33-00120—01 - webs-ax photo id guide

WEBs-AX Photo ID GuideVERSION 2.3

TECHNICAL DOCUMENT

31-00120-01

WEBs-AX Photo ID Guide

Confidentiality NoticeThe information contained in this document is confidential information of Honeywell. Such information and the software described herein, is furnished under a license agreement and may be used only in accordance with that agreement.

The information contained in this document is provided solely for use by Honeywell employees, licensees, and system owners; and, except as permitted under the below copyright notice, is not to be released to, or reproduced for, anyone else.

While every effort has been made to assure the accuracy of this document, Honeywell is not responsible for damages of any kind, including without limitation consequential damages, arising from the application of the information contained herein. Infor-mation and specifications published here are current as of the date of this publication and are subject to change without notice. The latest product specifications can be found by contacting our corporate headquarters, Richmond, Virginia.

Trademark NoticeBACnet and ASHRAE are registered trademarks of American Society of Heating, Refrigerating and Air-Conditioning Engineers. Microsoft, Excel, Internet Explorer, Windows, Windows Vista, Windows Server, and SQL Server are registered trademarks of Microsoft Corporation. Oracle and Java are registered trademarks of Oracle and/or its affiliates. Mozilla and Firefox are trade-marks of the Mozilla Foundation. Echelon, LON, LonMark, LonTalk, and LonWorks are registered trademarks of Echelon Corporation. Honeywell, JACE, Niagara Framework, NiagaraAX Framework, and Sedona Framework are registered trademarks, and Workbench, WorkPlaceAX, and AXSupervisor, are trademarks of Honeywell. All other product names and services mentioned in this publication that is known to be trademarks, registered trademarks, or service marks are the property of their respective owners.

Copyright and Patent NoticeThis document may be copied by parties who are authorized to distribute Honeywell products in connection with distribution of those products, subject to the contracts that authorize such distribution. It may not otherwise, in whole or in part, be copied, photo-copied, reproduced, translated, or reduced to any electronic medium or machine-readable form without prior written consent from Honeywell.

Copyright © 2016 Honeywell. All rights reserved.

The product(s) described herein may be covered by one or more U.S. or foreign patents of Honeywell.

CONTENTS

Document Change Log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . iii

Related documentation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . iii

About Photo ID . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1–1Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1–1

Hardware requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1–1

Software requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1–2

Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2–1Required names . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2–1

Configure Windows for secure communication between the Enterprise Security station and the Photo ID station . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2–3

Install a root certificate in the Windows trust store . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2–3Confirm that the correct certificate is in the Windows trust store . . . . . . . . . . . . . . . . . . . . . 2–4Disable the use of self-signed certificates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2–5

User setup for the Photo ID network . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2–5Set up a user . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2–5

Asure ID software . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2–5Install and license the Asure ID software on the Photo ID station . . . . . . . . . . . . . . . . . . . . 2–5

Test template . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2–6Run Asure ID and create a test template . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2–6

EntsecAsureID installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2–6Install EntsecAsureID . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2–7Set up credentials for the Photo ID station side of the network connection . . . . . . . . . . . . . 2–7Add the Obix Network to the Enterprise Security station . . . . . . . . . . . . . . . . . . . . . . . . . . . 2–7Set up an Obix Client on a Supervisor for Photo ID station (Legacy Only) . . . . . . . . . . . . . 2–8Set up the Photo ID feature as a network driver . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2–10Install the default Asure ID client (not legacy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2–11Install the legacy Asure ID client (only if not using the default) . . . . . . . . . . . . . . . . . . . . . 2–12Configure Asure ID alarms . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2–14

Setup your Photo ID system . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3–1Templates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3–1

Add one or more badge templates to the station . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3–1Bind template data fields to database data fields . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3–2Assign a template to a badge . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3–4

Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3–5Configure Photo ID options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3–5

Configuration troubleshooting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3–5

Create a photo ID badge . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3–5Take the photo . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3–5

Capture a photo and associate it with a badge . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3–6Importing a photo . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3–7Crop a photo . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3–8

Badge printing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3–10Print one or more badges . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3–10

Badge creation troubleshooting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3–11

WEBs-AX Photo ID Guidei

Set up additional options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3–11Configure photo ID timeout . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3–11Monitor door entries . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3–12Display the photo associated with a person record on a history report . . . . . . . . . . . . . . . 3–15

Photo ID troubleshooting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3–16

Reference . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .4–1EntsecAsureID menu . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4–1

Settings window . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4–2

Add Client window . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4–2

Add client properties . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4–3Asure ID properties . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4–3Photo ID Configure window . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4–4

i i

PREFACE

Preface contents

Document Change LogInitial release of this material as a separate document: September 30, 2016

Related documentationEnterprise Security Guide

WEBs-AX Photo ID Guidei i i

Related documentation

i v

1CHAPTER

About Photo IDThis feature consists of several applications that together manage the issuing of photo ID badges and monitor building entry.

The Photo ID system runs in the Enterprise Security station and communicates with one or more dedicated Photo ID station(s) located in a security or personnel office.

