Issue Windows authentication is not working with Security Expert once configured. Environment Security Expert Windows Authentication Cause Windows authentication was not installed or configured properly during initial install/setup of Security Expert. Resolution 1. Install the Security Expert Server, and any Security Expert Clients, with the "Use Windows Authentication" option enabled during the installation process. If this was not initially done at install then you will need to backup your SecurityExpert and SecurityExpertEvents databases, uninstall Security Expert (installing overtop or repairing install may not work) and then re-install Security Expert with the "Use Windows Authentication" option enabled.   2. Go to Global | Operators and create a new operator. The Name can be anything you want. The User Name must be the domain name and domain username you want to have access to Security Expert. This is in the form of "domain\username" as shown in the example image. Set a Role for this operator. And then enable the "Use Windows Authentication" checkbox and save the changes.   3. Go to Global | Home and logout of Security Expert. 4. On the login page select the "Use Windows Authentication" checkbox, set the Server to your Security Expert Server machine name (or blank if it is the local machine) and press Logon.   5. You should now be logged into Security Expert with your Windows username being used.   If you receive an "Access Denied" or other error then confirm the following before contacting Product Support for further help. Security Expert Client and Server were installed with "Use Windows Authentication" option enabled. There is an operator object created in Security Expert with the same domain and user name as the domain user you are trying to login with. The "Use Windows Authentication" option is enabled on this operator object. At the login screen you have enabled "Use Windows Authentication" and set the Server correctly.

Issue After changing a controller's IP settings, it does not come online and cannot be accessed via its web interface. The controller can be accessed via its web interface by temporarily defaulting the IP address. Still, changes to its IP settings cannot be saved and are instead met with the following "Invalid Port" errors. Invalid Port – Module UDP Port Invalid Port – Touch Screen UDP Port Product Line Security Expert Environment Security Expert Controllers (SP-C, SP-ACX, SP-AC1, SP-C-WEB) Cause The controller's HTTP Port has been set to 0. If this field is set to no value, this is converted to an invalid 0 value, the controller will no longer be accessible via the web interface and will require defaulting the IP address to connect. Resolution Change the HTTP Port to a valid value. The default HTTP Port is 80, but it should be changed to another available port for increased security.

Issue It would be helpful if the MAC Address of an SP-C could be worked out when the physical controller is not readily accessible or has not yet been delivered Product Line Security Expert Environment SP-C Cause Cases may arise where a newly ordered or existing SP-C is going into a system but no MAC address is known.  MAC addresses are often required in order to obtain an IP address for a project.   The MAC address is not shown when connecting into the SP-Cs web browser (although the Serial Number is) and can only be shown via an Arp in the correct section of the network Resolution In normal circumstances each SP-C should have a Label on it which indicates the MAC address in full However in cases where the Label is not accessible it can also be derived from the Serial Number which can be viewed in the SP-C web browser, preceded by 00:1B:   Eg  00:1B:C2:AF:14:24  

Warning Electrostatic Discharge Required: Always discharge static electricity from your person by touching metal prior to handling any hardware. Failure to do so may result in damage to devices. Issue Introducing a previously commissioned Continuum IOU module such as an AC-1 to an Access Expert or Security Expert site can cause communication issues in the LON bus due to duplicated node id. Product Line Andover Continuum, Security Expert, Access Expert Environment Continuum AC-1 Continuum Net Controller Continuum Net Controller II Access Expert Controller Security Expert Controller Cause When IOU modules are commissioned in a Continuum system, the Net Controller assigns each module a Node ID, this is in addition to the LON Module ID that is unique to each module hardware, the purpose of the Node ID, is to decouple the identifier used by Continuum for communication from the specific piece of hardware, this in order to facilitate the replacement of a failed module without the need to change its Continuum identifier. The module stores the Node ID in nonvolatile memory so that it persists across power loss. If a Continuum IOU module is introduced to a LON network (Security Expert SP-AC1 or Access Expert AX-SSC) without clearing its Node ID, there is a risk of creating a duplicate Node ID condition that will prevent the LON network from operating properly. IMPORTANT This should not be an issue during the normal transition of Continuum site to Security Expert or Access Expert, as all the modules on the running LON bus should have unique Node IDs, this is only a problem when adding a module, or replacing a module with one that has been used before. Resolution In order to signal its presence on the LON network, each module will transmit on resetting its status network variable. If upon receiving this message, the Net Controller determines that the module is NOT in its local database, the controller will decommission the module by setting its Node ID to zero. Before introducing a Continuum IOU module that has been previously commissioned to the LON network of an SP-AC1 or SX-SSC controller, decommission the IOU module using the steps below: Attach the module to an empty Net Controller that is powered down with its battery removed. For a Net Controller II, in order to be absolutely sure that the Net Controller has an empty database, you may need to clear its backup in flash from a browser or by the use of the reset IP switch. See LL on how to use the controller's reset IP switch to clear its flash backup https://community.exchange.se.com/t5/Building-Automation-Knowledge/How-to-clear-the-controller-flash-backup-from-the-hardware-using/ta-p/5877 Power up the Net Controller Once the CPU led on the Net Controller starts blinking, press the 'Reset' button on the IOU module. Wait 30 seconds to make sure the decommissioning process has completed. Power down the Net Controller Remove the IOU module

