SENVA EMX-IP User Interface and Modbus User Manual

Ensure the meter and CTs are connected and powered.
If the home screen is not displayed, refer to the Installation
Instructions.
Press any button to view the home screen.
Press ENTER to access the settings menu.
Use UP and DOWN arrows to make selections.
Press ENTER to proceed to a menu or setting.
To go back one menu, press ESC.
To change a value, use UP and DOWN arrows to set digits and
ENTER to move the cursor.
After setting each digit, press ENTER to confirm and return to
the previous menu.
To discard changes, press ESC.

Setup Registers and Parameters

The setup registers and parameters can be accessed through the
display or Modbus communications:

Settings are available in 5 groups on the display.
All settings are stored in non-volatile memory.
Stored values are retained even after a power loss.

FAQ

Q: How do I access the settings menu?

A: From any screen, press the ENTER button to access the
settings menu.

Q: How can I make changes to values?

A: Use the UP and DOWN arrows to set each digit, then press
ENTER to move the cursor left. Confirm changes by pressing ENTER
again.

Q: How do I discard changes?

A: To abandon changes at any time, press ESC.

View Fullscreen

User’s Manual – Modbus EMX-IP User Interface and Modbus Communications Guide
Senva Sensors 1825 NW 167th PL Beaverton, OR 97006

154-0050-0A

Rev. Release Date

Description of Change

10/14/2024

CJL Initial Release

ECR 01350
——-

Table of Contents
Display Navigation…………………………………………………………………………………………………………………………3 Setup Registers and Parameters……………………………………………………………………………………………………..4
Settings ………………………………………………………………………………………………………………………………………………………………………… 4 Metering ………………………………………………………………………………………………………………………………………………………………………. 5 Alarms …………………………………………………………………………………………………………………………………………………………………………..5 Advanced …………………………………………………………………………………………………………………………………………………………………….. 8 Metering Registers…………………………………………………………………………………………………………………………9 Real-Time Clock Registers …………………………………………………………………………………………………………….15 Logging Registers ………………………………………………………………………………………………………………………..16 Modbus Functions…………………………………………………………………………………………. ……………………………. ………………………177 Data Types……………………………………………………………………………………………………………………………………………………………….177 0x03 Read Holding Registers………………………………………………………………………………………………………………………………..188 0x04 Read Input Register ………………………………………………………………………………………………………………………………………188 0x06 Write Single Register……………………………………………………………………………………………………………………………………… 19 0x10 Write Multiple Registers………………………………………………………………………………………………………………………………… 19 MODBUS Exception Codes……………………………………………………………………………………………………………………………………200 Data Type Conversions………………………………………………………………………………………………………………………………………….200 U16 to I16 Conversion……………………………………………………………………………………………………………………………………………211 U16 to U32 Conversion………………………………………………………………………………………………………………………………………….211 U16 to U64 Conversion………………………………………………………………………………………………………………………………………….211 U16 to I64 Conversion……………………………………………………………………………………………………………………………………………222 Appendix D: Hex and ASCII Conversions ……………………………………………………………………………………..233

See Also: 152-0430 154-0049 154-0051

EMX-IP Installation Instructions EMX-IP BACnet Protocol Guide EMX-IP Navigation Guide

EMX-IP Modbus Protocol Guide

Page 2 of 23

154-0050-0A

Display Navigation
Congratulations on installing your new Senva EMX-IP energy meter! This Modbus Protocol Guide assumes the first stage of installation is complete, with the meter and any CTs connected and powered. The OLED display should show the home screen when any button is pressed. If not, refer to the separate Installation Instructions before continuing. Now, only the network configuration remains between you and the data. From any screen, press the ENTER button to access the settings menu.
You can make selections using the UP and DOWN arrows and then pressing ENTER to proceed to that menu or setting. From any menu, press the ESC button to go back one menu.
To change a value, use the UP and DOWN arrows to set each digit and the ENTER button to move the cursor left.
Once each digit has been set, hit ENTER a final time to return to the previous menu. To abandon changes at any time, you may hit ESC.

EMX-IP Modbus Protocol Guide

Page 3 of 23

154-0050-0A

Setup Registers and Parameters
Setup registers and parameters are available in 5 groups in the settings menu using the display or they may also be accessed using Modbus communications.

Settings
Settings are available in the following groups on the display. A parameter list is provided in the following sections.
· Metering Adjust metering parameters such as voltage and current scaling, phase sequencing, and display units.
· Pulse Config Read the count of the two pulse inputs. · Communications See IPv4 and IPv6 values. · Alarms – Enable or disable alarms and set trip points. · Real-Time Clock Set the date and time. · Logging Enable or disable logging as well as setting trigger source and what is
logged. · Passcode Choose a passcode to lock device. · Advanced View firmware versions or initiate a factory reset.

The following sections detail how to adjust settings over the Modbus interface. All settings are stored in non-volatile memory. Stored values will not be lost if the meter experiences a power loss.

