). As indicated earlier, the driver inherits the basic driver properties and mechanisms. N4 implements a complex poll scheduling mechanism that automatically determines and continually adjusts the poll list to achieve the most efficient polling. Retry Count The retry is only used in the event that a response from an ASD device is not received.  This value defaults to 1 and can be increased if needed to a maximum of 3 if devices are unable to respond to the initial message and one subsequent retry,  Devices that do not respond to the initial message may indicate a potential issue with the ASD bus. Response Timeout This is the amount of time the driver will wait for a response to a request before retrying the request.  This value defaults to 2 seconds and should not be changed. Inter Message Delay This value defaults to 0 seconds.  Change to an initial value of 0.020 seconds.  This may need to be increased (typically 0.050 to 0.075 seconds) if the ASD bus includes one or more ASD bus repeaters (RPTR-WIRE or RPTR-FIBER).

Issue There is a need to identify the Ports, URLs and Static IPs which must be open through customer's firewall for EcoStruxure Building Activate Flex Server and Partner Portal Product Line EcoStruxure Building Activate Environment EcoStruxure Building Activate Flex Server EcoStruxure Building Activate Partner Portal Cause Ports, URLs and Static IPs list needed to create firewall exceptions for EcoStruxure Building Activate Flex Server and Partner Portal in order to keep them functioning correctly. Resolution Below are the list of ports, URLs and static IPs that must be open through a site's firewall/network: URL Port Protocol Usage https://sentry.zenatix.com 443 TCP Allows the gateway to upload error logs and diagnostics. https://router.zenatix.com 443 TCP Allows the gateway to download Linux & Python updates from the Zenatix Server. Regularly polls the Zenatix Server to check internet connectivity. https://timesync.zenatix.com 9090 TCP Time server allows the gateway system & gateway clock to remain synchronized with Zenatix Server. https://gitlab.zenatix.com 443 TCP Used for troubleshooting to update the gateway codebase from the Zenatix Server. https://telemetry.zenatix.com 443 TCP Used for sending IoT device data and gateway health data to the Zenatix Server. https://emqx.zenatix.com 8883 TCP Used for communication between gateways and Zenatix cloud services for getting configuration or alarms from Zenatix Server to gateway and vice versa. 54.169.200.193 1194 UDP Allows Zenatix to remotely access and do API calls to the gateway through OpenVPN. https://mender.zenatix.com 443 TCP Used to download firmware updates to gateway from Zenatix Server.   Note: For the list of URLs to be whitelisted for the Global Portal, please refer to Required list of URLs/Ports to be whitelisted under firewall/network for EcoStruxure Building Activate (Global Portal).

Issue When troubleshooting server issues, it can be helpful to look at the logs that are recorded within the Automation Server. Product Line EcoStruxure Building Operation Environment Building Operation Automation Server  Building Operation Automation Server Premium Building Operation Automation Server Bundled Cause Within the Automation Server logs are many records that are logged as a part of normal operations and unexpected events. Resolution Automation Server: Automation Server error logs can be retrieved using Workstation, Device Administrator, or WebStation. Device Administrator can be used in case of crash information is required, ex. dump files, or if the Automation Server is not accessible via WebStation or WorkStation. Workstation: Connect to EBO system with EBO WorkStation. Select the target Server  Expand the System folder Expand the Modules folder Expand the Trace folder and see Trace Settings For EBO 3.1 or higher, Double-click both Trace Log and System Log to open separately  For EBO 3.0 and lower, including SBO 1.x Right-click in Trace Settings Select Trace Settings in the menu Select Get System Log Repeat to select Get Trace Log  Device Administrator: Follow this WebHelp article: Getting Automation Server Debug Information If requested to retrieve a core dump, use this method to retrieve the Device Administrator Debug Information zip file. Then perform the following to make sure the zip file contains a core dump with a relevant timestamp for the event being investigated. Open Zip Open the folder containing the server name and IP address Open Server folder One should see file(s) with filename in this format core_dump_<Serial