Building Automation Knowledge Base

Issue In Physical Access Control lingo, the term Edge controller typically refers to a device that is installed at the door (or in close proximity to the door) and that has all of the components needed to fully control the door with only and IP connection running back for communications to the front end system. Typically Edge access controllers are PoE so that there is no need to provide a separate power feed to the device, they also provide power to all the components that comprise the door control (door lock, REX etc) Environment CyberStation CX9702 Cause Documentation Resolution Continuum does not have a physical access controller that can be considered an Edge access controller. The Continuum access controller that come closest is the CX9702, although it is NOT a PoE controller. Click HERE to see the specs of the CX9702.

Issue Understand methods for integrating Security Expert with Active Directory for creation and management of Operators and Users. Product Line EcoStruxure Security Expert Environment Security Expert Active Directory SX-AD-OPR SX-AD-USR SX-DB-SYNC Cause Security Expert Active Directory Integration provides synchronization and authentication for Active Directory users enabling organizations to leverage on the user management and security policies that Active Directory provides. This article looks at the details between each integration option. Resolution There are four options for Active Directory Integration. 1. Default Windows Authentication option. This allows for logging in to Security Expert with the Windows User account credentials which could include AD users if on a Domain. Operator object must be created in Security Expert and configuration of windows authentication option has some specific steps to be followed for it to work. Unable to login to Security Expert using Windows Authentication Remember to use syntax "<domain>\<username>" for the username when configuring the Operator for a Windows user ON a  Domain. Remember to use syntax "<computername>\<username>" for the username when configuring the Operator for a Windows user that is NOT on a Domain. No extra license is required for this. 2. SX-AD-OPR : License for adding Security Expert Operators from AD. Security Expert Operators will need to be added manually using the following steps: Navigate to Operators and click Add. Check the Windows Authentication box. Click the ellipsis adjacent to the User Name. Use the Active Directory Users window to search for the AD credentials you wish to use. Once the Operator has been added, you may check the Windows Authentication option when logging in. 3. SX-AD-USR : License for adding Security Expert Users from AD. This will allow an active directory domain windows group to be periodically polled for updates that will in turn update the Users in Security Expert. Individual options for importing users, disabling user if AD user is disabled, disabling user if AD user is deleted. Only user names are imported, other than this only action can be disabling of users in Security Expert. No other details can be updated or added. See application note AN-141 Security Expert LDAP User Import Configuration. 4. SX-DB-SYNC : Data Sync Service with Powershell script. Powershell script pulls user details out of AD and writes to a CSV file that the Data Sync Service then imports into Security Expert. Can perform more functions than SX-AD-USR as any attribute from AD users can be mapped to any attribute in Security Expert users. Will require use of powershell experience as the sample script will likely need to be tweaked. Here is a really good video Using Data Sync to Transfer Information from Active Directory to ProtegeGX on using Windows Active Directory as a source of Users/Operators for the Data Sync Service. It provides a good overview of how this is accomplished and how easy it can be to setup. See Security Expert Data Sync Service and sample Powershell script SXFetchADUsers.zip attached  

Issue A combined keypad reader works with a valid card swipe, but the keypad does not work. The keypad does not allow a valid pin to be entered to engage the door output even though the door, area and personnel objects are setup correctly. This issue could also happen with a keypad only, without the combination reader. Product Line Andover Continuum Environment Keypad Keypad/Reader Combination Cause A keypad or keypad/reader combination can be ordered with the keypad output set to work in a number of different modes.  Continuum requires the output mode to be ordered as follows: Buffer one key add compliment 8 bit message (Dorado) This is also known as 8 bit burst A keypad that has a different configuration than this will not work with Continuum   Resolution 1. Order a keypad or keypad/reader combination with the 8 bit burst output mode set 2. Contact the keypad manufacturer's technical support (Eg. HID), to see if they will send a Configuration Card that allows the output mode to be changed retrospectively in the field.

