Building Automation Knowledge Base

Issue What third party Card Printers are supported for use with Security Expert? Product Line EcoStruxure Security Expert Environment Security Expert Client Third-party Card Printers Cause There is no list of supported printers as there are too many devices to test.  Some testing has been done as listed in the resolution below.  If an issue should come up with a card printer then raise a support case and they will assist where possible and offer suggestions regarding the update of printer drivers, windows and printer preferences, etc. If necessary and the customer cannot resolve an issue then they may wish to supply the particular printer for testing and validation. Resolution There is currently no list of supported Card Printers, the following two printers have been tested by Engineering  with Security Expert: Datacard SD260 Datacard CD800 Indications that the HID Fargo HDP8500 and Fargo DTC4500e also work with Security Expert. In general, if the card printer presents itself in Windows as an XPS printer, then the printer should work with the Security Expert Client. This may require a printer driver to be downloaded and installed from the printer manufacturer for the printer to show up in the "Printers and Scanners" list in Windows.   Note: R&D has indicated that currently (12/19/2024) there is no list of printers or documentation as to what specific features or configurations are supported by each printer above.   Some functionality in Security Expert and within printer drivers allows the selection of landscape or portrait orientation. However, hopper selections are not currently supported. Printer testing was done with standard iso card printing using landscape and portrait using a single hopper. Any other requirements outside the above will rest fully with the partner/branch/customer to test and confirm it works as needed.    In unsupported printers it has been observed that some printer functions, such as badge orientation and hopper choice, may not work for all printers using the pop-up printer configuration window within Security Expert client. In those cases a workaround may be to manually change the default printer options in Windows to the required setting before printing badges. If specific functions or badge printers are required then a feature request can be submitted to potentially implement that in a future version of Security Expert. This will need to be raised with your local solution category management.

Issue General Continuum instability is followed by the following error when viewing Graphic panels. "Pinpoint: Failed to call pILiveData->GetLiveData(). ACDataServices has an error." Product Line Andover Continuum Environment Continuum Cyberstation Cause Continuum has become unstable due to modules not starting up properly. This can be evidenced by looking at the Windows Application Event Logs for "Send Email" errors when alarms occur. This may then be followed by Continuum applications starting to crash and post errors. Resolution Remove "email" and "page" entries in Event Notifications if there has not been an Email client installed and configured to email alarms. Set Windows virtual memory settings to 4096. Ensure time synchronization between Cyber and CX. In Continuum General preferences set the Time Interval Between Requests to 100 (default is 30). Set COV increment for noncritical points to non-zero numbers (default is 0). Upgrade to 2.03. If already at 2.03, a reinstall of Continuum may be necessary or at least the pre-requisite 'Visual C++ 2005 redistributable'. Also refer to: Crash of ACCDataServices on start-up or run 

Warning Electrostatic Discharge Required: Always discharge static electricity from your person by touching metal prior to handling any hardware. Failure to do so may result in damage to devices.   Issue Fire Panel unable to display the Media Gateway Card version in system information. Product Line ESMI Fire Detection. Environment FFSULH1007. Cause Panel message output on Media Gateway Card TCP/IP port not functioning and impacting BMS integration with the panel.  Resolution The Media Gateway Card firmware needs to be updated. Follow the steps below to update the Media Gateway Card firmware.   Prerequisites An SD card and SD card reader is required to make a bootable SD card for the firmware update files.   Prepare the SD card The first stage to update the firmware of the media gateway card is to prepare and install the firmware file onto the SD card. The media gateway card requires a micro-SD card. The firmware file is approx. 320MB, so select an SD card with suitable memory size. Format the SD card. Open up Win32Diskimager software. You should see the screen appear below. Click on the open file tab and then select the firmware file. When the firmware is selected it will populate the image file box. Click on the ‘Write’ tab and you should then get a pop-up screen shown below. Click on the ‘Yes’ tab. The firmware will now install onto the SD card. When you see the pop-up screen ‘Write Successful’ appear click on the ‘OK’ tab. The firmware is now loaded onto the SD card. Close down the Win32Diskimager software and eject the SD card form the PC. Install the Firmware Install jumper link onto the middle and top pin of X7 (as per the image below). There is a sliding cover on the socket. First slide the cover to unlock it, then hinge it up. Place the SD-Card in the socket. Hinge down the cover, then slide it to lock it as below The media gateway must be restarted to initiate the installation of firmware. This is done by pressing the reset button, shown in the picture below. The Media Gateway card has a set of 6 LEDs that indicate the status of the card. During normal operation one of the LEDs flashes regularly once each second. After a few seconds you will see a moving pattern progressing through the six LEDs. This indicates that the installation is in progress. The installation will take a few minutes to complete. Note: During this time the panel may display a fault condition that the media gateway card is not present or not working correctly. You can ignore this fault indication. When the firmware installation on the media gateway card is complete, the pattern displayed on the six LEDs will change. Instead of a moving pattern progressing through the six LEDs, all six LEDs will flash on and off together. Once you see this pattern, with all the LEDs flashing together, you should uninstall the jumper, remove the micro-SD-card, and then press the reset button. The media gateway will restart then running the newly installed firmware. It will take a few seconds for the media gateway board to achieve its normal operating state. If the panel displayed a fault indication that the media gateway board was missing, this fault should clear. The ESMI ULTIMA panel now needs to be rebooted to accept the updates from the media gateway card.13. Once the ESMI ULTIMA panel has initialised the firmware installation is now complete.  

