Watlow EZ-ZONE PM controller

Register map(s) for this device, with a note of how far each has been checked. Addresses are 0-based, as on the wire. Scale and byte order are confirmed only at the hardware-verified rung.

coherence-checked

Round-trips through a real Modbus stack with no overlapping addresses and a word-order-sensitive codec — the map is internally coherent and wire-decodable. Does NOT prove byte-order or scaling match a real device: the emulator is seeded from the map's own types, so a uniformly wrong byte-order still round-trips. Only hardware-verified confirms byte-order/scale on the wire.

point	address (0-based)	type	scale
Hardware ID	0	U16	1
Firmware ID	2	U16	1
Software Revision	4	U16	1
Software Build	6	U16	1
User Restore Set	24	U16	1
User Save Set	26	U16	1
Device Status	30	U16	1
Analog Input 1 Process Value	360	F32LE	1
Analog Input 1 Error Status	362	U16	1
Monitor Ambient Temperature, Input 1	366	F32LE	1
Analog Input 1 Sensor Type	368	U16	1
Analog Input 1 Linearization	370	U16	1
Analog Input 1 RTD Leads	372	F32LE	1
Analog Input 1 Calibration Offset	382	F32LE	1
Analog Input 1 Filter Time	386	F32LE	1
Analog Input 1 Scale Low	388	F32LE	1
Analog Input 1 Scale High	390	F32LE	1
Analog Input 1 Range Low	392	F32LE	1
Analog Input 1 Range High	394	F32LE	1
Analog Input 1 Decimal	398	U16	1
Monitor Filtered Process Value Active, Input 1	402	F32LE	1
Analog Input 1 Sensor Backup Enable	410	U16	1
Analog Input 1 Error Latching	414	U16	1
Analog Input 1 Error Reset	416	U16	1
Analog Input 1 Process Error Enable	418	U16	1
Analog Input 1 Process Error Low	420	F32LE	1
Analog Input 2 Process Value	440	F32LE	1
Analog Input 2 Error Status	442	U16	1
Monitor Ambient Temperature, Input 2	446	F32LE	1
Analog Input 2 Sensor Type	448	U16	1
Analog Input 2 Linearization	450	U16	1
Analog Input 2 RTD Leads	452	F32LE	1
Analog Input 2 Calibration Offset	462	F32LE	1
Analog Input 2 Filter Time	466	F32LE	1
Analog Input 2 Scale Low	468	F32LE	1
Analog Input 2 Scale High	470	F32LE	1
Analog Input 2 Range Low	472	F32LE	1
Analog Input 2 Range High	474	F32LE	1
Analog Input 2 Decimal	478	U16	1
Monitor Filtered Process Value Active, Input 2	482	F32LE	1
Analog Input 2 Error Latching	494	U16	1
Analog Input 2 Error Reset	496	U16	1
Analog Input 2 Process Error Enable	498	U16	1
Analog Input 2 Process Error Low	500	F32LE	1
Limit Clear Request	680	U16	1
Limit Hysteresis	682	F32LE	1
Limit Low Set Point	684	F32LE	1
Limit High Set Point	686	F32LE	1
Limit Sides	688	U16	1
Limit State	690	U16	1
Limit Integrate	694	U16	1
Output 1 Type	720	U16	1
Output 1 Function	722	U16	1
Output 1 Retransmit Source	724	U16	1
Output 1 Function Instance	726	U16	1
Output 1 Calibration Offset	732	F32LE	1
Output 1 Scale Low	736	F32LE	1
Output 1 Scale High	738	F32LE	1
Output 1 Range Low	740	F32LE	1