Issue Is it possible to trigger a manual Battery Test in a SP-C or SP-C-Web? Product Line Security Expert Environment SP-C SP-C-Web Cause The SP-C Web Security Expert - Programming - Reference Guide refers to indication of when the SP-C-Web passes or fails its Dynamic Battery Test, but what if a user wishes to manually perform or trigger such a battery test. Resolution The Dynamic Battery Test is a purely automated process and cannot be manually forced or triggered, however these tests are performed every ten minutes when mains power is present.

Issue If more than 3 Operators are created in Security Expert, the License page of the Thick Client will show more Licenses in use than the maximum three (3) clients provided with the standard  SX-SRVR License. To see what the site is using, select About > License and scroll down to the Feature: Web Operators. As shown below, there are four web operators active out of the three (4/3) allowed. Product Line Security Expert Environment Licensing Cause A Web Operator is defined as any Operator who can log onto the Security Expert Server using a browser.                           In the example shown below there are four Operators: admin 2nd Operator 3rd Operator 4th Operator The system allows each to log in successfully: The License option SX-WEB-OPR  enables 'x' number of browser connections depending on customer needs and should effectively ensure that the correct number of Operators are purchased, but the feature is currently in development and is not yet enforcing limits on the number of operator connections.  This allows the number of connections to exceed the maximum limit (I.e.4/3) for the time being. Resolution Note: The Operator does NOT even need to be logged on for the count to register 4/3, the fact that 4 operators have been created is enough. The restriction of operators via Web Client could be enabled/enforced at any time in the next release of the software, so it is strongly advised to purchase the correct number of Licenses required at the time of installation, to prevent a loss of user connectivity going forward.

Issue Controllers are online but events are not being logged. No live event updates are showing in the All Events Status Page or being logged to the SecurityExpertEvents database. Product Line Security Expert Environment Security Expert Client Cause Below is a list of the current causes that may contribute to the issues described: The Event Server settings are not configured correctly. The Firewall is blocking required communications ports. The default Save Events action has been removed. The All Events event filter has an Event Type or Record Filter attached to it which is filtering out events. Resolution For Cause 1 Confirm that the Download Server, Event Server, and Controllers are configured correctly. Check all of the items in this Troubleshoot Security Expert Controllers showing offline article. For Cause 2 Check that any Firewalls are disabled or setup to allow all required ports through. See SX-SRVR Networking Guide for Administrators for further details. Also, confirm that any Anti Virus software is also not blocking required ports or Security Expert applications. For Cause 3 In Security Expert go to Events > Actions and confirm that there is a Save Events action configured for the Site. The action will look like what is shown below and can be manually created if it is not present. Figure 1 - Save Events Action For Cause 4 Ensure that the Status Page view being used is able to see those events and is not filtered in any way. Under Events > Event Filters check that the All Events Event Filter is not filtered and it is set to show all events and records. By default, this is not filtered and not able to be changed. On the Event Types tab ensure "Include All Event Types" is selected. Figure 2 - Event Filter Event Types On the Records tab ensure there is no record filter attached. Figure 3 - Event Filter - Records Then check that the All Events event report is using the All Events filter for All Record Groups.  Figure 5 - Event Reports All Events