Issue Knowing the types of licenses, differences between each one, and the revisions supported by the license. Product Line TAC Vista Environment Vista 5.X Cause There are three different types of licensing for a Vista system. Resolution There are three types of TAC Vista software licenses. TAC Vista Demo License This type of license is for temporary use. It expires every thirty days. It is the full version license excluding OPC server licenses. The demo license is available on Schneider Electric buildings business extranet. (Products >TAC Vista > Vista Software > Evaluation License File). No activation required, ready to use after downloading. (Store the license file into C:\Program Files\Schneider Electric\License Files, by default.) Monthly demo licenses only work locally for the PC where they are installed.  You cannot use a License Server to serve up remote Workstation licenses to a remote PC, for example. For remote Workstation usage, please use the TS version of demo license instead. Demo licenses contain unlimited TAC Vista Webstation seats which allow multiple people log into Webstation simultaneously on the server PC and other computers.   TAC Vista Engineering Dongle This type of license is for Schneider Electric engineers or partners use. It comes with the full version license besides the OPC server licenses.  Please read Part number for Vista 5 engineering dongle for more purchasing information. No activation required, ready to use after receiving. Simply put the engineering dongle into one of the USB ports. You may be asked to install some software upon first time use. Note:  Insert the engineering dongle prior to starting the TAC Vista server. Engineering dongles only work locally for the PC where they are plugged in.  You cannot use a License Server to serve up remote Workstation licenses to a remote PC, for example. Engineering dongles contain only one (1) TAC Vista Webstation seat. In addition, user can log into Webstation only on the sever PC.   TAC Vista Customer License This type of license is for end user use. Depending on the customer needs, different features of Vista software can be purchased standalone or in packages. For more information about each software feature or packages, please read the Vista 5 Software license packages and Vista 5 product catalog. Customer licenses are restricted to the minor revision of the Vista software or lower. A Vista 5.0 license will not function on a Vista 5.1 installation. However a Vista 5.1 license will work for all 5.1.x installations as well as all 5.0.x installations. Maintenance agreements ( XXXX 1 year licenses) are available for most TAC Vista 5.1 software modules. An active maintenance agreement ensures that the license has access to any new, minor and major, versions. Maintenance agreements are automatically renewed at the end of each 12 month period. The termination notice is three months. Minimum agreement time is three years. Activation of the license is required. You can generate the license on the https://schneider-electric.flexnetoperations.com website with the entitlement ID received via email after purchasing. The license needs to be locked to: Computer MAC address If you lock the license to a computer's MAC address, the license needs to be stored on this particular computer (C:\Program Files\Schneider Electric\License Files, by default), and it can only be used on this computer.   An onsite dongle (end-user dongle) The dongle needs to be purchased separately (name: Vista 5 Hardware Dongle, part number: 000857510 on the iPortal).  If you lock the license to the onsite dongle, you can use TAC Vista software on any computer as long as this dongle is plugged in. You can re-host the license to another MAC address or onsite dongle up to 4 times in a 1 year period. If you exceed this re-hosting limit you will need to contact Product Support with a valid reason why this occurred, and the limit can be reset. For additional customer licensing information please read TAC Licenses Installation Manual and TAC Vista 5.0 to 5.1.7 license does not work after installation for how to use LMTOOLS to manually read site license.

