4g lite operator’sservice.morphotrak.com/content/documents... · table of content

© 2012 - L-1 Identity Solutions Inc. All rights reserved 1

Copyright

4G LITE OPERATOR’S

MANUAL

Version 4.4.5.0.1.0.0


Copyright

Copyright Information

© 2012 L-1 Identity Solutions, Inc.

All rights reserved. This product and related documentation are protected by copyright and distributed under licenses restricting their use, copying, distribution, and de-compilation. No part of this product or related documentation may be reproduced in any form by any means without written permission from L-1 Identity Solutions and its licensors, if any.

Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution.

Neither the name of the L-1 Identity Solutions, Inc. nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission.

TRADEMARKS The trademarks identified herein are the trademarks or registered trademarks of L-1 Identity Solutions, Inc. All other brands and products referenced herein are acknowledged to be trademarks or registered trademarks of their respective holders or manufacturers.

THE PRODUCT AND PUBLICATION ARE PROVIDED “AS IS” WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT.

THIS PUBLICATION COULD INCLUDE TECHNICAL INACCURACIES OR TYPOGRAPHICAL ERRORS. CHANGES ARE PERIODICALLY ADDED TO THE INFORMATION HEREIN; THESE CHANGES WILL BE INCORPORATED IN NEW EDITIONS OF THE PUBLICATION. L-1 IDENTITY SOLUTIONS, INC MAY MAKE IMPROVEMENTS AND/OR CHANGES IN THE PRODUCT(S) AND/OR THE PROGRAM(S) DESCRIBED IN THIS PUBLICATION AT ANY TIME.

IMPORTANT—Please refer to the L-1 Identity Solutions End User License Agreement document and read it carefully before using any L-1 Identity Solutions software on your computer. This document contains important information about your legal rights.


Table of Content

TABLE OF CONTENT

CHAPTER 1 - INTRODUCTION ............................................................... 16 1.1 TEMPLATE SUPPORT ................................................................... 16 1.1.1 1:1 TEMPLATE OR 348-BYTE TEMPLATES ................................................ 16 1.1.2 1:500 SEARCHING TEMPLATES ......................................................... 17 1.1.3 USER RECORDS ...................................................................... 17 1.1.4 BIOMETRIC USER RECORDS ............................................................ 18 1.1.5 CARD ONLY RECORD .................................................................. 18 1.1.6 TEMPLATE SUPPORT SUMMARY .......................................................... 19 1.2 PROXIMITY CARDS .................................................................... 20 1.2.1 COMMAND CARDS ..................................................................... 20 1.3 SMART CARDS ......................................................................... 21 1.4 SECUREADMIN LITE APPLICATION ....................................................... 21 1.4.1 LOGIN ............................................................................ 21 1.4.1.1 TO LOGIN ....................................................................... 21 1.4.2 SECUREADMIN LITE MAIN SCREEN ...................................................... 22 1.3.2.1 QUICK ACCESS PANEL ............................................................. 22 1.3.2.2 MENU BAR ....................................................................... 23 CHAPTER 2 - MANAGING USERS ............................................................. 24 2.1 MANAGING USERS ..................................................................... 24 2.2 USERS TAB .......................................................................... 25 2.2.1 TO FILTER BY USER ................................................................. 25 2.2.2 TO ADD A USER ..................................................................... 25 2.3 MANAGING TEMPLATES ................................................................. 26 2.3.1 VIEWING TEMPLATES ON A DEVICE ..................................................... 27 2.3.1.1 FILTER BY TEMPLATE DETAILS ..................................................... 27 2.3.2 VIEWING TEMPLATES IN A DATABASE ................................................... 27 2.3.2.1 FILTER BY TEMPLATE DETAILS ..................................................... 27 2.3.3 EDITING TEMPLATES IN DATABASE ..................................................... 28 2.3.4 VERIFYING TEMPLATES ............................................................... 30 2.3.4.1 TO VERIFY TEMPLATES ON A DEVICE ................................................ 31 2.3.4.2 TO VERIFY TEMPLATES FROM DATABASE .............................................. 31 2.3.5 COMPARING TEMPLATES ............................................................... 31 2.4 MANAGING TEMPLATE SETTINGS ......................................................... 33 2.4.1 PROX USER MODE .................................................................... 33 2.4.2 SMART CARD USER MODE .............................................................. 34 2.4.3 DOOR TIMEOUT ...................................................................... 36 2.4.4 TEMPLATE EXPIRY ................................................................... 36 2.4.5 CONFIGURE TEMPLATE SETTINGS ....................................................... 36 2.5 USER GROUPS TAB .................................................................... 36 2.5.1 TO FILTER BY A USER GROUP ......................................................... 36 2.5.2 TO ADD A USER GROUP ............................................................... 37 2.6 COMPANIES TAB ...................................................................... 40 2.6.1 TO FILTER BY COMPANY .............................................................. 40 2.6.2 TO ADD A COMPANY .................................................................. 41 2.7 SITES TAB .......................................................................... 42 2.7.1 TO FILTER BY SITE ................................................................. 42 2.7.2 TO ADD A SITE ..................................................................... 43 2.8 DEPARTMENTS TAB .................................................................... 43


Table of Content

2.8.1 TO FILTER BY DEPARTMENT ........................................................... 44 2.8.2 TO ADD A DEPARTMENT ............................................................... 44 CHAPTER 3 - MANAGING NETWORK SETTINGS .................................................. 46 3.1 VIEW DEVICES IN NETWORK ............................................................ 47 3.2 REGISTER DEVICE VIA SERVER ......................................................... 48 3.3 REGISTER DEVICE VIA CLIENT ......................................................... 51 3.4 UNREGISTERING THE DEVICE ........................................................... 55 3.5 VIEW DEVICE SETTINGS IN NETWORK .................................................... 58 3.5.1 GENERAL TAB ....................................................................... 59 3.5.2 COMMUNICATION TAB ................................................................. 61 3.5.3 LED TABLE TAB ..................................................................... 65 3.5.4 TAMPER TAB ........................................................................ 67 3.5.5 ACCESS CONTROL TAB ................................................................ 68 3.5.5.1 CONFIGURING ACCESS CONTROL FOR 4G LITE DEVICE .................................. 68 3.5.5.1.1 TO CONFIGURE ACCESS CONTROL .................................................. 68 3.5.5.1.2 TO CONFIGURE ACCESS RULE ..................................................... 69 3.5.5.1.3 TO CONFIGURE SMART CARD VERIFICATION ......................................... 70 3.5.5.1.4 ACTIVATING TIME OVERRIDE MODE ................................................ 71 3.5.5.2 CONFIGURING ACCESS CONTROL FOR SECURE CONTROL DEVICE ........................... 72 3.5.5.2.1 ACTIVATING TIME OVERRIDE MODE ................................................ 72 3.5.5.2.2 FIRE PANEL INPUT ............................................................. 73 3.5.5.2.3 TO SYNCHRONIZE SECURE CONTROL ................................................ 73 3.5.6 ACCESS SCHEDULES TAB .............................................................. 73 3.5.6.1 TO ADD AN ACCESS SCHEDULE ...................................................... 76 3.5.6.2 TO SAVE AND UPLOAD ACCESS SCHEDULES ............................................ 76 3.5.7 HOLIDAY SCHEDULES TAB ............................................................. 76 3.5.7.1 TO ADD A HOLIDAY ACCESS SCHEDULE ............................................... 77 3.5.7.2 TO SAVE AND UPLOAD HOLIDAY ACCESS SCHEDULES .................................... 79 3.5.8 MISCELLANEOUS TAB ................................................................. 80 3.5.8.1 SEND VERIFICATION RESULT ....................................................... 80 3.5.8.1.1 TO ENABLE AND CONFIGURE THE SEND VERIFICATION RESULT FEATURE ................. 81 3.5.8.2 ACTIVATE REALTIME ACTIVITY ..................................................... 81 3.5.8.2.1 TO ACTIVATE REALTIME ACTIVITY LOGGING AND MONITORING ......................... 81 3.5.8.3 ACTIVATE CUSTOM VERIFICATION ENTRY MODE ........................................ 81 3.5.8.3.1 TO ENABLE CUSTOM VERIFICATION ENTRY MODE ..................................... 81 3.5.9 AUDIO TAB ......................................................................... 82 3.5.10 GENERAL PURPOSE OUTPUT TAB ....................................................... 84 3.5.10.1 GENERAL PURPOSE OUTPUT ........................................................ 86 3.5.10.1.1 TO CONFIGURE GPO SETTINGS ................................................... 86 3.5.11 WIEGAND TAB ...................................................................... 87 3.5.11.1 PRE-DEFINED WIEGAND FORMATS ................................................... 88 3.5.11.1.1 TO SET THE WIEGAND FORMAT TO A PRE-DEFINED FORMAT ........................... 88 3.5.11.2 PASSTHRU WIEGAND FORMATS ...................................................... 89 3.5.11.2.1 TO SET THE WIEGAND FORMAT TO A PASS-THRU FORMAT ............................. 90 3.5.11.3 CUSTOM INPUT WIEGAND FORMAT ................................................... 90 3.5.11.4 PULSE WIDTH ................................................................... 90 3.5.11.4.1 TO SET THE PULSE WIDTH ...................................................... 90 3.5.11.5 PULSE INTERVAL ................................................................ 90 3.5.11.5.1 TO SET THE PULSE INTERVAL ................................................... 90 3.5.11.6 ACTIVATE WIEGAND INPUT ........................................................ 90 3.5.11.7 ACTIVATE WIEGAND OUTPUT ....................................................... 91 3.5.11.7.1 TO ACTIVATE WIEGAND OUTPUT .................................................. 91


Table of Content

3.5.11.8 WIEGAND OUTPUT SETTINGS ....................................................... 91 3.5.11.8.1 TO SET WIEGAND OUTPUT SETTINGS .............................................. 92 3.5.11.9 CUSTOM WIEGAND SETTINGS ....................................................... 92 3.5.11.9.1 TO UPLOAD CUSTOM WIEGAND OUTPUT SETTINGS .................................... 93 3.5.11.9.2 TO CREATE A CUSTOM WIEGAND FORMAT ........................................... 93 3.5.12 BIOMETRICS TAB ................................................................... 96 3.5.12.1 GLOBAL SECURITY THRESHOLD ..................................................... 96 3.5.12.1.1 TO CHANGE THE GLOBAL SECURITY THRESHOLD ..................................... 97 3.5.12.2 DEVICE MODE ................................................................... 97 3.5.12.3 TEMPLATE ENCRYPTION ........................................................... 98 3.5.12.4 MULTI-USER VERIFICATION ....................................................... 98 3.5.12.4.1 TO SET MULTI-USER VERIFICATION SETTINGS ..................................... 98 3.5.12.5 BIOMETRIC VERIFICATION ........................................................ 98 3.5.12.6 AUTO-FINGER DETECTION ......................................................... 99 3.5.12.7 PASSWORD VERIFICATION ......................................................... 99 3.5.12.8 FINGER PLACEMENT .............................................................. 99 3.5.13 CLOCK TAB ........................................................................ 99 3.5.13 .1 TO SET THE TIME ON THE DEVICE ............................................... 100 3.5.13 .2 TO SET THE TIME ZONE, CLOCK TYPE AND DISPLAY FORMAT ......................... 100 3.5.14 BIOMETRIC SCHEDULES TAB ......................................................... 101 3.5.14.1 BIOMETRIC SCHEDULES .......................................................... 101 3.5.14.1.1 TO ADD A BIOMETRIC SCHEDULE FOR THE SELECTED DEVICE ........................ 102 3.5.14.2 DOOR OPEN SCHEDULE ........................................................... 103 3.5.14.2.1 TO ACTIVATE DOOR OPEN SCHEDULE ............................................. 103 3.5.15 DOOR/DEVICE STATUS TAB .......................................................... 103 3.5.16 DEVICE SECURITY ................................................................. 105 3.5.17 LCD TAB ......................................................................... 106 3.5.17.1 TO SET THE DEVICE WALLPAPER .................................................. 107 3.5.17.2 TO CHANGE THE DEVICE LANGUAGE ................................................ 108 3.5.17.3 TO ACTIVATE/DEACTIVATE LCD VERIFICATION ...................................... 108 3.5.17.4 TO ACTIVATE/DEACTIVATE KEYPAD ADMINISTRATION ................................. 108 3.5.18 TIME AND ATTENDANCE TAB ......................................................... 108 3.5.18.1 TO CONFIGURE T&A MODE ........................................................ 113 CHAPTER 4 - ENROLLING USERS ........................................................... 114 4.1 ENROLLING USERS ................................................................... 114 4.2 QUICK ENROLLMENT .................................................................. 115 4.2.1 TO PERFORM A QUICK ENROLLMENT .................................................... 115 4.3 ADVANCED ENROLLMENT ............................................................... 121 4.3.1 TO PERFORM A ADVANCED ENROLLMENT ................................................. 121 4.4 CARD ENROLLMENT ................................................................... 128 4.4.1 TO PERFORM A CARD ENROLLMENT ..................................................... 128 CHAPTER 5 - MANAGING SMART CARDS ...................................................... 131 5.1 SMART CARD DEVICE MANAGER ......................................................... 133 5.1.1 SMART CARD SECURITY SETTINGS ..................................................... 137 5.1.1.1 CHANGING THE SITE KEY ......................................................... 137 5.1.1.2 RESETTING A SITE KEY .......................................................... 139 5.1.1.3 CHANGING MIFARE PLUS KEY ...................................................... 140 5.1.1.4 RESETTING A MIFARE PLUS KEY ................................................... 140 5.1.2 CONFIGURE CARD LAYOUT ........................................................... 142 5.1.2.1 ICLASS CARDS .................................................................. 142 5.1.2.2 MIFARE CARDS ................................................................... 143


Table of Content

5.1.2.2.1 MiFARE BLOCK MEMORY STRUCTURE ............................................... 146 5.1.2.2.2 MiFARE NEW LAYOUT ........................................................... 146 5.1.2.2.3 MOVING THE ADMIN BLOCK ...................................................... 147 5.1.2.2.4 SAVING MiFARE LAYOUTS TO THE PC ............................................. 147 5.1.2.2.5 PRECAUTIONS ON CHANGING MiFARE SMART CARD LAYOUTS ........................... 148 5.1.2.2.6 MiFARE SERIAL NUMBER ........................................................ 148 5.1.2.3 DESFire CARDS ................................................................. 149 5.2 SMART CARD MANAGER ................................................................ 150 5.2.1 DELETING TEMPLATES ............................................................... 151 5.2.2 DELETING WIEGAND STRINGS ......................................................... 151 5.2.3 SECURING CARDS ................................................................... 151 5.2.4 RESETTING CARDS .................................................................. 152 5.3 SMART CARD TEMPLATE SUPPORT ....................................................... 153 5.4 MANAGING SITE KEYS AND MIFARE PLUS KEY ............................................ 154 5.4.1 SITE KEY FILES ................................................................... 154 5.4.2 SITE KEYS ON INDIVIDUAL SMART CARDS ............................................. 154 5.4.3 CREATING A SITE KEY FILE ........................................................ 155 5.4.4 FORGOTTEN SITE KEYS ............................................................. 156 5.4.5 COMPROMISED SITE KEYS ........................................................... 157 5.4.6 MIFARE PLUS KEY ................................................................. 157 CHAPTER 6 - BROADCASTING SETTINGS ..................................................... 159 6.1 BROADCASTING SETTINGS ............................................................. 159 6.2 BROADCAST DEVICE PARAMETERS ....................................................... 161 6.2.1 SET PARAMETER FOR BROADCASTING ................................................... 161 6.2.2 TO MODIFY AND BROADCAST THE DEVICE SETTINGS ....................................... 163 6.3 TO BROADCAST FIRMWARE PACKAGE ..................................................... 165 6.4 TO BROADCAST AUDIO FILE ........................................................... 168 6.5 TO BROADCAST SMART CARD LAYOUT FILE ............................................... 170 6.6 BROADCAST IMAGE FILE .............................................................. 170 CHAPTER 7 - MANAGING LOGS ............................................................. 172 7.1 MANAGING LOGS ..................................................................... 172 7.2 APPLICATION EVENT LOG ............................................................. 173 7.2.1 FILTER APPLICATION EVENT LOG ..................................................... 174 7.2.2 EXPORT APPLICATION EVENT LOG ENTRIES ............................................. 174 7.3 TRANSACTION LOG ................................................................... 175 7.3.1 DOWNLOAD TRANSACTION LOG ......................................................... 176 7.3.1.1 DEFINED AUTO DOWNLOAD SCHEDULE ................................................ 176 7.3.1.2 MANUAL DOWNLOAD OF TRANSACTION LOG ENTRIES .................................... 177 7.3.2 FILTER THE TRANSACTION LOG ....................................................... 177 7.3.3 EXPORT TRANSACTION LOG ENTRIES ................................................... 177 7.3.4 DELETE SELECTED TRANSACTION LOG ENTRIES .......................................... 177 7.3.5 DELETE ALL TRANSACTION LOG ENTRIES ............................................... 178 7.4 DEVICE EVENT LOG .................................................................. 178 7.4.1EXPORT DEVICE EVENT LOG ........................................................... 179 CHAPTER 8 - MENU BAR COMMANDS ......................................................... 181 8.1 FILE MENU ......................................................................... 181 8.1.1 SIGN IN AS ....................................................................... 182 8.1.2 CHANGE PASSWORD .................................................................. 182 8.1.3 EXIT ............................................................................ 183 8.2 MANAGE MENU ....................................................................... 183


Table of Content

8.3 TOOLS MENU ........................................................................ 183 8.3.1 WIEGAND ......................................................................... 184 8.3.1.1 TO IMPORT A PREDEFINED/CUSTOM WIEGAND FORMAT INTO THE DATABASE ................ 185 8.3.1.2 TO EXPORT A PREDEFINED/ CUSTOM WIEGAND FORMAT ................................. 185 8.3.1.3 TO ADD A CUSTOM WIEGAND FORMAT ................................................ 186 8.3.2 WEEK SETTING ..................................................................... 187 8.3.3 FIRMWARE UPGRADE ................................................................. 188 8.3.4 SENSOR TEST ...................................................................... 190 8.3.5 SYNCHRONIZATION ................................................................. 191 8.3.6 RESET TO FACTORY DEFAULTS ........................................................ 192 8.3.7 REALTIME ACTIVITY MONITOR ........................................................ 193 8.3.7.1 ENABLE REALTIME ACTIVITY LOGGING AND MONITORING ............................... 194 8.3.7.2 REALTIME ACTIVITY MONITORING .................................................. 195 8.3.7.3 FILTERING REALTIME ACTIVITIES ................................................. 196 8.3.8 OPTIONS ......................................................................... 197 8.4 HELP MENU ......................................................................... 199 8.4.1 HELP CONTENT ..................................................................... 199 8.4.2 ABOUT PRODUCT REGISTRATION ....................................................... 199 8.4.3 ABOUT SECUREADMIN LITE ........................................................... 200 CHAPTER 9 - FRONT PANEL OPERATION ..................................................... 201 9.1 OPERATING THE 4G LITE DEVICE FROM THE FRONT PANEL ................................. 201 9.1.1 ACCESSING ADMINISTRATOR MODE .................................................... 203 9.1.1.1 ALL USERS WITH PASSWORD ....................................................... 206 9.1.1.2 ALL USER WITH PASSWORD AND BIOMETRIC ........................................... 207 9.1.1.3 ADMIN USER WITH PASSWORD ...................................................... 209 9.1.1.4 ADMIN USER WITH PASSWORD AND BIOMETRIC ......................................... 209 9.2 SYSTEM ............................................................................ 209 9.2.1 IO .............................................................................. 210 9.2.1.1 TCP/IP ........................................................................ 210 9.2.1.1.1 DHCP ........................................................................ 211 9.2.1.1.1 Static ...................................................................... 211 9.2.1.2 RS-485 ........................................................................ 213 9.2.1.2.1 Baudrate .................................................................... 214 9.2.1.2.2 Net ID ...................................................................... 214 9.2.1.3 Wiegand ....................................................................... 215 9.2.1.3.1 Input Port .................................................................. 215 9.2.1.3.1 Output Port ................................................................. 216 9.2.1.4 Tamper ........................................................................ 216 9.2.1.4.1 State ....................................................................... 217 9.2.1.4.2 Biometric ................................................................... 217 9.2.1.4.3 Erase Template .............................................................. 218 9.2.1.4.4 Send Wiegand ................................................................ 218 9.2.1.5 Door Control .................................................................. 219 9.2.1.5.1 SDC Settings ................................................................ 219 9.2.1.5.2 TOM ......................................................................... 223 9.2.2 USB ............................................................................. 224 9.2.2.1 File Transfer ................................................................. 225 9.2.2.1.1 Firmware .................................................................... 226 9.2.2.1.2 Language .................................................................... 227 9.2.2.1.3 Audio ....................................................................... 228 9.2.2.1.4 Wallpaper ................................................................... 234 9.2.2.1.5 Event Log ................................................................... 236


Table of Content

9.2.2.2 Initialize USB ................................................................ 237 9.2.3 SETTINGS .......................................................................... 239 9.2.3.1 Erase Transaction Log ......................................................... 239 9.2.3.2 Template Type ................................................................. 240 9.2.3.3 Reset Settings ................................................................ 241 9.2.3.4 Time Attendance ............................................................... 241 9.2.3.5 Reboot Device ................................................................. 242 9.2.4 LCD/SOUND ........................................................................ 243 9.2.4.1 Backlight Timeout ............................................................. 243 9.2.4.2 Key Press Sound ............................................................... 244 9.2.4.3 LCD Off Timeout ............................................................... 245 9.2.4.4 Date/Time ..................................................................... 245 9.2.4.4.1 Time ........................................................................ 246 9.2.4.4.1 Date ........................................................................ 246 9.3 SECURITY .......................................................................... 248 9.3.1 BIOMETRIC ......................................................................... 248 9.3.2 COMMUNICATION ...................................................................... 252 9.3.3 GLOBAL ........................................................................... 254 9.3.4 LOGIN OPTIONS ...................................................................... 256 9.3 INFORMATION ....................................................................... 258 9.3.1 DEVICE .......................................................................... 259 9.3.2 TEMPLATE ........................................................................ 260 9.3.3 COMMUNICATION ................................................................... 262 9.3.4 FIRMWARE ........................................................................ 264 9.4 TEMPLATE .......................................................................... 265 9.4.1 ADD ............................................................................. 265 9.4.1.1 ENROLL ........................................................................ 266 9.4.1.2 CARD ONLY ..................................................................... 272 9.4.2 EDIT ............................................................................ 275 9.4.2.1 Edit Enrollment ............................................................... 275 9.4.2.1 Edit Card Only Enrollment ..................................................... 279 9.4.3 DELETE .......................................................................... 281 9.4.3.1 DELETE TEMPLATE ............................................................... 281 9.4.3.2 DELETE ALL TEMPLATES .......................................................... 284 9.4.4 VERIFY .......................................................................... 285 9.5 KEYPAD VERIFICATION ................................................................ 285 9.6 KEYPAD IDENTIFICATION .............................................................. 286 9.7 KEYPAD VERIFICATION WITH T&A MODE ON ............................................... 287 CHAPTER 10 - ENROLLMENT BEST PRACTICES ................................................ 288 10.1 FINGERPRINT ENROLLMENTS .......................................................... 288 10.1.1 SUGGESTED FINGERS ............................................................... 288 10.1.2 CONSISTENT FINGER PLACEMENT ..................................................... 289 10.1.3 PROPER FINGER ORIENTATION ....................................................... 292 10.1.4 CENTERING THE CORE .............................................................. 293 10.2 FINGER PLACEMENT FEEDBACK ........................................................ 294 10.2.1 TROUBLESHOOTING ENROLLMENT PROBLEMS USING FPF ................................... 294 CHAPTER 11 - BACKUP AND RESTORE DATABASE .............................................. 296 11.1 BACKUP SETTINGS OF SECUREADMIN LITE DATABASE ..................................... 297 11.1.1 BACKUP SETTINGS ................................................................. 297 11.1.2 SCHEDULER SETTINGS .............................................................. 298 11.2 RESTORING SECUREADMIN LITE DATABASE .............................................. 299


Table of Content

11.2.1 RESTORE SETTINGS ................................................................ 299 CHAPTER 12 - CONTACT INFORMATION ...................................................... 302 12.1 REGISTERING YOUR PRODUCT ......................................................... 302 APPENDIX .............................................................................. 303 GLOSSARY .............................................................................. 307 ACRONYMS AND ABBREVIATIONS ............................................................ 309

LIST OF FIGURES

Figure 1-1 HID Prox Card ............................................................... 20 Figure 1-2 SecureAdmin Lite – Login Screen ............................................. 21 Figure 1-3 SecureAdmin Lite - Main Screen .............................................. 22 Figure 2-1 Users Tab ................................................................... 24 Figure 2-2 Add User Dialog Box ......................................................... 25 Figure 2-3 Templates on Device ......................................................... 26 Figure 2-4 Templates in Database ....................................................... 28 Figure 2-5 Edit Template Dialog Box .................................................... 29 Figure 2-6 Edit Enrollment Dialog Box .................................................. 29 Figure 2-7 Templates Screen ............................................................ 30 Figure 2-8 Compare Templates Dialog Box ................................................ 32 Figure 2-9 User Groups Tab ............................................................. 37 Figure 2-10 Add User Group Dialog Box .................................................. 38 Figure 2-11 Assigning Roles and Privileges ............................................. 39 Figure 2-12 Companies Tab .............................................................. 40 Figure 2-13 Add Company Dialog Box ..................................................... 41 Figure 2-14 Sites Tab .................................................................. 42 Figure 2-15 Add Site Dialog Box ........................................................ 43 Figure 2-16 Departments Tab ............................................................ 44 Figure 2-17 Add Department Dialog Box .................................................. 45 Figure 3-1 Network ..................................................................... 46 Figure 3-2 Network Tree ................................................................ 48 Figure 3-3 Register via Server Dialog Box .............................................. 49 Figure 3-4 Register Device ............................................................. 50 Figure 3-5 Register Device Dialog Box .................................................. 50 Figure 3-6 Device Summary Dialog Box ................................................... 51 Figure 3-7 Step 1 Find Device Dialog Box ............................................... 51 Figure 3-8 Device Information Dialog Box ............................................... 53 Figure 3-9 Server Communication Parameter Dialog Box ................................... 53 Figure 3-10 Register Device Dialog Box ................................................. 54 Figure 3-11 Device Summary Dialog Box .................................................. 54 Figure 3-12 SecureAdmin Lite Network Tree .............................................. 56 Figure 3-13 Unregister Device Warning .................................................. 57 Figure 3-14 Device Network Tab ......................................................... 59 Figure 3-15 General Tab – 4G Lite Device ............................................... 60 Figure 3-16 General Tab – Secure Control Device ........................................ 61 Figure 3-17 Communication Tab – 4G Lite Device ......................................... 62 Figure 3-18 Communication Tab – Secure Control ......................................... 63


Table of Content

Figure 3-19 LED Table Tab .............................................................. 66 Figure 3-20 Tamper Tab ................................................................. 67 Figure 3-21 Access Control Tab – 4G Lite Device ........................................ 68 Figure 3-22 Access Control Tab – Secure Control Device ................................. 72 Figure 3-23 Access Schedules Tab ....................................................... 74 Figure 3-24 New Access Schedule ........................................................ 75 Figure 3-25 Holiday Schedules Tab ...................................................... 77 Figure 3-26 Holiday Schedules Tab - New Holiday Schedule ............................... 78 Figure 3-27 Miscellaneous Tab .......................................................... 80 Figure 3-28 Audio Tab .................................................................. 82 Figure 3-29 Audio Tab - New Audio File ................................................. 83 Figure 3-31 Wiegand Tab ................................................................ 87 Figure 3-32 Wiegand Output Settings Dialog Box ......................................... 92 Figure 3-33 Custom Wiegand Settings Dialog Box ......................................... 93 Figure 3-34 New Wiegand Format Dialog Box .............................................. 94 Figure 3-35 New Wiegand Format Dialog Box - Add User ................................... 95 Figure 3-36 Biometrics Tab ............................................................. 96 Figure 3-37 Clock Tab ................................................................. 100 Figure 3-38 Biometric Schedules Tab ................................................... 102 Figure 3-39 Device/Door Status Tab .................................................... 104 Figure 3-40 Device Security ........................................................... 105 Figure 3-41 LCD Tab ................................................................... 107 Figure 3-42 Time and Attendance Tab ................................................... 109 Figure 3-43 Time and Attendance - Disabled Mode ....................................... 110 Figure 3-44 Time and Attendance – F-Key as Input Mode ................................. 111 Figure 3-45 Time and Attendance - Disabled Mode ....................................... 112 Figure 3-46 Time and Attendance - Disabled Mode ....................................... 113 Figure 4-1 Enrollment Tab ............................................................. 115 Figure 4-2 Quick Enrollment Dialog Box ................................................ 116 Figure 4-3 FPF cross hairs ............................................................ 116 Figure 4-4 Quick Enrollment Dialog Box - Scan Results ................................. 117 Figure 4-5 Quick Enrollment Dialog Box - User Information ............................. 118 Figure 4-7 Quick Enrollment - Select Destination ...................................... 120 Figure 4-8 Save Template Result Dialog Box ............................................ 120 Figure 4-9 Advanced Enrollment Dialog Box ............................................. 121 Figure 4-10 Advanced Enrollment Dialog Box - Scan Results ............................. 122 Figure 4-11 Advanced Enrollment Dialog Box - Manual Selection ......................... 123 Figure 4-12 Advanced Enrollment Dialog Box - All poor enrollments ..................... 124 Figure 4-13 Advanced Enrollment Dialog Box - User Information ......................... 125 Figure 4-16 Save Template Result Dialog Box ........................................... 127 Figure 4-17 Card Enrollment Dialog Box ................................................ 128 Figure 4-18 Card Enrollment - Select Destination ...................................... 129 Figure 4-19 Save Card Enrollment to Device Dialog Box ................................. 130 Figure 5-1 Smart Card Sidebar Tab Dialog Box .......................................... 132 Figure 5-2 Smart Card Device Manager .................................................. 133 Figure 5-3 Smart Card Security Settings Dialog Box .................................... 137 Figure 5-4 Change Site Key Dialog Box ................................................. 138 Figure 5-5 Change Site Key Warning .................................................... 138 Figure 5-6 Reset Site Key Dialog Box .................................................. 139 Figure 5-7 Change MiFare Plus Key Dialog Box .......................................... 140 Figure 5-8 Reset MiFare Plus Key Dialog Box ........................................... 140 Figure 5-9 16K iCLASS Smart Card Layout Manager ....................................... 142 Figure 5-10 32K iCLASS Smart Card Layout Manager ...................................... 143


