Easy BACnet- Home
- BACnet points lists
- Thermal Solutions
- Apex / Arctic with Concert or Panasonic 4716 software (Universal Gateway)
Boiler controller via ProtoNode gateway · BACnet points list
Thermal Solutions Apex / Arctic with Concert or Panasonic 4716 software (Universal Gateway) BACnet points list
Updated 28 October 2026
Apex and Arctic boilers on 4716 software (Concert control, or Apex with the Panasonic display) are read over Modbus RTU by the Thermal Solutions Universal Gateway (a ProtoNode) and served as BACnet IP or BACnet MS/TP devices. The 45-object profile adds BMS demand, setpoint, outdoor temperature and firing-rate commands that must be refreshed within a Modbus command timeout, plus pump status, low-temperature loop values, burner state and lockout and hold codes.
This page lists 45 BACnet objects for the Thermal Solutions Apex / Arctic with Concert or Panasonic 4716 software (Universal Gateway) — 12 of them writable — with each object’s type, instance number, name, engineering units and access. It is re-typed from Thermal Solutions’s own free documentation, linked below.
- Manufacturer
- Thermal Solutions
- Model
- Apex / Arctic with Concert or Panasonic 4716 software (Universal Gateway)
- Equipment
- Boiler controller via ProtoNode gateway
- Equipment type
- Boilers & water heaters
- BACnet objects
- 45 (12 writable)
- Transport
- BACnet IP, BACnet MS/TP
- Firmware
- Not stated
- Default device instance
- 50000 + boiler Modbus address (BACnet IP and MS/TP multiple node); Node_Offset default 50,000
- Also known as
- Concert, Concert control, Apex 4716, Arctic, Arctic 1000, Arctic 1500, Universal Gateway, 106417-01, ProtoNode RER, FPC-N34-0816
BMS integration notes: Thermal Solutions Apex / Arctic with Concert or Panasonic 4716 software (Universal Gateway)
Set a unique Comm HMI Station ID on each Concert display (Menu > EMS Interface > Modbus Setup), wire the boiler's EMS terminals to the gateway, run auto-discovery, then write a demand (BV 29 or BV 30) plus a setpoint (AV 31 or AV 32) or a firing rate (AV 34). Those values must be rewritten before the Modbus command timeout runs out (default 30 s) or the boiler falls back to local control.
Minimum points to map
The short list most integrators start with — enough to run the unit from a BMS. Map more as the job needs.
| Object | Name | Why | Access |
|---|---|---|---|
| BV 29 | CH Modbus Stat | CH demand from the BMS (1 = demand) | Write |
| BV 30 | LLCH Modbus Stat | Lead lag CH demand from the BMS (1 = demand) | Write |
| AV 31 | CH Modbus SP | Boiler setpoint, 60-190 °F | Write |
| AV 32 | CH Sequencer Modbus SP | Lead lag sequencer setpoint, 60-190 °F | Write |
| AV 34 | CH Modbus Rate | Firing rate command; 0-200 = 0-100 % | Write |
| AI 21 | Burner Control State | Burner sequence state; 12 = Run, 14 = Lockout | Read |
| AI 13 | Supply Sensor | Supply water temperature, °F | Read |
| AI 8 | Active CH Setpoint | CH setpoint in use, °F | Read |
| AI 22 | Lockout Code | Lockout reason; 0 = no lockout | Read |
Enable & remote start
Write BV 29 CH Modbus Stat (single boiler) or BV 30 LLCH Modbus Stat (lead lag) = 1 for demand, with AV 31 CH Modbus SP or AV 32 CH Sequencer Modbus SP (60-190 °F). To drive the firing rate instead, write AV 34 CH Modbus Rate (0-200 gives 0-100 %).
Heartbeat & communication loss
AV 36 Modbus command timeout (30-120 s, default 30). BV 29, BV 30, AV 31, AV 32 and AV 34 must be rewritten within that time; otherwise the demand drops to 0, setpoints return to the local setpoint and the firing rate returns to local control.
