Building Automation Knowledge Base

Issue Do the Xenta IO modules, when used under a programable Xenta device, need to have a Field Device license added? Product Line EcoStruxure Building Operation Environment Building Operation Licensing Cause No clear information is provided on if the Xenta IO model needs a Field Device license. Resolution No Field License is needed for IO modules if they are set up under a Xenta programable device like a Xenta 400 or 300 series device. Only the devices that communicate to a Building Operation server require a license (Enterprise or Automation Servers). The Xenta IO modules only communicate with the Xenta programable device using LACNET communication and not the Building Operation servers.

Issue Details on Access Expert Keep Alert Feature Message usage Product Line EcoStruxure Access Expert Environment Access Expert Hosted software V3 Cause Details on Access Expert Keep Alert Feature Message usage Resolution The Keep Alert feature in Access Expert comes with a default 500 SMS messages a month. This can be used to send a broadcast to the users on the system. For example, if the administrator wants to send a text out to 50 people based on an event, then that would leave a total of 450 remaining.   Another use case would be if there was an active shooter at a school campus where there are 500 students, then this would be done one time and the max texts would be sent.   Additional amounts can be purchased in 500 amounts based on what the need is for the customer. so that their monthly usage stays within the amount purchased.

Issue Bitwise operations in script behave differently in the AS-P compare to ES regarding negative values. Product Line EcoStruxure Building Operation Environment Building Operation Workstation Building Operation Enterprise Server Building Operation Automation Server Premium Cause Bitwise operations in the script only defined for positive Integers. Resolution Enterprise Server processes negative operands as twos complement whereas Automation Server Premium does not handle negative operands. Behavior with negative integers is undefined.

Issue Identify which Access Expert LDAP Active Directory Keep version is installed Product Line EcoStruxure Access Expert Environment Access Expert Hosted V3 Access Expert LDAP Active Directory Keep Integration Active Directory Cause Windows Control Panel Programs and Features doesn't indicate which version of the LDAP Active Directory Keep Integration is installed Resolution Login to Access Expert and the Instance that has LDAP Active Directory Installed Navigate to the General Configuration Tab> LDAP Agents LDAP Right Click on the LDAP agent and select View Event History Note: You may need to change the Priority from 50 to 0 and the Date Range to see an event Expand (Click the plus sign) of one of the LDAP Events (i.e LDAP Agent - Started) The version of the LDAP Active Directory Keep installation will show

Issue When importing and saving an application from TAC Vista into Building Operation Workstation, an Error message shows up. Product Line TAC Vista, EcoStruxure Building Operation Environment Building Operation Workstation TAC Xenta Control Device Cause In the application, there were two trend log entries with the same name. Resolution Rename one of the duplicate trend log names.

  Issue The LEDs on the Flex Server indicate the status of the gateway's connection with the Internet and server. This article provides detailed guidance to help interpret these LED indicators.   Product Line EcoStruxure Building Activate Environment ESXBFXSVR00B008 ESXBFXSVR0BC008 ESXBFXSVRBCW008 Cause The top and bottom LEDs on the Flex Server serve different diagnostic purposes. Understanding their behavior is essential for effective troubleshooting. Resolution The LED blink patterns provide diagnostic information about: Internet connection Server connection SD card health Gateway firmware status Device connectivity Data transmission LED Indicator Reference Diagrams Figure 1: Side View of the Flex Server showing LED locations Figure 2: Gateway Status LED indications Figure 3: Network Status LED indications Figure 4: Ethernet Status LED indications Figure 5: Power LED indications Fig 1: Side View of the Flex-Server showing LED location       Fig 2: Gateway Status LED indication     Fig 3: Network Status LED   Fig 4: Ethernet Status LED   Fig 4: Power LED indications  