Issue When swiping / presenting a card to a Wiegand card reader in Continuum it does not open the door..  When opening a Listview of Events the log shows "Card Bad Parity" or it reads an incorrect card number using Custom Wiegand. Product Line Andover Continuum Environment CyberStation all versions, with any of the Access Controllers - ACX700, ACX780, ACX57xx, NetControllers with any of the AC1 module range. Cause This fault is caused by incorrect wiring to the reader or choice of a 3rd party reader that is not compatible with Continuum. Resolution When wiring between a controller and a Wiegand card reader, all wires must be connected straight through to the corresponding terminal. Data1 to Data1 Data0 to Data0, Gnd to Gnd ..............etc. See relevant controller installation guide for further details on reader wiring and cable types. On HID readers be sure to wire between the two Data 1 terminals and the two Data 0 terminals. Do not refer to the Clock and Data legend that is also on the controllers and many readers, as this is only used for ABA data connections. When using a separate Power supply for the reader, the 0V (Ground) terminal must still be connected back to the controller GND terminal to ensure both devices are working from a common ground potential. When testing out cards and readers always use a Listview showing a relevant Event log, as this will provide more information than the event view from the Door editor itself. To assist with troubleshooting data reads by the controller especially when using Custom Wiegand for non standard Continuum formats: Select only Custom Wiegand in the Door configuration. Rename the "AccessFormat" array if one has been created. Present a card to the reader. Check the Listview for Events as this will show the raw binary data string the controller is receiving. Compare raw binary data against the expected data from the reader used.

Issue Security Expert database size increasing rapidly and getting large. SecurityExpert Database size From the screen capture below, it can be seen that the Security Expert transaction log file SecurityExpert.ldf has increased to a large size. SecurityExpert database log file Product Line EcoStruxure Security Expert Environment Security Expert Microsoft SQL Server Cause The Recovery model of the Security Expert database is set to FULL and the database has not been maintained. When using the Full recovery model, regular backups of the transaction log should be performed to prevent the transaction log file size from growing out of proportion to the database size.   New user databases are created with the same recovery model as the model database. The default recovery model for the model database depends on the edition of SQL Server you have installed. Editions targeted at test and development environments (SQL Server Express) set the recovery model of the model database to SIMPLE. Other editions set the recovery model of the model database to FULL. Resolution For Security Expert, it is recommended that the Recovery model be set to the default of SIMPLE.   You can reduce the size of the logs and also prevent them from getting too large again by changing the recovery model of the database from FULL to SIMPLE. The databases are then shrunk to free up drive space.   Refer to the following steps: Take a backup of both the SecurityExpert and SecurityExpertEvents databases and store them in a safe location Change the Recovery Model of the SecurityExpert database from Full to Simple in SQL Server Management Studio. To do this, right click on the SecurityExpert database and go to its properties. Select 'Options'. Change the Recovery Model setting to Simple. Recovery Model Simple Right click on the SecurityExpert database and select Tasks > Shrink > Files Shrink In the Shrink File - Security Expert window, change the File type to Log. Shrink File Type Log Click OK Repeat steps 2-5 for the SecurityExpertEvents database   It is recommended that regular scheduled backups be configured when using the SIMPLE recovery model. In SIMPLE recovery mode, changes since the most recent backup are unprotected.

Issue Unable to successfully use Gmail SMTP server to send out alarms via email from I/A Series G3.  Various errors can be seen in the console output. Some of the errors are indicated below but they may not be limited to these. Error: BOutgoingAccount could not dequeue persistent email: 550 The address is not valid java.lang.Exception: Valid CryptoService not found Environment Enterprise Network Server / Enterprise Network Controller I/A Series G3 version 3.5 and above I/A Series G3 maintenance builds version 3.4.55 and above Cause Improper configuration of the EmailService's OutgoingAccount and missing CryptoService in the station. Resolution Procedure and properties settings required when using the Gmail SMTP Server: Add the EmailService and CryptoService to the station's Services folder. If emails are to be sent from an ENC, ensure that the email and crypto modules (and their dependencies) are installed into the ENC. Add the OutgoingAccount to the EmailService. In the OutgoingAccount properties, configure the properties indicated below. Leave other properties as their default settings. Hostname: smtp.gmail.com Port: 465 (this is the TCP port SMTP over SSL uses) Account: example@gmail.com Password: Your Gmail account password Enabled: true Use Ssl: true (Gmail requires SSL) Transport: SMTP Use Authentication: true (Gmail requires authentication when sending out emails) You can test the functionality by right-clicking on the EmailService and selecting 'Actions' > 'Send' to send out an email. If you are still having an issue with authentication, it may need to allow less secure apps to access your Gmail account. Refer to https://support.google.com/accounts/answer/6010255?hl=en for details.  Notes: CryptoService enables the SSL feature in the G3 station. The crypto module is included in the installation of I/A Series G3 version 3.6 but it was not included in earlier versions. You can download the crypto modules for earlier versions of G3 (crypto 3.4.64 / crypto 3.5.34) from The Exchange Download Center. Ensure that the station is licensed for crypto. You can look into your license file to check. Below is an example taken from a demo license. feature expiration="2012-03-31" name="crypto" parts="ENS-DEMO" ssl="true"