Sensors & values from the BMS
AV 33 Outdoor Temperature (-40 to 302 °F) can be written by the BMS. If it is not rewritten within the Modbus command timeout the value is flagged bad and outdoor reset falls back to the local setpoint.
Network setup
- BACnet IP and MS/TP multiple node: each boiler is its own device, instance = Node_Offset (default 50,000) + boiler Modbus address, so address 1 = 50001.
- BACnet MS/TP single node (for front ends without virtual-node support): one device at Node_Offset + MAC, with boiler objects renumbered 1001, 1002... for address 1, 2001... for address 2.
- S-bank DIP switches pick the protocol (S0-S2 all Off = BACnet IP, S0 On = MS/TP multiple node, S2 On = MS/TP single node); S3 On at power-up runs auto-discovery (about 3 minutes), then set S3 Off to keep the configuration.
- MS/TP MAC address 1-127 on A-bank DIP switches (one MAC for the whole gateway); baud rate on B-bank switches.
- Change the IP address and Node_Offset in the ProtoNode web configurator (default IP 192.168.1.24).
- Concert display: Menu > EMS Interface > Modbus Setup > EMS Modbus Parameter, set a unique Comm HMI Station ID for each boiler wired to the gateway.
Watch out for
- AV 34 CH Modbus Rate is scaled 0-200 for 0-100 % firing rate.
- Write the counters (AV 24-28) and AV 36 only when a change is needed.
- AI 19 is the commanded fan speed and AI 35 the measured fan speed.
- Pump status codes 92-127 are listed in the manual's table 1.
Thermal Solutions Apex / Arctic with Concert or Panasonic 4716 software (Universal Gateway) BACnet objects
Type: AI, AO, AV, BI, BO, BV, MI/MO/MV (multi-state) · Access: Read read-only, Write writable, Command writable with a priority array.
| Description | States | |||||
|---|---|---|---|---|---|---|
| BV | 1 | Burner On Off | Burner enable state | Read | 0=Off, 1=On | |
| AI | 2 | Demand Source | Source of the current heat demand | Read | 0=Unknown, 1=No source demand, 2=Central heat, 3=Domestic hot water, 4=Lead Lag slave, 5=Lead Lag master, 6=CH frost protection, 7=DHW frost protection, 8=No demand (burner switch off), 9=DHW storage, 11=Warm weather shutdown | |
| AV | 3 | CH Setpoint | Central heat setpoint set at the boiler (read only) | °F | Read | |
| AV | 4 | DHW Setpoint | DHW setpoint set at the boiler (read only) | °F | Read | |
| AV | 5 | Lead Lag Setpoint | Lead lag setpoint set at the boiler (read only) | °F | Read | |
| AV | 6 | CH TOD Setpoint | CH time-of-day setpoint set at the boiler (read only) | °F | Read | |
| AI | 7 | CH Setpoint Source | What sets the active CH setpoint | Read | 0=Unknown, 1=Normal setpoint, 2=TOD setpoint, 3=Outdoor reset, 4=Remote control (4-20 mA), 7=Outdoor reset time of day | |
| AImin | 8 | Active CH Setpoint | CH setpoint in use | °F | Read | |
| AI | 9 | DHW Setpoint Source | What sets the active DHW setpoint | Read | 0=Unknown, 1=Normal setpoint, 2=TOD setpoint, 5=DHW tap setpoint, 6=DHW preheat setpoint | |
| AI | 10 | Active DHW Setpoint | DHW setpoint in use | °F | Read | |
| AI | 11 | LL Master Setpoint Source | What sets the lead lag master setpoint | Read | 0=Unknown, 1=CH setpoint, 2=CH TOD setpoint, 3=Outdoor reset, 4=Remote control (4-20 mA), 5=DHW setpoint, 6=DHW TOD setpoint, 7=Outdoor reset time of day, 8=Mix setpoint | |
| AI | 12 | Active LL Setpoint | Lead lag setpoint in use | °F | Read | |
| AImin | 13 | Supply Sensor | Supply water temperature (-40 to 266) | °F | Read | |
| AI | 14 | Return Sensor | Return water temperature (-40 to 266) | °F | Read | |
| AI | 15 | Header Sensor | Header temperature (-40 to 266) | °F | Read | |
| AI | 16 | Stack Sensor | Flue stack temperature (-40 to 266) | °F | Read | |
| AI | 17 | Outdoor Sensor | Outdoor air temperature (-40 to 266) | °F | Read | |
| AI | 18 | 4-20 mA Rem Control Input | 4-20 mA remote setpoint/modulation input | mA | Read | |
