Home

Veri-Series Operations Manual

1. eeeeeenneeeeeeee 116 V Station Manager Menus Tab eeeeeeeeeeeeeeeeennnnnnmeennnnnnnnnnnnnnnnns 117 V Station Manager Access Schedules Tab eeeeeeeee 119 V Station Manager Holiday Schedules Tab eeeeeeeee 121 xiv C opyright 2005 Bioscrypt Inc All rights reserved bloscrypt Figure 84 V Station Transaction Log Document 430 00127 18 xv Copyright 2005 Bioscrypt Inc All rights reserved bloscrypt Notes Document 430 00127 18 xvi CC op yright 2005 Bioscrypt Inc All rights reserved bloscrypt INTRODUCTION Introduction Bioscrypt the leader in fingerpnnt identification and verification systems presents the Ven Senes Fingerprint Verification System Technology by Bioscrypt has been applied in vanous unique applications including Access Security Time and Attendance Political Poling Computer Logon and other applications where an individual must be clearly identified asbeing solely responsible for specific actions Bioscrypt formerly BiometncID was founded in 1996 with a mission to provide fingerprint recognition technology with the highest degree of accuracy at a reasonable cost while still being easy to use Bioscrypt has successfully migrated technology once found only in govemment or military applications toward private industry and small businesses around the globe t has been known for years that
2. 9 rone 10 Basic System Administration seeeeeeeeesssseseeeeeene nennen nnne nennen nnn nnn nnns 10 sia relg sia RR Umm 10 1 191 2 ounu 10 usual e 12 Bac King Up TempldteSasnsenuisontadnis f enunr Urdu QUAM DUUEEUP CN CEN DIRE TECUN URN EDI NIU CUL 12 fup Yo 13 VenAdmin Management Software v5 50 sssesessesesssseeeeeennnnn nennen nennen nnn nnn nnn nnn 15 CONC COIS 0 OD HOP ubuerenidudi boat S EROTIC QUPD VR DOLOR ForURU S 15 TSMD ead 15 Host Aux and Ethemet POTLSissxesvose codi adaeriecor a XE X VOY EEREPEXR E UNPVCOPEGKEV P ER UP VU XE 17 Serial Port Settings and Baud Rates essssseseeeeeenn nennen nnne nnn 17 Document 430 00127 18 viii Copyright 2005 Bioscrypt Inc All nights reserved bloscrypt Haling Me SON 0S M 18 Running VeriAdmin forthe First Time ceeesseeeeceececeeeessseeeeeeeeeeeaeeuseeeeeeeeeesesaeaseseeeeeeeees 19 Network Setup ana Connguretioffsimsssvneciavbsmbba vii tri dud Dmbe a e qud dX I r 21 ING TW OTK Se UID m 21 Network Configuration MANAGEL cccccccssssssseeeeceececeeeessseeeeeeeesseuaeasseeceeeeeeessaaasseeseeeeees 22 Misa fel TIC ITE T E 23 eia ia NIE Se LUNG e
3. eeeeessseeeeeennennnnnmennnnnnnnnnnnnnnn nennen nnne nennen nnn nns 31 Figure 21 Access Schedule Selection eeeeeeeeeseeeeeeeennnn nnns 32 Figure 22 Quick Enrollment Screen eeeeeeesseseeeeeenn nennen nennen 33 Figure 23 Download Template s to PC sseeeeeeeeeeeeneenennnn nnns 35 Figure 24 Download Template s to Smart Card ssssssssssseseeesssrrnrrrrrreesssrnnrrnrressrrnnrrrnrenns 36 Figure 25 Download Template s to Smart Card essssssssssesseessssrnrrrrrreessrrnrrrnrreessrnnnrrrrreens 36 Figure 26 Download Template s to Smart Card sssssssssssesseesssrrnrrerrreessrrnrrrnrreessnnnnrernrenns 36 Figure 27 Upload Template s to Unit sseeeeeeeeeeeeeeeeennnnnnnmmmnnnnnnn 37 Figure 28 Transfer Templates from Unit to Unit sees 38 Figure 29 Template VIOWGT ssiaasgsetigdsdiancia t ise ERN SERE DRM EK ad SCIO RPINR ERANT RU VEM RUN PKxA C bound 39 Figure 30 Command Card Manager essssseseeeennn nnne nnn nnn nnn nnns 40 Figure 31 Unit Parameters Dialog General Tab eeeeeernnnnne 42 Figure 32 Unit Parameters Dialog Communication Tab eeeeeeeene 43 Figure 33 Unit Parameters Dialog Wiegand Tab eeeeeernnennnn 46 Figure 34 Unit Parameters Dialog Biometrics Tab eeeeeeeeneeeeeennn 52 Figure 35 Unit Parameter
4. Block Color Key r Set Starting Block 1 Bb Manufacturer Unavailable to V Smart Unused blank Bl Template 1 Data required User Date Unavailable BE Admin Table required BI Template 2 Data optional Admin Table Template 1 E Layout Block required I User Data optional Layout Block Template 2 Figure 69 Smart Card Layout Manager MIFARE Bioscrypt recommends that only advanced users attempt to configure the smart card layout Improper changes made to the layout may render the unit unusable with some smart cards This section should be read completely before attempting to change the default layout provided by Bioscrypt as shown on the left above The Smart Card Layout used by the V Smart consists of the following components A layout block brown an Admin block red a PRIMARY template blue a SECONDARY template purple optional and User Data green optional The Document 430 0012718 96 X Copyright 2005 Bioscrypt Inc All rights reserved bloscrypt APPENDIX D V SMART OPERATIONS Smart Card Layout Manager will NOT allow a user to configure a layout that is missing the Admin block the Layout Block ora PRIMARY template These are the minimum layout components required to enable normal operation The memory structure for MIFARE compatible smart cards consists of 16 sectors numbered O through 15 of 4 blocks each numbered 0 through 3 Each block contains 16 bytes The f
5. User Access Schedules LI Allowed Access Times Enabled Disabled No Access Schedule 1 chedule x 7 ill 7 x ias Z ww juni E E z zm uen Add Remove z j m Options Ea Edi Edit Edit Edit E dit Edit Schedule Tolerance 5 Min Broadcast Save Schedules Upload Schedules Transaction Log Figure 82 V Station Manager Access Schedules Tab To begin using access schedules click on the Enabled radio button and click Apply The unit will now consider the assigned schedule of templates when users are verified The V Station can also utilize a Schedule Tolerance time which allows for a few minutes grace period forthe beginning and end times of an access period This value may be between 1 and 14 minutes and applies to ALLaccess schedules For example a five minute schedule tolerance foran 8am 6pm schedule would allow users with this schedule to enter beginning at 7 55am and continue to have access up until 6 05pm Note that the tolerance doesnotapply to holiday schedules see next section To design a specific weekly user access schedule click the Add button The Allowed Access Times shown on the right sde of the tab will not initially indicate any access periods Click on one of the Edit buttons below a particular day of the week to assign an access period for that day A larger time interval selector will be displayed as shown
6. Waming VenAdmin will overwnte any templates that already exist in this folder Document 430 00127 18 65 Copyright 2005 Bioscrypt Inc All rights reserved bloscrypt UPDATE FIRMWARE Bioscrypt Firmware Update Wizard Backup templates Biascrypt recommends backing up all templates on each unit to a PC before performing the update This is only a precaution in the event of failure However it iz a good idea to always keep backups of templates on a PC v Backup Templates to C Program Files Bioscrypothy er amp dmin sFiles Browse IF you would like to abort the Wizard now ta perform the backup vourzelt click Cancel To continue click Next Figure 50 Firmware Update Wizard Step 3 e Step 3 of the wizard see Figure 51 will ask the user to supply the Bioscrypt fimware file for upgrading This file is available either on the installation CD that came with this software or from the Bioscrypt web site at www bioscrypt com There are several different types of firmware files However as of fimware version 7 30 all Ven Senes products use the same package firmware file with a V12 file extension The following is a breakdown of the vanous types of fimware files including the older formats o V12 The new firmware package files used by all MV1200 based Ven Series products with firmware v7 30 and above o M12 The older MV1200 only firmware file used by Ven Senes units from 4 x to 6 x o SIP Special Step fimware
7. 25 Unit SU el OSes 25 AOdVanceu Se WNS ssssnaenivexpridivd rinde idinpassdasectumid enu caducum ee eee 25 TNH O DOI m 26 Setting up a NetwOTIK esssssseeeeennennnnnnennnnnnnnnnnn nennen nnn nnn nnn nnns niin naa aan nan nnn 27 ICONS Commandsand Drop Downs sscssseceecccccceeeesseeceeeeeeeeeaaeeseeeeeeeeeseesaasssseeeeeeeees 28 isuecu Huiiis T UU UU UT 30 Editing TEMP late ccccccccccccccccsssssseeeeeeeeeeeauausseeeceeseeeseaaaasseeeeeeeeeeseuaaaseeeeeeeeeesssaagaeseeeeees 30 JUK ENO ad PME 32 DIETS TEN a eS S UT een ences 34 wiusrei 34 Masse t m 34 Tander aule ci cm 35 From Unit to d OE 35 FO UAE O Malt C ai TRIN 36 POT Mi TOUN m 36 From PC to Smart Card sseeeeseeeeesseeeeeennnnn nennen nennen nnn nnn nnns nnn aaa ann nnn nnn 37 LITA TO UNE CT E 37 BOC ee PC TSI Ee onec nsus dandi mr coU Sq dic Ween rn EN MUR C TUERI UNI eet 38 Edit PC Template ee ee 38 Command card MaTIGOSf siiscinuinksetrieseiniveubdetri tex vutucoRrera rad vaa IUREU C EX MUTA ESAE DM RS 40 Adminisenng Command eT usb ontd NERONI VrHhn EERua CX Hol Fui Eo raa c vin tidal 40 GrIegund Command 6 dU cussseapdeasduidithimqpinnddidnaqurpRudm DripIr EE I MIT Id EST ATi MxS 40 Removing Command Cals ecccccccccsssssssseceeeeeceeeeeeseeeceeeeeeseaaaasseeeeeeeessnsaaagseeeeeeeees 4
8. shortcut button Tp um to Network Setup Network Setup Network Status dialog box Brogdea Test Communications Mates Figure 16 Network Configuration dialog This dialog will be the primary tool used to configure your Bioscrypt network The left portion of the dialog shows your network in a tree hierarchy with each unit hanging on the channelto which it is attached This isa logical representation of your network and does not reflect how your network is actually physically wired The right side of the dialog shows information on the currently selected item in the tree At the bottom are buttons enabling you to logically add or remove units from this tree status all units test communications broadcast and perform automatic network discovery All of these functions are described below Network Tree The nodes of this tree can be collapsed and expanded by clicking on the and symbols If the tree does not show any nodes you must first set up the ports Each COM port will show its cument baud rate setting a means VeriAdmin is usng auto baud rate negotiation Directly below each and sg icon will be the broadcast icon 9 which is automatically added to each channel Once you add units to the network they will show up below the broadcast icon with an icon Click on them to show their information on the Document 430 0012718 23 Copyright 2005 Bioscrypt Inc All rights reserved 44 44 bloscry
9. bloscrypt APPENDIX F V STATION OPERATIONS e Code the CVE Code value entered by the user if this mode isenabled e Read Whetherthis transaction has been read before Station Transaction Log 1 20 2004 1 20 2004 1 20 2004 17 20 2004 1 20 2004 1 20 2004 1 20 2004 1 20 2004 1 20 2004 1 20 2004 1 20 2004 1 20 2004 1 20 2004 1 13 2004 1 13 2004 1 19 2004 1 19 2004 1 19 2004 1 19 2004 1 13 2004 1 13 2004 1 13 2004 1 13 2004 1 13 2004 1 13 2004 1 13 2004 1 19 2004 1 13 2004 13 28 37 1 13 2004 13 28 37 13 42 22 19 37 47 13 25 53 13 25 53 19 15 16 17 00 43 16 59 02 16 35 25 16 35 17 16 33 56 16 33 28 16 33 03 16 28 41 19 35 27 19 35 25 19 35 24 19 35 23 19 35 21 19 35 20 19 35 19 19 35 18 19 35 16 19 35 15 19 35 03 19 35 03 13 28 40 19 28 37 m EN M ee m e M W Aa JI C w CO CO OQ Lo e ce ll ak b D o 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 New Template New Template New Template New Template New Template New Template New Template New Template New Template New Template New Template New Template New Template New Template New Template New Template New Template New Template Enroll Transfer Enroll Transfer Add Template Add Template Unit Boot up Verify Template Verify Template Verify Template Verify Template Enroll Transfer Enroll Transfer Enroll Transfer
10. COMM C TCP IP Change parameters and press Test button Note The purpose ofthis dialog has changed Itis intended to be used as a quick communications test only To switch communications to another unit or to set up a new unit please use the Network Configuration Manager Test Exit Figure 18 Test Communication Settings Document 430 00127 18 26 Copyright 2005 Bioscrypt Inc All nights reserved bloscrypt NETWORK SETUP AND CONFIGURATION This dialog evolved from the Communications dialog found in VenAdmin software versions 4 50 and below Its purpose is now intended to be used for quick communications testing It may no longer be used to actually establish communication to a unit orto modify the cument communications settings The Network Configuration and Network Setup screens now provide that functionality The Network Discovery button is curently disabled This will be enabled in the future to help automatically discoverunits on an Ethemet network Setting up a Network As described above when setting up a network you will need to assign unique ID numbers and IP addresses if using Ethemet to each Ven Senes reader and confim the communication settings The easiest way to do this is to cycle through each reader setting the parameters by plugging into the RJ 11 RS 232 bottom port After you set the parameters for each unit you can connect them to your RS 485 or Ethemet network To review the recomm
11. Generic 34 bit Uploadable ble l 1 4294967295 wa en oem anim Generic 64 bit Uploadable 1 4294967295 1 46116806018427380000 FPEM C me ee Wiegand 4002 40 bit Uploadable n a 1 4294967295 1 274877906943 Table 1 Wiegand formats and associated valid values On Success Alt Site Code This option when enabled will cause the unit to replace the Site Code normally output as part of the Wiegand string with the altemate Site Code soecified in the edit box upon a successful venfication This option applies only to Pre Defined and Custom formats and will not work with Pass Thru formats The string is numeric and the range depends on the selected Wiegand format Fora list of valid values see Table 1 above If the box is unchecked the site code read from the proximity card will be passed through in the Wiegand out string Document 430 00127 18 47 Copyright 2005 Bioscrypt Inc All nights reserved bloscrypt UNIT PARAMETERS On Failure Fail ID Code Enabling this option will cause the ID number entered in the comesponding edit boxto be sent to the Wiegand device when a failed verification occurs The string is numeric and the range dependson the selected Wiegand format For a list of valid values see Table 1 above If the box is unchecked then no sting will be sent for biometric failures This option applies only to Pre Defined and Custom formats and will not work with Pass Thru formats
12. Proper Smart Card PIACEMENL cccccccccccsesssseeceeeeeceeeeeeeseseceeeeeeseaaaasseeeeeeeeees 88 Template Managerdialog eeeeeeeeeeeneenennnn nnn nnns 89 The Template MVIeWSL sias mtu Tl cOI EUR RU p ODPU EUH CR HIN IPRUE YE K DID MIOH 90 TNE Smart Card Manager ssssseeeeeennnnnnneeennnnnnnnnnnn nnne nnn nnn nnn nnn nnn nnns 91 VenAdmin Notification About Wiegand String eeeeeeeeeee 92 SMa te C ard Secum y CUNG S ssi anra EDS rac AXI FS NAUOER GEO Vg ER DO TIT OSEE 95 Smart Card Layout Manager MIFARE eeeeeeennennnnnnnn nnn 96 Smart Card Layout Manager IC LASS eeeeeeeeeeseeeeeennnnnnmmmennnnnnnnnnn 99 Quick Enrollment Smart Card SN button seen 102 Waming message forlessthan 32 bit ID seeeeeeerrnnnnnnn 103 Wa ming message for less than 64 bit ID eeeeereeeeeen 104 Smart Card Security SQMtIAGS cccccecccceesssssseeeeeeeeeeeseessseeeeeeeeeeseeeaassseeeeeeees 108 VenAdmin Wa ming on SiteKey Change sss sssessssrrrrrrrreesssrrnrrrrrreessrrnrrrrrrene 109 VOD dmN e Cuny SSNS asi 110 Vesta ON ae 0 Cl ia E dro VENUS Fun Ro dd 113 V Station Manager Ethe met Tab ccccccccccssssssseeeeeeeeeeeseeeeseeeeeeeeeessauseaseeeees 115 V Station Manager Biometric Schedules Tab eeeeeeses 116 One Day Biometric Scheduling Dialog
13. the fingerprint data The information includes ID Number contact Tech Support for valid range of values Extended ID Number O ptional Index Number 0 255 User Name optional User Type User Admin etc Optional User Finger Identifier optional 1 1 Template Security Threshold Password optional A mathematical model of the fingerprint ndge pattem Templates Every template on a Ven Senes unit has a unique identification tag consisting of a lemplate ID and a Template Index Each time a fingerprint is enrolled a new template is generated usng the number from the proximity card or PC asthe Document 430 00127 18 10 Copyright 2005 Bioscrypt Inc All nights reserved bloscrypt CONCEPTS OF OPERATION Template ID number Unless specifically defined the Ven Senes product will automatically assign a unique index value to each template NOTE The Template Index number will be the lowest value available for that ID number unless specially defined using an extemal PC application Each template ID is usually considered a template belonging to a different individual while the Index number is usually used to differentiate different templates for the same individual Templates on Device ID Index Name 10720 D John Smith 10720 John Smith 10730 0 Jane Smith Figure 7 Template ID Numbers There are several other attnbutes of a template that are important for an Administrator to understand The following
14. 5 Verification Using a Smart Card sssesssssssrerrseesssrnrrrrnreesssrnnrrrnreesserrnrrnn 101 Section D 6 Using the Smart Card Serial Numberasthe Template ID 102 MIFARE Se TAr NOD GE seoessrupphai nebasd ea Wii beraten E bh ERR Rav I EDUC Pad ISI HOO ANN 102 eges Mem m 103 Best Performance Practices Finger placement cccccceeeeeceeeessseeeeeeeeeeeesaeeassseess 104 Appendix E Smart Card SiteKey Management sse 106 Waa tica Ho c OO P 106 Why do I Need a SiteKey eseeessssseeeeee nennen nnnm nnne nnn nnn 107 What isthe Default SiteKey ssssseeeeeeeeeeeeeenennnn nnne 107 Where is the SiteKey Stored 0 cccccssssssseceeeeeeesesesssseeeeeeeeeeeneagsaueceeeseessseaaasseeeeeeseeseneggs 107 What isthe Difference Between PRIMARY and SECONDARY SiteKeys 107 How do Initially Set a SiteKey for V Smarts at My Installation 107 How do Set the SiteKey on Individual Smart Cards seeeeeere 109 How do Change the SiteKey if Already Have a User Base of Previously Created Vesrart smart CTS asasinien cp FREE NOD EDITI E DUCI o matted 110 What Happens if FORG ET My SiteKey sssseseeeeennnnnennnnnn nnn 111 What Happens if Someone Else Leams My Installation s SiteKey 111 What isthe 1 Wa y Hashing Function Option In Ve
15. 63 PTT CSC N O eea AA EE A EE E E E E E TET EU 63 Daae FRINN I eaa TTE 64 Reset Unit to Factory Defaults 0 ceeccceeecceeeesssseeeeeeeeeeeeseassseeeeeeeeeeeseeaasseeeeeeeeesseseagsseeess 70 TETAS COO ic RETE UU u m 71 VeMCa On A CUO eleme e o OO 72 Wieg ana EMSS vss unp dd kbr tridui t navim dV PR RES E a Khan FURPEROXNR DPI U 73 Getting Service and SUDDO LTL s esiresnedi ik xcii one oo rr beo cdi d 74 TEC INC A SUN OO P 74 Customer Service and Sales Support ec cccccsssssssseeeeeeeceeeseesseeeeeeeeeeeseaessseeeeeeeseneneegs 74 Wond ule Quised icmec r 74 Appendix A Quality and Content sese nnne nnn nnns 75 Section A 1 Basic Biometric Concepts sssseseeeeeennnnennnnnnnnnnnn nennen nnn 75 Document 430 00127 18 x CC opyright 2005 Bioscrypt Inc All rights reserved bloscrypt OTS EAC STi GIMENO NS issued exin priino E pA SBIU UEERARP ESQ URINE DID PIRNENMUNT UN UAE 75 sanning aN GO TOT 75 Storing User Templates on the Unit ssseseeeeeeennnnnnennnnnnn nnn 76 Section A 2 Proper Finger Pla cement eeeeessesseeeeeeennnnnennnnnnnnnn nnne nnn 76 COMMON MSE KO sesussritsbrsprpcnGRNNUONS OUTE O AEE EP IINE IURMRRMDrIU S eU pRT A 7 Mage dual T 71 GAS C ONS CY rer E E E EE een E 71 Section A 3 Using Quality amp Content Scores eessss
16. Administrators to add additional secunty by optionally performing a l way Hash function on entered SiteKeys This is DIFFERENT from the ESI SiteKey Encryption option This function will take the userentered password and create an encrypted 120 bit SiteKey from that password This encrypted version is then used as the SiteKey for the V Smart and smart cards in place of the user defined password In extreme cases this can make it more difficult for criminals to sniff intemal networks and capture passwords during serial communications DO NOT USE THIS OPTION IF YOU INTEND TO SHARE SMARTCARD DATA WITH OTHER APPLIC ATIONS To the Administrator this all happens behind the scenes and you never have to remember anything other then the simple password You just have to make sure that if you set a NEW SiteKey with the HASH checkbox selected then afterwards you need to also check the Hash the CURRENT SiteKey so that each time the SiteKey Verification process happens a hashed curent SiteKey will be compared with the stored hashed Primary SiteKey The HASH function check boxis ignored if the SiteKey textbox is empty for non secure V Smart default key use or if 1 is entered the SECONDARY SiteKey text box for tuming OFF the auto update feature NOTE The HASH function check box has been moved from the Security Settings Dialog to the SiteKey Dialog for VenAdmin v4 10 Each time the SiteKey is entered the check box determines whether to HASH the key
17. Biometnc Schedulestab NOTE To finalize your schedule you must hit the APPLY button However resetting the schedules does not require hitting the APPLY button Menus As of firmware version 7 20 the V Station has the ability to change its menu prompts the text displayed on the LCD see Figure 81 The text it displays can be in another language or simply a modified menu Menus may be uploaded to the unit via files with a PMTfile extenson The CD containing this document may include such files At present time Bioscrypt does not recommend editing these files Included with the version 7 20 release isa Spanish prompt file Other languages may be supported in future releasesor via the Bioscrypt web site Station Manager Clock Ethernet Biometric Schedules Menus Access Schedules Holiday Schedules Prompt Menus LCD Settings Current Menu Name English Contrast Medium High shes Upload New Menu Hm i Download Menu Enable LCD Backlight m Custom Verification Entry Mode This mode when enabled requires a user to enter a custom entry code after verifying on the V Station The entered code will be logged in the transaction log C Enabled Disabled Transaction Lag 1 i Cancel ppl Figure 81 V Station Manager Menus Tab To upload a new menu prompt to the V Station click the UPLOAD NEW MENU button then select a prompt file and confim that you wish to upload it Up
18. On Failure Fail Site Code Similar to the On Success Alt Ste Code option the On Failure Fail Site Code option will cause the unit to replace the Site Code normally output with the Fail Site Code value specified in this option If the box is unchecked then no string will be sent for biometric failures This option applies only to Pre Defined and Custom formats and will not work with Pa ss Thru formats On Failure Invert Panty Bits Checking this option causes a failed verification to result in the Wiegand string being sent on the Wiegand out lines with inverted party bits to indicate the failure This option applies only to Pre Defined and Custom formats and will not work with Pa ss Thru formats Enable INPUT This option in the Wiegand Settings section will enable Wiegand INPUT when checked and sent to the unit This allows all WIEGAND INPUT communications If this option is unchecked and sent to the unit all WIEGAND INPUT data will be ignored Enable OUTPUT This option in the Wiegand Settings section will enable Wiegand OUTPUT when checked and sent to the unit If this option is unchecked all WIEGAND OUTPUT data will be ignored and not output There are two options when enabling output and they are selected from the drop down to the right of the checkbox 1 Always Output This will enable Wiegand OUTPUT on ALL Venfications regardless of whether initiated by a Wiegand INPUT a PC or any other device Document 430 00127 18 48 C
19. VenAdmin Finally misc ella neous information is shown in the lower right Communication Tab The second tab in this dialog allows the user to set cument communication parameters see Figure 32 The following paragraphs explain each parameter NOTE V Station Ethemet communication settings are found in the V Station Manager dialog Network Identifcation Number r amp ux Port Assign Unit Network ID o Baud 57600 z M1200 VeriSeries Port MODE Enabled Enable Port C Disable Port m Host Port Protocol ns 232 Baud 57600 Figure 32 Unit Parameters Dialog Communication Tab NOTE Changes made to Unit ID and Baud Rate will also change the Current Transmit ID and Current PC Baud rate so that communication is not lost with the unit This will happen as long as the Auto option has been set for the port being used Otherwise you will need to retum to the Network Setup dialog and change the baud rate forthat particular port Network Identification Number In a networked environment a unique number must be assigned to each unit before adding that unit to the network The default setting from the factory is 0 If two or more units have the same Network ID on the same COMM Port data collisions will cause communication problems on that COMM Line See Concepts of Operation section l In the Assign Unit Network ID field type the new Network ID number 2 Clickthe Apply b
20. a venfication is initiated this primary template is the first fingerprint that is used in that verification process e Secondary Template This is an optional second template stored on the smart card Currently in the v5 80 or later V Smart firmware this second template will also be used in the verification process if the primary template verification fails e Administrator SiteKey This is a key or password used by the V Smart to encrypt data stored on the smart card This key is stored on the ESI and must match the key used by the smart card in order for the V Smart to read the smart card data See the next section forfurther details regarding Administrator Site Ke ys WARNING It is extremely important that Administrators do not forget the SiteKey used If the SiteKey is forgotten the administrator will not be able to ENROLL DELETE or read templates from the smart card nor will they be able to CHANGEthe SiteKey e SiteKey Venficaton Certain VenAdmin and V Smart processes are only allowed if the Administrator enters the correct SiteKey The SiteKey entered in VenAdmin must match the key stored on the V Smart and the key used to encrypt the smart card data See Appendix Eforfather details V Smart Smart Card Placement The picture below demonstrated the proper placement of the smart card so the V Smart can read the data stored on the card orwrite data to the card Document 430 00127 18 87 CC opyright 2005 Bioscrypt Inc All ri
21. also available In addition this is the first product to offer built in Ethemet support and isby farthe most flexible of the available devices Ethemet is fully supported in firmware versions 7 10 and above Document 430 00127 18 4 CC op yright 2005 Bioscrypt Inc All rights reserved bloscrypt ABOUT VERI SERIES PRODUCTS Ven Senes Physical Layout Top LED Front LED Power Indicator RJ11 R5232 Bottom Port Front ED Lacking Screw Power Indicator Figure 1 Top View Figure 2 Bottom View RJ11 RS232 Bottom Port Figure 3 Bottom Panel Closed Figure 4 Bottom Panel Open Document 430 00127 18 5 Copyright 2005 Bioscrypt Inc All nights reserved bloscrypt ABOUT VERI SERIES PRODUCTS Mounting Plate Number Label DB15 Screw TT 15 Conductor Do Not Remove 2 1l Pigtail Connector Figure 5 Veri Series Unit and Mounting Plate NOTE Older MV1100 based Ven Senes readers have a different plastic housing and appear much differently than Figures 1 5 however they contain the same basic components Also the V Station models look substantially different than Figures 1 5 but still contain essentially the same components For additional information on installing and connecting your Ven Senes unit please referto the Ven Series Installation Guide Document 430 00127 18 6 CC opyright 2005 Bioscrypt Inc All rights reserved bloscrypt CONCEPTS OF OPERATION Concepts o
22. as setting the date and time enroling and deleting templates and configuring Wiegand settings can be done from the keypad please see the V Station Operators Manual However some functions such asthe Transaction Log are better suited for administration via the PC due to the limited LCD and numeric keypad For all V Station specific administration use the V Station Manager Section F 1 Using the V Station Manager The V Station Manager screen is used to configure V Station specific options much like the Smart Card Manager is used for V Smart specific operations This screen will not be available while talking with non V Station readers Use this screen to configure the V Station s date time display options Ethemet options scheduling and menu options Additionally the V Station Transaction Log may be viewed and downloaded Note that this screen is divided into Tabsforease of use Station Manager Clock Ethemet Biometric Schedules Menus Access Schedules Holiday Schedules PC Date Time m V Station Date Time Sun Mon Tue Wed Thu Fri Sat Sun Mon Tue Wed Thu Fri Sat 27 28 29 30 1 27 28 29 3 3 4 5 6 7 8 38S 10 e 4 5 B 7 8 9 10 11 12 13 14 15 16 17 11 12 13 14 15 16 17 18 18 20 21 22 23 24 Synchronize 18 13 20 21 22 23 24 25 26 27 28 29 30 3 25 26 27 28 29 30 3 1 1 p 4 4 k E 5 57 47 PM v Real Time Update Refresh Options Transaction Log Cancel Apply Figu
23. be available for those units It isgrayed out for any other Ven Senes product Each GPI line can be configured to tnggeran action when set active low in some cases and high in others as well as when both lines are simultaneously set active The available actions are listed in the drop down menusand include e Verify The unit will look fora fingerto begin a verification e Search The unit will look fora fingerto begin a search Identify e Enroll The unit will look for a finger to enroll automatically using the specified ID Index e Delete Template s The unit will delete any templates which have the specified ID verification units orall templates searching units e RebootUnit The unit will immediately reboot The line must go active for the Minimum Duration specified by default 200ms For actions that trigger off both GPI O and 1 simultaneously each line must go active within the Multi Signal Tolerance period default 50 ms A line can be considered active either on the Signal Rising Edge or the Signal Falling Edge which will vary depending on whether the active state is low or high Finally in order to facilitate automatic verification enrollment and deletion a template ID number and Maximum Index must be specified For verfications the maximum index will limit the number of users that can be automatically enrolled through GPI This number should remain relatively low because during GPI verifies the unit will have to try
24. below There is a small icon representing the reader its ID number and its name This is the reader with which the software is cumently communicating For this reason each reader must be Document 430 00127 18 15 Copyright 2005 Bioscrypt Inc All rights reserved bloscrypt VERIADMIN MANAGEMENT SOFTWARE V5 50 assigned a Network ID even if your installation consists of a single unit the default setting is 0 Assigning a name is optional Keep in mind that a unit s Network ID is notthe same asthe Transmit ID in VenAdmin al 1 Station at Main Entrance w Figure 9 Transmit ID Current Unit Drop down A special transmit ID number 1 is assigned asa broadcast ID All units on the cument COMM Port or Ethemet network will respond to this broadcast ID For functions labeled broadcast the software uses the broadcast ID and all readers on the network will accept these commands For each port defined VeriAdmin will list a comesponding Broadcast option in the drop down see Figure 10 below Using Broadcast commands is only recommended for advanced users See Appendix B Broadcasting for RS 485 Networks for further understanding of the benefits and issues with broadcasting commands E 1 Broadcast COMM 1 Figure 10 Broadcast Transmit ID in Drop down If VenAdmin has difficulty communicating with the currently selected device an emor message will be displayed see Figure 11 below There are several reasonsthat could
25. click on the ID number in the window Document 430 00127 18 30 Copyright 2005 Bioscrypt Inc All rights reserved bloscrypt TEMPLATE MANAGER NOTE While you can use the Shift and Ctr keys to select multiple templates you should realize that a separate window will open foreach template you select A window like the one below will open foreach template selected Make Duress Finger C Pastword Only User Data ID indec o Extended sf EnceName JohnDoe Antonie 1 Schede 1 UserType Use Select Iz Observe Hobdays Passwort o PAO wegad vie Wiegand Suing Save Ta m rr Cimata Cancel Figure 20 Template Viewer From here you can view and edit the attributes of the template such as the Employee Name and Security Threshold You can then save the template back to the current unit to the PC orto a Smart Card if applicable Note that when saving to the unit any changes made will overwrite the old template Also attempting to save a template with a different User Type as another template on the device with the same ID is not allowed In addition saving to the unit will not be allowed if the template storage space is already full In that case the edited template should first be saved to the PC and the old template on the unit should be manually deleted The edited template can then be downloaded backto the unit V Stations units with fi
