Greg Fitzpatrick, CxA

Business Development Leader- IoT and Integration-Cochrane Supply and Engineering

Interviewed:

The BAS Team from Limbach Company Pontiac, MI.

• John Glaeser – Controls Group Manager 
• Ernie Bristle
• Chris Panek
• Kody Immink
• Irawat Singh
• Rob Melvin

One of the things that always helps with establishing best practices in any industry, is a deep dive into lessons learned.  When exploring the world of IP technology and OT networks, there are several areas of deployment that can present a learning curve.  I had the pleasure of speaking with the controls group at Limbach Company about some of their experiences while deploying this new technology.

1.  GREG: How long has Limbach been exploring the possible use of IP devices and what made you comfortable in deploying these devices and their supporting networks in your customer’s buildings, considering that this technology is still new to the industry?

Ernie:  Over the course of the last two years we have seen the interest grow, more so with our new construction projects. It has been mostly a customer-driven request.

John:  We have also had situations in existing buildings where the existing MSTP network was not in the area where we needed to add a device but extending the IP network was a much easier and cost-effective option.

Kody: Our control division at Limbach has been considering the use of IP-based controllers since their inception. The determining factor has always been either the design specification or the customer’s preference. We have influence over this decision on a case-by-case basis. In general, we prefer the use of IP controllers for primary equipment (AHUs, Plant Controllers, primary systems, etc.)

2. GREG: According to technical documentation everywhere, we know that BacNet over IP devices can be up to 1,000 times faster than the fastest MS/TP devices.  As an MSI how have you found this increase in communication speed to benefit the overall performance of the network and the Building Management System?

Ernie: There is a better response time to accessing the information from IP Based devices.  The one area that still needs improvement is with Distech’s Envysion software.  Its graphical interface doesn’t load quickly.  The ability to take advantage of the increased communication speed depends on the underlying network layout and topology.

Rob: Programming devices and downloading controllers is much quicker and easier with IP networks and devices.  It cuts down on programming and commissioning time.

Chris: Having greater control over the BMS network installation provided a number of benefits on a new construction project.  We were able to have the network ready to go for commissioning and for running and monitoring temporary heating and cooling. 

Kody: We primarily see the benefits of this speed increase when it comes to programming and commissioning. The substantial speed increase allows our control technicians to tune PID loops and control logic at a faster pace. We are also able to tune the BACnet network for faster polling when utilizing IP-based controllers. This allows for more responsive graphics and trend charts.

3. GREG: We know that BacNet MS/TP devices are supported by an RS/485 network, unlike IP devices that are supported by an IP/OT network.  How would you describe your installation group’s experience with designing, deploying, and commissioning an IP network………  Has it been a major learning curve?  If so, has the learning curve been worth it to your company considering you’re now able to provide the latest technology to your customers?

Ernie: I cannot speak of new installations. However, the site that I have been working on already was using IP Based equipment and we are replacing it. No real learning curve there.  As an experienced IT person, I have found the customer’s existing IP infrastructure can be improved for more efficiency and fewer single point of failure.

Kody: We have had tremendous success when installing a dedicated OT network. The use of Optigo Network’s fiber optic technology has allowed us to program, integrate and commission our systems at a faster pace. It also allows us to be more agile and responsive to our customer’s future requests. Having the ability to add IP devices, assign IP addresses, create VLANs, and secure switch ports on an OT network has proved to be extremely beneficial for new and existing projects.

4. GREG: I’ve talked to a few MSIs across the country and they say that programming and commissioning IP devices is much faster than MS/TP devices and that they have experienced significant labor savings.  Has Limbach gotten to the point where you see those benefits?  Either way can explain the feedback that you are getting from your installation group regarding the differences between the two devices.

Ernie: Based on using Distech IP-based equipment, I can see the quick response while commissioning the controllers.

Kody: IP-based controllers are absolutely faster in regards to programming and commissioning. The responsiveness and faster update times when making changes to the control logic is an absolute game changers.

5. GREG: Do feel like your experience with deploying IP/OT networks will make your company that much savvier when attacking large integrations with several technologies being deployed by multiple contractors?  If so, which areas do you think will benefit the most…….  Does it help in areas like coordination, commissioning, and data aggregation or are you seeing other areas?

Ernie: With proper planning and design, the biggest benefits will be commissioning along with troubleshooting.  With BacNet, every piece of equipment is daisy-chained and with an IP backbone that isn’t required.

Kody: The utilization of an OT network is absolutely crucial when it comes to being able to program, integrate and commission DDC controllers with a more efficient, reliable, and cost-effective approach. We have seen a significant reduction in the amount of time required to get our equipment connected and programmed when utilizing an OT network.