Output 1 Range High	742	F32LE	1
Output 1 Low Power Scale	744	F32LE	1
Output 1 High Power Scale	746	F32LE	1
Output 3 Type	800	U16	1
Output 3 Function	802	U16	1
Output 3 Retransmit Source	804	U16	1
Output 3 Function Instance	806	U16	1
Output 3 Calibration Offset	812	F32LE	1
Output 3 Scale Low	816	F32LE	1
Output 3 Scale High	818	F32LE	1
Output 3 Range Low	820	F32LE	1
Output 3 Range High	822	F32LE	1
Output 3 Low Power Scale	824	F32LE	1
Output 3 High Power Scale	826	F32LE	1
Output 1 (digital) Control	882	U16	1
Output 1 (digital) Time Base	884	U16	1
Output 1 (digital) Function	888	U16	1
Output 1 (digital) Function Instance	890	U16	1
Output 1 (digital) Power	894	F32LE	1
Output 1 (digital) Low Power Scale	896	F32LE	1
Output 1 (digital) High Power Scale	898	F32LE	1
Output 2 Control	912	U16	1
Output 2 Time Base	913	U16	1
Output 2 Function	918	U16	1
Output 2 Function Instance	920	U16	1
Output 2 Power	924	F32LE	1
Output 2 Low Power Scale	926	F32LE	1
Output 2 High Power Scale	928	F32LE	1
Output 3 (digital) Control	942	U16	1
Output 3 (digital) Time Base	944	U16	1
Output 3 (digital) Function	948	U16	1
Output 3 (digital) Function Instance	950	U16	1
Output 3 (digital) Power	954	F32LE	1
Output 3 (digital) Low Power Scale	956	F32LE	1
Output 3 (digital) High Power Scale	958	F32LE	1
Output 4 Control	972	U16	1
Output 4 Time Base	974	U16	1
Output 4 Function	978	U16	1
Output 4 Function Instance	980	U16	1
Output 4 Power	984	F32LE	1
Output 4 Low Power Scale	986	F32LE	1
Output 4 High Power Scale	988	F32LE	1
Digital I/O 5 Direction	1000	U16	1
Digital Output 5 Function	1008	U16	1
Digital Output 5 Function Instance	1010	U16	1
Digital Output 5 Output State	1012	U16	1
Digital I/O 6 Direction	1030	U16	1
Digital Output 6 Function	1038	U16	1
Digital Output 6 Function Instance	1040	U16	1
Digital Output 6 Output State	1042	U16	1
Current Read	1120	F32LE	1
Current Error	1122	U16	1
Current Heater Error	1124	U16	1
Current Reading Enable	1126	U16	1
Current High Set Point	1134	F32LE	1
Current Low Set Point	1136	F32LE	1
Current Offset	1140	F32LE	1
Current Detect Threshold	1142	U16	1
Current Error Status	1160	U16	1
Current Scaling	1162	F32LE	1
Digital Input 5 Level	1320	U16	1
Digital Input 5 Function Instance	1322	U16	1
Digital Input 5 Function	1324	U16	1
Digital Input 5 Event Status	1328	U16	1
Digital Input 6 Level	1340	U16	1
Digital Input 6 Function Instance	1342	U16	1
Digital Input 6 Function	1344	U16	1
Digital Input 6 Event Status	1348	U16	1
Function Key Level	1360	U16	1
Function Key Instance	1362	U16	1
Function Key Digital Input Function	1364	U16	1
Monitor EZ Key Status	1368	U16	1
Alarm 1 High Set Point	1480	F32LE	1
Alarm 1 Low Set Point	1482	F32LE	1
Alarm 1 Hysteresis	1484	F32LE	1
Alarm 1 Sides	1486	U16	1
Alarm 1 Logic	1488	U16	1
Alarm 1 Silencing	1490	U16	1
Alarm 1 Latching	1492	U16	1
