Crestron CP4, CP4N Product Manual

CP4 and CP4N

4-Series™ ControlSystems

Product Manual

Crestron Electronics, Inc.

Original Instructions
The U.S.English version of this document is the original instructions.
All other languages are a translation of the original instructions.

Regulatory Model: M201903003
Crestron product development software is licensed to Crestron dealers and Crestron Service Providers (CSPs) under a

limited nonexclusive, nontransferable Software Development Tools License Agreement. Crestron product operating
system software is licensed to Crestron dealers, CSPs, and end-users under a separate End-User License Agreement.
Both of these Agreements can be found on the Crestron website at www.crestron.com/legal/software_license_

agreement.

The product warranty can be found at www.crestron.com/warranty.
The specific patents that cover Crestron products are listed at www.crestron.com/legal/patents.
Certain Crestron products contain open source software. For specific information, visit www.crestron.com/opensource.
Crestron, the Crestron logo, .AV Framework, 3-Series, 4-Series, Cresnet, Crestron Fusion, Crestron Toolbox, infiNETEX,

VTPro-e,and XiOCloudare eithertrademarks orregistered trademarksof CrestronElectronics, Inc.in theUnited States
and/or other countries. Apple, HomeKit, iPad, and iPhone are either trademarks or registered trademarks of Apple, Inc. in
the United States and/or other countries. Android is either a trademark or a registered trademark of Google Inc. in the
United States and/or other countries. Active Directory, Azure, and Microsoft are either trademarks or registered
trademarks of Microsoft Corporation in the United States and/or other countries. UL is either a trademark or a
registered trademark of Underwriters Laboratories, Inc. in the United States and/or other countries. Wi-Fi is either a
trademark or a registered trademark of Wi-Fi Alliance in the United States and/or other countries. Other trademarks,
registered trademarks, and trade names may be used in this document to refer to either the entities claiming the marks
and names or their products. Crestron disclaims any proprietary interest in the marks and names of others. Crestron is
not responsible for errors in typography or photography.

©2022 Crestron Electronics, Inc.

Contents

Overview 1

Features 2

CP4 Features 3
CP4NFeatures 6

Physical Description 10

Specifications 12

CP4 Specifications 13

Product Specifications 13
Dimension Drawings 16

CP4NSpecifications 17

Product Specifications 17
Dimension Drawings 20

Installation 21

Install the Control System 21

Rack Mounting 21

Surface Placement 21
Connect the Control System 22
Connect the Control Subnet (CP4NOnly) 23
Configure the Control System 23

Configuration via IPAddress 23

Configuration via XiOCloud 23
Create an Admin Account 24
Set the Time Zone 25
Pair with Apple HomeKit 25
Configure .AVFrameworkSoftware 25

Configuration 27

Actions Menu 28

Save Changes 28

Revert 28

Reboot 28

Restore 29

Update Firmware 29

DownloadLogs 29

Manage Certificates 30
Status 30

Device 30

Network 31

Program 32

Product Manual — Doc. 9214A Contents • iii

AVFramework 33
Settings 34

System Setup 34

Programs 42

Projects 46

Services 48

Cloud Settings 49

Auto Update 50

AVFramework 52
Security 53

Current User 54

Users 55

Groups 59

802.1x Configuration 62
Connect to XiO Cloud Service 65

Programming 66
Resources 67

Crestron Support and Training 67
Programmer and Developer Resources 67
Product Certificates 67
Related Documentation 67

iv • Contents ProductManual —Doc. 9214A

Overview

The Crestron CP4 and CP4Naresecure,high-performancecontrolprocessorswithapowerful
4-Series™ control engine. The CP4 and CP4Naredesignedtointegrateandautomatetechnology
within any modern networked home, commercial building, orgovernmentfacility.Anisolated
control subnet port provides a GigabitEthernetLANdedicatedtoCrestron®devices
(CP4Nonly).

NOTE:TheCP4andCP4Narefunctionally similar. For simplicity within thisdocumentation,
the term "control system"isusedexceptwhereotherwisenoted.

Product Manual — Doc. 9214A CP4 and CP4N • 1

Features

Refer to the following sections for more information onthefeaturesprovidedbyvariousCP4
and CP4N models.

l

CP4 Features (on page3)

l

CP4NFeatures(onpage6)

2 • CP4 and CP4N Product Manual — Doc. 9214A

CP4 Features

The CP4 is asecure,high-performance controlprocessor withapowerful4-Series™control
engine. The CP4 is designed tointegrateandautomatetechnologywithinanymodern
networked home, commercial building, or government facility.

Key features include:

l

4-Series™ control system with 2GBSDRAMand8GBflash memory

l

Embedded 4-Series multicore CPU processor

l

iPhone®, iPad®, and Android™ device controlappsupport

l

XPanel computer and web based control

l

Modular programming architecture

l

Onboard IR/serial, COM, I/O, relay, Cresnet® network, andhigh-speedgigabitEthernet
control ports

l

High-speed USB 2.0 host port memory cardslot

l

Support for Crestron Fusion® software and XiOCloud®service

l

Native .AVFramework™softwareprogram

l

Enterprise-class network security and authentication

l

SNMP V3 remote IT management support

l

Native BACnet network/IP support

l

Installer setup via software, web browser, orcloud

l

IPv6 ready

l

Integrates with Apple® HomeKit® technology

l

Rack mountable

4-Series Control Engine

4-Series control systems come equipped with anupgradedmulticoreCPU,deliveringasizable
speed and performance increase compared to allCrestron3-Series®controlprocessors.The
improved performance allows 4-Series control systems to handle theincreasingdemandsofan
advanced automated system. Crestron 4-Series delivers a dynamicandsecurecontrolsystem
platform capable of managing a roomfullofdisparatetechnologies.

Product Manual — Doc. 9214A CP4and CP4N• 3

Reliable networking and IP control afford seamless integration withothersystemsanddevices,
with add-on control capability using Crestron touchscreens,wirelessremotes,andmobiledevice
apps, as well asremotemanagementthroughCrestronFusion®softwareandtheXiOCloud®
service.

Modular Programming Architecture

The CP4 provides a modularprogrammingarchitecturethatallowstheCP4torunuptoten
programs simultaneously. Programmers can develop and run independent, device-specific
programs, enabling each program to beoptimizedforaspecificfunctionandallowingfor
changes to be made tooneprogramwithoutaffectingthewholesystem.

Onboard Control Ports

Through a full complement of onboard controlports,theCP4canbeintegratedwithawide
variety of audio, video, lighting, motorized shades,thermostats, doorlocks,sensors,security
systems, and other equipment.

l

Gigabit Ethernet provides an interface for connecting to thebuildingnetworkand
controlling Crestron AV switchers, audio processors, power controllers, and other IP
controllable equipment.

l

Cresnet® network connectivity provides support for Crestron lighting dimmers, motorized
shades, sensors, thermostats, keypads, and more.

l

Onboard RS-232, IR/serial, relay, and Versiport I/Ocontrolportsenabledirectintegration
with all types ofthird-partyequipment.

Expanded connectivity can be provided totheCP4viaCrestroncontrolportexpansionmodules,

Ethernet to Cresnet bridges, wired Ethernet I/O modules, wirelessnetworkI/Omodules,or
infiNET EX® network wireless gateways (allsoldseparately).

Crestron Fusion Room Monitoring and Scheduling

Crestron Fusion provides an integrated platform for creating smartbuildingsthatsaveenergy
and enhance worker productivity. As partofacompletemanagednetworkinacorporate
enterprise, college campus, convention center, or any other facility,theCP4workswithCrestron
Fusion to enable remote scheduling, monitoring, and control ofroomsandtechnologyfroma
central help desk or mobileapp.Italsoenablesorganizationstoreduceenergyconsumptionby
tracking real-time usage and automating control ofAV,lighting,shades,andHVAC.Formore
information about Crestron Fusion, visit www.crestron.com/fusion.

XiOCloudProvisioning andManagement

4-Series control systems leverage the power and flexibilityofXiOCloudservices,enablingusers
to remotely provision, monitor, and manage Crestron devicesacrossanenterprisenetwork.XiO
Cloud can be usedtoconfigureandloadprogramstothecontrolsystembeforeitisreceived,
making the control system fully functional assoonasitisconnectedtothenetwork.XiOCloudis
built on the Microsoft® Azure® software platformandutilizesMicrosoft'sindustryleadingAzure
IoT Hub technology. XiO Cloud enables installers andITmanagerstodeployandmanage
thousands of devices in the timeitpreviouslytooktomanagejustone.Unlikeothervirtual
machine based cloud solutions, Azure services provide unlimited scalabilitytosuittheever
growing needs of an enterprise. For moreinformation, visitwww.crestron.com/xiocloud.

4 • CP4 and CP4N ProductManual —Doc. 9214A

.AVFrameworkSoftware

The CP4 provides native support forthe.AVFramework™softwareprogram..AVFramework
software is a web-based management solution that isusedtodeployscalableCrestron®
enterprise room solutions without requiring any programming. For more information onthe
capabilities supported by .AV Framework, visitwww.crestron.com/avframework.

Enhanced Enterprise-Grade Security

The CP4 is anenterprise-class control processor thatcanbedeployedacrosshundredsofspaces
and set up easilyusingawebbrowser,CrestronToolbox™software,orXiOCloud.Itemploys
standard network security protocols, including 802.1X network access control, Active Directory®
service authentication, SSH, TLS, and HTTPStoensurereliabilityandcompliancewithyour
organization’s IT policies.

The CP4 is configured tomeetCrestron'senhancedsecuritystandardsrightoutofthebox.The
CP4 ships with authentication enabled and requiresthatanadministratoraccountbecreated
before access is granted to deviceconfiguration andcontrolinterfaces.

SNMPV3Support

Built-in SNMP V3 support enables integration withthird-partyITmanagementsoftware,
allowing network administrators to manage and control Crestron systems onthenetworkinan
IT-friendly format.

BACNet Support

Native support for the BACnet communication protocol provides adirectinterfacetothird-party
building management systems over Ethernet, simplifying integration with HVAC, security, and
other systems. Using BACnet, each system runs independently but communicates together on
one platform.

1

AppleHomeKit Integration

The CP4 supports integration with anApple®HomeKit®technologysystem.OncetheCP4is
paired with a HomeKit systemviaSIMPLprogramming,aCrestronTSR-310canbeusedto
control supported Apple devices. ApairingQRcodeisaffixed to the CP4thatmakesiteasyto
pair the control system directlytotheAppleHomeapp.

Notes:

1. ABACnet and IP license is required. A free license is available to support up to 50 BACnet objects on a single
4-Series control system. Enabling support for more than 50 BACnet objects requires the purchase of one

SW-3SERIES-BACNET-50+ license. The CP4 supports a maximum of 1000 BACnet objects when dedicated for

BACnet use only. Actual capabilities are contingent upon the overall program size and complexity. To obtain the
license, visit www.crestron.com/bacnetlicense.