Issue Even though the curve block is set to range between 0-100, the block just stays at a fixed output somewhere in the curve output range. Product Line TAC Vista Environment Vista Workstation Cause The curve requires the first entry of the X value to be the lowest value, and then the subsequent values to be larger than the previous X entry. Resolution Adjust the order of the XY entries on the curve block so the first entry in the X will be the lowest value. Example of Incorrect Curve Here is an example of a Curve that will not work. Note the first X entry is -2 and the last X entry is -6.  Example of Correct Curve To correct this curve, -6 is the lower number, so this should be the first X entry. Here is an example of the curve that has the correct X entry order.

Warning Electrostatic Discharge Required: Always discharge static electricity from your person by touching metal prior to handling any hardware. Failure to do so may result in damage to devices.   Note: Always completely power OFF the panel whenever inserting or removing hardware in the panel. Issue Not able to see the network panels status, trouble messages, events, cause and effects etc. Product Line ESMI Fire Detection. Environment FFSULH1009. Cause Networking issues can significantly impact the performance and reliability of the Esmi Ultima system. This article provides troubleshooting steps to resolve common networking problems. Resolution The following network-related troubles can occur on the Esmi Ultima Fire Alarm Control Panel. See the detailed descriptions below for explanations on each trouble message.   Trouble Message Description Network Communications Trouble This event indicates there is no communication between this panel and its neighbor. This could be caused by a configuration error (such as using the wrong baud rate), a wiring error, or damage to the wires connecting the panel to its neighbor. If this trouble occurs on one link on the panel, then the panel is still in communication with other panels on the network. If this trouble occurs on both links on the panel, then the panel is no longer in communication with other panels on the network. Note: make sure remove the 0 ohm resistance from the network card. Unexpected Network Node This event indicates a panel has been detected on the network that is not in the configuration. This is a configuration error and should never occur once the network has been properly configured. Network Card Missing This event indicates that the panel is configured for networking, but there is no network card installed, or it is installed incorrectly. This trouble may also occur if the network card processor fails. Connection Error This event indicates that the panel has failed to get a meaningful result for the link impedance measurement. This may occur if stray leakage current enters the link wiring from elsewhere, or if there is a component failure or missing jumper on the network card. This event may also be shown when the network is disconnected or when the NET OUT + wire is disconnected. Network Panel Missing This event indicates that another panel is configured but has not been found on the network. This may occur if the missing panel is switched off or disconnected from the network. This fault will also occur if there is no communication between a panel and either of its neighbors on both links. In this case, the panel will show multiple instances of this trouble; one for each other panel on the network. Network Node Double Addressed This event indicates that more than one panel on the network has the same node number. This is a configuration error and should never occur once the network has been properly configured. Full Short Circuit Trouble This event indicates that a short circuit has been detected by the link impedance measurement. This indicates a wiring error, or damage to the wires connecting the panel to its neighbor. Full Open Circuit Trouble This event indicates that an open circuit has been detected by the link impedance measurement. This indicates a wiring error, or damage to the wires connecting the panel to its neighbor. The following two troubles are optional and are not included in the default firmware build. Partial Short Circuit Trouble This event indicates that the link impedance measurement has detected an impedance below the normally expected range. Partial Open Circuit Trouble This event indicates that the link impedance measurement has detected an impedance above the normally expected range.