R/W: R = Readable Only R/W = Read and writeable

Type, Min, Max: ENUM = UINT16 U8 = UINT8 U16 = UINT16 I16 = INT16

16-bit unsigned integer that maps to a defined list of values 8-bit unsigned integer; 0 to 1 16-bit unsigned integer; min/max values listed 16-bit integer; -768 to 768

Scale: Values must be multiplied by this scale factor to be read correctly. 15 * 0.1 = 1.5. When
writing the value should be divided by the scale before being written. 1.5 / 0.1 = 15.
Modbus Function Codes: The EMX setting registers support the following Modbus function codes:

EMX-IP Modbus Protocol Guide

Page 4 of 23

154-0050-0A

· 0x03 Read Holding Registers · 0x04 Read Input Register · 0x06 Read Single Holding Register · 0x10 Write Multiple Holding Registers

Metering

Description

Reg. R/W Type Min Max Default Scale

Units

0-3PH ABCN,

1-3PH ABC,

Phase Configuration 2-1PH ABN,

2000 R/W ENUM 0

N/A

3-1PH AB,

4-SplitPH ABN

0-Current

Current Element

Transformer,

2001 R/W ENUM 0

N/A

1-Rogowski Coil

Current Scale

See note 1

2002 R/W U16 10 60000 10

0.1

Amps per 0.333 Volts

For phases A, B, C:

0- +, +, +

1- +, +, –

2- +, -, +

Current Orientation

3- +, -, –

2003 R/W ENUM 0

N/A

4- -, +, +

5- -, +, –

6- -, -, +

7- -, -, –

Voltage Scale

See note 2

2004 R/W U16 10 32000 100 0.01

Unitless

Display Units 1.
2.

0-IEC Units, 1-IEEE Units

2005 R/W ENUM 0

N/A

Current scale is the primary side current of a 0.333V CT. CTs with an output voltage exceeding

0.333V should not be used. For a CT ratio of 20A / 0.333 V this will be 20.0 * 10 = 200. If a

Rogowski coil is installed this value will need to be calculated from the coils mV/1000A rating.

Rogowski conversion is calculated by (333.33 mV / x mV) *1000A * 10(scale).

Voltage scale is the PT ratio expressed as a decimal and multiplied by 100. A potential

transformer of 25:10 would give a ratio of 25 / 10 = 2.5, appropriately scaled it would be 2.5*100 =

250.

Alarms

Description
Alarm – Voltage Out of Range Enable

0-Disable 1-Enable

Reg. R/W Type

Min

2016 R/W ENUM

Max

Default Scale Units

N/A N/A

EMX-IP Modbus Protocol Guide

Page 5 of 23

154-0050-0A

Description

Reg. R/W Type

Min

Set nominal L-L Alarm – Voltage voltage for out-of-

Out of Range

range alarm, least 2017 R/W U16

Nominal

significant digit is

1/10th of a Volt.

The percent

Alarm – Voltage Out of Range Threshold

above or below the nominal voltage setting (2017) at which a

2018

R/W

U16

fault will trigger.

Alarm – Current Out of Range Enable

0-Disable 1-Enable

2019 R/W ENUM

Set nominal

Alarm – Current current for out-of-

Out of Range

range alarm, least 2020 R/W U16

Nominal

significant digit is

1/10th of an Amp.

The percent

Alarm – Current Out of Range Threshold

above or below the nominal current setting (2020) at which a

2021

R/W

U16

fault will trigger.

Alarm Ground Current Out of Range Enable

0-Disable 1-Enable

2022 R/W ENUM

Set nominal

Alarm Ground Current Out of Range Nominal

ground current for out-of-range alarm, least significant digit is

2023

R/W

U16

1/10th of an Amp.

The percent

Alarm Ground above the nominal

Current Out of Range

ground current setting (2023)

2024 R/W U16

Threshold

which a fault will

trigger.

Alarm Frequency Out of Range Enable

0-Disable 1-Enable

2025 R/W ENUM

Alarm

Set nominal frequency for out-

Frequency Out of-range alarm,

of Range

least significant

2026 R/W

U16

450

Nominal

digit is 1/100th of a Hertz.

The percent

Alarm

above or below

Frequency Out of Range

the nominal frequency setting

2027

R/W

U16

Threshold

(2026) at which a

fault will trigger.

EMX-IP Modbus Protocol Guide

Page 6 of 23

Max

Default Scale Units

60000

2400 0.1 Volts

N/A N/A

60000

0.1 Amps

N/A N/A

60000

0.1 Amps

N/A N/A

650

600

0.1

154-0050-0A

Description

Reg. R/W Type

Min

Alarm Voltage Phase Loss Enable

0-Disable 1-Enable

2028 R/W ENUM

A phase-to-phase

comparison of L-N voltages is performed. If any phase’s L-N

voltage is below

Alarm Voltage Phase Loss Threshold

the others by the

threshold amount, a fault will trigger.

2029

R/W

Only applicable to

U16

3 configurations

(ABC or ABCN).

Single phase installations will power off during phase loss event.

Alarm Voltage

Phase Imbalance

0-Disable, 1-Enable

2030 R/W ENUM

Enable

The percent of phase-to-phase

imbalance above which a fault will trigger. For a three-phase Y

Alarm Voltage system, both VL-L

Phase Imbalance

and VL-N are examined. For a

2031

R/W

U16

Threshold

three-phase delta, only VL-L measurements are compared. In

a single splitphase, only VL-N are compared.

Alarm Power Factor Low Enable

0-Disable 1-Enable

2032 R/W ENUM

Alarm Power Factor Low Threshold

Set the (unitless)

PF value, below which a fault will

2033

R/W

U16

trigger.

Max

Default Scale Units

N/A N/A

N/A

0.01 Unitless

EMX-IP Modbus Protocol Guide

Page 7 of 23

154-0050-0A

Advanced

Description

Reg. R/W Type

Min

Reset Wh

Writing 1 will reset all the stored Wh, VAh and VARh values.