Figure 1-1 System architecture

In large installations, the Photo ID system may run in an Enterprise Security Station (PC) in a secure location, and communicate with one or more dedicated, remote Photo ID Stations located in a security or personnel office. This configuration offers the best solution for protecting the Enterprise Security database from intruders. The connections between the Enterprise Security Station and a remote Photo ID Station communicate via the Internet or local area network..

Smaller installations may run the Enterprise Security Station and the Photo ID Station on the same computer.

FeaturesNiagara Enterprise Security Photo ID supports these features:

One photo is stored per person. The Photo ID system supports these features:

• Both JPG and PNG image formats• Image capture using a portrait camera• Image import• Aspect ratio definition

Note: The type of cards you can use, including cards with magnetic stripes, depends on the capabil-ities of your badge printer and card readers.

Hardware requirementsHardware requirements include having an Enterprise Security station already installed at your facility.

WEBs-AX Photo ID Guide 31-00120—011 – 1

Software requirements About Photo ID

September 30, 2016

• At least one PCThis PC serves as a Photo ID station. You may run the Photo ID station on the same PC that runs the Enterprise Security station. However, this is not recommended because the PC or server running the Enterprise Security station should be kept in a secure area and not shut down or restarted by anyone but a qualified system administrator.

• USB portrait camera• Badge printer

Refer to the documentation included with the Asure ID Software for a list of compatible printers. Most Fargo® printers are compatible with Asure ID software.

Software requirementsThe Enterprise Security station (Supervisor) requires:

• A Honeywell license to run Photo ID. The following must appear in this license:feature name="secPhotoId" expiration="never" device.lim-it="1" asureId.limit="1"

• A Photo ID license for each Photo ID station.

Each Photo ID station requires the following software apps and licenses:

• A browser (such as, Internet Explorer or Mozilla Firefox) or Java Web Start.• Asure ID SDK

A trial version of this software is provided with your Enterprise Security software build. You can use it to create templates and import photos, but, during the trial period, badges print with text over the design that denotes the trial. To activate the software, purchase a li-cense and activation key from the manufacturer, HID.

Table 1-1 Asure ID requirements

• EntsecAsurIDNo license is required to install the EntsecAsurID applet on a Photo ID station.

• Java 8 U77 or laterThe Photo ID application depends on Java applets. Both a browser and Java Web Start require Java 8 U77.

Note: You should install the versions of EntsecAsureID and Asure ID software provided with the Enterprise Security software build. This version of EntsecAsurID has been tested against the Asure ID software provided. Subsequent releases may not perform with predictable results.

Asure IDversion

Compatiblewith SDK

Upgrade requirements, if any

Solo No Replace with SDK

Express No Replace with SDK

Enterprise No Replace each Photo ID station with SDK

Exchange Yes Install the version of EntsecAsureID software that is provided on the installation CD.

31-00120—01 WEBs-AX Photo ID Guide1 – 2

2CHAPTER

InstallationDue to the variety of apps that make up Photo ID, a number of separate installation proce-dures are required. Following is an ordered list of installation procedures:

1. Set up a secure Windows connection to the Enterprise Security station from the Photo ID station.

2. Set up a user for the Photo ID network in the Enterprise Security station.

3. Install Asure ID on the Photo ID station(s).

4. Run Asure ID and create a test template.

5. Install EntsecAsureID.

6. Add the Obix Network to the Enterprise Security station.

7. Add an Obix client (legacy only).

8. Add the Photo ID Network.

9. Install the default Asure ID client.

10. Install the legacy Asure ID client (legacy only).

11. Configure Asure ID alarms.

Required namesYou will be asked to name various items and create credentials (username and password) during the configuration process. If you have only one Photo ID station you can accept the default names. With multiple stations, you will need to be able to differentiate between them.

Note: For security reasons, do not write the password in the table. Rather write a clue that will help you remember what the password is.

The following table identifies each required item, where it is used, and the default name. Use the column on the right to record your names in advance. For more room, photocopy this table or create your own.

Table 2-1 Required names and credentials

Name Where used When created Default My name/password clue

Photo ID station credentials

Used during the configura-tion process.

This is a special user account set up in the Enterprise Security sta-tion for the purpose of connecting the Photo ID station Asure ID data-base to the Enterprise Security database.

No Default


Required names Installation

September 30, 2016

Obix Network driver Name

Appears as a row in the Remote Driv-ers view.

Entered when you add the driver for the Obix Network on the Enter-prise Security app Remote Drivers view.

Obix Network

Suggestion: use the default name, "Obix Net-work."

Obix Network Lobby (Legacy Device Only)

Used to con-nect to the Photo ID sta-tion

Entered during set up of the Obix Client for each Photo ID station.

The format is:

http://host:port/obix, where: host is the IP address of the Photo ID station, and port is the Obix port. The default is 3000.

Obix Client (Legacy Device only)

Used on a tab on the Obix Network view

Entered when you add an Obix client to the Obix Network in the Enterprise Security app.

Obix Client

Obix Client cre-dentials

Used during the configura-tion process.

This is a special user account set up in the Enterprise Security sta-tion for the purpose of connecting the Photo ID station Asure ID data-base to the Enterprise Security database.