Table of Content

Figure 5-11 1 kilobyte MiFARE Smart Card Layout Manager ............................... 144 Figure 5-12 4 kilobyte MiFARE Smart Card Layout Manager ............................... 145 Figure 5-13 DESFire Card Layout Dialog Box ............................................ 149 Figure 5-14 Smart Card Manager ........................................................ 150 Figure 5-15 Create Site Key Dialog Box ................................................ 155 Figure 5-16 Create MiFare Plus Key Dialog Box ......................................... 158 Figure 6-1 Broadcast Screen ........................................................... 160 Figure 6-2 Device Parameters - General Tab ............................................ 161 Figure 6-3 Device Parameter - Tab Selection Menu ...................................... 162 Figure 6-4 Device Parameter - All Tabs Displayed ...................................... 163 Figure 6-6 Broadcast Status - Success ................................................. 165 Figure 6-7 Select File Dialog Box - Firmware File ..................................... 166 Figure 6-8 Select File Dialog Box - Firmware File ..................................... 167 Figure 6-9 Broadcast Status - Success ................................................. 168 Figure 6-10 Select File Dialog Box - Audio File ....................................... 169 Figure 6-11 Select File Dialog Box - Audio Directory Drop-down List ................... 169 Figure 6-12 Select File Dialog Box - Smart Card Layout File ........................... 170 Figure 6-13 Select File Dialog Box - Image File ....................................... 171 Figure 7-1 Log Tab .................................................................... 173 Figure 7-2 Application Event Log ...................................................... 174 Figure 7-3 Transaction Log ............................................................ 175 Figure 7-4 Download Transaction Log ................................................... 176 Figure 7-5 Device Event Log ........................................................... 179 Figure 8-1 File Menu .................................................................. 181 Figure 8-2 Login Dialog Box ........................................................... 182 Figure 8-3 Change Password Dialog Box ................................................. 182 Figure 8-4 Manage Menu ................................................................ 183 Figure 8-5 Tools Menu ................................................................. 184 Figure 8-6 Wiegand .................................................................... 185 Figure 8-7 Custom Wiegand Format - Add Button ......................................... 186 Figure 8-8 New Wiegand Format Dialog Box .............................................. 187 Figure 8-9 Week Setting ............................................................... 187 Figure 8-10 Firmware Upgrade - Step 1 ................................................. 188 Figure 8-11 Firmware Upgrade - Step 2 ................................................. 189 Figure 8-12 Firmware Upgrade - Step 3 ................................................. 189 Figure 8-13 Final Confirmation ........................................................ 190 Figure 8-14 Sensor Test Dialog Box .................................................... 191 Figure 8-15 Synchronization Dialog Box ................................................ 192 Figure 8-16 Synchronization Result Dialog Box ......................................... 192 Figure 8-17 Reset To Factory Defaults Dialog Box ...................................... 193 Figure 8-18 Miscellaneous Tab – Realtime Activity Logging ............................. 195 Figure 8-19 Realtime Activity Monitor ................................................. 196 Figure 8-20 Realtime Activity Monitor – Filtered Activities ........................... 197 Figure 8-21 Options – Save Templates to Database ...................................... 198 Figure 7-22 Help Menu ................................................................. 199 Figure 8-23 Product Registration Dialog Box ........................................... 200 Figure 8-24 About SecureAdmin Lite Dialog Box ......................................... 200 Figure 9-1: V-Station Lite Device Front Panel ......................................... 202 Figure 9 - 2 SecureAdmin - Device Security Options .................................... 204 Figure 9 - 3 SecureAdmin Lite - Device Security Options ............................... 205 Figure 9 - 4: LCD Login Option ........................................................ 206 Figure 9 - 5: Enter Device Password ................................................... 206 Figure 9 - 6: Main Menu ............................................................... 207


Table of Content

Figure 9 - 7 Enter ID Screen .......................................................... 207 Figure 9 - 8 Enter Device Password .................................................... 208 Figure 9 - 9 Place Finger Screen ...................................................... 208 Figure 9 - 10: Main Menu .............................................................. 208 Figure 9 - 11 System Menu Icon ........................................................ 209 Figure 9 - 12 IO Menu Icon ............................................................ 210 Figure 9 - 13 IO - System ............................................................. 210 Figure 9 - 14 TCP/IP - IO ............................................................. 211 Figure 9 - 15 DHCP Mode - TCP/IP ...................................................... 211 Figure 9 - 16 Static Mode - TCP/IP .................................................... 212 Figure 9 - 17 IP Address - Static ..................................................... 212 Figure 9 - 18 Subnet Mask - Static .................................................... 213 Figure 9 - 19 Gateway - Static ........................................................ 213 Figure 9 - 20 RS-485 – IO ............................................................. 214 Figure 9 - 21 Baudrate – RS-485 ....................................................... 214 Figure 9 - 22 Net ID – RS-485 ......................................................... 215 Figure 9 - 23 Wiegand – IO ............................................................ 215 Figure 9 - 24 Input Port – Wiegand .................................................... 216 Figure 9 - 25 Output Port – Wiegand ................................................... 216 Figure 9 - 26 Tamper – IO ............................................................. 217 Figure 9 - 27 State – Tamper .......................................................... 217 Figure 9 - 28 Biometric – Tamper ...................................................... 218 Figure 9 - 29 Erase Template – Tamper ................................................. 218 Figure 9 - 30 Send Wiegand – Tamper ................................................... 219 Figure 9 - 31 Door Control – IO ....................................................... 219 Figure 9 - 32 SDC Settings – Door Control ............................................. 220 Figure 9 - 33 Mode - SDC Settings ..................................................... 220 Figure 9 - 34 Unlock Duration - SDC Settings .......................................... 221 Figure 9 - 35 Held Open Duration - SDC Settings ....................................... 221 Figure 9 - 36 Alarm Type – SDC Settings ............................................... 222 Figure 9 - 37 Exit Mode – SDC Settings ................................................ 222 Figure 9 - 38 Mode – Exit Mode ........................................................ 222 Figure 9 - 39 Egress Timeout – Exit Mode .............................................. 223 Figure 9 - 40 TOM – Door Control ...................................................... 223 Figure 9 - 41 Mode – TOM .............................................................. 224 Figure 9 - 42 Timeout – TOM ........................................................... 224 Figure 9 - 43 USB Menu Icon ........................................................... 225 Figure 9 - 44 USB – System ............................................................ 225 Figure 9 - 45 File Transfer – USB ..................................................... 226 Figure 9 - 46 Firmware – File Transfer ................................................ 226 Figure 9 - 47 Copy to Device – Firmware ............................................... 227 Figure 9 - 48 Language – File Transfer ................................................ 228 Figure 9 - 49 Copy Language prompt– Firmware .......................................... 228 Figure 9 - 50 Audio – File Transfer ................................................... 229 Figure 9 - 51 Tamper – Audio .......................................................... 229 Figure 9 - 52 On Device – Tamper ...................................................... 229 Figure 9 - 53 On USB – Tamper ......................................................... 230 Figure 9 - 54 Verify Success – Audio .................................................. 231 Figure 9 - 55 On Device – Verify Success .............................................. 231 Figure 9 - 56 On USB – Verify Success ................................................. 232 Figure 9 - 57 Verify Failed – Audio ................................................... 233 Figure 9 - 58 On Device – Verify Failed ............................................... 233 Figure 9 - 59 On USB – Verify Failed .................................................. 234


Table of Content

Figure 9 - 60 Wallpaper – File Transfer ............................................... 235 Figure 9 - 61 On Device – Wallpaper ................................................... 235 Figure 9 - 62 On USB – Wallpaper ...................................................... 236 Figure 9 - 63 Event Log – File Transfer ............................................... 237 Figure 9 - 64 Initialize USB – USB .................................................... 237 Figure 9 - 65 Settings Menu Icon ...................................................... 239 Figure 9 - 66 Settings – System ....................................................... 239 Figure 9 - 67 Erase Tran. Log – Settings .............................................. 240 Figure 9 - 68 Template Type – Settings ................................................ 240 Figure 9 - 69 Reset Settings – Setting ................................................ 241 Figure 9 - 70 Time Attendance – Settings .............................................. 242 Figure 9 - 71 Reboot Device – Setting ................................................. 242 Figure 9 - 72 Setting Menu ............................................................ 243 Figure 9 - 73 LCD/Sound – System ...................................................... 243 Figure 9 - 74 Backlight Timeout – LCD/Sound ........................................... 244 Figure 9 - 75 Key Press Sound – LCD/Sound ............................................. 244 Figure 9 - 76 LCD off Timeout – LCD/Sound ............................................. 245 Figure 9 - 77 Date/Time – LCD/Sound ................................................... 245 Figure 9 - 78 Time – Date/Time ........................................................ 246 Figure 9 - 79 Date – Date/Time ........................................................ 247 Figure 9 - 80 Security Menu Icon ...................................................... 248 Figure 9 - 81 Security Menu ........................................................... 249 Figure 9 - 82 Biometric Menu – Security ............................................... 249 Figure 9 - 83 Duress Mode – Biometric ................................................. 249 Figure 9 - 84 Password – Biometric .................................................... 250 Figure 9 - 85 Biometric – Biometric ................................................... 250 Figure 9 - 86 Access Schedule – Biometric ............................................. 251 Figure 9 – 87 CVE Mode – Biometric .................................................... 251 Figure 9 - 88 Security Menu ........................................................... 252 Figure 9 - 89 Communication Menu – Security ........................................... 252 Figure 9 - 90 Secure Connection – Communication ....................................... 253 Figure 9 - 91 Ethernet Security – Communication ....................................... 253 Figure 9 - 92 Aux Port State – Communication .......................................... 254 Figure 9 - 93 Security Menu ........................................................... 255 Figure 9 - 94 Global Security Menu – Security ......................................... 255 Figure 9 - 95 Verify Security – Global Security ....................................... 255 Figure 9 - 96 Identify Security – Global Security ..................................... 256 Figure 9 - 97 Security Menu - ......................................................... 257 Figure 9 - 98 Login Option Menu – Security ............................................ 257 Figure 9 - 99 Login Options – Login ................................................... 257 Figure 9 - 100 Login Password – Login ................................................. 258 Figure 9 -101 Information menu ........................................................ 258 Figure 9 -102 Information- Device Parameters .......................................... 259 Figure 9 -103 Information- Device Name ................................................ 259 Figure 9 -104 Information Device name ................................................. 259 Figure 9 -105 Information - Device Type ............................................... 260 Figure 9 -106 Information - Device Serial Number ...................................... 260 Figure 9 -107 Information- Template Parameters ........................................ 261 Figure 9 -108 Information – Template Type ............................................. 261 Figure 9 -109 Information – Template Type ............................................. 261 Figure 9 -110 Information- Number of Templates Enrolled ............................... 262 Figure 9 -111 Information – Maximum Templates ......................................... 262 Figure 9 -112 Information- Communication Parameters ................................... 262


Table of Content

Figure 9 -113 Information – Device IP ................................................. 263 Figure 9 -114 Information – Device IP ................................................. 263 Figure 9 -115 Information – Device MAC Address ........................................ 263 Figure 9 -116 Information – Serial Communication Baud Rate ............................ 264 Figure 9 -117 Device screen with Device ID displayed .................................. 264 Figure 9 -118 Information- Firmware Parameters ........................................ 264 Figure 9 -119 Information – Firmware Version .......................................... 265 Figure 9 -120 Main menu screen with Template icon selected ............................ 265 Figure 9 -121 Template – Add Template ................................................. 266 Figure 9 -122 Enroll Template ......................................................... 266 Figure 9 -123 Enroll Template – Enter Id .............................................. 266 Figure 9 -124 Enroll Template – Enroll Id with Prox ................................... 267 Figure 9 -125 Enroll Template – Place Finger .......................................... 267 Figure 9 -126 Enroll Template - Enrollment Quality .................................... 268 Figure 9 -127 Enroll Template – Get Extended Id ....................................... 268 Figure 9 -128 Enroll Template – Enter Extended Id ..................................... 268 Figure 9 -129 Enroll Template –Enter User Id .......................................... 269 Figure 9 -130 Enroll Template – Provide Index ......................................... 269 Figure 9 -131 Enroll Template – Provide Password ...................................... 269 Figure 9 -132 Enroll Template – Enter CSN ............................................. 270 Figure 9 -133 Enroll Template – Enter CSN Manually .................................... 270 Figure 9 -134 Enroll Template - Save To ............................................... 271 Figure 9-135 Enroll Template – Enter Site Key ......................................... 271 Figure 9-136 Enroll Template – Place Smart Card ....................................... 272 Figure 9 -138 Enroll Card ............................................................. 273 Figure 9 -139 Enroll Card ............................................................. 273 Figure 9 -140 Enroll Card – Select Card Only .......................................... 273 Figure 9 -141 Enroll Card - Enter Enroll ID ........................................... 274 Figure 9 -142 Enroll Card –Provide CSN ................................................ 274 Figure 9 -143 Enroll Card - Enter CSN ................................................. 274 Figure 9 -144 Edit Enrollment ......................................................... 275 Figure 9 -145 Edit Enrollment - Enter Enroll ID ....................................... 276 Figure 9 -146 Edit Enrollment – Provide Index ......................................... 276 Figure 9 -147 Edit Enrollment – Select Admin Level .................................... 276 Figure 9 -148 Edit Enrollment - Provide Index ......................................... 277 Figure 9 -149 Edit Enrollment – Enter Password ........................................ 277 Figure 9 -150 Edit Enrollment – Get CSN ............................................... 277 Figure 9 -151 Edit Enrollment - Provide CSN ........................................... 278 Figure 9 -152 Edit Enrollment – Store Template ........................................ 279 Figure 9 -153 Edit Card Only Enrollment ............................................... 279 Figure 9 -154 Edit Card Only Enrollment – Enter Edit Id ............................... 279 Figure 9 -155 Edit Card Only Enrollment – Enter Index ................................. 280 Figure 9 -156 Edit Card Only Enrollment – Get CSN ..................................... 280 Figure 9 -157 Edit Card Only Enrollment – Enter CSN ................................... 280 Figure 9 -158 Delete Template ......................................................... 281 Figure 9 -159 Delete Template ......................................................... 282 Figure 9 -160 Delete Template – Enter Delete Id ....................................... 282 Figure 9 -161 Delete Template – Provide Template Index ................................ 282 Figure 9 -162 Delete Template – Provide Delete Type ................................... 283 Figure 9 -163 Delete Template – Confirm Deletion ...................................... 283 Figure 9 -164 Delete Template ......................................................... 284 Figure 9 -165 Delete Template – Delete All Template ................................... 284 Figure 9 -166 Delete Template – Confirm Deletion ...................................... 284


Table of Content

Figure 9 -167 Verify Template ......................................................... 285 Figure 9 -168 Keypad Verification –Enter Verify Id .................................... 286 Figure 9 -169 Keypad Verification –Place finger ....................................... 286 Figure 10-1 Suggested Fingers ......................................................... 289 Figure 10-2 Amber LED ................................................................. 289 Figure 10-3 Fingertip on Ridge-Lock ................................................... 289 Figure 10-4 Slide Finger Across Ridge-Lock ............................................ 290 Figure 10-5 Position Joint on Ridge-Lock .............................................. 290 Figure 10-6 Apply Correct Pressure .................................................... 290 Figure 10-7 Wait for Green LED ........................................................ 291 Figure 10-8 Lift Finger Up and Off .................................................... 291 Figure 10-9 Correct Placement ......................................................... 292 Figure 10-10 Incorrect Placement ...................................................... 292 Figure 10-11 Place Finger Close to Center ............................................. 293 Figure 10-12 Do Not Rotate Finger ..................................................... 293 Figure 10-13 Finger Cores ............................................................. 293 Figure 10-14 FPF Function ............................................................. 295 Figure 11-1 Backup Settings ........................................................... 297 Figure 11-2 Backup path for SQL Server 2008 ........................................... 298 Figure 11-3 Backup path for SQL Server 2005 ........................................... 298 Figure 11-4 Restore Settings .......................................................... 300 Figure 11-5 Restore operation to restart the SecureAdmin Lite service. ................ 301

LIST OF TABLES

Table 1-1 Template Support Comparison .................................................. 19 Table 3-1 Wiegand Formats and Associated Valid Values .................................. 89 Table 5-1 Smart Card Template Support ................................................. 153


Introduction

CHAPTER 1 - INTRODUCTION

CHAPTER OVERVIEW

This chapter presents an introduction to the 4G Lite devices, together with a summary of the template types used.

This manual provides step-by-step procedures for operating a 4G V-Flex Lite, 4G CR-Pass, 4G V-Station Lite and Secure Control devices. This manual should be used in conjunction with the Quick Start Guide and the Installation Guide.

1.1 TEMPLATE SUPPORT

All biometric systems operate on the simple concept of comparing a stored record of a user’s biometric data (fingerprint, finger vein, face, etc.) with data being supplied in real time by the user requesting access. The real time data is converted into a form that can be compared to the record, and if the two data sets match with enough certainty, the user is authenticated. The process of first capturing the biometric data is called enrolling, while the action of authenticating the user is called verification. During the enrollment process, the original biometric data is processed, highly compressed, and stored on the unit (or another storage system like the PC) as a template. User data such as a unique ID number, name, and other information is added to associate a person with the template.

The type of “templates” used by L-1 Identity Solutions 4G Lite products is:

1:1 Template (.tem)

1:500 Searching Template (.tms)

User Record (.vur)

Biometric User Record (.bur)

1.1.1 1:1 TEMPLATE OR 348-BYTE TEMPLATES

A 348-byte template (*.tem) contains a unique ID, which is usually associated with a single individual. If multiple enrollments for additional fingers of the same person are required, the same ID is used but a unique index value (0-255) is assigned to each enrollment under that ID.


Introduction

A 348-byte template (*.tem) is a tag-based, variable length record which includes the following

elements:

Global data-This is information relevant to the entire record, such as user ID, name, password, etc. Some fields are “Required” while others are “Optional.” The User ID field, for example, is required.

Enrollment data-This is data pertaining only to a particular finger. It is a section of data that contains biometric information along with specific information relating to that enrollment, such as which sensor was used, which finger was enrolled, the security level for the finger, and the index. A User Record can contain more than one enrolled finger when stored on the device.

User data-This is a user defined variable length block of data that can either be global or enrollment specific. Data in this block is accessed all at once, rather than being divided into separately named fields.

1.1.2 1:500 SEARCHING TEMPLATES

1:500 searching template (*.tms) contains the entire 1:1 template, which is 348 bytes, with the addition of 2140 bytes of data needed for searching functionality, making the total length of this searching template 2488 bytes. When the device mode is configured for 1:500 TMS, the device will have a maximum capacity of 500 templates.

1.1.3 USER RECORDS

A User Record (*.vur) includes these elements:


Enrollment data-This is data pertaining only to a particular finger. It is a section of data that contains compressed fingerprint information along with specific information relating to that enrollment, such as which sensor was used, which finger was enrolled, the security level for the finger, and the index. A User Record can contain more than one enrolled finger when stored on the device.



Introduction

There are two data storage options for User Records: Minimum (ID only) and Standard. The amount of data stored in the 4G Lite devices data section depends on the option chosen.

1.1.4 BIOMETRIC USER RECORDS

The Biometric User Record can be utilized on the 4G products for the following authentication

purposes:

1:1 Verification

1:5K Identification

A Biometric User Record is a tag-based, variable length record which includes the following elements:


Enrollment data-This is data pertaining only to a particular finger. It is a section of data that contains biometric information along with specific information relating to that enrollment, such as which sensor was used, which finger was enrolled, the security level for the finger, and the index. A User Record can contain more than one enrolled finger when stored on the device.


1.1.5 CARD ONLY RECORD

A Card Only Record is consists of Card and User Access Data. As the name suggest, Card Only Record does not include any biometric data. Authentication is based on the Card Serial Number.


Introduction

1.1.6 TEMPLATE SUPPORT SUMMARY

The table below summarizes the supported template capabilities of the different L-1 Identity Solutions products.

Table 1-1 Template Support Comparison

4G Lite Model Name

Maximum

Templates Default

Template

Type

Template Type Supported

1:1 1:N 1:1

TEM 1:1

VUR 1:1

BUR 1:500 TMS

1:5K BUR

Fingerprint Devices

4G V-Flex Lite (S) 25K 5K 1:5K BUR Yes Yes Yes Yes Yes

4G V-Flex Lite (S, P) 25K 5K 1:1 BUR Yes Yes Yes Yes Yes

4G V-Flex Lite (S, NW) 25K 5K 1:5K BUR Yes Yes Yes Yes Yes

4G V-Flex Lite (S, P, NW) 25K 5K 1:1 BUR Yes Yes Yes Yes Yes

4G V-Flex Lite (S, O) 25K 5K 1:1 BUR Yes Yes Yes Yes Yes

4G V-Flex Lite (S, O, NW) 25K 5K 1:1 BUR Yes Yes Yes Yes Yes

4G V-Station Lite (S) 25K 5K 1:1 BUR Yes Yes Yes Yes Yes

4G V-Station Lite (S, P) 25K 5K 1:1 BUR Yes Yes Yes Yes Yes

4G V-Station Lite (S, NW) 25K 5K 1:1 BUR Yes Yes Yes Yes Yes

4G V-Station Lite (S, P, NW) 25K 5K 1:1 BUR Yes Yes Yes Yes Yes

4G V-Station Lite (S, O) 25K 5K 1:1 BUR Yes Yes Yes Yes Yes

4G V-Station Lite (S, O, NW) 25K 5K 1:1 BUR Yes Yes Yes Yes Yes

Card Only Devices

4G CR-Pass (P) 25K N/A Card Info N/A N/A N/A N/A N/A

4G CR-Pass (P, NW) 25K N/A Card Info N/A N/A N/A N/A N/A

4G CR-Pass (O) 25K N/A Card Info N/A N/A N/A N/A N/A

4G CR-Pass (O, NW) 25K N/A Card Info N/A N/A N/A N/A N/A


Introduction

1.2 PROXIMITY CARDS

All 4G Lite devices that have embedded proximity card reading capability can be programmed to use a given card ID number as a standard “User ID.” The majority of proximity cards are of the User Card type. Once a card has been designated as one type, it will remain that type unless it is deleted and enrolled again.

Figure 1-1 HID Prox Card

Note that not all proximity cards have card numbers printed on them. There are two basic categories of proximity cards:

User Cards

Command Cards (Enroll or Delete).

1.2.1 COMMAND CARDS

Command cards allow users to be added or removed from a 4G Lite device without requiring PC-based administrative software. These can be useful for creating and removing temporary visitor’s badges or administering the system when the PC is malfunctioning or otherwise unavailable. There are two types of Command cards:

Enroll command cards

Delete command cards.

Command cards must be created with the SecureAdmin Lite software.


Introduction

1.3 SMART CARDS

Some models of the 4G Lite devices incorporate a contactless smart card reader. The user’s template is written to a smart card during enrollment and then later read from the smart card during verification, eliminating the need for network-based template management operations.

1.4 SECUREADMIN LITE APPLICATION

SecureAdmin Lite is a client-server based application used to administer 4G Lite devices. It allows you to carry out various operations on devices including registration of device, enrollment, setting parameters etc. An administrator must login to the application to use these features.

1.4.1 LOGIN

An administrator can login to the SecureAdmin Lite Client by using the credentials provided during the installation of SecureAdmin Lite Server. SecureAdmin Lite will remember the last Login ID and Server details.

Figure 1-2 SecureAdmin Lite – Login Screen

1.4.1.1 TO LOGIN

1. Enter the Login ID and Password details into the appropriate fields.

2. Enter Server as IP Address \ Name of the machine where SecureAdmin Lite server is installed.

3. Click Login.


Introduction

1.4.2 SECUREADMIN LITE MAIN SCREEN

After successful login, the SecureAdmin Lite main screen will be displayed. The main screen consists of the Quick Access Panel and Menu Bar for easy access to various features.

Figure 1-3 SecureAdmin Lite - Main Screen

1.3.2.1 QUICK ACCESS PANEL

Using the Quick Access Panel, users can access\navigate to all the features quickly. Options would be listed on clicking on any of the features in the Quick Access Panels.

Users - Create Users/Groups/Companies/Sites/Departments, Monitor Templates Stored in the Database or Device

Network - Register Devices, Access Device Settings

Enrollment - Enroll Fingerprint or Card templates


Introduction

Smart Card - Manage Card settings and Card data. Create Site/Mifare Plus key.

Broadcast - Broadcast Device Parameters, Firmware Packages, Smart Card Layout or Audio Files

Log - Monitor and Download Transaction, Application and Device Event Logs

1.3.2.2 MENU BAR

The Menu Bar has four menus where various features of SecureAdmin can be accessed along with the sub-menus within.

File - Change login profile and login password

Manage - Quick Access menus options

Tools - Perform Sensor Test, Firmware Upgrade, Synchronization, Reset to Factory Defaults, Realtime Activity Monitoring commands, Wiegand, Week Setting, Template Options

Help - View Product Registration link and Copyright declaration


Managing Users

CHAPTER 2 - MANAGING USERS

CHAPTER OVERVIEW

From this chapter onwards in the document, the focus is on using SecureAdmin Lite.

This chapter explains how to manage users, user groups, sites, companies, departments, templates on device and database using the Users tab in SecureAdmin Lite.

2.1 MANAGING USERS

To manage Users, Templates, User Groups, Companies, Sites and Departments, click the Users tab from the Quick Access Panel on the left pane of SecureAdmin Lite.

Figure 2-1 Users Tab


Managing Users

2.2 USERS TAB

Users tab displays the users in the currently selected database.

Use the various controls at the bottom of the window to navigate quickly through the result pages. If you are searching for a specific user, you can use the filter function to find them quickly.

2.2.1 TO FILTER BY USER

1. Enter the user’s details into the appropriate NAME fields.

2. Click the Filter button. Any results matching your filter terms are displayed.

2.2.2 TO ADD A USER

1. Click the Add User button. The Add User dialog box is displayed.

2. Provide the new user’s details in the various fields and drop-down lists. The button to the right of any drop-down list allows you to add a new category to that drop-down list without having to close the dialog box and switch to a different tab.

Figure 2-2 Add User Dialog Box

3. You can create Secure Admin Lite Login credentials for the newly added user by checking the checkbox “Create SecureAdmin Lite Login Credentials for User”. Provide Login ID, New password and confirm password.


Managing Users

4. Click Save & Close. The new users details are saved, the dialog box closes, and the new user is displayed in the Users list. User can login with newly added user.

To close the dialog box without saving the user, click the Close button.

NOTICE

It is recommended that users are added before enrollment.

2.3 MANAGING TEMPLATES

The Users tab allows you to manage templates on a device and in a database. The controls on this tab allow filtering and deleing selected/all templates of Device and Database.

Figure 2-3 Templates on Device


Managing Users

2.3.1 VIEWING TEMPLATES ON A DEVICE

1. Double-click the Device Network item in the network tree. The network tree expands and shows all device groups in the device network.

2. Double-click the device group item you are interested in (“Default Group” in the example). Devices in the group are shown in the network tree.

3. Double-click the device you want to see the templates of (“Device0” in the example). The templates on that device are displayed in the list.

Use the various controls at the bottom of the tab to navigate quickly through multiple pages of results.

If you are searching for a specific template, you can use the filter function to find it quickly. To filter by template details:

2.3.1.1 FILTER BY TEMPLATE DETAILS

1. Enter the search terms into the appropriate fields.


2.3.2 VIEWING TEMPLATES IN A DATABASE

To view the templates in a database, double-click the Database item in the network tree and select the Templates tab. The templates on the database are displayed in the list.

If you are searching for a specific template in the database, you can use the filter function to help you find it.

2.3.2.1 FILTER BY TEMPLATE DETAILS

1. Enter the search terms into the appropriate fields.

2. Click the Filter button. Any templates matching your filter terms are displayed.


Managing Users

Figure 2-4 Templates in Database

Use the various controls at the bottom of the tab to navigate quickly through multiple pages of results.

2.3.3 EDITING TEMPLATES IN DATABASE

1. Click the template you want to edit. The template is highlighted and the check box in the leftmost column is populated.

2. For the selected template, click the pencil icon to the right of the check box. An Edit Template dialog box is displayed.


Managing Users

Figure 2-5 Edit Template Dialog Box

3. Select a device in the Current Device drop-down list.

4. Click Edit. An Edit Enrollment dialog box is displayed.

Figure 2-6 Edit Enrollment Dialog Box


Managing Users

Edit Enrollment screen displays the edit options as per the product type of the selected device

(i) Card + Biometric products: Here, user is allowed to edit both Card and Biometric data.

(ii) Card Only products: Here, user is allowed to edit only Card data.

(iii) Biometric Only products: Here, user is allowed to edit only Biometric data.

5. Perform the necessary edits to the template.

6. Click Finish.

2.3.4 VERIFYING TEMPLATES

Figure 2-7 Templates Screen


Managing Users

2.3.4.1 TO VERIFY TEMPLATES ON A DEVICE

1. Open the Users tab in Quick Access Panel.

2. Select a device in the network tree

3. Select the template you want to verify. The template is highlighted and the check box in the left-most column is populated.