2034

R/W

U16

Count of Wh Resets

Number of times the Wh has been reset.

2035 R U16

Writing 1 will reset the system

Reset Run time

run time (37 and 38), but not the system power on time (35

2036 R/W U16

and 36).

Count of run time Resets

Number of times the system run time has been reset.

2037

U16

Reset Pulse Counts

Writing 1 will reset the pulse input counters (41 through 44).

2038 R/W

U16

Reboot EMX

Reboots the EMX. When

written, this point may not give

a response or may return an error due to the reset process.

2042 R/W

The point will still accept the

value.

Writing a 1 value to this register

reset all the stored log entries.

This will break communications

and display connection for

approx. 25 seconds. Do not

Reset Log Content

remove power during this

2043 R/W U16

update. When written, this point

may not give a response or may

return an error due to the reset

process. The point will still

accept the value.

Phase Angle Compensation

2044 R/W I16

-768

Passcode

Set display passcode

2045 R/W U16

Max 1
65535

Default 0 0

65535

768

9999

EMX-IP Modbus Protocol Guide

Page 8 of 23

154-0050-0A

Metering Registers

The following table describes each of the power and energy readings provided over Modbus from the device.

R/W: R = Read Only R/W = Read and Write

Type, Min, Max: ENUM = UINT16 U8 = UINT8 U16 = UINT16
I16 = INT16 U32 = UINT32
U64 = UINT64 I64 = INT64

16-bit unsigned integer that maps to a defined list of values 8-bit unsigned integer; 0 to 255, unless otherwise noted 16-bit unsigned integer; 0 to 65535 (0xFFFF), unless otherwise noted 16-bit integer; -32768 to 32767, unless otherwise noted 32-bit unsigned integer; 0 to 4294967295 (0xFFFFFFFF), unless otherwise noted 64-bit unsigned integer; 0 to 18.466e+18 64-bit signed integer; -9.233e+18 to 9.233e+18

Scale: Values must be multiplied by this scale factor to be read correctly. For some power,
current, and voltage readings, the scale factor will be automatically set based on the user settings for voltage and current scale. These multipliers can be read in registers 030-032.

Store: Values marked “yes” will be stored in non-volatile memory. Stored values will not be
lost if the meter experiences a power loss.

Modbus Function Codes: The EMX metering registers support the following Modbus function codes:
· 0x03 Read Holding Registers · 0x04 Read Input Register

Some registers span multiple Modbus addresses. Two consecutive registers defined as XXX/YYY indicates a pair of aligned registers, that must be merged into a 32-bit value. Four consecutive registers require merging the results into a 64-bit value. See data type conversions section for more information and examples.

EMX-IP Modbus Protocol Guide

Page 9 of 23

154-0050-0A

Description V-LN Average

V-LL Average

Current Average

Current Sum

Real power total

Reactive power total

Apparent power total

V-LN Phase A

V-LN Phase B

V-LN Phase C

V-LL Phase A-B

V-LL Phase B-C

V-LL Phase C-A

Current Phase A

Current Phase B

Current Phase C

Power Factor Phase A

Power Factor Phase B

Power Factor Phase C

Frequency (Phase A)

Real power Phase A

Real power Phase B

Real power Phase C

Reactive power Phase A

Reactive power Phase B

Reactive power Phase C

Apparent power Phase A

Apparent power Phase B

Apparent power Phase C

Voltage Scale Factor (V-scale) Current Scale Factor (I-scale) Power Scale Factor (P-scale)

-4:0.0001 -3:0.001 -2:0.01 -1:0.1 0:1 1:10 2:100 3:1000 4:10000 5:100000 6:1000000

Reg. 001 002 003 004 005 006 007 008 009 010 011 012 013 014 015 016 017 018 019 020 021 022 023 024 025 026 027 028 029

R/W R R R R R R R R R R R R R R R R R R R R R R R R R R R R R

Type U16 U16 U16 U16 I16 I16 I16 U16 U16 U16 U16 U16 U16 U16 U16 U16 I16 I16 I16 U16 I16 I16 I16 I16 I16 I16 I16 I16 I16

030 R I16

Min 0 0 0 0
-32768 -32768 -32768
0 0 0 0 0 0 0 0 0 -1000 -1000 -1000 480 32768 32768 32768 32768 32768 32768 32768 32768 32768
-2

Max 65535 65535 65535 65535 32767 32767 32767 65535 65535 65535 65535 65535 65535 65535 65535 65535 1000 1000 1000
620 32767 32767 32767 32767 32767 32767 32767 32767 32767
2

Scale V-scale V-scale I-scale I-scale P-scale P-scale P-scale V-scale V-scale V-scale V-scale V-scale V-scale I-scale I-scale I-scale 0.001 0.001 0.001
0.1 P-scale P-scale P-scale P-scale P-scale P-scale P-scale P-scale P-scale
1

Units V(rms) V(rms) A(rms) A(rms)
W VAR VA V(rms) V(rms) V(rms) V(rms) V(rms) V(rms) A(rms) A(rms) A(rms) Unitless Unitless Unitless Hz
W W W VAR VAR VAR VA VA VA

Store No No No No No No No No No No No No No No No No No No No No No No No No No No No No No