Issue Controller is unresponsive and does not respond to a hard reset or power cycle with the battery disconnected..  CPU light remains on constantly. Product Line Andover Continuum Environment InfinityController, b3 Controller NetController II, CX9680 ACX57 bCX Cause Controller stopped functioning after power cycled. Resolution Test controller with a known working PS power supply and/or test the supply voltage is correct If the controller still does not respond to a hard reset then return for repair. See the appropriate manual for reset instructions

Issue Where can I find information on LCX89x controllers. Environment LCX89x LCX890, LCX898 Cause While LCX89x controllers are being sold by Schneider Electric as of April 19, 2013, there is not a lot of information on the LCX line at the Extranet website. Resolution Series LCX 890 Infinet Controllers       Part Number Description     01-0008-036 LCX 890 Lighting Controller, 8 outputs w/RR9 relays     01-0008-037 LCX 890 Lighting Controller, 8 outputs no relays     01-0008-039 LCX 891 Lighting Controller, 16 outputs w/RR9 relays     01-0008-040 LCX 891 Lighting Controller, 16 outputs no relays     01-0008-042 LCX 892 Lighting Controller, 24 outputs w/RR9 relays     01-0008-034 LCX 892 Lighting Controller, 24 outputs no relays     01-0008-081 LCX 898 Lighting Controller, 48 outputs no relays     01-0008-083 LCX 898 Lighting Controller, 48 outputs w/RR9 relays   LCX890 Series Controller Installation Guide

Issue BACnet tuning policies improperly applied can cause BACnet network problems Product Line TAC IA Series Environment I/A Series G3 ENC I/A Series AX / N4 Jace Cause Configuration parameters in the BACnet tuning policies can initiate high polling rates, force high volumes of writes, reads, and apply confirmed COV to BACnet proxies in the Jace / ENC. Resolution The following video will help us, Configure the "DefaultPolicy" as well as creating additional tuning policies for BACnet proxies   Apply tuning policies to regulate BACnet network utilization

Issue Software Licensing for Continuum 2.0 & StruxureWare Solution Product Line Andover Continuum, EcoStruxure Building Operation Environment Continuum Site integration with the StruxureWare Solution Continuum Cyberstation software & Licensing Cause Request for Software Licensing compared to the Hardware key.  Resolution There is a Ordering and Activation document available on the Buildings Exchange Download Center. A link is provided below: Ordering and Activation of Software License for Continuum v2.0 Software license is a dedicated license per workstation and locked to both the hardware and the operating system. Recommended not to install on old hardware. Software licensing is available for both new and existing installations after Continuum 2.0.  A Hardware key is required in order purchase a software license.  This is because the Continuum features and options are purchased with the physical Hardware key, not with the keyless license.   When purchasing the Keyless license, the serial number of the Hardware key is submitted along with a License Information file (c2v) that has been created on the workstation that is to be licensed.  The License Information file is created using the Hasp Key Utility.   Continuum installations pre version 2.0 (e.g. v1.94) who wish to upgrade to v2.0 and would like to benefit from Software Licensing feature must download and install the required files. Those are outlined in the document above. Note: For Continuum Interface for SmartStruxure Solution the demo StruxureWare Building Operation license has all required features. Your Continuum 2.0 key must have the Advanced Webserver feature enabled.You can use the Continuum Interface Server for any Continuum installation: Standalone or Multi-User (LAN). All existing Andover Continuum configurations are supported in the Continuum Interface Server.  