26. each reader It is essential that the baud rate selected in the VenAdmin Network Setup match the baud rate setting on the reader and that all readers on the network are set to the same baud rate The following settings are the factory defaults A V Prox V Hex V Pass should amve with these settings in place Document 430 00127 18 17 Copyright 2005 Bioscrypt Inc All nghts reserved bloscrypt VERIADMIN MANAGEMENT SOFTWARE V5 50 e Network ID 0 e Port Mode Mode 1 Host RS 485 Aux RS 232 RJ 11 e Host Port baud rate 9600 baud e Aux Port baud rate 57600 baud A V Smartshould arrive with these settings in place e Network ID 0 e Port Mode Mode 0 Host RS 232 Aux RS 232 RJ 11 e Host Port baud rate 57600 baud e Aux Port baud rate 57600 baud A V Station should arrive with these settings in place e Network ID 0 e Port Mode N A switch in reardefaultsto RS 232 for Host e Host Port protocol RS 232 e Host Port baud rate 57600 baud e Aux Port baud rate 57600 baud e IP Address 0 0 0 0 Installing the Software To install the software run the setup exe file on the VenAdmin Management CD You may accept the default path or choose an altemate directory in which to install the software The default path is CA Program Files Bioscrypt VeriAdmin Like most Windows based installations you will step through a number of windows which will request basic installation information such as file name and dire
27. file used asa bridge to update units from v6 x and below to 7 xand above o LDR The oldest firmware file format intended only for MV1100 based units Document 430 00127 18 66 CC opyright 2005 Bioscrypt Inc All rights reserved UPDATE FIRMWARE Please select a Bioscrypt firmware file to use Newer firmware versions utiliee a 12 firmware package For updating Older versions and products based on the MY1100 must use the old M12 or LDA firmware files Firmware files are available from the Install CD or online from http waa bioscrypt com Browse To continue click Next uee ea Figure 51 Firmware Update Wizard Step 2 e Step 3 2 will be displayed if the wizard determines that a special Stepper fimware file is needed to bring the unit up to date before the actual fimware update to a v7 x or greater fimware package can take place If required to do so please provide the SIP file which can be found either on the installation CD orfrom Bioscrypt s web site www bioscrypt com Waming After updating the unit s to the intermediate Stepper fimware version the unit will NOT behave normally until the final version update is complete The unit will indicate this abnormal state by flashing the LED on top of the unit altemating colors During this time the unit should NOT be used or administered in any way except to complete the update process which will be done automatically by the wizard e Step4 isthe final st
28. from 3 to 1 will decrease the chance for false acceptance at the expense of increased false rejection Reducing the security e g changing the security level from 3 to 5 will decrease the chance of a false rejection at the expense of false acceptance The table below indicates the expected enor rates at the different security levels Sec unty Level False Rejection Rate False Acceptance Rate Very Low 5 1 10 000 1 100 Low 4 1 5000 1 200 Medium 3 1 1000 1 1000 High 2 1 200 1 5000 Very High 1 1 100 1 20 000 Table 2 Security Thresholds Document 430 00127 18 78 Copyright 2005 Bioscrypt Inc All nights reserved bloscrypt APPENDIX A QUALITY AND CONTENT Quality The quality score is based on how well the ridge pattem is defined within the fingerprint image that was enrolled In other words quality measures how Clearly the unit imaged the fingerprint Poor quality enrollments can result in an elevated rate of false rejection making it difficult forthe userto verify reliably The score is given in stars In VenAdmin the range is from zero to five stars with five being the best quality rarely obtained and zero being the worst Quality scores of three stars and higher perform well with the Bioscrypt verification algorithm In this range the algorithm readily compensates for differences in fingerprint quality It statistically is still true that the larger the quality score the betterthe perfor
29. iCLASS v Use Wiegand String Rix Templates Timeout 1500 ms Write Status Read re Read Only Mode no card writes Auto Update Site Keys lemplates 5tored Primary 1 John Doe 1 Secondary 2 O John Doe 2 Card Type iCLASS 16 application area card Serial Num 189501 OOFOFF12E0 WELL og Smart Card Actions Secure Card Delete Template 1 Delete Wiegand String 1 Reset Card Delete Template 2 Delete Wiegand String 2 Refresh OF Cancel Figure 66 The Smart Card Manager This dialog initially shows the ESI information and a blank card Pressing the READ SMART CARD button will instruct the V Smart to read the template list from the card and display the list of stored templates In the example shown there are two templates The display showsthe Template ID INDEX followed by the NAME field from the template Ihe upper right hand comer of the card has symbol indicating the card is secured Also VenAdmin will indicate which type of Smart Card was read MIFARE or iCLASS 2 or 16 application area The card s serial number is also provided for reference Pressing either template button primary or secondary will instruct the V Smart to attempt to read the full fingerprint template data from the smart card VeriAdmin will prompt the user for the SiteKey depending on security settings and if the SiteKey entered matches the SiteKey stored on both the V Smart and the smart card the template will
30. installation includes multiple Ven Senes readers that are used by a common population of users you wil need to distnbute the fingerprint template of each userto all the readers NOTE It is recommended that you designate one Bioscrypt Unit as the administration reader and enroll all new users on this unit After a new user is enrolled on the administration unit the template can be copied to the other readers If the units are networked you can broadcast the new template to the otherreaders over RS 485 lines or an Ethemet network for V Stations using the VenAdmin Management Software If the readers are not interconnected a laptop can be used to download the templates from the administration reader and then upload them to each reader through its Aux Port Backing Up Templates Templates can be backed up by downloading them to a PC On the PC templates will either be tem for 1 1 verification records or tms for the larger searching templates see Appendix C Searching vs One to One Templates The name of the file is denved from the Template ID number and the Template Index number For example the first file 10 O tem in Figure 8 below is of Template ID 10 and Template Index 0 referred to as Template 10 0 Document 430 00127 18 12 Copyright 2005 Bioscrypt Inc All rights reserved bloscrypt LEDs CONCEPTS OF OPERATION Save Ag Save jn ares et al r5 6 s 10 tem wil tem 1122 tem aa 12_0
31. smart cards created by any other V Smart and a site s installation could easly be compromised By using a unique SiteKey at each installation you ensure that the only smart cards that are accepted by V Smarts are your site are smart cards personally created at your site It also ensures that data on the smart cards created at your ste cannot be read by anyone that does not know your chosen SiteKey What is the Default SiteKey All V Smarts are shipped from Bioscrypt with the SiteKey set to an empty string 120 bits of all zeros This allows Administrators to use the V Smart in a non secure mode until they are ready to set their personal SiteKey and secure the system When using the Default SiteKey in non secure mode and VenAdmin performs a SiteKey Validation simply do not enter any key and just press the OK button After the V Smart verifies it is using the default SiteKey and it venfies the smart card is also using the default SiteKey the operation will be performed Where is the SiteKey Stored The SiteKey is stored within the intemal memory of the V Smart and is encrypted and stored on the smart card itself The SiteKey is NOT stored within VenAdmin they are NOT stored on the PC and they cannot be retrieved from the V Smart It is the responsibility of the Administrator to remember the SiteKey and take measures to prevent the SiteKey from being forgotten What is the Difference Between PRIMARY and SECONDARY SiteKeys The V Smar
32. to a Smart Card As seen below options now exist to save the template to the CURRENT UNIT the PC ora SMART CARD By pressing the SAVE button under SMART CARD the V Smart or V Station iC LASS MIFARE will attempt to write the template to a smart card held near the smart card reader Note that a SiteKey venfication is performed before the data is written to the smart card see appendix E for details TH Template Viewer 1 0 Make Duress Finger C Password Only User Data ID Index 2 fo Extended ID Enrollee Mame John Dos Access 1 Schedule 1 _ Schedule User Type Uses ID Select F Observe Hobdays Farmit Save To I Pc C35mat Card Cancel Figure 65 The Template Viewer Section D 4 Using the Smart Card Manager VeriAdmin versions v4 00 and above have a toolbar option for accessing the Smart Card Manager dialog Pressing the SMART button will bring up a dialog like the one shown below initially the templates will not be shown until the Read Smart Card button is pressed Document 430 00127 18 90 Copyright 2005 Bioscrypt Inc All rights reserved bloscrypt APPENDIX D V SMART OPERATIONS a Smart Card Manager Reader Information Smart Card Settings ESI Status Idle Security Settings Max Templates per Card f Ore i f Two ESI Type V Station Eum Sm anfigure Card Layou fies Ii Esler ESSI g Y ESI Venfication Timeout 15 s Reader Type
33. will be displa yed dunng an enrollment ATTENTION This unit is expecting to read the Full Wiegand string From the Smart Card during an enrall verify however the Wiegand string has not vet been provided Are vou sure vou would like to proceed without the Wiegand string Mote The checkbox next to the From Reader button Will be checked after successfully reading the string Figure 67 VeriAdmin Notification About Wiegand String Also when you have this setting checked VenAdmin will remind you that it is saving the Wiegand sting when saving to a Smart Card The WRITE WIEGAND STRING checkbox below the Save button for Smart Cards will be checked if the string was read in As of VenAdmin version 4 3 there is also the ability to delete Wiegand Strings associated with a template The DELETE WIEGAND STRING 1 button will prompt the user for a SiteKey and then delete the Wiegand string associated with the Primary Template The DELETE WMEGAND SIRING 2 will perform the same task for the Secondary Template It is possible to use this function even if a Wiegand String has not been associated with a template so long asa User Data block has been placed in the Smart Card layout see the section on Smart Card Layout The USE WIEGAND STRING checkbox will need to be checked in orderto delete the Wiegand strings Also new to verson 4 3 of VeriAdmin is the ability to secure and un secure Reset smart cards The SECURE CARD button will sec
34. will both respond at the same time and cause the same problem When in Broadcast mode the Bioscrypt readersare instructed NOTto REPLY NO ERROR CHECKING The Bioscrypt communication protocol has various enor checking methods built into the interface This emor checking requires two way communication between the PC and the Bioscrypt readerto ensure that command packets where received and all data contained Because NO REPLIES are possible the emor checking is disabled in Broadcast mode This can become an issue when using a network of Bioscrypt readers since the reader itself cannot process a communication packet during Verification Although this time is very short if a command is received dunng portions of a Venfication action the unit would normally respond with a BUSY emor code However if in Broadcast mode no response can be given and the VeriAdmin will not know that the command was ignored by that particular unit even though it would have been accepted by all other units Manual venfication is often required to ensure all units successfully received a Broadcast command An example of this can be seen in the BROADCAST PC TEMPLATE section The VenAdmin Software will Broadcast the TRANSFER command but then manually verify that the template was successfully transferred to each and every unit afterthe Broadcast command iscomplete Since Broadcast commands cannot have the Bioscrypt reader reply using a Network ID hasbeen disabled in Reset to
35. 0 Uang Command Cie GS gaara ttt canes imag UD DIFUIES UnUEU rt MET UR dI TIDURK EDI ENDE IURIS CI P COD II 41 EVO MCS OMMAN ilo RED 41 Delete command Gal ssssesatsnvtoosr ndscuMhusi om AA 41 Caiana cH DINI In UNI HUMEDAD Ei r DNM RIEN VE UAI NER NE K 42 I cIrio 42 COM UIC a VOU Wel e H RRRUTT 43 Network Id entific ATION Number sese nnne nnn nnns 43 MV 1200 Ven Senes Port MODE eeessesseeeennnnnmmnnnnnnnnnnnnnnnnnnnnnnnnnnn nnn nnn nnns 44 gout 44 HOSCPOIt anda AUX PONM Baud Rates ue eiiogasirt hn bof Hio edo E quad Rap ates 44 edd elo iam T 45 sd eju esie ciue a cM TEST 46 VECO Bio 46 Document 430 00127 18 Ix Copyright 2005 Bioscrypt Inc All nights reserved bloscrypt Pre Defined Wiegand Format sss nennen nennen nnn nnn nnn nnn nnn 46 OIC OUI OTA OWI RTT 46 om Pefer isi me raro 47 OT ra tires Fa WD COO 6 e 48 On Failure Fail Ste Code srsisicccaninceprscpnirsaanieneamenetiotaseeininiedna dian cnieeaaiemieisneas 48 Om rale Dyert Panty BIS usibus dmvd deb vd Ed RC I VERI ORI ND RIVYBSII P EDARHdpPIGK 48 ie age 48 Ena Noui EE 48 aimul m 49 PUISE IE m 49 Wiegand PASS THRU fO nM atS cccccccccccesesssseeeeee
36. 485 DB15 port a RS 232 DB15 port and the RS 232 RJ 11 bottom port Of the three only two may be active at a time Ihe MV1200 Ven Senes Port MODE parameter designates the two active ports and assigns one as Host and the other as Auxiliary The RS 232 RJ 11 port is hidden undera dooron the bottom of the V Prox This door is held shut with a security locking screw The V Prox can be used asa stand alone reader or multiple units can be configured on a RS 485 network The manner in which the V Prox is installed will determine which communications settings are most convenient Administrative functions common to any installation will be required Users must be enrolled into the system that is associate a user sfingerprint data with a specific proximity card ID number Also this data must be distributed to all other readers in the installation The VenAdmin Document 430 00127 18 7 CC opyright 2005 Bioscrypt Inc All rights reserved bloscrypt CONCEPTS OF OPERATION Management Software is provided for this purpose The V Hex The V Flex is similar to the V Prox except that an extemal Wiegand device is used A typical operation isdescnbed below e Auserinitiatesthe action with the extemal Wiegand device e The ID number isread from the extemal reader e The ID istransferred to the V Flex o Ifthe ID isinvalid the LED on the top of the V Flex will glow red o If the ID presents a valid previously enrolled template the LED on the top
37. ARD MANAGER The first checkbox READ ONLY MODE allows the ESI to be put into a read only mode where it will not be allowed to wnte any data whatsoever to a Smart Card This mode should NOTnomnally be used because it will not allow the V Smart to function normally with respect to enrollment key management etc It is intended only for use with a pre enrolled population of users whom are only accessing the V Smart for venfication Although the likelihood is extremely low this mode will guarantee that Smart Cardscannot become conupted by presentation of Document 430 00127 18 93 Copyright 2005 Bioscrypt Inc All nights reserved bloscrypt APPENDIX D V SMART OPERATIONS the card at the edge of the readers detection field Note that when this option is checked it hasa side effect of setting the secondary SiteKey to a value of 1 or disabled You must therefore re enter the secondary SiteKey when setting the ESI backto read wnte mode if you would like to use the auto update feature The othernew checkbox called AUTO UPDATE SITEKEYS allows a userto explicitly tum on and off automatic SiteKey updating of Smart Cards that are presented to the V Smart for Verification When this checkbox is checked and the secondary SiteKey is NOT set to 1 Smart Card keys which match the secondary SiteKey will be automatically updated to the current primary SiteKey Thus an entire population of users will have their cards updated to a new SiteKey aut
38. Al T orselahes DELETE ALL TEMPLATES ON ALL LFTs WARNING This will delete ALL templates on ALL units on the netwark Figure 37 Broadcast Parameters Window NOTE Change one setting at a time and click the Broadcast button after each change For example if you wish to change the Security Threshold and the Wiegand Out string Change the threshold Click the Broadcast button in the security section Change the string Click the Broadcast button in that section PWN Document 430 00127 18 58 Copyrnght 2005 Bioscrypt Inc All rights reserved bloscrypt ADVANCED ENROLLMENT Advanced Enrollment The Advanced Template Enrollment is the recommended tool for enrolling all templates This allows multiple templates to be sampled and the cormesponding template created Users can sample different fingers or multiple enrollments of the same finger Each time an enrollment is sampled the best template is identified between the cument 3 samples Users then have the option of accepting the enrollment of their choice NOTE No enrollment are saved until 1 of the 3 ACC EPT buttons is pressed This tool can be used to train users by demonstrating how proper finger placement is a critical aspect in obtaining a good enrollment Thistool can also show how different fingers on the same person can have very different QUALITY and CONTENT ratings ij Advance d Enroll F1 Help r User Information ID 1 Index 0 T Get Wiega
39. Biometnc Schedules tab deals with configuring schedules for the V Station which determine when biometnc venfication i e a finger is required is ON or OFF throughout the day This option is only available to V Stations with firmware versions at least V7 20 Schedules can be set on any 15 minute interval For example a certain site may require only high secunty at night and an administrator may only wish to require biometnc verification from the hours of 6pm to 6am Schedules can be configured differently for each day of the week see Figure 79 Because each V Station normally has biometnc verification ON the red barsrepresent times when Biometrics are NOTrequired To edit the schedule for a particular day of the week click the EDIT button directly below that day s schedule You may RESET the entire week s schedule remove all OFF periods by pressing the RESET BIOMETRIC SCHEDULES in the lower right Note that today sday is shown in blue Document 430 00127 18 115 Copyright 2005 Bioscrypt Inc All nights reserved o TM bioscrypt hd APPENDIX F V STATION OPERATIONS Station Manager Clock Ethernet Biometric Schedules Menus Access Schedules Holiday Schedules Recurring Weekly Schedule One Day Schedules L Red segments indicate time when Biometrics are NOT required Sun Mon Tue Wed Thu i Reset Biometric Schedules Transaction Log Figure 79 V Station Manager B
40. Bioscrypt One Year Limited Warranty PoliC y eese li Bioscrypt Retum Policy and POC QCUICS csssssssceeeeeeeceseessseeeeeeeeeeeeuaausseeeeeeeeessaaaasseeeeeeeeess V Bila pile Re OI POMC Ys V SO Day ubgog f o H vi Weiner vii TE OTe OF CO CS prs rr vill TAOS OF IG Oe UU n xiii NOLOGO e T m xvi INTO UCTION mA 1 TEI Cy 2 ADOULVeOI Sees PIOGUCIS csisinmodet versi pa onmi Evi DEL RIT PURO edv Ee PR UE Vc mre 3 About the V PrOX sseseeeeeee enne nnnnn nennen nnn nnn rra n anie a anna nasa n nasa anser rans 3 PO OE Cie VEO amravivischuMis E E Suma TI CIMA R 3 POO Se ir aera eccentric denn dip eden UFU EELORM HM ene uation UNI tUi Pur np MM NIME 3 About the V SMAIC cccceccccccccccceeessseeeeeeeeceeeueusseeceeeeeeseuaeassseeceeeeeeseaaagseeeeeeeeessuageaeeeseeeees 4 PO OU Ei V AON ea E E E SUCH PERUE 4 Venr Seres Physical Layout sessssrsnrrrrreesssrrrrrrrrreesssrnnrrnnrresssrnnrrnrrnrossnnnnrrnrneressrrnnrnn 5 Coen Oropa ON E E E E AE EE 7 Bla MIO CRT UT E A ae E E E E E 7 IO VRHE C 8 TING V PASS csssssecccccceessseeececeueesseeeeeeeeessuceeeeeuaesseceeeeeuegssececeeeueusueeeeeeeaeueeeseseuaaseeeseessgggeeeesenaggs 8 INe POAN Y C 6 e Rm 9 ISS ll cT
41. Card close to the reader when prompted and hold it until instructed to remove the card Please Place Smart Card close to Reader Figure 25 Download Template s to Smart Card If successful the following message will be displayed SS x AN Template Successfully written ba Smart Card Figure 26 Download Template s to Smart Card From PC to Unit You can transfer templates from your PC to any unit When you click the From PC gt Unit button a window like the one below will open 1 Click the From PC Unit button 2 Use the window to browse forthe correct directory 3 Select the appropriate template s Document 430 00127 18 36 CC opyright 2005 Bioscrypt Inc All rights reserved bloscrypt TEMPLATE MANAGER 4 Click the Open button Files of type Verification Template Files tem Cancel E Figure 27 Upload Template s to Unit Please note that when the template is uploaded the template ID number and index number is taken from data within the file not from the file name Therefore even if you change the name of the file on your PC the template numbers will remain the same To change a template s ID or index always use the TEMPLATE EDITfeature within the application From PC to Smart Card The operation is similar to uploading from the unit and will require the current SiteKey after selecting the desired template s from the PC Again this feature is only available to units with smar
42. ENROLL and ioc DELETE ac tio ns Led Table Settings Broadcast Parameters Under Nomal operations ENROLL and DELETE MR COMMAND CARDS require a fingerprint venfication seres Cer reier to be performed that ensures the correct person is Undate Firmware a using the ADMIN card Wiegand Card Utilities Wiegand Enroll ID s ID_1 1 Enroll Administrator ID_2 1 ini E Enroll Administrator Clear ALL D3 fA Enroll Administrator eid ID_4 1 Enroll Administrator Wiegand Delete ID s ID_1 a Delete Administrator ID_2 LN Delete Administrator Clear ALL ID_3 NEN Delete Administrator laci ic ID 4 LH Delete Administrator Cancel Figure 60 Wiegand Utilities dialog Reset Unit to Factory Defaults Template Conversion Verification Action Response Wiegand Utilities w Smrart Security Settings Figure 59 Wiegand Utilities Menu The Wiegand Utilities Dialog allows Administrators to create specific IDs that can initiate the following operations e Create ENROLLMENT Administrator Command Card e Enroll User Card e Create DELETE Administrator Command Card e Delete User Card By entering a Card ID in the appropnate box and pressing the SAVE key that ID will be stored in the Ven Senes Unit memory When a card that contains that ID is presented to the Ven Senes Product the appropriate action will be initiated This feature has been added to allow installers to create ENROL
43. ETWORK SETUP AND CONFIGURATION Network Setup and Configuration Network Setup After dismissing the Welcome dialog the Network Setup dialog will appear Figure 15 This screen is used to select which senal ports and Ethemet settings should be used by VenAdmin By default all available COM ports will be checked with baud rates set to 5 600 This screen allows you to select up to 20 COM ports from 1 to 50 Duplicate COM ports are not allowed The Auto column of checkboxes indicates whether VenAdmin should automatically try all baud rates when establishing communication with a unit This is a convenient option however it can cause VenAdmin to take longer to connect to a reader If you are certain of the baud rate you plan to use uncheck the Auto box Even with this box checked one should select a proper baud rate from the drop down this will be used for broadcasting The TCP options should generally not be changed and the network administrator should supply the subnet ma sk Document 430 00127 18 21 Copyright 2005 Bioscrypt Inc All nights reserved bloscrypt NETWORK SETUP AND CONFIGURATION Network Setup j xj Click here to enable Ethemet UE The Subnet Mask should z No TCP Delay Subnet Mask appropriately set TCP Connection Timeou s s 255 25 25 0 Seia Ports Re Poit Baud Aste Auto Use Pot Baud Aae Auto r CEE Ar Parae rrar ar The Auto c
44. Factory defaults and Sensor Settings NOTE all units on the same PC COMM port will receive a Broadcast command If a network consists of multiple COMM ports the Broadcast command will have to be sent on each COMM port in order to reach all units on the network This is automatically done by the VenAdmin Software for BROADCAST PC TEMPLATES and for all commands in the BROADCAST PARAMETERS window based on the UNITIDS DAT Document 430 00127 18 82 CC opyright 2005 Bioscrypt Inc All rights reserved bloscrypt APPENDIX B BROADCASTING FOR RS 485 NETWORKS file However this is not for other commands where the user specifies a Network ID of Document 430 00127 18 83 CC opyright 2005 Bioscrypt Inc All rights reserved bloscrypt APPENDIX C SEARCHING VS ONE TO ONE TEMPLATES Appendix C Searching vs One to One Templates The V Pass and V Station Searching products are similar to the other Ven Senes products However they incorporate a very different biometnc comparison process The V Flex V Prox V Smart and all other V Station models perform a 1 1 venfication One finger is compared with one template to decide if there isa match A Template ID is mandatory to determine which of the stored templates to compare with the Current live fingerprint image The searching products utilize a searching algorithm that will compare the current live fingerprint image with ALL templates that reside on the unit This is often referred to a
45. L and DELETE ADMIN Command Cards without a PC if the unit has been properly pre configured for specific card IDs by using this feature Once these initial cards have been created we recommend deleting the pre configured IDs with the CLEAR ALL buttons Document 430 00127 18 73 CC opyright 2005 Bioscrypt Inc All rights reserved bloscrypt GETTING SERVICE AND SUPPORT Getting Service and Support Bioscrypt Inc is available to provide information and assistance Contact Bioscrypt using methods discussed below Before calling copy down the following version information about your unit Software DLL Algonthm Kemel PIC ESI if applicable Communication Manager CM if applicable Kit if applicable This can be found in the Help menu under About VeriAdmin Technical Support For assistance with technical matters contact the Technical Support Department by sending e mail to support bioscrypt com To speak directly with a technician call 818 304 7180 or 866 304 7187 toll free within the United States Customer Service and Sales Support Bioscrypt is here to assist you with your questions Contact our Customer Service and Sales support departments by calling 818 304 7160 World Wide Web Site See our World Wide Web site for updated documentation news information and other services The address is www bioscrypt com Document 430 00127 18 74 Copyright 2005 Bioscrypt Inc All nghts reserved blos
46. MITIDS DAT File Would vau like veri amp dmin to import this File and keep your old settings Figure 13 VeriAdmin Welcome Message A If you see this dialog it means VenAdmin has found the old network configuration file UNITIDS DAT As of version 5 00 VenAdmin handles all network configurations intemally there is no need to manually edit any files However VenAdmin will take advantage of your previous work and import this file for you if you so desire Selecting this option will bring up the Network Configuration Manager skip ahead to this section For customers installing VenAdmin for the first time you will see a different welcome message Figure 14 Document 430 00127 18 19 Copyright 2005 Bioscrypt Inc All nights reserved VERIADMIN MANAGEMENT SOFTWARE V5 50 WELCOME to Veri amp drin The Veri amp dmin configuration File was not Found IF this is the First time vou are running this version of veri amp dmin this is normal IF you have already run this application before Veri amp dmin should have created a File called Veriddrnin xml in the veri amp drmin Folder You will now need to select the network Comm port settings you wish Ea use so that Veri amp dmin can properly access all units on your network The Following screen may be accessed again later at any time Figure 14 VeriAdmin Welcome Message B Document 430 00127 18 20 CC opyright 2005 Bioscrypt Inc All rights reserved bloscrypt N
47. NDIX E SMART CARD SITEKEY MANAGEMENT e he final step required isto ensure that the Auto Update SiteKeys checkbox has been checked note that un checking this box resets the secondary SiteKey to 1 e Atthis point all previously created smart cards still contain the previous key of cat However when a smart card is presented to the V Smart it will follow the following steps o When a card is presented and the V Smart tries to read the data from the card the V Smart will check the key currently used by the Smart Card Since the key on the card is cat and the V Smart Primary key is now dog this key check will fail o Next the V Smart will check if its Secondary SiteKey matchesthe key on the smart card In our example they do match so the key on the smart card is changed updated to the V Smart s Primary SiteKey This update adds 0 5 secondsto the process but only happens the first time the older card is presented After that the new Primary is already on the smart card step 1 above will PASS from now on If neither the Primary nor the Secondary SiteKey on the V Smart matches the smart card s key the V Smart will not be able to use that card You must use the previous SiteKey as the SECONDARY SiteKey or all previously created smart cards will be unusable Once the entire user base of cards has been updated to the NEW PRIMARY SiteKey you should once again perform the change SiteKey process This time keep the primary SiteK
48. NOT be used on any products with fimware version 7 30 or greater It is provided only for backwards compatibility with older units The new fimware package file contains the proper ESI fimware for the unit ensuring that the ES and MV1200 have compatible versions Document 430 00127 18 69 Copyright 2005 Bioscrypt Inc All nights reserved bloscrypt Reset Unit to Factory Defaults Choosing the Reset Unit to Factory Defaults menu item will allow the Bioscrypt reader to be reset to the default factory settings It is recommended that only advanced users attempt to use this operation Please call Bioscrypt Technical Support with any questions Unit parameters are grouped into similar sections However each individual parameter is not listed for brevity Checked groups will be reset when the Reset button is clicked Proper communication must be established with the reader before this operation can be successfuly performed Beware that resetting serial communication may affect VenAdmin s ability to communicate with the unit and should not be used unless directed to do so by Bioscrypt Technical Support RESET UNIT TO FACTORY DEFAULTS i VeriAdmin v5 20 Alpha File Configure view Help jj Network Setup Unit Parameters LED Table Settings Broadcast Parameters Quick Enroll Advanced Enrallment Sensor Configuration Update Firmware k Reset Unit to Factory Defaults Template Conversion Verification Action Response Wiegand U
49. Port Baud Rates You can change the baud ratesof both the Host and Aux portsto match your PC and orothernetworked devices If you change the baud rate on the port you are using VenAdmin s Network Setup baud rate will automatically update if the auto baud option is selected in the Network Setup dialog in orderto maintain communication with the unit l In the appropriate section Host Port or Aux Port select the appropriate Document 430 00127 18 4A Copyright 2005 Bioscrypt Inc All rights reserved bloscrypt UNIT PARAMETERS baud rate from the drop down list 2 Click the Apply button NOTE Some baud rates may not be available on certain products or with certain firmware versions For example MV1200 based products do not support 4800 Aux Port Sec unty This allows the Administrator to set a password for the AUX port to DISABLE unauthonzed AUX Port communications The pumpose is to prevent unauthorized users from accessing the AUX port unless the password is supplied to re ENABLE the port In the dialog the Current state isshown The Administrator would select DISABLE and supply a numenc password and press the Apply button The supplied numenc password should be remembered since it is required to REENABLE the AUX port while communicating again on the AUX port Once the AUX port is disabled no communications are accepted over the AUX port unless ENABLE PORT option is chosen in 1 of 2 ways e if communicating over