Photo ID Net-work device Name

Used in the Enterprise Security app and on reports.

Entered when you add the driver for the Photo ID Network at the Enter-prise Security app.

Photo ID Network

Suggestion: use the default name, "PhotoID-Network."

Asure ID device Name

Used in the Enterprise Security app.

Entered when you add the Asure ID device at the Enterprise Security app.

Asure ID Device

Suggestion: name the device for the Photo ID sta-tion, printer, location or leave the default (if you have only one Photo ID station).

Photo ID Viewer Name

Used on the Photo ID Viewers view.

Created when you set up a viewer layout on the Photo ID Viewers view

Photo IDViewer

Suggestion: Name the viewer for the layout or for the building. For example, "2 Readers and 2 Cam-eras."

Templates Dis-play Name

Used to assign a tem-plate to a badge.

Entered when you dis-cover your template(s).

The name defaults to the name used when you cre-ated the template.

Suggestion: name the template for the tenant company.



Installation Configure Windows for secure communication between the Enterprise Security station and the Photo ID

station

Configure Windows for secure communication between the Enterprise Security station and the Photo ID station

To prevent the compromise of employee data during badge creation, a secure communi-cation link is required between the Enterprise Security station (as the server) and the EntsecAsureID software (as the client). Without this secure link, EntsecAsureID will not connect to the Enterprise Security station.

PKI (Public Key Infrastructure), which uses certificates to verify server identity and encrypt data transmission, provides this secure link. If the station’s server certificate is signed by an external CA (Certificate Authority), such as Verisign and Thawte, EntsecA-sureID should connect to the Enterprise Security station without requiring additional configuration.

Note: Having a recognized CA sign all server certificates provides the highest level of PKI security and requires the least amount of system preparation because the root certificates for recog-nized Certificate Authorities already reside in the station’s Windows trust store.

If, instead of using an external CA, you are your own CA, your root certificate was used to sign the Enterprise Security station’s server certificate. To connect EntsecAsureID to the Enterprise Security station, you must import your root CA certificate into the Windows trust store.

To understand more about communication security, learn how to create root and server certificates, and how to function as your own CA, see the Station Security Guide.

Install a root certificate in the Windows trust store

This procedure explains how to install a root CA certificate in the Windows trust store of an Enterprise Security station.

Prerequisites: Using Workbench, you have exported the root CA certificate into some directory. (The extension for a root certificate file name is .pem.) The EntsecAsureID program is installed but not running.

Step 1 To begin, open a Windows command prompt by clicking Start > All Apps > Windows System > Command prompt.

Step 2 At the prompt, type certmgr.msc and press Enter.

Badge Descrip-tion

Used to select the badge

Entered on the Person-nel > Badge tab.

None



Configure Windows for secure communication between the Enterprise Security station and the Photo ID stationInstal-

lation

The Windows Certificate Manager (certmgr) window opens.

Step 3 In the column to the right, right-click the Trusted Root Certificate Authorities folder and click All Tasks > Import.

The Certificate Import Wizard window opens.

Step 4 Follow the steps of the wizard to browse to the location of the root certificate .pem file, select the file and click Open.

Confirm that the correct certificate is in the Windows trust store

The correct file is in the Windows trust store if the root certificate Subject field is the same as the EntsecAsureID Host name.

Step 1 Using the Windows Certificate Manager, open the Trusted Root Certification Authorities > Certificates folder.

Step 2 Locate the root certificate and double-click to open it.

Step 3 To view the certificate Subject field, click the Details tab and scroll down to view the Subject field.


Installation User setup for the Photo ID network

September 30, 2016

Step 4 To view the Asure ID Host field, start EntsecAsureID and open the Settings window.

Step 5 The Main Communication Settings Host field identifies the path to the server host.

Step 6 Confirm that this Host field is the same as the Subject field in the root CA certificate.

Disable the use of self-signed certificates

Once a secure connection exists between EntsecAsureID and the Enterprise Security station you no longer need self-signed certificates. In fact, continuing to allow their use could constitute a breach of security protocol. Self-signed certificates cannot verify server identity.

Step 1 To disable self-signed certificates, locate the EntsecAsureID application program (usually installed in the Programs folder on drive C:).

Step 2 Right-click the program file and click Settings.

The Settings window opens.

Step 3 Remove the check mark next to the Allow Self-Signed Certificates option.

Step 4 Restart EntsecAsureID.

User setup for the Photo ID networkYou perform this procedure in the Enterprise Security station.

Set up a user

Step 1 In the Enterprise Security station, navigate to System > User Management > Roles.

Step 2 Create a role for the Photo ID user. Make sure to grant full access to the Photo ID Network and Badge Creation.

Step 3 Navigate to System > User Management > Users.

Step 4 Create a user for the Photo ID client and assign the role you created above.

Asure ID software

Install and license the Asure ID software on the Photo ID station

Step 1 Install the Asure ID software included with the Enterprise Security software build on the computer used for the Enterprise Security station.

