Pace P16S-series LiFePO4 BMS (RS485 Modbus)

Register map(s) for this device, with a note of how far each has been checked. Addresses are 0-based, as on the wire. Scale and byte order are confirmed only at the hardware-verified rung.

coherence-checked

Round-trips through a real Modbus stack with no overlapping addresses and a word-order-sensitive codec — the map is internally coherent and wire-decodable. Does NOT prove byte-order or scaling match a real device: the emulator is seeded from the map's own types, so a uniformly wrong byte-order still round-trips. Only hardware-verified confirms byte-order/scale on the wire.

point	address (0-based)	type	scale	unit
Current	0	I16	10	mA
Voltage of pack	1	U16	10	mV
SOC	2	U16	1	%
SOH	3	U16	1	%
Remain capacity	4	U16	10	mAh
Full capacity	5	U16	10	mAh
Design capacity	6	U16	10	mAh
Battery cycle counts	7	U16	1	Cyc.
Warning flag	9	U16	1
Protection flag	10	U16	1
Status/Fault flag	11	U16	1
Balance status	12	U16	1
Cell voltage 1	15	U16	1	mV
Cell voltage 2	16	U16	1	mV
Cell voltage 3	17	U16	1	mV
Cell voltage 4	18	U16	1	mV
Cell voltage 5	19	U16	1	mV
Cell voltage 6	20	U16	1	mV
Cell voltage 7	21	U16	1	mV
Cell voltage 8	22	U16	1	mV
Cell voltage 9	23	U16	1	mV
Cell voltage 10	24	U16	1	mV
Cell voltage 11	25	U16	1	mV
Cell voltage 12	26	U16	1	mV
Cell voltage 13	27	U16	1	mV
Cell voltage 14	28	U16	1	mV
Cell voltage 15	29	U16	1	mV
Cell voltage 16	30	U16	1	mV
Cell temperature 1	31	I16	0.1	°C
Cell temperature 2	32	I16	0.1	°C
Cell temperature 3	33	I16	0.1	°C
Cell temperature 4	34	I16	0.1	°C
MOSFET temperature	35	I16	0.1	°C
Environment temperature	36	I16	0.1	°C
Pack OV alarm	60	U16	1	mV
Pack OV protection	61	U16	1	mV
Pack OV release protection	62	U16	1	mV
Pack OV protection delay time	63	U16	0.1	S
Cell OV alarm	64	U16	1	mV
Cell OV protection	65	U16	1	mV
Cell OV release protection	66	U16	1	mV
Cell OV protection delay time	67	U16	0.1	S
Pack UV alarm	68	U16	1	mV
Pack UV protection	69	U16	1	mV
Pack UV release protection	70	U16	1	mV
Pack UV protection delay time	71	U16	0.1	S
Cell UV alarm	72	U16	1	mV
Cell UV protection	73	U16	1	mV
Cell UV release protection	74	U16	1	mV
Cell UV protection delay time	75	U16	0.1	S
Charging OC alarm	76	U16	1	A
Charging OC protection	77	U16	1	A
Charging OC protection delay time	78	U16	0.1	S
Discharging OC alarm	79	U16	1	A
Discharging OC protection	80	U16	1	A
Discharging OC protection delay time	81	U16	0.1	S
Discharging OC-2 protection	82	U16	1	A
Discharging OC-2 protection delay time	83	U16	0.025	S
Charging OT alarm	84	I16	0.1	°C
Charging OT protection	85	I16	0.1	°C
Charging OT release protection	86	I16	0.1	°C
Discharging OT alarm	87	I16	0.1	°C
Discharging OT protection	88	I16	0.1	°C
Discharging OT release	89	I16	0.1	°C
Charging UT alarm	90	I16	0.1	°C
Charging UT protection	91	I16	0.1	°C
Charging UT release protection	92	I16	0.1	°C
Discharging UT alarm	93	I16	0.1	°C
Discharging UT protection	94	I16	0.1	°C
Discharging UT release protection	95	I16	0.1	°C
MOSFET OT alarm	96	I16	0.1	°C
MOSFET OT protection	97	I16	0.1	°C
MOSFET OT release protection	98	I16	0.1	°C
Environment OT alarm	99	I16	0.1	°C
Environment OT protection	100	I16	0.1	°C
Environment OT release protection	101	I16	0.1	°C
Environment UT alarm	102	I16	0.1	°C
Environment UT protection	103	I16	0.1	°C
Environment UT release protection	104	I16	0.1	°C
Balance start cell voltage	105	U16	1	mV
Balance start delta voltage	106	U16	1	mV
Pack full-charge voltage	107	U16	1	mV
Pack full-charge current	108	U16	1	mA
Cell sleep voltage	109	U16	1	mV
Cell sleep delay time	110	U16	1	min
Short circuit protect delay time	111	U16	25	uS
SOC alarm threshold	112	U16	1	%
Charging OC-2 protection	113	U16	1	A
Charging OC-2 protection delay time	114	U16	0.025	S
Version information	150	U16	1	ASCII
Model SN	160	U16	1	ASCII
PACK SN	170	U16	1	ASCII

link settings as documented (unverified): RTU; default 9600 8N1; FC 03,16; Timeout: 200mS, Interval time of the frame: > 100mS

bench facts as documented (unverified)

max registers/read	125
response timeout	200 ms
inter-frame delay	100 ms
model register	160
serial register	170
firmware register	150
doc revision	V1.3

field reports — community-sourced, unverified (checked 2026-06-11)

The PACE_MODBUS protocol is often not enabled by default on many firmware versions and must be manually activated using PbmsTools.exe (System Config -> Inverter protocol -> RS485 Protocol). [source]
confirmed: comms defaults (9600 baud, 8N1, RTU, Function Codes 3 and 16) — confirmed by PACE BMS Modbus Protocol for RS485 V1.3 [2.3.1]
confirmed: register map (current @ 0, voltage_of_pack @ 1, cell_voltage_1 @ 15, cell_temperature_1 @ 31, etc.) — confirmed by PACE BMS Modbus Protocol for RS485 V1.3
confirmed: identification registers (firmware @ 150, model @ 160, serial @ 170) — confirmed by PACE BMS Modbus Protocol for RS485 V1.3
confirmed: quirks (inter-frame delay > 100ms, response timeout 200ms) — confirmed by PACE BMS Modbus Protocol for RS485 V1.3

The trust ladder

Each rung states what it proved and what it did not. Gray until proven; green is earned by hardware only.

generated — A prompt produced it. Unproven — anyone can regenerate this.
structure-verified — Decode path is structurally sound (addresses, widths, finite values). Does NOT prove word order or scaling.
coherence-checked — Round-trips through a real Modbus stack with no overlapping addresses and a word-order-sensitive codec — the map is internally coherent and wire-decodable. Does NOT prove byte-order or scaling match a real device: the emulator is seeded from the map's own types, so a uniformly wrong byte-order still round-trips. Only hardware-verified confirms byte-order/scale on the wire.
hardware-verified (software-key) x1 — Matched a real device with operator-attested readings as ground truth — the only rung that confirms word order + scaling on the wire.

Device not here? Upload its manual and get a checked map back. It's free.

Want it confirmed against your own device? Order hardware verification. If it doesn't check out, you don't pay.

Building on a lot of devices? License the library — machine-readable maps, the firmware matrix, and API access.