Building Automation Knowledge Base

Issue What are the email addresses used for I/A Series license requests? Product Line TAC IA Series Environment I/A series license Cause Request license to upgrade existing devices. Resolution All TIP and end customer WorkPlace Tech license requests and Niagara license requests are emailed to: bms.licensing@se.com

Issue SoapEwsRestProvider serves data sourced from any EWS Server using the standard EWS SOAP protocol. The architecture for the SmartConnector REST Extensions integrates Swagger to provide a rich self-documenting API. Below errors indicate configuration issues. The User Name or Password were incorrect. "Message": "Authorization has been denied for this request. " "Message": "The HTTP request was forbidden with client authentication scheme 'Digest' " Product Line EcoStruxure Building Operation. Environment Building Operation Automation Server Building Operation Automation Server Premium Building Operation Automation Server Bundled Building Operation Enterprise Server Building Operation Enterprise Central Cause Smart Connecter or EBO Incorrect configuration. Resolution Make sure that SboEwsRestProvider is started and has a correct port that is not used by any other Smart Connector data provider or other application.   Make sure that EWS server address has the following format: HTTP: http://ipAddress:port/EcoStruxure/DataExchange HTTPS: https://ipAddress:port/EcoStruxure/DataExchange For ES/EC, check software administrator to make sure there is no port conflict: Software Administrator shows red outline (box) on the Communication Ports (HTTP / HTTPS) - Communities (se.com) In EBO, make sure EWS server is enabled: Enabling the EcoStruxure Web Service Server Check if username and password used for the SOAP provide has correct permissions and can be used to login to EBO server. If the user is not located in the default domain, make sure to add the domain name in the Username string, ex. "Domain/User". If HTTP protocol is used (not recommended), check the following: In EWS server configuration, make sure that "Enforce Secure Communication" to Disabled. In Security Manager, make sure that "Enable Incoming http communication" is enabled.

Issue VTR Valve Body requires replacement due to obsolescence. Product Line Field Devices Environment VTR VTRE MB MBF Cause Obsolescence of VTR Valve Body. Resolution VTR Valve Bodies are obsolete and have been for many years.  VTR Valve Bodies were available with either Flanged or Screwed connections.   REPLACEMENT OF VTR FLANGED CONNECTION VALVE BODY  A replacement for the VTR Flanged Valve Body (20-150mm only) may be selected from the VTRE range of flanged valve bodies, N.B. It should be noted that the VTRE Valve Body is rated PN6 whereas the VTR was rated PN10. The VTRE Flanged Valve Body may be operated by the EM9 Actuator. Alternatively the VTRE Flanged Valve Body may be operated by the M9B actuator. No Linkage Kit is required to mount the EM9 or M9B Actuator on the VTRE Flanged Valve Body. Alternatively a replacement for the VTR Flanged Valve Body (65-100mm only) may be selected from the MBF range of Flanged Valve Bodies. N.B. It should be noted that the MBF Valve Body is rated PN6 whereas the VTR was rated PN10. The MBF Flanged Valve Body may be operated by the MD20B series actuator. Alternatively the MBF Flanged Valve Body may be operated by the MD20A actuator. A Linkage Kit (914-1070-000) will also be required.   REPLACEMENT OF VTR SCREWED CONNECTION VALVE BODY  A replacement for the VTR Screwed Valve Body (15-50mm) may be selected from the MB range of screwed valve bodies. The MB Screwed Valve Body may be operated by the MD10B series actuator. Alternatively the MB Screwed Valve Body may be operated by the MD10A actuator. A Linkage Kit (914-1071-000) will also be required.   The datasheets concerning all the above options are available for download.

  Issue Using active directory with Change Control  feature does not authenticate when signing  Product Line EcoStruxure Building Operation Environment Building Operation release 3.1 and above Building Operation Enterprise Central  Building Operation Enterprise Server Building Operation SmartX Controllers Cause The interaction of Active Directory and Change Control is not clearly defined in the documentation when both are in use.  Although Active Directory within Building Operation Domains can use both the Fully Qualified Domain Name (FQDN) and Netbios Windows Domain names it is recommended that only the Netbios Domain name be used if Change Control is implemented. Refer to EBO Known Issues & Solution topic  Change Control and Windows Active Directory not authenticating - Communities (se.com)  for updates.   Resolution When using Active Directory with Change Control only add the Windows Netbios name to the Building Operation Windows domain name entry:   Using the Full DNS Domain Name (examples include - apa.gad.schneider-electric.com ; pss.apa.local etc.) although these will allow user accounts to log on to servers it currently does not work when used to authenticate change control.    The easiest way to identify which domain name to use is to open WorkStation and refer to the name shown next to:  Log on as:    Secondly when authenticating change control actions with active directory user accounts, irrespective of the Default Building Operation Domain selected, the user account name must be prefixed with the Windows Domain Name 