4. For the selected template, click the yellow check mark icon to the left of the Content Type column.

5. Place a finger on the device’s sensor and remove as directed by the prompts.

6. SecureAdmin Lite displays a Verification Pass or a Verification Fail message.

NOTICE

Yellow check mark icon for Verification will be enabled in Device and

Database only when template has biometric data

2.3.4.2 TO VERIFY TEMPLATES FROM DATABASE

1. Open the Users tab in Quick Access Panel.

2. Select database in the network tree

3. Select the template you want to verify in the Templates tab. The template is highlighted and the check box in the left-most column is populated.

4. For the selected template, click the yellow check mark icon to the left of the Content Type column.

5. A Verify Template dialog box is displayed.

6. Select a device from the Current Device drop-down list.

7. Click Verify.

8. Place a finger on the device’s sensor and remove as directed by the prompts.

9. SecureAdmin Lite displays a Verification Pass or a Verification Fail message.

2.3.5 COMPARING TEMPLATES

TO COMPARE A TEMPLATE ON A DEVICE TO A TEMPLATE IN THE DATABASE

1. Double-click a device in the network tree.

2. On the Device tab, select the template you want to compare.


Managing Users

3. For the selected template, click the eye icon. A Compare Templates dialog box is displayed with three categories i.e. Biometric Data, User Access Data and Card Data

Figure 2-8 Compare Templates Dialog Box

4. Compare the templates’ information. Differences between two templates would be highlighted in the colour red.

5. Click Close when you are finished.


Managing Users

2.4 MANAGING TEMPLATE SETTINGS

The Template Settings feature lets an administrator set following access rules for individual users or for all users. Template Settings will be applied to all the templates having same User ID regardless of their indices.

For example, there exist two templates with User ID 1 and Index 0, User ID 1 and Index 1, applying any rule to Template 1:0 will result in having same rules for template 1:1.

2.4.1 PROX USER MODE

Prox User Mode is applicable only to devices equipped with proximity card readers. The administrator can assign different authentication rules on user-by-user basis or same authentication rules for all users available on the selected device. Such setting can be specified in the Network Settings → Device → Access Control tab. The authentication rules are described in detail as follows which can be set from the second screen of enrollment:

NOTICE

The Prox Card User Mode will not be applicable when template is

verified from SecureAdmin Lite (Database tab or Device tab and LCD

GUI (Template →Verify).

A. No Rule: If the device is configured such that Device Mode is set to Verify, then the user can use any verify authentication method as follows: i) provide an ID using a prox card and place finger on sensor or ii) provide an ID by using the LCD keypad and place finger on sensor. If the device is configured such that the Device Mode is set to Identify, then the user can also use the identify authentication method as well as verify authentication method.

B. Card + Biometric: User can gain access to premise only when authentication is initiated by showing the card followed by successful biometric verification. Authentication initiated by any other means will result in failure.

C. Biometric Only: User can gain access to premise only when authentication is initiated by directly placing finger on sensor. Authentication initiated by any other means will result in failure.

D. Card Only: User can gain access to premise only when authentication is initiated by presenting a card to the device. The proximity card must have been previously used to complete an enrolment and that enrolment must exist on the device. The user will not be prompted to place a finger. Authentication initiated by any other means will result in failure.


Managing Users

E. Keypad Only: User can gain access to premise only when authentication is initiated by entering the template ID using the LCD Keypad. The user will not be prompted to place a finger. Authentication initiated by any other means will result in failure.

F. Keypad + Biometric: User can gain access to premise only when authentication is initiated by entering the template ID using the LCD Keypad followed by successful biometric verification. Authentication initiated by any other means will result in failure.

NOTICE

Rules will not be applicable if it authentication is initiated through

SecureAdmin Lite.

2.4.2 SMART CARD USER MODE

Smart Card User Mode is applicable only to devices equipped with OmniKey readers. The administrator can assign different authentication rules on user-by-user basis or same authentication rules for all users available on the selected device. Such setting can be specified in the Network Settings → Device → Access Control tab. The authentication rules are described in detail as follows which can be set from the second screen of enrollment:

NOTICE

The Smart Card User Mode will not be applicable when template is

verified from SecureAdmin (Database tab or Device tab) and LCD GUI

(Template →Verify).

A. No Rule: If the device is configured such that Device Mode is set to Verify, then the user can use any verify authentication method as follows: i) provide an ID using a smart card and place finger on sensor or ii) provide an ID by using the LCD keypad and place finger on sensor..If the device is configured such that the Device Mode is set to Identify, then the user can also use the identify authentication method as well as verify authentication method.

B. Card + Biometric on Card: User can gain access to premise only when authentication is initiated by showing the card followed by successful biometric verification. The smart card


Managing Users

must have been previously used to enrol the user such that the user’s template was saved to the smart card. Authentication initiated by any other means will result in failure.

C. Card + Biometric on Device: User can gain access to premise only when authentication is initiated by showing the card followed by successful biometric verification. The smart card must have been previously used to complete an enrolment and that enrolment must exist on the device. Authentication initiated by any other means will result in failure.

NOTICE

The Smart Card User Mode, Card + Biometric on Device will use

template data from device rather than from Smart Card.

D. Biometric Only: User can gain access to premise only when authentication is initiated by directly placing finger on sensor. Authentication initiated by any other means will result in failure.

E. Card Only: User can gain access to premise only when authentication is initiated by presenting the enrolled card to the device. The smart card must have been previously used to complete an enrolment and that enrolment must exist on the device. The user will not be prompted to place a finger. Authentication initiated by any other means will result in failure.

F. Keypad Only: User can gain access to premise only when authentication is initiated by entering the template ID using the LCD Keypad. The user will not be prompted to place a finger. Authentication initiated by any other means will result in failure.

G. Keypad + Biometric: User can gain access to premise only when authentication is initiated by entering the template ID using the LCD Keypad followed by successful biometric verification. Authentication initiated by any other means will result in failure.

NOTICE


SecureAdmin Lite.


Managing Users

2.4.3 DOOR TIMEOUT

Door Timeout parameter indicates the duration for which the door will be kept unlocked after a successful verification: If Door Timeout is set for a template; the door will be kept unlocked for the duration given for Door Timeout in User access data while enrolling or editing a template. If 0 is set for the door timeout in the Template Settings, the door will be kept open for the Door Unlock Duration specified in the Network Settings → Device → Access Control tab.

2.4.4 TEMPLATE EXPIRY

Template Expiry allows user to specify a date when the template will expire and result in failed verification after the expiry date given in template settings. By default this feature is disabled. User can enable and change the Expiry Date of a template by editing a template.

2.4.5 CONFIGURE TEMPLATE SETTINGS

1. Template Settings can be configured while enrolling a template or editing a template.

2. On the second screen of Enrollment, Select required Prox User Mode Prox User Mode drop-down list.

3. Enter required value in Door Timeout field. Give 0 if you want to use the settings given in Network Settings → Device → Access Control tab.

4. Enter Door ID.

5. Select Activate Template Expiry Date. The Expiry Date field will be enabled.

6 Click the Calendar button. And modify the template expiry date.

7. Click Apply button.

2.5 USER GROUPS TAB

The User Groups tab displays the user groups in the currently selected database.

Use the various controls at the bottom of the tab to navigate quickly through pages of results. If you are searching for a specific user group, you can use the filter function to find it quickly.

2.5.1 TO FILTER BY A USER GROUP

To filter by user group:

1. Enter the user group’s name into the User Group Name field.



Managing Users

Figure 2-9 User Groups Tab

2.5.2 TO ADD A USER GROUP

1. Click the Add User Group button. The Add User Group dialog box is displayed.


Managing Users

Figure 2-10 Add User Group Dialog Box

2. Enter a description of the user group into the Description text box.

3. In the left-hand side of the Available Roles and Privileges area, click the wand next to the action or permission you wish to assign to the new user group. The selected permissions move to the right-hand pane of the Available Roles and Privileges area. You can also drag and drop entire groups of privileges or individual privileges.


Managing Users

Figure 2-11 Assigning Roles and Privileges

4. Click Save & Close. The new user group details and privileges are saved, the dialog box closes, and the new user group is displayed in the User Groups list.

To close the dialog box without saving the user group, click the Close button.


Managing Users

2.6 COMPANIES TAB

The Companies tab displays the companies in the currently selected database.

Use the various controls at the bottom of the tab to navigate quickly through pages of results.

Figure 2-12 Companies Tab

If you are searching for a specific company, you can use the filter function to find them more easily.

2.6.1 TO FILTER BY COMPANY

1. Enter the company name into the Company Name field.



Managing Users

2.6.2 TO ADD A COMPANY

1. Click the Add Company button. The Add Company dialog box is displayed.

2. Provide the new company’s details in the various fields and text boxes.

Figure 2-13 Add Company Dialog Box

3. Click Save & Close. The new company’s details are saved, the dialog box closes, and the new company is displayed in the Companies list.

To close the dialog box without saving the company, click the Close button.


Managing Users

2.7 SITES TAB

The Sites tab displays the sites in the currently selected database.


Figure 2-14 Sites Tab

2.7.1 TO FILTER BY SITE

If you are searching for a specific site, you can use the filter function to find it more easily. To filter by site:

1. Enter a name into the Site Name field.



Managing Users

2.7.2 TO ADD A SITE

1. Click the Add Site button. The Add Site dialog box is displayed.

2. Provide the new site’s details in the various fields and text boxes.

Figure 2-15 Add Site Dialog Box

3. Click Save & Close. The new site’s details are saved, the dialog box closes, and the new site is displayed in the Sites list.

To close the dialog box without saving the site, click the Close button.

2.8 DEPARTMENTS TAB

The Departments tab displays the department names in the currently selected database. Use the various controls at the bottom of the tab to navigate quickly through pages of results.


Managing Users

Figure 2-16 Departments Tab

If you are searching for a specific department, you can use the filter function to find it more easily.

2.8.1 TO FILTER BY DEPARTMENT

1. Enter a name into the Department Name field.


2.8.2 TO ADD A DEPARTMENT

1. Click the Add Department button. The Add Department dialog box is displayed.

2. Provide the new department’s details in the various fields, text boxes, and drop-down lists. The button to the right of any drop-down list allows you to add a new category to that drop-down list without having to close the dialog box and switch to a different tab.


Managing Users

Figure 2-17 Add Department Dialog Box

3. Click Save & Close. The new department’s details are saved, the dialog box closes, and the new department is displayed in the Departments list.

To close the dialog box without saving the department, click the Close button.


Managing Network Settings

CHAPTER 3 - MANAGING NETWORK SETTINGS

CHAPTER OVERVIEW

This chapter details how to view devices in the network and how to configure the various device settings accessible by means of the Device Settings tab and how to register devices connected to a server or connected to a computer. The Network tab allows you to see what devices are connected to the network and allows you to change device settings parameters of online devices and allows you to register new devices on the network.

Figure 3-1 Network

On the Network tab, three buttons are displayed:



Network Tree - This button allows you to see what devices are connected to the network and allows you to configure device settings parameters of online devices

Register via server - This button allows you to register 4G Lite and Secure Control devices that are connected through a SecureAdmin Lite server (this is the recommended method).

Register via client - This button allows you to register a 4G Lite and Secure Control device that is connected directly to the SecureAdmin Lite Client PC.

3.1 VIEW DEVICES IN NETWORK

1. Click the Network Tree button.

2. Double-click the Device Network item in the network tree. The network tree expands to show all groups in the network.

3. Double-click a group in the network tree. In the example below, the group item is named “DefaultGroup”. Any devices in the group are displayed in the network tree under the group they belong to. There is also one device item, named “Device0”, in the group.



Figure 3-2 Network Tree

3.2 REGISTER DEVICE VIA SERVER

1. Click the Register via server button. A Register via Server dialog box is displayed.



Figure 3-3 Register via Server Dialog Box

Note: Depending on the communication type used, the administrator/installer must select Serial Communication, Ethernet Communication as appropriate.

2. Select the Search Automatically check box.

3. Click the Scan button. SecureAdmin Lite scans the network for connected devices and lists the results.

4. In the list, click the Registration Status icon of the device you want to register. A plus sign icon means that the device is available to be added. A check mark icon means the device has already been added. A Server Communication Parameter dialog box is displayed.

5. Select the radio button that corresponds to the way the server will connect to the device (either by Serial Port or Ethernet).

6. If you are connecting via USB, RS-485, enter the appropriate Port, Baud Rate, Device ID and Protocol.

If you are connecting via Ethernet, enter the respective network IP Address, Subnet Mask and Gateway of the device. Select the Obtain IP address from DHCP check box if dynamic IP addressing is used.

7. Click on Next to move to the next step.



Figure 3-4 Register Device

Figure 3-5 Register Device Dialog Box

8. Enter a name for the device in the Device Name field.

9. Select the group the device will belong to in the Group drop-down list.

10. Click Register. A Device Summary dialog box is displayed. The dialog box lists information about the registered device.



Figure 3-6 Device Summary Dialog Box

11. Click OK. The device is now registered.

3.3 REGISTER DEVICE VIA CLIENT

1. Click the Register via client button. The Device Registration Wizard dialog box is displayed.

Figure 3-7 Step 1 Find Device Dialog Box

2. Select either Serial Port - this machine or Ethernet radio button.

3. Enter the appropriate connection details.



If you are connecting via USB/RS-485, enter the appropriate Port, Baud Rate, and Device ID. Check Auto check box if Device ID is not known.

If you are connecting via Ethernet, Enter the network IP Address of the device you want to connect to.

NOTICE

To determine the correct port number while device connected on

USB, look in the Windows Device Manager for a “Gadget Serial”

entry under the Ports (COM & LPT) heading.

NOTICE

When the device is connected to a PC workstation for the first time, a

Found New Hardware message will be displayed. The Hardware

Installation Wizard prompts you to connect to the internet to search

for a driver. Select Not at this time > Next. Then choose Install

the driver automatically.

4. Click Next to move to the next step.



Figure 3-8 Device Information Dialog Box


Figure 3-9 Server Communication Parameter Dialog Box

6. Select the radio button that corresponds how the server will connect to the device, either by Serial Port, Ethernet or Dialup.



7. If connecting via USB or RS-485, enter the appropriate Port, Baud Rate, Device ID and Protocol.

If connecting via Ethernet, enter the respective network IP Address, Subnet Mask and Gateway of the device. Select the Obtain IP address from DHCP check box if dynamic IP addressing is used.


Figure 3-10 Register Device Dialog Box

9. Enter a Device Name.

10. Select the Group the device will belong to from the drop-down menu.

11. Click Register. The Step 5 of 5 Device Summary dialog box is displayed.

Figure 3-11 Device Summary Dialog Box

12. Click OK. The device is now registered.

13. Click Register Another Device. The device registration wizard would start again for another device registration.



NOTICE

If the device is registered with RS485, then during massive data

transfer, Secure Admin will get slower response from device due to

communication interface limitation.

3.4 UNREGISTERING THE DEVICE

1. Click the Network Tree button.

2. Double-click the Device Network item in the network tree. The network tree expands to show all groups in the network.

3. Double-click a group in the network tree to expand



Figure 3-12 SecureAdmin Lite Network Tree

4. Right click on the device you want to unregister. Select the Un-register Device option.

5. Click Yes. The device will now get unregistered. Optionally, you can select Delete all templates from device check box to delete all templates from device.



Figure 3-13 Unregister Device Warning

NOTICE

Unregistering the device will disable the Ethernet security settings on

the device. If the administrator re-registers the device back to the

network, administrator needs to re-enable the Ethernet security on

the device if this option is desired.

NOTICE

Registering and Unregistering procedure for Secure Control and 4G

Lite devices same.



NOTICE

Unregistering the device will remove it from the database and break the connection between the templates stored in the device and the database. If the administrator re-registers the device back to the network, the link will not be restored and the SecureAdmin Lite database will not have records indicating that the templates are located on the device. Therefore, the administrator needs to delete all the templates on the device and if the templates need to be stored on the device, transfer them from the database. The transfer will create new links between the templates stored in the database and the device.

3.5 VIEW DEVICE SETTINGS IN NETWORK

1. Double-click the Device Network item in the network tree.

2. Double-click a group in the network tree. In the example below, the group item is named “DefaultGroup”.

3. Double-click the device for which you want to adjust the settings. Various tabs are displayed for the device. (By default General tab is selected).



Figure 3-14 Device Network Tab

3.5.1 GENERAL TAB

This tab displays basic information about the currently selected 4G Lite or Secure Control devices. No settings can actually be changed from this tab.



Figure 3-15 General Tab – 4G Lite Device



Figure 3-16 General Tab – Secure Control Device

3.5.2 COMMUNICATION TAB

The Communication tab allows you to adjust various communication settings of the selected 4G Lite or Secure Control Devices.



Figure 3-17 Communication Tab – 4G Lite Device



Figure 3-18 Communication Tab – Secure Control

Using the various fields and drop-down lists in the Serial area, adjust these settings:

Device ID

Host Port Protocol

Host Port Baud Rate

Aux Port Password (optional)

Using the various fields in the TCP/IP area, the following can be configured.

If you are using a wired connection, adjust these settings:

Ethernet

DHCP or Static IP

IP Address of current device (if using Static IP)



Subnet Mask (if using Static IP)

Gateway (if using Static IP).

If you are using a wireless connection, configure these settings:

WLAN

DHCP or Static IP

IP Address of current device (if using Static IP)

Subnet Mask (if using Static IP)

Gateway (if using Static IP)

Encryption

Encryption Type

Encryption Key

Current Node or ESSID

Network Type

Managed

Ad-hoc

NOTICE

WLAN Settings are supported for Secure Control device Only.

Using the various controls in the Ethernet Security area, adjust these settings:

Ethernet Security (enable or disable)

Allowed IP Addresses

Allowed IP Address Ranges

Click the Apply button after making any changes on this tab. Click Refresh to see the most recent settings.

Ethernet Security



Ethernet Security is a feature that allows you to specify which IP addresses are allowed to communicate with the device. To activate Ethernet Security, you need to select the Ethernet Security check box. You can then enter up to 100 individual IP addresses and 100 IP ranges. During a device registration via server, the IP of the server machine is logged as an allowed IP into the device.

Aux Port Security

The Aux port can be configured with a password to disable unauthorized use. Once the Aux port is locked with a password, the device cannot be accessed using any application unless the password is supplied to re-enable it. To disable it, enter a numeric password (the password can only be digits, with a maximum of ten digits), and then click Apply. Once the Aux port is disabled, it accepts no communications until it is re-enabled by one of these methods:

If communicating over the Host or Ethernet ports: The Enable Port command enables Aux port communications and a password is not required. This allows the device to be reset over the Host and Ethernet ports if the Aux password is forgotten. SecureAdmin allows this since the network is considered secure.

If communicating over the Aux port: The Enable Port command enables Aux port communications only if the correct password is supplied. All other commands return an error indicating a ‘locked port’ until the port is enabled properly. Many fields in SecureAdmin are blank when the port is locked.

SSL

Secure Socket Layer is a feature that allows you to ensure that communication between the device and SecureAdmin is secured. Enabling SSL will ensure that Device communicates to only trusted software i.e. SecureAdmin.

NOTICE

Aux Port, Ethernet Security and Aux Port Security Settings are

supported for 4G Lite device Only.

3.5.3 LED TABLE TAB

The LED Table tab provides controls that allow you to modify the LED behaviour of the selected device.



Figure 3-19 LED Table Tab

To modify the LED behaviour:

1. Select an action from the LED Action Selection drop-down list.

2. Click the appropriate icons under the Red, Green or Amber columns corresponding to the LED colors you want to illuminate for the selected action.

3. If you want the buzzer to sound for the selected action, select the appropriate check box under the Sound column.

4. Enter the number of milliseconds (maximum 16383) in the Duration and Interval fields.

5. Click Apply.



3.5.4 TAMPER TAB

The Tamper tab provides controls that allow you to enable, disable, modify, and reset the tamper detection feature on the selected device.

Figure 3-20 Tamper Tab

To enable the Tamper detection:

1. Select the Activate Tamper Detection check box.

2. Set Disable Biometric and Erase Device Database option as required.

3. Click Apply.

To stop (disarm) the tamper detection buzzer and audio feedback, click the Reset button. To re-arm the tamper detection, click the Clear & ReEnable button.



3.5.5 ACCESS CONTROL TAB

The Access Control tab provides controls that allow you to configure the selected 4G Lite device’s built-in door controller settings and access rule.

3.5.5.1 CONFIGURING ACCESS CONTROL FOR 4G LITE DEVICE

If you are using Secure Control device to control doors, it must be activated. To activate the Secure Control feature, select the Use Secure Control check box.

Figure 3-21 Access Control Tab – 4G Lite Device

3.5.5.1.1 TO CONFIGURE ACCESS CONTROL

1. Enter number of seconds the door will be unlocked in the Door Unlock Duration field.



2. Enter number of seconds the door will be held open in the Door Held Open field.

3. Select the desired Request to Exit Mode.

There are 3 options available as below.

i. None

ii. Push Button

iii. Motion Detector

4. Enter number of seconds in Egress Timeout field when Request to Exit Mode is selected as Motion Detector or Push Button.

5. Select the desired Alarm Condition.

There are 3 options available as below.

i. Audio Feedback

ii. LED Blinking

iii. LED Blinking and Audio feedback

6. Click the Apply button to save the configuration settings to the device.

3.5.5.1.2 TO CONFIGURE ACCESS RULE

Access Rule is a feature that allows you to set a rule to grant access permission for user on selected device.

By selecting Use Device Settings for all users, rules attached with individual templates will be overridden during verification/identification. In this case, template rules will be overridden. If user selects Template Settings of each user then device settings will be overridden.

1. Select access rule as desired, by selecting Use Device Settings for all users or User Template Settings of each user radio button.

There are 7 options available for Use Device Settings for all users as below.

i. No Rule: During verification/identification device will not follow any rule. Any authentication method remains valid in this mode.

ii. Biometric Only: Device will authenticate finger in case of identification only (i.e. with 1: N template type user should place finger directly on sensor).

iii. Card Only: User needs not to place finger on sensor after waving card. Authentication will be successful on placing card over device card reader.



iv. Keypad Only: Authentication will be successful only if it has been started with device keypad.

v. Biometric + Card: User needs to place finger on sensor after waving card over device card reader.

vi. Biometric + Pin (Password): If template is with PIN then user always needs to enter pin after identification is completed.

vii. Biometric + Card + Pin (Password): User needs to place finger on sensor after waving card over device card reader. In addition, if template avails PIN then user must enter PIN for successful verification.

2. Click the Apply button.

NOTICE


SecureAdmin Lite.

3.5.5.1.3 TO CONFIGURE SMART CARD VERIFICATION

Configuring Smart Card Verification allows you to configure the Card Serial Number with either of the options.

1. Manufacturer’s Serial Number

2. Printed number

During Card only Enrollment for Smart Card products, when user checks checkbox "Read Card Serial Number" and flashes Smart Card, it would read the CSN as per the option selected.

NOTICE

Configure Smart Card Verification feature is only supported for iCLASS

Cards.



CAUTION

Only advanced user is recommeded changing configuration for reading Smart Card Serial Number. Device may not autheticate templates on previously enrolled Smart Cards after changing this confuguration.

3.5.5.1.4 ACTIVATING TIME OVERRIDE MODE

Time Override Mode (TOM) allows an Administrator to temporarily suspend the need for verifications for a specified time period on a device.

TO ENABLE AND CONFIGURE TOM FOR THE SELECTED DEVICE

1. Select the Enable Time Override Mode check box.

2. Enter the number of minutes TOM will be active into the Time Override Duration field. The maximum is 1440 minutes equal to 24 hours.

3. Click the Apply button to activate TOM on the device.

Thirty seconds before TOM is set to expire, the device beeps. After TOM expires, the device returns to using the existing Access Control settings.

NOTICE

TOM feature is not supported when Use Secure Control feature is

enabled.



3.5.5.2 CONFIGURING ACCESS CONTROL FOR SECURE CONTROL DEVICE

Figure 3-22 Access Control Tab – Secure Control Device

3.5.5.2.1 ACTIVATING TIME OVERRIDE MODE

Time Override Mode (TOM) allows an Administrator to temporarily suspend the need for verifications for a specified time period on a device.

TO ENABLE AND CONFIGURE TOM FOR THE SELECTED DEVICE

1. Select the Enable Time Override Mode check box for Door-1, Door-2 as required.

2. Enter the number of minutes TOM will be active into the Time Override Duration field. The maximum is 1440 minutes equal to 24 hours.

3. Click the Apply button to activate TOM on the device for selected Door.

Thirty seconds before TOM is set to expire, the device beeps. After TOM expires, the device returns to using the existing SDAC settings.



3.5.5.2.2 FIRE PANEL INPUT

Fire Panel Input allows administrator to configure Alarm line to receive fire alarm. When signal is received on this line, door is opened electrically and alarm is generated by Secure Control. If TOM is already running and device receives fire alarm, TOM operation will be cancelled and door will be kept open until fire alarm is cleared.

To enable Fire Panel Input on Alarm line, select the Enable Fire Panel Alarm Mode check box.

Fire alarm can be cleared when Disable or Clear & Re-enable command is received by Secure Control from SecureAdmin.

3.5.5.2.3 TO SYNCHRONIZE SECURE CONTROL

Soft Sync allows you to synchronize all connected 4G Lite devices with Secure Control. Secure Control communicates with those devices which are synchronized. If device is already synchronized and Device ID gets change, device will be unsynchronized and requires synchronizing again.

To synchronize devices with secure control, click the Soft Sync button.

Devices can be synchronized when Sync command is received by Secure Control from SecureAdmin or Sync line.

NOTICE

Maximum FOUR devices can be connected with Secure Control and

devices must have unique Device ID.

3.5.6 ACCESS SCHEDULES TAB

The Access Schedule tab provides controls that allow you manage access schedules on the selected device.



Figure 3-23 Access Schedules Tab

NOTICE

4G V-Flex Lite (S,NW), 4G V-Flex Lite (S,P,NW), 4G CR-Pass (P, NW),

4G V-Flex Lite(S, O, NW), 4G CR Pass (O, NW), 4G V-Station Lite

(S,NW), 4G V-Station Lite (S,P,NW) and 4G V-Station Lite(S, O, NW)

devices do not have Wiegand Output functionality hence Duress

Finger options are not available for these products.

To view an existing access schedule, select the check box next to the access schedule you want to review. The item is highlighted in the list and the vertical bars show the schedule. The area in green represents the time period when access is allowed.



In the example above, the selected access schedule is “All Access” and as the name suggests, access is allowed at all times, signified by the full-height green bars.

To enable the use of access schedules, select the Activate User Access Schedule check box.

NOTICE

There are 64 total Access Schedules available on 4G Lite devices. Of

these, 58 are available for modification by the user.

Figure 3-24 New Access Schedule



3.5.6.1 TO ADD AN ACCESS SCHEDULE

1. Click the Add button. A new entry is displayed in the list.

2. Modify Access Schedule Name if required.

3. In the Allowed Access Time area, click inside one of the bars on the desired day of the week and drag up or down to define a time interval. Move the time interval by clicking on it and dragging it to where you want it. Remember that the area in green represents when access is allowed.

4. Apply the new access schedule, as desired, by selecting Entire Week or Weekdays radio button and clicking the Apply Schedule button.

5. Set Schedule Tolerance and Ignore Schedule for Duress Finger (for devices with Wiegand Output functionality) in Options area.

6. Click Apply to apply the schedule.

3.5.6.2 TO SAVE AND UPLOAD ACCESS SCHEDULES

Using the Save and Upload option, you can save the defined access schedule in file format and upload it to other devices or on the same device.

Saving schedules in Access Schedules (*.vsf) file format will only save the access schedule allowed time.

Saving schedules in Access Schedules (*.evsf) file format will save the access schedule allowed time and the custom name given to the access schedule.

Using Upload, you can upload any of the Access Schedules file.

3.5.7 HOLIDAY SCHEDULES TAB

The Holiday Schedule tab provides controls that allow you to manage holiday schedules on the selected device.



Figure 3-25 Holiday Schedules Tab

To view an existing holiday schedule, select the check box next to the access schedule you want to review. The item is highlighted in the list and the vertical bars show the schedule. The area in red represents the time period when access is not permitted.

In the example above, the selected holiday schedule is set to not allow any access on July 4, 2011

3.5.7.1 TO ADD A HOLIDAY ACCESS SCHEDULE

1. Click the Add button. A new entry is displayed in the list.



Figure 3-26 Holiday Schedules Tab - New Holiday Schedule

2. In the Holiday Information area, select the month using the arrow controls and select the day of the holiday schedule by clicking on it.

3. If required, also rename the default holiday name with a custom name.

4. Click inside the bar next to the calendar control and drag up or down to define a time interval. Move the time interval by clicking on it and dragging it to where you want it. Remember that the area in red represents when access is not allowed.

5. Click Apply to apply the holiday schedule.

6. To remove holiday schedules that have already occurred, click the Remove Expired.



3.5.7.2 TO SAVE AND UPLOAD HOLIDAY ACCESS SCHEDULES

Using the Save and Upload option, you can save the defined holiday access schedule in file format and upload it to other devices or on the same device.

Saving defined holidays in Holiday File (*.vhf) file format will only save the holiday access schedule.

Saving defined holidays in Holiday File (*.evhf) file format will save the defined holidays and the custom name given to the holiday schedule.

Using Upload, you can upload any of the Holiday Schedule file.



3.5.8 MISCELLANEOUS TAB

The controls on this tab allow you to activate Send Verification Results, Custom Verification Entry Mode and Realtime Activity Logging and Monitoring settings for the currently selected device.

Figure 3-27 Miscellaneous Tab

3.5.8.1 SEND VERIFICATION RESULT

The Send Verification Result feature allows other verification responses to be sent in addition to the normal response. Under normal operation, the 4G Lite device responds based on how a Verification Action was initiated. When a Wiegand input initiates the action, a Wiegand output responds to it. When a Verification Action is initiated over a communications port, then the response packet is returned on the same communication port (either Host or Aux).



3.5.8.1.1 TO ENABLE AND CONFIGURE THE SEND VERIFICATION RESULT FEATURE

1. Decide which Channel the response is to be sent on.

2. Select the Always or Always (with ID) check box next to the appropriate channel.

If you select Always, a response is sent every time. If you select Always (with ID), a response is also sent out every time, but the first data word returned is the Template ID.