Warning Potential for Data Loss: The steps detailed in the resolution of this article may result in a loss of critical data if not performed properly. Before beginning these steps, make sure all important data is backed up in the event of data loss. If you are unsure or unfamiliar with any complex steps detailed in this article, please contact Product Support for assistance. Issue Need to move PCT storage file to another location Product Line EcoStruxure Building Operation Environment Project Configuration Tool Cause The hard drive where the storage file resides may be full, or the space may be allocated for another purpose Resolution It's suggested to create a backup before proceeding, follow How to backup PCT 2.0 data to create a backup.   Open Hyper-V Manager Select "pct" under Virtual Machines then click "Move..." from the right-hand side menu Move "pct" Wizard Window will pop-out, click Next Select "Move all of the virtual machine's data to a single location" then click Next Select the NEW location for PCT then click Next. Check if the location is correct, then click Finish. Hyper-V will initial the process Once the Status shows the progress finishes. Click "Shut Down" from the right-hand side menu for "pct" image   Click "Stop Service" from the right hand side menu to stop Hyper-V as we need to modify the file location for PCT settings file   Open Windows Explorer and go to C:\ProgramData\Schneider Electric EcoStruxure\Building Operation\Project Configuration Tool Open the "settings" file Replace the old folder location with the new one then Save the file (I changed the folder from 'C:\ProgramData\Schneider Electric EcoStruxure\Building Operation\Project Configuration Tool' folder to 'D:\PSS\PCT 2 storage' Before modification After modification Go back to Hyper-V then click Start Service   Select "pct" then Click Start   Wait for a couple of minutes for the VM to start Go to https://192.168.10.2/ in a browser and PCT will start with all the existing projects

Issue Extended Jace 9000 Commissioning Time. Product Line TAC IA Series Environment I/A Series Jace 9000 Cause With the release of the Jace 9000 using Ubuntu Core 20 Linux as it’s operating system the commissioning/upgrade times increase as compared to the previous Jace 8000. Initial commissioning times can take longer then 15 minutes to finish. There are scenarios where multiple reboots are needed after the initial commissioning is completed. Once the commissioning has been completed for the Jace 9000, boot times should be significantly lower. Resolution Users will need to reboot their Jace at least twice and will need to set more time aside for commissioning of the new Jace 9000s. Please allow for a minimum of 15 minutes for commissioning. If you continue to experience issues with bootup or commissioning on the Jace 9000,  please contact your country level product support. Please note that the JACE-9000 does not print a lot of output on the debug port when you cycle power so give it time to fully bootup.

Warning Potential for Data Loss: The steps detailed in the resolution of this article may result in a loss of critical data if not performed properly. Before beginning these steps, make sure all important data is backed up in the event of data loss. If you are unsure or unfamiliar with any complex steps detailed in this article, please contact Product Support for assistance. Issue It may be necessary to replace the Security Expert Server and/or the Security Expert Software Product Line EcoStruxure Security Expert Environment Security Expert Cause In case of upgrade, software issues or PC/Server hardware failure replacing the Security Expert Server may be needed Resolution 1. Hardware Reset If the server footprint changes, for example, the previous server’s hard drive or motherboard died, then a hardware reset will be required before the license can be used on the new server. Contact Schneider Electric Product Support to tell them that your server hardware profile will be changing and a hardware reset is needed. 2. Stop the Security Expert services Right-click on the service and select Stop Note: While the services are stopped, the controllers will save incoming events (up to 50,000 per controller). Once that limit is reached, the events are First in First out. 3. Back up the SecurityExpert and SecurityExpertEvents databases If the database is encrypted, export the encryption certificates. See the Security Expert Installation Manual for specific instructions on backing up and restoring databases and encryption certificates. https://ecoxpert.se.com/search?documentUUID=71d622e3-2fc1-477a-b08a-5b37ac4b2756&title=SX-SRVR%20Security%20Expert%20-%20Client%20Server%20-%20Installation%20Guide  4. Uninstall Security Expert from the old server From Windows Programs and Features, Right-click Security Expert> Uninstall Once the Uninstall is complete, Manually Restart the Server/PC 5. Disconnect the old server from the network. Connect the new server with the same IP address and/or hostname. If the IP address or hostname of the server changes, update the event server settings in the controllers via the controller’s web page to match the new server. 6. Install Security Expert on the new server and activate the license Ensure that the new Security Expert installation is the same version or higher. 7. Stop the Security Expert services Restore the encryption certificates and databases to the new SQL Server instance. 8. Updating the Database If you are restoring a database from an older version to a later version, uninstall and reinstall Security Expert to upgrade the database. 9. Start the Security Expert Data Service 10. Update the Download Server In Security Expert, navigate to Global | Download server and update the Computer name to match the new Server name. 11. Update the Event Server Computer name in Global | Event server 12. Restart the Security Expert Event Service You should start receiving events from controllers 13. Start the Security Expert Download Service