2. Thisfeature is only available when using the TSR-310. Other Crestron touch screens, handheld remotes, and
keypads are not supported. For these interfaces, traditional IR or CEC control must be used to control supported
Apple devices.

2

Product Manual — Doc. 9214A CP4and CP4N• 5

CP4NFeatures

The CP4N is asecure,high-performance control processor withapowerful4-Series™control
engine. The CP4N is designed to integrate andautomatetechnologywithinanymodern
networked home, commercial building, or government facility. An isolatedcontrolsubnetport
provides a Gigabit Ethernet LANdedicatedtoCrestrondevices.

Key features include:

l

4-Series™ control system with 2GBSDRAMand8GBflash memory

l

Embedded 4-Series multicore CPU processor

l

iPhone®, iPad®, and Android™ device controlappsupport

l

XPanel computer and web based control

l

Modular programming architecture

l

Onboard IR/serial, COM, I/O, relay, Cresnet® network, andhigh-speedgigabitEthernet
control ports

l

Control subnet port providing a dedicatedlocalnetworkforCrestron®devices

l

High-speed USB 2.0 host port memory cardslot

l

Support for Crestron Fusion® software and XiOCloud®service

l

Native .AVFramework™softwareprogram

l

Enterprise-class network security and authentication

l

SNMP V3 remote IT management support

l

Native BACnet network/IP support

l

Installer setup via software, web browser, orcloud

l

IPv6 ready

l

Integrates with Apple® HomeKit® technology

l

Rack mountable

6 • CP4 and CP4N ProductManual —Doc. 9214A

4-Series Control Engine

4-Series control systems come equipped with anupgradedmulticoreCPU,deliveringasizable
speed and performance increase compared to allCrestron3-Series®controlprocessors.The
improved performance allows 4-Series control systems to handle theincreasingdemandsofan
advanced automated system. Crestron 4-Series delivers a dynamicandsecurecontrolsystem
platform capable of managing a roomfullofdisparatetechnologies.

Reliable networking and IP control afford seamless integration withothersystemsanddevices,
with add-on control capability using Crestron touchscreens,wirelessremotes,andmobiledevice
apps, as well asremotemanagementthroughCrestronFusion®softwareandtheXiOCloud®
service.

Modular Programming Architecture

The CP4N provides a modularprogrammingarchitecturethatallowstheCP4Ntorunuptoten
programs simultaneously. Programmers can develop and run independent, device-specific
programs, enabling each program to beoptimizedforaspecificfunctionandallowingfor
changes to be made tooneprogramwithoutaffectingthewholesystem.

Dedicated Control Subnet

The Crestron Control Subnet is aGigabitEthernetnetworkdedicatedtoCrestrondevices.Via
the Control Subnet port, aninstallercanconnectasingletouchscreenorwirelessgatewayor
can add aCrestronPoEswitch(CEN-SW-POE-5orCEN-SWPOE-16,bothsoldseparately)to
handle multiple touch screens, gateways, AV components, and otherdevices.Auto-configuration
of the entire subnet isperformedbytheCP4N,discoveringeachdeviceandassigningIP
addresses without any extra effort from theinstaller.

A separate LAN port provides asingle-pointconnectiontothelocalnetwork,requiringonlyone
IP address for the entire controlsystem.TheLANportallowsforinterconnectivitybetween
devices on the local subnet andotherdevices,systems,servers,andWAN/internetconnections
outside the local subnet. For sensitive applications thatrequireheightenedsecurity,theentire
Control Subnet can be isolated completely fromthelocalnetwork.

Onboard Control Ports

Through a full complement of onboard controlports,theCP4Ncanbeintegratedwithawide
variety of audio, video, lighting, motorized shades,thermostats, doorlocks,sensors,security
systems, and other equipment.

l

Gigabit Ethernet provides an interface for connecting to thebuildingnetworkand
controlling Crestron AV switchers, audio processors, power controllers, and other IP
controllable equipment.

l

Cresnet® network connectivity provides support for Crestron lighting dimmers, motorized
shades, sensors, thermostats, keypads, and more.

l

Onboard RS-232, IR/serial, relay, and Versiport I/Ocontrolportsenabledirectintegration
with all types ofthird-partyequipment.

Product Manual — Doc. 9214A CP4 and CP4N • 7

Expanded connectivity can be provided totheCP4NviaCrestroncontrolportexpansion

modules, Ethernet to Cresnet bridges, wired Ethernet I/O modules,wirelessnetworkI/O
modules, or infiNET EX® network wirelessgateways(allsoldseparately).

Crestron Fusion Room Monitoring and Scheduling

Crestron Fusion provides an integrated platform for creating smartbuildingsthatsaveenergy
and enhance worker productivity. As partofacompletemanagednetworkinacorporate
enterprise, college campus, convention center, or any other facility,theCP4Nworkswith
Crestron Fusion to enable remote scheduling, monitoring, and control ofroomsandtechnology
from a central help deskormobileapp.Italsoenablesorganizationstoreduceenergy
consumption by tracking real-time usage and automating control ofAV,lighting,shades,and
HVAC. For more information about Crestron Fusion, visitwww.crestron.com/fusion.

XiOCloudProvisioning andManagement

4-Series control systems leverage the power and flexibilityofXiOCloudservices,enablingusers
to remotely provision, monitor, and manage Crestron devicesacrossanenterprisenetwork.XiO
Cloud can be usedtoconfigureandloadprogramstothecontrolsystembeforeitisreceived,
making the control system fully functional assoonasitisconnectedtothenetwork.XiOCloudis
built on the Microsoft® Azure® software platformandutilizesMicrosoft'sindustryleadingAzure
IoT Hub technology. XiO Cloud enables installers andITmanagerstodeployandmanage
thousands of devices in the timeitpreviouslytooktomanagejustone.Unlikeothervirtual
machine based cloud solutions, Azure services provide unlimited scalabilitytosuittheever
growing needs of an enterprise. For moreinformation, visitwww.crestron.com/xiocloud.

.AVFrameworkSoftware

The CP4N provides native support forthe.AVFramework™softwareprogram..AVFramework
software is a web-based management solution that isusedtodeployscalableCrestron®
enterprise room solutions without requiring any programming. For more information onthe
capabilities supported by .AV Framework, visitwww.crestron.com/avframework.

Enhanced Enterprise-Grade Security

The CP4N is anenterprise-class control processor thatcanbedeployedacrosshundredsof
spaces and set up easilyusingawebbrowser,CrestronToolbox™software,orXiOCloud.It
employs standard network security protocols, including 802.1X network access control, Active
Directory® service authentication, SSH, TLS, and HTTPStoensurereliabilityandcompliancewith
your organization’s IT policies.

The CP4N is configured to meetCrestron'senhanced securitystandardsrightoutofthebox.The
CP4N ships with authentication enabled and requires thatanadministratoraccountbecreated
before access is granted to deviceconfiguration andcontrolinterfaces.

SNMPV3Support

Built-in SNMP V3 support enables integration withthird-partyITmanagementsoftware,
allowing network administrators to manage and control Crestron systems onthenetworkinan
IT-friendly format.

8 • CP4 and CP4N ProductManual— Doc.9214A

BACNet Support

Native support for the BACnet communication protocol provides adirectinterfacetothird-party
building management systems over Ethernet, simplifying integration with HVAC, security, and
other systems. Using BACnet, each system runs independently but communicates together on
one platform.

1

AppleHomeKit Integration

The CP4N supports integration with anApple®HomeKit®technologysystem.OncetheCP4Nis
paired with a HomeKit systemviaSIMPLprogramming,aCrestronTSR-310canbeusedto
control supported Apple devices. ApairingQRcodeisaffixed to the CP4Nthatmakesiteasyto
pair the control system directlytotheAppleHomeapp.

Notes:

1. ABACnet and IP license is required. A free license is available to support up to 50 BACnet objects on a single
4-Series control system. Enabling support for more than 50 BACnet objects requires the purchase of one

SW-3SERIES-BACNET-50+ license. The CP4N supports a maximum of 1000 BACnet objects when dedicated for

BACnet use only. Actual capabilities are contingent upon the overall program size and complexity. To obtain the
license, visit www.crestron.com/bacnetlicense.

2. Thisfeature is only available when using the TSR-310. Other Crestron touch screens, handheld remotes, and
keypads are not supported. For these interfaces, traditional IR or CEC control must be used to control supported
Apple devices.

2

Product Manual — Doc. 9214A CP4and CP4N• 9

Physical Description

The CP4 and CP4Nprovidethefollowingconnectorsandindicators.

CP4 andCP4NFront Panel

CP4 andCP4NRear Panel

Connectors and Card Slots

RELAYOUTPUT
1–8

I/O1–8 (1) 9-pin3.5 mm detachable terminalblock;

IR-SERIAL
OUTPUT1–8

(2) 8-pin3.5 mm detachable terminalblocks;
Comprises (8)normally open, isolated relays;
Rated 1A, 30 VAC/VDC;
MOV arcsuppression across contacts

Comprises (8)Versiport digital input/output oranalog input ports (referenced
to GND);
Digital Input:Rated for 0–24 VDC,input impedance 20kΩ,logic threshold
>3.125 Vlow/0 and <1.875 Vhigh/1;
Digital Output:250 mA sink frommaximum 24 VDC,catchdiodes for usewith
real worldloads;
Analog Input:Rated for 0–10 VDC,protected to 24VDCmaximum, input
impedance 21kΩ with pull-upresistordisabled;
Programmable 5V, 2k Ωpull-upresistor per pin

(2) 8-pin3.5 mm detachable terminalblocks;
Comprises (8)IR output ports;
IR outputup to 1.2 MHz;
1-way serialTTL/RS-232 (0–5 V) upto 115.2k baud;
IRP2 IRemitters sold separately

10 • CP4 and CP4N ProductManual— Doc.9214A

COM 1 (1) 5-pin3.5 mm detachable terminalblock;

Bidirectional RS-232/422/485port;
Up to115.2k baud; hardwareandsoftware handshaking support

COM 2–3 (2) 3-pin3.5 mm detachable terminalblocks;

Bidirectional RS-232ports;
Up to115.2k baud; software handshakingsupport

MEMORY (1) SDmemory card slot;

Accepts oneSDor SDHCcardupto 32 GBfor storage of logfiles

USB (1) USBType A connector, female;

USB 2.0port for storage devices

LAN (1) 8-pin RJ-45connector, female;

100/1000Base-TX Ethernetport;

CONTROL
SUBNET (CP4NOnly)

NET (1) 4-pin 3.5 mmdetachable terminal block;

24VDC 2.0A (1) 2.1x 5.5 mmDCpowerconnector;

G (1) 6-32screw;

COMPUTER
(front)

(1) 8-pinRJ-45 connector, female;
100/1000Base-TXEthernetport;
Provides adedicated local network forCrestron devices

Cresnet masterport;
Outputs powerto Cresnet devices onlyif the includedpowerpack is connected
to the24 VDC powerinputjack;
Alternately functionsas a Cresnet powerinput to powertheunit from a
Cresnet powersupply

24 VDCpower input;
PW-2420RU powerpack included;
Passes throughto the NETportto power Cresnet devices

Chassis groundlug
(1)USBTypeB connector, female;

USB2.0computer console port;
For setuponly

Controls and Indicators

PWR (1) GreenLED, indicates operating poweris supplied fromthepower pack or

Cresnet powersupply
NET (1) Amber LED, indicatescommunication with Cresnet devices
MSG (1) RedLED, indicates control processorhas generated an errormessage
HW-R (1) Recessedpush button, initiates hardwarereset
SW-R (1) Recessedpush button, initiates softwarereset
LAN (rear) (1) Bicolorgreen/amber and (1) AmberLEDs;

Green/amber LEDindicatesEthernet link statusand connection speed;

Amber LEDindicatesEthernet activity
CONTROL

SUBNET(rear)
(CP4NOnly)

Product Manual — Doc. 9214A CP4 and CP4N • 11

(1) Bicolorgreen/amber and (1) AmberLEDs;

Green/amber LEDindicatesEthernet link statusand connection speed;

Amber LEDindicatesEthernet activity

Specifications

Refer to the following sections for more information onthespecificationsforvariousCP4and
CP4N models.

l

CP4 Specifications (on page13)

l

CP4NSpecifications(onpage17)

12 • CP4 and CP4N Product Manual — Doc. 9214A

CP4 Specifications

Product specifications for the CP4 areprovidedbelow.