  Issue After transitioning TAC INET Access to Security Expert, SP-C health status shows the message "Ring-loop failure at reader expander".   Product Line EcoStruxure Security Expert, TAC INET Environment  Security Expert SP-C   TAC INET Access Control Cause This message indicates that the ring-loop connection is not made.  For the ring-loop connection, the opposite end of the INET subLAN must be connected to Reader 2 on the SP-C. Resolution This message can be ignored if an INET subLAN loop is not used. The Ring-loop Failure error can be avoided by running a jumper wire from Reader 1 pin D0 to Reader 2 pin D0, and another jumper wire from Reader 1 pin D1 to Reader 2 pin D1 on the SP-C that is hosting the INET subLAN If an INET subLAN loop is used, this message indicates a break in the ring loop.    Reference Guide I/NET Access Control Transition to EcoStruxure™ Security Expert (Hardware            Guidelines for Transitioning from I/NET Page 23)

Warning Electrostatic Discharge Required: Always discharge static electricity from your person by touching metal prior to handling any hardware. Failure to do so may result in damage to devices. Issue Having issues with the panel's networking and unable to operate the touch screen or receive trouble messages on the screen. Product Line ESMI Fire Detection. Environment FFSULH1009. Cause The display touch screen may not be working. Resolution You can identify the current situation by checking the LED status as described below:    LED Status LED indicators provide diagnostic information to identify communication.   LED Label  Name  Color  Description LED 1 Heartbeat Red Identifies functional status. LED 2 Tx Comms Green A blinking green light indicates that the module is transmitting data. LED 3 Rx Comms Green A blinking green light indicates that the module is receiving data. LED 4 Trouble Yellow A flashing yellow light identifies an error condition. LED 5 Not In Use Green Not In Use LED 6 Not In Use Green Not In Use LED 7 Not In Use Yellow Not In Use LED 8 Comms for SPI Bus Green Communication present when flashing LED 9 Full Duplex Yellow Full duplex (on) half duplex (off) LED 10 Ethernet Speed Red 10MHz (off), 100MHz (on) LED 12 Communication Green Communication present when flashing   Refer to ESMI Ultima Networking Troubleshooting for further assistance with network related problems

Warning Potential for Data Loss: The steps detailed in the resolution of this article may result in a loss of critical data if not performed properly. Before beginning these steps, make sure all important data is backed up in the event of data loss. If you are unsure or unfamiliar with any complex steps detailed in this article, please contact Product Support for assistance. Issue It is sometimes necessary to move a previously configured Infinet i2 device from one Infinet network to another in the same parent Automation Server. EcoStruxure Building Operation does not provide an automatic way to move an i2 device; it must be done manually. Product Line  EcoStruxure Building Operation Environment Building Operation Automation Server Cause Guidance on steps to move Infinet i2 device from one Infinet network to another in the same host Automation Server Resolution In this example, we are going to move multiple Infinet i2 devices from the Infinet network on COM-A to the Infinet network on COM-B.   Backup Make sure to make a backup of the Automation Server before attempting the steps below. This is in case there is a need to revert the changes for whatever reasons. Export Devices from COM-A From COM-A Infinet network, display a List View of the devices, making sure to have columns displaying the Infinet ID and Serial Number. Write down the Infinet IDs and Serial Numbers of the devices to be moved. In the List View, multi-select the devices to be moved, right click and perform an 'Export', leave the Export Reference Filter at default (Export). After successful export, right click on the selected devices again and delete them from COM-A Infinet network. Prepare COM-B for Import From COM-B Infinet network, display a List View of the devices, making sure to have columns for Infinet ID and Serial Number. Observe the Infinet ID column, and compare with the notes taken above of the moving devices' Infinet ID, for IDs that are already in use in COM-B, you will need to assign a new ID to the device moving from COM-A Infinet network to COM-B, update your notes to include an available ID on COM-B. (see example below of what the notes might look like)   Import Devices to COM-B ***  In the System Tree, select the COM-B Infinet network and perform an import of the XML file created via export above. Physically move the devices from COM-A Infinet to COM-B Infinet. When doing so, avoid introducing duplicated Infinet IDs into COM-B Infinet. Make sure to power down the devices you are moving, connect them to COM-B Infinet, and only then power up the devices. On power up, the devices perform an ID check and stay off the bus if they detect their IDs are already in use. Configure Devices in COM-B From COM-B Infinet network, display a List View of the devices making sure to have columns for Infinet ID and Serial Number. Right click each device moved from COM-A Infinet to COM-B Infinet, and select "Properties", in the "Advanced" tab, enter the appropriate Infinet ID and Serial Number for the device then click "OK". In the List View, right click the device from previous step again, select "Device->Commission", after successful commission the device should go ONLINE Final Steps After all the moved devices are online, you should download ALL (whether moved or not) the devices to have their programs recompile and rebuild their Import/Export tables. Fix any references that were lost due to devices changing Infinet network and Infinet ID *** NOTE Due to an issue that was corrected in EBO 6.x, import may fail with error "Invalid InfinetId", the workaround for this problem is to manually create the Infinet devices on the destination port using the appropriate name, serial number and Infinet ID, then do the import selecting the option to merge on conflict.

