Issue Are stainless steel pockets suitable for use in seawater/saltwater applications? Product Line Field Devices. Environment STR Sensor. Cause Customer asking if stainless steel pockets are suitable for use in seawater/saltwater applications. Please note that the answer would need to cover both static (stationary) water and flowing water in the pipe, because seawater/saltwater has different effects on metals depending on whether it is moving or not. Resolution Highest corrosion class is Class III for stainless steel, which seems not suitable for intended application.   ISO 12944 Impact Interior Exterior C1 Very low Heated buildings with clean air, such as offices, shops, schools, hotels, etc. None C2 Low Buildings not heated, where condensation may occur, such as warehouses and sports halls. Atmosphere with low pollution. For example in the country. C3 Middle Buildings for production with high atmospheric humidity and some air pollution such as food manufacturers, breweries, dairies and laundries. Urban and industrial areas, moderate sulphur dioxide pollution. Coastal areas with low salt content. C4 High Chemical manufacturers, swimming baths and ship- and boatyards by the sea. Industrial areas and coastal areas with moderate salt impact. C5-I Very high - Industry Buildings or areas with almost permanent condensation and with high pollution. Industrial areas with high humidity and aggressive atmosphere. C5-M Very high Buildings or areas with almost permanent condensation and with high pollution. Industrial areas with high humidity and aggressive atmosphere.  

Issue Encounter Queue Full Exception in context of "Error writing BACnet point" Product Line EcoStruxure Building Operation, TAC IA Series Environment I/A Series N4 Jace 8000 I/A Series N4 Jace 9000 Niagara Station running as SoftJace or 3rd Party Jace Cause If you notice queue overflow messages in the station dialog, it is essential to know which queue is overflowing. There are many different communications mechanisms in BACnet, and they use different queues. Resolution The canonical reference article is located on Niagara Community: BACnet Tuning Suggestions I have excerpted the following as a Rule of Thumb for the recommended starting configuration: Configure your tuning policies so that write-on-start is not enabled on some of the points - otherwise, the JACE may start with a to-do list that is larger than the queue can handle. The recommended configuration from Tridium is to set BACnet WriteWorker queues to 1.5 times the number of writable points. However, as initial configuration, Product Support has found these values to perform better than the defaults, so change the following values from 1000 to 3000. View the BacnetNetwork Property Sheet Expand Bacnet Comm Expand BACnet Comm -> Server -> Worker and Confirmed Worker Expand BACnet Comm -> Transport Change the various Queue Sizes from 1000 to 3000. Please consult PSS if a change to a value higher than 3000, as that has been found to adversely affect performance. 

Issue How are Elsys LoRaWAN sensors configured with a smartphone using NFC Product Line EcoStruxure Building Activate Environment EcoStruxure Building Activate Flex Server EcoStruxure Building Activate Partner Portal Warning Electrostatic Discharge Required: Always discharge static electricity from your person by touching metal prior to handling any hardware. Failure to do so may result in damage to devices. Potential for Data Loss: The steps detailed in the resolution of this article may result in a loss of critical data if not performed properly. Before beginning these steps, make sure all important data is backed up in the event of data loss. If you are unsure or unfamiliar with any complex steps detailed in this article, please contact Product Support for assistance. Cause All Elsys sensors are equipped with NFC for easy configuration with a smartphone. There is a requirement to configure these sensors using a Smartphone or tablet using Elsys 'Sensor Settings' application. Resolution Download the ELSYS “Sensor Settings” application from Google Play or the IOS App store and install it on a smartphone or tablet.     Ensure the mobile device supports NFC. Enable NFC on the device and start the application. Position the mobile device directly on the NFC antenna of the sensor. Ensure both devices remain close and stationary to maintain optimal connectivity. Remove the mobile device. The current settings will be displayed in the application. Set the 'Timebase' to 120 seconds using the application. Remember to revert it to 600 seconds after commissioning!    Make note of the following sensor keys: DevEUI: The unique ID of the sensor, found in the blue panel at the top. AppEUI: Application ID (8 bytes or 16 hex digits). Default is 0, can be changed if needed for the application. AppKey: Application unique key (16 bytes or 32 hex digits) that is the encryption key used for messages during every over-the-air activation. Tap the sensor's NFC antenna to transfer the new settings after making the desired changes. Ensure the application confirms the updated settings. Wait for the sensor to reboot, indicated by the LED flashing. The sensor settings should now be updated. Validate your settings by reading the NFC data after the sensor has restarted. Verify that settings have been applied by using the ‘Read’ functionality in the app and touching the sensor’s NFC antenna.    Remember to change the 'Timebase' back to 600 seconds after the commissioning is completed!