| AI | 19 | Fan Speed | Combustion blower commanded speed | rpm | Read | |
| AI | 20 | Flame Signal | Flame signal (0.00-50.00) | V or µA | Read | |
| AImin | 21 | Burner Control State | Burner sequence state | Read | 0=Initiate, 1=Standby Delay, 2=Standby, 3=Safe Startup, 4=Prepurge - Drive to Purge Rate, 5=Prepurge - Measured Purge Time, 6=Prepurge - Drive to Lightoff Rate, 7=Preignition Test, 8=Preignition Time, 9=Pilot Flame Establishing Period, 10=Main Flame Establishing Period, 11=Direct Burner Ignition, 12=Run, 13=Postpurge, 14=Lockout | |
| AImin | 22 | Lockout Code | Reason for burner lockout | Read | 0=No lockout, 4=Supply high limit, 5=DHW high limit, 6=Stack high limit, 12=Flame detected out of sequence, 18=Lightoff rate proving failed, 19=Purge rate proving failed, 20=Invalid safety parameters, 21=Invalid modulation parameter, 22=Safety data verification needed, 23=24VAC voltage low/high, 24=Fuel valve error, 25=Hardware fault, 26=Internal fault, 27=Ignition failure | |
| AI | 23 | Hold Code | Reason for burner hold | Read | 0=None, 1=Anti short cycle, 2=Boiler safety limit open, 3=Boiler safety limit open (ILK off), 7=Return sensor fault, 8=Supply sensor fault, 9=DHW sensor fault, 10=Stack sensor fault, 11=Ignition failure, 13=Flame rod shorted to ground, 14=Delta T inlet/outlet high, 15=Return temp higher than supply, 16=Supply temp has risen too quickly, 17=Fan speed not proved, 23=24VAC voltage low/high, 25=Hardware fault, 27=Ignition failure | |
| AV | 24 | Burner Cycle Count | Burner cycle counter (0-999,999) | Write | ||
| AV | 25 | Burner Run Time | Burner run time counter | h | Write | |
| AV | 26 | System Pum Cycle Count | System pump cycle counter | Write | ||
| AV | 27 | DHW Pump Cycle Count | DHW pump cycle counter | Write | ||
| AV | 28 | Boiler Pump Cycle Count | Boiler pump cycle counter | Write | ||
| BVmin | 29 | CH Modbus Stat | CH demand from the BMS; resend within timeout | Write | 0=No demand, 1=Demand | |
| BVmin | 30 | LLCH Modbus Stat | Lead lag CH demand from the BMS; resend within timeout | Write | 0=No demand, 1=Demand | |
| AVmin | 31 | CH Modbus SP | Boiler setpoint from the BMS (60 to 190) | °F | Write | |
| AVmin | 32 | CH Sequencer Modbus SP | Lead lag sequencer setpoint from the BMS (60 to 190) | °F | Write | |
| AV | 33 | Outdoor Temperature | Outdoor temperature from the BMS (-40 to 302) | °F | Write | |
| AVmin | 34 | CH Modbus Rate | Firing rate from the BMS; 0-200 = 0-100 % | Write | ||
| AI | 35 | Fan Speed Measured | Combustion blower measured speed | rpm | Read | |
| AV | 36 | Modbus command timeout | BMS write timeout (30 to 120, default 30) | s | Write | |
| AI | 37 | CH pump status | CH pump status code | Read | 92-127 = pump status codes (forced on/off reasons, demand, service, frost protection, exercise); see manual table 1 | |
| AI | 38 | DHW pump status | DHW pump status code | Read | 92-127 = pump status codes (forced on/off reasons, demand, service, frost protection, exercise); see manual table 1 | |
| AI | 39 | Boiler pump status | Boiler pump status code | Read | 92-127 = pump status codes (forced on/off reasons, demand, service, frost protection, exercise); see manual table 1 | |
| AI | 40 | Low Temp SP | Low temperature loop setpoint (79 to 191) | °F | Read | |
| AI | 41 | Low TempSP source | What sets the low temperature setpoint | Read | 0=Unknown, 1=Normal setpoint, 2=TOD setpoint, 3=Outdoor reset, 4=Remote control, 7=Outdoor reset time of day, 9=Outdoor boost | |
| AI | 42 | Active Low Temp SP | Low temperature setpoint in use | °F | Read | |
| BI | 43 | CH heat demand | CH heat demand present | Read | 0=Off, 1=On | |
| BI | 44 | DHW heat demand | DHW heat demand present | Read | 0=Off, 1=On | |
| BI | 45 | Low Temp Loop demand | Low temperature loop heat demand | Read | 0=Off, 1=On |
No points match these filters.
