Chauvin Arnoux ENERIUM 100/200/300 V2 Modbus register map

Device identity

What a tool can read to check that this map fits the connected device (SPEC.md section 4.7). Registers with a role are read like any other register.

Sources and notes

• MS0-7423 Ed05, Interface Modbus ENERIUM 100/200/300 V2 (French)
  Annex 3, Modbus addressing; annex 1, standard types

Source: Chauvin Arnoux Energy, Definition de l'interface Modbus des centrales de mesure ENERIUM 100/200/300 V2, MS0-7423 Ed05

• All 32-bit values take two registers with the most significant word first (the manual shows the serial number as MSB at 0x0003 and LSB at 0x0004); each register is big-endian. The units below follow the manual's resolution column: voltages 1/100 V, currents 1/10000 A, powers in W, var and VA, frequencies 1/100 Hz.
• Reads use function 3 or 4 (the same data) and are limited to 125 registers. Settings are not written to the 0x68xx configuration area, which is read only: they are changed with command words. Write the command code to 0xD000 and its arguments from 0xD001 with function 16 (for example 0x0200 sets the slave address, 0x0201 the RS-485 speed, 0x0202 the parity, 0x0203 the stop bits).
• Not mapped: minima and maxima with their dates (0x0AE4 to 0x0CFE and 0x0B34 to 0x0CBE), the 51-point harmonic spectra (0x0600 to 0x07F8), the averaged harmonics (0x1102 and up), the alarm FIFO (0x0F00), alarm, HMI, digital and analogue I/O configuration (0x6842 to 0x6CBC), recording and load curves (0x6DAE and up), power quality (ENERIUM 300 only) and the MAC address (0x001E to 0x0023).
• Power factor and cos phi are followed by a quadrant register (0 inductive, 1 capacitive). Average powers are split into consumed (receiver) and generated values; the manual's generated side has no sign convention beyond the name.
• Serial settings: 9600 bit/s, no parity and 1 stop bit are the defaults (formats F10 to F12); the optical front port is fixed at 38400 bit/s, 8 data bits, no parity, 1 stop bit and accepts any slave address. Modbus TCP listens on port 502. ASCII mode is selectable but this map is for RTU/TCP.
• The command words that are not valid on a given product version answer with exception 3.
• The alarm status word is 32 bits wide (0x0200 and 0x0201): the high register holds the global alarm state in bits 0 to 7 and the global alarm memory in bits 8 to 15; the low register holds the 16 elementary alarms.