Issue There can be confusion on the differences between EcoStruxure Energy Expert (formerly Power Manager) and EcoStruxure Power Monitoring Expert (PME)  Product Line EcoStruxure Building Operation, Other Environment EcoStruxure EcoStruxure Energy Expert (formerly Power Manager) EcoStruxure Power Monitoring Expert (PME) Cause Power Monitoring Expert (PME) is a long-established product in the Schneider Power (EMS) offer and so its place in the market is well known and its support path is very clear. Energy Expert is a much newer offering that intentionally sits nearer to EcoStruxure Building Operation (EBO) in the BMS community, while still remaining an EMS product and so its place in the market and support path is more easily confused. Resolution Definitions   EcoStruxurePower Monitoring Expert (PME) Schneider Electric's supervisory software dedicated to power monitoring that enables you to maximize operational efficiency, optimize your power distribution system, and improve bottom-line performance   EcoStruxure Building Operation (EBO)  Schneider Electric's premier building management system (BMS) providing integrated monitoring, control, and management of energy, lighting, HVAC, and fire safety.   Energy Expert for EcoStruxure                                                             Designed to offer Power Monitoring Expert (PME) features to new and existing EcoStruxure Building Operation (EBO) projects, giving extra capabilities to manage power utilization in a BMS environment.   It utilizes EcoStruxure Web Services (EWS) to be able it to share data between the two EcoStruxure software platforms. (EBO and EE) and applications such as the ETL Tool and the Integration Utility in the integration process.   EcoStruxure Web Services (EWS) The Schneider Electric standard for sharing data among various Schneider software platforms to facilitate the creation of EcoStruxure Solutions. Based on conventional Web Services technology (SOAP, WSDL)   ETL Tool The function of the ETL is to extract select historical data (Trend logs) from EBO, and load that data into the Energy Expert SQL database for use in Dashboard and Reports etc.   Integration Utility The function of the Integration Utility is to export Energy Expert Dashboards, Reports and Alarms for import into EBO to enhance its Power Offer to the customer   Product Support Path: PME, Energy Expert, ETL and the Integration Utility are are all fundamentally Power Products and so should always be raised through your local Product Support Team (via your Customer Care Center (CCC)) under an EMS commercial reference. However in cases where an Energy Expert project needs specific assistance with the EBO side of the integration then a BMS commercial reference should be used instead.

Issue Is it possible to setup more than one custom card format in Security Expert? Product Line Security Expert Environment Security Expert Custom Card Formats Cause Have a requirement for two or more custom card formats. Resolution Currently, you cannot setup two custom formats.   It is possible to add a Secondary Format to a Reader port in Reader-Expanders, but you can only setup one as a Custom Format. They are actively working on adding multiple Custom Formats. There is no ETA on when this will be available.

Issue How to setup a Pelco DVR in Security Expert. Product Line Pelco, Security Expert Environment Security Expert Pelco DVR Endura DVR Cause Unsure what the Service Port and DVR port settings are and how to configure the rest of the settings for a DVR object in Security Expert. Resolution When configuring your DVR in Security Expert you use the Custom DVR Type, all the preset DVR types are for legacy systems. In earlier builds of the software Video Services were integrated directly, these are now being run as separate services. When you install the Video Service you specify a Service Port – it can be any unused port whatsoever, the default is usually fine – take note of this port number. Once installed you need to manually start the service. In Security Expert you set the DVR Type to "Custom", set the IP Address, and then the Service Port same as above – the DVR Port is configured from the DVR software/Web interface, usually their documentation will cover this. Then just add the Username and Password used to login to the DVR. (See image below which shows the relevant settings highlighted in red.) If you make any changes to the DVR settings you will need to restart the Video Service and the Security Expert DVR B service for them to take effect. In Security Expert add DVR objects by going to Monitoring > Setup > DVRS IP Address: IP of the DVR. DVR Port: Defined in the DVR software/Web interface. The default for the more recent Pelco DVRs is 60001, and the older models is 18772 (consult your specific DVR documentation for details). Service Port: Port configured during installation of Pelco Video Service. (This field appears when DVR Type is changed to Custom) DVR Type: Select Custom. Username / Password: Credentials for the DVR. Check the latest information at partnerfirst.pelco.com

Issue Seeing “Fail to get the next controller step 2 – 0” in the Download Server Diagnostics Window (or similar message) when attempting to download to controller. Environment Security Expert Cause There is a problem with the encryption between the client and controller. It's possible only one end of the connection is encrypted and the controller may have been defaulted. You can tell this by looking in the Event Server Diagnostic Window which will usually show entries similar to "Encrypted Packet Received". Resolution Remove encryption by selecting Disable Controller Encryption and attempt to download the controller.

