Building Automation Knowledge Base

Issue When using a USB to RS-232 adapter and an MN-CIM, cannot connect to MicroNet 2000 controllers. Receive an ERROR = -510. The problem has also been seen on laptops with an integral serial port. Environment Laptop computer running the MN-CI or MN-FLO-BAL software tools,  any version MN-CIM Controller interface Module Cause One cause of ERROR = -510 is that the serial port or USB to RS-232 adapter does not supply enough power to the "port-powered" MN-CIM. When the CI software is running, but not communicating on the U-LINK, it requires only 12 mA at 5 VDC. To communicate on the U-LINK, the MN-CIM requires 14 mA at 5 VDC from the DTR control line of the port.  Some computers have a mechanism to sense the increased current draw and shut down the DTR line. This loss of power causes the MN-CIM to reset, and after 3 attempts to communicate the MN-CI software issues the ERROR= -510 message. Resolution See Technical Bulletin 01-104 for information  on the Patton Electronics power supply adapter, model 3PMF9-BC.

Issue Upgrade Xenta I/O modules Environment Xenta 421A, Xenta 422A, Xenta 420A Xenta 411, Xenta 412 Xenta 491/492 Xenta 451A, 452A, 450A Xenta 471 Cause It is not very common to upgrade I/O modules. If it must be done, they are upgraded the same as any other LonWorks device without a host processor. Resolution Right click on the target file to store the file locally on the hard drive. To be able to download the NXE-file, you need both the NXE and the according XIF-file for the specific device. In LonMaker, select Replace or Commission, depending if the device are already in the database or not. If the XIF-file already exist in the database, select the correct Device Template. In the next dialog, select Load application image. Browse to find the directory for the NXE-file. Change File of type to NXE. Browse to find the directory for the XIF-file. Select Next to decide about source for CP values. Select Next, if you do a Replace, you could select the Neuron ID manually, and the old Neuron ID will already be in the dialog. Select Finish to download the new NXE-file into the device.

Issue Satchwell Sigma integration to BACnet Environment Satchwell Sigma IC-GEN-DDE PolarSoft BACdoor DDE Server Cause There is a need to integrate BACnet devices / system into Sigma. Resolution Refer to Product Information Bulletin 02.07.05-3 - BACnet I/O server for IC-GEN-DDE for details on the integration. Other than purchasing the IC-GEN from Schneider Electric, you will also need to purchase the BACdoor DDE Server from PolarSoft. Purchasing information can be found here.

Issue When trying to distribute personnel to Netcontrollers, about half of them fail with the message: Error text undefined (TBD) 0x00002001 under the Last Error column in the Access Distribution View. Environment CyberStation Access Control Cause Access distributions are failing with the same error message in the access distribution view. Resolution Make sure that there are no access controllers that are offline. If there are, and they cannot be brought back online right away, such as during a site renovation, set them to "Out of Service" until they are able to communicate. If they are no longer to be used then delete them - as CyberStation may be trying to distribute to them. This same error message came up on a different project. It was noted that the personnel that failed to distribute (with this error) had schedules attached to their assigned areas, and the schedules reside in the controller that gives the error. The problem was resolved by reloading all the access controllers one-by-one.   Make sure if there are remote area schedules that network issues are not blocking the controller receiving the personnel distribution from getting to the remote controller that own the area schedule point. You can test this by creating test points in each controller and using a program to import the point, in some cases you will see that the program will give the same 0x00002001 error on compilation which indicates network issues. Work with IT to find out what is blocking comm between the two controllers.