Issue Various changes to the PC operating system can alter the IA Series software host ID causing the license to be invalid. When this occurs the window below will be displayed providing the new Host ID read from the PC. Product Line TAC IA Series Environment I/A Series Enterprise Server I/A Series Workbench I/A Series SoftJace platforms    Cause Upgrading the Operating System (Windows, Linux, etc.) always changes the Host ID.  Making other changes to a Niagara host platform may also change the Host ID.  These are the types of changes that can alter the Host ID: upgrading from Windows 7 to Windows 8 upgrading from Windows 8.0 to Windows 8.1 upgrading from Windows 7 or 8 to Windows 10 installing the 2 August 2016 anniversary update to Windows 10 upgrading from RHEL5 to RHEL6 Upgrade from RHEL6 to RHEL7 will change your Host ID. Installing certain Microsoft Windows updates (patches/fixes) may also cause the Host ID to change. Resolution Email the hostID from the current license or a copy of the current license as well as the new hostID provided in the "Request License window" to Schneider Electric Customer Care (Email Information) and request a license replacement.

  Issue TAC Xenta devices suddenly indicate that they Needs commissioning. Product Line EcoStruxure Building Operation. Environment • Building Operation Workstation • Xenta 401 • Xenta 301 • Xenta 281 Cause The flag "Needs commissioning" is suddenly set.     Resolution If the property "Needs commissioning" is set, something has changed in the settings. This could be Subnet/Node address in the Domain table, or a change in any LonWorks binding, that caused a change in the Selector, Address, and or Alias tables.   The property Needs commissioning may also be set after a TAC Vista upgrade (conversion) or similar situations.  

Issue After Sigma transition into EBO, upon alarm and alarm clear there is no requirement to acknowledge the alarm. In the Sigma Interface, the object alarm 'Type of Acknowledgement is set to 'No' and cannot be changed. Product Line Ecostruxure Building Operation, Satchwell Sigma Environment Building Operation Enterprise Server Satchwell Sigma Cause Alarm Priorities are incorrectly set in Sigma Alarm Manager. Resolution During the Data Import into EBO, the settings of the Sigma Alarm Manager is checked and the alarm acknowledgement type is set to a specific type. If no alarm priorities are set for acknowledgement in Sigma, then this is repeated in EBO.    To change to 'Single' so that alarms and alarm clears are able to be acknowledged, in Sigma: Open the Alarm Manager and go to the menu options: Configure > Acknowledgement Groups   Redistribute the alarm priorities into the the different acknowledgement groups as per the site requirement. The image below shows the default view on a new install of Sigma.   Redo the Data Import, the 'Type of Acknowledgement' is now seen to be set to 'Single'. However, If it is now showing 'Extended', then the KB article Type of Acknowledgement set to 'Extended' on Sigma Interface object alarm will explain how to change this.

Issue After a Sigma transition into EBO, alarm clears are requiring acknowledgements. In the Sigma Interface, the object alarm and hardware alarm 'Type of Acknowledgement are set to 'Extended' and cannot be changed to 'Single' Product Line EcoStruxure Building Operation, Satchwell Sigma Environment Building Operation Enterprise Server Satchwell Sigma Cause Alarm Clear Controls are incorrectly set in Sigma Alarm Manager. Resolution During the Data Import into EBO, the settings of the Sigma Alarm Manager is checked and the alarm clear acknowledgement type is set to a specific type. If acknowledgement on alarm clears is no longer required in EBO then it will need to be changed on the Sigma server,   To change to 'Single' so that alarms only are able to be acknowledged, in Sigma: Open the Alarm Manager and go to the menu options: Configure > Alarm Controls.   Uncheck the 'Alarm Clears Acknowledgeable' box.   Redo the Data Import, the 'Type of Acknowledgement' is now seen to be set to 'Single'. However, If it is now showing 'No', then the KB article Type of Acknowledgement set to 'No' on Sigma Interface object alarm will explain how to change this.