Issue The SP90 Actuator alarm "BV:22 Temperature Sensors Missing or Interchanged" is triggered. Can we simply swap T1 and T2 in the configuration to fix this, instead of physically swapping the sensors? Product Line Field Devices Environment SpaceLogic SP90 Series Smart Actuator Cause The installer has installed the temperature sensors in the incorrect pipes. Resolution Firmware versions V439 (for actuators products marked V1xxx on the product label) and V539 (for actuators marked V2xx on the product label) introduced MSV:42 (T1 input) and MSV:43 (T2 input) which enable the temperature sensors to be swapped.   You are able to select each as: 1: Disabled 2: Supply temperature 3: Return temperature   If the SP90 actuator is at a lower firmware revision, it can be upgraded. Contact Product Support for the firmware files and upgrade instructions.

Issue It is not possible to login to an Automation Server and it fails with the error "Domain Controller version too low' for certain users. Product Line EcoStruxure Building Operation Environment Building Operation Automation Server Cause Remnants of an EcoStruxure Building Operation domain exist in the controller where it has not been removed completely and it is set as the Default Logon Domain. Resolution Login with Administrative Rights: Use a user account with Administrative rights in the Local or another domain explicitly using the Domain name. Delete Partial Domain: Once successfully logged in, delete the offending partial domain. Retry Login: Attempt to log in again. Additional Information: Ensure that the domain is completely removed to avoid future login issues. Verify that the Default Logon Domain is correctly set after removing the partial domain.

  Issue While performing the verification tests, an error is displayed: 'error: There is no change in the configurations' as shown below:   Product Line EcoStruxure Building Activate Environment EcoStruxure Building Activate Partner Portal Cause This error occurs under the following conditions: The user made changes in the Partner Portal but later reverted to the original settings/configuration, assuming there should be some changes, and then started the verification tests again. The user chose to perform the test and verification process once post-submission, resulting in this error message. Resolution When the verification process is initiated, it goes through four checkpoints. The user can safely ignore this error message and proceed with the tests directly. Clicking on the 'Load Mapping' button will remove this error message.

Issue Log data is not being logged into SQL. The Reports Server indicates that the database is full.   This view will be shown when logging into the WebReports interface. If this chart is not shown, the PC is not running an Express edition of SQL. Product Line EcoStruxure Building Operation Environment Reports Server Warning Potential for Data Loss: The steps detailed in the resolution of this article may result in a loss of critical data if not performed properly. Before beginning these steps, make sure all important data is backed up in the event of data loss. If you are unsure or unfamiliar with any complex steps detailed in this article, please contact Product Support Services for assistance. Cause In most instances, the data that quickly fills the SQL database are Events. Event data fills the SQL Database and prevents log data from passing to the Reports Server database. If the data has filled within a few days, this would indicate an issue, and contacting your local support is the best option here. The Process below allows the user to stop the reporting agent from passing specific information to the Reports Server. If the data files are due to the amount of data stored, then an upgrade to the Standard/Full version of SQL is recommended.   Resolution To verify that the Events table is the likely cause of the SQL filling up, there are Standard Reports in the later versions of SQL.  The below example uses SQL Server version 13.x and shows the "Disk Usage by Top Tables."   If the Standards Reports are not available, then use the following article Building Operation Reports SQL Database Full, for instructions on how to show the details for each table.     The Process below allows the user to stop the reporting agent from passing Event information to the SQL Database: Download the latest SBO Reports Agent Config tool from the community. Load the Tool onto the Reports Server PC. Stop the Reporting Agent Using the Tool Press F7 to get to the Advanced Agent Configuration Page Change the numEventRecordToRead property to 0. This will prevent future event data from being written to the Reports Server database. Press Ok Under the Maintenance tab of the tool - there are two options under Events  Delete future events, alarms, and trends  Delete events and alarms older than... Restart the Reporting Agent This will stop any further Events from being passed through to the SQL Database.  