Alarm 1 Blocking	1494	U16	1
Monitor Alarm 1 State	1496	U16	1
Alarm 1 Latched Status	1498	U16	1
Alarm 1 Silenced Status	1500	U16	1
Alarm 1 Clearable Status	1502	U16	1
Alarm 1 Clear Request	1504	U16	1
Alarm 1 Silence Request	1506	U16	1
Alarm 1 Type	1508	U16	1
Alarm 1 Display	1510	U16	1
Alarm 1 Source	1512	U16	1
Alarm 1 Source Instance	1514	U16	1
Alarm 1 Working Process Value	1516	F32LE	1
Alarm 1 Working Set Point	1518	F32LE	1
Alarm 2 High Set Point	1530	F32LE	1
Alarm 2 Low Set Point	1532	F32LE	1
Monitor Alarm 2 State	1546	U16	1
Alarm 2 Latched Status	1548	U16	1
Alarm 2 Silenced Status	1550	U16	1
Alarm 2 Clearable Status	1552	U16	1
Alarm 2 Clear Request	1554	U16	1
Alarm 2 Silence Request	1556	U16	1
Alarm 2 Working Process Value	1566	F32LE	1
Alarm 2 Working Set Point	1568	F32LE	1
Alarm 3 High Set Point	1580	F32LE	1
Alarm 3 Low Set Point	1582	F32LE	1
Monitor Alarm 3 State	1596	U16	1
Alarm 3 Latched Status	1598	U16	1
Alarm 3 Silenced Status	1600	U16	1
Alarm 3 Clearable Status	1602	U16	1
Alarm 3 Clear Request	1604	U16	1
Alarm 3 Silence Request	1606	U16	1
Alarm 3 Working Process Value	1616	F32LE	1
Alarm 3 Working Set Point	1618	F32LE	1
Alarm 4 High Set Point	1630	F32LE	1
Alarm 4 Low Set Point	1632	F32LE	1
Monitor Alarm 4 State	1646	U16	1
Alarm 4 Latched Status	1648	U16	1
Alarm 4 Silenced Status	1650	U16	1
Alarm 4 Clearable Status	1652	U16	1
Alarm 4 Clear Request	1654	U16	1
Alarm 4 Silence Request	1656	U16	1
Alarm 4 Working Process Value	1666	F32LE	1
Alarm 4 Working Set Point	1668	F32LE	1
Loop Control Mode	1880	U16	1
Monitor Control Mode Active	1882	U16	1
Loop Heat Algorithm	1884	U16	1
Loop Cool Algorithm	1886	U16	1
Loop Cool Output Curve	1888	U16	1
Loop Heat Proportional Band	1890	F32LE	1
Loop Cool Proportional Band	1892	F32LE	1
Loop Time Integral	1894	F32LE	1
Loop Time Derivative	1896	F32LE	1
Loop Dead Band	1898	F32LE	1
Loop Heat Hysteresis	1900	F32LE	1
Loop Cool Hysteresis	1902	F32LE	1
Monitor Heat Power	1904	F32LE	1
Monitor Cool Power	1906	F32LE	1
Monitor Control Loop Output Power	1908	F32LE	1
Loop TRU-TUNE+ Enable	1910	U16	1
Loop TRU-TUNE+ Band	1912	U16	1
Loop TRU-TUNE+ Gain	1914	U16	1
Loop Autotune Aggressiveness	1916	U16	1
Loop Autotune Set Point	1918	F32LE	1
Loop Autotune Request	1920	U16	1
Loop Open Loop Detect Enable	1922	U16	1
Loop Open Loop Detect Time	1924	U16	1
Loop Open Loop Detect Deviation	1926	F32LE	1
Loop Error Status	1928	U16	1
Loop Error Clear	1930	U16	1
Loop Closed Loop Set Point	2160	F32LE	1
Loop Open-Loop Set Point	2162	F32LE	1
Loop Low Set Point	2164	F32LE	1
Loop High Set Point	2166	F32LE	1
Loop Set Point Low Limit Open Loop	2168	F32LE	1
Loop Set Point High Limit Open Loop	2170	F32LE	1
Monitor Closed Loop Active Set Point	2172	F32LE	1
Monitor Open Loop Active Set Point	2174	F32LE	1
Loop Idle Set Point	2176	F32LE	1