The setup file is at:

/Tridium_Enterprise_Security-2.x.x/HID_Asure_ID/asure_id_set-up_v7.6.3.22.exe

The Enterprise Security folder name may be different depending upon where you purchased the software.

To install Asure ID on a computer other than the one used for the Enterprise Security station, copy the setup file to the computer used for the Photo ID station.


Test template Installation

September 30, 2016

Step 2 Select English as the language during the installation process.

Step 3 When prompted, enter the license key found on the CD package you received with your Asure ID order.

This license is for the Developer Edition.

Test template

Run Asure ID and create a test template

Step 1 Start Asure ID.

The default user ID is admin; the default password is admin.

Step 2 Create a sample template to test the system setup.

The Asure ID software documentation explains how to do this.

Use field names that are similar to the database names in the Enterprise Security database. for example: LastName, FirstName, Image, etc. Every data field you create in the badge template must be present in the Enterprise Security database or it will not be printed on the badge.

Step 3 Make a note of the width and height of the photo in the Placement section of the Photo Properties.

You will need this information when you import and crop photos.

The default ratio for Enterprise Security Photo ID is 3:4 (width:height).

Step 4 Make sure to select the correct Format type for the photos you will be importing.

Even though Asure ID supports several formats, Enterprise Security supports only .jpg and .png.

Step 5 Save the template.

EntsecAsureID installationNote: Asure ID configures the environment for the EntsecAsureID app. Therefore, you must install

and run Asure ID once on the Photo ID station before running the EntsecAsureID app (Entse-cAsureIDSetup.exe). If you start EntsecAsurID before running Asure ID, you must close and re-install EntsecAsurID after you run Asure ID for the first time.


Installation EntsecAsureID installation

September 30, 2016

Install EntsecAsureID

Step 1 Log in to the Photo ID station with Windows Administrator privileges.

Step 2 Run the setup file.

This file is located in the installation software build at:

/Tridium_Enterprise_Security-2.x.x/HID_Asure_ID/entsecAsure-IDSetup_2_3_3.exe

The Enterprise Security folder name may be different depending on where you purchased the software. Copy this file to the Photo ID station if the station is on a separate computer from the Enterprise Security station.

Step 3 At the Photo ID station, double-click EntsecAsureIDSetup.exe.

Step 4 Follow the installation wizard.

The app installs in the specified folder and displays the EntsecAsurID icon ( ) in the system tray.

Note: For Windows® Vista or Windows® 7 systems: you must disable User Account Control Settings (UAC) for the system tray applet to launch (appear in the tray) when the operating system starts.

Set up credentials for the Photo ID station side of the network connection

Step 1 Right-click the EntsecAsureID icon in the system tray and click Settings.

Step 2 The Settings window opens.

Note: The Windows Firewall may need to be altered to allow the selected port (in this case 3000) to pass through the station security.

Step 3 Create a User name and a Password for Obix communications between Photo ID station and the Enterprise Security station.

Add the Obix Network to the Enterprise Security station

This procedure describes how to use a browser connection to the Enterprise Security station to configure the connection between the Enterprise Security station app and the Photo ID station.

Step 1 In the Enterprise Security app, click System Setup > Remote Devices > Remote Drivers


EntsecAsureID installation Installation

September 30, 2016

The Remote Drivers view opens.

Step 2 Click the Manage Drivers button.

The Manage Drivers menu opens.

Step 3 Click Add.

The Add Driver menu opens.

Step 4 Select Obix Network and click Ok.

The Add Driver window opens.

Step 5 Name the Obix Network driver and click Ok.

Step 6 Check the Status column on the Remote Drivers view. It should read, "{ok}."

Set up an Obix Client on a Supervisor for Photo ID station (Legacy Only)

Note: This procedure is for use with the Asure ID Legacy Device only. No Obix Client is required on the Supervisor when you using the default Asure ID Client Device.

This procedure describes how to set up an Obix Client for each Photo ID station connected to the Enterprise Security station via the Obix network.

Step 1 Double-click the Obix Network row you just added.



September 30, 2016

The Obix Network view opens.

Step 2 Click the Manage Clients button.

The Manage Clients menu opens.

Step 3 Click Add.

The Add Client menu with Obix Client selected opens.

Step 4 Click Ok.

The Add Client window opens.

The following fields configure the Obix client, which runs in the Enterprise Security station.

• NameIs a name you can use to refer to the location of the Photo ID station.

• Lobby



September 30, 2016

Is the root of a server Obix object tree. For more information about the lobby, see the Ni-agaraAX Help system.

• Auth UserIs the user name that is part of the credentials required to connect the Photo ID station to the Enterprise Security station via the Obix network. The default is admin.

• PasswordAccess to the Obix network is password protected. This is the password you enter when configuring the Obix network using EntsecAsureID in the station.

Step 5 Fill in the properties and click Ok.

Step 6 Select the Obix Client tab, enter the Lobby location (described below), and then click Ok:

http://host:port/obix

where:

• host is the IP address of the Enterprise Security station.• port is the Obix port. The default is 3000.Note the following about formatting the Lobby URL:\

• FormatThe format of the Lobby URL is: http://IP_Address/Computer-Name:Port/obix

• IP Address or Computer NameThis refers to the Photo ID station IP address - or you can use the computer name when DHCP is enabled on the station

• PortThis refers to the port configured in the EntsecAsureID settings on the Photo ID station. The default is 3000.