Issue Windows update KB4519976 causes all Xenta servers to go offline in TAC Vista every few minutes. Product Line TAC Vista Environment TAC Vista Server Microsoft Windows 7 or Microsoft Windows 2008 Server Xenta 500 Xenta 700 Xenta 900 Cause After the Windows update, KB4519976 is installed, the SSL handshake behavior is changed. This affects TAC Vista and its communication with the TAC Xenta server. Resolution There are two workarounds available at the moment. Solution 1: Uninstall Windows update KB4519976 Solution 2: Turn off SSL for the communication between TAC Vista and the TAC Xenta server using the registry setting shown below. This means that only the login will be encrypted when TAC Vista is communicating with the TAC Xenta servers. Run the utility TacosTweak.exe, located in the program folder where TAC Vista is installed. Set "Only use SSL for login to TAC Xenta Servers(5xx/7xx)" to 1 to run the communication between TAC Vista and TAC Xenta servers without SSL. Restart the TAC Vista server for the changes to take effect.

Issue The specifications and setup details of the EH series humidity sensors. Product Line Andover Continuum, EcoStruxure Building Operation, Field Devices, TAC IA Series, TAC INET, TAC Vista Environment Humidity Sensor Cause The EH Series Room, Duct and Outside humidity sensors are a universal Relative Humidity transmitter that can be powered with either a +15 to 36 Vdc or 24 Vac supply voltage. The EH series sensors are designed with a field selectable 4-20 mA, 0-5 Vdc, or 0-10 Vdc output signal that is equivalent to 0 to 100% RH. The EH Series is used in building automation system, humidity chambers, and OEM applications and is compatible with Vista, Continuum, I/Net, I/A, and SmartStruxure systems. Resolution EH Series Humidity Sensors Click the below links to look at the documentation for these sensors including the dip switch settings. EH Series Humidity Sensor Data Sheet EH Series Humidity Sensor Installation and Operation Instructions Old EH Series Humidity Model For information on the older style of dip switches (models with two separate sets of dip switches), see the document below. Old EH Series Humidity Sensor Installation and Operation Instructions

Issue Schindler have recently released version 1.3.370.1 of their Schindler PORT elevator system software. Product Line Security Expert Environment Security Expert SP-C Schindler PORT elevator system version 1.3.370.1 Cause Schindler have released an updated version of their Schindler PORT elevator system version 1.3.370.1 Resolution The SDK for Schindler PORT elevator system version 1.3.370.1 has no major changes when compared to the existing tested and supported version 1.3.369.1. So while it is 'likely' that this latter version will operate correctly, at this present time it is an untested and unqualified version for this integration. Please see AN 196 Security Expert - Schindler HLI - Integration Guide for more details of the integration.

Issue There is a compatibility issue between Revision 2 MNL controllers and S-Link sensors. This incompatibility is noticed when a later production S-Link sensor is connected to an older Revision 2 controller. When the sensor is connected to the controller, 88.8 appears on the sensor’s display window along with all of the other LCD icons. The display never recovers from this mode, which makes the sensor non-functional. Product Line TAC IA Series Environment MN-Sx sensors MNL-10Rx1 and MNL-20Rx1, where x denotes profile type (F, H, R) MNL-V1RV1, MNL-V2RV1, MNL-V3RV1 Cause New MN-Sx production S-Link sensor firmware is not compatible with older Revision 2 MNL controllers. Resolution Newer model S-Link sensors have been released to address this issue. The new part numbers are MN-S1-2, MN-S2-2, MN-S3-2, MN-S4-2, and MN-S5-2. The MN-Sx-2 model line was designed and verified to work with older Revision 2 controllers.  Reference TPA-RKFD-09-0028-00 for more details. Please note that the new MN-Sx-2 S-Link sensors are only for use with older Revision 2 controllers.

Issue SBO WebStation has stopped loading with an ERR_SSL_VERSION_OR_CIPHER_MISMATCH error (Chrome & Edge Browsers)   or an SSL_ERROR_UNSUPPORTED_VERSION (Firefox browser)   Product Line EcoStruxure Building Operation Environment Building Operation WebStation Chromium release 91 and above Firefox version 78 and above Cause Chrome and Edge browsers In Chromium release 91 an alert was shown on the browser regarding the security of unsecured connections. In Chromium 98 support for TLS 1.0 and 1.1 was removed.   Firefox Browser Starting in Firefox version 78, the minimum TLS version allowed by default is TLS 1.2. The error page may also include a button, Enable TLS 1.0 and 1.1 that will allow you to override the minimum TLS requirement. Note: Mozilla plans to remove this option and permanently disable TLS 1.0 and 1.1 in a future version of Firefox. Resolution Modern browsers don't allow SSL versions lower than TLS 1.2 [1] [2]   The site can temporarily use a HTTP rather than HTTPS connection to bypass this issue, however, this is not advisable on a permanent basis for Cyber Security reasons.   Using an older browser like Internet Explorer can also be used as a workaround since this is no longer being updated and won't have the latest Cyber Security policies.   Ideally, the site will need to upgrade to SBO 1.9 or above to allow TLS1.2 support.   [1] https://chromeenterprise.google/policies/?policy=SSLVersionMin [2] https://support.mozilla.org/en-US/kb/secure-connection-failed-firefox-did-not-connect