N/A

031 R I16

-3

N/A

032 R I16

-4

N/A

EMX-IP Modbus Protocol Guide

Page 10 of 23

154-0050-0A

Description

Bit 0: Pulse

configuration error

Bit 1: Pulse

overrun error

Bit 2: Voltage out

of range

Bit 3: Current out

of range

Bit 4: Current sum

(neutral current)

out of range

Alarm Status Bitfield

Bit 5: Freq. out of range Bit 6: Voltage phase loss

Bit 7: Voltage

phase unbalance

Bit 8: Power factor

low

Bit 9: Accumulator

loss

Bit 10: RTC error

Bit 11: Logs full

Bit 12: Meter

settings error

Bit 13 – 15:

Reserved

Load Status

0: No load detected 1: Load above threshold

System power on time

System run time

Power Reset Count

Pulse Count 1

Pulse Count 2

Real Net Energy total

Real Net Energy Phase A

Real Net Energy Phase B

Reg.
033
034 035 036 037 038 039 040 041 042 043 044 045 046 047 048 049 050 051 052 053 054 055 056

R/W Type

Min

Max

R U16

0xFFFF

R ENUM

R U32 R U32 R U32 R U32 R U32

4294967295

R I64 -9.233e+18 9.233e+18

Scale
1
1 1 1 1 1 1 0.00000001 0.00000001 0.00000001

Units
N/A
N/A Seconds Seconds
N/A N/A N/A Wh Wh Wh

Store
No
No Yes Yes Yes Yes Yes Yes Yes Yes

EMX-IP Modbus Protocol Guide

Page 11 of 23

154-0050-0A

Description Real Net Energy Phase C Reactive Net Energy total Reactive Net Energy Phase A Reactive Net Energy Phase B Reactive Net Energy Phase C Apparent Net Energy total Apparent Net Energy Phase A Apparent Net Energy Phase B Apparent Net Energy Phase C Real Import Energy total Real Import Energy Phase A Real Import Energy Phase B Real Import Energy Phase C

Reg.
057 058 059 060 061 062 063 064 065 066 067 068 069 070 071 072 073 074 075 076 077 078 079 080 081 082 083 084 085 086 087 088 089 090 091 092 093 094 095 096 097 098 099 100 101 102 103 104 105 106 107 108

R/W R R R R R R R R R R R R R

Type I64 I64 I64 I64 I64 I64 I64 I64 I64 U64 U64 U64 U64

Min -9.233e+18 -9.233e+18 -9.233e+18 -9.233e+18 -9.233e+18 -9.233e+18 -9.233e+18 -9.233e+18 -9.233e+18
0 0 0 0

Max 9.233e+18 9.233e+18 9.233e+18 9.233e+18 9.233e+18 9.233e+18 9.233e+18 9.233e+18 9.233e+18 18.446e+18 18.446e+18 18.446e+18 18.446e+18

Scale 0.00000001 0.00000001 0.00000001 0.00000001 0.00000001 0.00000001 0.00000001 0.00000001 0.00000001 0.00000001 0.00000001 0.00000001 0.00000001

Units Wh VARh VARh VARh VARh VAh VAh VAh VAh Wh Wh Wh Wh

Store Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes

EMX-IP Modbus Protocol Guide

Page 12 of 23

154-0050-0A

Description

Reg. R/W Type

Min

Max

Scale

Units Store

109

Reactive Import Energy total

110 111

U64

18.446e+18 0.00000001 VARh Yes

112

113

Reactive Import Energy Phase 114

115

U64

18.446e+18 0.00000001 VARh Yes

116

117

Reactive Import Energy Phase 118

119

U64

18.446e+18 0.00000001 VARh Yes

120

121

Reactive Import Energy Phase 122

123

U64

18.446e+18 0.00000001 VARh Yes

124

125

Apparent Import Energy total

126 127

U64

18.446e+18 0.00000001 VAh

Yes

128

129

Apparent Import Energy Phase A

130 131

U64

18.446e+18 0.00000001 VAh

Yes

132

133

Apparent Import Energy Phase B

134 135

U64

18.446e+18 0.00000001 VAh

Yes

136

137

Apparent Import Energy Phase C

138 139

U64

18.446e+18 0.00000001 VAh

Yes

140

141

Real Export Energy total

142 143

U64

18.446e+18 0.00000001

Yes

144

145

Real Export Energy Phase A

146 147

U64

18.446e+18 0.00000001

Yes

148

149

Real Export Energy Phase B

150 151

U64

18.446e+18 0.00000001

Yes

152

153

Real Export Energy Phase C

154 155

U64

18.446e+18 0.00000001

Yes

156

157

Reactive Export Energy total

158 159

U64

18.446e+18 0.00000001 VARh Yes

160

EMX-IP Modbus Protocol Guide

Page 13 of 23

154-0050-0A

Description Reactive Export Energy Phase A
Reactive Export Energy Phase B
Reactive Export Energy Phase C
Apparent Export Energy total
Apparent Export Energy Phase A
Apparent Export Energy Phase B
Apparent Export Energy Phase C
Meter Time Since Boot

Reg.
161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190

R/W R R R R R R R R

Type U64 U64 U64 U64 U64 U64 U64 U32

Min

Max

Scale

Units Store

18.446e+18 0.00000001 VARh Yes

18.446e+18 0.00000001 VAh

Yes

18.446e+18 0.00000001 VAh

Yes

18.446e+18 0.00000001 VAh

Yes

18.446e+18 0.00000001 VAh

Yes

4294967295

Seconds No

EMX-IP Modbus Protocol Guide

Page 14 of 23

154-0050-0A

Real-Time Clock Registers

Description RTC Set Year RTC Set Month RTC Set Day of Month RTC Set Day of Week RTC Set Hours RTC Set Minutes RTC Set Seconds RTC Commit time