Issue What is the maximum number of devices that can be placed on the MS/TP trunk of the ENC-520, UNC-520 and MNB-1000? Product Line TAC IA Series Environment Niagara R2 Niagara G3 UNC-520 ENC-520 MNB-1000 Cause Unit Load is a measure of the electrical loading of an EIA-485 (MS/TP) network. An EIA-485 network may have 32 unit loads. One unit load consists of one full-load transceiver, two half-load transceivers, four quarter-load transceivers, or eight eighth-load transceivers. Resolution All MNB-xxxx, UNC-xxx, and ENC-xxx devices use quarter load transceivers, which mean that a MS/TP network comprised solely of MNB devices can have up to 128 total devices (1 router plus 127 controllers). The maximum number of BACnet devices allowed per MS/TP trunk, if all devices are quarter-load transceiver, is 127 plus the ENC/UNC or MNB-1000 controller. Note: 32 unit loads times 4 transceivers per unit load equals 128 maximum transceivers per network (32 X 4 = 128). UNC/ENC Resource Limit Although the 128 BACnet devices is the stated maximum for a MS/TP trunk, this maximum is normally not achieved. This is because the number of MS/TP devices that can be placed on a MS/TP bus is limited by the resource limit of the UNC/ENC controller. A shortage of resources will limit the devices on an MS/TP network to a number less than the physical limit. Exceeding the resource limit will negatively affect the UNC/ENC-520s, possibly causing poor performance and resets (of the UNC/ENCs). Reference Appendix A of BACnet Wiring and Networking Practices Guide for additional information.

Issue The ETL job configuration tool freezes when running the load sources task under the mappings tab. Product Line EcoStruxure Building Operation Environment Extract Transform Load Administration Tool (ETL) Power Manager for SmartStruxure EcoStruxure Web Services (EWS) Enterprise Server Automation Server Cause The ETL default HTTP query size is set to 10 which in some cases can impact the performance of the tool. Resolution Make sure that you read through Energy Expert (Power Manager for SmartStruxure): Best Practices. This article will provide a lot of tips to avoid issues or improve system performance. ETL locks up while loading sources Adjust the HTTP query size to a higher value. This will reduce the number of queries between ETL and the SBO Server. Close ETL. Go to the location where ETL is installed. The default path is C:\Program Files\Schneider Electric\ETL X.X (SBO to PME). Under the Jobs folder there is a project file named "JOB_ETLProjectName.xml". Open this XML file with a text editor. Search for the setting called "ContainerQueryBatchSize". It is set to 10 by default, change it to 100 and save the job. Open the ETL user interface again and try running the Load Sources task. The folder count at the bottom of the screen will increase slower then before because each call is gathering ten times as much data. Note: If the ETL tool locks up again with the query size set to 100, try other values until it is able to complete the task such as 50, 25, etc. ETL takes a very long time to load sources When dealing with very large systems it can take hours for ETL to search through the entire database for all trends. To help reduce the searching time filters can be created to restrict what is exposed to EWS. Go to the System folder EcoStruxure Web Services > EWS Server Configuration. Click on the Filter Hardware Folder tab. Under the "Filter Hardware Folder by Path" section, click on the green addition symbol. In the pop up window, name the path filter and click create. Select the newly created filter path and click on the edit symbol. Enter the path of the folder or item in the database that you want to exclude from EWS. Click Okay. Note: All filter paths created here will NOT be searched by the ETL tool. Save changes. Once the ETL tool has loaded sources and the project has been created, the EWS filters may be removed.