Issue The automation server was added successfully; however, it never appeared in the server list. It did, however, get added to the communications tab. The System Tree server list varies from the Communication tab list of servers. No servers shown under "Servers" List in System Tree but is seen in Communications tab Product Line EcoStruxure Building Operation Environment Building Operation Enterprise Server Building Operation Automation Server Cause This is typically caused by the Group account not having permission to access the root path.  To verify this is the issue, log in with the "admin" user account and verify that the server lists match.    Looking at the screenshot below: If the Add (+ icon) option has been used to add the ES-1 Path Permissions, no server will be visible.  Additional Path Permissions need to be added for each server. If the Add System (Hierachial icon) option is used (the default for the local admin account group), this is the System's top-level path. Then, all servers will be seen.       See online WebHelp topic User Account Group – Software Permissions Tab Resolution Depending on which method is required by the end user. If using the Add (+icon) option  Login into the Enterprise Server with the local admin account Navigate to the Group(s) that need access to the server list and select the Permissions tab Add (+) the Automation Server(s) to the path permissions as shown below: Repeat the above step for every server Each time a new Automation Server is added, repeat all steps.  If using the Add System (Hierachial icon) option Login into the Enterprise Server with the local admin account Navigate to the Group(s) that need access to the server list and select the Permissions tab Add System (Hierachial icon) to the path permissions as shown below: Users must log off and log on to see any of the implemented changes.    

Issue In a life safety-related application, such as a fume hood, it is a requirement that the status of the end switch is not shared via peer-to-peer bindings. Instead, the end switch status must be hard-wired to all four controllers. What precautions should be taken to ensure that this will not cause issues. Product Line EcoStruxure Building Operation Environment Building Operation Room Controller (RPC) 24 V Cause Connecting multiple RP-C to the same dry contact.    Resolution Make sure to use individual transformers to each controller (i.e. one transformer to one controller power supply) to minimize the risk of short circuit.

Issue Ensure a version of TLS is disabled using OpenSSL Product Line EcoStruxure Building Operation Environment Enterprise Central Enterprise Server Automation Server Cause Need to verify TLS is disabled on an EBO server in case of incorrect text entry Resolution It is possible to check which TLS protocols are set to be disabled using WorkStation Control Panel's Security Settings or in the Device Administrator SSL Security Settings tab. If the version required is not disabled then consult Disabling TLS and SSH. Once the protocol is set to disabled follow the steps below to verify using OpenSSL Open a command prompt and change directory to the OpenSSL folder. If OpenSSL is not available consult OpenSSL installed with EBO or install OpenSSL as mentioned in Ensuring the SSL Host Certificate and key file are a matching pair To check if TLS is disabled enter the command openssl s_client -connect 'server address':'port'-'TLS version'.  For example if the server IP address is 192.168.5.95 and using port 443:- openssl s_client -connect 192.168.5.95:443 -tls1    openssl s_client -connect 192.168.5.95:443 -tls1_1 openssl s_client -connect 192.168.5.95:443 -tls1_2 openssl s_client -connect 192.168.5.95:443 -tls1_3 If an error is returned (1) and no certificates are available (2) then the TLS version is Disabled. If a certificate chain (3) and certificate details (4) are returned the TLS version is Enabled. The image illustrates only the start of the returned information, more will be available.   For additional information search "OpenSSL s_client" using an online web browser.  The s_client command can be used to test TLS server connectivity, TLS/SSL version support, check cipher suites, and verify server certificates.  

Issue Receive Error: "Unexpected file format" when attempting to open Graphic Page Environment I/NET Seven 2.41 graphic pages Cause When creating, modifying and saving graphics in revision 2.41 and then attempting to open these graphic pages in previous versions of I/NET this error "unexpected file format" is presented. Resolution This issue has been rectified in 2.41A and above. I/NET Software are available for licensed Partners to download on The Exchange Download Center.

Issue After configuration, Suprema readers are showing as offline in the Security Expert client. There are Security Expert Download Service events logged in the windows application event log. Cannot load DLL - LoadLibrary() Failed. Cannot load DLL event mesage Product Line EcoStruxure Security Expert Environment Security Expert Suprema biometric readers Cause Required DLL SecurityExpertSV2.ThirdParty.dll is missing from the installation folder. Some versions of Security Expert installer will not install this required DLL and the file need to be manually added. Resolution Check the Security Expert install folder, typically C:\Program Files (x86)\Schneider Electric\Security Expert, to confirm if the file SecurityExpertSV2.ThirdParty.dll is present. SecurityExpertSV2.ThirdParty.dll   If the file is not in the installation folder then it can be sourced from the integration guide ZIP package. AN 264 Security Expert - Suprema Biometric - Integration Guide contains the three DLL's required for the integration. Install the file by copying it into the installation folder, then restart all of the Security Expert services or restart the Security Expert server.