3. Click Apply.

NOTICE

L-1 Identity Solutions recommends that only advanced users who are working with the SecureSDK and writing their own custom software attempt to enable the Host or Aux Always operations.

.

WARNING

Device will hangs and need power cycle, if “Send Verification Results” is configured for channel auxilary port and there is no application at remote host to recevie the results.

3.5.8.2 ACTIVATE REALTIME ACTIVITY

With Realtime Activity Logging and Monitoring, all the activities happening on the device can be monitored real time.

3.5.8.2.1 TO ACTIVATE REALTIME ACTIVITY LOGGING AND MONITORING

1. Select the Activate Realtime Activity Logging and Monitoring checkbox.

2. Click Apply.

3.5.8.3 ACTIVATE CUSTOM VERIFICATION ENTRY MODE

When Custom Verification Entry Mode is enabled, users must enter code through device keypad after verification. The code is logged in the device transaction log.

3.5.8.3.1 TO ENABLE CUSTOM VERIFICATION ENTRY MODE

1. Select the Activate Custom Verification Entry Mode check box.

2. Click Apply.



NOTICE

The Custom Verification Entry Mode feature is supported on 4G V-

Station Lite devices only.

3.5.9 AUDIO TAB

The controls on this tab allow you to manage the audio feedback settings of various actions for the currently selected audio-enabled device.

Figure 3-28 Audio Tab



To change the audio feedback of an action:

1. Select an action from the Audio Directory drop-down list.

2. Click the Upload button. An Open File dialog box is displayed.

3. Navigate to and select the audio file you want to play when the selected action occurs.

4. Click OK. The file is uploaded to the device and is displayed in the list of available audio files.

5. Preview the audio file by selecting it and clicking Play.

Figure 3-29 Audio Tab - New Audio File

6. Set the volume of the selected audio feedback file using the Set File Volume slider.



7. Click Apply to save your changes to the device.

Set the master volume of the selected device using the Device Volume slider.

Remove unwanted audio files by selecting them in the list and clicking the Remove button.

NOTICE

Audio feature is not supported on 4G CR-Pass products.

3.5.10 GENERAL PURPOSE OUTPUT TAB

The General Purpose Output Tab allows the user to set what actions are triggered when the General Purpose Output line (commonly referred to as GPO) is activated.

This tab allows you to control which actions cause the device to set GPO (output line) active and for how long.

Figure 3-30 General Purpose Output Tab



NOTICE

4G V-Flex Lite (S, NW), 4G V-Flex Lite (S, P, NW), 4G V-Flex Lite (S, O,

NW), 4G CR-Pass (P, NW), 4G CR-Pass (O, NW), 4G V-Station Lite

(S,NW), 4G V-Station Lite (S,P,NW) and 4G V-Station Lite(S, O, NW)





3.5.10.1 GENERAL PURPOSE OUTPUT

All 4G Lite devices have General Purpose Output GPO TTL capability. When configured, certain GPO actions can activate GPO line 0. The possible actions are:

Enroll Completed - When a user has completed an enrollment

Enroll Initiated - When a user has initiated an enrollment

Verify/Identify Passed - After a successful verification, initiated from any source

Verify/Identify Failed - After a failed verification, initiated from any source

Finger not Detected - Whenever a finger is expected by the device but not detected

V-Station Admin Mode - When a user enters admin mode from the keypad on a V- Station 4G device (with full administrative privileges)

V-Station Enroll Mode - When a user enters with a V-Station Enroll ID from the keypad on a V- Station 4G device (with Enrollment privileges only)Delete Attempted - When a template delete is initiated, from any source (this applies to templates stored on the device only)

Device Bootup - When a device is booted up, either from a power cycle or from a soft reboot.

File Transfer Complete - When a large file transfer is complete. Used when transferring audio and firmware files.

Tamper Occurred - When Tamper Mode is enabled, physical movement of the device housing triggers a reed switch which in turn activates user specified “Tamper” options on the device.

Duress Finger Detected - When Duress Mode is enabled and a duress finger is detected.

Any of these actions, if configured, can trigger the line active for the Duration that is specified (default 600 ms). All GPO parameters can be reset to defaults be clicking on the Reset GPO Parameters button. By default, the device has GPO action set to “No Action”.

3.5.10.1.1 TO CONFIGURE GPO SETTINGS

1. Select required checkboxes of GPO triggering action for GPO0 line.

3. Enter a value into the Duration field.



4. Click Apply.

3.5.11 WIEGAND TAB

The controls on the Wiegand tab allow you to set the Wiegand Input Format, set Wiegand Output for an events, and upload custom Wiegand formats to a device.

Figure 3-31 Wiegand Tab



NOTICE

4G V-Flex Lite (S, NW), 4G V-Flex Lite (S, O, NW), 4G V-Station Lite (S,

NW), 4G V-Station Lite(S, O, NW) and 4G CR-Pass (O, NW) devices

does not support Wiegand functionality. 4G V-Flex Lite (S, P, NW), 4G

V-Station Lite (S,P,NW) and 4G CR-Pass (P, NW) devices supports

ONLY Wiegand Input functionality.

3.5.11.1 PRE-DEFINED WIEGAND FORMATS

Several Wiegand formats are preloaded on 4G Lite devices and are designated as a Standard type in the table below. They contain an ID of 32 bits or less. All 4G Lite devices support these formats. This tab allows you to select the desired Wiegand format for both input and output. “Standard 26-bits” is the default format.

3.5.11.1.1 TO SET THE WIEGAND FORMAT TO A PRE-DEFINED FORMAT

1. Select the Predefined radio button.

2. Select a Wiegand format in the drop-down list.

3. Click Apply



Table 3-1 Wiegand Formats and Associated Valid Values

Format Type

Alt Site Code and

Fail Site Code

Range

Template ID

Number Range

Extended ID

Number Range

Standard 26-bit Standard 0 - 255 1 - 65535 N/A

Apollo 44-bit Standard 0 - 16383 1 - 65535 N/A

Northern 34-bit Standard 0 - 65535 1 - 65535 N/A

Northern 34-bit [no

parity] Standard 0 - 65535 1 - 65535 N/A

HID Corporate [35-bit] Standard 0 - 4095 1 - 1048575 N/A

Ademco 34-bit Standard 0 - 4095 1 - 1048575 N/A

HID 37-bit Standard 0 - 2047 1 - 16777215 N/A

Generic 64 bit Extended ID

Uploadable N/A 1 - 4294967294

1 -

4611686018427387903

Wiegand 4002 40 bit Extended ID

Uploadable N/A 1 - 4294967294 1 - 274877906943

3.5.11.2 PASSTHRU WIEGAND FORMATS

SecureAdmin provides expanded Wiegand compatibility by allowing you to define a Passthru format. To use this ability, this information is required:

Total bits - The number of Wiegand bits in the Wiegand string (maximum = 64 bits)

ID start bit - the start bit of the ID Field (where the first bit is Bit 0)

Total ID bits - the number of bits in the ID Field (must be contiguous bits).

Using these three pieces of information, when a card is presented to the device, it attempts to decode the ID Field and uses that information as the Template ID number. All Site codes, Parity, and any other data are ignored. Using this ID, the device attempts to verify the template corresponding to the decoded ID. If the ID is not found or if the verification attempt fails, no Wiegand output is sent. To the controller, it appears as if nothing was presented. If the ID is valid and a successful verification is performed, the original Wiegand input string (with Site code, Parity, etc.) will “Pass-Thru” to the Wiegand output unchanged.

Although the Passthru option does not allow Fail Strings, changing the Site Code, or checking parity, it does provide a mechanism for using a wide variety of Wiegand formats.



3.5.11.2.1 TO SET THE WIEGAND FORMAT TO A PASS-THRU FORMAT

1. Select the Passthru radio button.

2. Enter a value in the Total bits field.

3. Enter a value in the ID start bit field.

4. Enter a value in the Total ID bits field.

5. Click Apply.

3.5.11.3 CUSTOM INPUT WIEGAND FORMAT

The Custom Wiegand Input option allows setting a custom Wiegand format as Wiegand input format. Any existing custom wiegand format available on device can be set.

1. Select the Custom radio button.

2. Select the Wiegand format.

3. Click Apply.

3.5.11.4 PULSE WIDTH

The Set pulse width to option allows you to enter custom pulse width duration (in microseconds) for the Wiegand output. This is not recommended unless you are very familiar with the equipment connected to the V-Series 4G device.

3.5.11.4.1 TO SET THE PULSE WIDTH

1. Enter a value into the Set pulse width to field (from 20 to 100 microseconds).

2. Click Apply.

3.5.11.5 PULSE INTERVAL

The Set pulse interval to option allows you to enter custom pulse interval duration for the Wiegand output. This is not recommended unless you are very familiar with the equipment connected to the V-Series 4G device.

3.5.11.5.1 TO SET THE PULSE INTERVAL

1. Enter a value into the Set pulse interval to field (from 20 to 100 microseconds).

2. Click Apply.

3.5.11.6 ACTIVATE WIEGAND INPUT

The Activate Wiegand Input option enables Wiegand input when selected. This allows all Wiegand input communication to the device. If this option is deselected, all Wiegand input data that the device receives is ignored.

To activate Wiegand input, select the Activate Wiegand input check box then click Apply.



3.5.11.7 ACTIVATE WIEGAND OUTPUT

The Activate Wiegand Output enables Wiegand output when selected. If this option is deselected, all Wiegand output data is output in the same format as the Wiegand Input data. There are two options when enabling output, which are selected from the drop-down list to the right of the check box:

Always Output: This enables Wiegand output on all Verifications regardless of whether they were initiated by a Wiegand input, a PC, or any other device. This is the default setting.

Selective Output: This causes the Wiegand output string to be sent whenever a Wiegand input is received.

3.5.11.7.1 TO ACTIVATE WIEGAND OUTPUT

1. Select the Activate Wiegand output check box.

2. Select the desired option in the drop-down list.

3. Click Apply.

3.5.11.8 WIEGAND OUTPUT SETTINGS

The Wiegand Output Settings option allows you to associate Wiegand formats with device events. If you want to use a custom Wiegand format, you must create the custom Wiegand format first.

Duress Finger Mode: The Duress drop down in Wiegand output setting, when selected, offers users a way to indicate an “under duress” situation (such as being forced to open a door) by verifying with a specially designated duress finger. When a successful verification occurs with such a template, the device performs the special action specified, sending the Wiegand output in specified format to alert the door controller of the duress situation. The controller can then respond by alerting security personnel, sounding alarms, etc. Of course, the controller must support such an option.

NOTICE

A template that is specified as a duress template is still subject to

access scheduling, holidays, multi-user mode, and any other

biometric option specified. For this reason, L-1 Identity Solutions

recommends setting any duress template to use Access Schedule #63

(All Access) and not observe holidays.



Tamper: When Tamper mode is enabled, the Tamper drop down in Wiegand output setting, offers users a way to send the Device Serial Number in specified Wiegand output format to alert the door controller of the tamper situation.

Configure Wiegand ID: When a Pass/Fail verification and identification occurs with a template, the device sends the Wiegand output in specified format containing either User ID or Extended ID or Card Serial Number.

3.5.11.8.1 TO SET WIEGAND OUTPUT SETTINGS

Click the Wiegand Output Settings button. The Wiegand Output Settings dialog box is displayed.

Figure 3-32 Wiegand Output Settings Dialog Box

1. Select a Wiegand format from the drop-down list next to a Verification Pass. Repeat for other desired events.

2. Select Wiegand value from Configure Wiegand ID drop-down list.

3. Click Apply. The dialog box closes.

3.5.11.9 CUSTOM WIEGAND SETTINGS

The Custom Wiegand Settings option allows you to manage Wiegand formats. You can upload, edit, and delete Wiegand formats with this option.



3.5.11.9.1 TO UPLOAD CUSTOM WIEGAND OUTPUT SETTINGS

1. Click the Custom Wiegand Settings button. The Custom Wiegand Settings dialog box is displayed.

2. Click on a slot.

3. Select where you want to upload from in the Upload drop-down menu. A dialog box is displayed.

4. Provide the appropriate details in the dialog box for the upload origin you selected.

5. Click Close. The Custom Wiegand Settings dialog box closes.

Figure 3-33 Custom Wiegand Settings Dialog Box

3.5.11.9.2 TO CREATE A CUSTOM WIEGAND FORMAT

1. Click the Custom Wiegand Settings button. The Custom Wiegand Settings dialog box is displayed.

2. Click on a Slot.

3. Select New in the Upload drop-down menu. A Wiegand Format dialog box is displayed.



Figure 3-34 New Wiegand Format Dialog Box

4. Enter a name into the Name field.

5. Enter a value in the Length field.

6. Enter the Wiegand ID Start Position, Length and Heart Beat Value.

7. Click the Add User Field button (the top-most red arrow that’s pointing left) in the User Fields area. A slot is displayed in the User Fields area.



Figure 3-35 New Wiegand Format Dialog Box - Add User

8. For the new User Field entry, enter Name, Start Position, Length, Success Value and Failure values.

9. Click the Add Parity Field button (the top-most red arrow that’s pointing left) in the Parity bits area. A slot is displayed in the Parity bits area.

10. Select a Parity Type from the drop-down list.

11. Click the Parity Mask button. In the dialog box that appears, calculate and apply a parity value.

12. A parity bit can be calculated for the whole Wiegand string or for part of it. To set which bit to calculate for parity, click the “. . .” button and use the controls in the Parity Calculation dialog box.

13. Click Apply.

To edit a Wiegand format, select a Wiegand format in the Custom Wiegand Settings dialog box and click the Edit button. The dialog box is displayed, where you can edit the Wiegand format’s details.

To delete a Wiegand format, select a Wiegand format in the Custom Wiegand Settings dialog box and click the Delete button.



3.5.12 BIOMETRICS TAB

The Biometrics tab allows various biometrics parameters to be configured for the selected device. Use caution when making any changes in this tab because they will affect the operation of the device’s biometric functions, and thus affect over-all security.

Figure 3-36 Biometrics Tab

3.5.12.1 GLOBAL SECURITY THRESHOLD

There are two global security levels Verify and Identify. Both security levels are applicable in Verify and Identify mode respectively. There also exists a template level security. In case of Verify mode, the lower security is used between the global verification security level and the template security level.



3.5.12.1.1 TO CHANGE THE GLOBAL SECURITY THRESHOLD

1. Adjust the Verify and Identify sliders to the desired security levels.

2. Click Apply.

3.5.12.2 DEVICE MODE

The Device Mode area contains controls to set the mode of the device and the type of templates the device uses. The Verify and Identify radio buttons are used to specify the mode of device (1:1 mode or 1: N mode respectively). The Template Type drop-down list allows you select the type of templates that can be used depending on the device’s mode.

To switch the device to Verify mode, select the Verify radio button, select 1:1 templates from the Template Type drop-down list, and then click Apply.

NOTICE

Changing the template type will erase all existing templates on the

device and will reboot the device.

Finger Required for Templates with security NONE

This option is only available when the Device Mode is set to Verify. This option dictates how the device should behave when the template security threshold is set to a value of “None” (numerically mapped to 0). In this case, the user always passes the verification (biometrics are ignored); however, the user must still place a finger on the sensor and have it detected to proceed. Because some fingers have difficulty being detected by the sensor, an administrator can opt to turn off the requirement that a finger be placed. If this setting is not selected, the authorized ID is passed immediately without requiring a finger.

Require biometric for Templates with security Password Only

This option dictates how the device should behave when the template security threshold is set to a value of “Password Only” (numerically mapped to 5). If this option is selected, templates with this security level are asked for a biometric comparison. The threshold used for deciding whether a comparison matches or not is then determined by the Global Security Threshold. If this setting is not selected, templates with a “Password Only” security threshold are not required to pass a biometric comparison. On V-Station 4G Lite devices, a password is required to pass. On other products, a pass is indicated immediately without a biometric comparison. This setting is disabled in Searching mode.



3.5.12.3 TEMPLATE ENCRYPTION

The Activate Template Encryption check box, when selected, encrypts the templates before storing the templates on device. If template encryption is enabled, all the templates stored into the device will be encrypted using 128Bit encryption key using AES algorithm.

3.5.12.4 MULTI-USER VERIFICATION

4G Lite devices can be set to a higher security mode by requiring multiple fingers for all verifications (except to enter Admin mode). The fingers can be either from the same individual or one finger each from different individuals, as long as different template IDs are used. This option can be set to use either one finger (the default) or two. The Inter-Finger Timeout setting specifies the time allowed between separate finger verifications, and may be any value between 1 and 30 seconds.

3.5.12.4.1 TO SET MULTI-USER VERIFICATION SETTINGS

1. Select a value in the Number of Users drop-down list.

2. Enter a value in the Inter-Finger Timeout field.

3. Click Apply.

3.5.12.5 BIOMETRIC VERIFICATION

The Activate Biometric Verification check box allows biometric verification to be turned on and off. Select or deselect the check box and click the Apply button. Deselecting the check box causes the device to bypass the finger-scan authentication (i.e., no finger is required) and allows for Wiegand pass-thru authentication alone. Turning off biometrics results in a less secure system and is not recommended. The user assumes all risk associated with disabling biometrics.



3.5.12.6 AUTO-FINGER DETECTION

The Activate Auto-Finger Detection check box shows the current setting of the function when device is in Identify mode. Select or deselect the option and click the Apply button to modify the setting on the current device. This section is disabled if the device is in Verify mode.

3.5.12.7 PASSWORD VERIFICATION

The Activate Password Verification check box, when selected, causes a user to be prompted to enter a numeric password on the keypad after finger verification, if that particular template contains a password. This offers an additional level of security. Passwords are stored within the template and must have value between 1 and 4294967295.

NOTICE

Password Verification is available on 4G V-Station Lite devices only.

A password of zero entered for a template means the template has no valid password and the user will not be asked to enter it, even if this feature is enabled.

The password option is disabled when using Extended Wiegand with TEM \ MTM \ TMS template type.

3.5.12.8 FINGER PLACEMENT

The Finger Placement Timeout option allows user to control the finger detection timeout period. For 4G Lite devices, enter any value between 2 to 60 seconds and click Apply.

3.5.13 CLOCK TAB

The controls on this tab allow you to adjust the time, date, and time zone of the selected 4G Lite device and Secure Control.



Figure 3-37 Clock Tab

3.5.13 .1 TO SET THE TIME ON THE DEVICE

1. Ensure that the time and date are correct on the PC.

2. Click Synchronize.

3. Click Apply.

3.5.13 .2 TO SET THE TIME ZONE, CLOCK TYPE AND DISPLAY FORMAT

1. Select the appropriate time zone for your location in the drop-down list. The highlighted time zone in the world map changes to the zone you selected.

2. Select automatically adjustment of clock for Daylight Saving changes if required.

3. Set Clock Type and Display Format settings using the drop-down lists.



4. Click Apply.

NOTICE

Clock Type and Display Format are available for 4G V-Station Lite

products Only.

NOTICE

4G Lite and Secure Control devices have same Clock settings,

therefore same steps are applicable.

3.5.14 BIOMETRIC SCHEDULES TAB

3.5.14.1 BIOMETRIC SCHEDULES

The Biometric Schedules tab allows you to configure scheduling for biometric verification (i.e., when a finger is required). For example, if a site only requires security at night; the administrator might want biometric verification enabled only between the hours of 5 p.m. and 5 a.m.



Figure 3-38 Biometric Schedules Tab

Schedules can be set on any 15-minute interval and can be configured differently for each day of the week.

The red bars represent periods when biometrics are not required.

The current day’s radio button is selected (In the example, “Wednesday” is the current day).

3.5.14.1.1 TO ADD A BIOMETRIC SCHEDULE FOR THE SELECTED DEVICE

1. In the Recurring Weekly Schedule area, click inside one of the bars on the desired day of the week and drag up or down to define a time interval. Move the time interval by clicking on it and dragging it to where you want it. Remember that the area in green represents when biometric verifications are not required.



2. If desired, apply the new biometric schedule to all days of the week or just to Monday through Friday by selecting the appropriate radio button and clicking the Apply Schedule button.


NOTICE

To finalize a schedule, you must click the Apply button in the

Biometric Schedules dialog box. Resetting a schedule, however, does

not require clicking the Apply button. To reset the entire week's

schedule (remove all Off periods), click the Clear All button.

3.5.14.2 DOOR OPEN SCHEDULE

The Door Open Schedule option allows device to keep the Door Unlocked for a period of time. When you activate, Door Open Schedule option, device will keep the door unlock as per defined Biometric Schedule (i.e. when biometrics are not required)

3.5.14.2.1 TO ACTIVATE DOOR OPEN SCHEDULE

1. Select the Activate Door Open Schedule check box


NOTICE

While the Time Override Mode is running on the device and Door

Open Schedule commences, Time Override Mode will be disabled

and Door will be unlocked with Door Open Schedule.

3.5.15 DOOR/DEVICE STATUS TAB

This tab provides controls that allow you to change doors name and displays current status information of doors and devices which are synchronized with Secure Control.



Figure 3-39 Device/Door Status Tab

To change the Door Name:

1. Change Door Name as required.

2. Click Apply button to apply door name.



NOTICE

Device/Door Status feature is supported on Secure Control devices

only.

3.5.16 DEVICE SECURITY

The Device Security settings tab allows the Administrator to change the 4G V-Station Lite Admin Mode login and password.

Figure 3-40 Device Security

There are four modes for 4G V-Station Lite admin login:

1. All Users + Password.



2. All Users with Password + Biometric.

3. Admin User with Password Only.

4. Admin User with Password + Biometric.

All Users + Password

In this mode, all users who know the device password are allowed to access the Admin menu.

All Users with Password + Biometric

In this mode, all users who have a biometric template saved in the device and know the device password are allowed to access the Admin menu.

Admin User with Password Only

In this mode, all users who know the device password and have been enrolled as “V-Station Admin” or “V-Station Enroll” are allowed to access the Admin menu.

Admin User with Password + Biometric

In this mode, only the users who have a biometric template saved in the device, know the device password, and have been enrolled as “V-Station Admin” or “V-station Enroll” are allowed to access the Admin menu.

NOTICE

The Device Security feature is available for 4G V-Station Lite,

products ONLY.

3.5.17 LCD TAB

The controls on this tab allow you to manage the device logo, wallpaper, slideshow, and language file of the selected device.



Figure 3-41 LCD Tab

3.5.17.1 TO SET THE DEVICE WALLPAPER

1. Click the Upload button. A File Open dialog box is displayed.

2. Navigate to the folder containing the image file (*.jpg, *.jpeg, *.bmp, *.png) you want to display as wallpaper and select it.

3. Click OK. The file is uploaded and overwrites with current file.

4. A thumbnail of the image is displayed.



NOTICE

4G Lite V-Station devices accepts image with maximum 320 x 240

pixels

3.5.17.2 TO CHANGE THE DEVICE LANGUAGE

1. Click the Browse button. A File Open dialog box is displayed.

2. Navigate to the folder containing the language file (*.qm) and select it.

3. Click OK. The file is uploaded and its name is displayed in the Language File box.

4. Click Apply to apply the language file to the selected device.

3.5.17.3 TO ACTIVATE/DEACTIVATE LCD VERIFICATION

1. Select the Activate LCD Verification checkbox to activate verification from LCD.

User will not be able to verify templates from device when LCD Verification is deactivated.

3.5.17.4 TO ACTIVATE/DEACTIVATE KEYPAD ADMINISTRATION

1. Select the Activate Keypad Administration checkbox to activate keypad administration.

User will not be able to login to LCD GUI when Keypad Administration is deactivated.

NOTICE

LCD feature is supported on 4G V-Station Lite products ONLY.

3.5.18 TIME AND ATTENDANCE TAB

This tab contains controls to activate and configure Time and Attendance (T&A) mode.

The Time and Attendance (T&A) mode is a mode that requires users to, in addition to verifying themselves with a finger scan, press a Function Key on the device that corresponds to a time or attendance action, such as “sign in”, “sign out”, etc.



Figure 3-42 Time and Attendance Tab

NOTICE

Time and Attendance feature is supported on 4G V-Station Lite

products ONLY.



There are four modes for 4G V-Station Lite admin login:

1. Disabled

2. F-Key as Input

3. Fixed

4. Manual

Disabled

In this mode, Time and Attendance feature is disabled.

Figure 3-43 Time and Attendance - Disabled Mode

F-Key as Input

In this mode, Time and Attendance feature can be either mandatory or optional. If Function Keys is mandatory then has to press any Function Key on the device during authentication process. The Function Key selected will be displayed on the LCD and captured in the Transaction Log.

Function Key options screen appears in LCD by pressing left arrow key and can navigate in option by left & right arrow key.



Figure 3-44 Time and Attendance – F-Key as Input Mode

Fixed

Time and Attendance feature is enabled by selecting any one Active Function Key. In this mode, device will not prompt to press any F-key during authentication process. However, for any authentication, system will attach enabled Active Function Key with it. Following a successful verification/identification, only Active Function Key will be displayed on the LCD and captured in the Transaction Log. With this mode, user doesn’t have options entering any other key than Active Function Key even by pressing Right or Left navigation keys.

For example, if administrator need all the authentications to be carried with F1 function key then:

1. Set Time and Attendance Mode to Fixed

2. Set Active Function Key to F1




Manual

Time and Attendance feature is enabled by selecting any one Active Function Key which would be a default F-Key for any authentication. This selection is displayed at the top of the LCD idle screen. Afterwards, the Function Key can be changed on the device via the navigation arrow keys. Following a successful authentication, the selected Function Key will be displayed on the LCD and captured in the Transaction Log.

For example, if administrator needs all the authentications to be done with F1 F-Key by default, but user should be given options if they would prefer to use any other F-Key then.

1. Set Time and Attendance Mode to Manual

2. Set Active Function Key to F1




3.5.18.1 TO CONFIGURE T&A MODE

1. Select the Time and Attendance Mode.

2. Select the Mandatory Use of Function Keys check box for F-Key as Input mode

OR

2. Select the Active Function Key for Fixed/Manual mode

3. Enter appropriate Display Text for the function keys into the fields.

4. Enter the number of seconds you want the messages to be displayed in the Message Timer field.

5. Click the Apply button.

NOTICE

Time and Attendance authentication processes are illustrated in

Appendix


Enrolling Users

CHAPTER 4 - ENROLLING USERS

CHAPTER OVERVIEW

This chapter details how to enroll new users using the Quick Enrollment, Advanced Enrollment and Card Enrollment functions.

4.1 ENROLLING USERS

When first opened, the Enrollment Tab displays Quick Enrollment, Advanced Enrollment and Card Enrollment options. New users are entered into the system through the process of “enrollment”. During this procedure, the user’s finger is scanned and a finger scan template is generated. A quality enrollment ensures peak performance from the 4G Lite devices. The Quick Enrollment, Advanced Enrollment and Card Enrollment buttons are used to start the enrollment process.

Quick Enrollment and Advanced Enrollment features are used for enrollment on Fingerprint devices, i.e. Devices equipped with fingerprint sensors. The Card Enrollment feature is used for enrollment of card only records on devices equipped with Prox card and Smart Card readers.

The Quick Enrollment method is useful when you need to add a new user quickly without having to go through multiple enrollments.

The Advanced Enrollment is the recommended method for enrolling templates. It allows multiple fingers to be scanned and the corresponding template to be created. Users can scan different fingers or multiple enrollments of the same finger. Each time an enrollment is done, the “best” template is identified among the current three scans. Users then have the choice of accepting best template or the enrollment of their choice.


Enrolling Users

Figure 4-1 Enrollment Tab

4.2 QUICK ENROLLMENT

4.2.1 TO PERFORM A QUICK ENROLLMENT

1. Click Quick Enrollment. The Quick Enrollment dialog box is displayed.


3. In the Finger Data area, select the appropriate finger to be used for enrollment.


Enrolling Users

Figure 4-2 Quick Enrollment Dialog Box

4. Click Enroll.

5. Place and remove the enrollee’s finger on the sensor as directed by the prompts. The scan results are displayed in the Finger Image and Enrollment Feedback areas. Note that if the FPF was enabled during the installation process, only red and green cross hairs would be displayed in the Finger Image area, instead of the actual fingerprint data. See Chapter 13 for more information on the FPF feature.

Figure 4-3 FPF cross hairs

6. If the enrollment is not recommended because of poor quality, you can either choose to accept it, reject the enrollment, or retry the finger scan process. If the enrollment is recommended, click Next to move to the next step.


Enrolling Users

Figure 4-4 Quick Enrollment Dialog Box - Scan Results

7. Enter the enrollee’s User ID, First Name, Middle Name, and Last Name into the appropriate fields in the User area (Figure 3-4). Alternatively, Admin may select already created User by typing in the First Name & selecting required user. Upon User selection, SecureAdmin Lite will populate information in User Access Data if user is already enrolled.

8. Select the User Group, Company, Site, and Department the enrollee belongs to from the drop-down lists.

9. Click Save.

10. Enter a Template Index and Employee ID into the appropriate fields in the User Access Data area.


Enrolling Users

Figure 4-5 Quick Enrollment Dialog Box - User Information

NOTICE

4G V-Flex Lite (S, NW), 4G V-Flex Lite (S, P, NW), 4G CR-Pass (P, NW),

4G V-Flex Lite (S, O, NW), 4G CR-Pass (O, NW), 4G V-Station Lite (S,

NW), 4G V-Station Lite (S, P, NW) and 4G V-Station Lite (S, O, NW)


Finger option will not be applicable for these products.

11. Select appropriate User Type and Access Schedule.

12. If the enrollee is going to observe holidays, select the Observe Holidays check box.

13. If using a password, enter it into the Password field.


Enrolling Users

14. Select appropriate Prox User Mode, Smart Card User Mode and Expiry Date as per individual user’s settings.

15. Enter Door ID and Door Timeout value in appropriate field as per individual user’s settings.

16. In the Fingerprint Data area of the Biometrics tab, the finger selection made in the previous step is shown and cannot be edited. There is an additional Card tab in the dialog. If required, provide the Card # and Card Type values in this tab.