Issue Preparing LonWorks Configurations for Upgrade You use this procedure when you want to prepare LonWorks configurations for a version 1.5.x upgrade, a version 1.6.x upgrade, or a version 1.8.x upgrade to a final 1.9.X or Higher version. WorkStation ONLY hotfixes are needed to Prepare the LonWorks configuration in order to upgrade to an SBO system 1.9.X or higher. Links to locating hotfixes on Exchange are needed. Product Line EcoStruxure Building Operation Environment SBO Workstation Hotfix Only v1.5.0.17121 SBO Workstation Hotfix Only v1.6.2.1220 SBO Workstation Hotfix Only v1.7.2.11111 Note: AS-P HW.62 required for a LON system with a minimum SBO Software revision at 1.7.2.X Note: For Systems that are running SBO Software Revision 1.8.X please follow TPA-SBO-17-0002.00 -Server with LonWorks devices - Important software update - TPA-SBO-17-0002.00 Cause Difficulties experienced in locating these files on the Exchange. Resolution Prepare LonWorks Systems Running Version 1.5, 1.6, or 1.7. For Systems that are running SBO Software Revision 1.8.X please follow TPA-SBO-17-0002.00 - Server with LonWorks devices - Important software update - TPA-SBO-17-0002.00 SBO Workstation Hotfix v1.5.0.17121 - Contact Country Level PSS SBO Workstation Hotfix v1.6.2.1220 - Contact Country Level PSS SBO Workstation Hotfix v1.7.2.11111- Link To prepare LonWorks configurations for upgrade via the WorkStation Only Hotfix: Bring the system up to the base version within your respective site to SBO V1.5, 1.6.2, or 1.7.2. Then apply the WorkStation Only Hotfix from the list above to your respective version. 1. In WorkStation, in the System Tree pane, select the EcoStruxure BMS server you want to prepare for the upgrade. 2. On the File menu, point to LonWorks and click Pre-upgrade LonWorks configuration. 3. Click Next. 4. Click Finish. NOTE: Any EcoStruxure BMS that is currently at 1.8 or higher can be upgraded directly to 3.1 with one added note,  if the system has LON it will need to go through the LonWorks Pre upgrade before you can upgrade to 1.9.X or HIGHER. If you are upgrading from a version that is older than 1.8, read the documentation that describes the upgrading process for the relevant version.

Issue Security Expert client Status Window is not showing live point status for inputs, outputs, doors. Shows an error message “Status Unknown” instead. The client is still however able to receive access control events such as reader entry/exit. Product Line EcoStruxure Security Expert Environment Security Expert Cause MSMQ (Microsoft Message Queueing) is not enabled. This is a requirement for MSMQ to be installed on the Security Expert Server, the Security Expert Client machines do not need this but the machine where the Security Expert Services are installed does need this feature installed to function properly. Resolution Windows 10 In Windows Features settings (Turn Windows features on or off) turn on the “Microsoft Message Queue (MSMQ) Server” and the “Microsoft Message Queue (MSMQ) Server Core” features. Windows Server 2016 or above  Start Server Manager. Select Manage / Add Roles and Features. Click Next. Select Role-based or Feature-based installation Click Next. Select the server where to install the feature. Go to Features, and navigate to Message Queuing / Message Queuing Services and select Message Queuing Server. Click Install to start the installation. The setup may require a system restart. Click OK to finish.  

Issue How to reset an NC2 9680 model controller Environment CX 9680, NCII, NC2 Cause While upgrading/downgrading the controller firmware, communications was lost and the controller was not able to communicate afterwards.   Resolution Reset controller and re-commission. Please click here for document on how to reset the CX9680 controller.

Issue Installing Echelon Network Interfaces on Windows 7 Operating Systems Environment Microsoft Operating Systems: Microsoft Windows 7 (64-bit and 32-bit) Windows Server 2008 R2 (64-bit), Windows Vista (32-bit) Windows XP (32-bit) Windows Server 2003 (32-bit) Echelon Network Interfaces: i.LON 10 Ethernet Adapter i.LON 100 Internet Server i.LON 600 Internet Server PCLTA-21 PCI Network Interfaces PCLTA-20 PCI Network Interfaces PCLTA-10 ISA LonTalk Adapter PCC-10 PC Card Network Interface SLTA-10 Serial Network Interface (requires separate driver) SmartServer and SmartServer 2.0 U10 USB Network Interfaces U20 USB Network Interfaces Cause Installing Echelon Network Interfaces on computers with newer Windows Operating Systems. OpenLDV 4.0 Resolution Install and use Echelon OpenLDV network interface driver version 4.0 and above. You can download OpenLDV 4.0 from the Echelon website here Echelon Network Interface(s) manuals can be found here. Echelon has released OpenLDV 5.0. It can be downloaded from here. 