Issue After TAC Vista Server is started, logging into TAC Vista Workstation, an error "Ensure that Vista Server is started" occurs. Product Line TAC Vista Environment TAC Vista Server TAC Vista Workstation TAC Vista Webstation Cause This issue is due to the DCOM permissions that Vista Server relies on and they must be manually changed. Resolution Helpful Vista Utilities - Configure DCOM instantly, Register ASP.NET contains a DCOM Utility that can automatically set the proper permissions to clear the issue. To manually alter DCOM parameters: Locate the DCOM config in Component Service > Computers > My Computer Right-click TACOS and selected Properties Select Security tab Click the Edit in Launch and Activation Permissions. Add the appropriate groups or user names of computer and Allow them permissions. After finishing the above procedures, the issue should be solved. Error: "Ensure that Vista Server is started" when trying to log into TAC Vista Workstation. The server is started. also discusses this issue.

Issue Can the xPBD4 be used with an i2 or b3. Environment xp Expansion Module Cause Is the xPBD4 compatible with an i2 or b3. Resolution No. The following note is from the xP Expansion Datasheet: The xPBA4 and xPBD4 Expansion Modules can only be connected to the bCX1 Controller/Routers and ACX Series Access Controllers. The other xP expansion modules do work with the i2/b3 controllers. See the attached data sheet for more info.

Issue When trying to create or update a Security Expert database the error 'Invalid Database Server is displayed Product Line EcoStruxure Security Expert  Environment EcoStruxure Security Expert  Microsoft SQL Server Cause The path to the SQL Server from the Client is incorrect or inaccessible and will not resolve Resolution There are a number of resolutions to this issue depending on the cause. This article mainly focuses on a configuration where the Security Expert and Microsoft SQL Server are on separate PCs. The error can happen locally also but is less likely. One or more of these resolutions may be required to fix the issue. 1. The Server / Instance name is incorrect when typing it into the Database Server dialogue box during installation. (Local SQL Server) Default Database Server Dialog Box    There can be some confusion on what to enter into the dialogue box because, by default, the instance name and the main database name are the same. Ex. Server Name\Instance Name    Database       localhost\SecurityExpert            Security Expert   (Remote SQL Server) Ex. Server Name\Instance Name    Database       SVR19SQL19\SecurityExpert     Security Expert Note: If just the ServerName SVR19SQL19 or SVR19SQL19\SecurityExpert\Security Expert The Invalid Database Server error would occur   Copy and Paste the Server and Instance Names using SQL Management Studio (SMSS) This method can help to avoid typing errors Install SMSS on the same PC that has Security Expert Installed or use SMSS on the SQL server with Remote Desktop From the Connect to Server dialog> Server name, select <browse for more...> Select Network Server and then select the remote SQL server and click OK Right Click> Copy on the blue highlighted server name and instance Paste into the Security Expert Database Server Dialog box   For a detailed description of Instanced and Database, click on the following link Microsoft Database and Instance Article  Note: Try using the IP address instead of the SQL server name. 2. Make sure SQL Server Service is running on the remote SQL server 3. If using a named instance, make sure the SQL Server Browser Service is running on the remote SQL Server 4. Ensure Firewalls have an open port for SQL server (default 1433) 5. Make sure the SQL Server is configured to allow remote connections 6. The Windows account being used to do the Security Expert Installation must have access to create the database on the remote SQL Server.  7. Check the Windows Application and System logs on the Security Expert and SQL Server for errors related to the Security Expert Install, DNS or Connection errors 8. Examine the SQL Server Log for error messages   Ex. If Active Directory is being used, the error “The SQL Server Network Interface library could not register the       Service Principal Name (SPN)” This issue can be fixed by giving the domain account the appropriate permissions in Active Directory. Permissions required are:  ServicePrincipalName: Read  ServicePrincipalName: Write   Log in to the server running your Active Directory service and execute the following steps: Run Adsiedit.msc In the ADSI Edit snap-in, expand Domain [YourDomainName], expand DC= RootDomainName, expand CN=Users, right-click CN= [YourAccountName, and then click Properties. In the CN= AccountName Properties dialog box, click the Security tab. On the Security tab, click Advanced. In the Advanced Security Settings dialog box, select one (any) of "SELF"'s row Click Edit, Open Permission Entry dialog box. Make sure the Principal is "SELF", Type is "Allow" and "Applied to" is "This Object Only", in the Properties section, select the properties below: Read servicePrincipalName Write servicePrincipalName Click OK to apply all changes and exit the ADSI Edit snap-in Finally, you need to restart the SQL Service(s) that use the account in question.   9. If you are still unable to get passed the "Invalid Database Server' error, please open a case with Technical Support.

