Issue It is not possible to change Primary or Secondary Reader Formats as they are greyed out. Product Line Security Expert Environment Client/Server Cause If the Reader Expander Port Network Type is set to Schneider Electric RS485 the option to change the format on that Expander Reader 1 or Reader 2 Tab is edit locked. Resolution Under the General Tab change the Port 1 Network Type to Wiegand  Under the Reader 1 Tab the Reader's Primary and Secondary Formats can now be changed Repeat process for Reader Expander Port 2 Network Type and Reader 2 Primary and Secondary Formats as required. Remember under the General tab to change the Network Port Types back to Schneider Electric RS485 before saving. ... View more

Issue Cannot read Mifare CSN, using Security Expert readers, from customer's existing Mifare cards  Product Line Security Expert Environment Security Expert Smartcard Reader [All] Cause The Security Expert readers will not read Mifare CSN by default. Resolution Configure the ability to do this through the RS485 menu or with a configuration card.   Older readers (firmware version 64 or lower) use an RS485 interface to modify reader configuration. Newer readers (with the -BT part numbers) require a Configuration Card purchased from Schneider Electric in order to modify the factory configuration of the reader to read the Mifare CSN.  ... View more

Issue Windows Authentication must be applied consistently for Security Expert, SOAP and Data Sync Service to work. Product Line Security Expert Environment Security Expert Microsoft Windows Cause If Windows Authentication is enabled in Security Expert (this is done during installation with a checkbox) then it must also be enabled in SOAP and Data Sync Service. Resolution Windows authentication is NOT enabled by default in Security Expert. This is a tick box on Security Expert installation. When you install SOAP you also need to select this (another tick box). However, Data Sync Service (DSS) is created with no options during installation. To enable or check the Windows Authentication setting for Data Sync Service see below. If installation has already been completed and you need to verify if Windows Authentication is enabled for each component you must follow the steps below. 1. Security Expert Thick Client/Server There are two options for setting Windows Authentication for Security Expert Thick Client/Server. Option 1. Edit the Security Expert Data Service config file “SecurityExpertSV.exe.config” using a text editor. This file is located in C:\Program Files (x86)\Schneider Electric\Security Expert. Locate this line: <netTcpBinding> <binding name="Binding1" openTimeout="00:10:00" receiveTimeout="00:21:00" sendTimeout="00:21:00" maxBufferPoolSize="2147483647" maxReceivedMessageSize="2147483647"><security mode="None"/> <readerQuotas maxDepth="32" maxStringContentLength="90000000" maxArrayLength="90000000" maxBytesPerRead="90000000" maxNameTableCharCount="90000000" /> </binding> </netTcpBinding> security mode= “None” denotes that Windows Authentication is not enabled. If Windows authentication has been enabled during installation then this entry will be missing. Option 2. Rerun the installation process and select “Modify” and then set the enabled flag tick-box or make sure the tick-box is not checked, depending on what is required. 2. Security Expert SOAP There are also two options for setting Windows Authentication in SOAP. Option 1. Edit the SOAP service “Web.config” file located in C:\inetpub\wwwroot\SecurityExpertSOAPService with a text editor. Locate this line: <netTcpBinding> <binding name="Binding1" openTimeout="00:10:00" receiveTimeout="00:21:00" sendTimeout="00:21:00" maxBufferPoolSize="2147483647" maxReceivedMessageSize="2147483647"><security mode="None" /> <readerQuotas maxDepth="2000000" maxStringContentLength="2147483647" maxArrayLength="2147483647" maxBytesPerRead="2147483647" maxNameTableCharCount="2147483647" /> </binding> </netTcpBinding> Again, security mode = “None” denotes that Windows Auth entication is not enabled. If Windows authentication has been enabled during installation then this entry will be missing. Option 2. For SOAP you also have the option of uninstalling and reinstalling and selecting the check box (or not) to enable Windows Authentication during the install process. The installer for SOAP currently does not support “modify” or “change” operations. 3. Data Sync Service Edit two config files using a text editor. Both files are located in C:\Program Files (x86)\Schneider Electric\Data Sync Service. In “DataSyncServiceConfig.exe.config” locate this line: <netTcpBinding> <binding name="NetTcpBinding_IService" openTimeout="00:10:00" receiveTimeout="00:21:00" sendTimeout="00:21:00" maxBufferPoolSize="2147483647" maxReceivedMessageSize="2147483647"> <readerQuotas maxDepth="2000000" maxStringContentLength="2147483647" maxArrayLength="2147483647" maxBytesPerRead="2147483647" maxNameTableCharCount="2147483647" /> <security mode="None" /> </binding> </netTcpBinding> Again, security mode= “None” denotes that Windows Authentication is not enabled. If Windows authentication has been enabled during installation then this entry will be missing. In “DataSyncService.exe.config” locate this line: <netTcpBinding> <binding name="NetTcpBinding_IService" openTimeout="00:10:00" receiveTimeout="00:21:00" sendTimeout="00:21:00" maxBufferPoolSize="2147483647" maxReceivedMessageSize="2147483647"> <readerQuotas maxDepth="2000000" maxStringContentLength="2147483647" maxArrayLength="2147483647" maxBytesPerRead="2147483647" maxNameTableCharCount="2147483647" /> <security mode="None" /> </binding> Again, security mode= “None” denotes that Windows Authentication is not enabled. If Windows authentication has been enabled during installation then this entry will be missing. 4. Summary In order to properly run SOAP and Data Sync Service with a Security Expert system there are four config files that must be consistent. SecurityExpertSV.exe.config Web.config DataSyncServiceConfig.exe.config DataSyncService.exe.config All four must either contain the text <security mode="None" /> or all four must NOT contain that text. ... View more