Issue CSC5252 and CSC5352 Climatronic Compensator Controller display flashing. Environment Satchwell CSC5252 CSC5352 Cause Manual Override Switch is set in a mode other than AUTO (Clock symbol) Resolution Reset Manual Override Switch to AUTO (Clock symbol) mode. N.B. Details of this and other Manual Override Switch mode options and associated selection / de-selection may be found in the Climatronic CSC5352 and CSC5252 Compensator User Guide, a copy of which may be viewed here.

Issue How to get answers for project specification responses or how to get a product enhancement implemented. Product Line Security Expert, EcoStruxure Building Operation Environment Security Expert EcoStruxure Building Operation Cause Unsure who to go to for help with specification replies or how to get a potential product enhancement added to the offer. Resolution Create an idea on The Exchange Community for your specific Offer. The more Likes an idea floated on the Community receives, the more attention it is given by offer management for that associated product line. Even if you do not yourself have an Enhancement Request, help raise the profile of others by Liking theirs Contact your local solution category manager for the Offer as they will be able to point you in the right direction for answers to specification questions and can help escalate enhancement requests to Product Management. Americas: Americas.EcoStruxureBuilding@schneider-electric.com EMEA: EMEA.EcoStruxureBuilding@schneider-electric.com Asia Pacific & India: AsiaPac.EcoStruxureBuilding@schneider-electric.com When providing your feature request make sure to include as much detail as possible about the feature as well as any specifics that might help justify the need for the new feature.

Issue Will the Bond Sensor Input Channel contribute to the Door Forced and Door Ajar alarms? If so, does it have to be in conjunction with the Door Switch Input Channel? Environment Continuum Access Control Products CX9900 CX9680 AC1, AC1A, AC1Plus ACX5720, ACX5740 CX9702 ACX781 Cause Not sure how the Bond Sensor works in relation to the Door Switch and the various Door Alarm states. Resolution BondFailure is an attribute of the Door object that represents a fault with the Bond Sensor. The way this works is if Valid Access = True and the Door Switch = Open and the Bond Sensor = Open, then BondFailure = False. If Valid Access = False or the system sees the Door Switch = Closed but the Bond Sensor = Open then you will get a BondFailure = True. This is another attribute (BondFailure) that can be monitored with an AlarmEnrollment in addition to the DoorForced and DoorAjar attributes. A Door Switch needs to be used for the Bond Sensor to operate correctly, otherwise BondFailure will always be False after a ValidAccess if there is no Door Switch value. Note: The actual value of the BondSensor attribute in the Door object may not seem to update properly if monitoring with a ListView. For this to show the correct BondSensor value make sure that the attribute Source is set to "Live" instead of the default "Database". Note2: A bond senor (usually an output from a maglock) should not be used as an alternative to a door switch, as it does not give indication of the door position.  

Issue Not all 3rd party manufacturers use the same Modbus addressing. Product Line Andover Continuum, EcoStruxure Building Operation Environment Modbus RTU X Driver bCX1, CX controllers, NC2 Building Operation Enterprise Server Building Operation Automation Server Cause Not all manufacturers use the same Modbus addressing. Resolution Many manufacturers have put their own slant on the "Modbus Standard" for addressing and number formats. The standard only defines 16 bit integer and binary data, but many manufacturers needed to use long integers (or swapped) and floating point numbers. They will transmit them as 2 integers over the protocol, then the receiving system needs to interpret them accordingly. To cope with this, special function codes were added which cover most formats. There are various interpretations by different 3rd party systems on addressing. Some number from 0 and others starting at 1. Some require a 30000 or 40000 offset including in the address, depending on I/O type. What is implemented in the X Driver is that whatever decimal address you enter in the X Driver point is what is sent down the bus. If the other system supplier is asked exactly what address they want sent down the bus, that is what is required in the X Driver point. Sometimes this is not the address that is on their datasheets. Sometimes there may be a need to add or subtract a value of 1, 30000 or 40000. This article was written for Continuum, but is still relevant to EBO Also see Helpful Modbus register Information for further information on Modbus registers.