Welcome to the official website of CNIACS Automation Technology Co., Ltd!

Johnson Controls C•CURE 9000 Least Privileges Configuration Guide

Introduction

Effective management of access rights is crucial to maintaining the integrity and security of any

system. This document emphasizes the importance of adhering to best practices when assigning

permissions within the C•CURE 9000 security-management system. Granting permissions beyond

the necessary scope can lead to unauthorized access and potential misuse of information.

Therefore, it is imperative to assign each account only the roles and permissions required to

perform their specific job functions, and nothing more. This approach ensures that the system

remains secure, and that information is protected from unwanted changes.

As cybersecurity threats affect all connected devices, it is important to ensure that cybersecurity

is considered throughout the planning, deployment and maintenance phases associated with a

solution’s functional operation.

Legal disclaimer

The cybersecurity practices described in this guide are recommended practices to facilitate the secure

installation and configuration of the products described herein.  However, Johnson Controls cannot guarantee

that the implementation of the cybersecurity practices or recommendations described in this guide will ensure

the security of the relevant product or system, or prevent, or alter the potential impact of any unauthorized

access or damage caused by a cybersecurity incident. This guide is provided “as is”, and Johnson Controls

makes no representation or warranty, express or implied, as to the efficacy of the cybersecurity practices or

recommendations described in this guide.  Johnson Controls disclaims all liability for any damages that may

occur as a result of, or despite, reliance on this guide or compliance with any cybersecurity practices or

recommendations set forth herein.

C•CURE 9000 Configuration Overview

This section helps C•CURE 9000 administrators implement best practices for a secure C•CURE 9000 v3.10

system installation.  You will learn what is needed to get the CrossFire service to run on your system, while

avoiding the security risks created by granting excessive privileges.

Johnson Controls HS1 lockout due to limit switch

Heating alarms

HS1 lockout due to limit switch

The HS1 Lockout occurs due to a loss of 24 VAC to the SEC board LIMIT terminal. The LIMIT circuit

will have two or more limit switches wired in series. One switch is an automatic limit switch and

the other is a manual limit switch. If the SEC board recognizes three limit switch trips in one hour a

hard lockout of unit operation occurs and no operation occurs other than blower operation.

If a HS1 Lockout occurs complete the following steps:

1. Use a volt meter to check that 24 VAC power is present at the LIMIT terminal located on at the

upper left corner of the SEC board.

a. If no voltage is present, check the wiring diagram and trace where the 24 VAC power

is lost.

b. If voltage is present, continue to Step 2.

2. Determine if a limit switch is open and check the possible cause of the limit trip.

3. Check the circuit wiring for damage or a loose connection.

4. Check if the limit switch is faulty. If the switch is tripping without reaching tripping

temperature, this can indicate a faulty LIMIT switch.

5. Check that all the filters are clean.

6. Check for correct air flow according to the unit installation manual. Return static should not

be higher than 0.2 in. w.c. Factory equipment should be air balanced to operate in a cfm

range from 350 cfm to 450 cfm per ton.

Note:

a. If the unit AHU or RTU is a VAV application during the heating operation, the fan

should run at an adequate speed to allow correct air flow that will prevent the

unit from tripping on HS1 lockout. This means in most cases the VAV boxes must

be open when a call for heat is commanded.

b. On occasions where the system has two transformers, proper low voltage

phasing must be verified or HS1 could occur.

Johnson Controls Smart Equipment™ Control

Introduction

This document is designed to assist and guide a trained technician or engineer to diagnose and

troubleshoot the Smart Equipment Controller alarms. When troubleshooting always use Johnson

Controls and industry safety standards.

Preliminary checks

No power

The Smart Equipment™ Control (SEC) board requires 24 VAC to operate. If no power is provided then

no alarms are active, the LCD screen is blank, and the unit does not function at all.

1.on the upper left hand of the board using the voltmeter.–

If no voltage is present, check the wiring diagram and trace where the 24 VAC power is

lost.

If voltage is present and no power is indicated on the SEC board through the LCD

display or power LED indicator, replace the board.

2.Check for optional components such as the phase monitor in the circuit. If there is a red light

visible on the phase monitor, this indicates that the board is not receiving power. Swap the

incoming voltage going to the unit, not the voltage within the unit.