Issue How to configure a user to be able to arm and disarm the entire site using the SX-KLCS-B Keypad. Product Line Security Expert Environment Security Expert SX-KLCS-B Keypad Cause Unsure how to program Security Expert to allow control of multiple Areas from one PIN code entry. Resolution Below are instructions for how to configure Security Expert to arm/disarm a group of Areas whenever a particular code is entered at the keypad. v4.2.201 There was a new Function Code added in v4.2.201 that allows easier setup of arming/disarming from a keypad. This only allows controlling a Door, Area or Output with this function code. You aren't able to disarm an Area Group but you are able to select multiple Areas with the same Function Code which will provide the same result. Navigate to the Sites > Function Codes. For each Door where you want to use the Function Code, you must add the Function Code in the Function Codes tab of Programming|Doors. You must also have controller firmware 2.08 b780 or later. v4.2.194.7 If there is not already a System or Automation Area, one will need to be created. This Area will not report to monitoring, or activate bell outputs onsite. The Area is for internal automated functions within Security Expert. Set the Entry and Exit time to 0 for the Automation Area. Create an Area Group that includes all the Areas you would like to Arm/Disarm. Create a Virtual Output (example name: 'Area Control VO'). Virtual Outputs are programmed in the same way as Physical Outputs, except they only exist in the software (not the hardware). By convention, address Virtual Outputs to Output Expander 32, as per the image below. Create a Programmable Function which links the Virtual Output to the Area Group. This Programmable Function should be of type “Area Group Control”. It should have the Virtual Output as the Output you want to check, and specify the Area Group you created in step 2 (in the screenshot below, the function is controlling a group called 'All Areas'). Set up a Virtual Input to control this Virtual Output. The Virtual Input will need an Area, and an Input Type – so create an Input Type (example name: 'Area Control Input Type'). In the General tab, set the Control Output to your Virtual Output. In the Options (1) tab, enable 'Generate Alarms' and 'Generate 24hr Alarms'. In the Options (2) tab, enable 'Toggle Control Output State On Alarm'. Create a Virtual Input (example name: 'Area Control VI'). As per Virtual Outputs, by convention assign Virtual Inputs to Input Expander 32. In the 'Areas and Input Types' tab, place the Virtual Input in the Automation Area and assign it the Input Type you created in step 5. Create a second Virtual Output (example name: 'Access Level VO'). Assign this to Output Expander 32. Create a Programmable Function that links the 'Access Level VO' output to the Virtual Input. This Programmable Function should be of type “Input Follows Output”. It should have the Virtual Input as the Input Follows Output, and the 'Access Level VO' as the output to check. Create an Access Level. In the General tab, set Time to Activate Output to 5 seconds, and enable 'Keypad Access Activates Output'. In the Outputs tab, add the Virtual Output created in step 7 (example name: 'Access Level VO'). In Expanders|Keypads, go to the Options(1) tab and select 'Activate Access Level Output'. Do this for every Keypad from which you want users to be able to Arm/Disarm the Area Group in this way. Create a User, give them a PIN, and assign them the Access Level you created in step 9. Make sure your Automation Area is Armed. Finally, start both of the Programmable Functions you created. To do this, right-click on the Programmable Function and select Start.

Issue What Fingerprint readers does Security Expert support? Product Line Security Expert Environment Security Expert Fingerprint Reader Cause Require information on what Fingerprint Biometrics are supported with Security Expert. Resolution We only officially support Suprema Biometric readers (HLI p/n SX-BIO-SP) however our reader expanders/controllers should be able to be connected/work with any reader that outputs a standard 26-bit Wiegand output. If there is a fingerprint reader that does this it should be able to be connected to Security Expert like a standard card reader supplying the controller with Wiegand data that is assigned to a user's fingerprint. The enrolling of fingerprints etc would need to be handled by the third party system, we would essentially be treating it as a normal card reader and card. The integration with Suprema Biometric readers allows you to enroll the users fingerprints to the biometric device from within the Security Expert UI. For a list of Suprema devices that Security Expert supports refer to the Suprema Biometric Integration in Security Expert Application Note.

Issue Cannot bring Reader Expander online. Environment Security Expert Reader Expander SP-RDM2 Cause Module addressing has not been configured or is incorrect. Resolution Check the following:   1. Controller (SP_C) Module addressing is correct. When creating the controller for the first time you will need to register it as a Reader Expander to be able to use it's reader ports. Go to the Configuration tab  of the controller and set "Register as Reader Expander" to 1 and the Lock Outputs to the default "Controller PGM 3/4 outputs" setting.     2. Reader Expander Module address. A new module from the factory will default to an id of 254, this will need to be changed. If you only have the controller and one expander module then the SP-C will be id=1 so make the second expander id=2.     3. Health status. Check the Health status of your controller to see if anything shows up there.     4. Update. Update your modules to download changes, review the health status again.