Figure 4-6 Quick Enrollment – Card Tab

17. If the finger is to be designated a “duress finger”, select the Activate Duress Finger Mode check box.

18. Select the desired 1:1 Security and 1:N Security levels from the drop-down lists.


20. Select whether to Save to Device(s) or Save to Smart Card by selecting the appropriate check box. Save to Smart Card checkbox is selected by default but can be edited by un-checking the box.

Note: Templates will be saved by default to the database. To disable this feature, proceed to

Tools → Options, Save to Database and un-check the option. The Save to Smart Card

check box will be available for selection only for smart card based products.

21. Select the device or devices in the network tree.


Enrolling Users

Figure 4-7 Quick Enrollment - Select Destination

22. Click Save and the following save options will be available:

Save & Finish Enrollment to save the template to the selected device(s) and return to Enrollment Main Screen

Save & Enroll Another Finger to save the template to the selected device(s) and to initiate another enrollment for the same user on the same device (User information will be automatically populated)

Save & Enroll Another User to save the template to the selected device(s) and initiate another enrollment for a new user on the same device (Some enrolment settings will be automatically populated)

For all options above, a Save Template Result dialog box is displayed. The dialog box states whether the template was stored or saved to the devices successfully.

Figure 4-8 Save Template Result Dialog Box

20. Click OK to finish.

Note: If you cancel a template transfer to a device, it is executed after a short delay.


Enrolling Users

4.3 ADVANCED ENROLLMENT

4.3.1 TO PERFORM A ADVANCED ENROLLMENT

1. Click Advanced Enrollment. The Advanced Enrollment dialog box is displayed.


3. In the Finger Data area, click the appropriate to be used for enrollment.

Figure 4-9 Advanced Enrollment Dialog Box

4. Click the Enrollment 1 button.

5. Place and remove the enrollee’s finger on the sensor as directed by the prompts. The first scan’s results are displayed in the Enrollment 1 feedback areas. Note that if the FPF was enabled during the installation process, only red and green cross- hairs would be displayed in the Finger Image area, instead of the actual fingerprint data.

6. Repeat Steps 4 and 5 twice more for Enrollments 2 and 3.


Enrolling Users

Figure 4-10 Advanced Enrollment Dialog Box - Scan Results

7. To let SecureAdmin Lite decide which enrollment scan provides the highest quality, click the Recommended Selection button. To make this choice manually, click the Manual Selection button. Accept buttons are displayed on the Advanced Enrollment dialog box; click the Accept button next to the enrollment you want to use. The Advanced Enrollment dialog box displays the next screen.


Enrolling Users

Figure 4-11 Advanced Enrollment Dialog Box - Manual Selection

8. If all three enrollments are of poor quality and you select “Recommended Selection” option, SecureAdmin Lite will display a warning message and recommend starting new enrollment.


Enrolling Users

Figure 4-12 Advanced Enrollment Dialog Box - All poor enrollments

9. Enter the enrollee’s User ID, First Name, Middle Name, and Last Name into the appropriate fields in the User area. Alternatively, Admin may select already created User by typing in the First Name & selecting required user. Upon User selection, SecureAdmin Lite will populate information in User Access Data if user is already enrolled.

10. Select the User Group, Company, Site, and Department the enrollee belongs to from the drop-down lists.

11. Click Save.

12. Enter a Template Index and Employee ID into the appropriate fields in the User Access Data area.


Enrolling Users

Figure 4-13 Advanced Enrollment Dialog Box - User Information

NOTICE

4G V-Flex Lite (S,NW), 4G V-Flex Lite (S,P,NW), 4G CR-Pass (P, NW),

4G V-Flex Lite (S,O,NW), 4G CR-Pass (O,NW) ), 4G V-Station Lite (S,

NW), 4G V-Station Lite (S, P, NW) and 4G V-Station Lite (S, O, NW)



13. Select appropriate User Type and Access Schedule.


15. If using a password, enter it into the Password field.


Enrolling Users

16. Select appropriate Prox User Mode, Smart Card User Mode and Expiry Date as per individual user’s settings.


18. In the Finger Data area of the Biometrics tab, the finger selection made in the previous step is shown and cannot be edited. There is an additional Card tab in the dialog. If required, provide the Card # and Card Type values in this tab.

Figure 4-14 Advance Enrollment – Card Tab

19. If the finger is to be designated a “duress finger”, select the Activate Duress Finger Mode check box in the Biometrics tab.

20. Select the desired 1:1 Security and 1:N Security levels from the drop-down lists.


22. Select whether to The Save to Device(s) or Save to Smart Card by selecting the appropriate check box. The Save to Device(s) checkbox is selected by default but can be edited by un-checking the box.

Note: Templates will be saved by default to the database. To disable this feature, proceed to

Tools → Options, Save to Database and un-check the option. The Save to Smart Card

check box will be available for selection only for smart card based products


Note: The Database check box is selected by default -- all templates are saved to the database. No status dialog box is displayed after a template is saved in the database. A status dialog box is displayed if the enrolled template is saved to the device.


Enrolling Users

Figure 4-15 Advanced Enrollment - Select Destination


Save & Finish Enrollment to save the template to the selected device(s) and return to Enrollment Main Screen

Save & Enroll Another Finger to save the template to the selected device(s) and to initiate another enrollment for the same user on the same device (User information will be automatically populated)

Save & Enroll Another User to save the template to the selected device(s) and initiate another enrollment for a new user on the same device (Some enrolment settings will be automatically populated)

For all options above, a Save Template Result dialog box is displayed. The dialog box states whether the template was stored or saved to the device(s) successfully.

Figure 4-16 Save Template Result Dialog Box



Enrolling Users

4.4 CARD ENROLLMENT

4.4.1 TO PERFORM A CARD ENROLLMENT

1. Click Card Enrollment. The Card Enrollment dialog box is displayed.


Figure 4-17 Card Enrollment Dialog Box

3. Enter the enrollee’s User ID, First Name, Middle Name, and Last Name into the appropriate fields in the User area. Alternatively, Admin may select already created User by typing in the First Name & selecting required user. Upon User selection, SecureAdmin Lite will populate information in Card area if user is already enrolled.

4. Select the User Group, Company, Site and Department the enrollee belongs to from the drop-down lists.

5. Click Save.

6. Click the Read Card Serial # check box to read value in Card # field in the Card area.

7. Select appropriate Card Type, Prox User Mode, Smart Card User Mode and Expiry Date as per individual user’s settings.


Enrolling Users


9. Select appropriate Access Schedule.



Figure 4-18 Card Enrollment - Select Destination

12. The Save to Device(s) checkbox is selected by default but can be edited by un-checking the box. Note: Card enrollments will be saved by default to the database. To disable this

feature, proceed to Tools → Options, Save to Database and un-check the option.



Save & Finish Enrollment to save the card enrollment to the selected device(s) and return to Enrollment Main Screen

Save & Enroll Another Card to save the card enrollment to the selected device(s) and to initiate another enrollment of a new user on the same device (Some enrolment settings will be automatically populated)

For all options above, a Save Template Result dialog box is displayed. The dialog box states whether the card enrollment was stored or saved to the device(s) successfully.


Enrolling Users

Note: The Database check box is selected by default -- all templates and card enrollments are saved to the database. No status dialog box is displayed after a template is saved in the database. A status dialog box is displayed if the enrolled template or card is saved to the device.

Figure 4-19 Save Card Enrollment to Device Dialog Box


Note: If you cancel a transfer to a device, it is executed after a short delay.


Managing Smart Cards

CHAPTER 5 - MANAGING SMART CARDS

CHAPTER OVERVIEW

The 4G Lite devices can work with iCLASS, MiFARE, MiFARE Plus and DESFire smart cards. This chapter presents procedures for managing the smart cards used at your facility and the smart card related settings of the devices in your network. It also explains how to create and reset site key files and presents useful advice on forgotten and compromised site keys.

The Smart Card sidebar tab contains controls that allow for management of smart card settings. The two specific dialog boxes used for smart card configuration are the Smart Card Device Manager and the Smart Card Manager. Two supporting dialog boxes are Create Site Key and Create MiFare Plus Key.

The Smart Card Device Manager allows you to configure smart card security settings and smart card layout. The Smart Card Manager allows you to modify data on the cards and to secure or reset cards.

The Create Site Key allows you to create the site key file required for various smart card operations. The Create MiFare Plus Key allows you to create a key file to work with MiFare Plus cards.



Figure 5-1 Smart Card Sidebar Tab Dialog Box

The Smart Card Device Manager configures a device so that it knows which areas of the smart card to read from and write to. This is done by configuring the card layout.

The Smart Card Manager sets up the smart card so that it works with the settings that were configured in the Card Device Manager.



5.1 SMART CARD DEVICE MANAGER

Click the Card Device Manager link in the Smart Card sidebar tab to launch the Smart Card Device Manager.

Figure 5-2 Smart Card Device Manager

Select the device for which you want to configure the smart card settings in the Current Device drop-down list. Information about the selected device is displayed.



Reader Type

This area displays the type of reader: iClass, MiFare, MiFare Plus and DESFire.

Write Status

This area displays the read and writes privileges of the selected device.

DESFire Security Setting

At the top of the Smart Card Settings section of Smart Card Manager dialog box; the DESFire Security Settings drop-down list, allows you to specify action on DESFire card written with insufficient access rights. Currently, this can be set to either “Reject DESFire card with insufficient access rights” or “Update DESFire card access rights”.

Default option will be “Reject DESFire card with insufficient access rights”, and device will reject the card written with insufficient access rights. For the other option “Update DESFire card access rights”, device will update the access rights of the DESFire card written with insufficient rights.

NOTICE

“Reject DESFire card with insufficient access rights” is applicable to

only DESFire cards written with insufficient access rights.

Max Templates per Card

At the top of the Smart Card Manager dialog box, the Max Templates per Card drop-down list allows you to specify how many templates can be stored on a card.

Currently, this can be set to either one or two templates, although future cards with more memory might support additional templates. If the maximum is set to two templates, the smart card layout must have two templates defined (this applies only to MiFARE-compatible cards).

Otherwise, when attempting to save a second template to the card, an Invalid Smart Card Layout error message is displayed. If the maximum is set to only one template, attempting to save a second template to a card results in an ESI - Storage Space is FULL error message.



NOTICE

The verification process differs between Template (TEM) mode and User Record (VUR) mode when a smart card is presented that contains both a primary and a secondary template. In TEM mode, a smart card verification is performed at the primary template's security level, then at the secondary template's security level. In VUR mode, a smart card verification is performed at the lesser of the two template's security levels.

Rx Template Timeout

This setting controls for how long the device will wait in milliseconds (ms) to receive smart card data before timing out. The minimum value is 500 ms and the maximum value is 5000 ms.

Auto-Update Site Keys

This check box enables or disables automatic site key updating of smart cards. If a site key is compromised, or if your installation’s security requirements demand the site key to be changed regularly, an administrator can designate a new site key to which all smart cards will be updated. The 4G Lite device has two site keys: a primary and a secondary site key.

The primary site key matches all smart cards that are allowed to use the device.

The secondary site key is only assigned when the primary site key needs to be updated.

If the primary site key needs to be changed, the administrator creates a new site key.

The next time a card is presented, the device performs the extra step of updating the smart card with the new site key.

In time, an entire population of smart cards is migrated to the new site key.

By unselecting the Auto-Update Site Keys check box, smart cards with the old site key are rejected.

Use Wiegand String

This setting controls whether the device attempts to read a Wiegand string from the smart card during verification and if successful, whether it sends the Wiegand string through the Wiegand Out lines. If this check box is selected, SecureAdmin Lite attempts to save the Wiegand string onto the smart card when enrolling.



Saving a Wiegand string onto a smart card requires a Wiegand string to be read from an external Wiegand input device (select the From Wiegand String check box during a Quick or Advanced Enroll). Once the Wiegand string has been read, the Use Wiegand String check box will become selected.

Overwrite Card Wiegand String

This setting controls whether the device should attempt to overwrite the Wiegand string read from the Smart Card with the Verification Pass \ Fail User Fields defined in the Custom Wiegand format. If this check box is selected, Device will overwrite the Wiegand string on card with the user fields defined in custom Wiegand format of verification pass \ fail or duress event.

NOTICE

Overwrite Card Wiegand String option is available only when Use

Wiegand String option is enabled on the device.

Overwrite Card Wiegand String option will work only when used with Custom Wiegand format as Wiegand Output format for any of Verification Pass \ Fail or Duress Event.

Read Only Mode

This setting allows the device to be put into read-only mode, where it will not be allowed to write any data to a smart card. This mode should not be used under normal circumstances because it does not allow the 4G Lite device to function normally with respect to enrollment, key management, etc. It is intended only for use with a pre-enrolled population of users who are only accessing the 4G Lite device for verification. Although the likelihood of corruption is extremely low, this mode ensures that smart cards will not be corrupted by presenting the card at the edge of the device’s detection field.

NOTICE

When Read Only Mode is enabled, it has a side effect of setting the

secondary site key to a value of -1. You must re-enter the secondary

site key when setting the device back to read/write mode if you want

to use the auto-update feature.



5.1.1 SMART CARD SECURITY SETTINGS

Clicking the Security Settings button opens the Smart Card Security Settings dialog box.

Figure 5-3 Smart Card Security Settings Dialog Box

The Smart Card Security Settings dialog box contains controls that adjust how often the site key verification is performed. The default is Enter Everytime (SecureAdmin Lite resets to this default setting every time the application is started).

Use ESI Site Key Encryption

The Use ESI Site Key Encryption check box is used in conjunction with the drop-down list directly below it (not shown in the example) to manage site keys on the smart card itself (for MiFare Card only). Two settings are available. The default setting uses site key encryption. The other options do not use site key encryption, and are provided for compatibility with other applications that want to read and/or write data to the smart card. The check box must be unselected to enable these options. For MiFare card, Key A and Key B do not correspond to primary and secondary site keys; please read the manufacturer’s documentation for more information. For iCLASS card, (such as is shown in the example), this option can only be enabled or disabled.

5.1.1.1 CHANGING THE SITE KEY

To change the site key on a device:

1. Ensure that the Auto Update Site Keys check box is selected in the Smart Card Device Manager Dialog box.

2. Select the Site Key radio button in the Smart Card Security Settings dialog box.



3. Click the Change Site Key button. A Change Site Key dialog box is displayed.

Figure 5-4 Change Site Key Dialog Box

4. Click the button to the right of the Site Key File field. An Open dialog box is displayed.

5. Navigate to and select the site key file (*.bin).

6. Click Open.

7. Click OK. A Warning message is displayed.

Figure 5-5 Change Site Key Warning

8. Read the information carefully and Click Yes if you accept. The site key is changed and a confirmation is displayed.

9. Click OK.

Consider this scenario: During an installation, the site key was set to “####” and the secondary site key was set to “-1”, because there were no previous site keys to update. The site key on the smart cards would be “####”.

Now if the primary site key on a device is changed to “++++” and the secondary site key is also changed to the old primary value “####” (ensure that the Auto-Update checkbox is selected):



All previously created smart cards still contain the previous key of “####”. When a smart card is presented to a 4G Lite device, it follows these steps:

The smart card is presented.

The device reads the data from the card and checks the current key.

The key on the card is “####” and the device’s primary key is now “++++”, so the card fails.

The device checks the secondary site key for a match with the smart card. If they match, the key on the smart card is changed (updated) to the device’s primary site key, “++++” in this example.

If neither the primary nor the secondary site key matches, the card fails.

When the entire user base of cards has been updated, perform the process of changing the site key again.

This time keep the primary site key the same “++++”, but enter a -1 for the secondary site key.

This disables the Auto-Update feature and any remaining smart cards with “####” on them will no longer works.

This can also be done by unselecting the Auto-Update Site Keys check box.

5.1.1.2 RESETTING A SITE KEY

1. Select the Site Key radio button in the Smart Card Security Settings dialog box.

Figure 5-6 Reset Site Key Dialog Box

2. Click the Reset Site Key button. A Warning message is displayed.



3. Read the information carefully and Click Yes if you accept. The site key is reset to default value and a confirmation is displayed.

5.1.1.3 CHANGING MIFARE PLUS KEY

1. Select the MiFare Plus Key radio button in the Smart Card Security Settings dialog box.

2. Click the Change MiFare Plus Key button.

Figure 5-7 Change MiFare Plus Key Dialog Box

3. Click the button to the right of the MiFare Plus Key File field. An Open dialog box is displayed.

4. Navigate to and select the MiFare Plus Key file (*.bin).

5. Click Open.

6. Click OK. A Warning message is displayed.

7. Read the information carefully and Click Yes if you accept. The MiFare Plus Key is changed and a confirmation is displayed.

5.1.1.4 RESETTING A MIFARE PLUS KEY

1. Select the MiFare Plus Key radio button in the Smart Card Security Settings dialog box.

2. Click the Reset MiFare Plus Key button. A Warning message is displayed.

Figure 5-8 Reset MiFare Plus Key Dialog Box



3. Read the information carefully and Click Yes if you accept. The MiFare Plus Key is reset to default value and a confirmation is displayed.

For instructions of how to create a site key, refer to section 5.4.



5.1.2 CONFIGURE CARD LAYOUT

CAUTION

L-1 Identity Solutions recommends that only advanced users attempt

to configure the smart card layout. Improper changes made to the

layout may render the reader unusable with some smart cards.

This section should be read completely before attempting to change the default layout provided by L-1 Identity Solutions (as shown in the left-most panel).

5.1.2.1 ICLASS CARDS

To configure an iCLASS smart card layout

Select the type of smart card in the Card Type drop-down list. The drop-down list contains these items:

16K iCLASS

32K masked as 16K iCLASS

32K iCLASS.

1. Click the Configure Card Layout button. The Layout Manager dialog for that type of card is displayed. See examples below.

Figure 5-9 16K iCLASS Smart Card Layout Manager



For the 32K iCLASS Smart Card, note the addition of an iCLASS Active Book drop-down list at the top of the dialog box. This drop-down list allows you to select which of the two books available on 32K cards you want to change the layout of.

Figure 5-10 32K iCLASS Smart Card Layout Manager

1. Select Book 0 or Book 1 from the iCLASS Active Book drop-down list.

2. Click the Card Discovery button. A confirmation message box is displayed.

3. Click Yes.

4. Place the smart card against the device, hold, and remove as directed by the onscreen prompts. Depending on the type of smart card, the controls in either the HID iCLASS 2 Application Area or the HID iCLASS 16 Application Area become available.

5. Select a value in the L-1 EAD Data Starting Offset drop-down list if it is available (2-application cards only).

6. Click Reset. A confirmation message is displayed.

7. Click Yes. A status message is displayed.

8. Click OK.

9. Click Set Layout.

5.1.2.2 MiFARE CARDS

Before attempting to configure a MiFARE card layout, it is strongly recommended that the user read the detailed information provided in section 5.1.2.2.1.

1. Select the type of smart card in the Card Type drop-down list:

1 kilobyte MiFARE



4 kilobyte MiFARE

2. Click the Configure Card Layout button. The Layout Manager for the card type is displayed. See examples below.

Figure 5-11 1 kilobyte MiFARE Smart Card Layout Manager

For the 4 kilobyte MiFARE smart card, note the addition of an Active Kilobyte Selection drop-down list at the top of the dialog box. This drop-down list allows you to select which of the four kilobytes available you want to use for template storage (the default setting is the first kilobyte). The layout for each kilobyte is configurable.



Figure 5-12 4 kilobyte MiFARE Smart Card Layout Manager

3. If you are using a 4 kilobyte card, select which kilobyte is to be active with the Active Kilobyte Selection drop-down list.

The smart card layout used by the 4G Lite devices consists of these components: A Layout block (brown), an Admin block (red), a Primary template (blue), a Secondary template (purple, optional), and User Data (green, optional). The Smart Card Layout Manager does not allow a user to configure a layout that is missing the Admin block, the Layout block, or a Primary template. These are the minimum layout components required to enable normal operation.

4. Click the blue Template 1 button.

5. Click on the block in the New Layout pane where you want the Template 1 data to start.

6. Click the purple Template 2 button (Note: Secondary template fields are purple when template mode of the device is VUR and blue when template mode of the device is TEM).

7. Click on the block in the New Layout pane where you want the Template 2 data to start.

8. Click the green User Data button.

9. Click the block in the New Layout pane where you want to User data to be stored.

10. Click the brown Layout block button.

11. Click the block in the New Layout pane where you want to Layout data to be stored.

12. Click the Set Layout button.



5.1.2.2.1 MIFARE BLOCK MEMORY STRUCTURE

The memory structure for MiFARE-compatible smart cards differs between the 1 Kilobyte and 4 Kilobyte card types. The similarities and differences are outlined below.

For the 1 Kilobyte MiFARE card, the memory structure consists of 16 sectors (numbered 0 through 15) of four blocks each (numbered 0 through 3). Each block contains 16 bytes. The first block, at Sector 0, Block 0, contains manufacturer information and is not available. The last block of each sector contains site key and access information, which secures that sector and makes it unavailable for application data. Unavailable blocks are shown in SecureAdmin Lite in black. Layout components cannot be placed on unavailable blocks. This leaves 47 available blocks of 16 bytes each, for a total of 752 available bytes. The default L-1 Identity Solutions layout contains space for two templates and Wiegand information (stored in the green User Block) and uses all available space. If space for non-L-1 Identity Solutions data is desired, include only the Primary template (Template (1) or do not include a User Block.

For the 4 Kilobyte MiFARE card, the memory structure also differs between the 1st/2nd kilobyte versus the 3rd/4th kilobyte. The 1st and 2nd kilobyte of the 4 Kilobyte MiFARE card follows the memory structure of the 1 Kilobyte card as described above, however, the memory structure of the 3rd and 4th kilobyte is different and consists of 4 sectors (numbered 0 through 3) of 16 blocks each (numbered 0 through 15). Each block contains 16 bytes. The first block at Sector 0, Block 0 of the 1st kilobyte contains manufacturer information and is not available. In addition, the last block of each sector for every kilobyte of the 4 Kilobyte MiFARE card contains Site key and access information, which secures that sector and is thus unavailable for application data. Unavailable blocks are shown in SecureAdmin Lite in black and grey, they do not allow layout components to be placed there. This leaves 47 available blocks of 16 bytes each, for a total of 752 available bytes per kilobyte of the 4 Kilobyte MiFARE card. The default L-1 Identity Solutions layout for each kilobyte (1st, 2nd, 3rd, or 4th) contains space for two templates and Wiegand information (stored in the green User Block) and will use all available space. Please note that templates can only be written to a single active kilobyte of the 4 Kilobyte MiFARE card (i.e., templates can only be stored contiguously in either the 1st, 2nd, 3rd or 4th kilobyte). If space for non-L-1 Identity Solutions data is desired, include only the Primary template (Template 1) or do not include a User Block.

5.1.2.2.2 MIFARE NEW LAYOUT

Place components on the layout on the right (under the New Layout section) by clicking one of the buttons under the Set Starting Block section. Flashing text instructs you to select one of the white, unused blocks above. Since the 1:1 verification templates used by the 4G Lite device are 348 bytes, they require 22 blocks of space (348 bytes / 16 bytes-per-block = 22 blocks). All other layout components require a single block of space. When placing a template on the layout, note that the blocks wrap around whatever blocks are in the way, consuming blocks from top to bottom. Templates do not wrap around from bottom to top, and if there is insufficient space for a template, a warning is displayed and you will not be able to place the template. If you want to move a layout component or take if off of the layout, you must remove it by first clicking the Remove Item button and then selecting the item that is to be removed.



5.1.2.2.3 MOVING THE ADMIN BLOCK

Note that when the Smart Card Layout Manager is opened, the Admin Block has already been placed for you in Sector 7, Block 1. It can be removed and placed elsewhere, but L-1 Identity Solutions recommends leaving the Admin block in this sector. The reason for this is that the reader will be able to read cards with a different layout than the one that is defined here, provided that the Admin Block is in this location. This allows for flexibility with different card layouts. L-1 Identity Solutions recommends that each site or facility use the same layout for each card. L-1 Identity Solutions also recommends first placing the Layout Block, and then the Primary template, and finally a User Data block to hold the Wiegand strings associated with each template.

NOTICE

If you do not place at least one User Data block, SecureAdmin Lite cannot read or write Wiegand string data, and you will receive an error during enrollment. Only two User Data blocks can be placed on the layout. If two are placed, the first is used for Wiegand data (if used) and the second is available for user data. These two blocks can be written to or read using the L-1 Identity Solutions SecureSDK, but not using SecureAdmin Lite. When all other blocks have been placed and if there is sufficient space, place the Secondary template. You will not be able to place Template (2) if you have placed two User blocks because there will be insufficient space. There is a convenient way to make the layout wrap around sectors where non-L-1 Identity Solutions data is located (or is planned to go). Click the Unavailable Block button, then hold down the SHIFT key to place multiple blocks. Do this before placing the other layout items so that when they are placed, they wrap around those blocks automatically. Click Set Layout to finalize the layout. You will need to provide the current Site Key. After setting the layout successfully, the Smart Card Layout Manager closes, returning you to the Smart Card Manager. If at any time you want to reset the layout back to L-1 Identity Solutions defaults, click the Reset Layout button and provide the current site key.

5.1.2.2.4 SAVING MIFARE LAYOUTS TO THE PC

SecureAdmin Lite has the ability to load and save MiFARE-based smart card layouts to and from the PC. Files are saved by default with a “.sl1” extension. This can be used to backup the 4G Lite devices card layout should a non-default layout be used and it can also facilitate programming multiple 4G Lite devices.



5.1.2.2.5 PRECAUTIONS ON CHANGING MIFARE SMART CARD LAYOUTS

When changing the smart card layout, be aware that the number of templates defined on the layout should be greater than or equal to the Max Templates per Card option. In other words, you should not define only one template and set the maximum templates per card to two. This will result in an “ESI Storage Full” error upon enrollment of a second template.

If the layout is changed, smart cards that were created with a different layout might not work properly with the 4G Lite devices. If this occurs, you will see a flashing or steady red LED on the device when trying to verify, or you will receive an error in SecureAdmin Lite.

Although you can write both L-1 Identity Solutions data and non-L-1 Identity Solutions data to a smart card, each sector has its own site key, which unlocks data in that sector. Data may only be read from or written to a particular block if the proper site key for that sector is provided. The ESI will use the same Site Key for all sectors being used by the 4G Lite devices, including sectors where only one or two blocks are actually being used. It is recommended that any non-L-1 Identity Solutions data be placed on different sectors so that different keys may be used for that data.

If a third-party application is used to read or write any of the 4G Lite device data or the same site key is to be used for the entire card, the ESI Site Key Encryption must use one of the unhashed modes for compatibility. Please refer to the documentation from the smart card manufacturer for more information.

5.1.2.2.6 MIFARE SERIAL NUMBER

The serial number that is stored on the card is 32 bits in length, therefore, to use this as an ID, it is recommended that a Wiegand format be chosen that allows 32 bits of ID data. This can be selected under the Wiegand tab in the Device Settings dialog box. The uploadable Generic 34-bit format is a format that contains 32 ID bits. This format contains an odd parity bit and an even parity bit, both of which are calculated in the same manner as the standard 26 bit format. Alternatively, a custom Wiegand format can be created by selecting the Pass-thru radio button and selecting Custom from the drop-down list.

These numbers can be used for custom formats:

Total bits: 32

ID Start bit: 0

No. of ID bits: 32.

When the user is at the enrollment window under Fingerprint Quick or Fingerprint Advanced, the Extended ID field is greyed out.

Selecting a Wiegand format that contains less than 32 ID bits, such as the Standard 26-bit format, results in a truncated Wiegand ID. If the Standard 26-bit format is selected, upon clicking the Smart Card SN button, a warning message is displayed that suggests selecting a Wiegand format that contains 32 ID bits. In this case, when the template is saved to the smart card, it remains as a 32-bit number. However, when it is sent out as a Wiegand string, it is



truncated to the least significant 16 bits, because the 26-bit format only allocates 16 bits to ID data.

5.1.2.3 DESFIRE CARDS

To configure a DESFire smart card layout:

1. Select DESFire in the in the Card Type drop-down list.

2. Click the Configure Card Layout button. The DESFire Card Layout dialog box is displayed.

Figure 5-13 DESFire Card Layout Dialog Box

3. Enter a value in the Application ID drop-down list.

4. Select a value in the File ID drop-down list.

5. Enter a value in the 4K/8K Card File Size field.

6. Enter a value in the 2K Card File Size field.

7. Click OK.



5.2 SMART CARD MANAGER

Click the Card Manager link in the Smart Card sidebar tab to launch the Smart Card Manager.

The Smart Card Manager sets up the smart card so that it works with the settings that were configured in the Smart Card Device Manager.

Figure 5-14 Smart Card Manager

Select the device for which you want to modify data on the smart card in the Current Device drop-down list. Information about the selected device is displayed.

This dialog box initially shows the smart card settings and a blank card.

Clicking the Read Smart Card button commands the 4G Lite device to read the template list from the card and to display a list of the stored templates.

A padlock symbol is displayed in the upper right-hand corner of the card if it is secured.

SecureAdmin Lite indicates which type of smart card was read (MiFARE or iCLASS, 2- or 16- application area).



The card’s serial number is provided for reference.

Clicking either template button (Primary or Secondary) commands the 4G Lite device to read the full finger-scan data from the smart card.

SecureAdmin Lite prompts the user for the site key (depending on security settings), and if the site key entered matches the site key stored on both the 4G Lite device and the smart card, the template is read and the Template Editor dialog box is displayed.

NOTICE

It is not possible to edit a template on a smart card.

5.2.1 DELETING TEMPLATES

To delete a template on the smart card, select the check box in the Template column next to the primary template or secondary template and click the Delete button. The 4G Lite device erases the selected template stored on the smart card. SecureAdmin Lite performs a site key verification before allowing the erase to take place.