Issue  Error  'Communications failure due to device not online' during personnel distribution Environment CyberStation CX9900 CX9702 CX9680 ACX5720 ACX5740 ACX701 ACX781 Cause By default CyberStation will try to speed up the personnel distribution as much as possible in order to expediently distribute all the card records to the controller. There may be situations where the controller may be overwhelmed,  100MB NIC in the controller  versus a 1Gig NIC in the Cyberstatom and by the amount of traffic caused by multiple CyberStations distributing multiple records simultaneously. Resolution Continuum contains some facilities available in the General Preferences window where adjustments can be made to throttle the personnel distribution. Lines 12 and 13 are the settings used to throttle personnel distribution going to field devices such as ACX701 or ACX781 Lines 14 and 15 are used to throttle personnel distribution going to LAN controllers such as the CX9680 (NC2), ACX5740 (ACX2), CX9900 etc The interval between personnel distribution is in milli seconds, a reasonable value to start at when issues are encountered is 50 milli seconds. Ex. Line 15 change from 0 to 50 Increase by 25 milliseconds after that to get better results. Ex. 50, 75, 100

Issue For troubleshooting and information gathering database queries are useful Product Line Andover Continuum Environment Continuum Cyberstation Microsoft SQL Cause At times engineers and onsite techs need some queries to gather information for troubleshooting or to correct issues. Resolution Click here to download some sample read only queries

Issue How to estimate the thermal load (BTU/hr) that your controllers and equipment will produce. Environment All electrical equipment. Cause Need to know what the thermal load of our equipment will be for calculating air conditioning capacity. Not all of our equipment has this information provided in data sheets. Resolution It is possible to calculate the thermal load based on the power consumption of each device. See here for an online calculator. You can calculate the BTU/hr using the following formula. BTU/hr = Power (W) * 3.1412141633 As an example, looking at the Continuum AC-1 I/O module's datasheet, we see that it consumes 2.6W without the attached reader (you would need to add the power from the reader as well if it is being powered by the AC-1). Which gives us; AC-1 = 2.6W * 3.412141633 = 8.87 BTU/hr Use this same calculation for any other devices that you require the thermal load for.

Issue Valid cards are being denied access at doors with "Read Raw" events seen in the Status Page. Read Raw Data Read Raw Data Events Read Raw Credential Data Read Raw Credential Data Events Product Line EcoStruxure Security Expert Environment Security Expert Cause The credential being supplied to the doors reader can be read but is not able to be matched to a valid User in that controller. There could be a couple of reasons for this: Pending downloads have not yet gone through to the respective controller The User in question does not have access to any of the Doors in that controller. Resolution Wait for downloads to complete or manually perform a download to send any pending User updates down to the controller. If the User is supposed to have access to the door they are badging at then confirm they have been assigned an Access Level that includes that door. To hide the events refer to Do Not Display Read Raw Data Message. To display a different message for the event refer to  Add Users to a Controller so all Card Events are Associated.