Warning Electrostatic Discharge Required: Always discharge static electricity from your person by touching metal prior to handling any hardware. Failure to do so may result in damage to devices.   Issue If you are having trouble with the screen operation, you may need to re-calibrate the touch screen. Product Line ESMI Fire Detection. Environment FFSULH1001. FFSULH1002. FFSULH1003. Cause During shipping, the touch screen calibration may become misaligned. Resolution To calibrate the touch screen, do the following: Hold down the function button on the back of the main PCB and press and release the reset button, continue to hold down the function button firmly until the calibration screen appears this can take up to a minute Once the calibration screen has appeared you will be prompt with 5 crosshairs which you must press in turn. Note: Please note when pressing these crosshairs ensure you use your hand as it has been known to cause issues using tools or stationery as pointers

Issue It is not possible to login to an Automation Server and it fails with the error "Domain Controller version too low' for certain users. Product Line EcoStruxure Building Operation Environment Building Operation Automation Server Cause Remnants of an EcoStruxure Building Operation domain exist in the controller where it has not been removed completely and it is set as the Default Logon Domain. Resolution Login with Administrative Rights: Use a user account with Administrative rights in the Local or another domain explicitly using the Domain name. Delete Partial Domain: Once successfully logged in, delete the offending partial domain. Retry Login: Attempt to log in again. Additional Information: Ensure that the domain is completely removed to avoid future login issues. Verify that the Default Logon Domain is correctly set after removing the partial domain.

Issue Are SNMP traps in StruxureWare Building Operation sent using UDP or TCP? Product Line EcoStruxure Building Operation Environment Building Operation Automation Server Building Operation Automation Server Premium Building Operation Automation Server Bundled Cause Simple Network Management Protocol (SNMP) is an Internet-standard protocol for managing devices on IP networks. Need to know if SNMP messages are sent over TCP or UDP. Resolution SNMP traps in EcoStruxure Building Operation are sent using the UDP protocol.   Additional Information: UDP (User Datagram Protocol) is a connectionless protocol that allows for low-latency communication, making it suitable for SNMP traps which require quick delivery without the overhead of establishing a connection. TCP (Transmission Control Protocol), on the other hand, is connection-oriented and ensures reliable delivery of packets, but it is not used for SNMP traps in this context.

Issue Need to use the Automation Server port log to view BACnet MS/TP communication Product Line EcoStruxure Building Operation Environment Building Operation Automation Server Premium Building Operation Automation Server Bundled Cause Need to capture BACnet MS/TP traffic for troubleshooting. Resolution In EBO 2024 (V6.0) and higher, there is an integrated packet capture feature available in EBO Servers with BACnet Interfaces. This feature allows users to create packet captures that record the BACnet messages that are visible to the EBO Server’s BACnet/IP and BACnet MS/TP networks. Refer to: Packet Captures in EcoStruxure Building Operation