Issue Access to the Platform on a PC without administrative privileges is, by default, not allowed. Product Line TAC IA Series Environment I/A Series N4 /AX Workbench Cause Default Platform access is restricted to persons logging on to the PC with administrative privileges Resolution To run a station on a Workbench, you must open the Platform to install and start the station. Consult with your IT department about getting a temporary local admin account or have them assist you with this process.   Start the daemon you wish to run the station in Open Workbench of the running daemon Open the Platform  Follow the steps in the screen capture Now you can open the Platform and run stations without having administrative rights on your PC.           Notes: This must be done for each version of Niagara Workbench If you have a Schneider Electric laptop with CyberArk EPM installed, obtain a CyberArk JIT for administrative privileges from SE Support. If you have a Schneider Electric laptop, when logging in to the "Update Authentication" in the Platform, use your SESA login.

  Issue When viewing the Modbus property in EcoStruxure Building Operation, the status displays "Attention". Product Line EcoStruxure Building Operation Environment Building Operation Automation Server Building Operation Enterprise Server Cause The "Attention" status is not documented in the Web Help, which can make it unclear what is causing this state. This status typically indicates that there is an issue occurring within the Modbus system. One common cause is an unrealistic poll rate set on a Modbus group. . Resolution If the poll rate on a Modbus group is set too fast for the server to handle—especially in large Modbus networks—this can trigger the "Attention" state. Recommended Action: Review the poll rate configured for the Modbus group. If it is set to a very low value (e.g., 1 second), increase it to a more realistic interval. For busy networks, a poll rate of 5 seconds or more is typically more achievable. Once the poll rate is adjusted to a manageable value, the Modbus status should return to "Online".

Issue When hosting objects from EWS/Smart Connector, such as Security Expert, into EcoStruxure Building Operation (EBO), additional or mismatched object names can result in unresolved bindings and duplicate EWS IDs. Common symptoms include:  - Duplicate EWS IDs with different names - Unresolved or broken bindings - Binding loss after deleting containers   Duplicate EWS IDs with different namesDuplicate EWS IDs with different names Unresolved or broken bindingsUnresolved or broken bindings     Product Line EcoStruxure Building Operation, EcoStruxure Security Expert. Environment EcoStruxure Building Operation Enterprise Server (ES) Security Expert Smart Connector Integration EcoStruxure Web Service (EWS) Warning Potential for Data Loss: The steps detailed in the resolution of this article may result in a loss of critical data if not performed properly. Before beginning these steps, make sure all important data is backed up in the event of data loss. If you are unsure or unfamiliar with any complex steps detailed in this article, please contact Product Support for assistance. Cause Typical reasons for this to occur: Hosted object names do not match those in Security Expert. Deleting containers without proper renaming can cause binding loss. Resolution   Best Practices for Future Hosting Always rename the hosted object in EBO before rehosting from the hardware folder. This ensures that existing bindings are preserved. Avoid hosting the entire `SecurityExpertServer` container—only host changed or new objects. For Unbound or Irrelevant Objects: - If objects have no bindings, naming is not critical from an EBO perspective - Delete the container and rehost the object from the **Hardware folder**.   To Retain Existing Bindings  Identify the correct object name in the Hosted Containers folder  Copy the name to avoid typos. Delete the duplicate object with the correct name. Rename the existing EWS ID to match the copied name. Save the rename Verify bindings: Right-click the renamed object Select Delete Click Show References Confirm bindings are still valid. Click No to cancel deletion. Repeat this process for each object (inputs, outputs, doors, etc.) that has existing bindings.  