5.2.2 DELETING WIEGAND STRINGS

To delete a Wiegand string on the smart card, select the check box in the Wiegand column next to the primary template or secondary template and click the Delete button. The 4G Lite device erases the selected Wiegand string stored on the smart card. SecureAdmin Lite performs a site key verification before allowing the erase to take place.

It is possible to use this function even if a Wiegand string has not been associated with a template, as long as a User Data block has been placed in the smart card layout.

5.2.3 SECURING CARDS

SecureAdmin Lite can secure and unsecure (reset) smart cards. The Secure Smart Card button secures a new smart card that has not been updated with the proper site key (i.e., it still has the manufacturer’s default keys). You do not need to enter the current site key to perform this function. Simply click the Secure Smart Card button and present the card to the device.



NOTICE

Only the sectors of the smart card being used by the 4G Lite device

are secured; all other sectors remain untouched. Performing this

function on a smart card that has already been secured has no effect.

5.2.4 RESETTING CARDS

The Reset Smart Card button allows the user to unsecure (reset) a smart card after providing the proper site key. This erases all data on the card, including templates, Wiegand strings, and other user data, as defined in the smart card layout, and sets the site key back to the manufacturer’s default. This essentially transforms the card back into a fresh, unused card, with the exception of the sectors not defined in the layout (sectors used by another application, for example). Currently, three manufacturer settings are supported for MiFARE-compatible cards: Gem+ Flow A, Gem+ Flow B, and HID Flow B. Please refer to the documentation provided by the smart card manufacturer for more information.



5.3 SMART CARD TEMPLATE SUPPORT

Please refer to the table below for a chart of template supported for 4G Lite Smart Card reader equipped devices.

Table 5-1 Smart Card Template Support

Product name Template type on the unit 1:1

TEM 1:1

VUR

1:1 Small VUR

1:1 BUR

1:5K BUR

1:500 TMS

Template type that will be written on smart

card TEM VUR

Small VUR

BUR

BUR

TEM

4G V-Flex Lite (S, O),

4G V-Flex Lite (S, O, NW),

4G V-Station Lite (S, O),

4G V-Station Lite (S, O, NW)

MiFARE 1K YES YES YES NO NO YES

MiFARE 4K (1K) YES YES YES NO NO YES

MiFARE 4K (Full) YES YES YES YES YES YES

MiFARE Plus 2K (7 Byte UID) YES YES YES NO NO YES

MiFARE Plus 4K (7 Byte UID) YES YES YES YES YES YES

MiFARE 1K (7 Byte UID) YES YES YES NO NO YES

MiFARE 4K (7 Byte UID) YES YES YES YES YES YES

DESFire (2K, 4K and 8K) YES YES YES YES YES YES

iCLASS 2 APP Use with 16K and 32K masked as 16K "1*XXXX"

YES YES YES NO NO YES

iCLASS 16 APP Use with 16K and 32K masked as 16K "2*XXXX"

YES YES YES NO NO YES

iCLASS 32 Kb (2app/1 app) Use with 32K "3*XXXX"

YES YES YES YES YES YES

iCLASS 32 Kb (1 6app/1 app) Use with 32K "4*XXXX"

YES YES YES YES YES YES

NOTICE

4G Lite Smart Card devices, smart card with any template format can be verifyied regardless to template type set on device.



5.4 MANAGING SITE KEYS AND MIFARE PLUS KEY

A “site key” is a security mechanism used by 4G Lite smart card devices, SecureAdmin Lite, and smart cards to ensure that only authorized smart cards are used at a facility. The “site key” protects the read and write access of the data on the smart card.

4G Lite smart card devices and smart cards in use at a facility must have the same site key to be able to communicate and transfer information. Every time a smart card is presented to a 4G Lite device, it checks whether the site key it is storing matches the site key on the smart card. Only if the two site keys match will the reader be able to read information from the card. If the site key stored in the 4G Lite device does not match the site key used on the card, the device will not be able to read or write to the card.

Each facility must have its own site key to distinguish its smart cards from those of other facilities. Using a unique site key at each facility ensures that smart card devices at that facility accept only smart cards created for that particular facility.

All 4G Lite devices are shipped with the site key set to an empty string (120 bits, or 15 characters, of all zeros). This allows administrators to use the 4G Lite device in a non-secure mode until they are ready to set their personal site key and secure the system.

The 4G Lite device can store two site keys. The primary site key is used in normal operations and is the site key the administrator uses when performing a site key verification operation within SecureAdmin Lite. The secondary site key is used only to update older cards when a new primary site key has been set.

5.4.1 SITE KEY FILES

A site key file provides an administrator with a means of changing the site keys of a device securely, without having to share sensitive site key information with enrollers. This is done by encrypting the site keys into a site key file (*.bin). An administrator can then distribute the encrypted site key file to the enroller. The site key file cannot be decrypted.

The enroller changes the site keys of the readers by using SecureAdmin Lite and the encrypted site key file. Thus, the site keys are known only by the Administrator, and not by the enroller.

A site key file can be used to update the site keys of multiple units from a single computer, but it cannot be used on different computers, as it is MAC address-dependent.

5.4.2 SITE KEYS ON INDIVIDUAL SMART CARDS

The 4G Lite device attempts to set the site key on the smart card during the enrollment process. The device checks the key currently used by the smart card. If the device primary site key matches the key on the smart card, the template is written. If the device primary site key does not match the key on the smart card, the device checks if it’s secondary site key matches the key on the smart card. If the secondary site key matches, the key on the smart



card is updated to the device’s primary site key and the template is written (this adds about half a second to the process).

If both primary and secondary site keys fail, the device compares the smart card key with the standard default smart card key. If they match, the key on the smart card is updated to the devices primary site key and the template is written.

If all of the above checks fail, the device does not read or write to the smart card.

5.4.3 CREATING A SITE KEY FILE

1. Click the Create Site Key link in Smart Card tab in Quick Access Panel.

2. Either Enter the MAC address of a computer that will be used to perform enrollments into the MAC Address field or Select one of the MAC address listed in the drop down.

Figure 5-15 Create Site Key Dialog Box

3. Click the Browse button. A Save As dialog box is displayed.

4. Select the folder where you want the site key file (.bin) to be created.

5. Enter a name for the site key file in the File name field. The file name that is entered is appended with a “.bin” extension automatically.



6. Click the Save button. The file name and output file’s save path are displayed in the Output File field.

7. In the Primary Site Key area, select the appropriate Input Mode for Primary Site Key radio button.

NOTICE

ASCII mode is the default mode. In this mode, the maximum length of a site key is 15 characters. All alphabetical characters and space character can be used but the symbols "*, -, @, &,etc" are not allowed. In Hexadecimal mode, the maximum length of a site key is 30 characters and only the characters 0 through 8 and A through F are allowed. The value "0xFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF" (30 "F" characters) cannot be used.

8. Enter a site key value in the Primary Site Key field.

9. Re-enter the site key value in the Confirm Primary Site Key field.

10. Select the Use software HASH for Primary Site Key check box if you want SecureAdmin Lite to enable one-way software hashing on the Primary site key. One-way software hashing adds additional security to entered site keys. This function takes the user-entered password and creates an encrypted 120-bit site key from the password. This encrypted version is then used as the site key for the 4G Lite device and smart cards in place of the user defined password. In extreme cases, this can make it more difficult for criminals to “sniff” internal networks and capture passwords during serial communications.

11. Repeat Steps 7 through 10 for the Secondary Site Key and the Current Site Key.

12. Click the Create Site Key File button. The site key file is created and saved in the folder you selected in Step 4.

5.4.4 FORGOTTEN SITE KEYS

Do not forget site keys. If the primary site key is forgotten, all previously created smart cards will continue to work, but the following will happen:

They can no longer create new smart cards

They will not be able to read templates from current smart cards

They will not be able to change the site key on 4G Lite devices



The 4G Lite devices will have to be returned to L-1 Security Solutions for reprogramming and once reprogrammed; any previously enrolled smart cards will no longer be usable.

5.4.5 COMPROMISED SITE KEYS

Site keys need to be protected just like computer passwords and should not be divulged to unauthorized personnel. In the event that a site key is compromised, change the site key and automatically update all smart cards in the user base.

5.4.6 MIFARE PLUS KEY

1. Click the Create MiFare Plus Key link in Smart Card tab in Quick Access Panel.

2. Either Enter the MAC address of a computer that will be used to perform enrollments into the MAC Address field or Select one of the MAC address listed in the drop down.

3. Click the Browse button. A Save As dialog box is displayed.

4. Select the folder where you want the site key file (.bin) to be created.

5. Enter a name for the site key file in the File name field. The file name that is entered is appended with a “.bin” extension automatically.

6. Click the Save button. The file name and output file’s save path are displayed in the Output File field.

7. In the Card Master Key area, select the appropriate Input Mode for Card Master Key radio button.

8. Enter a value in the Card Master Key field.

9. Re-enter the value in the Confirm Card Master Key field.



Figure 5-16 Create MiFare Plus Key Dialog Box

10. Select the Use software HASH for Card Master Key check box if you want SecureAdmin Lite to enable one-way software hashing on the Card Master Key. One-way software hashing adds additional security to entered keys. This function takes the user-entered password and creates an encrypted 120-bit site key from the password. This encrypted version is then used as the site key for the 4G Lite device and smart cards in place of the user defined password. In extreme cases, this can make it more difficult for criminals to “sniff” internal networks and capture passwords during serial communications.

11. Repeat Steps 7 through 10 for the Card Configuration Key, Level 2 Switch Key, Level 3 Switch Key and Level 1 AES Key.

12. Click the Create MiFare Plus Key File button. The MiFare Plus key file is created and saved in the folder you selected in Step 4.


Broadcasting Settings

CHAPTER 6 - BROADCASTING SETTINGS

CHAPTER OVERVIEW

This chapter details how to broadcast device settings, audio files, device firmware, smart card layout files and Image files to devices in the network.

6.1 BROADCASTING SETTINGS

The Broadcast sidebar tab allows you to modify settings on multiple devices in the network at the same time.

The Broadcast screen contains four buttons. Their usage is explained in subsequent sections in this chapter.



Figure 6-1 Broadcast Screen

Device Parameter - this button is used to broadcast device settings to devices in the network Firmware Package - this button is used to broadcast a firmware file to devices in the network

Audio File - this button is used to broadcast an audio file (device feedback) to devices in the network

Smart Card Layout - this button is used to broadcast a smart card layout file to devices in the network

Image File - this button is used to broadcast an image file to devices in the network



6.2 BROADCAST DEVICE PARAMETERS

Before you can broadcast device parameters, you need to select the device.

6.2.1 SET PARAMETER FOR BROADCASTING

1. Double-click the Device Network item in the network tree. The network tree expands and shows all device groups in the device network.

Figure 6-2 Device Parameters - General Tab

2. Double-click the device group item you are interested in (in the example, the group item is named “DefaultGroup”). Devices in the group are shown in the network tree.



3. Double-click the device you want to broadcast settings to (in the example, the device item is named “Device0”). The Device Settings area displays the General tab for that device. The General tab displays information about the selected device. No settings are changeable on this tab.

4. Other Device Settings tabs are available; click the Selection button. A drop-down menu is displayed.

Figure 6-3 Device Parameter - Tab Selection Menu

5. Select the check boxes next to the tabs you want displayed. The Device Settings area displays the selected tabs (in the example, all available tabs were selected).



Figure 6-4 Device Parameter - All Tabs Displayed

6.2.2 TO MODIFY AND BROADCAST THE DEVICE SETTINGS

1. Select the tab you want broadcast from Device Settings area.

2. To modify the tab settings, refer to respective section in Chapter 3.

3. Click Broadcast. The Broadcast dialog box is displayed.

Figure 6-5 Select Device Dialog Box - Device Parameter



4. Select the device, group, or entire network check boxes as broadcast recipients.

5. Click Broadcast. Device settings are broadcasted to the selected devices and the Broadcast dialog box displays a broadcast status message.



Figure 6-6 Broadcast Status - Success

6. Click Close.

6.3 TO BROADCAST FIRMWARE PACKAGE

The Firmware Package button is used to broadcast a firmware file to devices in the network.

1. Click the Firmware Package button. A Select File dialog box is displayed.



Figure 6-7 Select File Dialog Box - Firmware File

2. Click the button to the right of the Select File field. A File Selection dialog box is displayed.

3. Navigate to the folder where the firmware file is located and select it.

4. Click Open.

5. Click Next. The Broadcast dialog box is displayed.




Figure 6-8 Select File Dialog Box - Firmware File

7. Click Broadcast. Firmware file is broadcasted to the selected devices and the Broadcast dialog box displays a broadcast status message.



Figure 6-9 Broadcast Status - Success

8. Click Close.

6.4 TO BROADCAST AUDIO FILE

The Audio File button is used to broadcast an audio file to devices in the network.

1. Click the Audio File button. A Select File dialog box is displayed.



Figure 6-10 Select File Dialog Box - Audio File


3. Navigate to the folder where the audio file (*.wav) is located and select it.

4. Click Open.

5. Select the intended application for the audio file in the Audio Directory drop-down list.

Figure 6-11 Select File Dialog Box - Audio Directory Drop-down List



8. Click Broadcast. Audio file is broadcasted to the selected devices and the Broadcast dialog box displays a broadcast status message.

9. Click Close.



6.5 TO BROADCAST SMART CARD LAYOUT FILE

The Smart Card Layout button is used to broadcast a smart card layout file to devices in the network.

1. Click the Smart Card Layout button. A Select File dialog box is displayed.

Figure 6-12 Select File Dialog Box - Smart Card Layout File


3. Navigate to the folder where the smart card layout card file (*.sl1, *.sl2, *.sl3) is located and select it.

4. Click Open.



7. Click Broadcast. The smart card layout file is broadcast to the selected devices and the Broadcast dialog box displays a broadcast status message.

8. Click Close.

6.6 BROADCAST IMAGE FILE

The Image File button is used to broadcast an image file to devices in the network.

1. Click the Image File button. Select File dialog box is displayed.



Figure 6-13 Select File Dialog Box - Image File


3. Navigate to the folder where the image file (*.jpg, *.jpeg, *.bmp, *.png) is located and select it.

4. Click Open.

5. Select the Wallpaper for the image in the Image Directory drop-down list.



8. Click Broadcast. The image file is broadcasted to the selected devices and the Broadcast dialog box displays a broadcast status message.

9. Click Close.

NOTICE

4G Lite V-Station devices accepts image with maximum 320 x 240

pixels

NOTICE

Image file broadcasting functionality is applicable for 4G Lite V-

Station devices only.


Managing Logs

CHAPTER 7 - MANAGING LOGS

CHAPTER OVERVIEW

This chapter details how to manage the Application event log, Transaction log, and Device Event log.

7.1 MANAGING LOGS

The Log sidebar tab allows you to manage log files settings in the database and on devices in the network.

The Log screen contains three buttons:

Application Event Log

Transaction Log

Device Event Log


Managing Logs

Figure 7-1 Log Tab

7.2 APPLICATION EVENT LOG

The Application Event Log viewer allows you to view and filter the Application event log.


Managing Logs

Figure 7-2 Application Event Log

Use the various controls at the bottom of the tab to navigate quickly through pages of results. If you are searching for a specific log entry, you can use the filter function to find it quickly.

7.2.1 FILTER APPLICATION EVENT LOG

1. Enter or select the filter criteria by means of the various fields and drop-down lists.

2. Click the View Log button. Any log entries matching your filter criteria are displayed.

The event log or items in the event log can be exported.

7.2.2 EXPORT APPLICATION EVENT LOG ENTRIES

1. Select the check boxes next to the event log entries you want to export (to the left of the Description column) or Use Select All check box to select all the entries.

2. Click the Export button. A File Save As dialog box is displayed.


Managing Logs

3. Navigate to the save folder and enter a file name.

4. Click Save. The selected log entries are exported and saved to the specified file and location.

7.3 TRANSACTION LOG

The Transaction Log viewer allows you to download log entries from devices, view and filter the device transaction log. The transaction log records are all transactions that occur on the device.

Figure 7-3 Transaction Log

To view the transaction log, click the View Log button.

To refresh the transaction log, click the Refresh button.


If you are searching for a specific transaction entry, you can use the filter function to find it quickly.


Managing Logs

7.3.1 DOWNLOAD TRANSACTION LOG

Download Transaction log screen allows to download the log entries from the selected devices. An automatic download schedule can be specified where by user can configure the timings for the SecureAdmin Lite server to download the transactions automatically.

Figure 7-4 Download Transaction Log

For e.g. in the example above, SecureAdmin Lite Server is configured to download log entries every One week on Sunday at 10:30 AM from Device0, Device1 & Device2.

7.3.1.1 DEFINED AUTO DOWNLOAD SCHEDULE

1. Click the Download button on the Transaction Log screen.

2. Check the Activate Auto Download check box.

3. Specify the Download Time at which the download of log entries from Device(s) will take place.

4. Select Recurrence Pattern as Daily, Weekly or Monthly.

5. Select other parameters as per the recurrence pattern.

6. Define Range of Recurrence as No End Date, End After X Recurrence and End After specified Date.

7. From the Device Network tree, select the Devices from which the Transaction log entries are to be downloaded.

8. Click Save. The Auto Download Schedule parameter will be saved & SecureAdmin Lite server will download the log as per schedule.


Managing Logs

7.3.1.2 MANUAL DOWNLOAD OF TRANSACTION LOG ENTRIES

1. Click the Download button on the Transaction Log screen.

2. From the Device Network tree, select the Devices from which the Transaction log entries are to be downloaded

3. Click Download button.

NOTICE

Transaction Log entries once downloaded from SecureAdmin Lite

Server, can not be re-downloaded.

7.3.2 FILTER THE TRANSACTION LOG

1. Enter or select the filter criteria by means of the various fields and drop-down lists.

2. Click the View Log button. Any transaction entries matching your filter criteria are displayed.

The transaction log or items in the transaction log can be exported.

7.3.3 EXPORT TRANSACTION LOG ENTRIES

1. Select the check boxes next to the transaction log entries you want to export (to the left of the Description column) or Use Select All check box to select all entries.




7.3.4 DELETE SELECTED TRANSACTION LOG ENTRIES

1. Select the check boxes next to the transaction log entries you want to delete (to the left of the Description column).

2. Click the Delete button. The selected entries are deleted from SecureAdmin Lite Database.


Managing Logs

7.3.5 DELETE ALL TRANSACTION LOG ENTRIES

1. Use Select All check box to select all transaction log entries 2. Click the Delete button. All the entries are deleted.

NOTICE

Transaction Log entries once deleted from SecureAdmin Lite, can not

be reverted back.

Note: The Identification score is logged as 0 for both success as well as failure. No score is logged in the Transaction log for Identification.

7.4 DEVICE EVENT LOG

The Device Event Log viewer allows you to view and filter the device event log. The device event log records every event that happens to the device.

This feature is only needed for troubleshooting purposes and should not be enabled during normal usage because it records a large amount of data and can grow to a large file size very quickly.

Use the device event log only when directed to do so by L-1 Identity Solutions Technical Support.

Before the device log can start collecting device data, it must be activated. To activate the device event log, select the Activate Device Event Log check box.


Managing Logs

Figure 7-5 Device Event Log

7.4.1EXPORT DEVICE EVENT LOG

1. Select the check boxes next to the device event log entries you want to export.




To delete device event log entries, select the check boxes next to the entries you want to delete and then click the Delete button.


Managing Logs

NOTICE

Deactivate the device event log when you are finished

troubleshooting.


Menu Bar Commands

CHAPTER 8 - MENU BAR COMMANDS

CHAPTER OVERVIEW

This chapter explains the commands that are available in the SecureAdmin Lite menu bar.

The menu bar provides an assortment of controls. Many controls in SecureAdmin Lite are accessible from both the menu bar and the tabs in Quick Access Panel of the SecureAdmin Lite main interface; the use and function of these controls are explained in other chapters of this document. Other controls in the menu bar, however, are unique to this location; this chapter explains those commands.

8.1 FILE MENU

Figure 8-1 File Menu


Menu Bar Commands

The File menu provides controls that allow you to sign in as another user and to change your login password.

8.1.1 SIGN IN AS

To sign in as another user:

1. Click the Sign In As item in the File drop-down menu. SecureAdmin Lite closes and the Login dialog box is displayed.

Figure 8-2 Login Dialog Box

2. Enter the appropriate information into the Login ID, Password, and Server fields.

3. Click Login. SecureAdmin Lite re-launches as the new user.

8.1.2 CHANGE PASSWORD

To change your password:

1. Click the Change Password item in the File drop-down menu. The Change Password dialog box is displayed.

Figure 8-3 Change Password Dialog Box

2. Enter the appropriate password information into the Current Password, New Password, and Confirm Password fields.


Menu Bar Commands

3. Click Save. The new password is set and the dialog box closes.

8.1.3 EXIT

Clicking the Exit item in the File drop-down menu closes the SecureAdmin Lite application.

8.2 MANAGE MENU

Figure 8-4 Manage Menu

Clicking any item in the Manage drop-down menu simply duplicates the action produced by clicking the like-named tabs in Quick Access Panel of the SecureAdmin Lite main screen. For details on these commands, please refer to the appropriate chapter in this document.

8.3 TOOLS MENU

The menu items unique to the Tools menu are explained below.


Menu Bar Commands

Figure 8-5 Tools Menu

8.3.1 WIEGAND

The Wiegand item in the Tools menu allows you to manage the Wiegand formats in the database.


Menu Bar Commands

Figure 8-6 Wiegand

To see which predefined Wiegand formats exist in the database, select Predefined Wiegand Format in the Select Wiegand Format Type drop-down list.

To see which custom Wiegand formats exist in the database, select Custom Wiegand Format in the Select Wiegand Format Type drop-down list

8.3.1.1 TO IMPORT A PREDEFINED/CUSTOM WIEGAND FORMAT INTO THE DATABASE

1. Click the Import button. A File Open dialog box is displayed.

2. Navigate to the folder containing the Wiegand format file (*.wgf for predefined or *.cwf for custom) and select it.

3. Click OK. The file is imported and its name is displayed in the list of Wiegand formats.

8.3.1.2 TO EXPORT A PREDEFINED/ CUSTOM WIEGAND FORMAT

1. Select the Wiegand format you want to export in the list.

2. Click the Export button. A Browse for Folder dialog box is displayed.

3. Navigate to the folder containing the Wiegand format file (*.wgf for predefined/PIV/TWIC or *.cwf for custom) and select it.

4. Click OK. The Wiegand Format file (*.wgf for predefined/PIV/TWIC or *.cwf for custom) is exported to the specified location


Menu Bar Commands

8.3.1.3 TO ADD A CUSTOM WIEGAND FORMAT

1. Select Custom Wiegand Format in the Select Wiegand Format Type drop-down list.

2. Click the Add button. Note that this button is not available on the Predefined Wiegand Format screen. The Wiegand Format dialog box is displayed.

Figure 8-7 Custom Wiegand Format - Add Button

3. Enter a name into the Name field.

4. Enter a Length value.

5. Enter the Wiegand ID Start Position, Length and Heart Beat Value.

6. Click the Add User Field button (the top-most red arrow that’s pointing left) in the User Fields area. A slot is displayed in the User fields area.

7. For the new User Field entry, enter Name, Start Position, Length, Success Value and Failure values.

8. Click the Add Parity Field button (the top-most red arrow that’s pointing left) in the Parity bits area. A slot is displayed in the Parity bits area.


Menu Bar Commands

Figure 8-8 New Wiegand Format Dialog Box

9. Select a Parity Type from the drop-down list.

10. Click the Parity Mask button. In the dialog box that appears, calculate and apply a parity value.

11. Click Apply. The new Wiegand format is displayed in the list.

8.3.2 WEEK SETTING

Figure 8-9 Week Setting


Menu Bar Commands

SecureAdmin Lite provides the facility to configure the week start and working days of a week.

First day of week: Select required day from Week Starts on drop-down to set the first working day of week.

Working days: Select required days from the list of Week day(s) and click button with >> to move them to the list of Week off(s). Similarly, select required days from the list of Week off(s) and click button with << to move them to the list of Week day(s). Week start and week off/week days setting will have effect on Access / Biometric schedule and download schedule of logs.

Click Apply button to save the changes.

8.3.3 FIRMWARE UPGRADE

The firmware of 4G Lite devices can be field-updated. L-1 Identity Solutions recommends that only advanced users should attempt to perform this operation. Please contact L-1 Identity Solutions Technical Support with any questions before attempting to update device firmware.

To upgrade device firmware:

1. Click the Firmware Upgrade item in the Tools drop-down menu. The Firmware Upgrade Wizard is displayed.

Figure 8-10 Firmware Upgrade - Step 1

2. Select the device you are upgrading in the Current Device drop-down list. The device’s information is displayed.


Menu Bar Commands



4. Click Browse. A SecureAdmin Lite File Selection dialog box is displayed.

5. Navigate to the folder containing the device firmware file and select it.

6. Click Open.



8. Click Upgrade. A final confirmation box is displayed.


Menu Bar Commands

Figure 8-13 Final Confirmation

9. Click Yes. The upgrade process starts and a progress meter is displayed. Do not touch the device.

10. Click Close.

WARNING

Touching the device keypad, attempting to access any of the

administrative menus, or trying to perform a verification whilst

performing a firmware upgrade can damage the device!

8.3.4 SENSOR TEST

To test a device sensor:

1. Click the Sensor Test item in the Tools drop-down menu. The Sensor Test dialog box is displayed.

2. Select the device you want to test in the Current Device drop-down list. Properties of the device’s sensor are displayed in the Sensor Information area.


Menu Bar Commands

Figure 8-14 Sensor Test Dialog Box

3. Click Test Sensor.

4. Place a finger on the sensor, and remove finger as directed by the prompts. The test scan results are displayed.

5. Click Close.

8.3.5 SYNCHRONIZATION

This feature allows creating synchronization between 4GLite devices and SecureAdmin Lite Database whereby, the actions performed on the device related to user/template data can be synchronized with SecureAdmin Lite DB. Any user/templates that were added to the device through Command Card Enrollment or Wiegand are added to the database after successful synchronization.

To synchronize device and database user/template data:

1. Select Synchronization in the Tools drop-down menu. The Synchronization dialog box is displayed.


Menu Bar Commands

Figure 8-15 Synchronization Dialog Box

2. Select the check boxes next to the groups and devices you want to synchronize.

3. Click the Synchronize button. A Synchronization Result dialog box is displayed.

Figure 8-16 Synchronization Result Dialog Box

4. Click OK.

8.3.6 RESET TO FACTORY DEFAULTS

The Reset to Factory Default item in the Tools drop-down menu allows you to reset a device back to default factory settings.

To reset a device to factory default:

1. Select Reset to Factory Default in the Tools drop-down menu. The Reset to Factory Default dialog box is displayed.


Menu Bar Commands

Figure 8-17 Reset To Factory Defaults Dialog Box

2. Select the device you want to reset to factory defaults in the Current Device drop-down list.

3. Select the check boxes next to the specific parameters you want to reset.

4. Click Reset. The selected settings are reset to factory default on the current device.

NOTICE

L-1 Identity Solutions recommends that only advanced users use this

feature. Please call L-1 Identity Solutions Technical Support for

assistance before attempting to use this feature.

8.3.7 REALTIME ACTIVITY MONITOR

Realtime Activity Monitor allows an administrator to monitor all the activity/transactions of the devices which are registered through Ethernet Communication. Activity Monitor will show the realtime transaction being performed on the selected devices.


Menu Bar Commands

If Realtime Activity Logging and Monitoring has been activated on a device, SecureAdmin Lite will automatically download all the transaction log entries to the database continuously. Downloaded transaction log entries can be searched \ filtered from the Transaction Log screen without explicit download of log entries.

8.3.7.1 ENABLE REALTIME ACTIVITY LOGGING AND MONITORING

To allow device to send real time activity details to SecureAdmin Lite server, Realtime activity logging and monitoring should be enabled on the device.

1. Navigate to Miscellaneous tab of Network Tree.

2. Check the Activate Realtime Activity Logging and Monitoring check box

3. Click Apply.


Menu Bar Commands

Figure 8-18 Miscellaneous Tab – Realtime Activity Logging

8.3.7.2 REALTIME ACTIVITY MONITORING

To see the real time activity details of various devices, administrator can open Tools → Realtime Activity Monitor.

1. Open Realtime Activity Monitor from Tools menu.

2. Select the devices for which you wish to monitor realtime activities.


Menu Bar Commands

Figure 8-19 Realtime Activity Monitor

8.3.7.3 FILTERING REALTIME ACTIVITIES

To filter the realtime activity monitor for the selected devices.

1. Open Realtime Activity Monitor from the Tools menu.

2. Select the devices for which you wish to monitor realtime activities.

3. Specify the filter criteria like Device Name, Action etc

4. Check the Show Offline Activities Only check box if you want to monitor activities which took place while device was not communicating to SecureAdmin Lite server.

5. Select the Full Screen check box to see the Activity Monitor in full screen mode.


Menu Bar Commands

Figure 8-20 Realtime Activity Monitor – Filtered Activities

8.3.8 OPTIONS

The Template Settings frame on Options screen provides a feature to configure the storage of template to Database after Enrollment. When the Save Templates to Database option is not checked, card/template enrolled via SecureAdmin Lite will NOT be stored in the database.


Menu Bar Commands

Figure 8-21 Options – Save Templates to Database

1. Open Options from Tools menu.

2. Check \ Un-check the Save templates to database check-box as required.

3. Click OK

WARNING

While Save templates To database is unchecked, Database Template related features like, Template Transfer from database to Device, Template Editing, , Synchronization, will NOT be available.


Menu Bar Commands

8.4 HELP MENU

Figure 7-22 Help Menu

8.4.1 HELP CONTENT

Click the Help Content item in the Help drop-down menu to launch the SecureAdmin Lite Help file.

8.4.2 ABOUT PRODUCT REGISTRATION

Click the Product Registration item in the Help drop-down menu to display the Product Registration dialog box. This dialog box shows registration information for the software. Click OK to close the dialog box.