Example An example might be as follows:

http://myPcName:3000/obix

where myPcName is the name of the computer where the Photo ID software is installed.

Step 7 Specify and confirm the password and click the Save button.

The software creates the Obix Client tab.

Step 8 To verify that the client is functioning correctly, click the Ping button.

The result should be a successful ping.

Step 9 Click the Home tab to return to the Enterprise Security home view.

Set up the Photo ID feature as a network driver

This procedure describes how to add a Photo ID network to the station.

Step 1 In the Enterprise Security app, click System Setup > Remote Devices > Remote Drivers

Step 2 Click the Manage Drivers button and select Add and click OK in the Manage Drivers window.

The Manage Drivers (Add Driver) window opens.

Step 3 Select Photo ID Network and click Ok.

31-00120—01 WEBs-AX Photo ID Guide2 – 1 0


September 30, 2016

The Add Driver window opens.

Step 4 Name the network, as desired and click Ok in the Add Driver window.

The Photo ID network is added and the Restart Station message opens.

Step 5 Click Ok to clear the window.

The Status column for the Photo ID network indicates "{fault}" as the station restarts (could take several minutes). During restart the station Station Display Name in the upper right of the browser view dims. When the station is running again the Station Display Name appears normal.

Install the default Asure ID client (not legacy)

This procedure describes how to add the Asure ID function as a device to the station. You will need to perform this procedure for each Photo ID station on the network.

Note: The following steps describe how to add the Asure ID Client using the Discover method. You can also add the device using the Manage Devices window. If you want to use the Asure ID Legacy Device, you MUST use the Manage Devices window method and manually add and configure the device. Discovery is not available for the Asure ID Legacy Device.

Step 1 In the Enterprise Security app, click System Setup > Remote Devices > Remote Drivers.

The Remote Drivers view opens.

Step 2 In the Remote Drivers view, confirm that the Status column for Photo ID Network indicates, "{ok}."

Step 3 Open the Photo ID Network view by double-clicking on the Photo ID Network row of the view.

Step 4 Click the Discover button to populate the Discovered pane, select the desired Asure ID Client Device row in the pane and click the Add button, as shown below.



September 30, 2016

The Add window opens.

Step 5 In the Add window complete the following fields and click the Ok button:

The device is added and displays in the Photo ID Network table view.

Install the legacy Asure ID client (only if not using the default)

This procedure adds the Asure ID function as a device to the station and associates the Obix Client with the Asure ID device. You can use this procedure for each Photo ID station on the network.

Note: The following steps describe how to add the Asure ID Client or the Asure ID Legacy Device using the Manage Devices window. You can add the Asure ID Client (not the Legacy Device) using the Discovery process, so this process is not normally used for adding the EntsecA-sureID device. If you want to use the Asure ID Legacy Device, you MUST use the following method using the Manage Devices window to add and configure the device.

Step 1 In the Enterprise Security app, click System Setup > Remote Devices > Remote Drivers and confirm that the Status column for the Photo ID Network indicates, "{ok}.".

Step 2 Open the Photo ID Network view by double-clicking on the Photo ID Network row.

Step 3 Click the Manage Devices button, select the Add option and click the Ok button on the Manage Devices menu.

The Add Device window opens.

Step 4 Choose one of the following device options and click Ok:

• Asure ID Client DeviceThis is the default Asure ID Client device. This option does not require that the Enterprise Security station have an Obix Client device. However, make sure that the “Enable Legacy Obix Server” option is NOT selected in the Entsec EntsecAsureID application.

• Asure ID Legacy DeviceOnly use this device if you must support the older Asure ID Client Device. This device re-quires that the Enterprise Security station have an Obix network with an Obix Client de-vice. For this option, make sure that the “Enable Legacy Obix Server” option IS selected in the Entsec EntsecAsureID application.



September 30, 2016

The Add Device window opens.

Step 5 Enter a name for the Asure ID device and click Ok.

If you have multiple Photo ID stations, choose a name based on the location of each station.

Note: For Asure ID Legacy Device, if you have an oBIX Client already configured, select it from the Obix Client field now. If not, you can select it later in this procedure.

Asure ID software is now represented in the Enterprise Security station as a device. At this point its status is may be "{down}."

Step 6 Double-click the Asure ID Device row.

The Asure ID Device properties view opens.

Configure the fields.

WEBs-AX Photo ID Guide 31-00120—012 – 1 3


September 30, 2016

Note: If you did not assign a Client in an earlier step, the field displays None. Use this field (click the >> button) to open the Ref Chooser and assign an Obix Client now.

Step 7 Click the Save button.

Step 8 Click the Photo ID Network button to return to the network view. The Asure ID Device Status should be "{ok}."

Configure Asure ID alarms

This procedure demonstrates how to further configure the alarm information collected at the Enterprise Security station regarding the Photo ID station.