Issue EP series information not available in documentation Product Line Field Devices Environment EP Series Pressure Sensor Cause Required information for planning installation. Resolution The EP 3x series consumes maximum 20mA input power as determined in loop powered mode (4-20mA).  When in three-wire voltage output mode, up to 2 mA of additional current may be drawn from the load. Further information is available on the Schneider Electric Exchange - EP Series Pressure Sensors.

Issue Data not passing from Enterprise Server to Reports Server after upgrading to 1.6 Reports folder does not appear on new 1.6 Reports installations Logon failed at attempt no. XX User account has been temporarily disabled. Contact your administrator. Product Line EcoStruxure Building Operation Environment Building Operation WebReports 1.6 and above Cause New features require additional configuration to allow Reports to function. Specifically, the Reports installation requires that the SystemReportsService user account be enabled before installation.  If this is not done, the steps below must be taken.   For Issue #3: If the user account used to access WebReports is changed through WorkStation, WebReports is still using the previous account password to access the Enterprise Server, this will lock the user account out and if used to log in to WorkStation will indicate that the account is disabled To verify that this is what is causing the lockout, open the Report Agent log StruxureWareReportingAgentLog and check for Logon Failed at attempt xx Reason: User account temporarily disabled.... error is shown. The default path for this log file is: C:\Program Files (x86)\Schneider Electric (StruxureWare)EcoStruxure\Building Operation Resolution During the installation of WebReports, you will see the popup message below. In order for the installation to work correctly, the SystemReportsService account must be changed to enabled before clicking OK. Ensure that SystemReportsService user account is enabled in the Enterprise Server before you proceed with the installation process further. To correct this error after installation: If running stop the Repot Agent Service and wait 1 minute before proceeding Log into Workstation using the admin account Modify the user "SystemReportsService" (or user account used) that is part of the Local domain Check/Change the property "Disabled" is set to "False Change/verify the password Close WorkStation On the Report Server open the program "Building Operation WebReports Administrator" Enter the newly created password for the SystemReportsService (or account used) Click Apply - a successful update should be reported. Click Save Close Building Operation WebReports Administrator Restart the Reporting Agent Service. Verify logins now work. For additional Authentication issues please see the online help topic: Authentication Failed (se.com)

Issue What port is used for the I/A Series G3/N4 LON and Serial tunnel clients and can it be changed? Product Line TAC IA Series Environment I/A Series G3/N4 Enterprise Server I/A Series G3 ENC I/A Series Jace 8000 Cause Requires port change due to routing or firewall conditions. Resolution By default, the G3/N4 Tunnel Service utilizes TCP port 9973. The port used for tunneling can be configured by modifying the Server Port within the tunnel service properties. Example: Configuring the Lon tunnel server In the palette sidebar, open the lontunnel palette. Open the ENC/JACE station and expand its Services folder. If no TunnelService exists, paste one from the palette into the Services folder. If a TunnelService does exist, go to the next step. Note: Only one TunnelService is needed in a station's services, and it can hold multiple tunnel components (both LonTunnel and (serialTunnel). The TunnelService in the lontunnel module is identical to the TunnelService in the (serial) tunnel module. From the palette, paste a LonTunnel under the station's TunnelService The station should now have a TunnelService and a child LonTunnel component. Configure the properties and modify the TunnelService server port if required. Note: If the ENC/JACE has multiple LON ports (and corresponding LonNetworks), the same number of LonTunnel components can be copied under the TunnelService. Each LonTunnel component can then be associated with a particular LonNetwork (by its LONn device name). For any station user that needs to Lon tunnel, make sure the user has admin write permissions for the LonTunnel(s). Example: Configuring the serial tunnel server In the palette sidebar, open the tunnel palette. Open the ENC/JACE station and expand its Services folder. If no TunnelService exists, paste one from the palette into the Services folder. If a TunnelService does exist, go to the next step. Note: Only one TunnelService is needed in a station's services, and it can hold multiple tunnel components (both LonTunnel and (serialTunnel). The TunnelService in the lontunnel module is identical to the TunnelService in the (serial) tunnel module. From the palette, paste a SerialTunnel under the station's TunnelService. The station should now have a TunnelService and a child SerialTunnel component. In the SerialTunnel's property sheet, expand the "Serial Port Config container." Enter the COMn "Port Name" used by the target driver network, and specify other parameters as defined in the network's configuration. If the ENC/JACE has multiple serial-type driver networks (and corresponding COM ports), the same number of SerialTunnel components can be copied under the TunnelService. Each SerialTunnel component can be associated with a particular network (by its COMn port name) and set the other parameters accordingly. For any station user that needs to the serial tunnel, make sure the user has admin write permissions for the SerialTunnel(s).