6. GREG: One of the major areas of concern with owner IT departments, when MSIs install these networks and connect them to the internet, is cyber security.  Have you found that the industry has provided products that address cyber security while giving you VPN access?  If so, have these products been easy to deploy?

Ernie: An IT department can set up VLANs strictly for the BMS Equipment and they can not only create firewall rules on the managed switches but also create a secure single point of entry from the internet, thus removing the potential need to have cyber security on each piece of BMS equipment.

Kody: Cyber security is absolutely a valid concern in today’s world. The advantage that installing an OT network has is that it is largely isolated from the customer’s production IT network infrastructure. Utilizing Optigo Network’s ‘OneClick Secure’ we are able to whitelist authorized MAC addresses and block any unauthorized access to edge switch ports. This allows us, as the MSI to take a security-first approach. We have also been able to have secure VPN remote access through the use of the Tosibox Lock 500. Tosibox’s use of industry-standard encryption has allowed us to maintain confidence that accessing the remote customer site is safe and secure.

7.  GREG: Do you see Limbach using IP devices more often when doing negotiated work and design-build projects where you are making the decision regarding the technology being deployed in your customer’s buildings?

Ernie: Limbach will continue to pursue using IP devices when the choice makes
the most sense. In new installations, we will recommend it to the customer for
speed, efficiency, and down-the-road troubleshooting.
Kody: Limbach will certainly continue to recommend the use of OT networks for
the underlying BMS infrastructure in every project. We will also continue to
recommend the use of IP-based controllers for primary equipment such as AHUs,
Plant Controllers, and primary systems.
GREG: It sounds like Limbach has embraced the rapid change in our industry and you
guys are attacking it head-on! After experiencing the advantages and efficiencies
during installation, and hearing Kody use words like “Game Changer”, it appears that
you guys will be rapidly moving out of the “MSTP Zone” and moving toward offering
the latest building technology and future-proofing your customer’s buildings!
John: That’s Definitely the plan!

The post NEW IP Technology is being deployed in BAS projects today appeared first on Smart Building Design.

Original post: automatedbuildings.com

For the brave who live on the edge of technology and the risk takers who dare the typical, a TORNADO has picked them out of their markets and landed them in a new place with unbelievable possibilities and huge benefits for their customers and themselves. Yes, BAS has crossed the technology bridge to IP everything and so comes the dawn of a new exciting era.

Let’s dive into some areas we are seeing a huge change already.

Unlimited data throughput, manipulation, organization, and storage are all possible within a modern BAS IP Controller. Do you want to trend a point every 10 seconds? 1 second? With tags, hierarchy, and structure? Sure… Go Ahead… BAS IP controllers allow you to easily throw data on any IP network and you can pick your software glove to catch it, cloud ready. Turn the typical BAS data into modern data streams like MQTT for quick digestion into your data management solutions. It’s like a BAS wonderland where only your imagination limits the possibilities. With so much data – ANALYTICS, MACHINE LEARNING, and AI are all now within reach and some are trying to go there, quickly. Not to mention cloud-ready BAS data that can be incorporated into other digital universes like BAS data mixed with BIM data visualized through Microsoft HoloLens 2 mixed reality. This is one example of the many tech mountains we will climb to improve building performance, operations, and tenant experience.

CYBER Security!!!! OMG, we are a vulnerable industry and are attracting more attention every day. While the threat of cyber security issues for BAS systems doesn’t seem to make much noise on budget day, we in the industry KNOW many typical MEP BAS specs do not have any cyber security built in. It is typically up to contractors to safeguard themselves from liability as the driving force for change, which is not enough to affect the buildup of hacks due to exposed BAS software on the internet. The increase in IP devices for BAS systems increases the network exposure for hackers to penetrate and create problems. While we see huge advantages for BAS IP controllers and devices, we have opened a new frontier and mandatory design changes to ensure the reliability of our future BAS systems.

Plug and play is REAL with BAS IP controllers and devices. While a good network design and proper planning are key, when laid out properly these systems can be installed in a fraction of the time versus traditional predominant RS-485 networked controllers with hardwire I/O. Installation is a breeze, forget about stripping small wires for hours…. click, click, ethernet patch cables can make quick work connecting controllers and devices. Once on the network, which usually is only a two-step process, the device can be updated, downloaded, licensed, programmed, or configured quicker than the tech can push the buttons on their computer. No more troubleshooting 485 networks or waiting for a token ring to pass, the new IP experience for a seasoned tech is something they remember and tell others how much more efficient it is for them. BAS IP controller and device programming and troubleshooting time are a fraction of their predecessor.