Issue Request for database schemas for SecurityExpert and SecurityExpertEvents databases. Product Line Security Expert Environment Security Expert Client/Server Cause Various entities request database schemas for SecurityExpert and SecurityExpertEvents databases for reasons like access to the stored data to third party reporting packages. Resolution Schneider Electric does not publish or provide the Security Expert database schemas. Database schemas change over time with new revisions which may result in broken tables. Anything required should be available using the SOAP SDK. The SDK will allow the extracting of, and transforming of data, and storing of that data into a separate database. Third-party applications/tools can then report on the data stored in a separate database. That allows the integrity of the Security Expert databases to remain intact. The Security Expert SOAP SDK can be purchased as part number SX-SOAP-SDK. ... View more

Issue Some security application require individual control of reader LEDs and Beeper. Product Line Security Expert Environment Security Expert Controller SP-C Security Expert Controller SP-AC1 Security Expert Controller SP-ACX Security Expert Door Expansion RDM2, mRDM2 Cause Need to control reader LEDs and Beeper Resolution The purpose of the "Enable Enhanced Smart Reader Outputs" option is to allow individual control of the LEDs and Beepers on the RS485 Smart Readers, and to allow independent control of the L1, L2 and BZ Outputs on the Controller or Reader Expanders on the RS485. Navigate to   Expanders > Reader Expanders   and select the port you wish to enable the smart reader outputs for. The last option named 'Enable Enhanced Smart Reader Outputs' will need to be selected. With the option enabled, you can independently control L1, L2, and BZ for both Port 1 and 2 while controlling the LEDs/Buzzer when connected using the RS485 wiring (NA, NB) The following table shows which Output Address corresponds to which physical Output: ... View more

Issue Cannot connect to, and send reports to a monitoring station through a reporting service Product Line Security Expert Environment Security Expert Server Cause Trouble connecting to a central station Resolution All the necessary information for a reporting service should be provided by the monitoring station. These can include the following: Client Code Reporting Protocol Any necessary encryption information IP Address Port Number Phone Number Steps: Ensure all of the information provided by the monitoring station has been entered correctly. Ensure the Service is running. Has the controller downloaded the change? Ensure the Service has been assigned to the appropriate area. This is done in the Programming > Areas > Configuration menu. Ensure the Area's main portion / 24hr portion is armed. Ensure the Inputs that are being monitored have an input type assigned and are in the area. Ensure the Input Type has the correct options selected (e.g. generate alarms) Under Programming > Services > Options, ensure you have selected the checkboxes are selected for what you'd like to report to the monitoring station. Has the IP Port been opened on the  controller's network   to allow outbound and inbound traffic? Report IP   services have some checkboxes in the Options tab that can help diagnose where the issue is. If the message is failing to reach the station, enable these options for troubleshooting. Log Acknowledge Response Log Polling Message Log Message Retries Log Reporting Failure ContactID   also has a checkbox that will produce events for each step in the communication process and will indicate where the problem is. If the message is failing to reach the station, enable this option for troubleshooting. Log Modem Events to Event Buffer Important Note Always disable these troubleshooting options when the site is running without service issues as they will fill up the event database very quickly. ... View more