50. Smarts Key A and Key B do not correspond to PRIMARY and SECONDARY SiteKeys please read the manufacturer s documentation for more information Only Document 430 00127 18 95 CC op yright 2005 Bioscrypt Inc All rights reserved bloscrypt APPENDIX D V SMART OPERATIONS advanced users should change this setting NOTE When configuring a V Station MIFARE or iCLASS unit and the administrator is planning to perform enrollments directly from the V Station keypad the SiteKey chosen MUST BE NUMERIC asthe keypad can only enter numbers Also the software HASH function MUST BE TURNED OFF as the SiteKey entered via the keypad is not hashed Pressing the CONHGURE CARD LAYOUT button will bing up the Smart Card Layout Manager dialog box One of the following two dialogs will show depending on the type of V Smart product being used MIFARE based V Smart Layout Manager This dialog will allow the user to define a custom layout for all MIFARE compatible smart cards rt Card Layout Manag MIF x Current Layout Sector 0 1 Block 2 3 3 Em ERES BENE EN a NI ERU NENNEN A EN NI D M A NND NND d NENNEN ENS a NI KEA 5 M A NNUS NNNM eeoa c BENE a a pond NEN ee NI pod MEN ENS NN NNI pud BEEN NND EUN NNI Bud o BENE NENNEN US NI 10 ae BENE a ee NI n p Vo m 12 BEN 5 NENNEN NENNEN ES NI 13 e u NEN a UNI 14 P 5 EN a NI 15 psi
51. There are some things to keep in mind when changing the Smart Card layout First note that the number of templates defined on the layout should be greater than or equal to the Max Templates per Card option In other words you should NOT define only one template and set the maximum templates per card to TWO This will result in an ESI Storage Full emor upon enrollment of a second template Second remember that changing the layout after some Smart Cards have already been created with a different layout may cause those cards not to work properly with the V Smart You will see a flashing or steady red LED on the unit when trying to verify or you will receive an enor in VenAdmin indicating that the ESI cannot recognize the layout Third it is important to realize that although you may write both Bioscrypt data and non Bioscrypt data to a Smart Card each sector has its own SiteKey which unlocks data on that sector Data may only be read from or written to a particular block if the proper SiteKey for that sector is provided The ESI will use the same SiteKey for all sectors being used by the V Smart including sectors where only one or two blocks are actually being used It is recommended that any non Bioscrypt data be placed on different sectors so that different keys may be Document 430 00127 18 98 Copyright 2005 Bioscrypt Inc All rights reserved bloscrypt APPENDIX D V SMART OPERATIONS used for that data Finally keep in mind that if a t
52. Unit Boot up Add Template Add Template Add Template Add Template Add Template Add Template Add Template Add Template Add Template Add Template Delete Template Delete Template Unit Boot up Add Template Add Template Success Success Success Failure Success Failure Success Success Success Success Success Success Success Success Success Success Success Success Success Success Success Success Success Success Success Success Success Success Success www co co ccOocccococooooooooooogm jm ococooorsrti cOococoooccoccoococcocooccozcococcc a a oa E oa E ma A wa A oaa B oa B oa B o B oa G aa E m B man B m GA maa G m B ma BE m E a 3 ccO occoccococococococoococccocoococococococcococoooccocococococoocc cc Document 430 00127 18 Add Template Read OK Figure 84 V Station Transaction Log m Log Options Erase ALL B i Erase Read Entries Read 194 194 m Read Options All Entries limit to New Entries Only M Show Names Mark as Read MV 24 Hour Time i The log can be accessed by clicking on the Transaction Log button at the lower left comer of the V Station Manager There isa limit to the number of transactions that can be stored on the unit due to memory constraints The V Station will store a minimum of 4 096 entnes in the log AS more transactions occur the V Station will store additional transactions but at some point will need to erase old transactions to mak
53. a Duress Template is still subject to access scheduling holidays multi finger mode and any other biometric option specified For this reason Bioscrypt recommends setting any duress template to use access schedule 63 All Access and not observe holidays NOTE This option requires fimware versions 7 30 and above Verification Action Response Tab The fifth tab in this dialog is the Verification Action Response tab see Figure 35 This tab contains the options formerly in the Verification Action Response Dialog which wasseparate from the Unit Parameters Send Verification Result Channel Always Never Always with ID Host Port p Auxiliary Port Wiegand Out v a Line Trigger Jv 5 Seconds m Verification Polling Mode C Enabled Polling Mode Disabled Figure 35 Unit Parameters Dialog Verification Response Tab Send Venfication Result The actions taken after a successful venfication can be specified here Under Normal operations the Ven Senes unit will respond based on how a Venfication Action was initiated When a Wiegand INPUT initiates the action a Wiegand OUTPUT is used to respond When a Verification Action is initiated over a communications port by using the Bioscrypt DLL or low level commands described in the MV1100 MV1200 SDK then the response packet is retumed on the same communication port either HOST or AUX This tab allows the user to select other Verification Responses in
54. addition to the normal response The Line Trigger is a signal line that will trigger for the defined number of Document 430 00127 18 54 Copyright 2005 Bioscrypt Inc All rights reserved bloscrypt UNIT PARAMETERS seconds on a successful venfication Although not a true TIL level signal this trigger could be used to initiate a relay or other device The Line Tngger is the Pin 50n the Ven Senes pigtail It is recommended that only advanced users who are working with the SDK and writing their own custom software attempt to enable the HOST or AUX ALWAYS operations The Always with ID option is basically the same thing except the first data word retumed will be the template ID WARNING Do not set a verification action for the Auxiliary port on V Station products this will cause problems with V Station s menu system since it also usesthis port Verific ation Polling Mode This option will drastically change the behavior of the unit for venfications initiated either by the keypad V Station ora Wiegand source When enabled these actions will not initiate a verification the default behavior of the unit Instead the ID number will be placed into a queue that is available for polling from an outsde device such as a door controller This outside device will determine if the ID is valid and take appropriate steps such as sending the unit the appropriate template perhaps from a central database and independently initiating the Veri
55. alid ID number the V Pass will perform a simple 1 1 verification and nota searching operation NOTE the V Pass fingerprint templates are different from the smaller 1 1 fingerprint templates Please see AppendixC forfurther details About the V Smart Bioscrypt s V Smart provides all the capabilities of the V Flex and includes an intemal smart card reader Fingerprint templates are securely stored on a smart card rather than on the reader and camied by the employee or user This allows for an unlimited population of users The smart card is presented to the V Smart and the template is read from the smart card and verified against the employee slive image Storing the template on the smart card allows the V Smart to have an unlimited user base and removes the need for a physcally wired network Wiegand communication formats of up to 64 bits can also be stored on the smart card and optionally used with a Wiegand device About the V Station Bioscrypt s V Station is the newest and most versatile Veri Series product It is the first completely stand alone version of the Ven Senes product line with an integrated keypad and LCD display Most actions can be performed right from the console thereby freeing users from having to administer the device from a PC The standard version stores more than 3000 templates based on IDs entered on the keypad but versons are available which include an enclosed proximity or smart card reader A searching version is
56. are supported for MIFARE compatible cards Gem Flow A Gem Flow B and HID Flow B Only one setting is available to HID iCLASS cards Please refer to the documentation provided by these manufacturers or from whom you received your smart cardsfor more information At the top of the SMART CARD MANAGER dialog you will see a radio button to select the MAX TEMPLATES PER CARD Curmently this can be set to either one or two templates although future cards with more memory may support additional templates If the two templates option is selected the Smart Card Layout must have two templates defined this applies only to MIFARE compatible cards Otherwise when attempting to save a second template to the card the user will receive an Invalid Smart Card Layout enor If the maximum is set to only one template attempting to save a second template to a card will result in the err message ESI Storage Space is FULL The ESI VERIHCATION TIMEOUT is a user definable setting that controls how long the ESI will wait between verification from one card to the next When a smart card is presented the ESI will read the template s and Wiegand data if available go into SLAVE mode and send the data to the main unit for verification with the live finger image It will then wait for a number of seconds default is 15 before retuming to HOST mode where it can accept a new card VenAdmin version 4 40 introduces two new checkboxes and an edit box to the SMART C
57. be read and the nomal Template Editor window will be displayed NOTE It is possible to edit a template on the card and change either the ID or the Index then save the template back to the card This is NOTrecommended because any Wiegand data associated with the original template will not be saved with the new template Document 430 00127 18 91 Copyright 2005 Bioscrypt Inc All rights reserved bloscrypt APPENDIX D V SMART OPERATIONS The DELETE TEMPLATE 1 button will instruct the V Smart to erase the primary template stored on the smart card VenAdmin will perform a SiteKey verification before allowing the erase to take place Ihe DELETE TEMPLATE 2 button will instruct the V Smart to erase the secondary template stored on the smart card Version 4 2 and above of VenAdmin includesa checkbox for USE WIEGAND SIRING This is a setting which tells the V Smart to attempt to read a Wiegand string from the Smart Card during a verify and send this Wiegand string out the Wiegand out lines if successful This check box also means that VenAdmin will attempt to save the Wiegand sting onto a Smart Card when enrolling To do so it will require that a Wiegand string be read from an extemal Wiegand input device the FROM READER button during Quick or Advanced Enroll Once you have read in the Wiegand string a check box WIEGAND SIRING READ next to this button wil be checked If VeriAdmin has not received the Wiegand string the following dialog
58. before with the Biometnc Access Schedules allowing the user to specify one or two intervals for that day aligned on fifteen minute intervals This schedule may be duplicated for the whole week or M F if desired Continue creating the weekly schedule in this fashion until the desred schedule is achieved Click on the Apply button to finalize the settings Sc hedules may also be removed from the V Station schedule list either one at a time by selecting a schedule and clicking on the Remove button or all at once by clicking on the Remove ALL Schedules button You may not remove the built in schedules O and 63 Entire schedule lists can also be saved to the PC uploaded from the PC to the unit or broadcast to other units To broadcast ALL of the cument schedules on the V Station to all other V Stations on the network click the Broadcast button and confirm the broadcast This will broadcast the schedule on all defined Document 430 00127 18 119 Copyright 2005 Bioscrypt Inc All nights reserved bloscrypt APPENDIX F V STATION OPERATIONS channels both senal ports and Ethemet To save ALL schedules to the PC click on Save Schedules and supply the dialog with a name Altematively to upload a complete schedule list from the PC to the V Station click on Upload Schedules Note that all of these three options will operate on ALL schedules It is not possible to broadcast save orload individual schedules This would also not be desirabl
59. ble through the bottom RJ 11 port All units also have one RS 485 port The communication parameter settings will allow the userto designate one port as host and the otherasan auxiliary port Different wires are used for RS 485 versus RS 232 Please refer to the Ven Senes Installation Guide included on the Installation CD for details The Ethemet port on a V Station is accessed at the backofthe unit with a standard Ethemet cable Note that communication via the Ethemet port on V Stations require firmware versions 7 10 and above VenAdmin 5 10 or later is required for administration Senal Port Settings and Baud Rates Once the readers have been connected to the PC the next step is to configure VenAdmin to recognize which readers are connected to which ports on the PC As usual the serial ports on the host PC are designated as COMI COM2 etc You may connect up to 31 Ven Series readers to each COMM line using RS 485 Up to 254 readers may be connected on one Ethemet network however more can be added to another network and bridged You must indicate which COM or Ethemet ports you wish to use This is accomplished using the Network Setup Additionally your Bioscrypt network must be defined using the Network Configuration Manager These dialogs are new in VenAdmin version 5 00 and above They replace the older configuration file scheme it is no longer necessary to maintain the UNITIDS DAT file In addition the baud rate may be set on
60. cation Using a Smart Card After enrolling a template on a smart card you can then use the card to perfom a verification Exit the SMART CARD MANAGER dialog so the V SMART is placed back into HOST MODE Place the smart card near the reader as shown earlier in this section The Top LED will indicate Template READ Place Fingeron Sensor Red No Template on smart card Hashing Red Invalid SiteKey can not read card data Table 5 Read Smart Card LED Indicators In our example the top LED should tum AMBER indicating PLACE FINGER Remove the card place your finger and hold until the LED goes blank Once the LED goes blank you can remove your finger The LED will then either tum RED or GREEN indicating a FAlL ora PASS Document 430 0012718 100 CCopyrght2005 Bioscrypt Inc All rights reserved bloscrypt APPENDIX D V SMART OPERATIONS Verified Passed Enrollment Accepted Red Verify Failed Table 6 Verification LED Indicators Section D 6 Using the Smart Card Senal Number as the Template ID The Quick Enroll and Advanced Enroll windows now have an added button labeled Smart Card SN asseen below Template ID Number 2059553508 Get Template ID From Wiegand Sting Figure 71 Quick Enrollment Smart Card SN button This button allows a user to read in the serial number and store it as the ID of the template This is available for the V Smart and V Station MIFARE iCLASS product
61. cause this The most common are Powerhasnotbeen supplied orhasbeen incomectly applied to the unit The unit is not connected to the PC via one of the ports The Transmit ID does not match the unit s Network ID The VenAdmin s baud rate setting doesnot match the unit sbaud rate Multiple units on a network have been assigned the same Network ID For Ethemet the IP address may be incormect different from the IP addresson the unit orconflict with anotherdevice on the network No response From current unit Unit ID D Unit Type Unknown Unit Unit Marne Mew Bioscrypt Unit Comm Pore Please check the unit Far proper power baud rate and network connections or configure your network using Ehe Network Configuration Manager Figure 11 No Response Message Document 430 00127 18 16 Copyright 2005 Bioscrypt Inc All nights reserved bloscrypt VERIADMIN MANAGEMENT SOFTWARE V5 50 Two units on the network cannot have the same ID is because both units would resoond to commands sent to that ID This causes the information packets to collide and become jumbled resulting in communication errors This applies only to a RS 485 network and notto an Ethemet network Host Aux and Ethemet Ports Bioscrypt readers talk to the VenAdmin software through either the Host port the Auxiliary Aux port orthe Ethemet port V Station only All units have two RS 232 ports one accessible at the rearof the device and the otheraccessi
62. ck OKordouble click on a schedule from the list to choose the schedule You may not edit the schedule here this should be done in the Access Schedulestab of the V Station Manager Quick Enrollment When you select the Quick Enroll button on the Template Manager window the following window will appear Document 430 00127 18 32 Copyright 2005 Bioscrypt Inc All nights reserved TEMPLATE MANAGER Template ID Number glor aie iain ndicemictius A visualization of the j rn i Wiegand Strin 5 eo e st ae ie ok mathematical fingerprint Transfer Image Smat Card SM Sa will option is checked Wigand Sting Dp TIENS p T image Emy E Click Enroll to capture an image Click Accept to accept the captured image Feedback is provided Accepi AIV ARPA AGA ares regarding the Quality and Content of the captured Sus ye Ae odo fingerprint L fingerprint image Information and 3 directions will Accept ericolment o Aaen appear here Ext Figure 22 Quick Enrollment Screen The processto enroll a new template isasfollows l 5 In the Template ID Number field type the desired ID orclick on the appropriate button under the Get Wiegand ID From section for a list of valid ID values please refer to Tablel For Wiegand sources such as proximity cards or extemal keypad click on Wegand Sting To use a smart card Serial Number asthe template ID click on the Smart Card SN b
63. cores As descnbed in section A 1 Quality and Content scores are retumed in the enrollment process These scores give an indication of the performance of the template enrolled To a large degree the venfication algonthm compensates for deficiencies in image quality and loss of information content Nonetheless knowledge of these parameters and what they mean helps ensure optimal perfomance False Acceptance and False Rejection In order to understand the effects of poor image quality and poor information content it is necessary to understand how to measure performance Performance of the Ven Senes unit is presented in terms of False Rejection and False Acceptance e False Rejection indicates that the unit incorrectly rejected a fingerprint that corresponds to the person s template False Rejections rarely occur and primarily result from the inability to get a good image of the finger e False Acceptance indicates that the unit accepted a fingerprint that does not comespond to the template it was compared against False Acceptances also are rare and primarily result when a fingerprint template is characterized by low information in the enrolled print The algorithm on the Ven Senes units has been tuned so that the false acceptance and false rejection rates are equal at the medium security level level 3 delivering the industry leading accuracy This is known as the Equal Error Rate Increasing the security e g changing the security level
64. crypt APPENDIX A QUALITY AND CONTENT Appendix A Quality and Content Section A 1 Basic Biometric Concepts Biometric Definitions Enrollment refers to the entire process of captunng a fingerpnnt image extracting relevant data creating a record with user information and storing the record to memory Overall system performance will be increased by also evaluating the quality of enrollment before deciding to store the record Verification Authentication or 1 1 is the operation of comparing a live fingerprint against the corresponding record stored during enrollment A result of pass or fail is retumed based on whether the score wasabove a pre defined threshold value Identification Searching or 1 Many is similar to verification except that the userdoes not first identify himself or herself The system must compare the live fingerprint against all stored fingerprint records in the database to determine a match Identification is only available on the searching products such asthe V Pass and V Station Searching Template is the term used to descnbe the data stored during the enrollment process which is a mathematical representation of the ndge pattem of the enrolled fingerpnnt A template also includesthe minimum Ven Senes data This is very different from the raw fingerprint image typically only 350 bytesascompared to about 90k bytesforan image Fingerprint Core is the term used to describe an area of the fingerprint characteriz
65. cs Tab Global Security Threshold There are two types of security settings the local security level associated with the individual template and the global security level associated with the individual Veri Series unit The system will authorize using the lower of the two See the appendix for a discussion of secunty settings and algorithm perfomance Example If the template is set for Very High and the unit is set for Medium the authonzation willbe performed at the Medium setting Because of the unit s high accuracy rate which practically negates the possibility of a false acceptance the above affords the unit a high rate of true authonzation To change the global secunty threshold 1 Select the Security Threshold from the available radio buttons 2 Click the Apply button NOTE This option is disabled for V Pass and V Station Searching units Biometric Verification This option allows the user to tum biometric verification on and off Check or uncheckthis option and pressthe APPLY button Unchecking the box will cause the unit to bypass the core fingerprint authentication i e no finger required and allows for Wiegand passthru authentication alone Tuming this off will result in a less secure system and is not recommended The user a ssumes all nsk associated with disabling biometrc s Finger Detect V Pass and V Station Searc hing only This section will show the current setting of the Auto Finger Detect function for Doc
66. ctory location It is recommended that the default settings be used Note that if you are installing over an older version of Ven Admin the setup application will first require that you remove the older version Afterthis sep you can proceed with a normal installation This will not remove any backed up template or network configuration files Once the installation is complete a shortcut icon forthe Administration Software will appearon your desktop fl erAdmin Figure 12 VeriAdmin desktop icon Beware of deleting or moving the installed files to other locations on the disk Document 430 00127 18 18 CC opyright 2005 Bioscrypt Inc All rights reserved bloscrypt VERIADMIN MANAGEMENT SOFTWARE V5 50 Changing their attnbutes or altenng the Window s registry settings as this will negatively impact the operation of the software and may cause itto fall Running VenAdmin for the First Time Once the installation is complete VenAdmin may be run by clicking on the desktop icon or from the Start menu under Programs gt Bioscrypt gt VenAdmin You will see one of two possible welcome screens If you installed VenAdmin over an older version you may see the dialog shown below Figure 13 eri4dmin p WELCOME to Veri amp dmin It appears that you have upgraded From an older version of Veri amp drmin This version of veri amp dmin handles all network configuration internally thus You na langer need to manually edit the LI
67. d READ smartcard templates and the CHANGE the SiteKey If SiteKev is forgotten the administrator will no longer be able to perform these functions on the xy Smart and the unit will have to be returned to Bioscryptto reset to factory settings Changing a SiteKey requires that all prewiosuly created Smartcards be updated to the new Sitekey Bioscrypt has incorporated ways to make updating Smartcards convenient Flease see the Operations Manual for further details Ma Decline Figure 75 VeriAdmin Warning on SiteKey Change 4 Read the information carefully pressthe YES button if you accept 5 You will be prompted to enter the CURRENT Primary SiteKey this will be the Default Site Key if this is the first time you are changing the SiteKe y 6 If the CURRENT SiteKey entered is correct you will be presented with a dialog box indicating the changes were made 7 Now all newly created smart cards from this specific V Smart will use the NEW PRIMARY SITEKEY and all older smart cards that use the defined SECONDARY SITEKEY will be updated to the NEW PRIMARY the next time they are used by the V Smart 8 You will need to set the same PRIMARY SITEKEY on all V Smarts in your installation in orderforthe smart cardsto work at each V Smart How do I Set the SiteKey on Individual Smart Cards The V Smart will attempt to set the SiteKey on the smart card dunng the enrollment process e When an attempt is made to store a template on a smar
68. daylight savings observance and date time format set to MM DD YYYY HH MM SS These settings affect the date and time shown on the V Station LCD Note that when daylight savings time is in effect the V Station will automatically change it s time forward and backwards one hour at 2AM on the first Sunday in April forward and the last Sunday in October back Ethemet The Ethemet tab allows the user to set the V Station s Ethemet settings including IP address ICP port and DHCP settings see Figure 78 VenAdmin verson 5 10 and later will allow the userto change the V Station s assigned IP address Future versions will allow DHCP options Although VenAdmin will not allow invalid IP addresses the user should be careful not to assign the V Station s IP address to one that has already been assigned You may also discover the unique MAC address assigned to the V Station in this tab This unique 6 byte sequence has been assigned at the factory and is not changeable Document 430 00127 18 114 Copyright 2005 Bioscrypt Inc All nghts reserved bloscrypt APPENDIX F V STATION OPERATIONS Station Manager Clock Ethernet Biometric Schedules Menus Access Schedules Holiday Schedules MAC Address TCP Options 00 90 C2 COFS 84 Current IP Address 10 1 5 235 On Boot Up Transaction Log Cancel Apply Figure 78 V Station Manager Ethernet Tab Biometric Schedules The
69. e you may specify the IP address and ICP port Below this is a list of fimware versions for the curent unit Components that do not Document 430 00127 18 25 Copyright 2005 Bioscrypt Inc All nights reserved bloscrypt NETWORK SETUP AND CONFIGURATION apply such as an ESI on a V Prox will show N A Also listed is the template type used by the curent unit either one to one or searching To go straight to the Unit Parameters dialog click on the Basic button or double click the unit in the network tree If the current unit is a V Station clicking the V Station button will open the V Station Managerdialog Ethernet Settings IP Address um TCP Part Firmware Versions Algorithm A4 BU 5711 Kerel Kr 50 6711 P1 50 E2 040 LM 7 50 ET1 20 EI Template Type e aE C Searching Set Parameters Basic VS tation Figure 17 Advanced Options Other Options When a Broadcast icon Is selected in the Network Tree the Broadcast button becomes enabled Double clicking it will bring up the Broadcast Parameters dialog This will broadcast to all units on that particular port To Test Communications click on that button to bring up the following dialog Figure 18 Test Communications Settings Transmit ID fo Broadcast ID 1 Serial Port Communications 4 rEthermet Communications Comm Port IP Address 0 0 Baud Rate 57600 Baud Search TCP Port 10001
70. e cument name associated with the ID not necessanly the name at the time the transaction was logged If the template was changed or replaced with a different template using the same ID the name shown would be mislea ding e Mark as Read Each entry read will be marked as such read entries show up with a underthe Read column e 24 Hour Time All entries in the log are time stamped in 24 hour time but can optionally be shown in 12 hourtime Other Transaction Log options include the ability to Erase ALL entres Erase Read entries and Save the data shown in the window to a file The format for this file is comma delimited CSV and can be imported into nearly all spreadsheet and database applications If you have specific entries highlighted you may optionally save only those entries to the file The data saved to the file will be exactly what you see in the screen except that the column names are not abbreviated Finally at the bottom right of this screen the total number of transactions read out of the total numberon the unit is Shown NOTE When retrieving transaction logs via the Ethemet port firmware version 7 10 may have difficulty with more than 1 000 entnes at a time This inconvenience will likely be fixed in future versions Section F 2 VenAdmin vs Keypad Configuration It hasbeen ourgoalto duplicate on the keypad as much of the functionality found in VeriAdmin as possble We have tried to create a one to one mapping o
71. e factory default contrast level Again the APPLY button must be pressed to apply the changes Fimware version 7 40 introduced the Custom Verification Entry Mode This mode when enabled causes the V Station to ask the user fora custom entry code when verifying This code must be between O0 and 254 255 indicates a user timeout and is logged in the transaction log The number has no significance to the V Station but is user defined Access Schedules V Stations with firmware v7 30 or later support individual user access schedules Up to 64 unique weekly schedules may be set except for schedules 0 and 59 63 which are reserved When enrolling a new user the template may be assigned one of these schedules either via VenAdmin or from the V Station menu All V Stations have two built in schedules that may not be changed Schedule O the NO ACCESS schedule and Schedule 63 the ALL ACCESS schedule By default new templates and those created with prior fimware versions are assigned schedule 0 However the template will not have its access restricted until User Access Scheduling is enabled forthe whole unit via the radio button in this dialog Units shipped from the factory have accessscheduling disabled Document 430 00127 18 118 Copyright 2005 Bioscrypt Inc All nghts reserved bloscrypt APPENDIX F V STATION OPERATIONS Station Manager Clock Ethemet Biometric Schedules Menus Access Schedules Holiday Schedules
72. e from an operations perspective because in most cases an installation will always want to keep the schedules synchronized between units For example if a user in actuality his template is assigned schedule 4 say 12pm until 4pm the V Station located at the main entrance should generally have the save set of schedulesasthe back entrance so that the usercan gain accessat consistent times NOTE Please see the next section regarding holidays as they are actually a subset of Access Scheduling and work in conjunction with these schedules Holiday Schedules Although displayed on a separate tab of the V Station Manager Holiday Schedules are actually a component of Access Schedules Where Access Schedules grant the user access dunng specified times holidays actually define exceptions to these schedules where a user will be Denied access However holidays will only be in effect when Access Scheduling is enabled in that tab NOTE Holiday schedules may NOTbe applied uniquely to particular schedules rather but apply to ALL schedules A template may either observe holidays or not but schedule x and schedule y will both be affected by holidays Rememberthat holidays take precedence overaccess schedules Up to 50 user defined holidays can be specified less 4 reserved holidays A holiday schedule consists of a specific year month and day such asJ anuary 1 2003 for New Years Day 2003 and a time interval for that day By default a holiday