Number>_nsp_servers_<Timestamp>.tgz WebStation: EBO 4.0 (2022) and higher NOTE: You may have to enter Private Browsing mode to disable extensions, as you may see a blank page when viewing logs. Ensure credentials used are for a local 'admin' user or have access to the ~/System folder of the EBO Server you are connected. Click the 3-bar menu to navigate Select System, then Modules, then Trace One will see System Log and Trace Log in the menu, and clicking on System Log or Trace Log will open them in a new tab. NOTE: Please be patient as it may take some time to transfer the file. Once you see text in the tab, right-click on a blank area and select Save Page As... (Firefox) or Save As... (Chromium-based browser). It should recommend saving as SystemLog.txt or TraceLog.txt automatically; however, to be helpful, please add the EBO Server Name and Date to the filename. EBO 3.2 and earlier See the Webhelp Topic on collecting these logs from Automation Servers: Viewing and Downloading Automation Server Log Files. This process is now similar to that described above for WorkStation.   Credentials used to log in must be a member of a group that allows the policy of Web Configuration: Allow members to access Automation Server Web Configuration. Launch a web browser that is compatible with the installed EBO version as mentioned Webstation Specification Sheet. Type the IP address of the automation server to open the Webstation. Log into the Automation Server.                   Once logged into the Automation server, go to the Settings menu in the top right corner and click on Device Configuration. Click on the Server Log tab to view the automation server's log files. To save a copy of the log to your PC, click on the Get all log files link. The log files are compressed into a zip file and exported to downloads folder. Enterprise Server and Enterprise Central: For more information, check this article: Error logs from the Enterprise Server and Enterprise Central - Communities  

Issue There is a need to identify the Ports and URLs which must be open through the customer's firewall and network security for EcoStruxure Building Activate Product Line EcoStruxure Building Activate Environment EcoStruxure Building Activate Flex Server EcoStruxure Building Activate Partner Portal Cause To ensure the Flex Server operates correctly, specific URLs must be whitelisted within the customer's firewall and network security settings. Resolution Below is the list of URLs which must be open through a site's firewall/network: Domain Name Protocol Description telemetry.ecostruxure-buildingactivate. se.app HTTPS (TCP port 443) Used for sending IoT Sensor Data streams. mender.ecostruxure-buildingactivate. se.app HTTPS (TCP port 443) Used to download firmware update. emqx.ecostruxure-buildingactivate. se.app HTTPS (TCP port 443) Used for communication of Flex-Server with Schneider Electric cloud services such as configuration, data, or alarms. openvpn.ecostruxure-buildingactivate. se.app HTTPS (TCP port 443) Allows Schneider Electric to remotely access the Flex- Server through VPN. timesync.ecostruxure-buildingactivate. se.app HTTPS (TCP port 443) Time server allows the Flex- Server clock to remain synchronized. router.ecostruxure-buildingactivate. se.app HTTPS (TCP port 443) Allows the Flex-Server to download linux updates   Note: For the list of URLs to be whitelisted for the India Portal, please refer to Required list of URLs/Ports to be whitelisted under firewall/network for EcoStruxure Building Activate (India Only) 

Warning Hazard of Electric Shock: Remove all power from all devices before removing any covers or doors of the system. Disconnect power at the device and at the power source. Electrostatic Discharge Required: Always discharge static electricity from your person by touching metal prior to handling any hardware. Failure to do so may result in damage to devices. Caution While removing gateway cover: Open the gateway screws and delicately remove the top cover. Take extra care during this step, as the top cover is connected to the antenna cable via a thin wire. After opening the top cover, you will be able to see the top view of the board, please insert the active SIM card in the designated slot. Once the Sim Card is properly inserted, fix the screws back and ensure that the 4G&Wi-Fi Antenna is attached properly. If the antenna cable remains disconnected from the board, then the GSM will not work.   