Warning Hazard of Electric Shock: Remove all power from all devices before removing any covers or doors of the system. Disconnect power at the device and at the power source. Electrostatic Discharge Required: Always discharge static electricity from your person by touching metal prior to handling any hardware. Failure to do so may result in damage to devices. Potential for Data Loss: The steps detailed in the resolution of this article may result in a loss of critical data if not performed properly. Before beginning these steps, make sure all important data is backed up in the event of data loss. If you are unsure or unfamiliar with any complex steps detailed in this article, please contact Product Support for assistance. Issue Are there restrictions on the location of the SP-C on the RS-485 bus? Product Line Security Expert Environment Security Expert Controller (SP-C, SP-AC1, SP-ACX, SP-C-WEB) Security Expert Expander Modules Cause The SP-C Installation Manual shows the SP-C as the first device in a standard network communication connection.  Locating the Security Expert controller in the middle of the RS-485 bus will reduce the amount of cable required. Resolution You can put the controller in any position on the RS-485 chain. Ensure you use the correct cable type, the overall length does not exceed 900 meters (3000 feet) and the two ends are correctly terminated with EOL resistors. Refer to the Encrypted Module Network section in the SP-C Installation Manual - System Controller for more details. ... View more

Warning Hazard of Electric Shock: Remove all power from all devices before removing any covers or doors of the system. Disconnect power at the device and at the power source. Electrostatic Discharge Required: Always discharge static electricity from your person by touching metal prior to handling any hardware. Failure to do so may result in damage to devices. Issue A Security Expert reader that supports Wiegand and RS-485 is wired for Wiegand. It is not working. It only works on RS-485. Product Line Security Expert Environment Security Expert Smart Card Readers which support both 125Khz and 13.56Mhz . Cause Tried to use a Smart Card Reader wired for Wiegand after it had been connected by RS-485 to the controller. Resolution Once a Security Expert Smart Reader is used in an RS-485 configuration it can only be used in a Wiegand configuration after being re-programmed with a configuration card designed for that purpose. The configuration card must be purchased through Schneider Electric. This is because RS-485 is a two-way communication, intelligent wiring protocol. Once the reader is set in this two-way communication mode there is currently no way, without the configuration card, to go back to a less intelligent one-way mode like Wiegand. Note: Readers manufactured in 2017 or before may have a firmware version that uses a configuration mode that will not respond to a configuration card. If you contact Schneider Electric for a configuration card, supply the serial number (SN) from the back of the reader on your request. ... View more

Issue Security Expert controller has Online Status, can be downloaded, can be pinged and the web configuration page can be opened but Health Status and Module Addressing both timeout. Product Line Security Expert Environment SP-C SP-AC1 SP-ACX Cause The controller serial number is missing or has been incorrectly entered in Security Expert. The IP address is used to verify online status and direct downloads but the serial number must also be correct to get health status and module addressing. Resolution Correct the Serial Number field on the General tab of the controller. Controller Serial Number ... View more

Issue An SP-C-WEB needs to be upgraded.  Can this be done without removing the controller? Product Line Security Expert Environment Security Expert Controller Security Expert WEB Controller Cause Due to site expansion, it is necessary to upgrade an SP-C-WEB to an SP-C.  Resolution It is not possible to upgrade an SP-C-WEB to an SP-C in the field. The SP-C-WEB will need to be replaced and re-programmed via Security Expert Server. ... View more