73. e room for new ones For this reason if an admin would like to store all transactions occumng on a V Station it is imperative that the log be downloaded before 4 096 entries have accumulated When the unit begins to approach 8 095 entries the first 4 096 will be permanently erased This ensures that transaction logging never stops To read the Transaction Log from the V Station press the Read button The data retumed is dependent on the options selected in the Read Options section in the lower left Because the transaction log stores a lot of information for each transaction thislog can quickly become quite large especially when the product is used in a busy environment with a large population of users Downloading 4 096 entries at 20 bytes per entry is 81 920 bytes At a baud rate of 57600 this should take approximately 11 seconds At 9600 this would take more than one minute To limit the download time and retrieve only the most 122 Copyright 2005 Bioscrypt Inc All nights reserved bloscrypt APPENDIX F V STATION OPERATIONS recent N entries type a number into the All entries limit to field If left blank ALL entries will be retumed To read only unread entries select the New Entries Only radio button Otheroptionsavailable are e Show Names For each entry with a valid associated template ID VenAdmin will poll the unit for the currently associated name Note that this requires much more time and also that this is th
74. each index asa 1 1 venfication which is time consuming To reset all GPI values to default click on the Reset GPI Parameters button Document 430 00127 18 56 Copyright 2005 Bioscrypt Inc All rights reserved bloscrypt UNIT PARAMETERS General Purpose Output All Ven Senes and OEM units have general purpose output TIL capability V Stations and OEM units have both GPO O0 and 1 available while other Ven Series products only have GPO 0O available When configured certain GPO actions can activate GPO linesO 1 orboth The possible actions include Enroll Completed When a userhascompleted an enrollment Enroll Initiated When a user has initiated an enrollment but has not placed a finger Verify Passed Aftera successful verification initiated from any source Venfy Failed Aftera failed verification initiated from any source Finger not Detected Whenever a finger is expected by the unit but not detected V Station Admin Mode When a user enters admin mode from the keypad on a V Station with full administrative privileges V Station Enroll Mode When a user enters admin mode from the keypad asa V Station Enroller Delete Attempted When a template delete is initiated from any source This appliesto templates stored on the device only Unit Boot up When a unit is booted up either from a power cycle or from a soft restart Any of these actions if configured can triggerthe line active for the Duration specified d
75. each person has unique fingerprints Using fingerprints as a means of identification ensures a unique identifier for each tracked user and protects users from the vulnerabilities associated with lost keys or identification cards After installing Bioscrypt s product in your application your company will be able to accurately identify track and automatically act according to each individual sidentification and permissions Document 430 00127 18 1 CC opyright 2005 Bioscrypt Inc All rights reserved bloscrypt TERMINOLOGY Terminology This document is intended for use with Bioscrypt s Ven Senes product line including the V Prox V Hex V Pass V Smart and V Station hardware products These five products share many common aspects When this manual refers to the V Prox unless specifically stated otherwise the entire Ven Senes is being described This document also refers to Bioscrypt s MV1100 and MV1200 The MV1100 MV 1200 is the intemal hardware biometric engine that is the core of all Ven Senes products This circuit board contains the DSP processor support hardware and interface to a variety of fingerprint sensors The MV1100 MV1200 also contains firmware the low level software that controls the mathematical instructions that perform the actual fingerprint enrollment and venfication processes This document describes a particular version of fimmware see title page Please ensure that the version of fimware found on your Ven S
76. each template was removed correctly If the template was NOT removed another DELETE attempt will be made After step 3 each unit will be polled to confirm that the template now exists on the each unit If the template does NOT exist on a particular unit the TRANSFER function will be retned Please see Appendix B Broadcasting for RS 485 Networks for details of the benefits and potential issues with using Broadcast commands If the OVERWRITE checkbox is selected any existing templates on the units with the same ID and Index will get overwritten To keep the originals on each unit uncheck this box Edit PC Template To edit a template residing on the PC click the Edit PC Template button A standard Windows File Selection window will open to allow the userto choose the template file to edit Use the TYPE dropdown box to select between displaying Venfication Document 430 0012718 38 Copyright 2005 Bioscrypt Inc All rights reserved bloscrypt TEMPLATE MANAGER templates TEM and searching templates IMS V Pass V Station Searching Once a template has been chosen the Template Viewer window is opened as mentioned earlier fM Template Viewer 1 0 Make Duress Finger Password Only ID Index fe 0 Ewtended ID Envolee Name JohnDoe Access F User Type uei x Select Observe Holidays Pastword ri Wiegand p Vine Wiegand String ae Ta m
77. ed ID If the ID is not found or if the VERIFICATION attempt FAILS no Wiegand output is sent To the controller it will appearasif nothing was presented If the ID is valid and a SUCCESSFUL VERIFICATION is performed the original Wiegand INPUT sting with SITE code Parity etc will PASS THRU to the WIEGAND OUIPUT unchanged Although this PASS THRU option does not allow FAIL STRINGS changing the SITE code orchecking PARITY it does provide a mechanism forusing a wide variety of Wiegand formats Document 430 00127 18 49 Copyright 2005 Bioscrypt Inc All rights reserved bloscrypt UNIT PARAMETERS Creating USER DEHNED PASS THRU Format Options The user has the ability to add custom defined PASS THRU formats to the VenAdmin software These will be added to the dropdown list in the UNIT PARAMETERS dialog box In the installation directory there is a file called WFORMAT DAT that contains all displayed Wiegand formats WFO RMAT DAT contains both pre defined formats and PASS THRU formats See below for and example contents of that file All lines that begin with are ignored PRE DEFINED formats follow the format WIEGAND MV1100 Code lt bits gt lt text_string no spaces WARNING These should NOT be changed or added to unless directed by Bioscrypt TECHNICAL SUPPORT Any modifications to this section could cause unreliable Wiegand communications using PRE DEFINED formats The next section shows the PASS THRU Fo
78. ed by ridgelines with the tightest curvature and most unique content Although the entire fingerprint has significant data the core is the most data intensive area and extremely important to the Bioscrypt algorithm Scanning an Image When the unit properly reads a fingerprint it looks for image quality and fingerprint content When a raw image is collected from the sensor the Ven Series unit searches for the fingerprint core Content scores are based upon the amount of non ambiguous data in the region of the core Ihe higher the content the greater the degree of useful information See Section A 3 fora thorough discussion of content Quality scores are based on how well the ridge pattem is defined within the Document 430 00127 18 75 Copyright 2005 Bioscrypt Inc All nights reserved bloscrypt APPENDIX A QUALITY AND CONTENT image For best image quality be sure that the sensor window is clear of dirt residue or other matenal that can block the unit s view of the fingerpnnt See Section A 3 fora thorough discussion on quality Once the image is scanned the unit then creates and stores the resulting fingerprint template Storing User Templates on the Unit The Ven Senes unit recognizes users by matching curent images to stored templates of previously enrolled fingerprints Along with the fingerprint the V Prox and V Flex require a proximity card with a unique userID number The Ven Senes readers allow associating
79. eeeeeseeessseeeeeeeeeeuuaaaaseeeeeeeeessaaggaaesess 49 Creating USER DEFINED PASS THRU Format O ptions eere 50 se M ecSriom T 51 Global Security Threshold 2 00 eccccssessseeeceeeeeceeeeeseeeceeeeeeeeeaeaasseeceeeeeeseaaeaaaeeeeeeesesssaagas 52 BOMeETIC Venica UON 52 Finger Detect V Passand V Station Searching Only eee 52 Template Security eeeeesssssssseeeeeeneeneennennnnnnnnnnnn nennen nnn rrr nnn nnns annee nnns 53 M lit FIngerwvernTiedLtlobbamenvxksescvisa TvoEEEUN REG aa quis E SRI a o0 53 Password Verfication V Station only essen 53 Duress Finger MOC cccccccccssssssseeeeeeeeceenaeusseeeeeeeeeesauaeuseeeeeeeeessuaaaasaeeeeeeeessssaaassseeeeeess 53 Verification Action Response Tab sese nnnnnnnnn nnns 54 nemu uiecueali Ujdeec ETT B 54 Verification Polling Mode eeeeesseeeeeennnnmmnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnn nnns 55 GS GAC Tal PU Ose Hr 55 Genera Pumos Aas soe pat ne nanan E 56 General Purpose OUutpUt ssssseeeeeeennnnennnnnnnnnnnnnnn nennen nnn nnn nnn nnn nina 57 Boadcast Parmele ennnen neni nenemeinadseanakes 58 Advanced EM ONO a E a E E E RU iankisannaanthe 59 EED TADE SO UNG aere E E E EAE E E E E MM PRU 62 APNOEA e E S 63 vendi on 050 I T O LESER
80. efault 600ms All GPO parameters can be reset to defaults be clicking on the Reset GPO Parameters button By default the units ship with both general purpose input and output actions set to No Action With fimmware v7 30 orabove Document 430 00127 18 57 Copyright 2005 Bioscrypt Inc All nights reserved bloscrypt BROADCAST PARAMETERS Broadcast Parameters The Broadcast window allows you to modify settings on all units in a networked environment at the same time See Appendix B Broadcasting for RS 485 Networks Under most circumstances you will use this window when communicating over the Host Port recall that the Aux Port primarily is for communicating with a single unit You will note that the window hassimilar parameters asthe Unit Parameters window The VeriAdmin Network Vlssitaliciulsiiuds Setup baud rate will Host Port Baud Rate update automatically Bex Enter the Wiegand settings to be broadcast More advanced features such as uploading custom formats can be accessed in the Unit Parameters dialog Siard 2i b i C Very Lon Fahrg0u LL Tum Delete a Template ID AM Site Code ID Stat Ba Enter the ID number D OnFal Send iners Paty Numi Bis and Index number oa f d to be deleted haek the sah Pulse widih tuseci Pulsa iniareal ssec Esoadcant all Indices box Debit al ircices c thes ID g fo c m AL Winger wie dina Lie dein D elebe
81. elete ID types are intended for installations using proximity rea ders Basic users should be assigned to the User ID type e Finger Duress Finger The finger enrolled for the template should always be specified Designating the finger as a Duress Finger is a special case Document 430 00127 18 IL Copyright 2005 Bioscrypt Inc All rights reserved bloscrypt CONCEPTS OF OPERATION making the template a Duress Template When Duress Mode is enabled see Unit Parameters section and this particular finger verifies a duress condition is recognized by the device and specialaction istaken e Access Schedule Observe Holidays On V Station units each template can be assigned an access schedule which dictates when the user will be granted accessas well as whether the user should be granted access dunng holidays Please see Editing Templates and Section F 1 Using the V Station Managerfor more details e Extended ID Some Wiegand formats utilize IDs greater than 32 bits in length which are stored in the Extended ID field fora list of valid ID values please refer to Tablel As distinct from pre 6 0 VeriAdmin this field can be used at the same time as the Password and Employee ID fields Please see Appendix A Quality and Content for a technical description of what constitutes a good enrollment A quality enrollment will ensure peak performance from the Bioscrypt fingerpnnt recognition algorithm Multiple Readers If your
82. emit dropdown selection box chooses the function Broadcast Parameters enroll venfy idle etc to modify Below that is Cice Emral f Advanced Enrollment each possible state forthe selected operation Line Su eU l represents GREEN LED Line 2 represents RED LED Update Firmware and Line 3 represents the Buzzer Reset Unit to Factory Defaults Template Conversion Verification Action Response Wiegand Utilities Smark Security Settings Figure 43 LED Table Settings Menu In the example shown the ENROLL function is chosen The first two states are disabled since they have no meaning forthe ENROLL function Both Line 1 and Line 2 are chosen to indicate d Line 1 Line2 Line3 Duration Interval PLACE FINGER This will tum GREEN and RED LEDs Ver Seres Products GREEN RED BUZZER on creating an AMBER LED Settings Waiting State E E E Wave Card The REMOVE FINGER operation is signaled by Clearing all LEDs thus making the LED tum off Place Finger Remove Finger Finger Mot Detected Pass If a FINGER NOT DETECTED happens then the RED LED is shown for 600 milliseconds Fail TTT E LE ce ce Error Figure 44 LED Table Settings Both tuming the LED GREEN and sounding the BUZZER for 600 milliseconds indicate a PASS To indicate a FLASHING LED choose the duration and set the INTERVAL time 1350 Is nomal The USE TABLE checkbox indicates whether to use these setting for non Wiegand initiated commands
83. enclosure will protect Ven Senes devices in most environments but not all The Customer is responsible for determining whether the offered enclosure will appropnately shield Ven Senes devices in their specific installation Product failures resulting from exposure to moisture dust other contaminants and temperatures outside stated operating range even if an enclosure is used are not covered underthe product warranty This warranty is exclusive and in lieu of all others whether oral or written expressed or implied Bioscrypt specifically disclaims any and all implied warranties including without limitation warranties of merchantability and fitness for any particular purpose No Bioscrypt dealer agent or employee is authorized to make any modification extension oraddition to this warranty Document 430 00127 18 iv Copyright 2005 Bioscrypt Inc All nghts reserved bloscrypt Bioscrypt Retum Policy and Procedures Bioscrypt must be notified within thirty days of the date that a defect is discovered Bioscrypt will then issue a Retum Matenal Authonzation RMA number which the Customer must include with all comespondence and display on the outside of the shipping container when retuming the product Any products retumed later than 30 days after issuance of an RMA may be subject to review as to whether the authorization to retum is still warranted All Bioscrypt products must be shipped freight and insurance prepaid in the original sh
84. ended steps are L 2 Supply powerto the proper wires in the pigtail or Weidmuller connectors on the rear of the Ven Senes unit Consult the Installation Guide fora wiring diagram When power is applied the front LED will glow green and the top LED will blink amber then tum OFF for V Prox V Flex V Smart V Station or remain ON for V Passand V Station Searching units Connect the unit s RJ 11 RS 232 bottom port to your PC s serial port using the HJ 11 programming cable provided with the unit Access the Network Configuration Manager window by clickng on the network icon orusing the menu Click the Add Unitbutton and establish communication You can now set the Network ID on the reader Double click on the icon for that unit in the Network Tree bringing up the Unit Parameters dialog In the Communication Tab type the desired ID number in the Assign Unit Network ID field Press the Apply button to make the change Note this will change the ID in flash on the reader and will also modify the transmit ID that is being used by the PC so that you may continue to communicate The General Tab of this dialog box showsthe current communication settings Select the appropriate baud rate from the Host Port Baud Rate drop down list 9600 is recommended Keep in mind that you are curently talking over the AUX port but you are changing the Host Port settings that will be used when you connect to the unit through the Host Port wires on the back
85. enes reader s matches this version If the version does not match this document please contact Bioscrypt Technical Support and ask for the manual comesponding to your version of firmware Several Ven Senes products contain a component referred to within this document as the ESI Extemal Storage Interface It isa hardware component coupled to a MIFARE oran ICLASS smart card reader or possibly another device in the future The ESI also contains fimware that may be upgraded through the VenAdmin software This component stores many variables associated with smart card usage such as SiteKeys passwords card layouts and other settings It handles all communication with the reader and is reader hardware dependent i e there is one version for MIFARE a k a Gemplus readersand one version for HID iC LASS readers The V Station product line also introduces two new components mentioned in this document the Communication Manager CM and the Kit These are both micro controllers found within the V Station and each one contains fimware The CM fimware version will always be in alignment with the MV1200 firmware version because these components work closely together The CM is responsible for routing communications intemally within the V Station controlling the real time clock and managing the LCD menus Ihe Kit controls the keypad buzzer tones and LCD contra st Document 430 00127 18 2 Copyright 2005 Bioscrypt Inc All rights reserved b
86. ep of the wizard see Figure 52 This is the last chance to confirm the contents of the fimware file and that the unit is indeed ready for updating To start the update click Start Update After this VenAdmin will backup templates if that option was chosen perform the Stepper update if needed perform the firmware update and finally confirm the successful update Document 430 00127 18 67 Copyright 2005 Bioscrypt Inc All nights reserved bloscrypt UPDATE FIRMWARE Bioscrypt Firmware Update Wizard Confirm Firmware update Veri amp dmin is now ready to begin updating the unit s Firmware Firmware Contents ESI MIFARE Version Firmware E 2 0441 ESI CLASS Version Firmware EZ U3l Kit Firmware KT 1 21143 Communication Manager EM Firmware Ch 7 30515 MVTOLD Firmware KP 30815 This can take up ta 10 minutes to complete depending on how many components are being updating and whether broadcasting or not The unit should not be touched during the update and power cannot be interrupted otherwise the unit may become inoperative To begin click Start Update Cancel Figure 52 Firmware Update Wizard Step 4 The fimware update process can take several minutes to complete if updating a single unit and up to ten minutes if broadcasting the update During this time the unit s should not be disturbed and power must remain on They will be unable to respond or perform verifications Bioscrypt recommends
87. ess bar completes The new values will be disolayed and the VenAdmin software will ask if you want to see a test image With the finger still on the sensor select YES An image will be scanned and displayed If the image looks good choose YESto accept the new values Authentec Sensors To perfom this task the user should NOT place their finger on the sensor of the reader Press the CALIBRATE button The TESTIMAGE button will scan and display a fingerprint image 63 CC opyright 2005 Bioscrypt Inc All rights reserved bloscrypt UPDATE FIRMWARE Update Fimmware Choosing the Update Firmware menu veriAdmin v5 00 i i File Configure view Help item will allow the firmware on all of the i Network Setup a ou readers DSPs to be field updated It is i eee A recommended that only advanced users Broadcast Parameters attempt to perform this operation Please eres call Bioscrypt Technical Support with any p TASET questions or if attempting to update a a NE RS UL unit with a firmware version below 2 0 verification Action Response Wiegand Utilities V Smart Security Settings Figure 47 Update Firmware Menu In VenAdmin v5 30 and above a firmware wizard will guide you through the update Bioscrypt Firmware Update Wizard Welcome to the Firmware Update Wizard zm This wizard will help your Upgrade the firmware for any Yern Senes or OEM unit Broadcast the firmware update to a network of units Backup any templates on the u
88. ey the same but entera 1 forthe Secondary SiteKey This will disable the auto update feature and any remaining smart cards with cat on them will no longer work As of VenAdmin version 4 4 this can simply be done by un checking the Auto Update SiteKeys checkbox What Happens if FORGET My SiteKey DO NOT LET THIS HAPPEN If an Administrator forgets the Primary SiteKey then all previously created smart cards will continue to work but the following will happen They can no longer create new smart cards They will not be able to READ templates from curment smart cards They will not be able to CHANGEthe SiteKey on the V Smarts The V Smarts will ha ve to be retumed to Bioscrypt for reprogramming and once reprogrammed the previously enrolled smart cards will no longer be usable What Happens if Someone Else Leams My Installation s SiteKey SiteKeys need to be protected just like computer passwords and should not be told to unauthorized personnel In the event that the SiteKey has been compromised Document 430 00127 18 111 Copyright 2005 Bioscrypt Inc All nights reserved bloscrypt APPENDIX E SMART CARD SITEKEY MANAGEMENT follow the steps defined in the previous How do Change the SiteKey if Already Have a User Base of Previously Created V Smart Smart Cards section to change the SiteKey and automatically update all userbase smart cards Whatis the 1 Way Hashing Function Option In VenAdmin for SiteKeys VenAdmin allows
89. f Operation The V Prox The V Prox integrates an industry standard proximity card reader with Bioscrypt s MV 1200 fingerpnnt verification technology A typical operation is described below e A userwavesthe proximity card nearthe front of the V Prox e The ID number isread from the intemal proximity card reader e The ID istransferred to the V Prox o Ifthe ID isinvalid the LED on the top of the V Prox will glow red o If the ID presents a valid previously enrolled template the LED on the top of the reader will glow amber indicating the user should place their finger on the sensoron the top of the reader e he User should place the correct finger on the scanner using the Bioscrypt Ridge Lock e The amber light will tum off signaling the finger can be removed e The scanned image is compared with the data that is stored under the ID number in the memory of the V Prox o Ifthe verification is positive the top LED will glow green and the unit will emit an audible beep o If the authentication fails the LED will glow red and no beep will be generated e When authentication is successful a Wiegand sting that contains the site code and ID number read from the proximity card is sent out for use by a standard doorcontroller e Optionally the V Prox can be configured to send out a pre determined failure sting wheneveran unsuccessful verification occurs The V Prox has several serial communication options It is equipped with a RS
90. f options found in VenAdmin and those found in the menus on the V Station However due to the 80 character 4 line limitation of the LCD screen some options were just not practicalto implement through a menu However future versions of the product may include additional menu options For more information on navigating the menus please see the V Station Operator s Manual Section F 3 V Station Security and Admin Levels With the introduction of the V Station product comes two new User Admin levels for Document 430 00127 18 123 Copyright 2005 Bioscrypt Inc All nights reserved bloscrypt APPENDIX F V STATION OPERATIONS templates V Staton Enroller and V Station Admin The V Station Enroller may only add new non Admin level users to the device and will be shown a limited Admin menu when entenng the menu system on the unit The V Station Admin has full accessto the V Stations menus and hasthe authority to delete any other user enroll additional admin users delete the Transaction Log and configure the V Station system communication and security options Other Ven Series products will ignore these user levels as they do not apply to those products they will be considered the same asregular User Level NOTE When the V Stations are shipped from the factory no Admin user exists on the device and anyone can enter the Admin menu system Bioscrypt recommends immediately enrolling a userand assigning him her admin level pnvileges Of co
91. fication process on the unit Customers wishing to implement this behavior should consult the MV1200 DLL Manual or the MV 1200 Serial Interface documents provided with the Bioscrypt SDK General Purpose I O Tab The final tab in this dialog allowsthe userto configure various actions to trigger based on the General Purpose Input Output TIL lines commonly referred to as GPIO In the top section a Veri Series unit can be configured to automatically perform certain actions when GPI input line O 1 or both is activated Ihe bottom section controls which actions will cause the unit to set various GPO output line s active and for how long Document 430 00127 18 55 Copyright 2005 Bioscrypt Inc All nights reserved bloscrypt UNIT PARAMETERS r General Purpose Input line Action Triggered l r Min Duration gt r For Enroll Actions 200 ID 100 Max Ind f5 GPI 0 Verify ix SS GPI 1 Seach s r Multi Signal Tol r Trigger On GPI O1 NoAcin 50 ms Signal Rising Edge M General Purpose Output Line Triggering Action GPO 0 Line Trigger m Duration GPO 0 Errol Completed Reset GPO Parame ters GPO 1 Verify Passed eoo ms GPOOH NoActon x Reset GPI Parame ters Figure 36 Unit Parameters Dialog General Purpose I O General Purpose Input The TIL general purpose input lines are available only on OEM and V Station units therefore this section will only
92. forthe Current Key How does iCLASS differ from MIFARE as it pertains to SiteKeys There are several key differences between MIFARE and iCLASS SiteKeys While the ESI stores up to 120 bits of a SiteKey the smart cards do not MIFARE compatible cards use 48 bits for keys while iC LASS uses 64 bits Also the last bit of each byte in an IC LASS SiteKey is ighored by the HID s intemal hashing routine The effect of this is that a password of mate will be the same as late because the m isonly one off from l in the last bit This anomaly will not be apparent however if ESI hashing is used because in that case all 120 bits stored on the ESI will hash with the unique card serial numberto create a unique 64 bit SiteKey Document 430 00127 18 112 Copyright 2005 Bioscrypt Inc All nights reserved bloscrypt APPENDIX F V STATION OPERATIONS Appendix F V Staton Operations The V Station is Bioscrypt s newest member of the Ven Senes family The distinguishing feature of this product is its built in LCD display and keypad allowing for administration and template enrollment nght at the reader Therefore a PC running VenAdmin is not required However VenAdmin has been redesigned to support this product along with all of the Ven Senes products and is perhaps an easier method for configuring the unit Everything that is possible from the keypad is possible through VenAdmin but not necessanly the reverse is true Most common features such
93. ful verification on the second templates requires 1 5 seconds and so on Section A 2 Proper Finger Placement The basics for successful operation of the Ven Senes units are simple but important System performance improves dramatically with consistent finger placement It is important to make sure that the position of the finger allows the unit to record the Document 430 00127 18 76 Copyright 2005 Bioscrypt Inc All nghts reserved bloscrypt APPENDIX A QUALITY AND CONTENT unique features of the pnnt Here are the steps to follow for trouble free fingerpnnt recognition Bioscrypt has designed the Ridge Lock to create simple user instruction and consistent finger position With the fingertip raised slide the finger across the Ridge Lock until it locks into place within the first indentation of the finger Next lower the finger onto the sensorand apply moderate pressure Common mistakes Correct finger placement is a significant component for reliable fingerprint imaging The following list some common mistakes to avoid e Sliding the fingertip into place instead of lowenng it onto the sensor will cause distortion of the fingerprint and will degrade image quality Keep the fingertip raised while locating the Ridge Lock and then lower the fingertip e Rotating the finger into position also will cause distortion of the fingerprint subsequently making verification less reliable e Positioning the finger to o
94. g the SAVE TO SMART CARD button will then attempt to write template data to the smart card This process involves a SiteKey verification window to appear see Appendix E Once the proper SiteKey is entered the user is prompted to place the smart card near the V Smart When this is done the template isthen copied to the smart card Templates on Device Edit Update List John Johnson Delete Quick Enroll Verify Export List Transfer From Unit gt PC From Unit Smartcard From PC gt Unit From PC gt Smartcard Unitto Unit RES e E Verity PC Template EEA Edit PC Template Select Deselect All iv Show Names Admin Ls Broadcast PC Templates 1 of 3550 Templates Used Verify Broadcast M Overwrite Figure 64 Template Manager dialog Document 430 00127 18 89 CC opyright 2005 Bioscrypt Inc All rights reserved bloscrypt APPENDIX D V SMART OPERATIONS Section D 3 Enrolling a Template Directly to a Smart Card Using VenAdmin the smart card Enrollment process is very similar to a typical enrollment procedure as described in the Quick Enrollment section or in the Advanced Enrollment section Once a finger is registered and a template created and accepted the TEMPLATE VIEWER window is displayed as described in the Template Manager section However for release v4 0 and above the EDIT TEMPLATE window has been modified to allow for saving the template directly
95. ghts reserved bloscrypt APPENDIX D V SMART OPERATIONS V Smart Figure 63 Proper Smart Card Placement Section D 1 HOST Mode versus SLAVE Mode Operation The V Smart has two modes of operation that the Administrator needs to be familiar with These are HOST mode and SLAVE mode HOST MODE HOST mode is the normal mode of operation and simply means that the V Smart is waiting fora smart card to be presented to the unit When a smart card is seen the card SiteKey see next Appendix is compared with the V Smart s SiteKey If they match the template is read from the card and the V Smarts attempts a Verification operation The top LED will tum amber indicating the user should PLACE FINGER ON SENSOR When a finger placed a live image Is recorded When the live image is done recording the top LED will go off At this time the user can remove their finger The V Smart will then compare the live image against the template read from the smart card If a successful match made the top LED will tum GREEN A RED LED indicates a failed comparison Once a Verification attempt has been made the card must be moved away from the reader and then brought close again to re attempt Verification SLAVE MODE SLAVE mode is when the V Smart is communicating with the PC When a sernal command is received by the V Smart on the AUX communications port SLAVE mode is automatically entered While in SLAVE mode the V Smart will NOT make Venfica
96. hat Happens if FO RG ET My SiteKey What Happens if Someone Else Lea ms My Installa tion s Site Key What isthe 1 Way Hashing Function Option in VenAdmin for Site Ke ys How does iC LASS differ from MIFARE asit pertains to SiteKe ys Whatis a SiteKey A SiteKey isa password used by VenAdmin the V Smart and the smart cards Each of the 3 must use the same password to communicate and transfer information If the SiteKey stored in the V Smart does not match the SiteKey used by the smart card that V Smart will not be able to read or write to that smart card By checking the SiteKey each time the V Smart ensures that only authorized smart cards are used at a specific installation Similar to a computer logon password if the smart card s SiteKey does not match the V Smart s SiteKey that card will not be allowed to be used by that unit The V Smart uses a maximum of 120 bits 15 characters forthe SiteKey However up to 32 characters may be used for SiteKeys if software hashing is used Typically the Administrator will set all V 5mart s at a single installation to the same Site Key Document 430 00127 18 106 CC opyright 2005 Bioscrypt Inc All rights reserved bloscrypt APPENDIX E SMART CARD SITEKEY MANAGEMENT Why do I Need a SiteKey Each installation must set their own SiteKey to distinguish their V 5mart smart cards from every other installation of V Smarts If SiteKeys are not used then any V Smart would accept