Issue If the flex server is not able to connect to the internet via the SIM card, Ethernet, or Wi-Fi, or is in a hanged state, a phone be used by the Flex server/Gateway for troubleshooting connectivity. Product Line EcoStruxure Building Activate Environment EcoStruxure Building Activate Flex Server EcoStruxure Building Activate Partner Portal Cause USB Tethering may be required at times during provisioning or troubleshooting when the flex server is not able to connect to the internet via the SIM card, Ethernet, or Wi-Fi, or is in a hanged state. Resolution If a a smartphone with data connectivity and a USB cable is available, USB tethering can be used to get a Flex server/Gateway online when a Wi-Fi or Ethernet connection is not established. It essentially turns a smartphone into an external modem for your Flex server/Gateway. This guide will cover both Android and iPhone, since the steps vary slightly. What you'll need: Your smartphone (Android or iPhone) with an active mobile data plan. A USB cable that connects the phone to a computer (the same one you use for charging usually works). A Flex server/Gateway. Part 1: General Preparations (For Both Android and iPhone) Ensure Mobile Data is ON: On the phone, go to quick settings (swipe down from the top of the screen) and make sure "Mobile Data" or "Cellular Data" is turned on. Alternatively, go to Settings > Network & internet (Android) or Settings > Cellular (iPhone) and confirm it's enabled. Important: If the phone has a limited data plan, be mindful of data usage while tethering, as Flex server applications can consume a lot more data than phone apps. Charge the Phone (or Keep it Plugged In): Tethering can drain the phone's battery quickly. It's best to have the phone charged sufficiently or keep it plugged into a power source while tethering. Find Your USB Cable: Make sure you have a working USB cable that connects the phone to the Flex server/Gateway. Ensure the USB cable used is a Data cable and not a charging cable. Part 2: USB Tethering with an Android Phone Video link for Demo (The exact wording of menus might vary slightly depending on the Android version and phone manufacturer, but the general path remains the same.) Connect the Phone to the Flex server/Gateway: Plug one end of the USB cable into the Android phone. Plug the other end of the USB cable into an available USB port on the Flex server/Gateway. Note: there are 2 USB ports in the Flex Server/Gateway you can connect to either port to establish USB Tethering. The Flex server/Gateway prioritizes usb0 (the top USB) interface by default for troubleshooting purpose. USB Ports   Allow USB Debugging (If Prompted): When you connect the phone, you might see a pop-up on your phone asking for "Allow USB debugging?" or similar. If you do, tap "Allow" or "OK." Access the Phone's Settings: Open the Settings app on the Android phone. Navigate to Network & Internet Settings: Look for an option like "Network & internet", "Connections", or "Wireless & networks." Tap on it. Find Hotspot & Tethering: Within the Network settings, you should see an option called "Hotspot & tethering" or just "Tethering." Tap on it. Enable USB Tethering: Inside the Hotspot & tethering menu, you will see a toggle switch labeled "USB tethering." Tap this switch to turn it ON. The switch should change color (e.g., green or blue) to indicate it's active. Check Your Flex server/Gateway is online from the Dashboard. The Gateway Status LED will be Solid Green.   LED pattern   To Disable USB Tethering (Android). Go back to Settings > Network & internet > Hotspot & tethering on the phone and turn OFF the "USB tethering" switch. Alternatively, unplug the USB cable from the phone or Flex server/Gateway. Part 3: USB Tethering with an iPhone Video link for Demo (The exact wording of menus might vary slightly depending on your iOS version.) Connect Your iPhone to Your Flex server/Gateway: Plug one end of the Lightning (or USB-C on newer iPhones) cable into the iPhone. Plug the other end of the USB cable into an available USB port on your Flex server/Gateway. Note: there are 2 USB ports in the Flex Server/Gateway you can connect to either port to establish USB Tethering. The Flex server/Gateway prioritizes usb0 (the top USB) interface by default for troubleshooting purpose.  