Issue The internet is not working at the site, so it's necessary to verify that all antenna connections are secure and the SIM card is correctly placed. Product Line EcoStruxure Building Activate Environment EcoStruxure Building Activate Flex Server EcoStruxure Building Activate Partner Portal Warning Hazard of Electric Shock: Remove all power from all devices before removing any covers or doors of the system. Disconnect power at the device and at the power source. Electrostatic Discharge Required: Always discharge static electricity from your person by touching metal prior to handling any hardware. Failure to do so may result in damage to devices. Potential for Data Loss: The steps detailed in the resolution of this article may result in a loss of critical data if not performed properly. Before beginning these steps, make sure all important data is backed up in the event of data loss. If you are unsure or unfamiliar with any complex steps detailed in this article, please contact Product Support for assistance. Cause The Flex Server powers up successfully at the site, but the internet connection fails. This issue might arise if the antenna or SIM card was displaced, disconnected, or damaged during transit due to mishandling. Therefore, it's essential to verify that all connections are secure. However, the technician or engineer on-site may not be familiar with the correct slots. Resolution Carefully open the Flex Server top cover. The internal layout will appear as shown in 'Image 01' below: Image 01Image 01 Image 02Image 02 Identify the slots as follows: Slot 1: Indicates the SIM card slot. Slot 2: Located on the GSM Module marked as 'MAIN', indicates the Cellular antenna slot. Slot 3: Located on the Wi-Fi module marked as 'ANT0 WiFi', indicates the Wi-Fi antenna slot. Verify all connections and ensure they are secure. Carefully close the Flex Server cover.

Issue This issue is described in Tridium's internal case NCCB-71360. Users will notice that the default Nrio Device Manager view (Ux/web media) of the NrioNetwork driver in N4.14 looks identical to the previously existing workbench AX view; however, due to this defect, devices discovered and added through the web view will not function as expected.  Product Line TAC IA Series Environment I/A Series N4 Jace 9000 I/A Series N4.14 Framework Version Cause With the release of the Jace 9000, users may notice that the IO-R-16 and IO-R-34 devices will not function properly when discovery and configuration are performed through the web views. Resolution To tell if the device was added through the correct view, there are a few indicators. Malfunctioning devices will not show up with an Installed Version or a Sec version in either view: Working devices will display these values with no issue in either view: The malfunctioning devices' health section will read 'fail' even with a status of ok: Users in N4.14 should only use the Workbench AX Nrio Device Manager view to discover and add devices to a station. This use case is currently not supported in the browser for N4.14. All other use cases function in the UX Web Views, such as viewing devices, adding points, and commanding points.  