Reg. R/W Type 4000 R/W U16 4001 R/W U8 4002 R/W U8 4003 R/W ENUM 4004 R/W U8 4005 R/W U8 4006 R/W U8 4007 R/W ENUM

RTC – Current Year

4100 R U16

RTC – Current Month

4101 R U8

RTC – Current Day of Month

4102 R U8

RTC – Current Day of Week

0 = Sunday 6 = Saturday

4103

ENUM

RTC – Current Hours

4104 R U8

RTC – Current Minutes

4105 R U8

RTC – Current Seconds

4106 R U8

If in 24-hour

RTC – Current mode, will return

AM/PM Flag, or 0, if in 12-hour 4107 R ENUM

mode: 1 = AM,

2 = PM

Min 2022
1 1 0 0 0 0 0
2022 1 1
0
0 0 0
0

Max 2060
12 31 6 23 59 23 1
2060 12 31
6
0 0 0
2

Scale 1 1 1 1 1 1 1 1

Units N/A N/A N/A N/A Hrs Mins Secs N/A

Store No No No No No No No Yes

N/A Yes

Hrs Yes

1 Mins Yes

1 Secs Yes

N/A Yes

EMX-IP Modbus Protocol Guide

Page 15 of 23

154-0050-0A

Logging Registers
Log Source 1 through Log source 12 sets the source for the logging. Write the Modbus register 1-190 to the desired source to log that point. If a log source register has multiple registers all registers need to be set. For example, if Real Net Energy total is desired to be logged all four registers need to be set.
To trigger a log event register 5000 (Logging Trigger Source) needs to be set to the desired trigger mode, by default it is set to be disabled. Logging can be triggered with the timer, set on Modbus point 5001 (Logging Trigger Interval) in seconds from 15-3600. Triggering can be set over COMMS by writing a `1′ to point 5015 (Logging Trigger log creation), or Pulse In 1 or 2 can be set to trigger a log whenever a pulse is detected.

Description

Reg. R/W Type

Min

0 = Disabled

Logging Trigger Source

1 = Timer 2 = Comms 3 = Pulse In 1

5000 R/W ENUM

4 = Pulse in 2

Logging – Trigger Interval

5001 R/W U16

0 – “Continuous” –

continue logging

and overwrite old

entries,

Logging Mode Select

sequentially 1 – “One Shot” –

5002 R/W ENUM

log until

EEPROM is full,

then stop logging

and throw alarm

Logging – Log Source 1

5003 R/W U16

Logging – Log Source 2

5004 R/W U16

Logging – Log Source 3

5005 R/W U16

Logging – Log Source 4

5006 R/W U16

Logging – Log Source 5

5007 R/W U16

Logging – Log Source 6

5008 R/W U16

Logging – Log Source 7

5009 R/W U16

Logging – Log Source 8

5010 R/W U16

Logging – Log Source 9

5011 R/W U16

Logging – Log Source 10

5012 R/W U16

Logging – Log Source 11

5013 R/W U16

Logging – Log Source 12

5014 R/W U16

Logging – Trigger log creation

5015 R/W U16

Logging – Read log at index

5016 R/W U16

Logging – Oldest Index

5100 R U16

Logging – Count of log entries

5101 R U16

Logging – Current Index

5102 R U16

Logging – Log data 1

5103 R U16

Logging – Log data 2

5104 R U16

Logging – Log data 3

5105 R U16

Logging – Log data 4

5106 R U16

Logging – Log data 5

5107 R U16

Logging – Log data 6

5108 R U16

EMX-IP Modbus Protocol Guide

Page 16 of 23

Max 4
3600

Scale Units Store 1 N/A Yes 1 Secs Yes

1 N/A Yes

190 190 190 190 190 190 190 190 190 190 190 190
1 4096
4096 4096 4096 65535 65535 65535 65535 65535 65535

1 N/A Yes 1 N/A Yes 1 N/A Yes 1 N/A Yes 1 N/A Yes 1 N/A Yes 1 N/A Yes 1 N/A Yes 1 N/A Yes 1 N/A Yes 1 N/A Yes 1 N/A Yes 1 N/A Yes 1 N/A Yes
1 N/A Yes 1 N/A Yes 1 N/A Yes 1 N/A Yes 1 N/A Yes 1 N/A Yes 1 N/A Yes 1 N/A Yes 1 N/A Yes
154-0050-0A

Logging – Log data 7

5109 R U16

Logging – Log data 8

5110 R U16

Logging – Log data 9

5111 R U16

Logging – Log data 10

5112 R U16

Logging – Log data 11

5113 R U16

Logging – Log data 12

5114 R U16

Logging – Log time stamp year

5115 R U16

Logging – Log time stamp month 5116 R U16

Logging – Log time stamp day of month

5117

U16

Logging – Log time stamp hours 5118 R U16

Logging – Log time stamp minutes

5119 R U16

Logging – Log time stamp seconds

5120 R U16

Logging – CRC

5121 R U16

65535 65535 65535 65535 65535 65535
256 12
31
23
59
59
65535

1 N/A Yes 1 N/A Yes 1 N/A Yes 1 N/A Yes 1 N/A Yes 1 N/A Yes 1 N/A Yes 1 N/A Yes
1 N/A Yes
1 N/A Yes
1 N/A Yes
1 N/A Yes
1 N/A Yes

Modbus Functions
The EMX supports the following functions of the Modbus Application Protocol Specification, v1.1b3. Examples are intended to be representative; refer to the full specification for questions or clarification.
Notes:
· The device address defaults to 247 (0xF7). · Refer to the Modbus standard for CRC/LRC calculation procedures.