Issue An error may pop up when using Bosch RPS configuration software indicating there is an issue with the hardware key. The Bosch Panel is offline in Access Expert Product Line EcoStruxure Access Expert Environment Access Expert Hosted V3 Bosch Panel using RPS (Remote Programming Software) SafeNet USB Driver Cause The USB hardware key may not be installed or the driver needs to be updated or repaired Resolution Note: This solution assumes that the Bosch panel has been online in Access Expert before.   While working with a Bosch panel to integrate with Access Expert, the RPS software is used to configure the Bosch panel. An error may pop up indicating there is an issue with the USB security dongle that is inserted into the PC to connect to the Bosch Panel using RPS. This error typically pops up when trying to login with RPS and making the connection to the panel in RPS. "Invalid or missing Hardware Key" Steps: 1. Check to make sure that the USB dongle is inserted into the PC RPS is installed on 2. Install, repair or update the Sentinel Driver in Windows Programs and Features  Navigate to Windows Programs and Features Right Click on the Sentinel Driver Select Repair       Clicked through Next and Install Prompted to restart the PC       Note: Before restarting the PC, Exit RPS, Stop and Exit Docker, Exit Access Expert and then Restart the PC. Once the restart is completed, restart RPS and connect the Bosch panel, there should not be an error with the hardware key. Restart Docker and Access Expert. The panel should show online in Access Expert.                Additional external reference from Bosch: https://community.boschsecurity.com/t5/Security-Intrusion/How-to-correct-the-Invalid-or-Missing-Hardware-Key-message-from/ta-p/2858

Issue Project Configuration Tool 2 can't be installed due to error "An error occurred trying to start process 'powershell' with working directory. The system cannot find the file specified." PowerShell can't also be started by Command Prompt, as shown in below screenshot, with error "'PowerShell' is not recognized as an internal or external command, operable program or batch file."   Product Line EcoStruxure Building Operation Environment Building Operation Project Configuration Tool (PCT) Cause Windows PowerShell path is not added to PATH environment variable, so it cannot be started by PCT installer.  Resolution Add PowerShell path to PATH environment variable by following below steps: Using Start menu, search for "Edit the system environment variables".                            Click on "Environment Variables".    Double click on "Path" variable located in the system variables list. Click New and add PowerShell path to the list then save the changes. %SYSTEMROOT%\System32\WindowsPowerShell\v1.0\     Try to start Power Shell in Command Prompt. If it can be started as shown in below screenshot, retry the PCT 2 installation.   

  Issue Packets from the EBO onboard packet capture utility are not ordered correctly. In the example below it can be seen that the sequence number of the ACK comes before the REQ despite the timestamp for the ACK being later than the REQ.   Product Line EcoStruxure Building Operation Environment Building Operation Workstation SpaceLogic Server   Cause Out-of-order packets are quite normal on a TCP level. Earlier packets can arrive later due to buffering and other reasons. Applications are able to buffer these messages and rearrange them before they are written to the application.   Since the standard Wireshark pcap utility that EBO uses to capture packets does not sort packets in a batch by time stamp before delivering them to the capture file it is subject to the same irregularities that we would see on any OS.   Resolution This is a common enough issue that Wireshark includes a command line utility named reordercap that can fix packets that can't have been on the network in that order (like an answer being sent before you see the request for it).   In the example below the utility has run through a capture and reordered items and saved the file as a new file.     See the Wireshark reordercap help topic for further information on this utility.

Issue In Swagger user can login but can't get the id of the root container. Below response is received: "Message": "Container Id not found" Product Line EcoStruxure Building Operation Environment SmartConnector Cause EBO user password need to be changed due to Password Expiry configured in the password policy. When user tries to login to WorkStation or WebStation, below change password dialog will be recieved.   Resolution Make sure to change the user password before reaching the limit the days configured in the Password Policy. Password expiry can also be reconfigured to change number of days or disabled if not needed, refer to Configuring the Password Policy using WorkStation or Configuring the Password Policy using WebStation

Issue When changing values like Check-in interval (s) under Poll Control for Zigbee device SED-MTH-G-5045, the value seams not to have been change when opening the dialog again. Product Line EcoStruxure Building Operation. Environment Building Operation Automation Server Premium (AS-P) Building Operation Room Controller (RP-C) non-Greenpower sensors SED-MTH-G-5045 Cause Setting is sent to the sensor only once every tenth minute. Resolution Open the dialog box again after 10 minutes to verify your changes.