Product Specifications

Control Engine

Crestron 4-Series™;real-time, preemptive multi-threaded/multitasking kernel;Transaction-Safe Extended
FAT filesystem; supports up to10 simultaneously runningprograms,native .AVFramework™ software
program

Communications

Ethernet 100/1000 Mbps,auto-switching, auto-negotiating, auto-discovery, full/half

duplex, industry-standardTCP/IP stack, UDP/IP, CIP,DHCP, SSL, TLS,SSH,

SFTP (SSHFile Transfer Protocol), FIPS140-2 compliant encryption,

IEEE802.1xX,SNMP, BACnet and IP1, IPv4or IPv6, Active Directory®service

authentication, HTTPSweb server, HTTPS webbrowser setup andXiOCloud®

client, SMTPemail client
Cresnet® Network Cresnet mastermode
USB Supports USBmass storage class devicesvia the rearpanelUSB 2.0 hostport,

supports computerconsole via the frontpanel USB 2.0deviceport
RS-232/422/485 For 2-waydevice control and monitoring,COM port supportsRS-232up to

115.2k baudwith software handshaking, oneport also supports RS-422or

RS-485 andhardware handshaking
IR/Serial Supports 1-waydevice control via infraredup to 1.2MHzor serial TTL/RS-232

(0–5 V)up to 115.2kbaud

Memory

SDRAM 2 GB
Flash 8 GB
Memory Card Supports SDand SDHC cardsupto 32 GB
External Storage Supports USBstorage devices up to1 TB

Connectors and Card Slots

RELAYOUTPUT
1–8

Product Manual — Doc. 9214A CP4 and CP4N • 13

(2) 8-pin3.5 mm detachable terminalblocks;

Comprises (8)normally open, isolated relays;

Rated 1A, 30 VAC/VDC;

MOV arcsuppression across contacts

I/O1–8 (1) 9-pin3.5 mm detachable terminalblock;

Comprises (8)Versiport digital input/output oranalog input ports (referenced

to GND);

Digital Input:Rated for 0–24 VDC,input impedance 20kΩ,logic threshold

>3.125 Vlow/0 and <1.875 Vhigh/1;

Digital Output:250 mA sink frommaximum 24 VDC,catchdiodes for usewith

real worldloads;

Analog Input:Rated for 0–10 VDC,protected to 24VDCmaximum, input

impedance 21kΩ with pull-upresistordisabled;

Programmable 5V, 2k Ωpull-upresistor per pin
IR-SERIAL

OUTPUT1–8

COM 1 (1) 5-pin3.5 mm detachable terminalblock;

COM 2–3 (2) 3-pin3.5 mm detachable terminalblocks;

MEMORY (1) SDmemory card slot;

USB (1) USBType A connector, female;

LAN (1) 8-pin RJ-45connector, female;

NET (1) 4-pin 3.5 mmdetachable terminal block;

24VDC 2.0A (1) 2.1x 5.5 mmDCpowerconnector;

G (1) 6-32screw;

COMPUTER
(front)

(2) 8-pin3.5 mm detachable terminalblocks;

Comprises (8)IR output ports;

IR outputup to 1.2 MHz;

1-way serialTTL/RS-232 (0–5 V) upto 115.2k baud;

IRP2 IRemitters sold separately

Bidirectional RS-232/422/485port;

Up to115.2k baud; hardwareandsoftware handshaking support

Bidirectional RS-232ports;

Up to115.2k baud; software handshakingsupport

Accepts oneSDor SDHCcardupto 32 GBfor storage of logfiles

USB 2.0port for storage devices

100/1000Base-TX Ethernetport;

Cresnet masterport;

Outputs powerto Cresnet devices onlyif the includedpowerpack is connected

to the24 VDC powerinputjack;

Alternately functionsas a Cresnet powerinput to powertheunit from a

Cresnet powersupply;

See "Power"section below for additionaldetails

24 VDCpower input;

PW-2420RU powerpack included;

Passes throughto the NETportto power Cresnet devices;

See "Power"section below for additionaldetails

Chassis groundlug

(1)USBTypeB connector, female;

USB2.0computer console port;

For setuponly

Controls and Indicators

14 • CP4 and CP4N Product Manual— Doc.9214A

PWR (1) GreenLED, indicates operating poweris supplied fromthepower pack or

Cresnet powersupply
NET (1) Amber LED, indicatescommunication with Cresnet devices
MSG (1) RedLED, indicates control processorhas generated an errormessage
HW-R (1) Recessedpush button, initiates hardwarereset
SW-R (1) Recessedpush button, initiates softwarereset
LAN (rear) (1) Bicolorgreen/amber and (1) AmberLEDs;

Green/amber LEDindicatesEthernet link statusand connection speed;

Amber LEDindicatesEthernet activity

Power

Power SourceOptions Power packor Cresnet (connect onlyone)
Power Pack(included) Input:100–240 VAC, 50/60Hz;

Output: 2.5A @ 24 VDC;

Model: PW-2420RU
Cresnet PowerUsage 15 W(0.625 A @24VDC) when poweredbya Cresnet powersupply only
Available CresnetPower 24 W(1 A @24VDC) when poweredby the included powerpack only
Power Consumption 15 W(not including any connectedCresnet devices)

Environmental

Temperature 41 to113 °F (5to45 °C)
Humidity 10% to90% RH (noncondensing)
Heat Dissipation 50 BTU/hr

Enclosure

Chassis Metal, aluminum,black finish
Faceplate Extruded metal,black finish, polycarbonate labeloverlay
Mounting Freestanding or 1 RU19-in. rack mountable(adhesivefeet and rackears

included)

Dimensions

Height 1.70in. (44 mm) withoutfeet
Width 17.28in. (439 mm);

19.00 in.(483 mm) with rackears

Depth 6.56in. (167 mm)

Weight

3.12 lb(1.42 kg)

Compliance

Regulatory Model:M201903003;
UL® Listedfor US & Canada,CE, IC, FCCPart 15 Class Bdigital device

Product Manual — Doc. 9214A CP4 andCP4N •15

Dimension Drawings

Add dimension drawings.

16 • CP4 and CP4N Product Manual— Doc.9214A

CP4NSpecifications

Product specifications for the CP4N are providedbelow.

Product Specifications

Control Engine

Crestron 4-Series™;real-time, preemptive multi-threaded/multitasking kernel;Transaction-Safe Extended
FAT filesystem; supports up to10 simultaneously runningprograms,native .AVFramework™ software
program

Communications

Ethernet 100/1000 Mbps,auto-switching, auto-negotiating, auto-discovery, full/half

duplex, industry-standardTCP/IP stack, UDP/IP, CIP,DHCP, SSL, TLS,SSH,

SFTP (SSHFile Transfer Protocol), FIPS140-2 compliant encryption,

IEEE802.1xX,SNMP, BACnet and IP1, IPv4or IPv6, Active Directory®service

authentication, HTTPSweb server, HTTPS webbrowser setup andXiOCloud®

client, SMTPemail client
Control Subnet 100/1000 MbpsEthernet, auto-switching, auto-negotiating, auto-discovery,

full/half duplex,DHCP server, DNSserver,port forwarding, isolation mode
Cresnet® Network Cresnet mastermode
USB Supports USBmass storage class devicesvia the rearpanelUSB 2.0 hostport,

supports computerconsole via the frontpanel USB 2.0deviceport
RS-232/422/485 For 2-waydevice control and monitoring,COM port supportsRS-232up to

115.2k baudwith software handshaking, oneport also supports RS-422or

RS-485 andhardware handshaking
IR/Serial Supports 1-waydevice control via infraredup to 1.2MHzor serial TTL/RS-232

(0–5 V)up to 115.2kbaud

Memory

SDRAM 2 GB
Flash 8 GB
Memory Card Supports SDand SDHC cardsupto 32 GB
External Storage Supports USBstorage devices up to1 TB

Connectors and Card Slots

RELAYOUTPUT
1–8

Product Manual — Doc. 9214A CP4 and CP4N • 17

(2) 8-pin3.5 mm detachable terminalblocks;

Comprises (8)normally open, isolated relays;

Rated 1A, 30 VAC/VDC;

MOV arcsuppression across contacts

I/O1–8 (1) 9-pin3.5 mm detachable terminalblock;

Comprises (8)Versiport digital input/output oranalog input ports (referenced

to GND);

Digital Input:Rated for 0–24 VDC,input impedance 20kΩ,logic threshold

>3.125 Vlow/0 and <1.875 Vhigh/1;

Digital Output:250 mA sink frommaximum 24 VDC,catchdiodes for usewith

real worldloads;

Analog Input:Rated for 0–10 VDC,protected to 24VDCmaximum, input

impedance 21kΩ with pull-upresistordisabled;

Programmable 5V, 2k Ωpull-upresistor per pin
IR-SERIAL

OUTPUT1–8

(2) 8-pin3.5 mm detachable terminalblocks;

Comprises (8)IR output ports;

IR outputup to 1.2 MHz;

1-way serialTTL/RS-232 (0–5 V) upto 115.2k baud;

IRP2 IRemitters sold separately
COM 1 (1) 5-pin3.5 mm detachable terminalblock;

Bidirectional RS-232/422/485port;

Up to115.2k baud; hardwareandsoftware handshaking support
COM 2–3 (2) 3-pin3.5 mm detachable terminalblocks;

Bidirectional RS-232ports;

Up to115.2k baud; software handshakingsupport
MEMORY (1) SDmemory card slot;

Accepts oneSDor SDHCcardupto 32 GBfor storage of logfiles
USB (1) USBType A connector, female;