Data Types

Natively, Modbus holding register functions only support the UINT16 type (2 bytes). The meter constructs additional types from two or more consecutive registers. Client interface software must support the same construction for proper communication:
# of Registers Range (hexadecimal)

BOOL

ENUM

UINT8

UINT16

INT16

UINT32

UINT64

INT64

0 to 1 0 to specified upper limit 0 to 255 (0x00FF), unless otherwise noted 0 to 65535 (0xFFFF), unless otherwise noted -32768 to -32767 (0xFFFF), unless otherwise noted 0 to 4294967295 (0xFFFFFFFF), unless otherwise noted 0 to 18.446e+18 (0xFFFFFFFFFFFFFFFF), unless otherwise noted -9.233e+18 to 9.233e+18 (0xFFFFFFFFFFFFFFFF), unless otherwise noted

UINT32, UINT64, and INT64 data always occupies two or four registers (4 and 8 bytes) in network byte order (MSB first). Read and write operations should address both registers.

The following examples show UINT32 encodings in a Modbus PDU beginning at byte [n], register [r]:

Value

Decimal

[n] [n+1] [n+2] [n+3]

0xAABBCCDD 0x01234567 0x00010000

2864434397 19088743 65536

0xAA 0xBB 0xCC 0xDD 0x12 0x34 0x56 0x78 0x00 0x01 0x00 0x00

[r] [r+1]

EMX-IP Modbus Protocol Guide

Page 17 of 23

154-0050-0A

0x03 Read Holding Registers

Returns one or more registers in a contiguous block:

Request

Size

[0] Device Address 1 [1] Function Code

[2] Starting Address 2 [3] Register Count

[4] CRC

Notes
Always 0x03 = 0 to 65535 (0xFFFF) = 1 to 125 registers

Successful reads return the contents of the requested registers:

Response
[0] Device Address [1] Function Code [2] Byte Count [3] Register Data [4] CRC

Size
1 1 1 2 * 2

Notes
Always 0x03 2 *

Example 1: Read the line frequency of A (020).

Request = 0x F7 03 00 14 00 01 B1 5B [0] [1] [2] [3] [4]

Response = 0x F7 03 02 02 59 B1 0B

[0] [1] [2] [3] [4] [3] Frequency = 0x0259 = 601 = 60.1 (Hz)

0x04 Read Input Register

Reads one or more read only registers in a contiguous block:

Request

Size

[0] Device Address 1 [1] Function Code

[2] Starting Address 2 [3] Register Count

[4] CRC

Notes
Always 0x04 = 0 to 65535 (0xFFFF) = 1 to 125 registers

Successful reads return the contents of the requested registers:

Response
[0] Device Address [1] Function Code [2] Byte Count [3] Register Data [4] CRC

Size
1 1 1 2 * 2

Notes
Always 0x04 2 *

Example 1: Read the line frequency of A (020).

Request = 0x F7 03 00 14 00 01 B1 5B [0] [1] [2] [3] [4]

Response = 0x F7 03 02 02 59 B1 0B

[0] [1] [2] [3] [4] [3] Frequency = 0x0259 = 601 = 60.1 (Hz)

EMX-IP Modbus Protocol Guide

Page 18 of 23

154-0050-0A

0x06 Write Single Register

Writes a value to a single register:

Request

Size

[0] Device Address 1 [1] Function Code

[2] Register Address 2 [3] Register Value

[4] CRC

Notes
Always 0x06 = 0 to 65535 (0xFFFF) = 0 to 65535 (0xFFFF)

Successful writes echo the original request:

Response

Size

[0] Device Address 1 [1] Function Code

[2] Register Address 2 [3] Register Value

[4] CRC

Always 0x06

Example 1: Change the phase configuration (2000).

Request = Response = 0x F7 06 07 D0 00 01 5C 11 [0] [1] [2] [3] [4]

0x10 Write Multiple Registers

Writes one or more registers in a contiguous block:

Request
[0] Device Address [1] Function Code [2] Starting Address [3] Write Count [4] Byte Count [5] Write Registers [6] CRC

Size
1 1 2 2 1 2 * 2

Notes
Always 0x10 = 0 to 65535 (0xFFFF) = 1 to 123 registers Always 2 * …

Successful writes echo the Starting Address and Write Count:

Request

Size

[0] Device Address 1 [1] Function Code

[2] Starting Address 2 [3] Write Count

[4] CRC

Notes
Always 0x10

Example 1: Change phase configuration (2000) and CT type (2001) in one write:

Request = 0x F7 10 07 D0 00 02 04 00 00 00 01 04 88

[0] [1] [2] [3] [4] [5] [6]

Response = 0x F7 10 07 D0 00 02 55 D3 [0] [1] [2] [3] [4]

EMX-IP Modbus Protocol Guide

Page 19 of 23

154-0050-0A

MODBUS Exception Codes
When the Modbus interface encounters an error, it will return an exception code. The most common errors are described in the table below. Additional information about exception codes may be found in the reference document.
Reference: https://modbus.org/docs/Modbus_Application_Protocol_V1_1b.pdf

MODBUS Exception Codes

Code Name

Meaning

The function code received in the query is not an allowable action for the server

ILLEGAL FUNCTION

(or slave). This may be because the function code is only applicable to newer devices and was not implemented in the unit selected. It could also indicate that the server (or slave) is in the wrong state to process a request of this type, for

example because it is unconfigured and is being asked to return register values.