Issue When using the Find function to search for specific records the default size of the Find window can mislead the user to think there are no records to select from. Find Button Product Line EcoStruxure Security Expert Environment Security Expert Client Cause The default size of the Find window is too small for some of the field values to be displayed which can lead the user to think there are no records to search for. Resolution Resize the Find window by pulling down on the bottom right corner which reveals a list of selectable records and the right-hand side scroll bar. Expanded Find Window

Issue Incorrect Default Gateway setting may prevent communication with the JACE-9000 Product Line TAC IA Series Environment I/A Series Jace 8000/9000 Cause The Jace8000 and Jace9000 both have primary and secondary LAN adapters. Previously, Workbench prevented users from some invalid IP configurations, but current versions of Workbench, when connecting to a 9000 will allow invalid configuration in the default gateway. Resolution In the 9000, a user can set different default gateways for the Primary (en0) and Secondary (en1) ports. This should not be allowed on a single network device, and leads to unpredictable behavior when routing. Compare the location of the IPv4 Default Gateway in the TCP/IP Configuration of the Platform on a 9000:      And the same page as seen in the 8000: In future versions, this will be changed, but users should avoid invalid configurations in the affected versions. When configuring both LAN ports for use on a 9000, only enter a value for the default gateway field in one adapter. Leave the other intentionally blank. It does not matter which is given a default gateway and which is left blank. Note: Sometimes, when an Adapter has the Default Gateway, you cannot connect to the other Adapter (despite correctly being on that Adapter's local subnet). These symptoms can be triggered by the Ethernet "link" (active connection) toggling up or down.  The link state can change whenever: the JACE is rebooted or power-cycled; and/or the Ethernet switch ("hub")  is rebooted or power-cycled; and/or the Ethernet cable(s) are un- or re-plugged (at either end). In some cases, the symptoms can alleviated by toggling the Ethernet link state, in the ways listed above.

Issue All Controllers appear offline with any associated I/O showing a status of “Unknown”. The Security Expert Event Service's memory usage builds up until it gets close to 2GB when the controllers go offline.  Restarting the Security Expert Event Service brings the controllers back online. After a period of time the issue re-occurs and controllers again appear offline. Product Line EcoStruxure Security Expert Environment Security Expert Cause A potential memory leak in the Event Service would cause the service to stop working resulting in controllers appearing offline. Resolution 1. Upgrade to Security Expert version 4.3.370.1 or greater as discussed in known issue. 2. A potential workaround to mitigate the frequency of the problem is to disable the Event service from using MSMQ. As long as there are no site integrations using MSMQ then this option can be disabled in the Event Service Config file. Go to ..\Program Files (x86)\Schneider Electric\Security Expert and edit the SecurityExpertEvtSvr.exe.config file. Search for the MSMQ key <add key="MSMQ" value="1" /> and replace it with the following. <add key="MSMQ" value="0" />