USB 2.0port for storage devices
LAN (1) 8-pin RJ-45connector, female;

100/1000Base-TX Ethernetport;
CONTROL

SUBNET

(1) 8-pinRJ-45 connector, female;

100/1000Base-TXEthernetport;

Provides adedicated local network forCrestron devices
NET (1) 4-pin 3.5 mmdetachable terminal block;

Cresnet masterport;

Outputs powerto Cresnet devices onlyif the includedpowerpack is connected

to the24 VDC powerinputjack;

Alternately functionsas a Cresnet powerinput to powertheunit from a

Cresnet powersupply;

See "Power"section below for additionaldetails
24VDC 2.0A (1) 2.1x 5.5 mmDCpowerconnector;

24 VDCpower input;

PW-2420RU powerpack included;

Passes throughto the NETportto power Cresnet devices;

See "Power"section below for additionaldetails
G (1) 6-32screw;

Chassis groundlug

18 • CP4 and CP4N Product Manual — Doc. 9214A

COMPUTER
(front)

(1)USBTypeB connector, female;

USB2.0computer console port;

For setuponly

Controls and Indicators

PWR (1) GreenLED, indicates operating poweris supplied fromthepower pack or

Cresnet powersupply
NET (1) Amber LED, indicatescommunication with Cresnet devices
MSG (1) RedLED, indicates control processorhas generated an errormessage
HW-R (1) Recessedpush button, initiates hardwarereset
SW-R (1) Recessedpush button, initiates softwarereset
LAN (rear) (1) Bicolorgreen/amber and (1) AmberLEDs;

Green/amber LEDindicatesEthernet link statusand connection speed;

Amber LEDindicatesEthernet activity
CONTROL

SUBNET(rear)

(1) Bicolorgreen/amber and (1) AmberLEDs;

Green/amber LEDindicatesEthernet link statusand connection speed;

Amber LEDindicatesEthernet activity

Power

Power SourceOptions Power packor Cresnet (connect onlyone)
Power Pack(included) Input:100–240 VAC, 50/60Hz;

Output: 2.5A @ 24 VDC;

Model: PW-2420RU
Cresnet PowerUsage 15 W(0.625 A @24VDC) when poweredbya Cresnet powersupply only
Available CresnetPower 24 W(1 A @24VDC) when poweredby the included powerpack only
Power Consumption 15 W(not including any connectedCresnet devices)

Environmental

Temperature 41 to113 °F (5to45 °C)
Humidity 10% to90% RH (noncondensing)
Heat Dissipation 50 BTU/hr

Enclosure

Chassis Metal, aluminum,black finish
Faceplate Extruded metal,black finish, polycarbonate labeloverlay
Mounting Freestanding or 1 RU19-in. rack mountable(adhesivefeet and rackears

included)

Dimensions

Height 1.70in. (44 mm) withoutfeet
Width 17.28in. (439 mm);

19.00 in.(483 mm) with rackears

Depth 6.56in. (167 mm)

Product Manual — Doc. 9214A CP4 andCP4N •19

Weight

3.12 lb(1.42 kg)

Compliance

Regulatory Model:M201903003;
UL® Listedfor US & Canada,CE, IC, FCCPart 15 Class Bdigital device

Dimension Drawings

Add dimension drawings.

20 • CP4 and CP4N Product Manual — Doc. 9214A

Installation

Use the following procedures to install theCP4andCP4Ncontrolsystems.

Install the Control System

The control system may bemountedintoarackorplacedontoaflatsurface.

Rack Mounting

The control systemoccupies1Uofrackspace.

1. Use a #1 Phillips screwdriver to remove the six required screws from the control system
assembly (shown in the illustration below).

2. Attach the two included rack ears with the removed screws.

3. Mount the control system into the rack with four mounting screws (not included).

Surface Placement

1. Attach the four adhesive rubber feet near the corners on the underside of the control
system.

2. Place onto a flat surface or stack with other equipment.

Product Manual — Doc. 9214A CP4 and CP4N • 21

Connect the Control System

Make all necessary connections to the control systemasshownbelow.

Observe the following when connecting the control system:

l

Use Crestron power supplies for Crestron equipment.

l

The control system may bepoweredwiththeincluded24VDCpowersupplyorvia
Cresnet® network power with the NETport.

l

Connect the chassis ground lug to aknownearthgroundcircuit(suchasbuildingsteel)to
ensure that the control system isgroundedproperly.

l

Apply power after allconnections havebeenmade.

COM1Connections

Port RS-232 RS-422

G GND GND GND

1

RS-485

2

TX TX(fromCP4/CP4N) TX- (fromCP4/CP4N) TX-/RX­RX RX(to CP4/CP4N) RX+(toCP4/CP4N) Notused
RTS RTS(fromCP4/CP4N) TX+(fromCP4/CP4N) TX+/RX+
CTS CTS(to CP4/CP4N) RX- (toCP4/CP4N) Not used

1. RS-422transmit and receive are balanced signals that require two lines plus a ground in each direction. RXD+ and
TXD+ should idle high (going low at start of data transmission). RXD- and TXD- should idle low (going high at
start of data transmission). If necessary, RXD+/RXD- and TXD+/TXD- may be swapped to maintain correct
signal levels.

2. Aground terminal connection is recommended but not required.

22 • CP4 and CP4N ProductManual —Doc. 9214A

Connect the Control Subnet
(CP4NOnly)

The CP4N has adedicatedControlSubnetthatisusedforcommunicationbetweenthecontrol
system and Crestron Ethernet devices without interference from other traffic onthenetwork.

CAUTION:DonotconnecttheCONTROLSUBNETporttotheLAN.TheCONTROLSUBNET
port must only beconnected toCrestronEthernetdevices.

For more information on using theControlSubnet,refertothe4-Series™ControlSystem

Reference Guide.

Configure the Control System

The control system may beconfigured usingtheprovidedwebconfigurationinterface.The
interface can be accessed using the controlsystemIPaddressortheXiOCloud®service.

Configuration via IPAddress

To access the web configuration interface using thecontrolsystemIPaddress:

NOTE:ThecontrolsystemshipswithDHCPenabled.ADHCPserver is required to access the
web configuration interface via the control system IPaddress.

1. Connect the control system to the network.

2. Use the Device Discovery tool in Crestron Toolbox™ software to discover the control
system and its IP addressonthenetwork.

3. Enter the control system IPaddress into a web browser.

Configuration via XiOCloud

The XiOCloud®serviceallowssupporteddevicesacrossanenterprise to be managed and
configured from one central and secure location inthecloud.SupportedCrestron®devicesare
configured to connect to the service outofthebox.

Use of the service requires aregisteredXiOCloudaccount.ToregisterforanXiOCloudaccount,
refer to www.crestron.com/Support/Tools/Licensing-Registration/XiO-Cloud-Registration-

Room-Licenses.

NOTE:ThedevicemaybedisconnectedfromtheXiOCloudservice by navigating to the
Cloud Services tab in CrestronToolbox™software(Functions>DeviceInfo > Cloud Services).
For details, refer to theCrestronToolboxhelpfile.

Product Manual — Doc. 9214A CP4and CP4N• 23

To connect the device totheXiOCloudservice:

1. Record the MAC address and serial number that are labeled on the shipping box or the
device. The MAC address and serialnumberarerequiredtoaddthedevicetothe
XiOCloudservice.

NOTE:IfthedevicehasmultipleMACaddresses,usetheMACaddressthatis
providing the primary connection back tothenetwork.Formostdevices,theEthernet
MAC address should be used. However, ifyourdeviceisconnectingtothenetworkover
a different protocol (such as Wi-Fi®communications), use theMACaddressforthat
protocol instead.

2. Log in to your XiOCloud account at portal.crestron.io.

3. Claim the device to the XiOCloud service as described in the XiOCloudUserGuide.

Select the device from thecloudinterfacetoviewitsstatusandsettings.Thedevicemaynow
also be managed and assigned toagrouporroom.Formoreinformation,refertothe

XiOCloudUserGuide.

NOTE:ForXiOCloudaccountswithroom-basedlicenses,thedevicemust be added toa
licensed room before its status andsettings canbeviewed.

Create an Admin Account

The first time the webconfiguration interface isaccessed,apageisdisplayedaskingtheuserto
create an admin account. Asimilarmessageisdisplayedwhenconnectingtothecontrolsystem
in Crestron Toolbox software if anadminaccounthasnotalreadybeencreated.

To create an adminaccount:

1. Enter a username and password for the admin account in the appropriate text fields.

CAUTION:Donotlosetheusernameandpasswordfortheadminaccount,asthe
control system must be reset tofactorysettingstoregainaccess.

2. Click OK to create the admin account. The web configuration interface refreshes to show
the standard login page.

3. Reenter the credentials created in step1andclickSignIn.

NOTE:Theusernameandpasswordmustalsobeenteredwhenconnectingfrom
CrestronToolboxorXPanel.

24 • CP4 and CP4N ProductManual — Doc. 9214A

Set the Time Zone

The time zone must besetonthecontrolsystemtoensurethatthecorrecttimesettingsare
pushed to controlled devices.

To set the timezone:

1. Access the web configuration interface using either the device IPaddress or the XiOCloud
service.

2. Navigate to Settings >System Setup.

3. Select the time zone where the control system is used from the Time Zone drop-down
menu.

4. Click Save Changes on the top right of the screen.

Pair with Apple HomeKit

The control system can be pairedwithApple®HomeKit®technologytoenablecommunication
between the control system and Apple HomeKitdevicesandaccessories.

For pairing instructions and to locatetheuniqueQRcoderequiredforpairing,refertothe CP4
and CP4NProductInformationdocument(Doc.8536)thatshipped with the control system.

Configure .AVFramework Software

The control system provides native support forthe.AVFramework™softwareprogram..AV
Framework software is a web-based management solution thatisusedtodeployscalable
Crestron® enterprise room solutions without requiring any programming. For more information
on the capabilities supported by .AVFramework,visitwww.crestron.com/avframework.

To turn on the.AVFrameworksoftwareprogramforthecontrolsystem:

1. Open the web configuration interface as described in Configure the Control System (on

page23).

2. Navigate to Settings >AVFramework.

3. Turn on the AVFramework toggle.

4. Save the configuration. The control system will reboot with the native .AVFramework
software program turned on.

Product Manual — Doc. 9214A CP4and CP4N • 25

After the control system reboots, click OpenAVFrameworkSetuptolaunchthe.AVFramework
web configuration utility. For more information on configuring .AVFrameworkforthecontrol
system, refer to the .AVFrameworkSoftwarefor4-SeriesControlSystemsOperationsGuide.

26 • CP4 and CP4N ProductManual — Doc. 9214A

Configuration

Prior to configuration, ensure the device isrunningthelatestfirmware.Toupdatethefirmware,
refer to Update Firmware (on page29).

The control system may bemonitoredandconfiguredusingtheincludedwebconfiguration
interface. The configuration interface is accessible from a webbrowserifthecontrolsystemIP
address is known.