The data address received in the query is not an allowable address for the server

(or slave). More specifically, the combination of reference number and transfer

length is invalid. For a controller with 100 registers, the PDU addresses the first

ILLEGAL DATA ADDRESS

register as 0, and the last one as 99. If a request is submitted with a starting register address of 96 and a quantity of registers of 4, then this request will successfully operate (address-wise at least) on registers 96, 97, 98, 99. If a request is submitted with a starting register address of 96 and a quantity of registers of 5,

then this request will fail with Exception Code 0x02 “Illegal Data Address” since it

attempts to operate on registers 96, 97, 98, 99 and 100, and there is no register

with address 100.

A value contained in the query data field is not an allowable value for server (or

ILLEGAL DATA VALUE

slave). This indicates a fault in the structure of the remainder of a complex request, such as that the implied length is incorrect. It specifically does NOT mean that a data item submitted for storage in a register has a value outside the expectation of the application program, since the MODBUS protocol is unaware of

the significance of any particular value of any particular register.

Data Type Conversions
The following sections provide information on how to convert from the standard U16 registers that Modbus provides into other formats. Some controllers or Modbus interfaces provide these conversions, in which case the user should utilize those methods, instead of the following conversions.

EMX-IP Modbus Protocol Guide

Page 20 of 23

154-0050-0A

U16 to I16 Conversion
Conversion from a signed requires checking if the value is value returned (VALUE) is greater than the maximum for a 16-bit integer (32767), if the value is greater than the value 65536 must be subtracted off to calculate a negative value.
If VALUE > 32767
Then: VALUE = VALUE 65536
Otherwise: VALUE = VALUE (do nothing)
Example:
Reading register 005 (Real power total) the device responds with 64536. This value is greater than 32767, which means it must be adjusted. By subtracting 65536 we get 64536 65536 = -1000, which is the correct value for the real power. Please note that in practice a scale value will need to be determined and applied to this output to get the value into watts or whatever units are applicable.
U16 to U32 Conversion
Conversion from two unsigned 16-bit registers into a 32-bit value can be done by reading the two necessary registers and multiplying the first (lower register address) register by 32678 and adding the second register.
VALUE = (REGISTER_LOW * 65536) + REGISTER_HIGH
Example:
Reading registers 035 and 036 which together are the system power on time. Register 035 has a value (REGISTER_LOW) of 6, register 036 (REGISTER_HIGH) has a value of 38784. Using the calculation we get (6 * 65536) + 38784 = 432000. This corresponds to the time in seconds that the device has been powered on. 5 Days = 5 * 24 * 60 * 60 = 432000 seconds.
U16 to U64 Conversion
Conversion from 4 unsigned 16-bit registers to a 64-bit register is necessary for using the energy accumulators on the EMX. This is done to maintain system accuracy over long operating durations, and to avoid conditions where the energies appear to cease updating. This follows a similar pattern as the U32 conversion. All four registers must be read, preferably simultaneously with a multi-register read operation. The lowest address register is REG_1, the highest is REG_4.
VALUE = REG_1 * 2^48 + REG_2 * 2^32 + REG_3 * 2^16 + REG_4
Or without the power notation
VALUE = REG_1 * 281,474,976,710,656 + REG_2 * 4,294,967,296 + REG_3 * 65536 + REG_4
Example:
Reading registers 093/094/095/096 which corresponds to the Real Import Energy Total (how much energy has been consumed by downstream devices). Register 093 (REG_1) reads 0, register 094 (REG_2) reads 13, register 095 (REG_3) reads 63559 and register 096 (REG_4) reads 22528.

EMX-IP Modbus Protocol Guide

Page 21 of 23

154-0050-0A

The calculation is 0 * 281,474,976,710,656 + 13 * 4,294,967,296 + 63559 * 65536 + 22528 = 60000000000 when scaled down by the scale of 0.00000001 given in the table it’s 600.0 which is the number of Watt Hours of energy that the device has metered at that point.
U16 to I64 Conversion
All the net energy registers are signed values. A negative sign indicates that net power has been exported, a positive sign indicates that net power has been imported (consumed). To convert from four U16 registers to an I64 register first perform a conversion as described above. Next perform the following step:
If VALUE > (2^63)- 1
Then VALUE = VALUE 2^64
Otherwise VALUE = VALUE (do nothing).