Integration notes
- The Universal Gateway is a ProtoNode (BACnet RER FPC-N34-0816, LonWorks LER FPC-N35-0817) that auto-discovers up to 8 boilers on its Modbus RS-485 port.
- Every boiler is its own BACnet device with the same object list; the instances here are for one boiler.
- Power all boilers and connect them before running auto-discovery; a boiler added later is not found until discovery is run again.
- On this list the local setpoints (AV 3-6) and Burner On Off (BV 1) are read only; BMS control goes through BV 29-30 and AV 31-34.
- The manual lists BI 43 CH heat demand as W; it is a binary input and the matching Modbus register is read only, so it is recorded here as read only.
- Apex and Arctic boilers with Concert can run their own lead lag sequencer and talk to the EMS at the same time.
Check it against the live device. A points list tells you what the controller can expose; the unit in front of you may differ by firmware or installed options. Easy BACnet scans a network for BACnet IP devices from an Android phone, reads every object on the Apex / Arctic with Concert or Panasonic 4716 software (Universal Gateway) and exports what it actually has to Excel — free. New to BACnet? Start with what a BACnet points list is and what the object types mean.
Questions about the Thermal Solutions Apex / Arctic with Concert or Panasonic 4716 software (Universal Gateway)
How many BACnet points does the Thermal Solutions Apex / Arctic with Concert or Panasonic 4716 software (Universal Gateway) have?
This list has 45 BACnet objects: 25 analog inputs, 14 analog values, 3 binary inputs, 3 binary values. The exact set on a given unit depends on its firmware, installed options and configuration.
Which Thermal Solutions Apex / Arctic with Concert or Panasonic 4716 software (Universal Gateway) BACnet points are writable?
12 of the 45 objects accept a write. Points marked Command have a priority array: a write holds until it is released, so release it back to automatic when you are done.
Where is the official Thermal Solutions Apex / Arctic with Concert or Panasonic 4716 software (Universal Gateway) BACnet documentation?
The source is Thermal Solutions Universal Gateway Instruction Manual (106417-01 Rev. 13), revision 2017-08-21, published free by Thermal Solutions at https://boilers-water-heaters.thermalsolutions.com/Asset/106417-01%20Rev%2013%20TS%20Universal%20Gateway%20Instructions.pdf.
What are the minimum BACnet points to integrate the Thermal Solutions Apex / Arctic with Concert or Panasonic 4716 software (Universal Gateway)?
Start with BV 29 CH Modbus Stat (CH demand from the BMS (1 = demand)); BV 30 LLCH Modbus Stat (Lead lag CH demand from the BMS (1 = demand)); AV 31 CH Modbus SP (Boiler setpoint, 60-190 °F); AV 32 CH Sequencer Modbus SP (Lead lag sequencer setpoint, 60-190 °F); AV 34 CH Modbus Rate (Firing rate command; 0-200 = 0-100 %); AI 21 Burner Control State (Burner sequence state; 12 = Run, 14 = Lockout); AI 13 Supply Sensor (Supply water temperature, °F); AI 8 Active CH Setpoint (CH setpoint in use, °F); AI 22 Lockout Code (Lockout reason; 0 = no lockout).