Issue Platform connection using TLS fails. Standard HTTP connection of port 3011 successful. Product Line TAC IA Series. Environment I/A Series Enterprise Server Cause TLS platform connection fails immediately and throws an exception in Workbench. Note that the Niagara Daemon is running and a non-TLS HTTP connection is successful. No station is currently running on the PC. All stations are stopped.   Example exception- SEVERE [08:45:58 02-Sep-20 CDT][wb.shell] Error connecting to platform daemon at localhost: GET /platformInfo javax.baja.naming.UnresolvedException: platformssl: Resolution A possible cause is a zero-byte file size bog file in the Daemon Home 'stations' folder. Check all of the station folders in Daemon Home, searching for any bog file that is zero bytes in size. Look for 'Config.bog.lock' files as one could be orphaned when a station running in the Niagara daemon were to stop unexpectedly, such as the system reboots suddenly or the PC is powered down. Remove all files that are zero bytes in size. Remove any 'Config.bog.lock' files. Test the TLS connection for a successful connection.

Issue How to create an offline alarm if the AS-P or RP-C loses the connection to a Zigbee sensor (SED-MTH-G-5045, SED-WDC-G-5045, and SED-WLS-G-5045) connected to AS-P or RP-C. Product Line EcoStruxure Building Operation Environment Building Operation Automation Server Premium (AS-P) Building Operation Room Controller (RP-C) Greenpower sensors SED-CO2-G-5045 and SED-TRH-G-5045 non-Greenpower sensors SED-MTH-G-5045, SED-WDC-G-5045, SED-WLS-G-5045 Cause The Zigbee device will communicate the measured data with a time interval, if EBO doesn't hear the data it should mark the device as offline and generate an offline alarm Resolution In general, the RP-C or AS-P will listen for communication from the Zigbee device and if it doesn’t hear any communication for a certain time period, the Offline timeout (which can be specified in the properties for the Zigbee device in EBO) will set the device offline and an offline alarm will be displayed in the alarm list. How often the Zigbee device will communicate the measured data depends on the Zigbee device. It is possible to see and configure how often it should send the data in EBO but depending on the device it can be found in different places in EBO. For the Greenpower sensors SED-CO2-G-5045 and SED-TRH-G-5045 it is found here: The default value can be found in the specification sheet for the sensor. And for the non-Greenpower sensors SED-MTH-G-5045, SED-WDC-G-5045, SED-WLS-G-5045 It can be found here:   It is possible to change the interval for how often the sensor will send the data but this may cause the battery in the sensor to drain faster. It is recommended that the Offline timeout is set to more than twice the heartbeat interval from the sensor so that it will not be set as offline if only one message from the sensor is missed by the RP-C or AS-P.

Issue What is Alarm decoration in EBO (EcoStruxure Building Operation) and how is it set up? Product Line EcoStruxure Building Operation Environment Building Operation WorkStation Cause Alarm decoration is used when you wish to change the alarm configuration or appearance in the alarm list for a specific alarm or a group of alarms if it meets certain conditions specified when setting up the alarm decoration. If any alarm in the system meets the conditions specified when setting up the alarm decoration the alarm will be displayed in the alarm list as specified in the alarm decoration rule. Examples of alarm specifications that can be changed by an alarm decoration rule are: Alarm text message Alarm priority Auto hide Background color Resolution See the video below: The video will show how to: Create an Alarm decoration Set up an Alarm decoration filter with the conditions: -Alarm text: *offline* -Priority: 20 Set up Alarm decoration presentation with the specifications: -Priority: 300 -Auto hide: Yes After the Alarm decoration is set up any alarm in the system where "offline" is part of the alarm text and having priority 20 will be auto hidden and given the priority 300.  

Issue Niagara Runtime Environment (NRE) fails Console output when starting Workbench Product Line TAC IA Series Environment I/A Series N4 Workbench Cause An issue has occurred in the security of the user home for the installation of Niagara N4 Resolution If the Workbench fails to launch. Open the Console for the build you are trying to use by following the illustrated path and clicking the console.exe If the Console output is as shown under "Issue" above, follow the path shown below. Complete the instructions in the illustration below. Open the Workbench as you normally would.