Issue Define what Network 8000 devices that can be integrated with EcoStruxure Building Operation. Product Line EcoStruxure Building Operation, TAC I/A Series Environment EcoStruxure Building Operation Automation Server version 1.2 until and including 3.2 Network 8000 Cause Need to know the supported devices for a Network 8000 to EcoStruxure Building Operation upgrade.  Resolution EcoStruxure Building Operation supports the following Network 8000 LCM devices: LCM EcoStruxure Building Operation supports the following Network 8000 ASD devices: Microzone II MicroFlo II LIM PEM  The following Micronet 2000 products are supported: MN-FLO MN-FLO3T MN-HPFC MN-ASDI  The following Network 8000 products are not supported in EcoStruxure Building Operation: CCL GCM LNC SIM GCM PLC Note: EcoStruxure Building Operation version 4.0 (EBO 2022) and higher are not supported

Issue Trying to run a Script program from a Graphic but getting error Read Only Property. The control in the Graphic has been bound to a VALUE object, in the Script program an output variable (ManualChange in the code below) is bound to the same VALUE object. The program is supposed to toggle the value of 'theOutput' when triggered by setting 'ManualChange' from the Graphic, this works in versions prior to 1.4. Numeric Output theOutput, ManualChange LEAD_CHANGE:   ManualChange = Off Goto WaitForManualCHG WaitForManualCHG:   If ManualChange = On then   if theOutput = on then theOutput = off else theOutput = on   Goto LEAD_CHANGE endif Product Line EcoStruxure Building Operation Environment WorkStation Automation Server - AS Enterprise Server - ES Cause Starting in version 1.4, SmartStruxure does not allow more than one write reference to the same VALUE, once a write reference is defined for a value or other references to the same value are READ ONLY. (See Reference Guide and References beginning with 1.4.x) Resolution Change the ManualChange variable in the Script to a PUBLIC and then from the Graphic bind directly to it. Numeric Output theOutput Numeric public ManualChange LEAD_CHANGE: ManualChange = Off Goto WaitForManualCHG WaitForManualCHG: If ManualChange = On then if theOutput = on then theOutput = off else theOutput = on Goto LEAD_CHANGE endif   See screen shot below of the binding in the Graphic

Issue How to set up ID Works 6.5 in Windows 7 64-bit. Product Line TAC INET Environment ID Works version 6.5 I/Net Seven rev 2.4X SQL2008 R2 (Full) SQL2008 R2 Express Cause Normally this is needed for an upgrade or a new install of ID Works and I/Net Seven on a new Windows 7 64-bit PC. Resolution See ID Works Win7 64-bit Setup.pdf for step by step instructions for setup.

Issue Configure REX button to be able to permanently lock or unlock a door if pressed for a set amount of seconds. Product Line EcoStruxure Security Expert Environment Security Expert Server Cause REX button does a momentary unlock then relatches the door. Would like to unlock or lock doors using the REX as determining factors are too dynamic to use a schedule. Resolution What is needed 2 Inputs (A & B) 4 Outputs (A, B, C, D, & E) 4 Programmable Functions (A, B, C, & D) 1 Dummy Area (Test Area) 2 Input Types (Input Triggers Output & Input Toggles Output) 1 Door with REX connected (Door X) Inputs Input A (REX Button) General Tab Control Output: Output A Areas and Input Types Tab Area: Test Area Input Type: Input Triggers Output Input B General Tab Control Output: Output E Areas and Input Types tab Area: Test Area Input Type: Input Toggles Output Input Types Input Triggers Output Options 1 Tab Generate Alarms checked Options 3 Tab Activate Input Control Output on Alarm checked Deactivate Input Control Output on Restore checked Input Toggles Output Options 1 Tab Generate Alarms checked Options 3 Tab Toggle Input Output State checked Outputs Output A, B, C, and E are just standard virtual outputs Output D General Tab Activation Time (seconds): the amount of time you want to hold the REX to activate the unlock/lock (I.E. 5 seconds would require you hold the REX button for 5 seconds) Programmable functions: Programmable Function A: Type: Ripple Output Output to trigger: Output A Stage 1: Output B Stage 2: Output C Inter Stage on Ripple Time: 5 Programmable Function B: Type: Logic Control Logic Function Mode: 7 Follow Logic And First Output to Check: Output A Second Output to Check: Output C Output to Control: Output D Programmable Function C: Type: Input follows Output Input follows Output: Input B Output to follow: Output D Programmable Function D: Type: Door Control Door Function Mode: 0 Follow and Test Output Door control Mode: 1 Latch Door unlock Output to Check: Output E Door to Control: Door X Make sure you right-click each programmable function and start them. Go to the Test Area and set it to Armed.