97. hat the card hasbeen enrolled Delete Command Card To delete a user il Wave the Delete Command Card nearthe front of the unit The light will glow amber directing the Administrator to place his her finger on the unit If the Administrator is authorized to use the Command Card the light will glow green and the unit will beep Continue with the next step If not the light will glow red Retum to Step 1 orstop The light will flash red indicating the system is ready to delete the card Wave the user card to be deleted The light will glow green and the unit will beep indicating that the card hasbeen deleted Document 430 00127 18 41 Copyright 2005 Bioscrypt Inc All nights reserved bloscrypt UNIT PARAMETERS Unit Parameters The Unit Parameters dialog aidsthe Administrator in the following tasks Assigning a Network Identification Numberto a unit Setting a Global Secunty Threshold fora unit Ena bling Disabling Wiegand Formats Out Failure code and Site code Modifying the Host and Aux Port baud rates Changing the Host Protocol Viewing the current statuses and settings of the vanous ports Performing a Communications Test that will flash the top LED and beep the Current unit Password protecting the AUX port Setting of Wiegand PASS THRU formats Tuming off biometncs not recommended Setting other Biometnc Options Changing General Purpose Input Output Options GPIO The operation of this dialog is simple J ust se
98. he customer via e mail with a wrtten estimate of the aforementioned charges If any discrepancies arise between the final cost and the initial estimate the customer will be notified The customer shall approve any estimate for non warranty repairs or billable repairs and shall pay the estimated charges before the equipment is repaired In the event Document 430 00127 18 V Copyright 2005 Bioscrypt Inc All rights reserved bloscrypt the customer fails to either a pay the estimated charges within 60 days of such estimate or b arrange for retum of the un repaired equipment to the customer at customer s cost Bioscrypt will consider the equipment abandoned and will dispose of the equipment 30 Day Retum for C redit Bioscrypt is a leading biometric company specializing in fingerprint and verification systems We are confident that customers will be pleased with Bioscrypt products However if you are not and you purchased your merchandise directly from Bioscrypt new products can be retumed for credit within the first 30 days under the following conditions e You have received an RMA from Bioscrypt Technical Support and the item is retumed in accordance with the Bioscrypt Retum Policy and Procedures e Retum Itemsare accompanied by proof of purchase e Alloriginal materials accessories manuals CDs are retumed with the item e The item is in re sellable condition If there are any questions regarding re sellable condition B
99. heckbox will auto EE zr opel rur broadcasting over an Reda network ils atid D RR E zr E E a B fe peg e HET uns se oe e Hr r rr ar ar IEEE TIUS jT GE PTS z ions m E PEE ux pum gums READ ME Please define your Bioacrypt network by selechng checkboowes for each communicator pest vou intend lo use Checked ems vell show up in your network tree in the Network Configuration dalog This step must be completed before uniig can be added to the nehsork Figure 15 Network Setup dialog Network Configuration Manager After selecting which serial portsto use the Network Configuration dialog will present itself Figure 16 This menu is normally accessed via the network icon on the toolbar Document 430 00127 18 22 Copyright 2005 Bioscrypt Inc All nights reserved NETWORK SETUP AND CONFIGURATION Network Configuration Manager Xx Network Tree General Unit Settings mi 8 Bioscrypt Network Serial Mum The tree structure Hg Ethemet Trareni ID Enter the ID and shown here E Broadcast ae 3 name of the unit is a logical Comm 1 S7600 x 1 being added to representation Unit Type a the network of the network E dicat omm 2 x Mame E Broadcast Urk Stabus Communication Een Status ONLIME or NOT RESPONDING advanced Setings sere First click on a channel COM port or Ethemet then click the Add Unit button to add unit to the network
100. hird party application is used to read write any of the V Smart data or the same SiteKey isto be used forthe entire card the ESI SiteKey Encryption MUST use one of the un hashed modes for compatibility Please refer to the documentation from the manufacturer from whom you have purchased your Smart Cards ICLASS based V Smart Layout Manager This dialog will allow the user to define a custom layout for all iCLASS compatible 2 and 16 application smart cards Smart Card Layout Manager iCLASS HID iCLASS 2 Application Area Card HID iCLASS 16 Application Area Card L Bioscrypt Data L Locked 256 Blocks Total 1 2 amp pp Area 1 2 App Area 2 Pt LLL IL te ttt TT ET TE TT TT TT TT ee ea HA EL RH P 0 1 2 LI LTEETJT T T3 ELA ET 1255 ba Total Space Selected 832 Bytes HID Data Bioscrypt Data 033 v zN ETE f Unavailable L Starting Offset Rae Total Space Required 800 Bytes jf jut Cancel Figure 70 Smart Card Layout Manager iCLASS ILL BH NH E a NANNE au Ge et 3 4 This dialog will allow the user to define a custom layout for all iCLASS compatible 2 and 16 application smart cards Bioscrypt recommends that only advanced users attempt to configure the smart card layout Improper changes made to the layout may render the unit unusable with some smart cards This section should be read completely before attempting to change the default layout pro
101. i PC C35mat Card Cancel Figure 29 Template Viewer Within this window all template data can be modified and saved back to the PC by pressing the PC button within the Save To selection group Altematively you may save to the unit ora Smart Card if desired NOTE The filename is determined by the template ID numberand the template index number see Figure 29 If these are not changed pressing the Save To PC button will replace the previousfile If either value is changed a NEW file is created Document 430 00127 18 39 CC opyright 2005 Bioscrypt Inc All rights reserved bloscrypt COMMAND CARD MANAGER Command Card Manager Command Cardsallow administrators to add and remove user IDs directly from a unit without having to access the VenAdmin software This feature is used most often with the V Prox and V Flex products but can be used on any Ven Senes model Command cardscan be useful for creating and removing temporary visitors badges or administering the system when your PC is down or unavailable Click on the Command Card icon on the toolbar orselect the option from the menu to view a list of all IDs of command cardsforthe curent unit E Command Card Manager all aj Fax Enno ie Prox Delete IDs Lists all Lists all ENROLL DELETE Comand Cards Comand Cards Delete Entry Delete Enty amn oe Figure 30 Command Card Manager Administering Command Cards Creating Command Cards To create co
102. ication areas used by Bioscrypt are colored red After VenAdmin has read the sample card it will Know how much space has been allocated to each app area Areas with no space allocated orthose with keysthat do not match the curment SiteKey or default key will be disabled yellow bars indicate a SiteKey mismatch Areas may be selected and deselected by clicking on the buttons and as this is done the text below will indicate how much space Bioscrypt is using Note that you may not select more application areas than is required for space By default Bioscrypt uses Application area 1 in pages 1 2 3 and 4 Clicking the Reset button on the right sde and providing the SiteKey can restore this default layout This layout should work with default cards sent from the factory but to be sure this process of card discovery must be done to verify the la yout Once card discovery is finished and the 2 or 16 application layout has been configured as desired click the Set Layout button to finalize the layout and save it to the ESI VeriAdmin will not allow a layout that does not have sufficient space allocated Rememberthat changing the layout after some Smart Cards have already been created with a different layout may cause those cards not to work properly with the V Smart You will see a flashing or steady red LED on the unit when trying to verify or you will receive an enor in VenAdmin indicating that the ESI cannot recognize the layout Section D 5 Verifi
103. idge Lock into the first joint line on the finger An image is scanned and both the image and comesponding template are displa yed The finger may be removed when the amberlight goesout 6 Ihe Advance Enrollment tool will then choose the best template among the three and indicate which enrollment should be accepted A Advanced Enroll F1 Help User Information ID Index D Get Wiegand ID Wiegand String Smart Card SN Wiegand String wWiegand Sting Head Fingerprint Image Template Data Finger ZEN LR NN Ce ENROLL fi ee N acc ET ETRAS oon scar Cc i ENROLL ACCEPT ANN CC CONTENT CC x Finger f y AU Wal E T r Finger XH Ce ENROLL C 99 Accept enrollment or Re enroll EXIT Figure 40 Advanced Enrollment Recommended Choice 7 Repeat Steps 3 6 to Enroll additional sample templates A current template can be replaced by choosing the finger to be Enrolled and pressing the ENROLL button NOTE Users can indicate which finger by selecting the comesponding checkbox in the FINGER sub window The checkboxes represent the fingers asif both hands where placed flat on the display with fingertips touching as shown Document 430 00127 18 60 CC opyright 2005 Bioscrypt Inc All rights reserved bloscrypt ADVANCED ENROLLMENT in Figure 41 Figure 41 Advanced Enrollment Finger Selection Option 8 Although NOT recommended by Bioscr
104. ill ensure streamlined and reliable verification for users It is recommended that all four options be performed in the orderlisted above to maximize the performance of the device Content The Content score is based upon the amount of usable information the Ven Seres unit sees in the fingerprint Templates that are characterized by low content scores may result in elevated ratesof false acceptance Again the score is given in stars and ranges from zero to five stars in VeriAdmin with five being the most content and zero being the least Content scores of three stars and higher perform well with the Bioscrypt Algorithm In this range the algorithm has enough information to distinguish between different fingerprints with a high level of accuracy Templates with content scoresabove two starsdo not vary in terms of the enor rates Content scores less than three stars require intervention on the part of the Enroller or administrative software Sources of poor content include improper finger positioning and extremely bland fingerprints Rm D Pr x High Content Figure 62 High and Low Content Fingerprints If the content score falls below three stars Bioscrypt recommends the following options e Try re enrolling the same finger if finger positioning seems to be the issue see section A 2 Ensure that the user can comfortably place the finger on the sensor while maintaining the core region in the image e Fingerprint content can
105. ing template CAN BE converted to a one to one template e Aone to one template CANNOTbe converted to a searching template e Administrators need to be aware of these differences if BOTH products are used e A Ven Senes unit will rejecta template if the wrong type is sent This means that a V Prox for example will retum an enor if a searching template is sent to that Document 430 0012718 84 CCopyrght2005 Bioscrypt Inc All rights reserved bloscrypt APPENDIX C SEARCHING VS ONE TO ONE TEMPLATES unit The same is true if a V Pass or V Station Searching unit is sent a one to one template e Administrators should use caution when attempting Broadcast commandson a Mixed Network Broadcast commands will work but 8 above will apply Contact Bioscrypt Technical Services for more information For installations usng a Mixed network where both searching units and non searching units are used Bioscrypt recommends the follow guidelines to help manage templates e A PC based enrollment station using the VenAdmin software should be used for all template enrollments e All enrollments should be done using a V Pass or V Station Searching and stored on the PC e Searching templates can be converted to one to one templates using the VenAdmin Software see the Template Conversion section After this process the Administrator will have both a searching and non searching template for each user e Use the Bioscrypt designated ex
106. iometric Schedules Tab Figure 80 shows the dialog displayed when you click one of the edit buttons Biometrics Scheduling Tuesday m Key C Biometrics ON O Biometrics OFF r Instructions Help m Apply Schedule Entire Week Weekdays Mon Fri Cancel Clear Intervals Figure 80 One Day Biometric Scheduling Dialog This dialog allows the Administrator to define one or two time intervals where Biometric verification will not be required for that particular day of the week Clicking on the nght side of the dialog and dragging the mouse either down or up may add intervals Intervals may be moved by clicking anywhere on the red bar and dragging the entire interval up or down To change the start or stop time for an interval position the mouse at the top or bottom edge of the interval and drag it up or down Finally to delete an interval merely click on it and press the DEL key You may also remove all intervals by clicking the CLEAR INTERVALS button at the bottom Document 430 00127 18 116 Copyright 2005 Bioscrypt Inc All nights reserved bloscrypt APPENDIX F V STATION OPERATIONS If a schedule is to be repeated throughout the entire week or just during the weekdays it can be automatically applied to those other days of the week by clicking the appropnate option under the APPLY SCHEDULE box After the schedule has been set up as desired press the OK button to retum to the
107. ioscrypt will have the final decison as to whether an item can be retumed exchanged and if a restocking fee will apply If you did not purchase your product directly from Bioscrypt Inc please contact your retailer fortheir retum polic y Document 430 00127 18 vi Copyright 2005 Bioscrypt Inc All rights reserved bloscrypt Notices The Ven Senes line of products has been tested for compliance with all applicable intemational standards The resulting approvals are listed below and are additionally printed on the labeling located on the rear panel of the product V Flex FCC UL294 CSA cUL CE V Prox FCC UL294 CSA cUL CE under R amp TTE V Pass FCC UL294 CSA cUL CE V Smart FCC UL294 CSA cUL CEunderR amp TTE V Station FCC UL294 CSA cUL CE under R amp TTE The power supply offered by Bioscrypt is CE and CSA approved and UL listed For more information on approvals notices and declarations of conformance for all Ven Senes products please see Appendix A and B within the Ven Senes Installation Guide Important FCC CE and R amp TTE information is listed there Document 430 00127 18 vii Copyright 2005 Bioscrypt Inc All nights reserved bloscrypt Table of Contents Venr Ser es Operations Maitland dandas ean esa dac bw M dad VU ema V Prox V Flex V Pass V Smart V Station sese ldem P Tadema kORO TIOS cire Bl cel ig MMMMMMMEEEEEE AmSAVT MTVJ L i
108. ipping container or equivalent A written description of the defect together with a copy of the invoice and the name of the Dealer who sold the Bioscrypt product must be shipped with the product All defects must be reproducible at Bioscrypt s location to qualify forthis limited warranty For shipping addresses and retum merchandise authorization contact Bioscrypt Technical Support Warranty repairs do not re initiate the warranty penod For repaired orreplaced productsthe warranty on the replacement unit isthe remainder of the warranty on the original product or 90 days whichever is longer All repairs are completed on a First in First out FIFO basis Bioscrypt will retum a repaired or replacement product via ground freight and insurance prepaid If the Customer desires an airfreight or other expedited retum shipping method then they must agree to pay forthe expedited shipping Retumed products that are found to be free of defects may be subject to a 150 00 handling fee and will be retumed atthe Customer s expense Billable Repair Polic y By shipping product to Bioscrypt using the RMA provided by the Technical Support Department you are agreeing to the following tems For all non warranty repairs or billable repairs the customer will be responsible for charges associated with parts labor and shipping freight to and from the Bioscrypt repair facility Once the product is evaluated inspected by a repair technician Bioscrypt will provide t
109. irst block at sector 0 block 0 contains manufacturer information and is not available Also the last block of each sector contains SiteKey and access information which secures that sector and is thus unavailable forapplication data Unavailable blocks are shown in VenAdmin in black and do not allow layout componentsto be placed there This leaves 47 available blocks of 16 bytes each for a total of 752 available bytes The Bioscrypt default layout contains space for two templates and Wiegand information stored in the green User Block and will use all available space If space for non Bioscrypt data is desired include only the PRIMARY Template Template 1 ordo not include a User Block Place componentson the la yout on the right underthe New Layout section by clicking one of the buttons under the Set Starting Block section You will then see flashing text which instructs you to select one of the white unused blocks above Since the one to one templates used by the V Smart are 348 bytes they will require 22 blocks of space 348 bytes 16 bytesperblock 22 blocks All other layout components require a single block of space You will notice when placing a template on the layout that the blocks will wrap around whatever blocks are in the way consuming blocks from top to bottom Templates may NOT wrap around from bottom to top and if there is insufficient space fora template a waming will pop up and you will not be able to place the temp
110. l NOTreceive a waming when you are deleting templates unless you are deleting all of them Therefore be sure to confirm that you have selected the comect templates before continuing Export List This button allows the user to save the curently displayed template list to a comma separated values file CSV Just enter the name of the file to save in the Save As dialog and click Save Verify Template Use this option to initiate a 1 1 verify function on the curent unit indicated on the drop down Only one template can be selected for this operation Remember that this verification will be subject to settings such as Biometrics Scheduling Access Document 430 00127 18 34 CC opyright 2005 Bioscrypt Inc All rights reserved bloscrypt TEMPLATE MANAGER Scheduling Multi Finger options etc For example the template may match the finger but the user may fail to verify because the useris not scheduled at that time Transfer Templates There are six pnmary ways you can transfer templates Transfer selected Templates from unit to unit Download selected Templates from the unit to the PC Download selected Templates from the unit to a Smart C ard Upload selected Templates from the PC to the unit Upload selected Templates from the PC to a Smart Card Upload from the PC to ALL units defined in the Network From Unit to PC This will download templates from the unit to the PC l In the Template Manager window select the template s you wi
111. l open see page 31 Complete the Enrollee Name field identify the finger that was scanned You may change the index if you are enrolling more than one finger under the same ID otherwise this should be zero 8 For1 1 venfication units select a 1 1 Template Security Threshold and User Type This can be User ID V Station Enroll ID V Station Admin ID Enroll ID or Delete ID depending on which pnvileges you want to assign to the user you are enrolling The default is User ID NOTE Remember that if the card numberalready has been designated asone of the three types then any subsequent templates assigned to the card must be of the same type 9 For V Station units you may optionally enter a password or assign an access schedule NOTE If you have more than one unit networked together it is recommended that you distnbute the new enrollment to the other units at this time To view a helpful presentation on how to perform a quality enrollment press Fl within the Quick Enroll dialog the presentation and viewer must be installed correctly This will bing up a separate slide show detailing instructions on how to best enroll a user and get the best results from your reader Delete Templates Use this option to delete one or more templates from a single unit if you are in a networked environment see the Broadcast Parameters section Select the appropriate ID number s in the Templates on Device window and click the Delete button You wil
112. late If you would like to move a layout component or take if off of the la yout you must remove it by first clicking on the Remove Item button and then clicking on the item that isto be removed You will notice when you first enter the Smart Card Layout Manager that the Admin Block has already been placed for you in sector 8 block 1 You may remove it and place it elsewhere however it is recommended that the Admin Block be left in this sector The reason forthis is that the ESI will be able to read cards with a different layout than the one that is defined here so long as the Admin Block is in this location This allows for some flexibility with different card layouts however Bioscrypt still recommends that each site or facility use the same layout foreach card Layout Placement It is recommended that the Admin Block be left in sector 8 block 1 Bioscrypt recommends first placing the Layout Block then the PRIMARY Template and finally a User Data block to hold the Wiegand Strings associated with each template NOTE If you do not place at least ONE User Document 430 0012718 97 CCopyrght2005 Bioscrypt Inc All rights reserved bloscrypt APPENDIX D V SMART OPERATIONS Data block VenAdmin will be unable to read or wnte Wiegand Stnng data and you will receive an enor durng enrollment As of version 4 3 only TWO User Data blocks may be placed on the layout If two are placed the first will be used for Wiegand data if used and the
113. lect the changes desired and press the Apply button to transmit the change s to the current unit You may also press the Refresh button to update the screen NOTE This dialog has changed significantly and is now organized into tabs for easier administration The Set buttons found in the old dialog have been replaced by the Apply button which will send commands to the unit for each tab that has had any change in setting General Communication Wiegand Biometrics Verification Response General Purpose 0 m Product Information Communication Information Product Type MWV1200 V Station MIFARE Unit ID 1 Assigned Name OEM One to One Port Aux Serial Number 123456 Protocol RS 232 Template Type One to One Baud 57600 Algorithm 44 60_6711 Templates Used D Kernel K7 50 5711 Max Templates 3550 PIC P1 50 ESI E2 040 CM CM7 50 Kit KT1 20 Figure 31 Unit Parameters Dialog General Tab General Tab This tab displays general unit parameters for the current unit The basic product Document 430 00127 18 42 CC opyright 2005 Bioscrypt Inc All rights reserved bloscrypt UNIT PARAMETERS information is displayed in the upper left including the type and serial number All relevant fimware versions are displayed in the lower left Curent communication settings are revealed in the upper right such asthe unit s network ID number and the port protocol and baud rate being used to communicate with
114. like commands coming from PC Repeat process of other functions then press the ACCEPT to transfer to the current unit If the ACCEPT is not pressed the changesare ignored Document 430 00127 18 62 CC op yright 2005 Bioscrypt Inc All rights reserved bloscrypt Sensor Configuration SENSOR CONFIGURATION NOTE This feature has limited functionality in recent versions of VeriAdmin Choosing the Sensor Configuration menu item YeriAdmin v5 00 will allow the readers sensor settings to be File Configure View Help altered Only advanced users attempt to modify icis nit Faramerers these settings they can drastically affect the Le 3pm readers performance Contact Technical Broadcast Parameters Support with any questions before attempting Quick Enroll T Advanced Enrollment mo d ffic a tio NS Sensor Configuration Update Firmware k The Bioscrypt sensor needs to be calibrated for Reset Unit to Factory Defaults optimal performance Finger Detect Timeout 12 Seconds Set Calibrate Test Image Figure 46 Sensor Configuration Document 430 00127 18 Template Conversion Verification Action Response Wiegand Utilities v SmarE Security Settings Figure 45 Sensor Configuration Menu Vendicom Sensors The user should place their finger on the sensor of the reader identified by the curment Communication settings Next press the CALIBRATE button and hold the finger steady until the progr
115. ll update the firmware on this unit only Upon the completion of the update Yer amp drmin will by default automatically confirm the successful update of firmware and will insure all versions are correct For broadcast this can only be done for units which are known to Ven amp dmin ou may bypass this by unchecking the box below v Verify Successful Update Keep checked if upgrading from v5 and below ta z s and above Ta continue click Next Cancel Figure 49 Firmware Update Wizard Step 1 e Step 1 2 will ask if there are any V Stations connected to the network This step will only be seen when performing a broadcast update Special considerations need to be made by the software for V Station products If any V Stations are connected to the network please indicate this by clicking the radio button next to the V Station icon e Step 2 of the wizard see Figure 50 will optionally backup all templates to the PC This option is only available when updating a single unit If updating multiple units via a broadcast update the user is responsible for template backup By default templates are copied into the files sub directory of the directory where VenAdmin was installed A different directory may be specified however and VenAdmin will prompt to create it if it does not exist It is generally a good idea to backup templates to the PC before performing an update Howeverthis step can be time consuming on slower networks
116. loading and configuration of the new menu may take 30 seconds or more You wil receive a confirmation from VenAdmin upon completion of a successful upload As of version 7 20 the V Station supports one built in menu and one custom menu When a menu is uploaded to the unit it will fill the custom menu slot overwnting whatever was there before You may then select a menu from the dropdown labeled CURRENTMENU NAME Document 430 0012718 11 X Copyright 2005 Bioscrypt Inc All rights reserved bloscrypt APPENDIX F V STATION OPERATIONS NOTE When the V Station is shipped from the factory it will contain only the built in menu in English Before another menu option is available such as Spanish the Administrator must first upload another menu Also note that VenAdmin is English only at this time and will not change along with the V Station menu Menu prompt files are verson dependent because the menus can change from one version to the next Therefore it is important when upgrading the unit s firmware to also upload the comesponding menu file if you are not using the built in English menus Otherwise some of the new menus may come up on the V Station LCD asgarbage text As of firmware version 7 30 the LCD contrast may also be set from this tab As you move the slider left or right and release the mouse you will notice the LCD of the cument V Station unit changing in real time Pressing the reset button will set the unit back to th
117. loscrypt ABOUT VERI SERIES PRODUCTS About Ven Senes Products About the V Prox Bioscrypt s V Prox combines patented fingerprint verification technology with an industry standard proximity card reader in a mullion mountable case This ensures greater security for the card issuer and the card user The requirement that the fingerprint of the person seeking entry match the identity of the cardholder eliminates access via lost or stolen proximity cards Suitable for both stand alone and network use the system works with existing 26 bit proximity card infrastructures The unit operates in conjunction with administration software hosted on a PC Installed users simply present their identification cards when entering the secure area and then touch a fingerto the recessed area on top of the unit The system validates their fingerprint against a previously enrolled template stored in flash memory The V Prox system provides security features that can minimize fraud and can tolerate changes to the user s finger like scamng or swelling The V Prox retums accurate passand fail decisions in 99 99 of all cases Each V Prox unit stores thousands of fingerprint templates in non volatile memory Response time is less than five seconds for fingerprint enrollment and less than 1 seconds for fingerprint verification The system is compact versatile and configured to allow standalone PC connected or multiple unit operation About the V Hex V Flex inc
118. ludes all features found in the V Prox except it does not include the intemal proximity card reader Extemal connections to Wiegand devices still exist and allow the V Flex to be added to installations that already have supported Wiegand devices installed Whereas the V Prox can operate asa standalone device the V Flex requires an extemal device such as an extemal Wiegand reader or PC that initiates enrollment venfication and template administration activities About the V Pass Bioscrypt s V Pass is similar in construction to the V Flex but incorporates an entirely different biometric algorithm Whereas the V Prox and V Flex will perform a 1 1 matching verification where an ID number is required the V Pass performs 1 M identification utilizing a searching algorithm that compares the user s fingerprint with every stored template to find a potential match This ability eliminates the need to provide the unit with an ID numberto venfy as with a proximity card The users simply place their finger on the sensor and a PASS FAIL is determined No extemal or Document 430 0012718 3 Copyright 2005 Bioscrypt Inc All rights reserved bloscrypt ABOUT VERI SERIES PRODUCTS intemal Wiegand input device is required Once the fingerprints are enrolled on the unit the V Pass can operate in a standalone mode A V Pass can still be connected to Wiegand Input devices similar to a V Flex If a recognized Wiegand signal is received containing a v
119. m p la te S a C Program Files BiolD eriddmin Files C Program Files XBiolD Veri amp dmin Files SUP PO ted function the extension will change from mtm to tem Figure 57 Template Conversion Dialog Document 430 00127 18 71 Copyright 2005 Bioscrypt Inc All nights reserved bloscrypt VERIFICATION ACTION RESPONSE Venfic ation Action Response This menu option waschanged in VenAdmin v5 40 Choosing the Verification Action Response menu item will bring the user to the comesponding tab within the Unit Parameters dialog The old dialog was moved into a tab within this dialog for consistency and remains as a menu item for those users accustomed to seeing it here Please see the comesponding Unit Parameters section eri4dmin v5 00 File Configure View Help f Network Setup Unit Parameters Led Table Settings Broadcast Parameters Quick Enroll Advanced Enrollment Sensor Configuration Update Firmware d Reset Unit to Factory Defaults Template Conversion Verification Action Response Wiegand Utilities Yeomiath security settings Figure 58 Verification Action Response Menu Document 430 00127 18 72 Copyright 2005 Bioscrypt Inc All nights reserved bloscrypt Wiegand Utlites WIEGAND UTILITIES Choosing the Wiegand Utilities menu item will allow j VeriAdmin v5 00 users to define specific Administrator IDs that will Bie Configure View Help not require a fingerprint to initiate the