The web configuration interface is also accessible through theXiOCloud®service.Formore
information, refer to Connect to XiO CloudService(onpage65).

To access the configuration interface:

1. Use the Device Discovery tool in Crestron Toolbox™ software to discover the control
system and its IP addressonthenetwork.

2. Open a web browser.

3. Enter the control system IP address into the browser URL field. A login page is displayed.

4. Enter the administrator username and password in the appropriate text fields and click
Sign In. The configuration interface is displayed.

NOTE: For more information on creating anadministratoraccount,refertoCreatean

Admin Account (on page24).Formoreinformationonmanaginguseraccountsonthe

control system, refer to Security (onpage53).

Web ConfigurationInterface

The configuration interface provides the following tabs:

l

Status:Usedtomonitorcontrolsystemstatus

l

Settings:Usedtoconfigurecontrolsystemsettings

Product Manual — Doc. 9214A CP4and CP4N• 27

l

Security:Usedtoenableauthenticationandothersecuritysettings

l

802.1x Configuration:UsedtoconfigureIEEE802.1xnetworkauthenticationforcontrol
system security

The Status tab isthedefaulttabthatisdisplayed,asshowninthepreviousimage.

Actions Menu

The configuration interface provides an Actions drop-down menu on thetoprightofthepage.
The Actions menu may beaccessedatanytime.

Actions Menu

Once any changes have been made tothecontrolsystemconfiguration,theActionsbutton
changes to a Save Changes button. ClickSaveChangestosavechangestotheconfiguration
settings.

If a reboot isrequiredafterchangeshavebeensaved,adialogboxisdisplayedaskingwhether
the reboot should be performed. Select YestorebootthedeviceorNotocancelthereboot.

The Actions menu provides the following selections.

Save Changes

Click Save Changes to saveanychangesmadetotheconfigurationsettings.

Revert

Click Revert to revert thecontrolsystembacktothelastsavedconfigurationsettings.

Reboot

Click Reboot to reboot thecontrolsystem.

28 • CP4 and CP4N Product Manual — Doc. 9214A

After Reboot is selected, a dialogboxisdisplayedaskingwhetherthecontrolsystemshouldbe
rebooted. Select Yes to reboot the deviceorNotocancelthereboot.

Restore

Click Restore to restore the control systemconfiguration settings totheirdefaultvalues.
After Restore is selected a dialogboxisdisplayedaskingwhetherthedevicesettingsshouldbe

restored. Select Yes to restore the settings orNotocanceltherestore.

Update Firmware

Click Update Firmware toupgradethecontrolsystemfirmwaremanuallywithadownloaded
PUF (package update file). The FirmwareUpgradedialogboxopens.

Firmware UpgradeDialog Box

To upload a firmwarePUFthroughthewebconfigurationinterface:

NOTE: Visit the appropriate device productpageorwww.crestron.com/Support/Resource-

Library to download the latestfirmwarePUF.

1. Click Browse, and then navigate to the firmware PUF on the host computer.

2. Select the firmware PUF, and then click Open.

3. Click Load to load the PUF to the control system. The upload progress is shown in the
dialog box.

4. Once the control system has completed the firmware upgrade, click OK.

Click the x buttontoclosetheFirmwareUpgradedialogboxatanytimeduringtheupgrade
process. Clicking the x button before thePUFisuploadedtothecontrolsystemcancelsthe
upgrade.

DownloadLogs

Click Download Logs to download thecontrolsystemmessagelogsfordiagnosticpurposes.The
message files download as a compressed .tgz file.Oncethecompressedfileisdownloaded,
extract the message log files to viewthem.

Product Manual — Doc. 9214A CP4and CP4N • 29

Manage Certificates

Click Manage Certificates to manage anycertificates thatareinstalledonthecontrolsystem.
For more information on certificate management, refer to802.1xConfiguration (onpage62).

Status

Click the Status tabonthetopleftoftheconfigurationinterfacetodisplayselectionsfor
viewing the status of device, network, andUSB,and.AVFramework™softwaresettings.

Click on a selection nametoexpandtheselection.Iftheselectionisexpanded,clicktheselection
name again to collapse thesection.

Status TabSelections

Device

Click Device to viewgeneraldeviceinformation.

Status Tab- Device

The following Device information is displayed:

l

Model: The control system model name

l

Serial Number: The control system serialnumber

l

Firmware Version: The firmware version loaded onto thecontrolsystem

Click + More detailsatthebottomoftheDevicetabtodisplayanexpandedsectionthatshows
additional control system information. If + More Detailsisselected,click-Lessdetailstocollapse
the section.

30 • CP4 and CP4N ProductManual —Doc. 9214A

Network

Click Network to viewthestatusofthenetworksettingsforthecontrolsystem.

Status Tab- Network

The following Network information is displayed:

l

Host Name: The control system hostname

l

Domain Name:Thecontrolsystemdomainname

l

NIC 1 DNS Servers: TheDNS(domainnameserver)addressesusedtoresolvethecontrol
system domain to an IPaddress

Click the + (plus)iconnexttoAdapter1todisplaythefollowing Ethernet settings:

l

DHCP: Reports whether the IP address isdynamic(Yes)orstatic(No)

l

IP Address: The control system IPaddress,shownonlyifanEthernetconnectionisenabled

l

Subnet Mask: The control system subnet maskaddress,shownonlyifanEthernet
connection is enabled

l

Default Gateway: The gateway router address, shown onlyifanEthernetconnectionis
enabled

Product Manual — Doc. 9214A CP4 and CP4N • 31

l

Link Active: Reports the status oftheEthernetconnection(Atruemessageindicatesthat
the Ethernet connection is active, while afalsemessageindicatesthattheEthernet
connection is inactive.)

l

MAC Address: The unique MAC (mediaaccesscontrol)addressfortheEthernetadapter

Click the + (plus)iconnexttoControlSubnettodisplaythefollowingControlSubnetsettings
(CP4Nonly):

l

Auto Network Addressing: Reports whether the network address for theControlSubnetis
configured automatically (true)ormanually(false)

l

Network: The Control Subnet network address, shown onlyifaControlSubnetconnection
is enabled

l

Subnet Mask: The Control Subnet maskaddress,shownonlyifanEthernetconnectionis
enabled

l

Link Active: Reports the status oftheControlSubnetconnection(Atruemessage
indicates that the Control Subnet connection is active,whileafalsemessageindicates
that the Control Subnet connection is inactive.)

l

Isolation Mode:ReportsthestatusoftheControlSubnetisolationmode(Atruemessage
indicates that isolation mode is enabled, whileafalsemessageindicatesthatisolation
mode is disabled.)

l

MAC Address: The unique MAC (mediaaccesscontrol)addressfortheControlSubnet
adapter

Program

Click Program to viewthestatusoftheprogramandslavemodesettingsforthecontrolsystem.

Status Tab- Program

The following Program information is displayed:

l

Number of Licensed Programs: The number of licensedprogramssupportedbythecontrol
system

l

Slave Mode:Reportswhetherthecontrolsystemisrunninginsubordinatemode(Enabled)
or not (Disabled)

l

Master IP/Hostname: The IPaddressorhostnameoftheprimarycontrolsystem,shown
only if subordinate mode isenabled

l

Master IPID:TheIPIDof the primary control system connection, shown onlyif
subordinate mode is enabled

32 • CP4 and CP4N ProductManual —Doc. 9214A

l

Slave Mode Status:Indicatestheconnectionstatustoaprimarycontrolsystemwhilein
subordinate mode, shown only if subordinate mode isenabled

If one or more programs havebeenloadedtothecontrolsystem,expandablesubsectionsare
shown that correspond with the program slot. Expandthesubsectionforagivenprogramslotto
display details about the loadedprogram.

AVFramework

Click AVFrameworktoviewthestatusofthenative.AVFrameworksoftware program running
on the control system

Status Tab- AVFramework

The following AVFrameworkinformationisdisplayed:

l

AVFramework:Reportswhetherthenative.AVFrameworksoftwareprogramhasbeen
enabled (Enabled)ornot(Disabled)

l

AVFrameworkVersion:Reportstheversionofthenative.AVFrameworksoftware
program running on the control system, shown onlyifthenative.AVFrameworksoftware
program is enabled

If the native .AVFrameworksoftwareprogramisenabled,anOpenAVFrameworkSetup button
is provided to launch the.AVFrameworkwebconfigurationutility.Formoreinformationon
configuring .AVFrameworkforthecontrolsystem,refertothe.AVFrameworkSoftware for 4-

Series Control Systems Operations Guide.

Product Manual — Doc. 9214A CP4and CP4N • 33

Settings

Click the Settings tab onthetopleftoftheconfigurationinterfacetodisplayselectionsfor
configuring various control system settings.

Settings Selections

Each selection is described in thesectionsthatfollow.

NOTE: If an invalid valueisenteredforasetting,thewebinterfacewillnotallowchangesto
be saved until avalidvalueisentered.Redtextisdisplayednextasettingtoindicatean
invalid value.

System Setup

Click System Settings to configure general network andcontrolsystemsettings.

34 • CP4 and CP4N ProductManual— Doc.9214A

Settings Tab- System Setup

Time/Date

Click the + (plus)iconnexttoTime/Datetodisplaythefollowingtimeand date settings.

Settings Tab- System Setup (Time/Date)

Product Manual — Doc. 9214A CP4andCP4N •35

l

Time Synchronization: Turn on the toggle tousetimesynchronizationviaNTP(Network
Time Protocol).

l

Synchronize Now: With Time Synchronization turned on, clickSynchronize Nowto
synchronize the control system with the NTPserver(s) enteredintheNTPTimeServers
table.

l

NTPTimeServers:WithTimeSynchronizationturnedon,usetheprovidedtabletoenter
information regarding the NTP server(s) used to synchronize the dateandtimeforthe
control system.

o

Click Add to addanewNTPserverentryintothetable.

o

Enter the following information for each entry:

n

Enter the NTPserveraddressintotheAddresstextfield.

n

Enter the NTPserverportintothePorttextfield.

n

Use the Authentication Method drop-down menu to select theauthentication
method used to access the NTPserver(ifoneexists).

n

If an authentication method is selected, enter thekeyusedtoauthenticate
against the NTPserverintotheAuthenticationKeytextfield.

n

If an authentication method is selected, enter theIDforthekeyusedto
authenticate against the NTPserverintotheKeyIDtextfield.

o

To remove an entry, fillthecheckboxtotheleftofthetableentry,andthenclick
Delete.

NOTE:NTPserversareconfiguredintoaparticularslot. The server configured for the
first table row willbetheprimaryserverusedfortimesynchronization.Theservers
configured into additional table rows willbeusedassecondaryservers.

l

Time Zone: Select a timezoneforthecontrolsystemusingthedrop-downmenu.

l

Date: Select the date forthecontrolsystemusingthepop-upcalendarthatisdisplayed.

l

Time: Select the time forthecontrolsystem(in24-hourformat)usingthepop-upmenu
that is displayed.