On-prem, independent, dedicated building OT networks are taking shape. This requires new skills for the BAS industry closely mirroring IT-managed service companies, where many of whom came from the telephone industry which collapsed with the twisted pair of phone wires going away. BAS contractors will soon become better at managed IT network services, those who have already leaped are certainly getting the jump on their competition. Even when connecting to building owner networks the need for IP contractor knowledge is paramount to a good customer relationship.

There are no ruby red tech shoes you can click to go back to the way it was, you are STUCK, permanently in the New Land of BAS IP.

The post The Brave New BAS IP Everything Has Begun appeared first on Smart Building Design.

Original post: automatedbuildings.com

For the last 2 years, Covid has sent the world’s economy into a tailspin and has introduced an incredible amount of uncertainty when it comes to how we conduct business and service our customers. We are also uncertain of what the long-term effects will be when the smoke clears and we reach, which feels like, an equilibrium in our respective business sectors.

Most analyst have found that sectors such as banking and healthcare were shaken, but not quite beaten by the pandemic.  Other industries such as the restaurants and hospitality were not that fortunate.  Experts across the globe are being asked, what are the greatest unknowns we face? How will we live and work in the post-pandemic future? How is Covid reshaping our society and will this last forever? All of these questions have experts calling for a shift in the way we do business or what is being called “The Great Reset.”

These questions have also prompted industries across the globe to look for solutions for this great reset, and the words “data and automation” seem to be at the forefront of every conversation.

We are now a society that has moved towards online shopping, software subscription services, in-home learning, virtual offices, home offices, hybrid work environments, more video conferencing and reduced international travel.  All changes that require the support of a sophisticated technology platform.  For instance, the traditional use of office space has declined and has forced building owners to pivot and look for ways to retain occupancy by enhancing their occupants experience using technology. Hardware and software solutions such as asset locators, personal wayfinders, UV disinfection technology, and building management systems that enable intelligent spaces and drive overall energy and building performance are becoming the norm.  These applications and technology platforms require a method to move, store, share and analyze data as quickly as possible. The amount of data that is being moved, along with the speed required has created a need for BAS manufacturers to develop controllers that use IP technology. 

We are rapidly approaching an era in which DDC communication protocols over RS-485 networks will be a thing of the past and everyone in our industry from designers to installers will have to get up to speed with IP controllers and the operational technology networks (OTN) that support them. 

Although IP technology has its benefits, designing a secure network environment is paramount.  Poor and careless planning of the network infrastructure can lead to cyber security risks and potential issues with critical building functions or sensitive business systems.  The OT network should be designed in a manner that not only addresses first cost, but also places a high priority on cyber security.  Best in breed products that are OT-focused should always be selected.

The OT network design also needs to include a cyber security solution that is OT-focused.  Securing operational technology is different than securing information technology.  IT security protects information and OT security protects control of critical devices, equipment and building systems. Traditional IT security manufacturers and vendors do not address OT-specific protocols, environments, equipment, or systems.  They also don’t address specific vulnerabilities found across device and software manufacturers’ products that are typically found in an OT environment.

Products and solutions that are OT-focused tend to address network security needs with broad IoT solutions.  A perfect example is that OT-focused solutions are designed to deter or detect what a typical IT firewall would miss.  The typical IT firewall will defend traditional IT traffic at the enterprise edge, but not in the OT environment.  An OT-focused solution is designed to defend in all directions and all the way down to the application control level.

Although product selection is vital, most security breaches are caused by lack of knowledge by the user, therefore it is highly recommended that a written cyber security plan be put in place and users receive extensive training on network security.  A good cyber security policy should, at a minimum, include the following:

• Risk Management Objectives
• User Authorization Policy
• Password Policy
• User Removal Policy
• User Audit Policy
• Administrative Users Policy
• Internet Management
• Backup Policy
• Integration Platform Server Management Policy
• Remote Communications Policy
• Disaster Recovery Policy
• System Configuration Policies
• Subsystem Configuration Policies

As IoT, smart buildings, and IP devices promise powerful business outcomes from connected sensory-based solutions, the business challenge with OT is that cyber-attacks on these environments threaten both safety, productivity, and profitability.  End users, facilities personnel, and system integrators need to protect against these threats to ensure operational safety and minimum downtime. With building systems becoming more interconnected, the exposure to cyber incidents increases. Attacks and disruptions on critical infrastructure put business reputation, production, people, and profits at risk. We live in a new reality in which if it’s connected, it needs to be protected.

The post A New Connected and Protected World appeared first on Smart Building Design.