  Issue How can I troubleshoot communication issues between SEAL app and EBO server? Does the SEAL app provide a detailed log for troubleshooting communication issues between the app and the EBO server? Product Line EcoStruxure Building Operation Environment Building Operation Automation Server Building Operation Enterprise Server Ecostruxure SEAL Cause When troubleshooting SEAL communications issues to an EBO server, it may be helpful to get deeper information about the communication between the server and the SEAL application. To do this the following lines can be added to the appsettings.json application settings file as described below in the resolution Resolution Browse to C:\Program Files\Schneider Electric\SEAL Open the file appsettings.json. Depending on your user rights, you may need to copy and edit this file in another folder Go to line 26. After the closing brace }, enter a comma ,  Paste the following: "Serilog": { "Using": [ "Serilog.Sinks.File" ], "MinimumLevel": { "Default": "Information", "Override": { "Microsoft": "Warning", "Microsoft.Hosting.Lifetime": "Information", "SE.SEAL": "Debug", "SE.SEAL.Web.Auth": "Verbose" } }, "WriteTo": [ { "Name": "File", "Args": { "path": "%LOCALAPPDATA%/SEAL/logs/SEAL.txt", "rollingInterval": "Day", "shared": true } } ], "Enrich": [ "FromLogContext" ] }   Save the file. Try logging into the SEAL app and connecting to the EBO server Save the log found under: %LOCALAPPDATA%/SEAL/logs/SEAL.txt Restore the appsettings.json file to its original state.   Attached to this article is a ready-made file for use. Move the original file to another folder Place the attached file in C:\Program Files\Schneider Electric\SEAL After saving the logs, delete the attached file Move the original file back to its original location   In addition to this, it is always recommended to take an event view - Application log

Issue Configured Loytec LConfig application as a service but still do not get communication from the LonWorks Network. Not able to get Service pin from LON devices connected with Loytec NIC from Enterprise Server Product Line EcoStruxure Building Operation Environment Enterprise Server 1.1 Loytec NIC852 (LConfig Tool) Windows 7 Cause LConfig tool version is too old. The LConfig tool, even if set to start as a service, also still needs to start before the Enterprise Server (ES), otherwise the Enterprise Server fails to establish its connection with the LonWorks interface. For information on how to set LConfig to run as a service refer to Not able to get Service pin from LON devices connected with Loytec NIC from ES. Resolution To rectify the cause 1, click here to verify if the LConfig version is the most recent one. If not please download the most recent NIC - LOYTEC Network Interface Software. To rectify the cause 2, you must set the Loytec (LConfig) application service to be a dependency of the Enterprise Server (ES), to do this follow these instructions: Using RegEdit (or similar) edit the Registry Key: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\StruxureWare 1.1 Enterprise Server NOTE: For SmartStruxure version 1.3 and above, go to path: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Building Operation 1.3 Enterprise Server Locate and edit the DependOnService string Add the text LoytecSrv (service name for the LConfig application). Close the editor and reboot the PC Note: When running the LConfig as a service the LConfig Tool is not available from the System Tray and must be started from the program shortcut, located under Start > Programs> LOYTEC Network Interfaces> LConfig As a quick visual check, to see if configured correctly, you can perform a LonWorks Device Discovery on your Enterprise Server, this will show the NIC which has been defined with a red box (see image below). If these are all blue then you will not be able to receive any communications from your devices. Also remember if using the Loytec LIP devices that these should be configured in Smart Mode.

  Issue How can I troubleshoot a communication issue with the Smart Connector. Is there a log available within the AS or ES that shows the Smart Connector communication. Product Line EcoStruxure Building Operation Environment Building Operation Workstation Building Operation Automation Server Building Operation Enterprise Server Cause When troubleshooting Smart Connector issues in an AS or ES it can be helpful to see the communication between the Server and the Smart Connector device to help identify this issue. The trace log within both server types is available and is configured as described below in the resolution. Resolution Open Workstation and navigate to [AS/ES name]/System/Modules/Trace/Loggers/nsp/nsp.csc/nsp.csc.CWSServer. Right-click "nsp.csc.CWSServer" and choose Properties. Under Level, change from "Information" to "Trace", then click ok. Let it run a few minutes. If there are some user input needed to recreate the Smart Connector issue, then perform these steps now. Retrieve the log by right-clicking [AS/ES name]/System/Modules/Trace/TraceSettings and choose Trace settings->Get trace log.  Save the log file. Once debugging is complete remember to change log level back to "Information" (reverse of step 3). Note: If the ES or AS is reset, i.e. cold started or warm started, the log level will return to 'Information', so if further increased logging is required, the procedure will need to be repeated. Note2: This option is only availabe for EBO version 6.02 and onwards

Issue I have an I/NET Controller with a forgotten DCU password. How can I recover it? Product Line TAC INET Environment I/NET Seven Site Cause A DCU password was set on the I/NET Controller and has been forgotten. Resolution Send an email to your local support. Include a copy of the current save file for the controller in question. Support will advise you on the password. Recommendation: For future use, either remove any controller passwords or record them in a secure location where they can be retrieved easily.