36 • CP4 and CP4N ProductManual— Doc.9214A

Network

Click the + (plus)iconnexttoNetworktodisplaythefollowingnetworksettings.

Settings Tab- System Setup (Network)

l

Host Name: Enter the control system hostname.

l

Domain: Enter the fully qualified domainnameonthenetwork.

l

Primary Static DNS: EntertheprimaryDNSaddress.

l

Secondary Static DNS: Enter thesecondaryDNSaddress.

l

DHCP: Turn on the toggle touseDHCPfortheEthernetconnection.

NOTE: If DHCP is enabled,IPdoesnotfunctionuntilareplyhasbeenreceivedfrom
the server. The control system broadcasts requests for anIPaddressperiodically.

l

IP Address: If DHCPisturnedoff,enterthecontrolsystemIPaddressonthenetwork.

l

Subnet Mask: If DHCPisturnedoff,enterthecontrolsystemsubnetmaskaddressonthe
network.

l

Default Gateway: If DHCPisturnedoff,enterthegatewayrouteraddressonthenetwork.

Product Manual — Doc. 9214A CP4and CP4N• 37

Control Subnet (CP4NOnly)

Click the + (plus)iconnexttoControlSubnettodisplaythefollowingControlSubnetsettings.

Settings Tab- System Setup (ControlSubnet)

NOTE:FormoreinformationontheControlSubnet,refertothe"ControlSubnet"topicin
the 4-Series Control Systems Reference Guide.

l

Turn on the Auto NetworkAddressing toggle toassignanetworkaddressfortheControl
Subnet automatically. If this toggle isturnedoff,astaticaddressmustbeenteredinthe
Network text field below.

l

If Auto Network Addressing is turned off,enterastaticControlSubnetnetworkaddressin
the Network text field. The networkaddressmustbeinCIDR(ClasslessInter-Domain
Routing)formatthatincludesthebitmaskcountaftertheaddress(suchas
"192.168.0.0/24").

l

Turn on the Isolation Mode toggle toruntheControlSubnetinisolationmode.Whenin
isolation mode, the firewall is configured sothatnocommunicationcanoccurbetweenthe
LAN and devices on theControlSubnet.Usingthismechanism,customerscanprotect
their corporate LAN from devices on theControlSubnet.Formoreinformation,referto
the "Control Subnet"topicinthe4-SeriesControlSystemsReferenceGuide.

l

Turn on the StartProgramAfterRouterisOnlinetoggletostartcontrolsystemprograms
only after the internal Control Subnet routerisreportingonline.

l

Use the Port Map tabletocreateportmappingrulestousewiththeControlSubnet.

NOTE:NoportmapscanbeaddedifIsolationModeisturnedon.

38 • CP4 and CP4N Product Manual — Doc. 9214A

o

Click Add to addanewportmappingruleintothetable.

o

Enter the following information for each entry:

n

Enter the external port intheExternalPorttextfield.Thisistheportnumber
that users outside the LAN mustspecifytoconnecttotheserviceonthe
internal network.

n

Enter the internal port intheInternalPorttextfield.Thisistheportnumber
for the specified service on theinternalnetwork.

n

Enter the IP address orhostnameofthetargetcontrolsysteminthe
IPAddress/Hostnametextfield.

n

Use the Protocol drop-down menu tospecifytheconnectiontypethatwillbe
accepted from machines outside the LAN.

o

To remove an entry, fillthecheckboxtotheleftofthetableentry,andthenclick
Remove.

Web Server

Click the + (plus)iconnexttoWebServertodisplaythefollowing control system web server
settings.

Settings Tab- System Setup (WebServer)

l

Turn on the Web ServerEnabledtoggletoenablethewebserverforthecontrolsystem.
The control system web server allowsforuserstouploadwebpagesandmobilityprojects
to a control system.

l

If Web Server Enabled isturnedon,enteranHTTPporttouse for the web serverinthe
HTTPPorttextfield.Port80isusedbydefault.

l

If Web Server Enabled isturnedon,enteranHTTPSporttouse for the web serverinthe
HTTPSPorttextfield.Port443isusedbydefault.

Product Manual — Doc. 9214A CP4andCP4N •39

Crestron Internet Protocol

Click the + (plus)iconnexttoCrestronInternetProtocoltodisplaythefollowingCrestron
Internet Protocol (CIP)portsettings.

Settings Tab- System Setup (CrestronInternet Protocol)

l

Enter theCrestronInternetProtocolportusedbythecontrolsystemintheCIPPorttext
field. Port 41794 is usedbydefault.

l

Enter the Secure Crestron Internet Protocol port usedbythecontrolsysteminthe
SCIPPorttextfield.Port41796isusedbydefault.

SSH

Click the + (plus)iconnexttoSSHtodisplaythefollowingSSH(Secure Shell)settings.

Settings Tab- System Setup (SSH)

l

Turn on the SSHEnabledtoggletoenableSSHforthecontrolsystem.

l

If SSHEnabledisturnedon,enteraporttouseforthe SSHprotocol in the SSHPort text
field. Port 22 isusedbydefault.

Web XPanel

Click the + (plus)iconnexttoWebXPaneltodisplaythefollowingcontrolsystem Web XPanel
settings.

Settings Tab- System Setup (WebXPanel)

40 • CP4 and CP4N ProductManual —Doc. 9214A

l

Turn on the Web XPanelEnabledtoggletoenabletheWebXPanelfunctionalityforthe
control system.

l

Turn on the Secure WebXPanelEnabledtoggletoenableasecureWebXPanelconnection
for the control system. If thistoggleisturnedon,theWebXPanelcanonlyconnecttothe
control system over encrypted TLS/SSL.

l

Enter a domain name fortheWebXPanelintheDomaintextfield.

l

Enter one or more portsfortheWebXPanelinthePort(s)textfield.Port41794isusedby
default.

NOTE:Enter"*"toopenallportsfor the Web XPanel. Arangeofportscanalsobe
specified.

Product Manual — Doc. 9214A CP4 andCP4N •41

Programs

Click Programs to manage control systemprogramsandtoconfiguresubordinatemodesettings
for the control system.

Settings Tab- Programs

Slave Mode

NOTE:Formoreinformationonusingsubordinatemodefora4-Seriescontrolsystem,refer
to the "Master-SlaveMode"topicinthe4-SeriesControl Systems Reference Guide.

Click the + (plus)iconnexttoSlaveModetodisplaythefollowing subordinate mode settings.

l

Turn the Slave Mode toggleontorunthecontrolsysteminsubordinatemode.Ifthis
toggle is turned on, the controlsystemwillfollowaprogramrunningontheprimary
control system and will makeitsportsavailabletothatcontrolsystem.

42 • CP4 and CP4N ProductManual — Doc. 9214A

l

If Slave Mode isturnedon,entertheIPaddressorhostnameoftheprimarycontrolsystem
in the Master IP/Hostname text field.

l

If Slave Mode isturnedon,entertheIPIDforthe connection to the primary control system
in the IPIDtextfield.

Program Slot Management

NOTE:Formoreinformationonmanagingprogramsona4-Seriescontrolsystem,referto
the "Program Management"topicinthe4-SeriesControlSystemsReferenceGuide.

Click the + (plus)iconnexttoProgramSlotManagementtodisplaythefollowingprogram
management settings.

Each program slot is represented inatablethatprovidesthefollowinginformationandcontrols:

l

Slot:Theprogramslotnumber(1-10)

l

Program Name:Thenameforthecontrolsystemprogram

l

Registration:Theregistrationstatusoftheprogram

l

Execution:Theexecutionstatusoftheprogram

l

Program Editing: Provides the following program editing controls:

o

Click the Upload Program button toloadanewprogramtothecontrolsystem.
Instructions for loading a new program tothecontrolsystemareprovidedbelow.

o

Click the Edit Programbutton to edit information about the program (if
available).

o

If the program is unregistered, clicktheRegisterProgrambutton toregisterthe
program with the control system.

o

If the program is registered, clicktheUnregisterProgrambutton tounregister
the program from the control system.

l

Program Execution:Providesthefollowingprogramexecutioncontrols:

o

If the program is stopped,clicktheStartProgrambutton to start the program.

o

If the program is running, clicktheStopProgrambutton to stop the program.

o

Click the Restart Program button torestart the program.

Product Manual — Doc. 9214A CP4andCP4N •43

Load a New Program

To load a newprogramtothecontrolsystem:

1.

Click the Upload Program button in an available program slot. The AddProgramdialog
box is displayed.

Add ProgramDialog Box

2. If desired, fill the Do not copy IPTable check box to prevent the program IPtable from
being copied to the control systemfollowing theupload.

3. Click the Program File button. The File Upload dialog box is displayed.

File UploadDialog Box

4. Click Browse, and then navigate to the programfile (LPZor CPZ)on the host computer.

5. Select the program file, and then click Open.

6. Click Load to load the program file to the control system. The upload progress is shown in
the dialog box.

7. Once the control system has completed the program upload, click OK. The program will
appear in the Program SlotManagementtableandwillautomaticallyattempttoregister
and start itself on thecontrolsystem.

44 • CP4 and CP4N Product Manual — Doc. 9214A

Edit a Program

To edit the IPtableforacontrolsystemprogram(ifpermittedbythe program):

1.

Click the Edit Programbutton in the desired program slot. TheEditProgramdialog
box is displayed.

Edit ProgramDialog Box

NOTE: If IPtableentrieshavealreadybeendefinedintheprogram,theseentrieswill
populate the table in theEditProgramdialogboxunlesstheDonotcopyIPTable
check box was filled whenloadingtheprogramtothecontrolsystem.

2. Click Add to add a new IP table entry for the program (if necessary).

3. Enter or modify the following information in each column for the IPtable entry:

l

IPID:EnteranIPIDthatwill be used for communication between a device and the
control system.

l

IPAddress/Hostname:EntertheIPaddressor hostname for the device that will
connect to the control system overIP.

l

Device Id:EnterauniqueIDfortheconnectingdevice.Bydefault,thisvalueis the
same as the provided IPID.

l

Port #:Entertheportusedforcommunicationbetweendeviceandcontrolsystem.

l

Room Id:EntertheCrestronVirtualControl(VC-4)roomID that is associated with
theIPtableentry.ThissettingisapplicableonlyforVC-4connections.

4. Click Save Changes to save any changes to the IPtable.

Product Manual — Doc. 9214A CP4 and CP4N • 45

Projects

Click Projects to manage webandmobilityprojectsforthecontrolsystem.

Settings Tab- Programs

Each loaded project is represented inatablethatprovidesthefollowinginformationand
controls:

l

Projects:Theprojectnumberonthecontrolsystem

l

Name:Thenameforthewebormobilityproject

l

Mobility:Displaysagreencheckiconiftheprojectisamobilityproject

l

Web Project:Displaysagreencheckiconiftheprojectisawebproject

l

Actions:Clickthetrashcanbutton todeletetheprojectfromthecontrolsystem

To load a newwebormobilityprojecttothecontrolsystem:

1. Click the Add Project button. The Add Project dialog box is displayed.

Add ProjectDialog Box

2. Turn on the Web Project or Mobility Project toggles to define whether the loaded project is
a web or amobilityproject.