Note: This alarm indicates that communication is NOT active. For example, if the photo ID station is a notebook PC that only gets started to take pictures, you should not use this alarm.

Step 1 On the Photo ID Network view, double-click the Asure ID Device row.

Step 2 Click the chevron next to Alarm Source Info.

The view expands to display alarm options.

Step 3 Configure alarm text as desired.

The Video Setup button enables video.


3CHAPTER

Setup your Photo ID system

Templates

Add one or more badge templates to the station

Badge templates are created and stored as template files using the Asure ID software. This procedure describes how to import a template that has already been created and add it to a station. The following is an example of a template created using the Asure ID software appli-cation.

Step 1 Click the Templates tab.

The Template Manager view opens.

Step 2 Click the Discover button.


Templates Setup your Photo ID system

September 30, 2016

The template you created opens in the Discovered pane at the bottom of the view.

Step 3 Select the template row in the Discovered pane and click the Add button.

The Template name window opens.

The Display Name defaults to the name you used when you created the template using the Asure ID software. The Tenants field associates the template with a specific company or other entity.

Note: A template may be associated with any number of tenants.

Step 4 Click Ok.

The selected template is added to the station.

Bind template data fields to database data fields

This procedure discovers the template data fields and binds them to the equivalent database data fields.

Step 1 Double-click on the newly added template.

The Template view opens, this time with three tabs: Template Data, Tenants, and Badges.


Setup your Photo ID system Templates

September 30, 2016

Step 2 Click the Discover button.

The Discovered pane shows the fields you set up previously using the Asure ID software.

Step 3 Select the field row and click the Add button.

The Add window opens.

Step 4 In the Add window, you can accept the default binding (click Ok) or, change the Data Binding using the two option lists.

Note: You must bind each field individually, but you only need to do this once.

The first option list provides the set of options for the second option list. So, for example, if you want to “data bind” a person’s department you would select “Person” in the first field. The Person option includes Department (and other options) in the second field. Then you can select “Department” in the second option list.

When you add the Photo field, Image Ratio and Image Format fields appear in the Add window. You can specify these parameters, as needed.


Templates Setup your Photo ID system

September 30, 2016

Step 5 Configure the binding, enter the aspect ratio (for Photo fields) you used with you created the template and click Ok.

When finished, the Template Data database view reflects the new values in its Data Binding column.

Assign a template to a badge

This procedure associates a template with a badge.

Step 1 From the home view, click Personnel > Badges tab.

The Badge tab opens.

Step 2 Add one or more badges by clicking the Add button or by scanning the badges

How to add a badge is explained in detail elsewhere in this manual. For example, if you add an individual badge manually, the following view provides the Template property.

The badge Ref Chooser opens.

Step 3 Click the chevron next to the Template property.

The Ref Chooser window opens.

Step 4 Select the badge, click Ok and click the Save button.


Setup your Photo ID system Options

September 30, 2016 Configuration troubleshooting

Options

Configure Photo ID options

The Enterprise Security app allows you to display the photo associated with an individual employee badge side-by-side with the feed from a surveillance video camera. Through the Enterprise Security app you may add and configure all properties related to network device setup, such as how long to leave the photo up.

Step 1 From the home view, click Photo ID and click the configure button.

The Configure window opens.

Step 2 Change the parameters as necessary and click Ok.

Configuration troubleshootingI changed a property, but it did not change in the database. Why?

Make sure that you saved the change before leaving the view.

I cannot connect to my Photo ID station. Why?

Make sure that you have a good connection from the Supervisor to the Photo ID hostplatform. If the Photo ID platform does not have a fixed IP address., the address mayhave changed. Also, make sure that the EntsecAsureID app is running and has thecorrect settings. If settings have changed, you may need to restart the app, verify thatyou have a good oBix network connection, and ping the device to confirm the con-nection.

Create a photo ID badgeAsure ID software is used to design the badge template. You can have any number of templates organized by tenant (category).

The system matches template data to the personnel database. The file creation date serves as the capture date for each photograph.

Take the photoYou may capture a photo using a portrait camera connected to the Photo ID station, or use any photo taken by any camera and located anywhere as long as it is stored as a .jpg or .png file.


Create a photo ID badge Setup your Photo ID system

Take the photo September 30, 2016

Capture a photo and associate it with a badge

The browser used to run the Enterprise Security app must be running in the Photo ID station to which the USB portrait camera is connected.

Step 1 From the home view, click Personnel > Person.

The Person view opens.

Step 2 At the bottom of the view, click the camera button.

Note: If you do not have a capture button, the Asure ID device needs to be added to the Enterprise Security station.

A "Waiting for capture dialog..." opens.

Step 3 If you have more than one Photo ID station, the software asks you which Photo ID station you are using.

Step 4 Select the station and click Ok.

The Capture Image window opens.

Step 5 Focus the image and click the Capture button.


Setup your Photo ID system Create a photo ID badge

September 30, 2016 Take the photo

The Next Step window opens.

Step 6 To crop the photo, click Ok.

The crop tool opens.

Step 7 Enter the aspect ratio (width:height) from the template, adjust the crop box and click the Save button.

The badge preview opens.

