Register map(s) for this device, each at the trust rung it earned. Addresses are 0-based as on the wire; word order and scaling are only confirmed at the hardware-verified rung.
Read + decoded cleanly over a real network vs an independent third-party Modbus test server (transport and framing; reads are remapped into the server's register window, so the map's own addresses are NOT exercised). Does NOT prove word order/scaling against the actual device.
| point | address (0-based) | type | scale | unit |
|---|---|---|---|---|
| rating_input_voltage | 1025 | U16 | 1 | |
| rating_input_frequency | 1026 | U16 | 0.1 | |
| rating_output_voltage | 1027 | U16 | 1 | |
| rating_output_frequency | 1028 | U16 | 0.1 | |
| rating_va | 1029 | U16 | 10 | |
| rating_output_power | 1030 | U16 | 10 | |
| rating_battery_voltage | 1039 | U16 | 1 | |
| seconds_on_battery | 1057 | U16 | 1 | |
| estimated_minutes_remaining | 1058 | U16 | 1 | |
| estimated_charge_remaining | 1059 | U16 | 1 | |
| battery_voltage | 1060 | U16 | 0.1 | |
| battery_current | 1061 | U16 | 0.1 | |
| temperature | 1062 | U16 | 1 | |
| battery_level | 1063 | U16 | 1 | |
| negative_battery_voltage | 1065 | U16 | 0.1 | |
| negative_battery_current | 1066 | U16 | 0.1 | |
| negative_battery_temperature | 1067 | U16 | 1 | |
| negative_battery_level | 1068 | U16 | 1 | |
| input_frequency_1 | 1073 | U16 | 0.1 | |
| input_voltage_1 | 1074 | U16 | 0.1 | |
| input_current_1 | 1075 | U16 | 0.1 | |
| input_power_1 | 1076 | U16 | 10 | |
| input_frequency_2 | 1077 | U16 | 0.1 | |
| input_voltage_2 | 1078 | U16 | 0.1 | |
| input_current_2 | 1079 | U16 | 0.1 | |
| input_power_2 | 1080 | U16 | 10 | |
| input_frequency_3 | 1081 | U16 | 0.1 | |
| input_voltage_3 | 1082 | U16 | 0.1 | |
| input_current_3 | 1083 | U16 | 0.1 | |
| input_power_3 | 1084 | U16 | 10 | |
| output_frequency | 1091 | U16 | 0.1 | |
| output_voltage_1 | 1093 | U16 | 0.1 | |
| output_current_1 | 1094 | U16 | 0.1 | |
| output_power_1 | 1095 | U16 | 10 | |
| output_load_1 | 1096 | U16 | 1 | |
| output_voltage_2 | 1097 | U16 | 0.1 | |
| output_current_2 | 1098 | U16 | 0.1 | |
| output_power_2 | 1099 | U16 | 10 | |
| output_load_2 | 1100 | U16 | 1 | |
| output_voltage_3 | 1101 | U16 | 0.1 | |
| output_current_3 | 1102 | U16 | 0.1 | |
| output_power_3 | 1103 | U16 | 10 | |
| output_load_3 | 1104 | U16 | 1 | |
| bypass_frequency | 1110 | U16 | 0.1 | |
| bypass_voltage_1 | 1112 | U16 | 0.1 | |
| bypass_current_1 | 1113 | U16 | 0.1 | |
| bypass_power_1 | 1114 | U16 | 10 | |
| bypass_voltage_2 | 1115 | U16 | 0.1 | |
| bypass_current_2 | 1116 | U16 | 0.1 | |
| bypass_power_2 | 1117 | U16 | 10 | |
| bypass_voltage_3 | 1118 | U16 | 0.1 | |
| bypass_current_3 | 1119 | U16 | 0.1 | |
| bypass_power_3 | 1120 | U16 | 10 | |
| bypass_sts_temperature | 1124 | U16 | 1 | |
| environment_temperature | 1129 | U16 | 1 |
| terminals | Pin 1: D+ (T+), Pin 2: D- (T-), Pin 3: GND for RS-485. Pin 4: TxD, Pin 5: RxD, Pin 6: GND for RS-232. |
| A/B polarity | D+, D- |
| termination | Enable/Disable RS-485 Termination Resistor via switch SWZ3-7 |
| sentinel values | 0xFFFF in Input Registers represents that your UPS does not support the address. |
| model register | 0x0507 |
| firmware register | 0x050E |
Each rung states what it proved and what it did not. Gray until proven; green is earned by hardware only.
Have a device that isn't here? Upload its register map — generation is free, and the connector earns its rung by being proven, not claimed.
Need it proven on your own device? Hardware verification — if it doesn't verify, you don't pay.
Building a platform? License the verified library — machine-readable maps, firmware matrix, API access.