120. made or authorized by Bioscrypt e Damage caused by improper packaging e Damage caused by lack of ESD protection e Merchandise that isdetermined to be stolen Document 430 00127 18 iii Copyright 2005 Bioscrypt Inc All nights reserved bloscrypt All Ven Senes units have an operating temperature range of 0 60 Celsius 32 140 Fahrenheit In addition the Ven Senes product line hasa relative humidity operating range of 0 95 non condensing Any device used outside that temperature or humidity range requires an enclosure with thermal or humidity control that can maintain a consistent environment within the stated operating ranges The newest Bioscrypt Ven Senes products are designed to be weather resistant but no sensor technology exists today that can work in all weather environments If a Bioscrypt Ven Senes product is not used in a completely indoor environment then a protective enclosure is required to shield the unit from moisture dust other contaminants and temperatures outside the stated operating range Product failures resulting from exposure to the conditions are not covered under the product warranty For outdoor installations Bioscrypt does offer an enclosure to protect the device from exposure to moisture dust other contaminants and temperatures outsde stated operating range To maintain the Bioscrypt warranty the Ven Senes unit must be installed in a Bioscrypt certified outdoor enclosure When used properly this
121. mance of an enrollment As a general rule of thumb quality scores less than three stars require intervention on the part of the Enroller or administrative software Sources of low scoresinclude dry fingers and dirty sensors Figure 61 Low and High Quality Fingerprints If the quality score falls below three stars Bioscrypt recommends the following options e Ensure that the sensorand fingerare clean e lf the finger and sensor are clean and a dry finger is suspected try re enroling one more time leaving the finger on the sensor for several seconds priorto enrollment Frequently finger moisture accumulates over time to provide a good image e Fingerpnnt quality can vary among individual fingers for the same person Try enrolling an altemate fingerto see if the score improves e Alter the security level for that particular template by decreasing the threshold a minimum of 1 level e g change the value from medium 3 to low 4 This will offset the false rejection forthat template by making it easier to match If use of that template indicates that raising the threshold one level still produces false rejections try setting the value to its lowest security level 5 Waming Decreasing a template s security may increase the risk of a Document 430 00127 18 79 Copyright 2005 Bioscrypt Inc All nights reserved bloscrypt APPENDIX A QUALITY AND CONTENT false acceptance forthat template A thorough enrollment procedure w
122. ment E V Station Manager 113 File 2 V Station Manager 1 New Bioscrype Unit Current Unit Toolbar Drop Down Unit ID 1 Comm Port 1 57600 M 1200 V Station Current Communication Settings Sta tus Ba r The Current Unit drop down will indicate the transmit ID and name of the unit with which the software is curently communicating If you have networked more than one unit you can use this drop down to access different units Also you may specify a Broadcast mode by selecting this option Document 430 00127 18 28 CC opyright 2005 Bioscrypt Inc All rights reserved bloscrypt NETWORK SETUP AND CONFIGURATION The ID numbers and unit names shown in the drop down list comespond to the items shown in the Network Tree in the Network Configuration Manager Selecting a unit in that dialog and exiting will select the same unit from the drop down and vice versa The current Transmit ID COM port baud rate IP Address Port if Ethemet and unit type are displayed in the status bar at the bottom of the application These values will update ascommunications and settings change while using the software Document 430 00127 18 29 Copyright 2005 Bioscrypt Inc All rights reserved bloscrypt Template Manager The Template Manager allows you to TEMPLATE MANAGER e Edit Templates e Enroll Templates e Delete Templates e Venfy Templates e Transfer templates to and from a PC from one unit to another or to a Smart Card e Edit Templa
123. mently enrolled fingerprint templates and determine if there isa match A typical operation is described below e The V Passtop LED isamberto indicate it isready fora finger e Auserinitiatesthe action by placing theirfingeron the fingerprint sensor Document 430 00127 18 8 CC op yright 2005 Bioscrypt Inc All rights reserved bloscrypt CONCEPTS OF OPERATION The User should place the correct finger on the scanner using the Bioscrypt Ridge Lock The V Pass will recognize that a fingerhas been placed and will take an image of that finger s print he amber light will tum off signaling that the image has been scanned and the finger can be removed The scanned image is compared with ALLenrolled templates in the memory of the V Pass ma ximum of 500 o If the verification is positive the top LED will glow green and the unit will emit an audible beep o If the authentication fails the LED will glow red and no beep will be generated When authentication is successful a Wiegand string can optionally be sent out foruse by a standard doorcontroller As with the V Flex the V Pass provides the same serial communication options as the V Prox and is packaged into identical housing providing a pigtail connection in the back and a Rj 11 RS232 port at the bottom of the unit Configuration and administrative requirements are similar to the V Prox and VenAdmin Management Software can also be used forthis purpose The Proximity Card Ca
124. mmand cards dunng enrollment or while editing a template select Prox Enroll ID or Prox Delete ID from the User Type dropdown in the Template Viewer Removing Command Cards To remove a command card highlight the ID number in either the Enroll IDs or the Delete IDs window and click the Delete Entry button directly beneath the window This will delete the template for all associated indices NOTE You will not receive a waming when you click the button therefore ma ke sure that you have selected the comect ID Document 430 00127 18 40 CC opyright 2005 Bioscrypt Inc All rights reserved bloscrypt COMMAND CARD MANAGER Using Command Cards Once you have created Enroll and Delete Command Cards they can be used as follows Enroll Command Card To enroll a user l 2 Wave the Enroll Command Card near the front of the unit The light will glow amber directing the Administrator to place his finger on the unit If the Administrator is authorized to use the Command Card the light will glow green and the unit will beep Continue with the next step If not the light will glow red Retum to Step lorstop The light will flash amber indicating the system is ready to enroll the new card Wave the user card to be enrolled The light will stop flashing The light will glow amber directing the Userto place his herfingeron the unit If the fingerprint is accepted the light will glow green and the unit will beep indicating t
125. mory is page offsets are configured Click on Card Discovery and present a sample smart card to the reader If a 2 application area card is presented the left side of the dialog will be enabled while presentation of a 16 application area card will enable the right side Initially the 16 application area layout on the right will show the cument ES layout However if a 16 application area card is presented which conflicts with this la yout some of the red highlighted bars will become disabled and change to gray or yellow to help the user select a layout that will work with cards like this The 2 app cards will really only have the second app area available for reasons explained above starting at block offset Ox13 Therefore the user may select a starting offset for Bioscrypt data from 0x13 up to and including OxIF The blue blocks representing Bioscrypt data will move around the amay of blocks to easily indicate which part of the card will be used by Bioscrypt The default offset used by Bioscrypt is the first available block 0x13 and if desired Document 430 00127 18 100 CC opyright 2005 Bioscrypt Inc All rights reserved bloscrypt APPENDIX D V SMART OPERATIONS a usercan reset the layout back to that offset by clicking the Resetbutton and providing the current SiteKey For 16 application area cards the application areas are represented on the nght side of this dialog by a senes of vertical bars that are actually buttons Appl
126. multiple fingerprints with a single Template ID Each instance of a template with a specific ID hasa unique index up to 256 indices possible 0 255 This allows a V Prox and V Flex users to have a single proximity card but be able to enroll multiple fingers Dunng VERIFICATION a user waves their card at the V Prox V Flex readerand places their finger on the sensor The unit will then scan the curent fingerprint and compare it against all enrolled templates for that specific ID If there are multiple templates enrolled under one ID then the V Prox V Flex will check templates in the numerical orderbased on theirindex e Example On Card 123 a person ENROLIs both their left and right index fingers The next time that user goes to venfy they wave Card 123 and place a finger on the sensor The V Prox scans the curent finger and compares it against the first template the nght index finger Template ID 123 0 If a match is found the VERIFICATION is PASSED and the operation ends If a match is not found the V Prox will check the second print the left index finger Template ID 123 1 If a match isfound the VERIFICATION is PASSED and the operation ends If the match is not found and since all templates have been compared the VERIFICATION is FAILED NOTE The initial finger scan takes 0 5 seconds and each comparison takes 0 5 seconds So if the first template results in a successful verification the total time is 1 0 seconds Success
127. n enrollment or template deletion A steady green light is accompanied by an audible beep Blinking Green The unit has multi finger mode enabled and is waiting for a second finger to venfy Steady Red Ihe unit is indicating the cument operation hasfailed Blinking Red The unit is requesting a proximity card be waved The card ID number will be deleted from the reader The blinking red light is seen when a Delete Command Card is used to remove an existing ID from the reader Document 430 00127 18 13 CC op yright 2005 Bioscrypt Inc All rights reserved bloscrypt CONCEPTS OF OPERATION e Other The unit may blink altemating colors when in the middle of a Step fimware update Do nottouch the unit during thistime Document 430 00127 18 14 CC opyright 2005 Bioscrypt Inc All rights reserved bloscrypt VERIADMIN MANAGEMENT SOFTWARE V5 50 VenAdmin Management Software v5 50 The VenAdmin Management Software is designed to mn on Windows based PC platforms and communicate with Bioscrypt s MV1100 and MV1200 based fingerpnnt recognition devices Although onented more towards the Ven Senes products the application works well with any MV1100 or MV1200 device In this documentation the terms unit and reader are used aS a generic term to refer to any of these devices The VenAdmin Management Software does NOT support Bioscrypt s VenPrint V2000 or V2100 fingerprint recognition terminal Please contact Bioscrypt Technical Supp
128. nAdmin for SiteKeys 112 Document 430 00127 18 xi Copyright 2005 Bioscrypt Inc All nights reserved bloscrypt How does iC LASS differ from MIFARE asit pertains to SITE KEYS 112 Appendix F V Station Operations ccccccccccccsssssseseceeeeeeeeuaesseeeeeeeeeeseaaeaaseeeeeeeeeesssaegseeeess 113 Section F 1 Using the V Station Manager seen 113 Sx q 113 HB MR um 114 Bome HIG SC ned escaped RES OORDEPHGUE YR ESOERIDU UD YER EPI S 115 Hsibrce e 117 Access SCNECUIES ccccccccsessssssseeeeececeeeseassseceeeeeeeeeneuaaseeeeeeeeeseaeaasseeeeeeseeseeseassseeeneess 118 OCG 1S te T 120 TA Sa CUOMO O m Q 121 Section F 2 VerAdmin vs Keypad Configuration eeeeeenn 123 Section F 3 V Station Security and Admin Levels eeeeeennn 123 Section F 4 Broadcasting to V StationS s ssseesssrrrrrrrrressrrrrrrrrrresssrnnrrrnreesserrnrrnns 124 Bioscrypt Contact Information seeeeeeeeeeeeeeeeennnnnnnnnnneennnnnnnnnnnnnnn nnns nnn nnn nnns 125 Document 430 00127 18 xii Copyright 2005 Bioscrypt Inc All nights reserved bloscrypt Table of Figures POMS L TOD VON 5 Figu
129. nc All nights reserved bloscrypt APPENDIX D V SMART OPERATIONS It is recommended that you select a wiegand format that contains 64 ID bits Donot show me this warning message again Figure 73 Warning message for less than 64 bit ID Currently there are no pre defined or uploadable formats that allow 64 bit ID s In this case the user can select the CUSTOM format under the Pass Thru menu The following numbers can be used forthe format e Total bits 64 e D Start bit O e No of ID bits 64 The following table shows the Bioscrypt supported Wiegand formats and their compatibility based on ID bits Fora detailed listing of valid ranges of values please see Table 1 Wiegand Format gt 32 ID bits gt 64 ID bits Standard 26 bit NIN Apollo 44 bit Northem 34 bit bit Ademco 34 bit N N _ HID Coporate 35 bit N 0 N HID 37 bit 20 N 413DQ JN Andovr3 N N Cas40lb YN Geneic34 YN Generic 64 YN Table 7 Pre Defined Wiegand Format ID Bits Best Performance Practices Finger placement The V Smart unit should be mounted in a position that takes these factors into consideration ease of use ata height that allows for proper finger placement in line with other switch plates or fixtures and in accordance with Amencans with Disabilities Act where applicable Recommended mounting height is 48 54 fr
130. nd ID Wiegand String Smart Card SN Wiegand String F Wiegand Stima Head Fingerprint Image Template Data inger 2 ENROLL ee EIS inger 2 ENROLL C se Inger R s ENROLL C leg Enter a template ID number EXIT Figure 38 The Advanced Enrollment Screen The Advanced Enrollment processis as follows 1 In the Template ID Number field type the desired ID or click on the appropriate button under the Get Wiegand ID From section for a list of valid ID values please refer to Tablel For Wiegand sources such as proximity cards or extemal keypad click on Wiegand Sting To use a smart card Serial Number asthe template ID click on the Smart Card SN button NOTE If you are using a smart card based reader and have selected Use Wiegand String within the Smart Card Manager VenAdmin will expect to receive the Wiegand String from an extemal readerand will wam you if none was provided 2 In the Indexfield enterthe index of the template 3 Click any ENROLL button Document 430 00127 18 59 Copyright 2005 Bioscrypt Inc All nights reserved bloscrypt ADVANCED ENROLLMENT 4 A pop up dialog box will allow the User to choose the finger to ENROLL Choose which finger by clicking the comesponding checkbox Please Choose a Finger X Figure 39 Advanced Enrollment Finger Selection 5 The light on the curent unit will glow amber requesting the enrollee to place a finger on the sensor Nestle the R
131. ne side and leaving a portion of the sensor exposed will degrade image quality e Placing the finger at an angle to the finger guide is another common mista ke Rotation of the fingertip will not provide a reliable image of the fingerprint Image quality Dry skin is another factor that can contribute to an unreliable image of a fingerprint A normal amount of moisture on the skin makes the ridges and valleys of the fingerprint stand out to the sensor Too little moisture makes the image noisy and will cause the Ven Senes unit to reject the image during processing Lightly moisturizing the finger will enhance the contrast of the pnnt and provide more reliable verification The increased sensitivity of the silicon sensor is dramatically reducing problemsin this area Image consistency Once a user s fingerprint template has been enrolled the best performance in the candidate matching process depends on consistency Obviously the user must use the same finger for ID venfication as was used to form the original template It also is important to position the finger cormectly for each verification as wasdone when the template wasonginally enrolled The goal is to present consistent placement to the unit so the Ven Senes unit sees approximately the same information each time Document 430 00127 18 77 CC opyright 2005 Bioscrypt Inc All rights reserved bloscrypt APPENDIX A QUALITY AND CONTENT Section A 3 Using Quality amp Content S
132. nit to the PC Confirm successful reprogram and check version s AN WARNING Updating firmware should only be done by an experienced user IF upgrading a MV11U0C unit which has Firmware below v2 0 please contact Bioscrypt Customer Support before proceeding Ta continue click Next Cancel Figure 48 Bioscrypt Firmware Update Wizard To begin the update process click Next The upgrade process is divided into four easy steps At any point the user may press Cancel to exit the wizard Some steps will require extra information from the user such as when broadcasting an update or when a special step firmware file is required e Step 1 of the wizard see Figure 49 indicates which unit s are to be updated and allows the user to specify if they would like VenAdmin to automatically verify the update when finished This option should always be checked except in the event the user will be manually confiming the fimware update or he does not want to wait for VenAdmin to confirm success at the completion of the update It is especially important to allow VeriAdmin to perform this ta sk if the wizard determinesthat a step fimware update is necessary Document 430 00127 18 64 Copyright 2005 Bioscrypt Inc All nights reserved bloscrypt UPDATE FIRMWARE Bioscrypt Firmware Update Wizard Sees The current unit is Unit ID 0 Unit Type M 200 S tation fiCLAS 5 Unit Name Station iCL455 Unit Comm Part 12 This wi
133. ns 6 22 and above Document 430 00127 18 46 Copyright 2005 Bioscrypt Inc All rights reserved bloscrypt UNIT PARAMETERS The Extended ID Uploadable Format is also a separate file but one that contains more than 32 bits of ID thus the Extended ID field must be used The Extended ID should be considered the true ID numberforthis user and is what is communicated to the access control system The Template ID is simply a placeholder This format is supported with firmware versions 7 30 and above Please contact Bioscrypt Technical Support for a copy of either of the above formats If you have received a custom Wiegand Format file from Bioscrypt WGF you may upload it to the unit by pressing this button and then selecting the file This will add the new format to the drop down box and select it You will still need to press the Apply button to confirm the change Note that only one custom format may be stored on the unit at a time Below isa table listing the valid range of valuesforthe different formats Alt Site Code amp Fail Site Template ID Extended ID Number Type Code Range Number Range Range Standard 26 bit Standard 0 255 1 65535 n a Apollo 44 bit 0 16383 1 65535 Northem 34 bit 0 65535 1 65535 Northem 34 bit no parity 0 65535 1 65535 n a bit Standard 0 4095 1 1048575 n a Ademco 34 bit 0 4095 1 1048575 HID 37 bit 0 2047 1 16777215 EE 1 bit L 4095 l Generic 34
134. ny holidays that have already occured To remove all holidays in the list click Remove All and confirm your intentions After any of these actions you will need to click on the OKor Apply buttons to finalize the settings As with the Access Schedules tab you may Broadcast all holiday schedules to all other V Stations on the network Save all holidays to the PC and Upload all holidays from the PC to the V Station by clicking on the respective buttons Again holiday schedules may not be broadcast saved oruploaded one ata time and it is recommended that all units on a network be synchronized to the save set of both accessschedulesand holiday schedules Transaction Log The Transaction Log is a feature only found on V Station products due to the real time clock RIC included onboard This allows the V Station to track all actions and events that occur on the unit time stamping the action and recording the following information Template ID Index and Name if the event involves a template Action The event being logged Status Result of the associated command Successor Failure Data Data associated with the command for enrolls data 1 quality data2 content for verfies datal pass fail data2 score data 3 quality e Port Which port was used for the command actions onginating from the keypad will indicate Aux on early 7 x firmware versions Document 430 00127 18 121 CC opyright 2005 Bioscrypt Inc All rights reserved
135. of the reader will glow amber indicating the user should place their finger on the sensoron the top of the reader e he User should place the correct finger on the scanner using the Bioscrypt Ridge Lock e The amber light will tum off signaling the finger can be removed e The scanned image is compared with the data that is stored under the ID number in the memory of the V Flex o Ifthe verification is positive the top LED will glow green and the unit will emit an audible beep o If the authentication fails the LED will glow red and no beep will be generated e When authentication is successful a Wiegand sting that contains the site code and ID number read from the extemal Wiegand device is sent out for use by a standard doorcontroller e Optionally the V Flex can be configured to send out a pre determined failure sting wheneveran unsuccessful verification occurs The V Flex provides the same serial communication options as the V Prox Also it is packaged into identical housing asthe V Prox providing a pigtail connection in the back and a Rj 11 RS232 port at the bottom of the unit Configuration and administrative requirements are identical to the V Prox and VenAdmin Management Software can also be used forthis purpose The V Pass The V Pass is similar to the V Prox and V Flex but no Wiegand input device is required The V Pass will automatically detect when a finger is placed on the sensor compare that fingerprint with all cu
136. of the unit Set the Host Port Protocol to RS 485 if you wil be using a networked environment Altematively you may choose RS 232 if you will not be networking the unit Rememberthat the RS 232 and RS 485 connections are made through different wires on the pigtail for non V Station units and through the different Document 430 00127 18 27 Copyright 2005 Bioscrypt Inc All nights reserved bloscrypt NETWORK SETUP AND CONFIGURATION RJ 11 jacks at the rear of V Station units consult the installation guide for details Icons Commands and Drop Downs Once you have the software installed and running you will be able to access the features mentioned above either through the icons on the toolbar or through the command menus see below Certain features will automatically become disabled toolbar icons gray when communicating to a unit that does not support that feature such asthe V Station Manager for non V Station units Icon Name Page Command Path fi Template Manager 30 File 2 Template Manager Command Card Manager 40 File gt Command Card Manager Smart Card Manager 86 File gt Smart Card Manager E Network Setup 21 Configure Network Setup i Unit Parameters 42 Configure 2 Unit Parameters Broadcast Parameters 58 Configure Broadcast Parameters Network Configuration Manager 22 File 2 Network Configuration Manager Advanced Enrollment 59 Configure gt Advanced Enrollment Quick Enrollment 32 Configure 2 Quick Enroll
137. om floor to sensor level Document 430 00127 18 104 Copyright 2005 Bioscrypt Inc All rights reserved bloscrypt APPENDIX D V SMART OPERATIONS Typically using either the index or middle finger provides the best performance We recommend you do NOT use thumbs or pinkies little finger but we do recommend that you enroll an altemate finger on your other hand total of 2 fingers enrolled Please refer to Appendix A Quality and Content for more details about maximize fingerpnnt perfomance Document 430 00127 18 105 Copynght 2005 Bioscrypt Inc All rights reserved bloscrypt APPENDIX E SMART CARD SITEKEY MANAGEMENT Appendix E Smart Card SiteKey Management It is essential that the Administrator understands and handles appropnately the SiteKeys utilized by Bioscrypt smart card based products i e V 5mart MIFARE IC LASS and V Station MIFARE ICLASS SiteKeys are the mechanism used by the Bioscrypt smart card readerand the smart cardsto ensure that only authonzed smart cardsare used In this appendix the following topics willbe covered What isa SiteKey Why do Need a SiteKey What isthe Default SiteKey Where isthe SiteKey Stored What isthe Difference Between PRIMARY and SECONDARY SiteKeys How do Initially Set a SiteKey for V Smarts at My Installation How do Set the SiteKey on Individual Smart Cards How do Change the SiteKey if Already Have a User Base of Previously Created Smart Cards W
138. omatically asthey use the V Smart for daily verification be sure to tum this feature OFF after the population has been updated Note that when this option is un checked it also hasthe side effect of setting the secondary SiteKey to 1 or disabled You must therefore re enter the secondary SiteKey when tuming this function back on The new edit box labeled Rx TEMPLATES TIMEOUT contains the timeout value in milliseconds for the V Smart when verifying multiple templates on a Smart Card This timeout is different from the ESI Verification Timeout It isthe length of time that the V Smart will wait to have each template sent from the ESI as they are read from the card If a complex la yout is used on a Smart Card the ESI and reader will take much longerto read each template and this timeout must be extended to allow for this It can also be shortened if a simple or default layout is used thus allowing the V Smart to retum more quickly to idle mode where it will be ready to accommodate the presentation of another card For example if a card was not presented close enough to the reader during a verify a shorter timeout will cause the unit to tum on the red LED sooner and be ready again for card presentation However if the timeout is too short and the data could not be read quickly enough the unit will prematurely timeout before all data has been read Nomally the default value should be used For iCLASS based products the default is 1500 m
139. omia xara vm E 62 Sensor Configuration Menu eeeeeeeeeeeeneeennnnnnnnn nennen nnn nnn nnn nri 63 eiae COMIC Gl AON m MT T T I NIMM 63 Update FIN Wale Mel aseneceonevedkcnapndbrDD M ERE NOD VEM SUID YHP tic 64 Bioscrypt Firmware Update Wiza rd 20 0 ccccccccsssssssseceeeeeeeeneessseeeeeeeessesaeaseeseeeeeeees 64 Firmware Update Wizard Step 1 sseseeeennnmmmnnnnnnnns 65 Firmware Update Wizard Step 3 eeeseeeeeeeenennnmmenennnnnnnn nnne 66 Firmware Update Wizard Step 2 0 cccccccssssssseeeeeeeeeseeeesseeeeeeeseeseaaeasseeeeeeneees 67 Fimware Update Wizard Step 4 ssssseseeeennnnmmnnnnn nnns 68 Fimware Update Wizard Verifying Successful Update 68 Reset Unit to Factory Defaults Menu eeeeeeennnmnnnnn nnns 70 Parameters are grouped into like sections eeeeeeennnn 70 Template Converson M CNY sconssienasisuioniek ipeo c an nete ace sic dr abe 71 Template Conversion Dialog ccssscccccceccceseessseeeeeeeeeeeuaeesseeeeeeeeeessaaeasesseeeeneess 71 Verification Action Response Menu ssseeeeeennnnmmeennnnnnnnnnnnnn nnn nnns 72 Wiegand Utilities M GTI isin a a a cb BER rd ror cei e 73 Wiegand Utilities dialog sese 73 Low and High Quality Fingerprints ssseseeeeennnnnnnnnnnnnnnn 79 High and Low Content Fingerprints sese 80
140. opyright 2005 Bioscrypt Inc All rights reserved bloscrypt UNIT PARAMETERS 2 Selective Output This causes the WIEGAND OUTPUT string to be sent whenever a WIEGAND INPUT is received see the PASS THRU section for Wiegand Output related to Pass Thru formats Pulse Width Unchecking the USE DEFAULT option will allow the userto enter a custom Pulse Width duration for Wiegand Output This is NOTrecommended unlessthe user is very familiar with the device connected to the unit Pulse Interval Unchecking the USE DEFAULT option will allow the userto enter a custom Pulse Interval duration for Wiegand Output This is NOTrecommended unless the user is very familiar with the device connected to the unit Wiegand PASS THRU formats When used with MV1100 MV1200 firmware version 2 50 or higher the VenAdmin software allows expanded Wiegand compatibility by allowing definition of a PASS THRU format In order to use this ability the following information is required e Total numberof Wiegand bitsin Wiegand String maximum 64 bits e Start Bit of the ID FIELD where first bit is bit O e Numberof bitsin the ID FIELD must be contiguous bits Using these three pieces of information when a card is presented to the unit it will attempt to decode the ID FIELD and use that information as the TEMPLATE ID number All SITE codes Parity and any other data are ignored Using this ID the unit will attempt to VERIFY the template comesponding to the decod
141. ort for software that supportsthis product Use the VenAdmin Management software to perform the following functions Manage the network of Ven Senes readers Enroll new userfingerprint templates Edit user templates Distibute the user templates from the administration reader or PC to other Bioscrypt readers in the installation e Create command cards proximity cards with the privilege to enroll or delete other user cards for products which contain proximity card readers e Adjust the parameters baud rate security level port configuration Wiegand settings etc of individual units or of all readers connected on a network e Configure the layout and operation of Smart Cards for products which contain smart card readers e Configure the operation of the V Station s LCD menus schedules etc and view download and delete the V Station transaction log e Perform fimware updates NOTE The recommended operating system for use with the VenAdmin Management Software is Windows 2000 Windows XP or Windows NT 4 0 Service Pack 3 or greater Operation is possible on Windows 98 or ME however occasional communication packets can be dropped when multiple applications are running in the background Running VenAdmin on Windows 95 isno longer supported Concepts of Operation Transmit ID Current Unit On the tool bar of the VenAdmin software there is a drop down list containing a list of available units see Figure 9
142. ou discovera discrepancy in this document please e mail your comments to supportiabioscrypt com or contact Bioscrypt Technical Support at the telephone number listed below No part of this publication may be placed in a retneval system transmitted or reproduced in any way including but not limited to photograph photocopy computer disk or other record without prior agreement and written permission from Biosc rypt Inc 5805 Sepulveda Blvd Suite 750 Van Nuys CA 91411 Phone 818 304 7180 Toll Free 866 304 7187 Web http www bioscrypt com Email suppornt bioscrypt com Document 430 00127 18 ii Copyright 2005 Bioscrypt Inc All nights reserved bloscrypt Bioscrypt One Year Limited Warranty Policy Bioscrypt warrants to the original consumer purchaser Customer that new Bioscrypt products will be free from defects in material and workmanship forone year from the date the product was shipped from Bioscrypt For replacement products the warranty on the replacement unit is the remainder of the warranty on the original product or ninety 90 days whichever is longer The Customer is responsble for making any claims for shipment damage evident or concealed with the freight camer Bioscrypt must be notified within thirty days of shipment of incomect materials If a defect is discovered Bioscrypt s sole obligation shall be to repair or replace the Bioscrypt product s at its sole discretion at no charge provided it is re
143. ploscrypt Ven Senes Operations Manual V Prox V Flex V Pass V Smart V Station Version 7 50 Document 430 00127 18 CC opyright 2005 Bioscrypt Inc All rights reserved bloscrypt Trademark Disclosures Bioscrypt has made every effort to provide disclosures when using trademarks owned by other companies Irademarked designations appear throughout this publication The publisher states that it is using the designations only for editorial purposes and to the benefit of the trademark owner with no intent to infinge upon that trademark The following trademarks are found in this manual e V Prox V Flex V Pass V Smart V Station MV1100 MV1200 and MV Lite are trademarks of Bioscrypt Inc e Microsoft Windows 95 Windows 98 Windows NT Windows ME Windows 2000 and Windows XP are trademarks of Microsoft Corporation e HID isa trademark of HID Corporation e MIFAREG is a registered trademark of Philips Electronic s N V e ICLASS isa trademark of HID Corporation Document 430 00127 18 i Copyright 2005 Bioscrypt Inc All rights reserved bloscrypt Disclaimer The instructions in this document have been carefully checked for accuracy and are presumed to be reliable Bioscrypt Inc and its writers assume no responsibility for inaccuracies and reserve the right to modify and revise this document without notice It is Bioscrypt s goalto supply accurate and reliable documentation If y