Johnson Controls Simplex 4100ES Take Control Remotely

Take Control Remotely

Remote Annunciator Panels are dedicated-purpose transponders that support

fire alarm system status information. They are typically used when the host fire

alarm control panel is located away from the area where those responding to a

fire situation need status information. Remote annunciators allow firefighters to

access information and take control of the fire detection system. When equipped

with an optional remote microphone and emergency voice/alarm communications

system control, operators can play prerecorded emergency messages, tones,

or make live broadcasts into selected areas or globally across the system.

Annunciators can include remote master firefighter telephones. These allow

annunciator users to connect with remote firefighter phone call-in requests and

enable firefighter phone callers to be connected to each other. Although intended

for use in assisting fire responders, these phones are also helpful during system

setup and testing.

Features

• Remote microphone and operator interface:Users can access the emergency

voice/alarm communications system from the annunciator.

• Easy-to-use operator interface:Remote Annunciators feature a 2 x 40-character LCD.

An optional color touchscreen display makes accessing system reports and responding

to emergencies simple and intuitive. An easy-to-use, color touch screen interface is

also available.

• Remote master telephone:First responders can communicate directly with the

firefighter telephone system.

• Future-proof design: Simplex control units can be easily upgraded to the latest

technology.

Johnson Controls Simplex 4100ES Remote Annunciators

Provides fire alarm control unit status information at locations distant from

the fire alarm control panel. Stay in control of your fire alarm system with

local annunciation of up to 12.000 points on your network.

Simplex Remote Annunciators deliver emergency, trouble, and other event

notification from monitored points on an LCD or optional full-color touch

screen display.

• Remote fire alarm control unit status and control keep users informed and

in charge

• Microphone and firefighter master telephone improve communication

and emergency response

• Choose either an LCD or color touch screen display

Take Control Remotely

Remote Annunciator Panels are dedicated-purpose transponders that support

fire alarm system status information. They are typically used when the host fire

alarm control panel is located away from the area where those responding to a

fire situation need status information. Remote annunciators allow firefighters to

access information and take control of the fire detection system. When equipped

with an optional remote microphone and emergency voice/alarm communications

system control, operators can play prerecorded emergency messages, tones,

or make live broadcasts into selected areas or globally across the system.

Annunciators can include remote master firefighter telephones. These allow

annunciator users to connect with remote firefighter phone call-in requests and

enable firefighter phone callers to be connected to each other. Although intended

for use in assisting fire responders, these phones are also helpful during system

setup and testing.

Johnson Controls Simplex 4100ES Fire Alarm Control Units

Delivering Addressable Technology

The Simplex 4100ES is designed to handle complex facility requirements with ease.

It brings fully addressable technology for both initiating and notification circuits and

scalable design flexibility to medium and large facilities and multi-building campus

networks. Supporting up to 3.000 addressable points, the 4100ES is networkable,

offers system-wide voice notification/audio capability that is UL 2572 listed for

Emergency Communications purposes, and is listed for multi-hazard suppression

release control. An optional, large, color touch screen display provides a wealth

of information and an intuitive, easy-to-use interface.

Features

• Full addressability:The 4100ES enables you get all the benefits of addressability

with TrueAlarm addressable sensors and TrueAlert ES notification appliances

and speakers.

• Emergency Voice Communication:Get enhanced safety and emergency response

with integrated voice communication.

• Suppression release support:The 4100ES is agency-listed for multi-hazard

suppression release applications.

• Intuitive interface:The ES touch screen display makes operation and accessing

system logs easy.

• Network data, audio, and firefighter telephones: Connect the 4100ES and other

Simplex control units together and to the TrueSite Workstation graphical

management console using ES Net.

• Future-proof design: Simplex control units can be easily upgraded to the

latest technology.

Johnson Controls 4100ES Addressable fire alarm control unit for large facilities and campuses

Addressable fire alarm control unit for large facilities and campuses

The fully networkable Simplex 4100ES supports up to 3.000 points and is

designed to handle the complex requirements of medium/large facilities

and multi-building campus networks. It features addressable technology,

scalable design flexibility, audio capability and is listed for multi-hazard

suppression release control.

• A perfect, addressable solution for large buildings, campuses, and applications

requiring voice evacuation

• High-speed, IP-based networking supports advanced data, voice, and firefighter

telephone communication

• Forward/backward compatibility protects your investment and makes it easy to

keep current with the latest technology

Delivering Addressable Technology

The Simplex 4100ES is designed to handle complex facility requirements with ease.