Issue There is a need to identify the Ports, URLs and Static IPs which must be open through customer's firewall for EcoStruxure Building Activate Flex Server and Partner Portal Product Line EcoStruxure Building Activate Environment EcoStruxure Building Activate Flex Server EcoStruxure Building Activate Partner Portal Cause Ports, URLs and Static IPs list needed to create firewall exceptions for EcoStruxure Building Activate Flex Server and Partner Portal in order to keep them functioning correctly. Resolution Below are the list of ports, URLs and static IPs that must be open through a site's firewall/network: URL Port Protocol Usage https://sentry.zenatix.com 443 TCP Allows the gateway to upload error logs and diagnostics. https://router.zenatix.com 443 TCP Allows the gateway to download Linux & Python updates from the Zenatix Server. Regularly polls the Zenatix Server to check internet connectivity. https://timesync.zenatix.com 9090 TCP Time server allows the gateway system & gateway clock to remain synchronized with Zenatix Server. https://gitlab.zenatix.com 443 TCP Used for troubleshooting to update the gateway codebase from the Zenatix Server. https://telemetry.zenatix.com 443 TCP Used for sending IoT device data and gateway health data to the Zenatix Server. https://emgx.zenatix.com 8883 TCP Used for communication between gateways and Zenatix cloud services for getting configuration or alarms from Zenatix Server to gateway and vice versa. 54.169.200.193 1194 UDP Allows Zenatix to remotely access and do API calls to the gateway through OpenVPN. https://mender.zenatix.com 443 TCP Used to download firmware updates to gateway from Zenatix Server.  

Warning Potential for Data Loss: The steps detailed in the resolution of this article may result in a loss of critical data if not performed properly. Before beginning these steps, make sure all important data is backed up in the event of data loss. If you are unsure or unfamiliar with any complex steps detailed in this article, please contact Product Support for assistance. Issue Validation of SSL Certificate does not work Product Line EcoStruxure Building Operation Environment Building Operation Enterprise Server Building Operation Enterprise Central Building Operation Space-Logic Server (AS-X) Cause Cloud Connectivity makes use of the Baltimore CyberTrust Root Certificate for communication to the cloud, and often this certificate is not updated due to lack of maintenance routines on the Windows Server. Resolution Run Windows Update: On the server running the ES/EC, run Windows Update and make sure the Operating System is updated to the latest maintenance version available. Manually update certificate:  On the server running the ES/EC, go to https://curl.se/docs/caextract.html using a web browser and follow the instructions to download a collection of the most commonly used certificates on the web that are up to date. Click on the start-menu, type in ”certmgr” and press enter. Navigate to Trusted Root Certification Authorities/Certificates Under Trusted Root Certification Authorities, right-click the Certificates folder and select ”All Tasks > Import…” Follow the guide, click ”Next” and then locate the file you downloaded in Step 2a (make sure you filter to All Files). Click ”Next” on all steps and then click ”Finish”.

Warning Hazard of Electric Shock: Remove all power from all devices before removing any covers or doors of the system. Disconnect power at the device and at the power source. Electrostatic Discharge Required: Always discharge static electricity from your person by touching metal prior to handling any hardware. Failure to do so may result in damage to devices. Issue Why is it recommended to not mix high and low voltage connections on the same side of an CRS-HH-REL-10? Product Line EcoStruxure Building Operation. Environment Building Operation Room Controller (RPC) 24 V Building Operation Room Controller (RPC) 230 V Cause According to the documentation, it is not recommended to mix high and low voltage connections on the same side of the device.   Resolution There must be a minimum distance between terminals connected to High Voltage and terminals connected to Low Voltage of at least 5.5 mm to prevent the chance of voltage creep between the terminals.