Warning Potential for Data Loss: The steps detailed in the resolution of this article may result in a loss of critical data if not performed properly. Before beginning these steps, make sure all important data is backed up in the event of data loss. If you are unsure or unfamiliar with any complex steps detailed in this article, please contact Product Support for assistance. Issue Methods are needed to purge access events with Security Expert running on SQL Express Product Line EcoStruxure Security Expert Environment EcoStruxure Security Expert Microsoft SQL Express Microsoft SQL Server Management Studio (SMSS) Cause Security Expert operating on Microsoft SQL Express can exceed the 10GB limitation depending on configuration and system size Resolution There are several things to consider when configuring Security Expert when running on Microsoft SQL Express which has a 10GB size limitation and other limitations. This article will address the following items: Backup of the SecurityExpert and SecurityExpertEvents databases, review of the database file sizes, automatically and/or manually purge access event records, shrink the database(s) to regain hard drive space, and return the system to operational status.   1. Create database backups for the SecurityExpert and SecurityExpertEvents databases (Select a method) a. Configure options in Security Expert under Global Settings> General> Main Database Backup b. Use Microsoft SMSS. Right-click on the database, select Backup and complete the steps Note: It is recommended to save the databases as different file names than the original database  names to keep a copy of the database prior to deleting records. 2. Examine the database file sizes a.  Observe the file size In Windows Explorer, Navigate to:  C:\Program Files\Microsoft SQL Server\MSSQL(version).SECURITYEXPERT\MSSQL\DATA Observe the file size of the SecurityExpertEvents database If the site is using Microsoft SQL Express and the database file size is close to or over 10GB, events will need to be purged. Note: SecurityExpertEvents files. One file is the transaction log and the other is the data file. The file highlighted above is the data file. b. Check the Windows Application log: There may be a message with evidence of database size issues in the Windows application log, i.e. "Primary Filegroup is FULL" 3. Check the database recovery model configured for both databases in SMSS If "FULL" is used instead of SIMPLE the database(s) will grow quickly See the following KB article for more details on Recovery Mode: https://community.se.com/t5/Building-Automation-Knowledge/Security-Expert-functionality-starts-to-degrade/ta-p/441818 An article with additional details about the database table sizes: https://community.se.com/t5/Building-Automation-Knowledge/Security-Expert-Database-Table-Sizes/ta-p/482178 4. Purge the SecurityExpertEvents db (Select a method) a. Purge using Security Expert Under Global Settings> General> Events Database Configure Purge events older than – there is a drop-down with a list of selections See the Security Expert About> Help for more information. Search on Purge and select Global Settings Note: It’s best practice to delete a month or so at a time. Deleting many events at a time can  cause the server to time out. After the Security Expert purge, use SMSS to Shrink DB and Shrink File (These actions remove the recently deleted records from the hard drive freeing up space Right-click on the SecurityExpertEvents database> Shrink> database Right-click on the SecurityExpertEvents database> Shrink> File b. Manually delete access events using SQL queries In SMSS, run the following query to retrieve all access events and make note of the number of records select * from events order by logged time asc Example: Note 2840 rows     To purge the records run the following query: (Caution: these records will be removed from the database) Use SecurityExpertEvents; Delete from dbo.Events Where LoggedTime BETWEEN '2024-06-13' AND '2024-06-14' Adjust the above query to reflect the dates required) 8 rows affected select * from events order by logged time asc – after running the delete query Example:2832 rows Note: It’s best practice to delete a month or so at a time. Deleting lots of events at a time can  cause the server to time out. c. Shrink database This action removes the recently deleted records from the hard drive freeing up space Right-click on the SecurityExpertEvents database> Shrink> database 5. Verify Security Expert functionality Once the purge and shrink are completed, verify Security Expert is operating normally Note: If the system is not working normally, restoring a previous version of the database(s) from earlier backups may be necessary that were taken before exceeding the 10GB limitation. DBCC is a Microsoft tool for checking the integrity of a SQL database which is beyond the scope of SE Product Support. Please refer to Microsoft's documentation on this subject or consult a Database Analyst.

Issue New user with an external email account was created but never received an email invite Product Line EcoStruxture Building Data Platform Environment Building Data Platform Cause Incorrect email User registered for the wrong platform (UAT or Prod) IDMS issue Resolution Attempt to log in, this should kick off the registration process again Verify that the email is correct Verify which platform the user should be registered to

Issue Required a VPAT (Voluntary Product Accessibility Template) or statement of accessibility for EcoStruxure Building Operation. Product Line EcoStruxure Building Operation Environment EcoStruxure Building Operation Cause The Voluntary Product Accessibility Template (VPAT) is a document that evaluates how accessible a particular product is according to the Section 508 Standards. It is a self-disclosing document produced by the vendor which details each aspect of the Section 508 requirements and how the product supports each criterion. VPATs are used by buyers to determine how accessible a product is and where any potential deficiencies are. They are required by some buyers before a purchase is made. More Information can be found from the below public links: Section 508 of the Rehabilitation Act of 1973 Voluntary Product Accessibility Template (VPAT) Overview of Technologies and Formats WHAT IS A VPAT AND HOW IS IT USED? Resolution Schneider Electric does not have a VPAT document for EcoStruxure Building Operation.