Step 8 The photo is placed in the person’s portrait section within the Enterprise Security app.

Importing a photo

Before you can import a photo, the person must exist in the database.




Take the photo September 30, 2016


Note: If file open icon is not available, create and save the person first.

Step 2 Click the File Open icon , browse for the photo file and click the Save button.

Crop a photo

Use this procedure to crop a captured or uploaded photo.



Step 2 Click the Crop Image icon.


Setup your Photo ID system Create a photo ID badge

September 30, 2016 Take the photo

The Choose an Image Ratio Source.... window opens.

You have three choices:

• Image Ratio width:height (template name)where:• width is the width as defined by the template.• height is the height as defined by the template• templatename is the name of the template.

• Image Ratio width:height (default)where:• width is the default width.• height is the default height.

See “Configure Photo ID options” on page 5 for how to change this default.

• FreehandLets you use the freehand tool alone to crop the image.Note: Although this may seem the easiest way to crop the photo, it may result in a distorted image. The best option is to use the aspect ratio as defined in the template.

The photo capture dialog opens with a cropping box set to the largest size possible.

Step 3 Grab any corner or edge and drag the cropping box smaller, then click and drag the center of the cropping box to move it to the desired position.

Step 4 When the cropping box is centered over the face, click the Save button.



Badge printing September 30, 2016

The photo is cropped to the smaller size while maintaining the aspect ratio.

Step 5 Click Ok and click the Save button.

Badge printing

Print one or more badges

This procedure explains how to print one badge or a group of badges.

To print a dual-sided badge you follow the same procedure. A dual-sided template and printer capable of printing on both sides are required.

Step 1 Beginning from the home view, click Personnel > Badges.

Step 2 Select the badge(s) to print, right-click and click Print Badge. You can also click the Print Badge button.

The action drop-down list opens.


Setup your Photo ID system Set up additional options

September 30, 2016 Badge creation troubleshooting

The Print Preview view opens.

Note: When more than one badge is selected, you can use the Print Badge button to skip the Print Preview and print all selected badges in one print operation.

Step 3 Click the print icon .

The badge prints.

Badge creation troubleshootingThere is no capture button on my Person view.

The capture button requires that an Asure ID device be added to the station. If yousee no capture button, your system has not been configured yet for the Photo ID fea-ture. See “Options” on page 5.

I cannot find the window I am expecting to see.

Temporarily minimize your browser or other windows to see if the window is behindthe windows.

I cannot upload a photo to the database.

The person must already exist in the database for you to upload a photo. Create andsave the person, then the upload icon will be available.

Set up additional options

Configure photo ID timeout

The length of time to display the photo from a swiped badge can be adjusted to keep the display current.

Step 1 From the home view, click Photo ID and click the configure button.


Set up additional options Setup your Photo ID system

Badge creation troubleshooting September 30, 2016

The Configure window opens.

Step 2 Set the PhotoID Timeout.

The default is 0 (zero), which indicates no timeout.

Monitor door entries

This feature allows you to pick a door (card reader), and view the photo and the employee name associated with a badge when it is swiped.

Step 3 Starting from the home view, click Photo ID > Photo ID Viewers

The Photo ID Viewers view opens.

Step 4 Double-click the PhotoIDViewer row.




The viewer window opens.

The layout above provides a grid for input from two card readers and two cameras. To change this layout, click the Layout drop-down menu.

Setting up the grid involves populating the device list on the left followed by dragging and dropping the readers and cameras from the list to the surveillance grid.

Step 5 To populate the list, in the lower left corner, click the Add Reader or Add Camera buttons.


Set up additional options Setup your Photo ID system


The Add Reader or Add Camera windows open.

Step 6 Select the device(s) and click the Add button.

The following example shows the left pane populated with card readers and cameras.

Step 7 Drag each device name from the left pane to one of the quadrants.




As soon as someone swipes their badge, the photo associated with the person displays in the grid along with the feed from the surveillance camera.

You do not see a photo and personnel data along with the photo until someone swipes a badge. Unlike the example above, you would expect to see the same person in the video feed.

Display the photo associated with a person record on a history report

This feature allows you to see the current photo associated with a history record. You may view the photo associated with a history record on the following reports:

• Alarm console• Activity monitor• Access history• Attendance historyFor example, the report can show the photo associated with the badge used to arm an intrusion zone. This photo is the one that is on file at the time of viewing the history.

Step 1 From the home view click Monitoring.

The Alarm Console opens.

Step 2 Double-click the alarm.


Photo ID troubleshooting Setup your Photo ID system


The Alarm Details report opens.

Step 3 Click the person’s name next to person in the Alarm Data section of the properties list.

The person Summary opens.

Note: Many data fields on the Alarm Details and person Summary dialogs are hyper links that, when clicked, provide additional information.

Photo ID troubleshootingThe main problems you will encounter have to do with credentials that have not been set up, badges that do not exist, etc.


4CHAPTER

ReferenceThe following sections document menus, windows, and other system components.

EntsecAsureID menuThe EntsecAsureID menu opens:

This menu provides these features:

• AboutDisplays the current version of the applet.