USB Port for tethering   Trust This Device? (If Prompted): The first time you connect the iPhone to a new Flex server/Gateway, the iPhone will ask, "Trust This Device?". Tap "Trust" on the iPhone. You may need to enter the iPhone passcode to confirm. Access iPhone Settings: Open the Settings app on the iPhone. Navigate to Personal Hotspot: Scroll down and tap on "Personal Hotspot." Enable Personal Hotspot: You will see a toggle switch labelled "Allow Others to Join." Tap this switch to turn it ON. It will turn green to indicate it is ON. Important: You might see options for Wi-Fi Password or "USB Only." For USB tethering, you don't necessarily need to worry about the Wi-Fi password unless you also plan to use Wi-Fi hotspot. Check the Flex server/Gateway is online. The Gateway Status LED will be Solid Green. Gateway Status LED   Blink pattern for Internet connection   To Disable USB Tethering (iPhone): Go back to Settings > Personal Hotspot on the iPhone and turn OFF the "Allow Others to Join" switch. Alternatively, you can just unplug the USB cable from the iPhone or Flex server/Gateway Troubleshooting Tips: Restart everything: If it's not working, try restarting the phone and then the computer. Try a different USB port: Sometimes, a particular USB port on your Flex server/Gateway might be faulty. Try a different one. Try a different USB cable: Not all USB cables are created equal. Some are only for charging and don't support data transfer. Try a different cable if you have one. Disable VPN on the phone: If you're using a VPN on the phone, try disabling it before tethering, as it can sometimes interfere. Check data plan: Ensure you haven't run out of mobile data. Contact the mobile carrier: Some mobile carriers have restrictions on tethering or require a specific plan. If you've tried everything else, check with your carrier. By following these steps, you should be able to successfully set up USB tethering and get the Flex server/Gateway online using a smartphone's internet connection!

Warning Hazard of Electric Shock: Remove all power from all devices before removing any covers or doors of the system. Disconnect power at the device and at the power source. Electrostatic Discharge Required: Always discharge static electricity from your person by touching metal prior to handling any hardware. Failure to do so may result in damage to devices. Potential for Data Loss: The steps detailed in the resolution of this article may result in a loss of critical data if not performed properly. Before beginning these steps, make sure all important data is backed up in the event of data loss. If you are unsure or unfamiliar with any complex steps detailed in this article, please contact Product Support for assistance. Issue The internet is not working at the site, so it's necessary to verify that all antenna connections are secure and the SIM card is correctly placed. Product Line EcoStruxure Building Activate Environment EcoStruxure Building Activate Flex Server EcoStruxure Building Activate Partner Portal Cause The Flex Server powers up successfully at the site, but the internet connection fails. This issue might arise if the antenna or SIM card was displaced, disconnected, or damaged during transit due to mishandling. Therefore, it's essential to verify that all connections are secure. However, the technician or engineer on-site may not be familiar with the correct slots. Resolution Carefully open the Flex Server top cover. The internal layout will appear as shown in 'Image 01' below: Image 01 Image 02 Identify the slots as follows: Slot 1: Indicates the SIM card slot. Slot 2: Located on the GSM Module marked as 'MAIN', indicates the Cellular antenna slot. Slot 3: Located on the Wi-Fi module marked as 'ANT0 WiFi', indicates the Wi-Fi antenna slot. Verify all connections and ensure they are secure. Carefully close the Flex Server cover.

Issue Which printers, signature pads, and capture devices are supported with the badging editor? Product Line Andover Continuum Environment Epi-Suite Epi-Builder Cause Determine which ImageWare systems (Epi-Suite or Epi-Builder) to use with the Continuum system. Resolution Continuum OEM's third-party badging software from Image Ware Systems are Epi-Suite and Epi-Builder. If your using Continuum version 1.8 and newer versions, Continuum uses the Epi-Builder version. For versions of Continuum 1.74 and prior, they use Epi-Suite as the badging editor. The hardware compatibility list for the Image Ware products can be found on their website. https://www.tech5-us.ai/epi-suite-support/    Once on their website select Support/Customer Service/ either IWS Epi-Builder or IWS Epi-Suite. The page that is displayed after these selections you'll notice a link on the left-hand side of the page for Compatible Hardware. The lists for printers, capture devices, and signature pad readers can be displayed when clicking on the links for each. The peripherals can be found at: https://www.tech5-us.ai/epi-compatible-hardware/