EMX-IP Modbus Protocol Guide

Page 22 of 23

154-0050-0A

Appendix D: Hex and ASCII Conversions

HEX
0x00 0x01 0x02 0x03 0x04 0x05 0x06 0x07 0x08 0x09 0x0A 0x0B 0x0C 0x0D 0x0E 0x0F 0x10 0x11 0x12 0x13 0x14 0x15 0x16 0x17 0x18 0x19 0x1A 0x1B 0x1C 0x1D 0x1E 0x1F 0x20 0x21 0x22 0x23 0x24 0x25 0x26 0x27 0x28 0x29 0x2A 0x2B 0x2C 0x2D 0x2E 0x2F 0x30 0x31 0x32 0x33 0x34 0x35 0x36 0x37 0x38 0x39 0x3A 0x3B 0x3C 0x3D 0x3E 0x3F
HEX
0x40

DEC ASCII

NULL

9 10 11 12 13

14 15 16 17

18 19 20 21 22

28 29 30 31

”

‘

(

)

–

;

DEC ASCII

0x41 0x42 0x43 0x44 0x45 0x46 0x47 0x48 0x49 0x4A 0x4B 0x4C 0x4D 0x4E 0x4F 0x50 0x51 0x52 0x53 0x54 0x55 0x56 0x57 0x58 0x59 0x5A 0x5B 0x5C 0x5D 0x5E 0x5F 0x60 0x61 0x62 0x63 0x64 0x65 0x66 0x67 0x68 0x69 0x6A 0x6B 0x6C 0x6D 0x6E 0x6F 0x70 0x71 0x72 0x73 0x74 0x75 0x76 0x77 0x78 0x79 0x7A 0x7B 0x7C 0x7D 0x7E 0x7F
HEX
0x80 0x81 0x82

[

]

100 d

101 e

102 f

103 g 104 h 105 i 106 j

107 k

108 l

109 m

110 n

111 o

112 p 113 q 114 r 115 s 116 t

117 u 118 v 119 w 120 x

121 y

122 z 123 { 124 | 125 }

126 ~

127

DEC LATIN-1

128

129 130 ,

0x83 0x84 0x85 0x86 0x87 0x88 0x89 0x8A 0x8B 0x8C 0x8D 0x8E 0x8F 0x90 0x91 0x92 0x93 0x94 0x95 0x96 0x97 0x98 0x99 0x9A 0x9B 0x9C 0x9D 0x9E 0x9F 0xA0 0xA1 0xA2 0xA3 0xA4 0xA5 0xA6 0xA7 0xA8 0xA9 0xAA 0xAB 0xAC 0xAD 0xAE 0xAF 0xB0 0xB1 0xB2 0xB3 0xB4 0xB5 0xB6 0xB7 0xB8 0xB9 0xBA 0xBB 0xBC 0xBD 0xBE 0xBF
HEX
0xC0 0xC1 0xC2 0xC3 0xC4

131 132 ,, 133 … 134 135 136 ^ 137 138 S 139 < 140 OE 141 142 Z 143 144 145 ` 146 ‘ 147 ” 148 ” 149 · 150 151 — 152 ~ 153 TM 154 s 155 > 156 oe 157 158 z 159 Y 160 161 ¡ 162 ¢ 163 £ 164 ¤ 165 ¥ 166 ¦ 167 § 168 ¨ 169 © 170 ª 171 « 172 ¬ 173 174 ® 175 ¯ 176 ° 177 ± 178 ² 179 ³ 180 ´ 181 µ 182 ¶ 183 · 184 ¸ 185 ¹ 186 º 187 » 188 ¼ 189 ½ 190 ¾ 191 ¿
DEC LATIN-1
192 À 193 Á 194 Â 195 Ã 196 Ä

EMX-IP Modbus Protocol Guide

Page 23 of 23

0xC5 197 Å 0xC6 198 Æ 0xC7 199 Ç 0xC8 200 È 0xC9 201 É 0xCA 202 Ê 0xCB 203 Ë 0xCC 204 Ì 0xCD 205 Í 0xCE 206 Î 0xCF 207 Ï 0xD0 208 Ð 0xD1 209 Ñ 0xD2 210 Ò 0xD3 211 Ó 0xD4 212 Ô 0xD5 213 Õ 0xD6 214 Ö 0xD7 215 × 0xD8 216 Ø 0xD9 217 Ù 0xDA 218 Ú 0xDB 219 Û 0xDC 220 Ü 0xDD 221 Ý 0xDE 222 Þ 0xDF 223 ß 0xE0 224 à 0xE1 225 á 0xE2 226 â 0xE3 227 ã 0xE4 228 ä 0xE5 229 å 0xE6 230 æ 0xE7 231 ç 0xE8 232 è 0xE9 233 é 0xEA 234 ê 0xEB 235 ë 0xEC 236 ì 0xED 237 í 0xEE 238 î 0xEF 239 ï 0xF0 240 ð 0xF1 241 ñ 0xF2 242 ò 0xF3 243 ó 0xF4 244 ô 0xF5 245 õ 0xF6 246 ö 0xF7 247 ÷ 0xF8 248 ø 0xF9 249 ù 0xFA 250 ú 0xFB 251 û 0xFC 252 ü 0xFD 253 ý 0xFE 254 þ 0xFF 255 ÿ
154-0050-0A

Documents / Resources

SENVA EMX-IP User Interface and Modbus [pdf] User Manual
154-0050-0A, EMX-IP User Interface and Modbus, EMX-IP, User Interface and Modbus, Modbus

References

User Manual

SENVA EMX-IP User Interface and Modbus User Manual

EMX-IP User Interface and Modbus

Specifications

Product Usage Instructions

Display Navigation

Setup Registers and Parameters

FAQ

Q: How do I access the settings menu?

Q: How can I make changes to values?

Q: How do I discard changes?

Documents / Resources

References

Leave a comment

Cancel reply