NOTE:Iftheprojectisbothawebandamobilityproject, both toggles can be selected.

46 • CP4 and CP4N Product Manual — Doc. 9214A

3. Click the Project File button. The File Upload dialog box is displayed.

File UploadDialog Box

4. Click Browse, and then navigate to the projectfile on the host computer.

5. Select the projectfile, and then click Open.

6. Click Load to load the projectfile to the control system. The upload progress is shown in
the dialog box.

7. Once the control system has completed the project upload, click OK. The program will
appear in the Project Management table.

Product Manual — Doc. 9214A CP4 andCP4N •47

Services

Click Services to manage various external servicesthatintegratewiththecontrolsystem.

Settings Tab- Services

Crestron Fusion Cloud

NOTE: If connecting to a Crestron Fusionsoftwareon-premises server,connections are
made using either traditional (outbound) or inbound communications. For moreinformation,
refer to the Crestron Fusion 10On-Premises SoftwareGettingStartedGuide.

l

Turn on the Crestron Fusion CloudtoggletoallowaconnectiontoaCrestronFusionCloud
server.

l

If Crestron Fusion Cloud is turnedon,entertheURLusedtoconnectthecontrolsystemto
the desired Crestron Fusion Cloud server intheCrestronFusionCloudURLtextfield.

VC-4 Server

NOTE: For more information on connecting the control systemtoCrestronVirtualControl
(VC-4), refer to the helpfileintheCrestronVirtualControlwebconfigurationinterface.To

access the help file, clickthequestionmarkbutton on the top left of the page.

Enter a VC-4serverURLintothe VC-4 Server Address text field to establish a connection
between the control system and aVC-4server.

48 • CP4 and CP4N Product Manual— Doc.9214A

AppleHomeKit

NOTE:FormoreinformationonpairingthedevicewithanApple®HomeKit®system,referto

support.apple.com/en-us/HT204893.

Turn on the Apple HomeKittoggletoenabletheHomeKitfeatureonthecontrolsystem.

Cloud Settings

Click Cloud Settings to enable ordisableaconnectionbetweenthecontrolsystemandanXiO
Cloud® service account.

Settings Tab- Cloud Settings

Turn on the Cloud Configuration Service Connection toallowaconnectionbetweencontrol
system and an XiO Cloudaccount.Thissettingisturnedonbydefault.

For more information on connecting to the XiOCloudservice,refertoConnecttoXiOCloud

Service.

Product Manual — Doc. 9214A CP4 and CP4N • 49

Auto Update

Click Auto Update toconfigure automaticfirmwareupdatesforthecontrolsystemand
connected devices.

Settings Tab- Auto Update

NOTE:Formoreinformationonconfiguringautomaticupdatesforthecontrolsystem,refer
to the "Auto Update Mechanism"topicinthe4-SeriesControlSystemsReferenceGuide.

General

l

Turn on the Auto Updatetoggletouseautomaticupdatesforthecontrolsystemand
connected devices.

l

If Auto Update is turnedon,enteracustomupdateserverFTPaddressinthe Custom URL
text field.

Server

The following settings can be configured for theautoupdateserverifAutoUpdateisturnedon:

50 • CP4 and CP4N ProductManual —Doc. 9214A

l

Enter a username for accessing the autoupdateserverintheUsernametextfield.

l

Enter a password for accessing the autoupdateserverinthePasswordtextfield.

Crestron Devices

The following settings can be configured for updating connected Crestron devicesifAuto
Update is turned on:

l

Enter a username for pushing automatic updatestocontrolledCrestrondevicesinthe
Username text field.

l

Enter a password for pushing automatic updatestocontrolledCrestrondevicesinthe
Password text field.

Schedule

The following settings can be configured for scheduling automatic updatesifAutoUpdateis
turned on:

l

Use the Day ofWeekdrop-downmenutoselectadayoftheweektocheckforand
perform automatic updates.

o

Select Daily to checkfornewupdateseveryday.

o

Select None to only checkfornewupdatesmanually.

l

If a value isprovidedforDayofWeekotherthan"None,"enteratimeofday(in24-hour
format) when the control system willcheckupdatesonthescheduledday.

l

If "None" is selected for DayofWeek,enterthepollinginterval(inhours)forwhenthe
control system will poll theserverforupdates.

l

Click Update Now tochecktheupdateserverfornewfirmwareandtoupdatethecontrol
system immediately if new firmware isavailable.

Product Manual — Doc. 9214A CP4 andCP4N •51

AVFramework

Click AVFrameworktoconfigurethenative.AVFrameworksoftware program running on the
control system.

Settings Tab- AVFramework

NOTE:Ifanolderversionofthe.AVFrameworkprogramisdetectedintheProgram 01 slot
(6.13 and prior), the program isloadedtotheProgram00slotbutisnotenabledwithinthe
control system. The older .AV Frameworkprogrammustberemovedmanuallybeforethe
newer version can be enabled. Formoreinformation,refertothe.AVFrameworkSoftware

for 4-Series Control Systems Operations Guide.

l

Turn on the AVFrameworktoggletoturnonthenative.AVFrameworksoftware program
on the control system.

l

If AVFrameworkisturnedon,theversionofthenative.AVFrameworksoftware program
is reported next to AVFrameworkVersion.

l

If AVFrameworkisturnedon,clickOpenAVFrameworkSetup to launch the
.AVFrameworkwebconfigurationutility.Formoreinformationonconfiguring
.AVFrameworkforthecontrolsystem,refertothe.AVFrameworkSoftware for 4-Series

Control Systems Operations Guide.

52 • CP4 and CP4N Product Manual— Doc.9214A

Security

Click the Security tabonthetopleftoftheconfigurationinterfacetodisplayselectionsfor
configuring security and authentication settings for the control system.

Security TabSelections

Expand the Security accordion to configure thefollowingsettings:

NOTE:Formoreinformationaboutconfiguringauthenticationsettingsona4-Seriescontrol
system, refer to the "Authentication"topicinthe4-SeriesControlSystemsReferenceGuide.

l

SSLMode:SelectanSSL(SecureSockets Layer) mode to use for establishing a secure
connection to the control system:

o

Encrypt and Validation:Thecontrolsystemwillrequireausernameandpasswordto
validate an encrypted SSLconnection.Enterausernameandpasswordinthe
appropriate fields that are displayed.

o

Encrypt: The control system will useanencryptedSSLconnection.

l

Enable User Page Authentication:Turnonthetoggletouseuserpageauthenticationfor
web pages and mobility projects. Ifthistoggleisturnedon,auserwillbepromptedfor
login credentials as they load theproject.

Product Manual — Doc. 9214A CP4 andCP4N • 53

Control system users and groups can beviewedandmodifiedwithinthetableprovidedatthe
bottom of the accordion. Use thefollowing settings toadd,delete,andeditcontrolsystemusers
and groups.

Current User

Click the Current User tabtoviewandeditinformationforthecurrentcontrolsystemuser.

Current UserTab

The following settings are displayed for thecurrentuser:

l

Name: The chosen username

l

Access Level: The access level granted totheuser(Administrator,Programmer,Operator,
User, or Connect)

l

Active Directory User: Reports whether the current useris(Yes)orisnot(No)
authenticated through Active Directory® software

NOTE: A user must beaddedtoanActiveDirectorygroupbeforetheusermaybe
selected as an active directory user.Formoreinformation,refertoGroups(on

page59).

l

Groups: Any groups of which thecurrentuserisamember

Click Change Current User Password tochangethepasswordforthecurrentuser.TheChange
Password dialog box is displayed.

54 • CP4 and CP4N Product Manual — Doc. 9214A

Change PasswordDialog Box

Enter the existing password in theCurrentPasswordfield.Then,enteranewpasswordinthe
Password field, and reenter the password intheConfirmPasswordfield.

Click OK to savethenewpassword,orclickCanceltocancelthechange.

Users

Click the Users tabtoviewandeditinformationforthecontrolsystemusers.

Users Tab

Enter text into the SearchUsersfieldtofindanddisplayusersthatmatchthesearchterm(s).
Control system users are listed intableformat.Thefollowinginformationisdisplayedforeach

control system user:

l

Username: The chosen username

l

AD User: Reports whether the user is(Yes)orisnot(No)authenticatedthroughActive
Directory

Product Manual — Doc. 9214A CP4 and CP4N • 55

NOTE: A user must beaddedtoanActiveDirectorygroupbeforetheusermaybe
selected as an active directory user.Formoreinformation,refertoGroups(on

page59).

If the control system users span multiplepages,usethenavigationarrowsonthebottomofthe
page to move forward orbackwardthroughthepages,orselectapagenumbertonavigateto
that page. Additionally, the number ofusersdisplayedoneachpagemaybesetto5,10,or20
users.

An Actions column is also providedforeachuserthatallowsvariousactionstobeperformed.
The following selections may be selected from theActionscolumn.

User Details

Click the information button in the Actions column to view information for the selected user.
The User Details pop-up dialogboxisdisplayed.

User DetailsDialog Box

The following settings are displayed for thecurrentuser:

l

Name: The chosen username

l

Active Directory User: Reports whether the user is(Yes)orisnot(No)authenticated
through Active Directory

l

Groups: Lists any groups that contain theuser

Click OK to returntotheAuthenticationManagement>Userspage.

Update User

Click the editing button in the Actions column to edit settings for the selected user. The
Update User dialog box isdisplayed.

56 • CP4 and CP4N Product Manual — Doc. 9214A

Update UserDialog Box

The following Update User settings may beviewedorconfigured:

l

Name: The chosen username

l

Active Directory User: Turn on thetoggletouseauthenticationviaActiveDirectoryforthe
selected user.

l

Password: Enter a new password fortheselecteduser.

l

Confirm Password: Reenter the password provided in thePasswordfield.

l

Groups: Add the user tooneormoregroups.Formoreinformation,refertoGroups(on

page59).

NOTE: A user must beaddedtoanActiveDirectorygrouptobeselectedasanActive
Directory user.

Click OK to saveanychangesandtoreturntotheUsersselections.ClickCanceltocancelany
changes.

Delete User

Click the trashcan icon in the Actions column to delete the user.
A pop-up dialog box isdisplayedaskingwhethertheusershouldbedeleted.ClickYestodelete

the user or No tocancel.

Create User

Click Create User atthebottomofthepagetocreateanewcontrolsystemuser.TheCreate
User dialog box is displayed.

Product Manual — Doc. 9214A CP4 andCP4N •57

Create UserDialog Box

Use the following settings to create anewuser:

l

Name: Enter a username.

l

Active Directory User: Turn on thetoggletouseauthenticationviaActiveDirectoryforthe
user.

l

Password: Enter a password for theuser.

l

Confirm Password: Reenter the password provided in thePasswordfield.

l

Groups: Add the user tooneormoregroups.Formoreinformation,refertoGroups(on

the facing page).