Menu Bar Commands

Figure 8-23 Product Registration Dialog Box

8.4.3 ABOUT SECUREADMIN LITE

Click the Help Content item in the Help drop-down menu to display the About SecureAdmin Lite dialog box. This dialog box shows the version of the software. Click OK to close the dialog box.

Figure 8-24 About SecureAdmin Lite Dialog Box


Front Panel Operation

CHAPTER 9 - FRONT PANEL OPERATION CHAPTER OVERVIEW

For 4G-Lite devices that are equipped with a front panel, there are situations when it is more convenient to use the front panel for system set-up, such as when enrolling a new user in a remote location. Most of the common set-up functions can be performed from the front panel using the keypad. This chapter shows how to operate the device from the front panel. It provides detailed procedures for using the menu systems and for performing commonly used operations.

9.1 OPERATING THE 4G LITE DEVICE FROM THE FRONT PANEL

The 4G Lite device can be set up using the Secure Admin Lite software on a PC or by using the controls on the front panel.

Occasionally, there are situations when using a PC for system set up is not desired or possible, such as when enrolling a new user in a remote location. Most of the common functions can be performed from the front panel of the reader by using the keypad.

This chapter describes how to navigate the menu systems and enter data. The keypad duplicates much of the functionality found in Secure Admin Lite. A one-to-one mapping of options found in Secure Admin Lite and those found in the front panel menus on the 4G Lite devices has been maintained. The 4G Lite device’s illuminated buttons are arranged in two groups; numeric keypad, navigation keys.



Figure 9-1: V-Station Lite Device Front Panel

Numeric Keys

This group of keys is used to enter numbers or letters. This group of keys also includes the Enter and Esc (Escape) keys, which are located in the bottom row.

Navigation Keypad

This group of keys is used to move Left, Right, up, and down through the device’s various menu systems. The central OK button is used to enter or confirm a selection or entered data.



9.1.1 ACCESSING ADMINISTRATOR MODE

The 4G system menu is accessible only in Administrator mode. There are four Admin System access modes:

1. All Users + Password

2. All Users with Password + Biometric

3. Admin with Password Only

4. Admin with Password + Biometric

The Admin login mode can be changed through either SecureAdmin Lite or the LCD menu.

To change the Admin login method in SecureAdmin Lite:

Click Device Settings Device Security. The Device Security tab is displayed. Select the appropriate option on the Device Security Options screen.



Figure 9 - 2 SecureAdmin - Device Security Options



Figure 9 - 3 SecureAdmin Lite - Device Security Options

To change the Admin login method using the LCD menu:

1. Select Security → Login Options. The LCD’s Login Options screen is displayed.

2. Scroll Left or Right until the desired option is displayed. Press OK to complete the selection.



Figure 9 - 4: LCD Login Option

9.1.1.1 ALL USERS WITH PASSWORD

The All Users + Password access method allows all users who know the device password ac-cess to the Admin menu.

To access the Admin menu in this mode:

1. Press the Enter and Left arrow keys simultaneously. The Enter Device Password screen is displayed.

Figure 9 - 5: Enter Device Password

2. Using the keypad, enter “0000”. This is the default Admin password for the device, as shipped from the factory.

3. Press OK. The main menu is displayed with the System icon (in the top left corner of the screen) highlighted. This is the currently selected icon.



Figure 9 - 6: Main Menu

Using the navigation keys to select any of these four icons, all of the menu systems available on the

4G Lite device can be accessed.

9.1.1.2 ALL USER WITH PASSWORD AND BIOMETRIC

In this mode, all users who have a biometric template saved in the device and know the device password are allowed Admin System access.

To access the Admin menu in this mode:

1. On the device keypad, press the Enter and Left arrow keys simultaneously. The Enter ID screen is displayed.

Figure 9 - 7 Enter ID Screen

2. Enter your Template ID and press OK. The Enter Device Password screen is displayed.



Figure 9 - 8 Enter Device Password

3. Enter the device password and press OK. The Place Finger message will be displayed to prompt you to verify your identity.

Figure 9 - 9 Place Finger Screen

4. Verify your identity by placing your finger on the finger scan sensor. The main Admin Menu screen is displayed with the System icon (in the top left corner of the screen) highlighted. This is the currently selected icon.

Figure 9 - 10: Main Menu



Using the navigation keys on the device keypad, any of the four icons displayed on the Admin Menu screen can be selected by highlighting the desired icon and pressing OK.

9.1.1.3 ADMIN USER WITH PASSWORD

In this mode, all users who know the device password and have been enrolled as either “V- Station Admin ID”, “V-Station Enroll ID” or “Limited V-Station Enroll ID” are allowed Admin System access.

The process for accessing the Admin menu is the same as in section 9.1.1.2 except biometric verification is not required.

9.1.1.4 ADMIN USER WITH PASSWORD AND BIOMETRIC

In this mode, only users who have a biometric template saved in the device, know the device password, and have been enrolled as either “V-Station Admin ID”, “V-Station Enroll ID” or “Limited V-Station Enroll ID” is allowed Admin System access.

To access the Admin menu in this mode refer to section 9.1.1.2.

9.2 SYSTEM

The System option allow user to set up different settings for IO, USB, LCD Display and Device’s general setting.

To access the System menu:

1. Using the navigation keys, select the System icon.

2. Press OK. The System menu screen is displayed.

Figure 9 - 11 System Menu Icon



9.2.1 IO

The IO option allows you to set different IO operation such as communication, wiegand, Tamper and Door control options.

To access IO menu

1. Using the navigation keys, select the System Icon.

2. Press OK. The System menu screen is displayed

Figure 9 - 12 IO Menu Icon

3. Now select IO icon using navigation keys.

4. Press OK. The IO menu screen is displayed

Figure 9 - 13 IO - System

9.2.1.1 TCP/IP

The TCP/IP menu allow user to set Ethernet setting. To access TCP/IP menu:



1. Select TCP/IP item in IO Menu

Figure 9 - 14 TCP/IP - IO

9.2.1.1.1 DHCP

The DHCP options allow user to select TCP/IP mode as DHCP where user need not to setup IP, Subnet Mask or Gateway. To enable DHCP mode:

1. Select DHCP item in TCP/IP menu

2. Press OK or Enter. Afterwards, TCP/IP mode of device is set to DHCP.

Figure 9 - 15 DHCP Mode - TCP/IP

9.2.1.1.1 Static

The Static options allow user to set IP, Subnet Mask and Gateway with user defined values. To enable and access Static mode

1. Select Static item in TCP/IP menu



2. Press OK or Enter.

3. Now the sub menu opens to set static detail.

Figure 9 - 16 Static Mode - TCP/IP

4. Now as you have selected Static mode, press OK and enter an address in the IP Address field using the numeric keypad. The Left arrow key clears characters (like a Backspace key) and the Right arrow key places periods.

Figure 9 - 17 IP Address - Static

5. Press OK. A status message is displayed for IP Address

6. Select Subnet Mask and press OK. Enter a subnet mask in the Subnet Mask field using the numeric keypad. The Left arrow key clears characters (like a Backspace key) and the Right arrow key places periods



Figure 9 - 18 Subnet Mask - Static

7. Press OK. A status message is displayed for Subnet Mask

8. Select Gateway, press OK and enter a gateway address in the Gateway Address field using the numeric keypad. The Left arrow key clears characters (like a Backspace key) and the Right arrow key places periods.

Figure 9 - 19 Gateway - Static

9. Press OK. A status message is displayed for Subnet Mask

9.2.1.2 RS-485

The RS-485 menu allows user to set serial communication parameter with RS-485. To access RS-485 settings menu:

1. Select the RS-485 item in the IO menu.

2. Press OK. The RS-485 Options menu is displayed.



Figure 9 - 20 RS-485 – IO

9.2.1.2.1 Baudrate

1. Select Baudrate item in RS-485 Menu, press OK and select value of Baudrate with navigation keys.

Figure 9 - 21 Baudrate – RS-485

2. Press OK. A status message is displayed.

9.2.1.2.2 Net ID

1. Select Net ID item in RS-485 Menu, press OK and select value of Net ID (Device ID) with navigation keys.



Figure 9 - 22 Net ID – RS-485


9.2.1.3 WIEGAND

The Wiegand menu allows you to enable/disable wiegand input/output. To access Wiegand settings menu:

1. Select the Wiegand item in the IO menu.

2. Press OK. The Wiegand menu is displayed.

Figure 9 - 23 Wiegand – IO

9.2.1.3.1 Input Port

1. Select Input Port item in Wiegand menu, press OK.

2. Use the Left and Right key to enable or disable Input Port



Figure 9 - 24 Input Port – Wiegand


9.2.1.3.1 Output Port

1. Select Output Port item in Wiegand menu, press OK.

2. Use the Left and Right key to enable or disable Output Port

Figure 9 - 25 Output Port – Wiegand


9.2.1.4 TAMPER

The Tamper menu allows you to configure Tamper settings. To access Tamper settings menu:

1. Select the Tamper item in the IO menu.

2. Press OK. The Tamper menu is displayed.



Figure 9 - 26 Tamper – IO

9.2.1.4.1 State

1. Select State item in Tamper menu, press OK.

2. Use the Left and Right key to enable or disable Tamper

Figure 9 - 27 State – Tamper


4. You can use third option Clear-ReEnable for Tamper state, only if Tamper is triggered.

9.2.1.4.2 Biometric

1. Select Biometric item in Tamper menu, press OK.

2. Use the Left and Right key to set the Biometric enabled or disabled, while the Tamper is triggered.



Figure 9 - 28 Biometric – Tamper


9.2.1.4.3 Erase Template

1. Select Erase Template item in Tamper menu, press OK.

2. Use the Left and Right key to set Erase Template enabled or disabled, while the Tamper is triggered

Figure 9 - 29 Erase Template – Tamper


9.2.1.4.4 Send Wiegand

1. Select Send Wiegand item in Tamper menu, press OK.

2. Use the Left and Right key to enable or disable Send Wiegand, while the Tamper is triggered



Figure 9 - 30 Send Wiegand – Tamper


9.2.1.5 DOOR CONTROL

The Door Control menu allows you to configure Door Control settings. To access Door Control settings menu:

1. Select the Door Control item in the IO menu.

2. Press OK. The Door Control menu is displayed.

Figure 9 - 31 Door Control – IO

9.2.1.5.1 SDC Settings

The SDC Setting menu allows you to configure SDC Settings. To access SDC Settings menu:

1. Select SDC Settings item in Door Control menu.

2. Press OK. The SDC Settings menu is displayed.



Figure 9 - 32 SDC Settings – Door Control

3. Navigate to Mode item in SDC Settings menu, press OK.

4. Use the Left and Right key to select mode from options SDC or Secure Control or OFF

Figure 9 - 33 Mode - SDC Settings


6. Navigate to Unlock Duration item in SDC Settings menu, press OK.

7. Use the numeric keypad to select unlock duration in range 1 to 60 Seconds.



Figure 9 - 34 Unlock Duration - SDC Settings


9. Navigate to Held Open Duration item in SDC Settings menu, press OK.

10. Use the numeric keypad to select unlock duration in range 1 to 3600 Seconds.

Figure 9 - 35 Held Open Duration - SDC Settings


12. Navigate to Alarm Type item in SDC Settings menu, press OK.

13. Use the Left and Right key to select Alarm Type from options Audio + LED /Audio/ LED



Figure 9 - 36 Alarm Type – SDC Settings


15. Navigate to Exit Mode item in SDC Settings menu, press OK.

Figure 9 - 37 Exit Mode – SDC Settings

16. Navigate to Mode item in Exit Mode menu, press OK.

17. Use the Left and Right key to select Exit Mode from option Push Button-Manual / Push Button-Electric / Motion detector / None

Figure 9 - 38 Mode – Exit Mode




19. For Exit Mode “Motion Detector” and “Push Button Manual” navigate to Egress Timeout item in Exit Mode menu, press OK

20. Use the numeric keypad to select Egress Timeout in range 1 to 300 Seconds.

Figure 9 - 39 Egress Timeout – Exit Mode


9.2.1.5.2 TOM

The TOM menu allows you to configure TOM. To access TOM menu:

1. Select TOM item in Door Control menu.

2. Press OK. The TOM menu is displayed.

Figure 9 - 40 TOM – Door Control

3. Navigate to Mode and Press OK.

4. Use Left and Right key to enable/disable TOM



Figure 9 - 41 Mode – TOM


6. Navigate to Timeout once the TOM is enabled

7. Use the numeric keypad to select Timeout in range 1 – 1440 Minutes

Figure 9 - 42 Timeout – TOM


9.2.2 USB

The options under USB menu, allows you to initialize USB and transfer files through USB. To access USB menu


2. Press OK. The System Menu screen is displayed



Figure 9 - 43 USB Menu Icon

3. Now select USB icon using navigation keys.

4. Press OK. The USB Menu screen is displayed

Figure 9 - 44 USB – System

9.2.2.1 FILE TRANSFER

The File Transfer menu allows user to transfer the file from and to USB drive. To access File Transfer menu:

1. Select File Transfer item in USB Menu



Figure 9 - 45 File Transfer – USB

9.2.2.1.1 Firmware

The Firmware options allow user to transfer firmware file to device and use that to upgrade firmware on device. To access Firmware:

1. Select Firmware item in File Transfer menu. Press OK.

Figure 9 - 46 Firmware – File Transfer

2. Connect the USB drive which is initialized by device and contains firmware file located in firmware folder.

3. Use Left and Right key to select option Copy to Device.



Figure 9 - 47 Copy to Device – Firmware

4. Press OK. File transfer process starts and on completion A status message is displayed as “File Copied”

5. If USB is not attached then you will get message “USB key is not connected”.

6. If USB key is attached but directory structure is not initialized, then you will get message “Directory does not exist on device”

7. If USB key is attached with directory structure, but no firmware file exist in firmware folder, then you will get message “File does not exist or corrupt file”

8. Use Left and Right key to select option Upgrade Firmware

9. If device does not have firmware file, then you will get message “Firmware file not found on device”

10. Press OK. Firmware upgrade will start with message “Firmware Upgrade in Process” and beep sound.

11. On completion, device will reboot and firmware file will be deleted from device memory.

9.2.2.1.2 Language

The Language options allows user to transfer language file to device and use that to change device language. To access Language:

1. Select Language item in File Transfer menu. Press OK.



Figure 9 - 48 Language – File Transfer

2. Connect the USB drive which is initialized by device and contains language file as “NGVLanguageFile.qm” at language folder.

3. Press OK with the option Copy to Device

4. Device will ask “Do you want to change current device language?”. Press OK to continue.

Figure 9 - 49 Copy Language prompt– Firmware

5. On reboot device, the language of LCD will be changed as per the language file uploaded on device with above steps.

9.2.2.1.3 Audio

The Audio options allows user to manage audio file of device for event Tamper, Verify Success & Verify Failed. To access Audio Files:

1. Select Audio item in File Transfer menu. Press OK.



Figure 9 - 50 Audio – File Transfer

2. Connect the USB drive which is initialized by device and contains audio files in all 3 folders.

3. Using navigation key to select Tamper item in Audio menu. Press OK.

Figure 9 - 51 Tamper – Audio

4. Using navigation key to select On Device item in Tamper menu. Press OK.

Figure 9 - 52 On Device – Tamper



5. Device will show the audio file associated for Tamper.

6. Pressing OK will show audio image. Pressing OK further will show option for the audio file as Play, Copy & Delete.

7. Using navigation key, select Play. Pressing OK will play the audio file.

8. Using navigation key, select Copy. Pressing OK will prompt a message “Please confirm Copy file to USB?” with OK and ESC option.

9. Pressing OK, will copy the file to ‘Tamper’ folder of USB, and status message will be displayed.

10. Using navigation key select Delete. Pressing OK will prompt a message “Please confirm Delete current file?” with OK and ESC option.

11. Pressing OK, will delete the file and status message displayed. User will reach to Tamper menu.

12. Using navigation key select On USB item in Tamper menu. Press OK.

Figure 9 - 53 On USB – Tamper

13. Device will show all the audio files available in Tamper folder of USB.

14. Using navigation key, select audio file. Pressing OK will show audio image.

15. Pressing OK, will show option for the audio file as Play, Copy & Delete.

16. Using navigation key, select Play. Pressing OK will play the audio file.

17. Using navigation key select Copy. Pressing OK will prompt a message “Please confirm Copy file to Device?” with OK and ESC option.

18. Pressing OK, will copy and attach the file for the action Tamper, and status message displayed.

19. Using navigation key select Delete. Press OK will prompt a message “Please confirm Delete current file?” with OK and ESC option.



20. Press OK, will delete the file and status message displayed. User will reach to Tamper menu.

21. Using navigation key select Verify Success item in Audio menu. Press OK

Figure 9 - 54 Verify Success – Audio

22. Using navigation key select On Device item in Verify Success menu. Press OK.

Figure 9 - 55 On Device – Verify Success

23. Device will show the audio file associated for Verify Success.

24. Press OK will show audio image. Press OK will show option for the audio file as Play, Copy & Delete.

25. Using navigation key select Play. Press OK will play the audio file.

26. Using navigation key select Copy. Press OK will prompt a message “Please confirm Copy file to USB?” with OK and ESC option.

27. Press OK, will copy the file to ‘Verify Success’ folder of USB, and status message displayed.




29. Press OK, will delete the file and status message displayed. User will reach to Verify Success menu.

30. Using navigation key select On USB item in Verify Success menu. Press OK.

Figure 9 - 56 On USB – Verify Success

31. Device will show all the audio files available in Verify Success folder of USB.

32. Using navigation key select audio file. Press OK will show audio image.

33. Press OK, will show option for the audio file as Play, Copy & Delete.


35. Using navigation key select Copy. Press OK will prompt a message “Please confirm Copy file to Device?” with OK and ESC option.

36. Press OK, will copy and attach the file for the action Verify Success, and status message displayed.


38. Press OK, will delete the file and status message displayed. User will reach to Verify Success menu.

39. Using navigation key select Verify Failed item in Audio menu. Press OK.



Figure 9 - 57 Verify Failed – Audio

40. Using navigation key select On Device item in Verify Failed menu. Press OK.

Figure 9 - 58 On Device – Verify Failed

41. Device will show the audio file associated for Verify Failed.

42. Press OK will show audio image. Press OK will show option for the audio file as Play, Copy & Delete.



45. Press OK, will copy the file to ‘Verify Failed’ folder of USB, and status message displayed.


47. Press OK, will delete the file and status message displayed. User will reach to Verify Failed menu.

48. Using navigation key select On USB item in Verify Failed menu. Press OK.



Figure 9 - 59 On USB – Verify Failed

49. Device will show all the audio files available on Verify Failed folder of USB.

50. Using navigation key select audio file. Press OK will show audio image.

51. Press OK, will show option for the audio file as Play, Copy & Delete.


53. Using navigation key select Copy. Press OK will prompt a message “Please confirm Copy file to Device?” with OK and ESC option.

54. Press OK, will copy and attach the file for the action Verify Failed, and status message displayed.


56. Press OK, will delete the file and status message displayed. User will reach to Verify Failed menu.

9.2.2.1.4 Wallpaper

The Wallpaper options allow user to manage wallpaper for device. To access Wallpaper Files:

1. Select Wallpaper item in File Transfer menu. Press OK.



Figure 9 - 60 Wallpaper – File Transfer

2. Connect the USB drive which is initialized by device and contain image files in wallpaper folder.

3. Using navigation key select On Device item in Wallpaper menu. Press OK.

Figure 9 - 61 On Device – Wallpaper

4. Device will list the wallpaper image file of Device.

5. Press OK will show the image. Press OK will show option for the file as Copy & Delete.


7. Press OK, will copy the file to Wallpaper folder of USB, and status message displayed.


9. Press OK, will delete the file from Device.

10. Using navigation key select On USB item in Wallpaper menu. Press OK.



Figure 9 - 62 On USB – Wallpaper

11. Device will list all the image files of USB

12. Press OK will show the supported image and for rest will show “Invalid File”.

13. Press OK will show option for the file as Copy & Delete.


15. Press OK, will copy the file to Wallpaper folder of USB and set as wallpaper, and status message displayed.


17. Press OK, will delete the file from USB.

NOTICE

4G V-Station Lite devices accepts image with maximum 320 x 240

pixels

9.2.2.1.5 Event Log

The Event Log options allow user to copy event log of device to USB. To access Event Log:

1. Select Event Log item in File Transfer menu. Press OK.



Figure 9 - 63 Event Log – File Transfer

2. Connect the USB drive which is initialized by device and contain ‘EventLog’ folder.

3. Using navigation key select Month and press OK. With navigation key select month and press OK.

4. Using navigation key select Date and press OK. With numeric keypad enter date and press OK.

5. Using navigation key select Month and press OK. With navigation key select year.

6. Press OK, will prompt message “Copy event log to USB?”

7. Press OK, will copy the file to EventLog folder of USB and status message displayed.

9.2.2.2 INITIALIZE USB

The Initialize USB option allows user to create directory structure on attached USB drive. To access Initialize USB menu:

1. Select Initialize USB item in USB Menu

Figure 9 - 64 Initialize USB – USB



2. Press OK, will prompt a message “Please confirm Create new directory structure on USB?

3. Press OK, will create directory structure on USB, i.e. will create folder with below structure



9.2.3 SETTINGS

The options under Setting menu allow you to manage Device Settings e.g. Template, Time & Attendance Mode, Reset Setting etc. To access Settings menu



Figure 9 - 65 Settings Menu Icon

3. Now select Settings icon using navigation keys.

4. Press OK. The Settings Menu screen is displayed

Figure 9 - 66 Settings – System

9.2.3.1 ERASE TRANSACTION LOG

The Erase Transaction Log option allows user to erase transaction log available on device. To access Erase Transaction Log:

1. Select Erase Tran. Log item in Settings Menu



Figure 9 - 67 Erase Tran. Log – Settings

2. Using navigation key select Yes. Press OK, will prompt a message “Confirm Erase Logs.

3. Press OK, will delete all the transaction logs of device.

9.2.3.2 TEMPLATE TYPE

The Template Type menu allows user to set template type on device. To access Template Type:

1. Select Template Type item in Settings Menu

Figure 9 - 68 Template Type – Settings

2. Using navigation key select template type from the available template types.

3. Press OK, will prompt message “Confirm Change Template Type”.

4. Press OK, will change template type of device and device will be rebooted with deletion of all existing templates.



9.2.3.3 RESET SETTINGS

The Reset Settings option allows user to reset all the parameters to factory defaults. To access Reset Settings:

1. Select Reset Settings item in Setting Menu

Figure 9 - 69 Reset Settings – Setting

2. Using navigation key select Yes. Press OK, will prompt a message “Confirm Reset Parameters”.

3. Press OK, will reset all the parameters to factory defaults and reboot the device.

9.2.3.4 TIME ATTENDANCE

The Time Attendance menu allows user to set mode of Time and Attendance. To access Time Attendance:

1. Select Time Attendance item in Settings Menu



Figure 9 - 70 Time Attendance – Settings

2. Using navigation key select mode of Time Attendance from Disable/Fixed/Manual/FKey as Input.

3. Press OK, will set the T&A Mode and status message displayed.

9.2.3.5 REBOOT DEVICE

The Reboot Device option allows user to soft reboot the device. To access Reset Settings:

1. Select Reboot Device item in Settings Menu

Figure 9 - 71 Reboot Device – Setting

2. Press OK, will prompt a message “Perform Soft Reboot”.

3. Press OK, will reboot the device.



9.2.4 LCD/SOUND

The options under LCD/Sound menu allow you to manage Device LCD Settings e.g. Buzzer, Backlight etc. To access LCD/Sound menu



Figure 9 - 72 Setting Menu

3. Now select LCD/Sound icon using navigation keys.

4. Press OK. The LCD/Sound Menu screen is displayed

Figure 9 - 73 LCD/Sound – System

9.2.4.1 BACKLIGHT TIMEOUT

The Backlight Timeout option allows user to set backlight timeout value between 5 to 15 seconds. To access Backlight Timeout:



1. Select Backlight Timeout item in LCD/Sound Menu

Figure 9 - 74 Backlight Timeout – LCD/Sound

2. Using either navigation key or numeric keys select backlight timeout seconds.

3. Press OK, will set the value and status message displayed.

9.2.4.2 KEY PRESS SOUND

The Key Press Sound option allows user to enable/disable buzzer on key press. To access Key Press Sound:

1. Select Key Press Sound item in LCD/Sound Menu

Figure 9 - 75 Key Press Sound – LCD/Sound

2. Using navigation key select enable or disable.

3. Press OK, will enable/disable the key press buzzer and status message displayed.



9.2.4.3 LCD OFF TIMEOUT

The LCD Off Timeout option allows user to set LCD off timeout value as disable or 1 to 30 Minutes. To access LCD Off Timeout:

1. Select LCD off Timeout item in LCD/Sound Menu

Figure 9 - 76 LCD off Timeout – LCD/Sound

2. Using either navigation key or numeric keys select LCD off timeout minutes.

3. Press OK, will set the value and status message displayed as “Power saver timeout set”

9.2.4.4 DATE/TIME

The Date/Time menu allows user to set Date & Time of device. To access Date/Time:

1. Select Date/Time item in LCD/Sound Menu

Figure 9 - 77 Date/Time – LCD/Sound

2. Press OK, will navigate user to Date/Time Menu.



9.2.4.4.1 Time

The Time options allow user to set time of device in format HH:MM: SS. To access Time:

1. Select Time item in Date/Time menu. Press OK.

Figure 9 - 78 Time – Date/Time

2. Using numeric keys set value for hour, minute and seconds.

3. Press OK, will set the device time and status message displayed.

9.2.4.4.1 Date

The Date options allow user to set date of device in format DD/MM/YYYY. To access Date:

1. Select Date item in Date/Time menu. Press OK.



Figure 9 - 79 Date – Date/Time

2. Using numeric keys set value for date, month and year.

3. Press OK, will set the device date and status message displayed.



9.3 SECURITY

The Security option allows user to set up different security settings for biometric, communication, global and login.

To access the Security menu:

1. Using the navigation keys, select the Security icon.

2. Press OK. The Security screen is displayed.

Figure 9 - 80 Security Menu Icon

9.3.1 BIOMETRIC

The Biometric option allows you to set different Biometric security settings.

To access Biometric menu





Figure 9 - 81 Security Menu

3. Using the navigation keys, select the Biometric Icon.

4. Press OK. The Biometric screen is displayed

Figure 9 - 82 Biometric Menu – Security

5. Duress Mode option allow you to set wiegand output setting for the Duress finger detection while verification and identification.

6. Using navigation keys select Duress Mode in Biometric Menu, press OK.

Figure 9 - 83 Duress Mode – Biometric



7. Using navigation keys select Enable/Disable

8. Press OK, will enable/disable the wiegand output setting of Duress and status message displayed.

9. Password option allows you to enable/disable password verification on device.

10. Using navigation keys select Password in Biometric Menu, press OK.

Figure 9 - 84 Password – Biometric


12. Press OK, will enable/disable the Password verification and status message displayed.

13. Biometric option allows you to enable/disable biometric verification on device.

14. Using navigation keys select Biometric in Biometric Menu, press OK.

Figure 9 - 85 Biometric – Biometric




16. Press OK, will enable/disable the Biometric verification and status message displayed.

17. Access Schedule option allows you to enable/disable access schedule on device.

18. Using navigation keys select Access Schedule in Biometric Menu, press OK.

Figure 9 - 86 Access Schedule – Biometric


20. Press OK, will enable/disable the Access Schedule and status message displayed.

21. CVE Mode option allows you to enable/disable custom verification entry mode on device.

22. Using navigation keys select CVE Mode in Biometric Menu, press OK.

Figure 9 – 87 CVE Mode – Biometric


24. Press OK, will enable/disable the CVE Mode and status message displayed.



9.3.2 COMMUNICATION

The Communication option allows you to set different communication security settings.

To access Communication menu




3. Using the navigation keys, select the Communication Icon.

4. Press OK. The Communication screen is displayed

Figure 9 - 89 Communication Menu – Security

5. Security Connection option allows you to enable/disable SSL mode of communication.

6. Using navigation keys select Secure Connection in Communication Menu, press OK.



Figure 9 - 90 Secure Connection – Communication


8. Press OK, will enable/disable the SSL Mode and status message will be displayed.

9. Ethernet Security option allows you to enable/disable Ethernet security of device.

10. Using navigation keys select Ethernet Security in Communication Menu, press OK.

Figure 9 - 91 Ethernet Security – Communication


12. Press OK, will enable/disable the Ethernet Security and status message will be displayed.

13. Aux Port State option allows you to enable/disable communication over auxiliary port.

14. Using navigation keys select Aux Port State in Communication Menu, press OK.



Figure 9 - 92 Aux Port State – Communication


16. To disable the Aux Port State, device will ask the password.

17. To enable the Aux Port State, device will ask the password(It should be same password which is used to disable AUX port)

18. Press OK, will enable/disable the Aux Port State and status message will be displayed.

9.3.3 GLOBAL

The Global option allows you to set security level for the device. For the device mode Verify, you will be allowed to set Verify Security only. And for device mode Identify, you will be allowed to set Identify Security too along with verify security. Security level for verify are Very High, High, Medium, Low and Very Low. And the security levels for identify are Maximum, Very High, High, Medium and Low

To access Global menu






3. Using the navigation keys, select the Global Icon.

4. Press OK. The Global Security screen is displayed

Figure 9 - 94 Global Security Menu – Security

5. Verify Security option allows you to set different security level for action verify.

6. Using navigation keys, select Verify Security in Global Security Menu, press OK.

Figure 9 - 95 Verify Security – Global Security



7. Using navigation keys select security level from Very High, High, Medium, Low and Very Low

8. Press OK, will set the Verify Security level and status message displayed.

9. Identify Security option enables when device mode is ‘Identify’ and allows you to set different security level for action identify.

10. Using navigation keys select Identify Security in Global Security Menu, press OK.

Figure 9 - 96 Identify Security – Global Security

11. Using navigation keys select security level from Maximum, Very High, High, Medium and Low.

12. Press OK, will set the Identify Security level and status message displayed.

9.3.4 LOGIN OPTIONS

The Login option allows you to set Device Security Option and Device Password. Login options are ‘Users + Password’, ‘Users + Password + Bio’, ‘Admin + Password’ and ‘Admin + Password + Bio’.