Issue Not able to see the network panels status, trouble messages, events, cause and effects etc. Product Line ESMI Fire Detection. Environment FFSULH1009. Warning Electrostatic Discharge Required: Always discharge static electricity from your person by touching metal prior to handling any hardware. Failure to do so may result in damage to devices.   Note: Always completely power OFF the panel whenever inserting or removing hardware in the panel. Cause Networking issues can significantly impact the performance and reliability of the Esmi Ultima system. This article provides troubleshooting steps to resolve common networking problems. Resolution The following network-related troubles can occur on the Esmi Ultima Fire Alarm Control Panel. See the detailed descriptions below for explanations on each trouble message.   Trouble Message Description Network Communications Trouble This event indicates there is no communication between this panel and its neighbor. This could be caused by a configuration error (such as using the wrong baud rate), a wiring error, or damage to the wires connecting the panel to its neighbor. If this trouble occurs on one link on the panel, then the panel is still in communication with other panels on the network. If this trouble occurs on both links on the panel, then the panel is no longer in communication with other panels on the network. Note: make sure remove the 0 ohm resistance from the network card. Unexpected Network Node This event indicates a panel has been detected on the network that is not in the configuration. This is a configuration error and should never occur once the network has been properly configured. Network Card Missing This event indicates that the panel is configured for networking, but there is no network card installed, or it is installed incorrectly. This trouble may also occur if the network card processor fails. Connection Error This event indicates that the panel has failed to get a meaningful result for the link impedance measurement. This may occur if stray leakage current enters the link wiring from elsewhere, or if there is a component failure or missing jumper on the network card. This event may also be shown when the network is disconnected or when the NET OUT + wire is disconnected. Network Panel Missing This event indicates that another panel is configured but has not been found on the network. This may occur if the missing panel is switched off or disconnected from the network. This fault will also occur if there is no communication between a panel and either of its neighbors on both links. In this case, the panel will show multiple instances of this trouble; one for each other panel on the network. Network Node Double Addressed This event indicates that more than one panel on the network has the same node number. This is a configuration error and should never occur once the network has been properly configured. Full Short Circuit Trouble This event indicates that a short circuit has been detected by the link impedance measurement. This indicates a wiring error, or damage to the wires connecting the panel to its neighbor. Full Open Circuit Trouble This event indicates that an open circuit has been detected by the link impedance measurement. This indicates a wiring error, or damage to the wires connecting the panel to its neighbor. The following two troubles are optional and are not included in the default firmware build. Partial Short Circuit Trouble This event indicates that the link impedance measurement has detected an impedance below the normally expected range. Partial Open Circuit Trouble This event indicates that the link impedance measurement has detected an impedance above the normally expected range.

Issue This article provides information on the SIM cards that are currently supported in EcoStruxure Building Activate and are added to the central database to support field deployment of Flex servers. Product Line EcoStruxure Building Activate Environment EcoStruxure Building Activate Flex Server EcoStruxure Building Activate Partner Portal Warning Hazard of Electric Shock: Remove all power from all devices before removing any covers or doors of the system. Disconnect power at the device and at the power source. Electrostatic Discharge Required: Always discharge static electricity from your person by touching metal prior to handling any hardware. Failure to do so may result in damage to devices. Caution While removing gateway cover: Open the gateway screws and delicately remove the top cover. Take extra care during this step, as the top cover is connected to the antenna cable via a thin wire. After opening the top cover, you will be able to see the top view of the board, please insert the active SIM card in the designated slot. Once the Sim Card is properly inserted, fix the screws back and ensure that the 4G&Wi-Fi Antenna is attached properly. If the antenna cable remains disconnected from the board, then the GSM will not work.   Important Note: The SIM must not have a Username, Password, or PIN. These features are not supported. Refer to Steps to follow to unlock SIM PIN when using SIM Card under Flex server The user must ensure that no firewall is applied by the SIM provider. If a firewall exists, it may block connectivity. We recommend using SIMs without any firewall restrictions.Ensure the data plan of the SIM should not be less than 2GB per month for approximately 100-200 streams. Cause This eliminates the need for manual support for the already validated SIM operators individually on each server. Resolution Below is the list of the Network Service Providers whose APN exists in the backend and have already been added: MCC code (Country Code) Operator APN 260 play {"generic": "internet"} 260 plus {"generic": "mbb.mobi-data.com"} 732 claro {"generic": "internet.comcel.com.co"} 454 smc hk {"generic": "Smartone"} 520 ais {"generic": "internet"} 240 tele2 se {"generic": "mbb.mobi-data.com"} 260 t-mobile {"generic": "internet"} 262 t-mobile {"generic": "internet.v6.telekom"} 505 telstra {"generic": "telstra.internet"} 204 nl kpn {"generic": "matooma.m2m"} 208 208 28 {"generic": "datapro"} 234 voda uk {"generic": "wap.vodafone.co.uk"} 901 901 40 {"generic": "internet.m2mportal.de"} 208 free {"generic": "free"} 208 bouygues telecom {"generic": "mmsbouygtel.com"} 208 sfr {"generic": "sl2sfr"} 208 orange {"generic": "orange"} 268 vodafone {"generic": "internet.vodafone.pt"} 268 nos {"generic": "umts"} 405 vi india {"iot": "IOT.ZENATIX.COM"} 404 vi india {"iot": "IOT.ZENATIX.COM"} 405 ind airtel {"iot": "iot.com"} 404 ind airtel {"iot": "iot.com"} 724 tim internet {"generic": "timbrasil.br"} 724 vivo {"iot": "smart.m2m.vivo.com.br", "generic": "zap.vivo.com.br"} 724 claro {"generic": "claro.com.br"} 310 at&t {"iot": "armstrongdynm.com.attz", "generic": "NXTGENPHONE"} 440 fl1 {"generic": "soracom.io"} 302 bell {"generic": "mnet.bell.ca.ioe"} 302 rogers {"generic": "M2Minternet.apn"} 302 at&t {"iot": "armstrongdynm.com.attz", "generic": "NXTGENPHONE"} 404 idea {"generic": "Internet"} 431 etisalat {"generic": "mnet"} 430 etisalat {"generic": "mnet"} 424 etisalat {"generic": "mnet"} 424 du {"generic": "du"} 405 404 11 {"iot": "IOT.ZENATIX.COM"} 405 vodafone {"iot": "IOT.ZENATIX.COM"} 405 airtel {"iot": "iot.com"} 404 airtel {"iot": "iot.com"} 404 vodafone {"iot": "IOT.ZENATIX.COM"} 404 404 11 {"iot": "IOT.ZENATIX.COM"} 404 jio {"generic": "jionet"} 405 jio {"generic": "jionet"} Additional Information Ensure the SIM card is active and properly inserted. Verify the antenna cable is securely connected to the board. Confirm the SIM card has no firewall restrictions and meets the data plan requirements.  