144. pt NETWORK SETUP AND CONFIGURATION nght side panels To add unitsto the tree Click on the COM port Ethemet icon under which to add the new unit Click the Add Unit button If adding under Ethemet enter the unit s IP address Enter the Transmit ID to use for this unit or press Auto Entera name optional Click Refresh to update ANU RPWN PR To move units from one port to another 1 Select the unit you wish to move 2 Drag the unit to another port 3 Drop the unit onto this port To remove units from the network Click on the unit to be removed in the tree Click Remove Unit or pressthe Delete key Confirm removal of the unit Remember that this only removes the unit from VenAdmin s configuration not from the actual network aN To add additional portsorremove ports 1 Click on Network Setup 2 Add orremove portsin the Network Setup dialog 3 Note that removing ports with units configured under them will not permanently delete them but only disable them i e they will not appearin the tree To perform a network status of all units l Click on Network Status 2 A new dialog will show the statusof each unit in the tree 3 You may click Update to status all units again Document 430 00127 18 24 CC opyright 2005 Bioscrypt Inc All rights reserved bloscrypt NETWORK SETUP AND CONFIGURATION General Unit Settings In this section general information will be presented about the unit In the upper righ
145. ption requires fimware versions 7 30 and above Password Verification V Station only This option when enabled will cause the unit to ask the userto entera numeric password on the keypad after finger venfication if that particular template contains a password This offers an additional level of security Passwords are set within the template and must be a value between 1 and 4294967295 Note thata password of zero for a template indicates the template has no password and the user will not be asked to enter it even if this feature is enabled NOTE This option requires fimware versions 7 30 and above Duress Finger Mode The duressfinger mode offers usersa way to indicate a duress situation such as being forced to open a door for example by vernfying with a specially designated duress finger Each template can be specified assuch by checking Document 430 00127 18 53 CC opyright 2005 Bioscrypt Inc All rights reserved bloscrypt UNIT PARAMETERS the Make Duress Finger checkbox within the Template Viewer When a successful verification occurs with such a template the unit will perform the special action specified such as reversing the Wiegand output the only option available in version 7 30 to alert the door controller of the duress situation The controller can then respond by alerting secunty personnel sounding alams etc Of course the controller must support such an option Important NOTE A template that is specified as
146. put and output to the unit see Figure 33 Both predefined and custom Wiegand formats may be set along with several other Wiegand options Note that the chosen format will be used forboth input and output General Communication Wiegand Biometrics Verification Response General Purpose 1 0 Pre Defined Format C Pass Thru Format 1 m Pulse Width Standard 26 bit v CUSTOM jo is Upload Custom Format Toadies v Use Default penere IDStatBit m Pulse Interval Alt Site Code Num ID Bits n Failure FaillD Code fo MV Fail Site Code 42 Wiegand 1 0 v Enable Input V Enable Output Selective Dutput when source is Wiegand Cancel Apply Figure 33 Unit Parameters Dialog Wiegand Tab Pre Defined Wegand Format These formats come pre loaded on the Ven Senes unit They contain an ID of 32 bits orless All MV1200 Ven Senes fimware versions support these formats This section allows you to select the desired Wiegand format for both INPUT and OUTPUT Standard 26 bit is the default format Other formats are available and can be selected using the dropdown box NOTE The format for BO TH INPUT and OUTPUT will be the same Upload Custom Format The Custom Uploadable Format is a separate format file that must be uploaded onto the Ven Senes unit The regular uploadable format contains 32 bits or less of ID and is supported with firmware versio
147. rd Number Site Facility Code Bw 1234 Prox Card Figure 6 Proximity Card NOTE Some proximity cardsdo not have numbers pnnted on them There are three types of proximity cards split into two basic categories User Cards Enroll Command Cards Delete Command Cards User Cards All Ven Senes units with embedded proximity card capability can be Document 430 00127 18 9 CC opyright 2005 Bioscrypt Inc All rights reserved bloscrypt CONCEPTS OF OPERATION programmed to use a given card ID number asa standard user card The majonty of cards will be of this type Command Cards Command Cards can be created to add and remove users from a Ven Senes reader without using the PC based administrative software These can be useful for creating and removing temporary visitors badges or administering the system when the PC is down or unavailable There are two types of Command Cards e Enroll Command Cards e Delete Command Cards NOTE The command cards must be created using the VenAdmin Administration Software Once a card hasbeen designated asone of the three types it will remain that type unless it is deleted and re enrolled see Editing Templates Basic System Administration Enrollment New users are entered into the system through the process of enrollment Dunng this procedure the user s fingerprint is scanned and a fingerprint template is generated A template isa collection of user information including
148. re 2 BOCCONI VIEW ceon E PEE S 5 Figure 3 Bottom Pa We ClO CO criei a dus me aa i 5 Houe 4 Bottom Panel O PCN sinensis sinan EE 5 Figure 5 Ven Senes Unit and Mounting Plate seen 6 FOU O PIONI e ie P M 9 Figure 7 Template ID Nurnb6el S usoseivigasemi coadivaoon ns a a a RR b c Ea S Ee UR Ct 11 Figure 8 Saving Templatesto PC eeeeeeesessseeeeeeene nennen nennen nennen nnn nnne nnn nnns 13 Figure 9 Transmit ID Current Unit Drop dOown eeeeeeeeeeeennnnnmmnnnnnnnnns 16 Figure 10 Broadcast Transmit ID in Drop down errem 16 Figure 11 No Response Message eeeeeeeeennnnnnnnnnnnnnnnnnnnn nnn nnn earn nnn rini n nnns 16 Figure 12 VENAC min desktop ICON eeeeseeeeesseeeeeeeeenn nnne nennen nnn nnns 18 Figure 13 VeriAdmin Welcome Message A seeeeeeeeennnnnnnnnnnnnnnnmnnennnnnnnnnnnnnnnnnnns 19 Figure 14 VenAd Min Welcome Message B eeeeeeeeeeseeeeeeennnnnn menn 20 Figure 15 Network Setup dialog nnnnmnnnnnnnnnnnnnnnnnnns 22 Figure 16 Network Configuration dialog eeeeeeeeeeeeennennnnnnmnnnnnnnnnnns 23 Figure 17 Advanced Options sese nnne nnn nnne nns 26 Figure 18 Test Communication Settings eeeeeeeeeeeeeeenennnnnn nnne nnns 26 Figure 19 Template Manager Dialog esee 30 Figure 20 Template Viewer
149. re 77 V Station Manager Clock The Clock tab allows the user to set the V Station date time and formatting Document 430 00127 18 113 Copyright 2005 Bioscrypt Inc All nights reserved bloscrypt APPENDIX F V STATION OPERATIONS options Disolayed on the left is the PC s date and time updating in real time this can be tumed off by un checking the Real Time Update checkbox On the right is the V Station date and time By default the time will not update in real time unless the checkbox for that is checked The time displayed will be the time when the V Station Manager wasfirst opened To update the display to show the curent time press the Refresh button You can use the calendar control to update the V Station sdate by clicking on a day scrolling the month the left and right amows or by clicking the month or year at the top of the calendar To set the time click on the time field and entera new hour minute or second The up and down amows may also be used Note that tuming on the real time update will undo your changes The easiest way to synchronize the V Station s time with the PC isto click the Synchronize arrow in the middle of the screen To apply the changes immediately click the Apply button at the bottom of the dialog Other formatting and time options may be set in this screen including 24 hour time daylight savings observance and display format for the date and time V Stations ship defaulted to 12 hour time no
150. rk based template management operations typically associated with biometnic installations Smart cards used by the V Smart can now be used by another application V Smart operation uses only the part of the Smart Card defined by the layout so that other applications can now use any remaining free sectors or blocks Contact your Bioscrypt Sales representative when purchasing smart cards to ensure they will work correctly with the V Smart Administrator s Note The Administrator Enroller needs to understand the different states that the V Smart operates to effectively use the unit Ihe most important aspect to understand is the difference between HOST and SLAVE mode HOST mode is the nomal operating state of the V Smart In this mode the unit is actively looking for a smart card with a template on it When a card is seen one or both templates are automatically read and a Verification action is started While the Verification action is happening the V Smart cannot process other commands coming over the AUX channel from the PC The only time this becomes an issue is when using the VenAdmin software When writing a template to the smart card as part of the enrollment process it is important to wait for VenAdmin to display a message saying PLACE SMART CARD CLOSE TO READER If the Administrator places the card before the message the V Smart may treat this as described above and initiate a Verification action The V Smart will then be busy t
151. rmats and follows the format WIEGAND PASS abel TOTAL BITS 1D START BIT gt 4D NUM BITS Where WIEGAND PASS is the identification that this isa PASS THRU format lt label gt is the Description shown in the dropdown list no spaces TOTAL BITS is the total number of bits in the entire Wiegand String max Is 64 D SIART BIT gt is the starting bit of the ID FIELD where the first bit is O lt D NUM BITS is number of bits in the ID FIELD must be contiguous Example Standard 26 bit Wiegand is PSSSSSSSSDDDDDDDDDDDDDDDDP 1 Parity bit 8 SITE CODE bits 16 ID bits 1 Parity 26 total bits ID Start Bit is 9 where first bit is O ID Number of Bits is 16 This would be represented as WIEGAND PASS 26 Bit Pass Thru 26 9 16 And the text 26 Bit Pass Thru would be added to the dropdown box Selection of thisoption would show the data in the associated boxes Document 430 00127 18 50 Copyright 2005 Bioscrypt Inc All rights reserved bloscrypt UNIT PARAMETERS As seen below one special format CUSIOM 1 1 1 isalso added When this is selected the user can enterthe TOTAL BITS ID START BITS and ID NUM BITS directly into the VenAdmin user interface These valuescan then be sent to the unit The values are NOT saved to the WFORMAT DATfile however To add items directly to the file any standard text editor will work since WFORMAT DAT is a text file format is IDENTIFIER MV1100 Code bits tex
152. rmed before the change is accepted This dialog also contains two checkboxes to enable the use of a 1 way hashing function on the SiteKey pnorto sending to the V Smart Use software HASH This is an extra secunty step that will convert a simple text password to a 120 bit encrypted string every time it is transmitted to the V Smart See Appendix E Smart Card SiteKey Management for precautions related to changing SiteKeys and using the hashing function The VenAdmin Secunty Settings dialog box also allows the Administrator to change the Primary and Secondary SiteKeys and to choose whether those new keys will be hashed or not Pressing the CHANGE SITEKEY button will always perform a SiteKey Verification before changing the cument primary and secondary keys regardless of the timeout settings A new addition to this dialog is the ESI SiteKey Security option The checkbox USE ESI SITEKEY ENCRYPTION is used in conjunction with the drop down box for MIFARE based V Smarts This deals with how SiteKeys are managed on the smart card itself There are 3 available settings for MIFARE based V Smarts and 2 settings available to IC LASS based V Smarts The default setting uses ESI SiteKey Encryption The other two or one available options do not use ESI SiteKey Encryption and are provided for compatibility with other applications that want to read and or write data to the smart card The checkbox must be unchecked to enable these options NOTE For MIFARE V
153. rmware version 7 30 and above also support User Access Scheduling on a per template basis Schedules and holidays defined in the V Station Managercan be selected here forthe cument template By default a new template will be assigned to the built in access schedule 0 NO ACCESS but may be assigned to any of the 64 schedules Remember that the unit will ignore the assigned schedule if Access Scheduling is disabled see page 118 If this user s schedule should Observe Holidays be sure to check this box To view the schedule graphically click on the Select button This will bnng up the Access Schedule Selection dialog see Figure 21 Document 430 00127 18 31 Copyright 2005 Bioscrypt Inc All nights reserved TEMPLATE MANAGER NO ACCESS SCHEDULE Schedule 1 Schedule 2 Schedule 3 Schedule 4 Schedule 5 Schedule 6 Schedule 7 Weekly Access Schedule L Green segments indicate time when access is ALLOWED IV Observe Holiday jv Ignore Schedule for Dur Check Current Access Figure 21 Access Schedule Selection From this dialog you may easily view and select an appropnate schedule for this template Today sday of the week according to the unit will be highlighted in blue To check whether the template would have current access on this unit click the Check Cument Access button note that this takes into consideration defined holidays if holidays are being observed Cli
154. roadcast packets even if a response is requested This is because the software would not know how to handle multiple responses in much the same way as it cannot handle responses from multiple readers on a RS 485 network Therefore you may not enter the Unit Parameters dialog when the 1 Broadcast Ethemet option is selected in the dropdown only purely one way broadcast optionsare allowed Document 430 00127 18 124 Copyright 2005 Bioscrypt Inc All nights reserved bloscrypt Biosc rypt Contact Information Technical Support Contact Information Telephone 866 304 7180 toll free 818 304 7180 direct Fax 818 304 7187 Email sup pot bioscrypt c om Web http www bioscrypt com Hours 5 30A 5 00P PST Monday Friday Address Bioscrypt Inc Technical Support RMA Dept 5805 Sepulveda Blvd Suite 750 Van Nuys CA 91411 Corporate amp Canadian Office U S Office 5450 Explorer Drive Suite 500 Mississauga ON Canada LAW 5M1 T 905 624 7700 F 905 624 7742 www bioscrypt com Document 430 00127 18 5805 Sepulveda Blvd Suite 750 Van Nuys CA 91411 T818 304 7150 F 818 461 0843 125 BIOSCRYPT CONTACT INFORMATION U K Office 35 Jackson Court Hazlemere High Wycombe Buckinghamshire England HP15 7TZ T 444 0 1494 814 404 F 444 0 1494 815 513 CC opyright 2005 Bioscrypt Inc All rights reserved
155. rying to venfy a live image and will not be able to process the Enrollment You can tell when this happens because the top LED will tum amber If this does happen simply place a finger and let the V Smart complete the Verification attempt Then press the SAVE TO SMART CARD button and wait for the PLACE SMARTCARD CLOSE TO READER prompt NOTE It is essential that the Administrator read and fully understands the information presented in Appendix E Smart Card SiteKey Management Failure to use the V Smart in the proper way can make the V Smart less secure and potentially unusable if SiteKeys are forgotten or compromised Document 430 0012718 86 Copyright 2005 Bioscrypt Inc All rights reserved bloscrypt APPENDIX D V SMART OPERATIONS V Smart Terminology e V Smart Term used to designate the complete hardware product The V Smart actually contains an embedded MV1200 with expanded I O functionality an Extemal Storage Interface ESI module and a MIFARE or ICLASS based smart card reader e Extemal Storage Interface ESI This module is intemal to the V Smart and acts as an interface between the MV1200 and the smart card reader Extemal pigtail wires connect the MV1200 and ES together As of July 2002 this component comes in two varieties one that works with MIFARE readers and one that works with IC LASS readers e Primary Template This is the template that resides in the first template slot on the smart card When
156. s The behavior of this functionality is also dependent on the Wiegand format enabled on the unit when the Use Wiegand String option is selected in the Smart Card Manager The relationship between the format and the class of Smart cards is explained below MIFARE Serial Number The serial number stored on the card is 32 bits in length therefore to use thisas an ID it is recommended that a Wiegand format be chosen that allows 32 bits of ID This can be selected under the Wiegand tab in the Unit Parameters window The uploadable Generic 34 bit format is a format that contains 32 ID bits This format contains an odd parity bit and an even parity one both of which are calculated in the same manner as the standard 26 bit format Altematively as an example a custom Wiegand format can also be created by selecting the radio button labeled Pass thru and selecting CUSTOM from the drop down menu The following numbers can be used forthe format e Total bits 32 Document 430 00127 18 102 Copyright 2005 Bioscrypt Inc All nights reserved bloscrypt APPENDIX D V SMART OPERATIONS e D Start bit O e No of ID bits 32 When the user isat the enrollment window Quick or Advanced the Extended ID field is gra yed out Selecting a Wiegand format that contains less that 32 ID bits such as the Standard 26 bit format will result in a truncated Wiegand ID If the Standard 26 bit format has been selected upon selecting the Smart Card SN but
157. s one to many or identification Whereas the V Prox or V Flex are typically used with a proximity card or extemal device to indicate a user s ID the V Pass and V Station Searching no longer require this extra form of identification only the fingerprint is required To perform this quick database search of all enrolled templates the V Pass V Station Searching require a fingerprnt template that is different than the fingerprint templates required for the other Ven Senes products The one to one templates are typically 348 bytes of data whereas the searching templates are larger With the release of version 7 50 of fimware the searching template size is 2488 bytes whereas previously it was 2352 The searching template contains all the data from a one to one template and more Bioscrypt provides a way to generate a one to one template from a searching template This conversion is available in our SDK for software developers oras part of the VenAdmin Management Software for end users see the Template Conversion section Users should be aware of the following e Searching templates are differentthan one to one templates e With the release of firmware version 7 50 Searching templates should use the default extension of tms Previous versions used the mtm extension e One to One templates should use the default extension of tem e Only a V Pass or V Station Searching can create a k a enroll a searching template e A search
158. s Dialog Verification Response Tab ses 54 Figure 36 Unit Parameters Dialog General Purpose I O eeeeeeeen 56 Figure 37 Broadcast Parameters WINK OW seeeeeeeeenenennennnnnnnnnmnneennnnnnnnnnnnnnnnnns 58 Figure 38 The Advanced Enrollment Screen ss sseesssrsrrrerrresssrrrrrrrrrerssrnnnrrnrrerssrnnnrrrnreres 59 Figure 39 Advanced Enrollment Finger Selection eeeeeeeeeeeennnn 60 Figure 40 Advanced Enrollment Recommended Choice esee 60 Document 430 00127 18 xiii CC opyright 2005 Bioscrypt Inc All rights reserved bloscrypt Figure 41 Figure 42 Figure 43 Figure 44 Figure 45 Figure 46 Figure 47 Figure 48 Figure 49 Figure 50 Figure 51 Figure 52 Figure 53 Figure 54 Figure 55 Figure 56 Figure 57 Figure 58 Figure 59 Figure 60 Figure 61 Figure 62 Figure 63 Figure 64 Figure 65 Figure 66 Figure 6 7 Figure 68 Figure 69 Figure 70 Figure 71 Figure 72 Figure 73 Figure 74 Figure 75 Figure 76 Figure 77 Figure 78 Figure 79 Figure 80 Figure 81 Figure 82 Figure 83 Document 430 00127 18 Advanced Enrollment Finger Selection O ption sseee 61 Advanced Enrollment OVERRIDE Recommended Choice 61 LED Ta De CNIS MENU saves ad saco bU A DRIMPRE Via ER Sud ERU 62 LED Ta Ole Set ING Ss oecon
159. s while the default for all others is 750 ms Bioscrypt does not suggest lowering the default timeout but we do advise increasing it by 1000 or 2000 ms if a more complex Smart Card layout is used i e more sectorsorapplication areas used The timeout must be between 500 and 5000 ms Pressing the SECURITY SETTINGS button will bring up the following dialog box Document 430 00127 18 94 Copyright 2005 Bioscrypt Inc All rights reserved bloscrypt APPENDIX D V SMART OPERATIONS Smart Card Security Settings M Smartcard Administrator Siteey Verification ESI Siteey Security l l W Use ESI Sitekep Encryption C DISABLED will only work if no password is used Enter Once f Enter Everytime unique one way HASH function which provides additional security Timeout 5 Minutes however other applications will not ss able to use the same Site Kep r Smartcard Administrator SiteEiey Confirm key here New PRIMARY Use software HASH New Secondary Use software HASH Change Sitekey Cancel Figure 68 Smart Card Security Settings This dialog will allow the userto adjust how often the SiteKey venfication is performed The default is EVERYTIME and VenAdmin will reset to this default setting every time the application is started To change select the desired choice and press the SAVE ADMIN SETTINGS button A SiteKey venfication is perfo
160. scrypt TEMPLATE CONVERSION Template Conversion i Yeri dmin 5 00 Yeri4dmin v5 00 File Configure view Help Network Setup ii Unik Parameters Led Table Settings Broadcast Parameters Quick Enroll Advanced Enrollment Sensor Configuration Choosing the Template Conversion menu item will allow the user to convert templates stored on the PC from the larger Searching Templates used with the V Pass for example to the smaller 1 1 Venfication Templates used with the V Prox V Flex V Smart and the non searching versions of the V Station see Appendix C for details Update Firmware k Using the Template Conversion Dialog users can choose Reset Unit to Factory Defaults the source searching template and destination one to m one template directories by pressing the appropriate Wiegand Utilities Select Folderbutton and selecting the desired directory V Sprart Security Sethings Figure 56 Template Conversion Menu eee Next highlight the searching select templates that you wish to convert or press the Select All button to select all appropriate templates in the selected directory CONVERT Pressing the Right Arrow button Will convert all selected searching templates to one to one templates The names will remain the same but the extension will change from tms Retesh Refresh to tem or if converting older Select Folder Select Folder searc h ing te
161. second will be available foruser data These two blocks may be written to or read using the Bioscrypt SDK but not using VenAdmin When all other blocks have been placed and there is sufficient space place the SECONDARY template You will not be able to place Template 2 if you have placed two User Blocks because there will be insufficient space Finally there is a convenient way to make the V Smart layout wrap around sectors where non Bioscrypt data is located or is planned to go Select the Unavailable Block button then hold down the SHIFT key to place multiple blocks Do this before placing the other layout items so that when they are placed they will automatically wrap around those blocks Click Set Layout to finalize the layout You will need to provide the curent SiteKey Upon successfully setting the layout the Smart Card Layout Manager will close retuming to the Smart Card Manager If at any time you would like to RESET the layout back to Bioscrypt defaults click on the Reset Layout button and provide the current SiteKey This will set the layout as shown in the screen shot shown above As a convenience version 4 40 of VenAdmin includes the ability to load and save MIFARE based smart card layouts from to the PC Files are saved by default with a sl1 extension This can be used to backup the V Smart card layout should a non default layout be used and can also facilitate programming multiple V Smarts identically and more rapidly
162. sh to transfer 2 Click the From Unit gt PC button 3 When the screen in Figure 23 appears confirm the download path and directory make any applicable changes 4 Click the Save button When completed the files will be loaded in the designated directory on yourPC NOTE If you are in a networked environment you only need to download from one unit since the template should be the same on all units File names are derived from the Template ID and Index numbers e g this is template ID 1 index number 0 277 0 tem File pame lem Default file type is based on the unit type ave ap type Verification Template Files tem Figure 23 Download Template s to PC Document 430 00127 18 35 Copyright 2005 Bioscrypt Inc All nights reserved bloscrypt TEMPLATE MANAGER From Unit to Smart C ard This feature is only available to V Smart MIFARE ICLASS and _ V Station MIFARE ICLASS Downloading a template from the unit to a Smart Card requires that the current SiteKey be entered and that it match both the SiteKey on the ESI and the SiteKey on the Smart Card if not a fresh card When asked forthe SiteKey enterit and click OK Enter Site Key Please enter the Current SITE KE r for the VOMART reader and press the OF Button m Use 14Wway Hashing Function when transmitting this SITE KE Cancel Figure 24 Download Template s to Smart Card Present the Smart
163. ssrrrrrreesssrrnrrrrrreessrrnrrrrrreessernnrenn 78 False Acceptance and False Rejection eeeeeeeeeennnenennnnnnn nnns 78 SUL m 79 Sm 80 Content and Quality Summary eeeeseeeeesseeeeeennnnnnnmneennnnnnnnnn nennen nnn 81 Recommended Enrollment Proc ESG cccccccccesssssssseeeeeceeeeeeesssseceeeeeeeeseaassseeeeeeeees 81 Appendix B Broadcasting for RS 485 Networks eeeeeeeeeeeneenennnnnnnnnnnns 82 Appendix C Searching vs One to One Templates eene 84 Appendix D V Smalt Opera TONS sensorerna annie 86 Administrator s Note ccccccccccccesessseeeeeeeeeeeeuaeesseeeceeseeeeeuaassseeeeeeseesenaaaasseeeeeeeesssaaaasseseneees 86 Meal Tel OlO GY ER 87 VsSmatt Smart Card Place me Mironis a 87 Section D 1 HOST Mode versus SLAVE Mode Operation eeeeeeeeee 88 Section D 2 Transfering a Template to a Smart Card eene 89 Section D 3 Enrolling a Template Directly to a Smart Card 90 Section D 4 Using the Smart Card Manager eeeeeeeeeeeeenennnnnnnnnnnnn 90 MIFARE based V Smart Layout Manager s sssessssrsrrrrreressrrrrrrrrreesssrrrrrrrrresssrrnrrnns 96 IC LASS based V Smart Layout Manager sss nnns 99 Section D
164. stallation is no longer completely secure Let s say you want to change the SiteKey from cat to dog e n the Smart Card Security Settings window enter dog asthe New PRIMARY and enter cat as the New SECONDARY and confirm the keys by entering them twice Smart Card Security Settings Smartcard Administrator 5iteF eu Verification ESI 5iteK ey Security jw Use ESI Site amp ey Encryption C DISABLED will only work if no password is used Enter Once Key B Read tite f Enter Everytime unique one way HASH function which provides additional security Timeout 5 Minutes however other applications will not be able to use the same Site Kep Smartcard Administrator Siteey Confirm key here Hew PRIMARY E E Use software HASH New Secondary E 71 Use software HASH Change Sitekey SAVE Settings Cancel Figure 76 VeriAdmin Security Settings e Press the CHANGE SITEKEY button and you will again be presented with the waming that you need to always remember the SiteKey e After pressing the ACCEPT button you will be prompted for the CURRENT PRIMARY SiteKey Enter cat since that is the currently stored SiteKey on the V Sma rt e You should then be presented with a dialog indicating the SiteKey was changed Typically you wil need to repeat this change process on all V Smarts at your installation Document 430 00127 18 110 Copyright 2005 Bioscrypt Inc All nights reserved bloscrypt APPE
165. t can store two SiteKeys The PRIMARY SiteKey is used in nomal operations and is the SiteKey the Administrator used with performing a SiteKey venfication operation within VenAdmin The SECONDARY SiteKey is only used to update older cards when a new PRIMARY SiteKey is set See How do Change the SiteKey if Already Have a User Base of Previously Created V Smart Smart Cards for further details on how and when to use the SECONDARY SiteKey How do I Initially Seta SiteKey for V Smarts at My Installation You will need to set your installation s SiteKey pror to creating secure user smart cards Once you become familiar with V Smart operations and are comfortable enroling users you should then choose your own SiteKey Ihe SMART CARD MANAGER section of VenAdmin allowsthe userto create and change SiteKeys Document 430 0012718 107 Copyright 2005 Bioscrypt Inc All rights reserved bloscrypt APPENDIX E SMART CARD SITEKEY MANAGEMENT Smart Card Security Settings Smartcard Administrator Sitekey Verification ESI 5iteK ey Security Use ESI Sitekep Encryption C DISABLED will only work if no password is used Enter Once Kev B Reads tite f Enter Everytime unique one way HASH function which provides additional security Timeout 5 Minutes however other applications will not be able to use the same Site Fey Smartcard Administrator 5iteey Confirm key here Mew PRIMARY Use software HASH New Secondary Use sof
166. t card the V Smart will check the key currently used by the Smart Card If the V Smart Primary SiteKey matchesthe key on the smart card the template is written e lf the above fails the V Smart will check if its Secondary SiteKey matches the key on the smart card If they match the key on the smart card is updated to the V Smart s Primary SiteKey and the template is written this adds 0 5 secondsto the process e lf both Primary and Secondary SiteKeys fail the V Smart will compare the smart card key with the standard default MIFARE or iC LASS smart card key If they match the key on the smart card is updated to the V Smart s Primary SiteKey Document 430 00127 18 109 Copyright 2005 Bioscrypt Inc All rights reserved bloscrypt APPENDIX E SMART CARD SITEKEY MANAGEMENT and the template is written e lfallofthe above 3fail the V Smart can not read or write to that smart card How do I Change the SiteKey if Already Have a User Base of Previously Created V Smart Smart Cards Let s say you initially set the SiteKey dunng installation For example the Primary SiteKey was set to cat and the Secondary was set to 1 because you have no previous SiteKeys to update You then enrolled 100 users and created 100 smart cards The smart card key on each of those cards would be cat Now you want to change the password because the SiteKey of cat was compromised when non authonzed personnel where told the SitteKey and the in
167. t card readers Unit to Unit Use this option when you are in a networked environment and wish to transfer templates from one unit directly to another l In the Template Manager window select the template s you wish to transfer 2 Clickthe Unit to Unit button 3 When the screen in Figure 28 appears highlight the units to which you wish to transfer the templates 4 Click Start Transfer button a progress bar will indicate the progress Document 430 00127 18 37 Copyright 2005 Bioscrypt Inc All nights reserved bloscrypt TEMPLATE MANAGER All units listed in the Bioscrypt Network will be shown here other than the unit currently selected ubearacend T ranafea Opri Phonon eor Template Feud Butler T Aai Ahang fio setae CE Figure 28 Transfer Templates from Unit to Unit Broadcast PC Template This option will allow template s stored on the PC to be broadcast to all units defined in the Network Configuration Manager The processis as follows 1 The template s willbe read one by one from the PC 2 Each specific template will be erased from all units on the network if the overwrite checkbox is checked 3 The template s will be transfered to each unit connected to one of the ports defined in the Network Setup dialog If the VERIFY BROADCAST is selected VenAdmin will attempt to verify that steps 2 and 3 where completed successfully After step 2 each unit will be polled to determine if
168. t comer you will see an icon that represents the type of unit selected The iconsare asfollows V Pass O EM Unit il In addition the Unit Type combo box will display the product type name If VenAdmin cannot communicate with the device the unknown icon may be displayed Older versions of the Ven Senes products may also show an unknown type but may be set by the user Additionally the product s serial number is displayed The Transmit ID field indicates the Network ID in which to transmit You may press the Auto button to attempt to automatically find the ID of the cument unit However this will only work if only one unit is connected Finally you may now assign a name to each unit on your network to assist in differentiating the units on your network This information is stored on the PC and does not get stored on the actual unit Unit Status The unit status field will indicate ONLINE if it is able to establish communication with the device curently selected It will indicate NOT RESPONDING if VenAdmin cannot communicate or if the reader is busy If the current port on the device is locked it will indicate PORT LOCKED see the Communication Tab section for information on unlocking the port Click the Refresh button to retry communication Advanced Settings Clicking on the Advanced button will reveal more information and options Figure 17 For units placed on an Ethemet network available in VenAdmin version 5 10 and abov
