Inovance MD500 AC drive
Register map(s) for this device, with a note of how far each has been checked. Addresses are
0-based, as on the wire. Scale and byte order are confirmed only at the hardware-verified rung.
coherence-checked
Round-trips through a real Modbus stack with no overlapping addresses and a word-order-sensitive codec — the map is internally coherent and wire-decodable. Does NOT prove byte-order or scaling match a real device: the emulator is seeded from the map's own types, so a uniformly wrong byte-order still round-trips. Only hardware-verified confirms byte-order/scale on the wire.
| point | address (0-based) | type | scale | unit |
|---|
| running_frequency | 28672 | U16 | 0.01 | |
| frequency_reference | 28673 | U16 | 0.01 | |
| bus_voltage | 28674 | U16 | 0.1 | |
| output_voltage | 28675 | U16 | 1 | |
| output_current | 28676 | U16 | 0.01 | |
| output_power | 28677 | U16 | 1 | |
| output_torque | 28678 | I16 | 0.1 | |
| di_state | 28679 | U16 | 1 | |
| do_state | 28680 | U16 | 1 | |
| ai1_voltage | 28681 | U16 | 0.01 | |
| ai2_voltage | 28682 | U16 | 0.01 | |
| ai3_voltage | 28683 | U16 | 0.01 | |
| motor_temperature | 28706 | I16 | 1 | |
| ac_drive_running_state | 28733 | U16 | 1 | |
| current_fault_code | 28734 | U16 | 1 | |
link settings as documented (unverified): RTU; baud 19200/115200; unit ID 1; FC 03,06; Supports Modbus-RTU slave communication protocol. Address range of the slaves is 1 to 247, and 0 is the broadcast address.
⚠ Never wire the AC drive while the power is on. Wait for a period of 10 minutes after the AC drive is powered off before starting any repair, maintenance or wiring work. — Starkest reads only; we never write a control register.
bench facts as documented (unverified)
| terminals | 485+, 485-, CGND |
| connector | Terminal block |
| isolation | Isolated input (with MD38TX1 card) |
| wiring notes | Uses MD38TX1 RS485 communication adapter with isolation. |
| max registers/read | 12 |
| broadcast | supported |
| protocol notes | Supports reading and writing of word-type parameters only. Does not support reading and writing of bytes or bits. |
| identification notes | Function parameters in groups F0 to FF and A0 to AF can be read/written. Group U can only be read. |
| power | Rated voltage input: 380 to 480 V, wide voltage range: 323 to 528 V. Three-phase AC. |
| environment | Harsh environments with high ambient temperature, dust, metal dust, salt, sulfuric acid, chlorine atmospheres require more frequent inspection. |
| certifications | CE, EMC directive (EN 61800-3, EN 55011, EN 61000-6-2), LVD directive (EN 61800-5-1) |
field reports — community-sourced, unverified (checked 2026-06-11)
- Non-standard Modbus protocol is enabled by default (Fd-05 = 0), which causes the slave to return an additional byte during read commands. This breaks standard Modbus RTU master implementations. To use standard Modbus RTU, Fd-05 must be manually set to 1. [source]
- A firmware issue in the MD500-PN1 Profinet card (software version 1.08) causes custom telegram configurations to fail. When adding more telegrams or modifying the default configuration, all read values from the drive return as 0x1111 (4369). Reconfiguring to 'Standard Telegram 1 PZD' is required to restore communication. [source]
- confirmed: Baud rates [19200, 115200] — confirmed by MD500 User Manual (Group Fd, parameter Fd-00 supports 300 bps to 115200 bps, where 6 is 19200 bps and 9 is 115200 bps)
- confirmed: Default unit ID 1 — confirmed by MD500 User Manual (parameter Fd-02 default is 1)
- confirmed: Framing RTU — confirmed by MD500 User Manual (supports Modbus-RTU slave protocol)
- confirmed: Function codes [3, 6] — confirmed by MD500 User Manual (supports 0x03 for reading and 0x06 for writing)
- confirmed: Address range of the slaves is 1 to 247, and 0 is the broadcast address — confirmed by MD500 User Manual (parameter Fd-02)
- confirmed: Certifications CE, EMC directive (EN 61800-3, EN 55011, EN 61000-6-2), LVD directive (EN 61800-5-1) — confirmed by MD500 User Manual (Standards Compliance section)
- confirmed: Control warning: Never wire the AC drive while the power is on. Wait for a period of 10 minutes after the AC drive is powered off before starting any repair, maintenance or wiring work — confirmed by MD500 User Manual (Safety Precautions)
- confirmed: Environment: Harsh environments with high ambient temperature, dust, metal dust, salt, sulfuric acid, chlorine atmospheres require more frequent inspection — confirmed by MD500 User Manual (Routine Inspection section)
The trust ladder
Each rung states what it proved and what it did not. Gray until proven; green is earned by hardware only.
- generated — A prompt produced it. Unproven — anyone can regenerate this.
- structure-verified — Decode path is structurally sound (addresses, widths, finite values). Does NOT prove word order or scaling.
- coherence-checked — Round-trips through a real Modbus stack with no overlapping addresses and a word-order-sensitive codec — the map is internally coherent and wire-decodable. Does NOT prove byte-order or scaling match a real device: the emulator is seeded from the map's own types, so a uniformly wrong byte-order still round-trips. Only hardware-verified confirms byte-order/scale on the wire.
- hardware-verified (software-key) x1 — Matched a real device with operator-attested readings as ground truth — the only rung that confirms word order + scaling on the wire.