Monitor Bumpless Set Point	2178	F32LE	1
Loop Manual Power	2180	F32LE	1
Loop User Failure Action	2182	U16	1
Loop Input Error Failure	2184	U16	1
Loop Ramp Action	2186	U16	1
Loop Ramp Scale	2188	U16	1
Monitor Ramp Active Set Point	2190	F32LE	1
Loop Ramp Rate	2192	F32LE	1
Monitor Ramp Target Set Point	2198	F32LE	1
Loop Remote Enable	2200	U16	1
Loop Remote Set Point Type	2202	U16	1
Comms 1 Address Standard Bus	2480	U16	1
Comms 1 Address Modbus	2482	U16	1
Comms 1 Baud Rate Modbus	2484	U16	1
Comms 1 Parity Modbus	2486	U16	1
Comms 1 Temperature Units	2490	U16	1
Comms 1 Nonvolatile Memory Save	2494	U16	1
Comms 2 Address Standard Bus	2500	U16	1
Comms 2 Address Modbus	2502	U16	1
Comms 2 Baud Rate Modbus	2504	U16	1
Comms 2 Parity Modbus	2506	U16	1
Comms 2 Temperature Units	2510	U16	1
Comms 2 Protocol	2512	U16	1
Profile Status Start	2520	U16	1
Profile Status Active Profile	2524	U16	1
Profile Status Active Step	2526	U16	1
Profile Status Active Set Point	2528	F32LE	1
Global Guaranteed Soak Enable	2530	U16	1
Global Guaranteed Soak Deviation	2532	F32LE	1
Global Profile Type	2534	U16	1
Profile Status Step Time Remaining	2536	F32LE	1
Profile Status Jump Count Remaining	2538	U16	1
Profile Status Action Request	2540	U16	1
Profile Status Active Target Set Point	2542	F32LE	1
Profile Status Step Type	2544	U16	1
Profile Status Active Event Output 1	2546	U16	1
Profile Status Active Event Output 2	2548	U16	1
Step 1 Type	2570	U16	1
Step 1 Target Set Point	2572	F32LE	1
Step 1 Hours	2574	U16	1
Step 1 Minutes	2576	U16	1
Step 1 Seconds	2578	U16	1
Step 1 Rate	2580	F32LE	1
Step 1 Event Output 1	2582	U16	1
Step 1 Event Output 2	2584	U16	1
Step 1 Wait Event 1	2586	U16	1
Step 1 Wait Event 2	2588	U16	1
Step 1 Wait For Process Value	2590	F32LE	1
Comms 1 Protocol	2592	U16	1
Step 1 Jump Count	2594	U16	1
Step 1 End Type	2596	U16	1
Step 1 Wait For Process Instance	2598	U16	1
Step 2 Type	2620	U16	1
Step 2 Target Set Point	2622	F32LE	1
Step 2 Hours	2624	U16	1
Step 2 Minutes	2626	U16	1
Step 2 Seconds	2628	U16	1
Step 2 Rate	2630	F32LE	1
Step 2 Event Output 1	2632	U16	1
Step 2 Event Output 2	2634	U16	1
Step 2 Wait Event 1	2636	U16	1
Step 2 Wait Event 2	2638	U16	1
Step 2 Wait For Process Value	2640	F32LE	1
Step 2 Jump Step	2642	U16	1
Step 2 Jump Count	2644	U16	1
Step 2 End Type	2646	U16	1
Step 2 Wait For Process Instance	2648	U16	1
Step 40 Type	4520	U16	1
Step 40 Target Set Point	4522	F32LE	1
Step 40 Hours	4524	U16	1
Step 40 Minutes	4526	U16	1
Step 40 Seconds	4528	U16	1
Step 40 Rate	4530	F32LE	1
Step 40 Event Output 1	4532	U16	1
Step 40 Event Output 2	4534	U16	1
Step 40 Wait Event 1	4536	U16	1
Step 40 Wait Event 2	4538	U16	1
Step 40 Wait For Process Value	4540	F32LE	1
Step 40 Jump Step	4542	U16	1
Step 40 Jump Count	4544	U16	1
Step 40 End Type	4546	U16	1
Step 40 Wait For Process Instance	4548	U16	1