To access Login Options





Figure 9 - 97 Security Menu -

3. Using the navigation keys, select the Login Icon.

4. Press OK. The Login screen is displayed

Figure 9 - 98 Login Option Menu – Security

5. Login Options allows you to set different login options for LCD.

6. Using navigation keys select Login Options in Login Menu, press OK.

Figure 9 - 99 Login Options – Login



7. Using navigation keys select login option from ‘Users + Password’, ‘Users + Password + Bio’, ‘Admin + Password’ and ‘Admin + Password + Bio’.

8. Press OK, will set device LCD login option and status message displayed.

9. Login Password allows you to set LCD login password.

10. Using navigation keys select Login Password in Login Menu, press OK.

Figure 9 - 100 Login Password – Login

11. Using numeric keys enter the password.

12. Press OK, will set/change device LCD password and status message displayed.

9.3 INFORMATION

The Information menu allows you to view detailed information about the device settings. To access the Information menu:

1. Using the navigation keys, select the Info icon.

Figure 9 -101 Information menu



2. Press OK. The Information menu is displayed.

9.3.1 DEVICE

To view basic device information:

1. Select the Device item in the Information menu.

Figure 9 -102 Information- Device Parameters

2. Press OK. The Device menu is displayed with Device Name selected item.

Figure 9 -103 Information- Device Name

3. Press OK. It will show name of device.

Figure 9 -104 Information Device name



4. Press Esc to return to Device Name information menu item.

5. Use the Left and Right arrow keys to scroll through the menu. By pressing OK for each line selected, it shows the pertinent device information. By pressing Esc you will be returned to selected device information menu item.

Figure 9 -105 Information - Device Type

Figure 9 -106 Information - Device Serial Number

6. Press Esc to return to the Information menu

9.3.2 TEMPLATE

To view template-related information:

1. Select the Template item in the Information menu.



Figure 9 -107 Information- Template Parameters

2. Press OK. The Template menu screen is displayed with Template Type item selected.

Figure 9 -108 Information – Template Type

3. Press OK. It will show Template Type.

Figure 9 -109 Information – Template Type

4. Press Esc to return to Template Type information menu item.

5. Use the Left and Right arrow keys to scroll through the menu. By pressing OK for each line selected, it shows the pertinent template information. By pressing Esc you will be returned to selected template information menu item.



Figure 9 -110 Information- Number of Templates Enrolled

Figure 9 -111 Information – Maximum Templates

6. Press Esc to return to the Information menu.

9.3.3 COMMUNICATION

To view information about the device communication settings:

1. Select the Comm item in the Information menu.

Figure 9 -112 Information- Communication Parameters

2. Press OK. The Communication menu screen is displayed with IP item selected.



Figure 9 -113 Information – Device IP

3. Press OK. It will show IP address of device.

Figure 9 -114 Information – Device IP

4. Press Esc to return to IP information menu item.

5. Use the Left and Right arrow keys to scroll through the menu. By pressing OK for each line selected, it shows the pertinent template information. By pressing Esc you will be returned to selected communication information menu item.

Figure 9 -115 Information – Device MAC Address



Figure 9 -116 Information – Serial Communication Baud Rate

Figure 9 -117 Device screen with Device ID displayed


9.3.4 FIRMWARE

To view information about the device firmware:

1. Select the FW item in the Information menu.

Figure 9 -118 Information- Firmware Parameters

2. Press OK. The Firmware information screen is displayed with Version item selected.



Figure 9 -119 Information – Firmware Version

3. Press OK. It will show version of device firmware.

4. Press Esc to return to Version information menu item.


9.4 TEMPLATE

The Template menu allows you to enrol (add), delete, verify, and edit user templates on the device.

To access the Template menu:

1. Using navigation keys, select the Template icon.

Figure 9 -120 Main menu screen with Template icon selected

2. Press OK. Template menu screen is displayed.

9.4.1 ADD

User can enrol Finger Image or Card only enrollment can be performed through this operation



9.4.1.1 ENROLL

To enroll (or add) a new user:

1. Select the Add item in the Template menu screen.

Figure 9 -121 Template – Add Template

2. Press OK. The Enroll menu screen is displayed.

Figure 9 -122 Enroll Template

3. Select the Enroll item in the Enroll menu.

4. Press OK. The Enter Enroll ID screen is displayed.

Figure 9 -123 Enroll Template – Enter Id



Figure 9 -124 Enroll Template – Enroll Id with Prox

5. Enter an Enroll ID for the new user. User can alternatively get Enroll Id through external prox card reader. To use this functionality

I. Click Right arrow key

II. Device will ask to Swipe card

III. Pass wiegand through external prox card reader

NOTICE

Option for receiving Enroll Id through external prox card reader is

available only on 4G V-Station Lite(S) devices only.

6. Press OK. The new user is prompted to place a finger on the sensor and remove.

Figure 9 -125 Enroll Template – Place Finger

7. Quality and Content result of enrollment is displayed. If the quality is good, select Accept and press OK.



Figure 9 -126 Enroll Template - Enrollment Quality

If the enrollment quality is unacceptable, select Reject. Another attempt for finger scan will be carried out.

8. If device is in Extended ID mode then it will allow entering Extended ID through Card or Manually. In case of product types other than with Prox Cards, user will be allowed to enter Extended Id Manually only.

Figure 9 -127 Enroll Template – Get Extended Id

Selecting Enter Manual will lead to the screen where user can enter Extended Id through keypad

Figure 9 -128 Enroll Template – Enter Extended Id



Selecting From Card option will ask user to swipe the card. Swiping the card will receive Extended ID from the card.

9. Press the OK key. The Enroll User Data menu is displayed with Admin Level item selected.

Figure 9 -129 Enroll Template –Enter User Id

10. Press the OK key and then use Left or Right keys to select Admin Level of User.

11. Press Enter key to return to Admin Level menu item. Press Right key to select Index menu item. Press Enter key to enter index of the enrollment.

Figure 9 -130 Enroll Template – Provide Index

12. After selecting Index press Enter key to return to Index menu item. Press Right key to select Password menu item. Press Enter key to enter password for the enrollment.

Figure 9 -131 Enroll Template – Provide Password



13. After entering password press Enter key to return to Index menu item. Press Right key to select CSN menu item, if device is with Prox Card or Smart Card functionality. By pressing Enter key device will show current CSN for the template. Again pressing Enter key will show the options to enter new CSN. User can enter new CSN through Card or Manually.

Figure 9 -132 Enroll Template – Enter CSN

Selecting From Card option will ask user to swipe the card. Swiping the card will receive CSN from the card.

Selecting Enter Manual will lead to the screen where user can enter CSN through keypad

Figure 9 -133 Enroll Template – Enter CSN Manually

14. After entering CSN, by pressing Enter key device will ask for selecting Card type for given CSN. Five options are available as below.

I. Prox

II. MiFare

III. MiFare +

IV. iCLASS

V. DESFire



15. After entering Card Type press Enter key to return to CSN menu item. Press Right key to select Save to menu item. There are 3 options available as below.

VI. Device

VII. Smart Card

VIII. Device + Smart Card

Smart Card options are available on Smart Card product only.

Figure 9 -134 Enroll Template - Save To

16. Press OK button to store enrollment on device and smart card. Enter Site Key is displayed.

Figure 9-135 Enroll Template – Enter Site Key

17. Enter valid site key and press OK button.



NOTICE

From LCD keypad, reader is allowed to enter numeric site key only with maximum length of 15 numeric characters.

Figure 9-136 Enroll Template – Place Smart Card

If entered site key is valid, reader is displayed Place Smart Card and Hold Smart Card and then Remove Smart Card.

Figure 14-137 Enroll Template – Status Message

18. . A status message is displayed.

NOTICE

During enrollment or editing the enrollment, CSN will be asked in 4G

V-Station Lite(S,P), 4G V-Station Lite(S,P,NW), 4G V-Station Lite(S,O),

4G V-Station Lite(S,O,NW) products only.

9.4.1.2 CARD ONLY

To enroll prox or smart card with prox or smart card based devices



1. Select the Add item in the Template menu screen.

Figure 9 -138 Enroll Card

2. Press OK. The Enroll menu screen is displayed.

Figure 9 -139 Enroll Card

3. Select the Card Only item in the Enroll menu

Figure 9 -140 Enroll Card – Select Card Only

4. Select the Card Only item in the Enroll menu. Press OK. The Enter Enroll ID screen is displayed.



Figure 9 -141 Enroll Card - Enter Enroll ID

5. Enter an Enroll ID for the new user.

6. Press OK. Device will show Get CSN screen with the options to enter new CSN. User can enter new CSN through card or manually.

Figure 9 -142 Enroll Card –Provide CSN



Figure 9 -143 Enroll Card - Enter CSN



7. Press OK. After entering CSN, by press Enter key device will ask for selecting Card type for given CSN. Five options are available as below.

I. Prox

II. MiFare

III. MiFare +

IV. iCLASS

V. DESFire

8. After entering Card Type press Enter key to store card record on the device. Status message will be displayed on screen.

NOTICE

This option is only available on prox or smart card based products

only.

9.4.2 EDIT

Template and Card only enrollment can be edited

9.4.2.1 EDIT ENROLLMENT

1. Select the Edit item in the Template menu screen.

Figure 9 -144 Edit Enrollment




Figure 9 -145 Edit Enrollment - Enter Enroll ID

3. Enter Id of enrolled user. Press OK. The Enter Template Index screen is displayed.

Figure 9 -146 Edit Enrollment – Provide Index

4. Enter index of Id of enrolled user. Press OK. The Edit User Data screen is displayed with Admin Level option selected.

Figure 9 -147 Edit Enrollment – Select Admin Level

5. Press the OK key and then use Left or Right keys to select Admin Level of User.

6. Press Enter key to return to Admin Level menu item. Press Right key to select Index menu item. Press Enter key to enter index of the enrollment.



Figure 9 -148 Edit Enrollment - Provide Index

7. After selecting Index press Enter key to return to Index menu item. Press Right key to select Password menu item. Press Enter key to enter password for the enrollment.

Figure 9 -149 Edit Enrollment – Enter Password

8. After entering password press Enter key to return to Index menu item. Press Right key to select CSN menu item, if device is with Prox Card or Smart Card functionality. By pressing Enter key device will show current CSN for the template. Again pressing Enter key will show the options to enter new CSN. User can enter new CSN through Card or Manually.

Figure 9 -150 Edit Enrollment – Get CSN





Figure 9 -151 Edit Enrollment - Provide CSN

9. After entering CSN, by pressing Enter key device will ask for selecting Card type for given CSN. Five options are available as below.

I. Prox

II. MiFare

III. MiFare +

IV. iCLASS

V. DESFire

10. After entering Card Type press Enter key to return to CSN menu item. Press Right key to select Save to menu item. There are 3 options available as below.

I. Device

II. Smart Card

III. Device + Smart Card

Smart Card options are available on Smart Card product only.



Figure 9 -152 Edit Enrollment – Store Template

11. Press OK button to store edited enrollment on device. Status message will be displayed on screen.

9.4.2.1 EDIT CARD ONLY ENROLLMENT

For editing card only enrollment:

1. Select the Edit item in the Template menu screen.

Figure 9 -153 Edit Card Only Enrollment


Figure 9 -154 Edit Card Only Enrollment – Enter Edit Id




Figure 9 -155 Edit Card Only Enrollment – Enter Index

4. Enter index of Id of enrolled user. Press OK. Device will show Get CSN screen with the options to enter new CSN. User can enter new CSN through card or manually.

Figure 9 -156 Edit Card Only Enrollment – Get CSN



Figure 9 -157 Edit Card Only Enrollment – Enter CSN



5. Press OK. After entering CSN, by press Enter key device will ask for selecting Card type for given CSN. Five options are available as below.

I. Prox

II. MiFare

III. MiFare +

IV. iCLASS

V. DESFire

6. After entering Card Type press Enter key to store edited card record on the device. Device will show status message.

9.4.3 DELETE

9.4.3.1 DELETE TEMPLATE

To delete a template:

1. Select the Delete item in the Template menu screen.

Figure 9 -158 Delete Template

2. Press OK. Delete Menu screen is displayed. With option Delete Template option selected.





Figure 9 -160 Delete Template – Enter Delete Id


Figure 9 -161 Delete Template – Provide Template Index

5. Enter index of Id of enrolled user. Press OK. The Enter Delete Type screen is displayed.



Figure 9 -162 Delete Template – Provide Delete Type

NOTICE

User will be prompted select Delete Type only if, card record is

attached with biometric template. This option is available for 4G V-

Station Lite (S,P), 4G V-Station Lite (S,O), 4G V-Station Lite (S,P, NW),

4G V-Station Lite (S,O,NW)

Select Delete Type from the option “Bio+Card”, “Bio Only” and “Card Only”.

i. Bio+Card: Device will delete biometric template along with card record.

ii. Bio Only : Device will delete only biometric template

iii. Card Only : Device will delete only card data

6. Press OK. The confirmation message is displayed.

Figure 9 -163 Delete Template – Confirm Deletion

7. Press OK. User template gets deleted as per selection of Delete Type and a status message is displayed.



9.4.3.2 DELETE ALL TEMPLATES

To delete all user/enrollments

1. Select the Delete item in the Template menu screen.


2. Press OK. Delete Menu screen is displayed. Select option Delete All Templates option.

Figure 9 -165 Delete Template – Delete All Template

3. Press OK. The confirmation message is displayed.

Figure 9 -166 Delete Template – Confirm Deletion

4. Press OK. All user templates get deleted and a status message is displayed on screen.



9.4.4 VERIFY

To verify user/enrollment

1. Select the Verify item in the Template menu screen.

Figure 9 -167 Verify Template

2. Press OK. The Enter Verify ID screen is displayed.

3. Enter the Verify ID.

4. Press OK. The Enter Template Index screen is displayed.

5. Enter the Template Index.

6. Press OK.

7. Follow the prompts to place and remove a finger.

8. A status message is displayed, either granting or denying access.

9.5 KEYPAD VERIFICATION

Verifications can be performed on the 4G Lite device by users without entering the Admin menu.

To perform a keypad-initiated verification:

1. With the 4G Lite device in Idle state, enter the first number of the Template ID on the V-Station keypad. The device displays a Verify ID message.



Figure 9 -168 Keypad Verification –Enter Verify Id

2. Enter the Template ID

3. Press OK.

4. Follow the prompts to place a finger and remove it. The device verifies the finger.

Figure 9 -169 Keypad Verification –Place finger

5. The device displays either an Accepted or a Rejected message.

6. The device returns to the Idle state.

9.6 KEYPAD IDENTIFICATION

Identifications can be performed on the 4G device by users without entering the Admin menu.

To perform a finger-initiated identification:

1. With the 4G Lite device in Idle state, place a finger on the device sensor. Once the finger is detected, the device displays a Remove Finger message.

2. The device performs the identification process.

3. An Accepted or a Rejected message is displayed.

4. The device returns to the Idle state.



9.7 KEYPAD VERIFICATION WITH T&A MODE ON

In case T&A mode is enabled then user will be prompted for pressing F-Key. This functionality is applied for verification as well as identification flows. Here sample verification flow is illustrated.

1. With the 4G Lite device in Idle state, enter the first number of the Template ID on the V-Station keypad. The device displays a Verify ID message.

2. Enter Template ID. Press OK.

3. Device will ask to press any F-key

4. Press any F-Key

5. Device will ask to place finger on sensor

6. Given a correct finger device will show successful verification message.

NOTICE

All the T & A flows are illustrated in Appendix


Enrollment Best Practices

CHAPTER 10 - ENROLLMENT BEST PRACTICES

CHAPTER OVERVIEW

This chapter outlines the recommended procedures to follow when enrolling users to assure trouble-free biometric recognition. It also presents information on troubleshooting enrollment problems.

L-1 Identity Solutions devices can perform enrollments from the front panel or through SecureAdmin Lite. This section details specifics on enrollments in general, using the SecureAdmin Lite workflow as a guide

10.1 FINGERPRINT ENROLLMENTS

Operating L-1 Identity Solutions devices is simple; a few basic guidelines should be followed consistently to ensure trouble-free operation. The following sections describe recommended best practices.

NOTICE

L-1 Identity Solutions recommends wiping the sensor surface with a

dry soft cloth between enrollments to avoid dirt build-up and to

ensure the best possible image quality. For devices with feature

optical sensors, L-1 Identity Solutions recommends performing

enrollments under normal indoor lighting conditions and not in the

vicinity of strong light sources such as direct sunshine or high-power

lamps.

This section gives general information about preferred fingers for enrollment and guidance for finger placement.

10.1.1 SUGGESTED FINGERS

Use the index, middle or ring fingers as first preference. Avoid using thumb and little finger since they are typically awkward to position on the sensor consistently.



Figure 10-1 Suggested Fingers

10.1.2 CONSISTENT FINGER PLACEMENT

Consistent finger placement contributes heavily to trouble-free finger-scan recognition. The L-1 Identity Solutions Ridge-Lock system help promote consistent finger positioning.

The following sequence of pictures shows the recommended finger placement procedure:

1. Wait for the amber LED to illuminate.

Figure 10-2 Amber LED

2. With the fingertip raised, rest the fingertip on the Ridge-Lock.

Figure 10-3 Fingertip on Ridge-Lock



3. Slide the finger forwards across the Ridge-Lock, while keeping the fingertip raised so as to not touch the sensor.

Figure 10-4 Slide Finger Across Ridge-Lock

4. Position the finger so that the Ridge-Lock sits in the indentation between the first and second segments (distal and middle phalanges).

Figure 10-5 Position Joint on Ridge-Lock

5. Lower the finger onto the sensor and apply moderate pressure, as if pressing a computer key. Too much pressure might cause the fingerprint to smudge. If too little pressure is applied, the sensor might not recognize the presence of a finger.

Figure 10-6 Apply Correct Pressure

6. Keep the finger on the sensor until the top LED turns green.



Figure 10-7 Wait for Green LED

7. Lift the finger up and off the sensor.

Figure 10-8 Lift Finger Up and Off

8. Have users practise this procedure a few times before enrollment so that they can have a feel for how they should use the device on a daily basis. The goal is to have consistent placement so the device sees approximately the same information each time.



10.1.3 PROPER FINGER ORIENTATION

Always try to cover the entire area of the sensor with the fingertip so as to provide the most information (refer to Figures 10-9 through 10-12).

Figure 10-9 Correct Placement

Figure 10-10 Incorrect Placement

Place the finger as close to the center position of the sensor as possible to increase the acceptance rate.



Figure 10-11 Place Finger Close to Center

Finger rotation should always be kept to a minimum during enrollment, verification, and identification.

Figure 10-12 Do Not Rotate Finger

10.1.4 CENTERING THE CORE

A finger core is the area located within the innermost recurving ridge. Normally, it is located in the middle of the finger. When enrolling, place the finger on the sensor so that the entire core can clearly be seen by the sensor. In the example, the red dots represent the centers of the cores. Every attempt should be made to ensure that the core is positioned in the center of the captured image.

Figure 10-13 Finger Cores



10.2 FINGER PLACEMENT FEEDBACK

The Finger Placement Feedback (FPF) feature allows the administrator to direct users in correct finger placement during enrollment and helps the user to learn the correct placement for everyday use. The FPF feature helps an administrator know when an enrolling user has positioned the core on the scanning surface optimally.

Without this feature, an administrator has to try to recognize the core visually and then make a judgement call as to whether the placement was optimal. FPF also allows the fingerprint image to remain hidden to add to personal biometric privacy.

Users are provided the opportunity to enable FPF only at the time of installation. Users can revert back to the conventional finger image display aspect only by re-installing SecureAdmin Lite and deselecting the FPF option.

When FPF is enabled, anywhere a scan result is displayed in SecureAdmin Lite, a cross-hair is displayed instead of actual fingerprint data. The cross-hair represents the core of the fingerprint scan.

10.2.1 TROUBLESHOOTING ENROLLMENT PROBLEMS USING FPF

The FPF function is shown as a square within a square. The outer red square represents the boundaries of the scanning device. The inner green square represents the optimal region in which the core should appear.

The coordinates of the core are shown as two intersecting lines drawn on the FPF screen. If the lines are displayed in green, the intersection lies within the optimal area. If one or both lines are displayed in red, the optimal point has not been found.

The administrator can use the FPF to determine if the finger needs to be repositioned to improve the scan.

While the Quality and Content scores indicate a passable finger scan but with FPF, the administrator has the information to try to improve (in this case, the Quality score) without depending on trial and error.

The administrator should consider the Quality and Content scores and the FPF when deciding whether to accept a finger scan for enrollment.

If either the Quality or the Content scores are low, FPF lines are displayed in red, to show that there is an issue, even if one or both are within the target inner square.

How can the FPF help to improve the Quality and Content scores? It is possible that poor Quality or Content might be a result of insufficient information to make an accurate determination of core location. Using all three scores, the administrator can decide how best to improve the finger scan. Here are several things an administrator can check:

Is the finger is centered on the scanning surface (and the FPF is accurate)?

Is the user is pressing down firmly enough to make good contact?



Does the finger meet the guidelines for correct placement?

Is the finger positioned on the Ridge-Lock correctly?

Is the finger rotated?

Is the finger placed flat?

Is the finger centered?

Does the finger have dry skin?

Is the sensor window clean?

Should an alternative finger be used?

Figure 10-14 FPF Function


Backup and Restore Database

CHAPTER 11 - BACKUP AND RESTORE DATABASE

CHAPTER OVERVIEW

This chapter details how to create backup of any SecureAdmin Lite database using various scheduler settings. Also the utility allows to restore the previously backed up database .This utility is installed along with SecureAdmin Lite Server installation.



11.1 BACKUP SETTINGS OF SECUREADMIN LITE DATABASE

11.1.1 BACKUP SETTINGS

1. Navigate to Start Menu >> Bioscrypt >> SecureAdmin Lite Server >> Click on DBBackupRestore or double click on DBBackupRestore on desktop.

Figure 11-1 Backup Settings

2. On the Backup tab, in the backup settings pane, enter the information for the following fields

Server Name - Click on the dropdown box. It will be populated with the list of all the available SQL Servers at Local path and across network. Select any SQL Server for which backup is to be taken.



Windows Authentication - User can check the checkbox for Windows Authentication if the backup is to be taken for the DB Server which is available at the local path.

User Name - Provide the correct username to connect to SQL Server selected in Server Name.

Password – Provide the correct password to connect to SQL Server selected in Server Name.

Backup Database Name - After providing correct credentials, clicking on Refresh button will list all the available db instances for the selected Server name. Select the DB Instance for which backup is to be taken.

Backup Folder Name – User can browse the path for storing the backup (.bak) file, by clicking on Browse button. Please note that browse button will be enabled only if the backup is to be taken for the DB Server which is available at the local path.

3. Click on Back Up. Utility will start taking backup of the database and store the backup file at <SQL Server Installation directory>\MSSQL\Backup. The backup file will be named as <DB Instance name>_<Date>_<Time>.bak

Figure 11-2 Backup path for SQL Server 2008

Figure 11-3 Backup path for SQL Server 2005

11.1.2 SCHEDULER SETTINGS

Scheduler Task - Database backup can be performed by Scheduler on daily and weekly basis. User can select either of the 2 options.



Start Time - User can provide start time for the utility to start taking the backup of the specified SA Lite DB through backup settings.

Week Day – If user selects Scheduler task as “Weekly”, he\she can select any day in a week to perform backup of the specified database.

User name – Provide the correct User name to connect to SQL Server.

Password – Provide the correct Password to connect to SQL Server.

After providing Scheduler Settings, user can click on “Save Settings” button. Once the settings are saved, scheduler will automatically perform back up operation as per the defined schedule on daily\weekly basis.

Clicking on Close button or “X” button on the top right corner will close the utility.

Please Note, in order to successfully perform backup operations, respective SQL Server services should be running.

11.2 RESTORING SECUREADMIN LITE DATABASE

11.2.1 RESTORE SETTINGS

1. Navigate to Start Menu >> Bioscrypt >> SecureAdmin Lite Server >> Click on DBBackupRestore or double click on DBBackupRestore on desktop.



Figure 11-4 Restore Settings

2. On the Restore tab, in the restore settings pane, enter the information for the following fields

Server Name - Click on the dropdown box. It will be populated with the list of all the available SQL Servers at Local path and across network. Select the SQL Server for which restore operation is to be performed.

Windows Authentication - User can check the checkbox for Windows Authentication if the restore is to be done for the DB Server which is available at the local path.

User Name - Provide the correct username to connect to SQL Server selected in Server Name.

Password – Provide the correct password to connect to SQL Server selected in Server Name.



Backup Database Name - After providing correct credentials, clicking on Refresh button will list all the available database instances for the selected Server name. Select the DB Instance which is to be restored.

Backup File Path – Click on the Browse button. It will directly open the default backup directory for the selected Server. Select the .bak file which you want to restore. Click on Restore button.

3. Click Restore. In order to perform restore operation, the utility will restart the SecureAdmin Lite server service (if the service is running). It will ask for confirmation from user. Clicking on Yes will restart the SecureAdmin Lite service and complete the restore operation.

Figure 11-5 Restore operation to restart the SecureAdmin Lite service.


Contact Information

CHAPTER 12 - CONTACT INFORMATION

The L-1 Identity Solutions team endeavours to resolve all inquiries from clients with supported products in a timely fashion. Please visit our webpage for the most up to date information, hours, contacts, and resources available for resolving your technical needs. Please note that some services are provided under a support contract or warranty only.

Website: http://www.l1id.com/enterpriseaccess/support

North America: [email protected]

International: [email protected]

12.1 REGISTERING YOUR PRODUCT

Registering your L-1 products is quick and easy and entitles you to a wide range of benefits such as notifications of product updates, newsletters, special offers, and invitations to L-1 Enterprise Access Division events and training seminars.

Please use the following address to register: http://www.L1ID.com/register4G

http://www.l1id.com/enterpriseaccess/support

mailto:[email protected]

mailto:[email protected]

http://www.l1id.com/register4G


Appendix

APPENDIX

TIME AND ATTENDANCE WORKFLOW FOR 4G V-STATION LITE PRODUCTS – T&A Mode “F-Key as Input” – Mandatory


Appendix

TIME AND ATTENDANCE WORKFLOW FOR 4G V-STATION LITE PRODUCTS – T&A Mode “F-Key as Input” - Not Mandatory


Appendix

TIME AND ATTENDANCE WORKFLOW FOR 4G V-STATION LITE PRODUCTS – T&A Mode “Fixed”


Appendix

TIME AND ATTENDANCE WORKFLOW FOR 4G V-STATION LITE PRODUCTS – T&A Mode “Manual”


Glossary and Acronyms

GLOSSARY

1:1 Mode - In 1:1 mode, a user enters his or her User ID first. Then the user is requested to place a finger or enter a PIN. In 1:1 Mode, the user’s scanned finger is matched against the one specified by the user ID.

1:N Mode - In 1:N mode, a user places his or her finger on the device without entering an ID. The device compares the user’s scanned finger with the many enrolled fingers in its internal database.

Admin/Administrator - A user who is authorized to manage the settings and user information of a fingerprint \ finger vein reader. Administrators can enroll or delete users and change device settings.

Core - A term used to describe an area of the finger-scan characterized by ridgelines with the tightest curvature and most unique content. Although the entire finger-scan has significant data, the "core" is the most data-intensive area and thus is extremely important to the algorithm. Normally, the core is located in the middle of the fingerprint.

Duress Mode - A mode that offers users a way of indicating a duress situation (such as being forced to open a door). The user verifies with a specially designated finger resulting in an inverted Wiegand output that is detectable on certain Access Control Panels.

Finger Placement Feedback (FPF) - FPF is a feature that allows an administrator to direct users in correct finger placement during enrollment and helps users learn correct placement. The FPF feature helps an administrator to know when an enrolling user has positioned their fingerprint core optimally on the scanning surface. Without this feature, the administrator has to try to recognize the core visually and then make a judgment call as to whether the placement was optimal. The FPF also allows the fingerprint image to remain hidden to add to personal biometric privacy.

Finger Print Enrollment - The process of extracting features of a fingerprint image obtained from a fingerprint sensor and saving them into the internal memory of a device. The fingerprint data is called a fingerprint template.

Finger Scan - The image of a finger print that is captured by the sensor on finger print devices.

Firmware - The set of programs contained permanently in a hardware device (as read-only memory) that controls the unit.

Host Mode - The normal mode of operation when the device is waiting for a card to be presented to the device.

Identification (Searching or 1:N) - The operation of Identifying a user by comparing a live finger scan against all stored finger-scan records in a database to determine a match. Identification uses the finger scan only -- no cards or PINs. Identification is only available on devices that are in 1:N mode.



Optical Sensor - A device that detects that detects the intensity or brightness of light. Secugen sensors are used to create graphical representations of fingerprints.

Ridge Lock - Used to center the user’s finger core for optimal scanning.

Single Door Access Control - The capability of controlling/monitoring all functions related to a single entry/exit point.

Software - The set of programs associated with a computer system.

Template - A term used to describe the data that is stored during the enrollment process. The data is a mathematical representation of the ridge pattern of the enrolled finger scan.

Users - The individuals that use a hardware system.

User Groups - The sets of users grouped together in a system (usually by the similarity of the functions they perform).

Verification (Authentication or 1:1) - The operation of confirming a user is who he claims to be by com-paring a live finger scan image against a stored fingerprint template. The result (pass or fail) that is re-turned is based on whether the score is above a pre-defined threshold value. Some type of credential (PIN, prox card, smart card, etc.) is necessary to initiate the biometric verification.



Acronyms and Abbreviations

These acronyms and abbreviations are used in this document:

FPF Finger Placement Feedback

IP Internet Protocol

TFT Thin Film Transistor

LED Light Emitting Diode

TCP Transmission Control Protocol

USB Universal Serial Bus

4g lite operator’sservice.morphotrak.com/content/documents... · table of content

Documents