Issue After performing server upgrades using Device Administrator, attempts to download the database fail. The server remains in a "Ready for download" state, which cannot be cleared.   Device Administrator Download Fail error Product Line EcoStruxure Building Operation Environment Building Operation Device Administrator Building Operation Automation Server Premium Building Operation Automation Server Bundled Building Operation Automation Server. Building Operation 2023 (version 5) and above Cause This happens when a Consolidation Point (CP) or Hotfix has been applied. These updates do not include server packages in Device Administrator, causing download failures during post-hotfix upgrades.  DFU upgrades and base version upgrades of the installed Device Administrator still function as expected. Resolution This issue is cosmetic and does not impact server functionality, there’s no operational need to upgrade servers after applying a hotfix or CP. However, to clear the persistent "Ready for download" state: Navigate to: C:\ProgramData\Schneider Electric EcoStruxure\Building Operation x.0\Device Administrator Locate the folder: Find the folder named tmp[SerialNumber] (e.g., tmpSM22111234) that correlates to the server(s) showing the state "Ready for download" Delete all files inside that folder. Restart Device Administrator if it’s open. This will clear the "Ready for download" status.  

Issue The panel displays a Low Battery Voltage (With Charger Trouble) condition. This is accompanied by General Trouble and Power Trouble LEDs being ON. Product Line ESMI Fire Detection. Environment FFSULH1001. FFSULH1002. FFSULH1003. Warning Hazard of Electric Shock: Battery terminals and leads are not power-limited. Short circuits can cause a fire or an explosion. Use extreme caution while connecting or disconnecting standby batteries. Electrostatic Discharge Required: Always discharge static electricity from your person by touching metal prior to handling any hardware. Failure to do so may result in damage to devices. Cause Possible causes of this issue include: Battery impedance exceeds acceptable limits This can occur after several years of use as batteries degrade. Mixing different battery brands or using batteries of the same brand but with different ages (e.g., one new and one old) can also cause this issue. Faulty power supply If the power supply is malfunctioning, it may not charge the batteries correctly, triggering the fault. Resolution Step 1: Replace the existing batteries with a new set from the same brand. This often resolves the issue if battery impedance was the root cause. Step 2: If the issue persists after replacing the batteries, the power supply may be faulty. In this case, replace the power supply unit. After replacing either the batteries or the power supply, the panel should return to normal operation.