It brings fully addressable technology for both initiating and notification circuits and

scalable design flexibility to medium and large facilities and multi-building campus

networks. Supporting up to 3.000 addressable points, the 4100ES is networkable,

offers system-wide voice notification/audio capability that is UL 2572 listed for

Emergency Communications purposes, and is listed for multi-hazard suppression

release control. An optional, large, color touch screen display provides a wealth

of information and an intuitive, easy-to-use interface.

ABB REU 523 secondary relay Overvoltage unit

Overvoltage unit

When the voltage values exceed the set start value of low-set stage U>,  the overvoltage

unit will start to deliver a start signal after a ~60 ms’ start time. When the set operate time

at definite-time characteristic or the calculated operate time at inverse definite mini

mum time (IDMT) characteristic elapses, the overvoltage unit will deliver a trip signal.

When the voltage values exceed the set start value of high-set stage U>>, the overvoltage

unit will start to deliver a start signal after a ~50 ms’ start time. When the set operate time

at definite-time characteristic or the calculated operate time at IDMT characteristic

elapses, the overvoltage unit will deliver a trip signal.

The low-set and the high-set stage of the overvoltage unit can be given either a defi

nite-time or an IDMT characteristic. At IDMT characteristic, two time/voltage curve

groups, A and B, are available.

It is possible to block the tripping of an over voltage stage by applying an external binary

input signal to the relay.

The high-set stage can be set out of operation. This state will be indicated by dashes on the

LCD and by “999” when the set start value is read via serial communication.

ABB The over and undervoltage relay REU 523 is a secondary relay

Application

The over and undervoltage relay REU 523 is a secondary relay which is connected to the

voltage transformers of the object to be protected. The over and the undervoltage unit

continuously measure the fundamental wave of the phase-to-phase voltages of the object.

On detection of a fault, the relay will start, trip the circuit breaker, provide alarms, record

fault data, etc., in accordance with the application and the configured relay functions.

The overvoltage unit includes low-set stage U> and high-set stage U>> and the undervolt

age unit low-set stage U< and high-set stage U<<. The high-set undervoltage stage can

alternatively be set to evaluate the positive phase-sequence voltage. In addition, the high

set undervoltage stage can be configured to evaluate only one instead of three phase-to

phase voltages.

The protection functions are independent of each other and have their own setting groups

and data recordings. The over and undervoltage functions use conventional voltage trans

former measurement.

An output contact matrix allows start or trip signals from the protection stages to be

routed to the desired output contact.

Design

The relay includes a high-set and low-set overvoltage unit, a high-set and low-set und

ervoltage unit and a circuit-breaker failure protection unit. Further, the relay includes an

HMI module, a self-supervision system and a disturbance recorder.

ABB REU 523 Features

Features

• Single- or three-phase use

• High-set overvoltage stage with definite-time or inverse definite minimum time

(IDMT) characteristic

• Low-set overvoltage stage with definite-time or IDMT characteristic

• High-set undervoltage stage with definite-time or IDMT characteristic

• Low-set undervoltage stage with definite-time or IDMT characteristic

• Positive-phase-sequence protection

• Adjustable drop-off/pick-up ratio for the low-set over and undervoltage stages

• Circuit-breaker failure protection (CBFP)

• Disturbance recorder

• recording time up to 12 seconds

• triggering by a start or a trip signal from any protection stage and/or by a binary

input signal

• records three analogue channels and eight digital channels

• adjustable sampling rate

• Non-volatile memory for

• up to 60 event codes

• setting values

• disturbance recorder data

• recorded data of the five last events with time stamp

• number of starts for each stage

• alarm indication messages and LEDs showing the status at the moment of

power failure

• Three accurate voltage inputs

• Galvanically isolated binary input with a wide input voltage range

• All settings can be modified with a personal computer

• HMI with an alphanumeric LCD and manoeuvring buttons

• IEC 60870-5-103 and SPA bus communication protocols

• Two normally open power output contacts

• Two change-over signal output contacts

• Output contact functions freely configurable for desired operation

• Optical PC-connector for two-way data communication (front)

• RS-485 connector (rear) for system communication

• Continuous self-supervision of electronics and software. At an internal relay fault

(IRF), all protection stages and outputs are blocked.

• User-selectable rated frequency 50/60 Hz

• User-selectable password protection for the HMI

• User-selectable nominal voltage 100/110/115/120 V

• Display of primary voltage values

• Demand values

• Multi-language support

Search for products

Back to Top
Product has been added to your cart