link settings as documented (unverified): RTU/TCP; default 9600 8N1; unit ID 1; FC 03,05,06,16; Default serial data format is 9600 baud, 8 data bits, no parity, 1 stop bit. Modbus RTU is typically deployed over serial connections, Modbus TCP over Ethernet.

bench facts as documented (unverified)

terminals	Slot C (A to CA, B to CB, GND to CC)
A/B polarity	A to CA, B to CB
connector	Slot C
wiring notes	EIA-485 converter connects to slot C.
response timeout	1000 ms
inter-frame delay	0 ms
protocol notes	Excessive writes to the PM may cause premature EEPROM failure. EEPROM is rated for 1,000,000 writes. By default, settings made through the network are not saved to nonvolatile memory.
model register	0
firmware register	2
identification notes	Hardware ID is at register 0, Firmware ID is at register 2, Software Revision is at register 4.
doc revision	0600-0056-0000 Rev. B, November 2007

field reports — community-sourced, unverified (checked 2026-06-11)

By default, the controller uses Low Word-High Word (LSW, MSW) order for 32-bit floating-point values, which is the opposite of standard Modbus big-endian word order. This causes incorrect decoding (e.g., reading values like 0.92E28 instead of the actual temperature) unless the word order is swapped in the controller's Setup menu ([M;hL]) or the client software. [source]
Watlow documentation references registers using 1-based numbering, but the Modbus protocol uses 0-based addressing. This creates a discrepancy between document values and protocol addresses, requiring users to subtract 1 from the documented register number. [source]
The Watlow EZ-ZONE PM features two sets of identically-labeled A/B connector terminals. Connecting to the wrong pair causes immediate communication failure. [source]
confirmed: Document revision 0600-0056-0000 Rev. B, November 2007 corresponds to the EZ-ZONE PM Controller Communications Manual — confirmed by vendor document search [1.1.1]
confirmed: Default serial data format is 9600 baud, 8 data bits, no parity, 1 stop bit — confirmed by EZ-ZONE PM Controller Communications Manual
confirmed: Default unit ID is 1 — confirmed by EZ-ZONE PM Controller Communications Manual
confirmed: EIA-485 converter connects to slot C with terminals A to CA, B to CB, and GND to CC — confirmed by EZ-ZONE PM Controller Communications Manual and wiring diagrams
confirmed: Hardware ID is at register 0, Firmware ID is at register 2, and Software Revision is at register 4 — confirmed by EZ-ZONE PM Controller Communications Manual
confirmed: EEPROM is rated for 1,000,000 writes and by default settings made through the network are not saved to nonvolatile memory — confirmed by EZ-ZONE PM Controller Communications Manual
confirmed: Analog Input 1 Process Value is at register 360, Analog Input 2 Process Value is at register 440 — confirmed by EZ-ZONE PM Controller Communications Manual and TestEquity Modbus map
confirmed: Closed Loop Set Point is at register 2160 — confirmed by EZ-ZONE PM Controller Communications Manual

The trust ladder

Each rung states what it proved and what it did not. Gray until proven; green is earned by hardware only.

generated — A prompt produced it. Unproven — anyone can regenerate this.
structure-verified — Decode path is structurally sound (addresses, widths, finite values). Does NOT prove word order or scaling.
coherence-checked — Round-trips through a real Modbus stack with no overlapping addresses and a word-order-sensitive codec — the map is internally coherent and wire-decodable. Does NOT prove byte-order or scaling match a real device: the emulator is seeded from the map's own types, so a uniformly wrong byte-order still round-trips. Only hardware-verified confirms byte-order/scale on the wire.
hardware-verified (software-key) x1 — Matched a real device with operator-attested readings as ground truth — the only rung that confirms word order + scaling on the wire.

Device not here? Upload its manual and get a checked map back. It's free.

Want it confirmed against your own device? Order hardware verification. If it doesn't check out, you don't pay.

Building on a lot of devices? License the library — machine-readable maps, the firmware matrix, and API access.