169. t_string no spaces WIEGAND 0 26 Standard WIEGAND 1 44 Apollo WIEGAND 2 34 Northem WIEGAND 3 34 Northem no_ panty WIEGAND 4 34 Ademco WIEGAND 5 35 HID Corporate WIEGAND 6 37 HID l format is IDENTIFIER text sring no spaces TOTAL BITS ID SIART BIT ID NUM BITS note ID START BITis zero based l WIEGAND PASS 26 Bit Pass Thru 26 9 16 WIEGAND PASS Kantech XSF 39 22 16 WIEGAND PASS CUSTOM 1 1 1 Biometrics Tab The fourth tab in this dialog allows the user to set various parameters that are associated with Biometrics see Figure 34 Extreme caution should be used when making any changes in this tab because they will affect the operation of the unit s biometncs and thus affect over all security For example DISABLING biometnc verification will cause the unit asa whole to not require a finger for verification at any time Document 430 00127 18 51 Copyright 2005 Bioscrypt Inc All nights reserved bloscrypt UNIT PARAMETERS I Global Security Threshold Biometric Verification r Template Security C Very High Enabled During Verification choose an C High option for those templates with 9 security threshold set to NONE Medium C Low Enabled Finger Required C Very Low Disabled C Finger NOT Required m Multi Finger Verification r Duress Finger Mode Papers RARE 1 Enabled Disabled Inter Finger Timeout fi 0 fs Figure 34 Unit Parameters Dialog Biometri
170. te keys enabling different applications to share the card without having to share keys although this is certainly possible if desired Because of this the first 6 blocks 48 bytes of every page is used by HID to store keys and permissions Secondly although there are always two application areas area 1 and area 2 per page the amount of space given to one versus the other can be configured This is called the Page Offset Cards shipped from HID have the page offset set to its maximum value which indicates that app area 1 has full space allocated while app area 2 hasnone This can be changed one time however and after it is set a fuse is permanently blown and the offset cannot be changed afterwards The V Smart will blow this fuse when writing to a new card to permanently set this but does not have the ability to configure where that offset is see HID documentation for details on configuring these page offsets The final important thing to consider is that HID uses blocks Ox00 to Ox12 inclusive of page O for manufacturer data These blocks are unavailable to users and are reflected by the gray blocksin the 2 app area layout on the left This effectively leaves 1 896 bytes free for 2 application area cards and 1 560 bytes free for 16 application area cards something to consider when purchasing cards To configure the layout for your iCLASS based smart card VenAdmin will first need to discover which type of card isbeing used and how its me
171. tem wa 2211_O tern File name Seve as ppe Template Files tem Figure 8 Saving Templates to PC NOTE When the template is uploaded from the PC to a Ven Senes reader the Template ID number and Index number is taken from data within the file not from the file name Therefore even if you change the name of the file on your PC the Template ID and index will remain the same Please use the VenAdmin Management Software to modify Template ID numbers The top LED of all Ven Senes units see Figure 1 can illuminate in vanous colors and pattems Generally a steady color indicates a nomal state while a blinking LED usually indicates a special state such as expecting action from the user Green is generally used to indicate a positive response while red indicates a negative response Although configurable by the user all units ship from the factory with the default LED configuration described below To configure altemate LED behavior please see the section describing the LED Table Settings Steady Amber The unit is requesting that a fingerbe placed on the sensor This may be for verification orfor enrollment The user may remove the finger when the light goesout Blinking Amber The unit is requesting a proximity card be waved forenrollment into the reader The blinking amber light is seen when an Enroll Command Card is used to add a new userto the reader Steady Green The unit is indicating the successful completion of a verificatio
172. template options should be fully understood before using them e 1 1 Template Secunty Threshold Each template can be assigned a specific security threshold from Very Low to Very High None or Password Only For security levels Very Low through Very High please see Appendix A Quality and Content A security level of None will allow any fingerto passand is only recommended asa last resort for fingers difficult to enroll A security level of Password Only isa betteroption for users with troublesome fingerprints on V Station units Note that the template MUST have a non zero password or else templates with this security level will always pass verification without the V Station asking for a password Beware also that this security setting istreated the same as None when used on a non V Station unit because only a V Station hasa keypad for the userto type in their password e Password When a V Station unit has the password mode enabled see the Unit Parameters section each template can have an extra level of security by requinng a password in addition to or instead of a finger The password field is actually a number more like a PIN really and must be non zero A zero password istreated like no password e UserType This indicates whether the user has special privileges such as an Administrator Enroller etc User Types V Station Admin ID or V Station Enroll ID are intended only foruse on V Stations while Prox Enroll ID and Prox D
173. tensions of tem for one to one templates and tms forsearching templates Example l A customerhasa mixed network of V Pass and V Flex units 2 PC Enrollment station is setup with an attached V Pass unit and running the latest VerAdmin Management software 3 Using the Advanced Enrollment dialog the Administrator will enter an ID ex 1122 and sample enroll 3 different fingers and chose the best one asindicated by the software This fingerprint template will be saved to the PC ex 1122 O tmg The Administrator wil use the Template Conversion utility to create a one to one template ex 1122 O tem 6 Template 1122 O tms will then be transferred to all V Pass units on the network 7 Template 1122 O tem will then be transferred to all V Flex units on the network MI um Document 430 00127 18 85 Copyright 2005 Bioscrypt Inc All rights reserved bloscrypt APPENDIX D V SMART OPERATIONS Appendix D V Smart Operations The V Smart product is similar in sze and shape to both the V Flex and V Prox products However it incorporates a new method for template management The V Smart incorporates a contact less smart card reader based either on Philip Semiconductor s MIFARE or HID s ICLASS technology This allows a user stemplate to be written to a smart card during enrollment and then later read from the smart card during verification Since the template is stored on the card itself there is no need for netwo
174. tes Stored on the PC e Verify Templates Stored on the PC e Broadcasta Template from the PC to ALL unitson a port e Export the list of templatesto a file on the PC nM Tomplale Manages Templates on Dacs D hdex Name O O 1 John Johnson A list of templates _ currently stored on the 4 device are displayed enrollee name optional SeleciDeselectAd F ShowNames C Admini 1 of 3550 Templates Used Device Template Capacity is reported and updated as templates are added Pig 3 Update List button refreshes Templates Update List on Device listing Edit Delete or Verify L against a template selected from the list The Templates on Device List may be exported From Lina gt PC to a CSV file From Una Smartcard From FC gt Unit From PC Smancard Linit o Uni FC Functons j T PC Templates section Varity PC Template S used to edit or verify a template stored on Eda FC Template PC Also used to broadcast templates Broadcast PC Templates from PC to all units I VerniyBroadcast PM Ceverwrite Transfer section used for template distribution on Bioscrypt network Stop template transfers Sep Troner f AU between UNIT amp gt PC Figure 19 Template Manager Dialog Editing Templates To edit a template select the appropriate ID number s in the Templates on Device pane and click the Edit button Altematively yu may double
175. the HOST port The ENABLE PORT command will enable AUX port communications and a password is NOT required This allows the unit to be reset over the HOST port if the AUX password is forgotten VenAdmin allows this since the network is considered secure e f communicating over the AUX port The ENABLE PORT command will enable AUX port communications ONLY if the comect password is supplied All other commands will retum an enor indicating a locked port until the port is enabled properly You will notice many fields in VeriAdmin will be blank when the port is loc ked NOTE Bioscrypt recommends that the AUX port be disabled and password protected When an Administrator needs to communicate with the device using the AUX Port the procedure would be 1 Connect to the AUX port 2 In VenAdmin open the UNITPARAMETERS Communication Tab 3 Choose ENABLE PORT supply the correct password and pressAPPLY All Communications would then be allowed Once all administration is Document 430 00127 18 45 CC opyright 2005 Bioscrypt Inc All rights reserved bloscrypt UNIT PARAMETERS completed the Administrator would then disable the AUX port once again protecting it from unauthorized use Test Communic ations The button will perform a quick communications test with the current device The test will flash the LED each colorthen sound the buzzer Wiegand Tab The third tab in this dialog displays all settings associated with Wiegand in
176. tilities Smart Security Settings Figure 54 Reset Unit to Factory Defaults Menu Reset Unit to Factory Defaults X Reset Instructions Thig dialog allows pou to reset the current unit back to its factory default settings like when It wae onginally shipped Resetting may be done by category only ar all at once CAUTION The unit should only be reset after consulting the user manual or when instructed ta do so by Bioscrypt Customer Support Note templates will not be erased Parameters to Reset Serial Communication Wiegand Biometrics GPIO Ventication Response V erficatien Queue Prox Enrall Delete IDs LED T able Smart Card Settings Smart Card Site Kep V Station Settings V Station Transaction Log Erase all entries in the transaction log Resets ALI and HOST ports sets unit 1D to 0 Resets Wiegand to 26 bit with default settings Resets Global Security to medium and biometrics ON Resets GPIO and vertication responses to defaults Erases all entries in the verification queue Resets the Enroll Delete table for specific IDs Resets LED table to default and sets LEDs to Sets ESI to Head wirite all ESI settings to default Resets the Primary Rey to blank and Secondary to Resets date time biometrie schedules menus Check AI Cancel Figure 55 Parameters are grouped into like sections Document 430 00127 18 70 Copynght 2005 Bioscrypt Inc All rights reserved blo
177. tion attempts when a card is seen This makes it easier for Administrators to place the card near the reader and perform various operations like enrollments without the unit performing a Verification just because a card is sensed The V Smart will retum to HOST mode Document 430 00127 18 88 Copyright 2005 Bioscrypt Inc All nights reserved bloscrypt APPENDIX D V SMART OPERATIONS in one of two ways 1 A command is sent to the V Smart telling it to specifically retum to HOST mode 2 180 seconds have passed since the last communication on the AUX port In VenAdmin when you bring up the SMART CARD MANAGER the V Smart is put into SLAVE mode because a STATUS is sent to the ESI as the dialog is brought up When the user exits the SMART CARD MANAGER by pressing the OK or CANCEL buttons VeriAdmin will instruct the V Smart to retum to HOST mode Section D 2 Transferming a Template to a Smart Card VenAdmin version 4 00 adds a new capability to transfer a previously enrolled fingerprint template to a smart card The user can either transfera template from the PC to a smart card or from the intemal memory on the V Smart to a smart card To transfer a previously enrolled template that is currently stored on the PC to a smart card press the FROM PC gt SMARTCARD button The user will be allowed to browse to the desired PC template Once the template is chosen the EDIT TEMPLATE dialog is brought up and the template data is displayed Pressin
178. ton a waming message will be displayed to suggest selecting one that contains 32 ID bits referto Figure 72 It is recommended that you select a wiegand format that contains 3z ID bits Donot show me this warning message again Figure 72 Warning message for less than 32 bit ID In this case when the template is saved to the Smart Card it will remain a 32 bit number However when sent out asa Wiegand string it will be truncated to the least significant 16 bits since the 26 bit Format only allocates 16 bitsto ID ICLASS Serial Number The senal number of iCLASS cards is a 64 bit value therefore a Wiegand format supporting 64 bits for ID is recommended This format falls under the extended ID mode since it contains more than 32 ID bits When the enrollment window is opened the Extended ID box is also available and will be populated with the 64 bit serial number The Template ID field will display the least significant 32 bits of the same senal number Both the ID and extended ID will be saved to the Smart Card If a format allowing less than 64 bits for Template ID is chosen upon clicking Smart Card SN and presenting the card a waming message refer to Figure 73 is displayed As mentioned in the section above when saving the template the ID will remain 64 bits long but when transferred asa Wiegand string its length will be limited to that allowed by the format Document 430 00127 18 103 Copyright 2005 Bioscrypt I
179. ts e f either is below the minimum threshold follow the directions outlined in the previous section e lf both are above their minimum thresholds either accept the created template or attempt another finger trying to achieve the best quality possible e f multiple fingers are attempted and only one finger is required choose the template where both quality and content are above the threshold and which the quality is maximized Document 430 00127 18 81 Copyright 2005 Bioscrypt Inc All nghts reserved bloscrypt APPENDIX B BROADCASTING FOR RS 485 NETWORKS Appendix B Broadcasting for RS 485 Networks The BROADCAST feature allowsa command to be sent to ALL units connected on the same PC COMM Port Usng a NETWORK ID of 1 enables Broadcast Mode Although this is often a very convenient feature it also has some inherent issues that the user should be aware of and understand Bioscrypt recommends that only advance users attempt the BROADCASTfeatures NO REPLIES When in Broadcast mode no replies from the receiving unit are possible Because all units receive the command at the same time all units would then normally reply at the same time On a RS485 network if more then one unit is communicating at the same time the communications electrically collide and cannot be understood This is an inherent shortcoming of the RS485 protocol This collison will also happen if 2 or more units are assigned the same NETWORK ID since they
180. tumed to Bioscrypt during the warranty period and is shipped freight and insurance prepaid Merchandise must be properly packaged to prevent damage during shipping Before retuming a Bioscrypt product contact Bioscrypt Technical Service to obtain a Retum Material Authorization RMA number No product may be retumed whether in warranty orout of warranty without first obtaining approval from Bioscrypt The model number invoice number and senal number may be required for warranty service This warranty shall not apply to any product or any part of a product which in the judgment of Bioscrypt has been subjected to misuse negligence alteration accident improper maintenance or damage by excessive physical or electrical stresses Tampenng such as opening the housing of a biometric reader or replacing parts will void this warranty The warranty is void if the senal number of the Bioscrypt product has been defaced altered or removed or if the product has been modified Repair and replacement parts will be fumished on an exchange basis and may be either reconditioned or new All replaced parts or products become the property of Bioscrypt This warranty may also be voided for failure to comply with Bioscrypt s retum policy The warranty is not applicable to e Abnomalwearand tear e Damage caused dunng installation e Damage caused by the equipment or system with which the biometnc reader is used e Damage caused by modifications or repairs not
181. tware HASH Change Sitekey Cancel Figure 74 Smart Card Security Settings 1 Enter your desired SiteKey in the NEW PRIMARY box 2 Enter the previous SiteKey in the NEW SECONDARY box if you are changing SteKeys and you already have a user base of smart cards created with the previous SiteKey and you want to update those cards to the NEW PRIMARY SiteKey If there is not a previous user base of cards that need updated then entera 1 in the Secondary box to tum off the auto SiteKey update function NOTE DO NOTleave the NEW SECONDARY box blank unless you truly want to update all Default SiteKey smart cards to the NEW PRIMARY SiteKey This could compromise secunty since any smart card created by any V Smart using the Default SiteKey would automatically be updated to the new Pnmary SiteKey 1 Confirm the pnmary and secondary keys entered by typing them again in the second set of boxesto the nght 2 Pressthe CHANGE SITEKEY button 3 You willbe presented the following Waming dialog box Document 430 00127 18 108 CC opyright 2005 Bioscrypt Inc All rights reserved bloscrypt APPENDIX E SMART CARD SiTEKEY MANAGEMENT Warning citeKevs are NOT stored onthe PC Sitekeys are stored in the internal memory of the s Smart and used to encrypt each Smartcard Stekes are NOT retrieveable from the V Smart Itis the Administrator s responsibility to remember Smart SiteKeys The Administrator SiteKey is required ta ENROLL DELETE an
182. ument 430 00127 18 52 Copyright 2005 Bioscrypt Inc All nights reserved bloscrypt UNIT PARAMETERS searching type units The user can select the option desired and press the APPLY button to modify the setting on the current unit This section is disabled when the current unit doesnot have searching ability Template Sec unty This option dictates how the unit should behave when the template secunty threshold is set to a value of None In this case the user will always pass the venfication biometncs are ignored however the user must still place a finger on the sensor and have it detected in orderto proceed Because some fingers have difficulty being detected by the sensor the Administrator may opt to tum off the requirement that a fingerbe placed If tumed OFF the authorized ID will immediately pass without a finger NOTE This option requires fimware versions 7 20 and above Multi Finger Venfic ation The Ven Senes readers can be set to a higher security mode by requiring multiple fingers for all venfications except to enter Admin mode on a V Station The fingers can either be from the same individual or one finger each from different individuals as long as different template IDs are used As of version 7 30 this option may be set to use eitherone finger the default ortwo The Inter Finger Timeout is the time allowed in between separate finger verifications and may be any value between 1 and 30 seconds NOTE This o
183. updating units only when the user population will not be accessing the units such asafter nomal business hours When the update hascompleted VeriAdmin will verify the successof the update Network Status aq MV1200 V Station Searchi yf Online 4 30 40 1 50 22 Ekaterina s V Stat 10 10 1 236 MV1200 V Station Searchi w Online 4 30 7 40 1 50 2 Status Units On all Parts v TCP Connection Timeout s E v Check Versions Status OK Figure 53 Firmware Update Wizard Verifying Successful Update NOTEI Before attempting this operation make sure the cument communication settings are comect and that the PC and reader are communicating properly During fimware upgradeson a V Station the LCD will indicate the status of the upgrade Do notaccess the keypad or menus while the V Station is being updated As of version 7 20 all V Station products can utilize custom menus other than the built in menu in English Keep in mind that menus are version dependent If you are utilizing Document 430 00127 18 68 CC opyright 2005 Bioscrypt Inc All rights reserved bloscrypt UPDATE FIRMWARE a custom menu it isa good idea to also upload the comesponding menu prompt file after the fimware update V Station Manager gt Menus tab This ensures that any new menu items will be properly displayed Failure to do so may result in some menus appearing asgarbage text on the LCD NOTE2 The Update ESI Firmware menu option should
184. ure a new smart card that hasnot been Document 430 00127 18 92 Copyright 2005 Bioscrypt Inc All nights reserved bloscrypt APPENDIX D V SMART OPERATIONS updated with the proper SiteKey i e it still has the manufacturer s default keys You will not need to enter the current SiteKey to perfom this function Simply press this button and present the card to the reader Note that this action as well as any other activity which writes to the smart card will blow the fuse for ICLASS based cards pemanently setting the page offsetsthat control memory allocation forthe affected application areas Only the sectors of the smart card being used by the V Smart will be secured all other sectors will remain untouched Performing this function on a smart card which has already been secured will have no effect but is alowed The RESET CARD button will allow the userto un secure a smart card the reverse process after providing the proper SiteKey This will ERASE all V Smart data on the card including templates Wiegand Strings and other user data as defined in the smart card layout and set the SiteKey back to the original manufacturer s default This will essentially transform the card back into a fresh unused card with the exception of those sectors not defined in the layout sectors used by another application for example This cannot however undo the blowing of the fuse for ICLASS based cards Currently three manufacturer s settings
185. urse anyone accessing VenAdmin has the same pnvileges as a full Admin user Again please see the V Station Operators Manual for more information Section F 4 Broadcasting to V Stations VeriAdmin version 5 10 introduces Ethemet support using TCP IP protocols for direct connections to individual units This connection works in much the same way as talking to one unit over a serial port on RS 232 or RS 485 However to broadcast to units on an Ethemet network VenAdmin uses UDP IP a connectionless protocol This differs vastly from broadcasting on a serial connection using the 1 transmit ID The reason for this is that UDP is a datagram protocol instead of a streaming protocol and does not guarantee in order delivery of packets or reliable delivery at all for that matter Such isthe nature of broadcasting overan IP network The result of this is that the user should not expect 100 reliable transmission of commands to V Stations when broadcasting In most cases this will not be a factor but should be noted for such actions astemplate broadcasts or fimware upgrades especially over large domains Bioscrypt recommends checking the Venfy Broadcast checkbox in the Template Manager to ensure all templates armived successfully and checking the Verify Update checkbox in the Fimware Update Wizard Another difference to note about broadcasting on Ethemet as apposed to a serial port is that V Station units are programmed not to respond to UDP b
186. utton Document 430 00127 18 43 Copyright 2005 Bioscrypt Inc All rights reserved bloscrypt UNIT PARAMETERS MV1200 Veri Series Port MODE In the MV1200 based versions of the Ven Senes products except V Station certain combinations of ports and protocols are not allowed To simplify this each available mode is listed in a dropdown This will only be enabled if the unit isa MV1200 based unit For MV1200 based V Prox V Flex V Pass and V Smart only two of the three serial ports may be active at a time This parameter designates which of the two is considered asthe Host Port and which is considered asthe Aux Port 1 In the MV1200 Ven Series Port MODE section select the appropriate mode from the drop down list 2 Clickthe Apply button Waming Changing this may cause you to lose communication with the unit s f Mode 2 is selected the bottom RJ 11 port will be disabled If you are changing to mode 2 with a V Smart be sure you have an RS 485 converter Host Port Protoc ol This dropdown is enabled only for older MV1100 based devices and for the new V Station Ihe usual protocol settings are asfollows e RS232 Forone device located lessthan 150 ft from the PC e RS485 Fora network of up to 31 devices 1 In the Host Port Protocol section select the appropnate protocol from the drop down list 2 Clickthe Apply button Waming C hanging this may cause you to lose communication with the unit s Host Port and Aux
187. utton NOTE If you are using a smart card based reader and have selected Use Wiegand Stnng within the Smart Card Manager VeriAdmin will expect to receive the Wiegand String from an extemal reader and will wam you if none was provided Click the Enroll button The light on the unit will glow amber requesting the enrollee to place a fingeron the sensor Nestle the Ridge Lock into the first joint line on the finger The finger may be removed when the amber light goes out and VenAdmin instructs you to remove the finger The light will glow green and the unit will beep once to acknowledge that the fingerprint hasbeen captured If a fingerisnot placed within thirty seconds the light will glow red and the unit will time out of the enroll process Similarly the light will glow red if the unit wasunable to image the fingerprint See Appendix A Quality and Content fora discussion of proper enrollment On the Quick Enrollment screen the Quality and Content fields each will display from one to five stars indicating how well the print was read In addition a sample of the print will appear in the left center of the screen A rating of atleast three starsin each field is recommended If you are unsatisfied with the read repeat steps 3 and 4 above Document 430 00127 18 33 CC op yright 2005 Bioscrypt Inc All rights reserved bloscrypt TEMPLATE MANAGER 6 Pressthe Acceptbutton to continue with the enrollment 7 The Template Viewer window wil
188. vary among individual fingers for the same person Try enrolling an altemate fingerto see if the score improves e Alter the security level for that particular template by increasing the threshold a minimum of 1 level e g change the value from medium 3 to high 2 This will offset the false acceptance for that template by making it more difficult to match If use of that template indicates that Document 430 00127 18 80 CC op yright 2005 Bioscrypt Inc All rights reserved bloscrypt APPENDIX A QUALITY AND CONTENT raising the threshold one level still produces false rejections try setting the value to its highest secunty level 1 Waming Increasing a template s security may increase the risk of a false rejection forthat template A thorough enrollment procedure wil ensure streamlined and reliable verification for users It is recommended that all three options be performed in the orderlisted above to maximize the performance of the device Content and Quality Summary Normal Range Less than three stars Less than three stars Table 3 Quality and Content Minimum Thresholds Score Quality ContentCategory Poor Very High Table 4 VeriAdmin Management application map of score versus category Recommended Enrollment Proc ess Have the user pick one of the following fingers for enrollment Left Index Left Middle Right Index or Right Middle e Enrollthe chosen fingerand note the quality and content resul
189. vided by Bioscrypt as shown above The Smart Card Layout used by the iCLASS based V Smart has been simplified and does not allow quite as much flexibility as the MIFARE layout This is because the HID ICLASS smart cards contain 2K of memory twice as much as MIFARE and therefore it is not necessary to break apart the various pieces of Bioscrypt data orallow for piecemeal selection of layout components The Bioscrypt iCLASS layout automatically contains enough space for two templates and two associated Wiegand strings This requires approximately 97 blocks 776 bytes of memory less than half of the 256 total blocks per card The ICLASS smart cards come in two general configurations with either 2 or 16 application areas Ihe memory on both types of cards is accessed through pages The 2 app card contains only 1 page while the 16 app card has 8 Document 430 00127 18 99 CC opyright 2005 Bioscrypt Inc All rights reserved bloscrypt APPENDIX D V SMART OPERATIONS pages numbered O through 7 Each page therefore contains two application areas The actual memory is read 8 bytesat a time or in blocks Each iCLASS card contains 256 blocks for a total memory of 2048 bytes This is represented by the layout screen shown above the 2 app card layout is shown on the left while the 16 app card layout is shown on the nght There are several important peculianties to note about IC LASS smart cards First each application area has its own separa
190. will be assigned as the entire day from midnight to midnight but altemate intervals may be defined To add a holiday click on the Add Holiday button specify a particular day on the calendar control dates must be after the year 2000 and before 2038 and define a time interval by clicking on the Edit button Then click Apply to save the schedule to the unit Document 430 00127 18 120 Copyright 2005 Bioscrypt Inc All nights reserved APPENDIX F V STATION OPERATIONS Station Manager Clock Ethemet Biometric Schedules Menus Access Schedules Holiday Schedules Defined Holidays Holiday Information ITFeb 3 Haida 1 Sun Mon Tue Wed Thu Fri Sat 20 Apr 03 Holiday 2 49 30 1 2 3 4 5 6 26 May 03 Holiday 3 50 7 8 9 10 11 12 13 04 Jul 03 Holiday 4 51 14 15 16 17 18 19 20 01 5ep 03 Holiday 5 52 21 22 23 24 25 wei 27 13 Oct 03 Holiday 6 53 28 29 30 31 27 Nov 03 Holiday 114 5 6 7 25 Dec 03 Holiday 8 26 Dec 03 Holiday 8 L Holiday Time Access Denied Add Holiday Remove Holiday Name Holiday 3 E dit Remove Expired Remove All Pemove Expied Broadcast Save Holidays Upload Holidays Transaction Log i i Cancel Apply Figure 83 V Station Manager Holiday Schedules Tab To remove a holiday from the list highlight the holiday to be removed and click on Remove Holiday You may also Remove Expired holidays by clicking that button This will automatically remove a
191. ypt users have the option of choosing a different Enrollment other than the one recommended Simply press the ACCEPT button even though it is hidden by the red NO symbol A waming message will be displayed to confirm this un recommended action is desired 1 User Information 1 ID Index D Get Wiegand ID Wiegand String Smart Card SN Wiegand String qual 5 05 0 0 6 T ENROLL S This is NOT the Best Enrollment of the 3 Are you sure you wish to choose this Enrollment Fingerprint Image Template Data ENROLL ACCEPT r Finger GOR Ce ENROLL ee cr CONTENT C OC EC 4 9 Accept enrollment or Re enroll EXIT Figure 42 Advanced Enrollment OVERRIDE Recommended Choice 9 Once an Enrollment has been selected the nomal EDIT TEMPLATE window appears so that fields can be venfied and additional data added Here is where the User Type and Secunty Threshold can be set See the section is this manual on Editing Templates for more details on saving the template to either the current unit orthe PC disk Document 430 00127 18 61 Copyright 2005 Bioscrypt Inc All rights reserved bloscrypt LED TABLE SETTINGS LED Table Settings Choosing the LED Table Settings menu item will YeriAdmin v5 20 allow the user to define how the readers LED will File Configure view Help function under specific operations Selecting this iEn option will display the dialog shown in Figure 44 The d

Veri-Series Operations Manual

Contents

Download Pdf Manuals

Related Search

Related Contents