NOTE: A user must beaddedtoanActiveDirectorygrouptobeselectedasanActive
Directory user.

Click OK to saveanychangesandtoreturntotheUsersselections.ClickCanceltocancel
creating a new user.

58 • CP4 and CP4N Product Manual— Doc.9214A

Groups

Click the Groups tabtoviewandeditsettingsforcontrolsystemgroups.Controlsystemgroups
are used to group usersbyaccesslevelandActiveDirectoryauthenticationsettings.

Groups Tab

Enter text in totheSearchGroupsfieldtofindanddisplaygroupsthatmatchthesearchterm
(s).

Control system groups are listed intableformat.Thefollowinginformationisdisplayedforeach
control system group:

l

Group Name: The chosen group name

l

AD Group: Reports whether the group is(Yes)orisnot(No)authenticatedthroughActive
Directory

NOTE: Active Directory provides an additional layerofauthenticationforcontrol
system groups and users. Active directory group andusernamesarestoredinthe
control system console along with a uniqueSID(securityidentifier).WhenanActive
Directory user attempts to authenticate against the console, theconsolefirstchecks
the user credentials. If the Active Directoryauthentication issuccessful,Active
Directory queries the console for the userorgroup'sSID.Theuserisgrantedaccessto
the control system only if atleastoneSIDmatchisfound.

l

Access Level: The access level for theselectedgroup(Administrator,Programmer,
Operator, User, or Connect)

If the control system groups span multiplepages,usethenavigationarrowsonthebottomof
the page to move forwardorbackwardthroughthepages,orselectapagenumbertonavigate
to that page. Additionally, the numberofgroupsdisplayedoneachpagemaybesetto5,10,or
20 users.

Product Manual — Doc. 9214A CP4 and CP4N • 59

An Actions column is also providedforeachgroupthatallowsvariousactionstobeperformed.
The following selections may be selected from theActionscolumn.

Group Details

Click the information button in the Actions column to view information for the selected
group. The Group Details dialog boxisdisplayed.

Group DetailsDialog Box

The following settings are displayed for thecurrentgroup:

l

Name: The chosen group name

NOTE:IfauthenticatingwithActiveDirectory,donotenterthedomainnameforthe
Active Directory group in theNamefield.Ifthisinformationisbeingenteredvia
console commands, omit domain\local from the command (forexample,

adddomaing -n:crestron -L:A instead of adddomaing ­n:domain.local\crestron -L:A).

l

Access Level: The access level of thegroupanditsusers

l

Active Directory User: Reports whether the group is(Yes)orisnot(No)authenticated
through Active Directory

Click OK to returntotheGroupsselections.

Delete Group

Click the trashcan icon in the Actions column to delete the group.
A pop-up dialog box isdisplayedaskingwhetherthegroupshouldbedeleted.ClickYestodelete

the group or No tocancel.

Create Group

Click Create Group atthebottomofthepagetocreateanewcontrolsystemgroup.TheCreate
Group dialog box is displayed.

60 • CP4 and CP4N ProductManual —Doc. 9214A

Create GroupDialog Box

Use the following settings to create anewgroup:

l

Name: Enter a group name.

l

Access Level: Select an access level forthegroupanditsusersfromthedrop-downmenu.

l

Active Directory Group: Turn on thetoggletouseauthenticationviaActiveDirectoryfor
the group.

Click OK to saveanychangesandtoreturntotheGroupsselections.ClickCanceltocancel
creating a new group.

Product Manual — Doc. 9214A CP4 andCP4N •61

802.1x Configuration

Click the 802.1x Configuration tab on thetopleftoftheconfigurationinterfacetodisplay
selections for configuring IEEE 802.1x network authentication for control system security.

802.1x ConfigurationTab Selections

Expand the 802.1x Configuration accordion to configure the following settings:

NOTE:Formoreinformationaboutconfiguring802.1xnetworkauthenticationona4-Series
control system, refer to the "802.1X"topicinthe4-SeriesControlSystemsReferenceGuide.

l

IEEE 802.1x Authentication: Turn on the toggle touse802.1xauthenticationforthecontrol
system.

62 • CP4 and CP4N Product Manual— Doc.9214A

l

Authentication Method: Select an 802.1x authentication method (EAP-TLS Certificate or
EAP MSCHAP V2- password) from thedrop-downmenu.

o

Domain: If EAP MSCHAP V2-passwordisselectedforAuthenticationMethod,enter
a domain name that isrequiredforauthentication.

o

Username: If EAP MSCHAP V2- password isselectedforAuthenticationMethod,
enter a username that isrequiredforauthentication.

o

Password: If EAP MSCHAP V2-passwordisselectedforAuthenticationMethod,
enter a password that isrequiredforauthentication.

l

Enable Authentication Server Validation: Turn on thetoggletouseservervalidationfor
increased security.

l

Select Trusted Certificate Authorities: Select trusted CAs (Certificate Authorities) from
the provided CAs to beusedforservervalidation:

o

Click the check box totheleftofaCAtoselectitasatrustedCA.

o

Enter a search term intothetextfieldatthetopoftheCAmenutosearchforand
display CAs that match thesearchterm.

o

Click the check box totheleftofthesearchfieldatthetopoftheCAmenuto select
all CAs as trusted CAs.

Select Manage Certificates from the Action menu toaddorremoveCAsfromthelist.The
Manage Certificates dialog box is displayed withtheRoottabselected.

Manage CertificatesDialog Box - RootTab

Click the tabs near thetopofthepagetoswitchbetweenthedifferenttypesofCAs(Root,
Intermediate, Machine, or Web Server). The same settings areprovidedforeachtypeofCA.

Product Manual — Doc. 9214A CP4 andCP4N • 63

Type a search termintotheSearch…textfieldtosearchforanddisplayCAsthatmatchthe
search term.

The following information is provided for each typeofCA:

l

Name: The CA name

l

Expiry Date: The dateandtimethattheCAissettoexpire

If the CAs span multiplepages,usethenavigationarrowsonthebottomofthepagetomove
forward or backward through the pages,orselectapagenumbertonavigatetothatpage.

Click the trashcan button in the Actions column for a CA to delete it. A pop-up dialog box is
displayed asking if the CAshouldbedeleted.ClickYestodeletethecertificateorNotocancel.

Click Add [Type] Certificate toaddaCAofoneofthefouravailabletypes(Root,Intermediate,
Machine, or Web Server) tothelistofCAs.TheAddCertificatepop-updialogboxisdisplayed.

Add CertificateDialog Box

To add anewcertificate:

1. Click Browse.

2. Navigate to the CA file on the host computer.

3. Select the CA file, and then click Open.

4. Click Load to load the CA file to the control system. The upload progress is shown in the
dialog box.

5. Once the control system has completed the upload, click OK.

Click the x buttontoclosetheAddCertificatedialogboxatanytimeduringtheuploadprocess.
Clicking the x button before theCAfileisuploadedtothecontrolsystemcancelstheupload.

Click the x buttontoclosetheManageCertificatesdialogboxandtoreturntothe802.1x
Authentication page.

64 • CP4 and CP4N Product Manual — Doc. 9214A

Connect to XiO Cloud Service

The XiOCloud®serviceallowssupporteddevicesacrossanenterprise to be managed and
configured from one central and secure location inthecloud.SupportedCrestron®devicesare
configured to connect to the service outofthebox.

Use of the service requires aregisteredXiOCloudaccount.ToregisterforanXiOCloudaccount,
refer to www.crestron.com/Support/Tools/Licensing-Registration/XiO-Cloud-Registration-

Room-Licenses.

NOTE:ThedevicemaybedisconnectedfromtheXiOCloudservice by navigating to the
Cloud Services tab in CrestronToolbox™software(Functions>DeviceInfo > Cloud Services).
For details, refer to theCrestronToolboxhelpfile.

To connect the device totheXiOCloudservice:

1. Record the MAC address and serial number that are labeled on the shipping box or the
device. The MAC address and serialnumberarerequiredtoaddthedevicetothe
XiOCloudservice.

NOTE:IfthedevicehasmultipleMACaddresses,usetheMACaddressthatis
providing the primary connection back tothenetwork.Formostdevices,theEthernet
MAC address should be used. However, ifyourdeviceisconnectingtothenetworkover
a different protocol (such as Wi-Fi®communications), use theMACaddressforthat
protocol instead.

2. Log in to your XiOCloud account at portal.crestron.io.

3. Claim the device to the XiOCloud service as described in the XiOCloudUserGuide.

Select the device from thecloudinterfacetoviewitsstatusandsettings.Thedevicemaynow
also be managed and assigned toagrouporroom.Formoreinformation,refertothe

XiOCloudUserGuide.

NOTE:ForXiOCloudaccountswithroom-basedlicenses,thedevicemust be added toa
licensed room before its status andsettings canbeviewed.

Product Manual — Doc. 9214A CP4 and CP4N • 65

Programming

4-Series control systems support an open development environment that enables programmers
to use standard tools tocreateC#programs.ProgrammerscanalsouseCrestrontoolssuchas

SIMPL, SIMPL#Pro,andVTPro-e®softwaretocreatecontrolsystemprogramsandprojects.

l

For more information on programming for a4-seriescontrolsystemusingC#,referto

online help answer ID1000637.

l

For more information on programming for a4-seriescontrolsystemusingthePython
programming language, refer to the Python Programming Language on 4-Series Control

Systems Developer Microsite.

66 • CP4 and CP4N Product Manual — Doc. 9214A

Resources

The following resources are provided for theCP4andCP4N.

NOTE:YoumayneedtoprovideyourCrestron.comwebaccountcredentialswhenprompted
to access some of the following resources.

Crestron Support and Training

l

Crestron True Blue Support

l

Crestron Resource Library

l

Crestron Online Help (OLH)

l

Crestron Training Institute (CTI)Portal

Programmer and Developer Resources

l

help.crestron.com:Provides helpfilesforCrestronprogrammingtoolssuchasSIMPL,

SIMPL#, and Crestron Toolbox™ software

l

developer.crestron.com:Provides developer documentation for Crestron APIs, SDKs,and

other development tools

Product Certificates

To search for product certificates, refer tosupport.crestron.com/app/certificates.

Related Documentation

l

4-Series Control Systems Reference Guide

l

4-Series Control Systems Security Reference Guide

l

.AVFrameworkSoftwarefor4-SeriesControlSystemsReferenceGuide

l

Crestron Fusion® Software Help File

l

Crestron Programming Design Guide

l

XiOCloudUserGuide

Product Manual — Doc. 9214A CP4 andCP4N •67

Crestron Electronics,Inc.
15 VolvoDrive, Rockleigh, NJ 07647
Tel: 888.CRESTRON
Fax: [phone]
www.crestron.com

Product Manual— Doc. 9214A

01/14/22

Specifications subjectto

change withoutnotice.