How do I enable BMS control of the Thermal Solutions Apex / Arctic with Concert or Panasonic 4716 software (Universal Gateway)?
Write BV 29 CH Modbus Stat (single boiler) or BV 30 LLCH Modbus Stat (lead lag) = 1 for demand, with AV 31 CH Modbus SP or AV 32 CH Sequencer Modbus SP (60-190 °F). To drive the firing rate instead, write AV 34 CH Modbus Rate (0-200 gives 0-100 %).
Does the Thermal Solutions Apex / Arctic with Concert or Panasonic 4716 software (Universal Gateway) need a BACnet heartbeat or have a communication timeout?
AV 36 Modbus command timeout (30-120 s, default 30). BV 29, BV 30, AV 31, AV 32 and AV 34 must be rewritten within that time; otherwise the demand drops to 0, setpoints return to the local setpoint and the firing rate returns to local control.
Can the BMS supply sensor values to the Thermal Solutions Apex / Arctic with Concert or Panasonic 4716 software (Universal Gateway)?
AV 33 Outdoor Temperature (-40 to 302 °F) can be written by the BMS. If it is not rewritten within the Modbus command timeout the value is flagged bad and outdoor reset falls back to the local setpoint.
How do I check these points on the real Apex / Arctic with Concert or Panasonic 4716 software (Universal Gateway)?
Scan the network with a BACnet IP browser such as Easy BACnet, open the device and compare its object list with this table. Anything missing is usually an option that isn't installed or a point that is disabled in the controller's configuration.
More Thermal Solutions BACnet points lists
- Boiler controller via ProtoNode gateway
Thermal Solutions Apex with Panasonic display, 4109 software (Universal Gateway)
Thermal Solutions Apex boilers with the control and Panasonic GT02 display running 4109 software, connected through the Universal Gateway.
Also known as: Apex, Apex 4109, Panasonic GT02, Universal Gateway, 106417-01, ProtoNode RER, FPC-N34-0816 - Boiler flame safeguard (RM7800) via ProtoNode gateway
Thermal Solutions EVA / EVO boiler - RM7800 flame safeguard (ProtoNode)
Thermal Solutions EVA, EVAW, EVO and EVOW boilers with an RM7800 series burner control, connected through a ProtoNode FPC-N34.
Also known as: RM7800, Honeywell RM7800, 7800 Series, EVA, EVAW, EVO, EVOW, FPC-N34-0643, ProtoNode FPC-N34 - Boiler operating controller (RWF40) via ProtoNode gateway
Thermal Solutions EVA / EVO boiler - RWF40 controller (ProtoNode)
Thermal Solutions EVA, EVAW, EVO and EVOW boilers whose operating control is an RWF40, connected through a ProtoNode FPC-N34.
Also known as: RWF40, Siemens RWF40, EVA, EVAW, EVO, EVOW, FPC-N34-0643, ProtoNode FPC-N34 - Boiler operating controller (RWF55) via ProtoNode gateway
Thermal Solutions EVA / EVO boiler - RWF55 controller (ProtoNode)
Thermal Solutions EVA, EVAW, EVO and EVOW boilers whose operating control is an RWF55, connected through a ProtoNode FPC-N34.
Also known as: RWF55, Siemens RWF55, EVA, EVAW, EVO, EVOW, FPC-N34-0643, ProtoNode FPC-N34 - Boiler controller (TSBC) via ProtoNode gateway
Thermal Solutions TSBC boiler control (Universal Gateway)
Thermal Solutions boilers with the TSBC control (such as EVS and EVCA), connected through the Thermal Solutions Universal Gateway.
Also known as: TSBC, Thermal Solutions Boiler Control, Universal Gateway, 106417-01, ProtoNode RER, FPC-N34-0816, EVS, EVCA
Source: Thermal Solutions Universal Gateway Instruction Manual · 106417-01 Rev. 13 · rev. 2017-08-21. Object names, instances and units are reproduced as published; descriptions are our own.