• SettingsConfigures the Photo ID station side of the Obix network connection.

• Run on StartedWhen enabled starts this applet when the computer restarts.

• Show ConsoleDisplays the console log of events.

• RestartStarts the applet again.

• ExitCloses the applet, removing the icon from the system tray.To start EntsecAsureID running again click Start > Programs > EntsecAsureID > EntsecAsureID.


Settings window Reference

September 30, 2016

Settings window

Main Connection Settings fields:

• HostThis field holds the address of the Enterprise Security station. Use http://<Ent-SecStation> or https://<EntSecStation>. Note: You can use localhost for <EntSecStation> if EntsecAsureID is running on the same platform as the Enterprise Security station

• User, PasswordThese are your login credentials for the Obix network connection. You set them up in the Enterprise Security station.

• EntsecAsureID PortPort number for Obix host communications.

Advanced Settings fields are configured by the administrator.

• Run On StartedWhen enabled, starts the applet when the host computer starts. This can also be set from the EntseEntsecAsureID menu. You should enable this property.

• Allow Self-Signed CertificatesWhen enabled, users may log on to the system using a connection that is not completely secure. You should leave this option un-checked, which requires that communication be-tween stations be secured by certificates signed by a recognized CA (Certificate Authori-ty).

• Enable Legacy Obix ServerOnly select this box if you need to used the EntsecAsureID Legacy Device. The default Obix port for the Legacy Obix Server connection is 3000.

Add Client window

The following fields configure the Obix client, which runs in the Enterprise Security station.


Reference Add client properties

September 30, 2016 Asure ID properties

• NameIs a name you can use to refer to the location of the Photo ID station.

• LobbyIs the root of a server Obix object tree. For more information about the lobby, see the Ni-agaraAX Help system.

• Auth UserIs the user name that is part of the credentials required to connect the Photo ID station to the Enterprise Security station via the Obix network. The default is admin.

• PasswordAccess to the Obix network is password protected. This is the password you enter when configuring the Obix network using EntsecAsureID in the station.

Add client properties

• Device NameThis is a field for you to use to specify a unique name for the Asure ID Device.

• Host NameThis is the platform host name or the IP Address of the computer that is running EntsecA-sureID.

• Entsec EntsecAsureID PortThis is the port used for the EntsecAsureID connector (usually 3000).

• KeyThis read-only field is the unique identifier for a particular EntsecAsureID device and is provided automatically during discovery.

Asure ID propertiesThe Asure ID Device properties view opens.

• StatusIndicates the current state of the device connection. Verify that Status is {ok}

• EnabledTurns this feature on and off. This value should be set to true.


Add client properties Reference

Photo ID Configure window September 30, 2016

• Fault CauseProvides read-only information about possible reasons for a status fault. For example, “Database ORD changed, restart required” may be a fault message.

• HealthProvides additional information about the current status of the connection.

• Alarm Source InfoIdentifies alarm-specific information, such as a link (ord) to associate with the alarm, a sound file to play back when the alarm occurs, and an icon to specifically identify this alarm. You can edit this information by clicking the Edit buttons.

• KeyThis read-only field is the unique identifier for a particular EntsecAsureID (non-Legacy) device and is provided automatically during a discovery job. After manually adding the EntsecAsureID device, you need to do a “Match” with the discovered device in order to populate this field.

• Host NameThis is the platform host name or the IP Address of the computer that is running EntsecA-sureID.

• Entsec EntsecAsureID PortThis is the port used for the EntsecAsureID connector (usually 3000).

• Obix Client (Legacy only)Identifies the Obix Client.

Photo ID Configure window

• Default Image RatioTwo values are available:• Ratio

Sets the ratio to assume for photos created to conform to the photo field defined by your Asure ID templates.

• FreehandAllows the person taking the photo to use the freehand tool to crop the photo.

• Default Image FormatDefines the default format: JPG or PNG. You can still use the other format for individual photos.

• Max Image file SizeDefines the maximum size of the photo. Photos, especially those uploaded from another source, cause an error if the exceed this size.

• PhotoID TimeoutControls how long a photo remains visible for surveillance purposes. The default is 0 (ze-ro), which indicates no timeout. Set this value so that you are always monitoring current activity.

• PhotoID Format


Reference Add client properties

September 30, 2016 Photo ID Configure window

Controls the text that appears along with the photo. This feature uses standard BFormat notation.

• Photo ID Font SizeControls the size of the font used to display the text that appears along with the photo.


Add client properties Reference

Photo ID Configure window September 30, 2016

Automation and Control SolutionsHoneywell International Inc.

1985 Douglas Drive North

Golden Valley, MN 55422

customer.honeywell.com

® U.S. Registered Trademark© 2016 Honeywell International Inc.31-00120—01 M.S. 09-16Printed in United States

By using this Honeywell literature, you agree that Honeywell will have no liability for any damages arising out of your use or modification to, the literature. You will defend and indemnify Honeywell, its affiliates and subsidiaries, from and against any liability, cost, or damages, including attorneys’ fees, arising out of, or resulting from, any modification to the literature by you.

33-00120—01 - webs-ax photo id guide

Documents