  Issue Unable to perform AET license registration online Product Line Automated Engineering Tool Environment Automated Engineering Tool Cause If a license file for AET is not found on the computer, the License Registration screen will be displayed when AET is started. By default, the New Registration button launches an online registration process, if the computer is offline or there is a problem contacting the AET License server then Offline registration is needed. Resolution AET Offline license registration process If a license file for AET is not found on the computer, the License Registration screen will be displayed when AET is started. Click the "Offline registration" button. Fill in your name, company, email address and select the license type you want. Then click "Save to file". Select a location to save the license request file, once the file has been saved to the computer, instruction on how to proceed are shown. Click OK and AET will close. Email the saved file to aet.support@schneider-electric.com the AET Support team will respond with a license. Place the supplied license in the C:\ProgramData\Schneider Electric\AET\License File folder on the computer and run AET.

Issue Unrecognized user connection in EBO Product Line EcoStruxure Building Operation Environment Building Operation Webstation Building Operation Enterprise Central Building Operation Enterprise Server Building Operation Automation Server Cause When browsing through System>Diagnostics>Users in Webstation, an unrecognized "root" user appears in the user session list. Resolution The 'root' user is a built-in system account used to help different parts of EBO—like EC, ES, and AS—communicate with each other. It’s automatically used when the system is not running in standalone mode. This account allows the systems to connect and share data securely in the background.

Issue What is the password policy for Security Expert operators, and how can it be configured to meet specific cybersecurity requirements? Product Line EcoStruxure Security Expert Environment Security Expert Server Security Expert Client Cause Some sites require customized password policies to comply with cybersecurity standards. These may include requirements such as: Enforcing regular password changes Preventing the reuse of previous passwords Setting minimum password length Requiring strong password complexity Resolution   Default Password Policy in Security Expert By default, Security Expert enforces the following password policy for operator accounts: Minimum password length: 8 characters Password change required: On first login For more information on Security Expert’s cybersecurity practices, refer to the SX-SRVR Security Expert System Hardening Reference Guide. Custom Password Policies via Active Directory Integration Security Expert does not support advanced password policy configuration directly within the client interface. However, enhanced password policies can be enforced by integrating Security Expert with Windows Active Directory. To implement this: Integrate Security Expert with Active Directory Follow the steps outlined in Option 1 of the How to Integrate Active Directory with Security Expert article or Option 2 for full Active Directory integration. See AN 288 Security Expert - Using Active Directory - Integration Guide for additional details. Configure Password Policies in Windows Domain Once integration is complete, operator accounts managed through Active Directory will adhere to the domain’s password policy. This allows you to enforce: Password expiration intervals Password history restrictions Minimum and maximum password lengths Complexity requirements (uppercase, lowercase, numbers, symbols)

Issue After correctly following the process outlined in Setup External Log Storage using MSSQL., EcoStruxure Building Operation (EBO) server fails to connect to the external database, generating the following System Alarms:  Unable to connect to data source Login failed for user The system alarm specifically details an issue with the ODBC SQL Driver as below: "The driver doesn't support the version of ODBC behavior that the application requested..." "Invalid connection string attribute" Product Line EcoStruxure Building Operation Environment Building Operation Enterprise Server Building Operation Enterprise Central Building Operation Automation Server Premium (AS-P) External Log Storage [MSSQL]  Cause The system alarm details indicate an issue with the ODBC SQL Driver, specifically: "The driver doesn't support the version of ODBC behavior that the application requested..." "Invalid connection string attribute" This suggests a compatibility or configuration issue with the ODBC driver or connection string.   Resolution The following has been seen to correct the issue: Verify User Credentials Ensure that the username and password used for the ODBC connection are correct. Note: SQL Server credentials are case-sensitive, so double-check for any discrepancies in letter casing. Remove any uppercase for the username. In some cases, using only lowercase letters for the username in the ODBC connection string has resolved the issue, e.g,. Instead of "My_User" use "myuser"