Issue How to update a demo Security Expert License once it expires. Product Line Security Expert Environment Workstation Cause Not sure how to re-active the demo license after it has expired. Resolution To extend the demo license, contact your local country product support group. Product support can have the license expiration date extended and then it can be updated/download again.  Go to About -> License, go to License Update tab and click on Download License and then OK to update. From v4.2.243 you will now be able to perform manual license activation's that can be used for installations that do not have Internet access. For more information see Performing a manual license registration.

Issue Can licenses be transferred in Security Expert? Product Line Security Expert Environment Security Expert Cause Unsure if a single SSN can be authenticated on multiple PC's or if licenses can be transferred or moved. Resolution Each PC requires a separate SSN. These licenses can be transferred between PC's. As part of the licensing process, the hardware details of the computer are recorded against each SSN, so any hardware changes require re-licensing, this also means SSNs cannot be shared across computers, and if used on a virtual machine – it must be assigned a static MAC address. Licenses can be transferred between machines without issue, Product Support will add a registration onto the license and clear the hardware profile after receiving a request. The installer will then do a License Update from Security Expert.

Issue Security Expert client Status Window is not showing live point status for inputs, outputs, doors. Shows an error message “Status Unknown” instead. The client is still however able to receive access control events such as reader entry/exit. Product Line Security Expert Environment Security Expert Cause MSMQ (Microsoft Message Queueing) is not enabled. This is a requirement for MSMQ to be installed on the Security Expert Server, the Security Expert Client machines do not need this but the machine where the Security Expert Services are installed does need this feature installed to function properly. Resolution In Windows Features settings (Turn Windows features on or off) turn on the “Microsoft Message Queue (MSMQ) Server” and the “Microsoft Message Queue (MSMQ) Server Core” features.

Issue A Pelco IWP221-1ES IP camera is being used and configured as a direct camera in Security Expert but the image from the camera is not being displayed in the Security Expert. Product Line Security Expert Environment Security Expert Pelco IWP221-1ES IP camera Cause The wrong URL to the image feed was used. When we use the IP address of camera to display the camera image in a web browser, it requires the Pelco Media plug in or Quicktime but these cannot be used in Security Expert. Resolution Use a direct URL to the camera stream. For the Pelco IWP221-1ES IP camera, use "http://camera.ip.address/jpeg/pull".

Issue Troubleshoot Security Expert Controllers showing offline in the client. Product Line Security Expert Environment Security Expert Cause Require some common troubleshooting steps to help determine why controllers may be offline to the client. Resolution The main items to check are: Refer to the Troubleshooting Security Expert Controller Connectivity - Application Note on Exchange Restart the client software. Check that the Firewall is disabled. Check any Anti-Virus Firewalls/settings as well. Restart the Security Expert services under the PC's Services option in Control Panel. These need to be restarted when any changes are made. Confirm that the module versions are all the same. Go to About  > Version and check there. If the database has not been upgraded to the same version as the client software, then this can cause communications issues. On the Security Expert Server check that MSMQ is still enabled in Windows Features as this is now a requirement.   Also, note that if you have imported a database backup, then you will need to check/change some other settings as well to ensure everything is set up for your specific server and controller.   Under Global > Download Server confirm that your computer name is the name of the PC where the download server service is running. Under Global > Event Servers ensure that the computer name is the name of the PC where the event server service is running. Under Sites > Controllers confirm the Serial number, IP Address, Download Port, Download Server and Control and Status Request Port match what is set in the controller's configuration web page (browse to the controllers IP Address to view). On that same General tab go to Diagnostic Windows and open the download and event server windows. Review the information contained and if there are any errors shown. Right click the controller and select Get Health Status. Review the status messages displayed.

Issue There are a number of object tabs that support the functionality of exporting to a CSV file. Can this CSV file then be used as a template and imported into another site? Product Line Security Expert Environment Security Expert Cause Not sure how to import objects from CSV as a database creation tool. Resolution The export options are so you can export the required records to a file as part of site documentation, administration etc. There is no way to import anything other than users using a CSV file. A database backup that is already configured can be restored to a new system to be used as a site template. Another option for using the same configuration is the Copy Controller Feature. If you want to have multiple sites within a single Security Expert Server, take a bank for example where each branch is a separate site in the one server but configured pretty much the same, you could utilize the Copy Controller feature to copy all the programming from the template controller to a new one. Please note that although this feature currently exists within Security Expert it is currently being worked on by our engineers to improve its functionality.