Home

E-Plex FIPS 201 Software User Guide

1. Exit From the File menu you can exit the software l Manage Schedules E Plex FIPS 201 System Software User Guide Page 2 7 From the Schedules menu you can add edit or delete unlimited number of access schedules in the system database Note You can assign a maximum of 16 schedules in each lock out of these total number of schedules in the system database An access schedule is a defined time period during the span of a week in which users can be granted access to the door One of the 16 schedules will have an Always 24 7 access schedule that is built into the system software this schedule cannot be changed or deleted Schedules with different access credentials for example PIN and Smart Card schedules and Smart Card only schedules cannot overlap Holidays Vacations Holidays Vacations l Manage Holiday Vacations From the Holidays Vacations menu you can create unlimited number of holidays vacations in the system database but can set up a maximum of 32 holiday and vacation schedules per lock When a holiday vacation period one day or a consecutive block of days is assigned to a door the door will NOT grant access to any Users during that period Holidays vacations can be overridden by all Service Users plus any other selected privileged Access and Manager Users Door Groups Door Groups l Manage Door Groups From the Door Groups menu you can add edit or delete any number of d
2. E Plex FIPS 201 System Software User Guide Page 3 53 In the Department Name field type the name of the user group you are adding Note The Department Name can be a maximum of 20 alphanumeric characters and no spaces and special characters are allowed except for the character Click Save The system saves the changes and displays a confirmation message Click OK The software displays the new Department user group in the Manage Department window Click Close Department Note You can add additional Departments at any time Editing a Department Complete the following steps to edit a user group From the Manage Department window click a user group to edit Click Edit The software displays the Edit Department window i yee a iHe ye haa anc g a Department D Office Staff Global In the Department Name field change the name of the user group E Plex FIPS 201 System Software User Guide Page 3 54 D Manufacturind e Click Save The system saves the changes and displays a confirmation message e Click OK The software displays the updated Manage Department window D Office Staff Global e Click Close to exit the Manage Department window Deleting a Department Complete the following steps to delete a Department e From the Manage Department window select and click a Department to delete Ifa Department contains any users in it you must first delete all these users
3. Choose from access schedules that have been previously defined for the door which means that the maximum number of access schedules that can be assigned to a user for a particular door is the number of access schedules defined for the door up to 16 E Plex FIPS 201 System Software User Guide Page 1 7 Holidays Vacations You can define an unlimited amount of holidays vacations in the system database However you can define only up to 32 holidays vacations in a lock A holiday vacation template is a defined time period during which users will NOT be granted access to a door By default there will be no access allowed to a door lock during a defined holiday vacation period except for the global Master user and the individual Door Group Manager users for their door groups only The Service Users and any privileged users who are set up to override the holidays vacations will also have access during the holiday vacation period Access Groups An Access Group is setup when you define a collection of doors WITH an Access Schedule assigned AND an access credential required during this schedule card only or PIN amp card access to each one of these doors This makes it easy when the operator wants to add a new user in the system database that should have access to many doors at various schedules very quickly saving enormous keyboard entries time Lock User Personnel Classifications Departments amp Users Up to six different
4. Click Assign The software displays the assigned schedule in the Door Access Schedules pane Manage Access Schedules Door Group Door Name Lock Model Lock Function Door Access Schedules Schedule Name Staff Offices Office 1 E Plex 5800 Entry Lock Mon Tue Wed Thu w w w w Xx Xx Xx Xx Sat Start w 1200 AM 12 004M Assign Door Access Schedules End Credential 12 00 4M Card 11 00PM Card Passage Mode None None Available Schedules Required Credential Required Passage Mode Select Schedule v Card Su Mo Tu W Th Fri Sa Start Unassign Note After a schedule is assigned to the door the drop down lists return to their default settings Click OK The system displays the Edit Door window Select the appropriate Holidays Vacations settings e Use Door Group Default Holidays if you are happy with the holiday setting previously set under the Manage Door Groups menu where this lock belongs e Override Holidays for this door if you want to change the previously setup holiday settings under the Manage Door Group menu Note When Use Door Group Default Holidays is selected the Holidays Vacations button is grayed out E Plex FIPS 201 System Software User Guide Page 3 34 lf Override Holidays for this door is selected click Holidays Vacations The software displays the Assign Holidays Vacations window Manage Holidays Vacations HA Assign Holidays Vacations Door Group Staff Offices Doo
5. E Plex FIPS 201 System Software User Guide Page 6 17 e Click Install Client Software Prerequisites The system checks for existing components i E Plex FIPS 201 Access Control Software Install Package aa KATA i E Plex FIPS 201 Access Control Software Install Package Install Server Software Prerequisites J Microsoft Net Framework 1 1 aaa ath d Microsoft Net Framework 1 1 SP1 Setup eee ne existent Microsoft WSE 1 0 SP2 components in your system Microsoft Net Framework 2 0 Please wait Microsoft SQL Express Microsoft SideBySide libraries CoreStreet Components Install Client Software Prerequisites J Microsoft Net Framework 2 0 Microsoft SideBySide libraries Omnikey CardMan Driver V 1 1 1 5 Crystal Reports Libraries Version 1 0 Beta The system installs each component one after another If a software prerequisite is already installed on the computer the system does not reinstall it Note If you are using the same PC as both server and client then the Microsoft NET Framework 2 0 and Microsoft Side By Side Libraries installations will be skipped since they were already installed during the Prerequisites for the Server software installation phase Crystal Reports for NET e The system displays the Crystal Reports for NET Framework 2 0 setup window i Crystal Reports for NET Framework 2 0 x86 Welcome to the Crystal Reports for NET Framework 2 0 x86 Setup Wizard The installer
6. In the End Date field change the end date if necessary using the drop down arrow and selecting the date from the calendar E Plex FIPS 201 System Software User Guide Page 3 20 In the End Time field change the end time if necessary by using the up and down arrows Note The End Time field will be grayed out if the All Day Event check box is selected Click Save The system saves the changes and displays a confirmation message LD E Plex FIPS 201 Access Control Software Changes successfully saved Click OK The system displays the updated Manage Holidays Vacation window Manage Holidays Vacations Manage Holidays Vacations Holiday Vacation Name Start Date Start Time End Date End Time Add Campus Fall Break 10 11 2008 12 00 AM 10 19 2008 11 59 PM Christmas Holiday 12 24 2008 1200AM 12 25 2008 11 59 PM ia Delete Click Close to exit the Manage Holidays Vacations window Note You should update your locks to reflect modified holidays vacations by transferring the changed info to the M Unit and uploading programming the information to the locks For more information refer to M Unit Handheld in Chapter 5 Programming and Auditing Locks E Plex FIPS 201 System Software User Guide Page 3 21 Deleting a Holiday Vacation Complete the following steps to delete a holiday vacation Note You cannot delete a holiday or vacation if it is assigned to a door e From the Manage Holidays Vacations window select
7. Site Name Kaba Access Control Site PrivatelD 99999999 Site PrivatelD 11111111 Master User Master User Last Name Last Name Thomas First Name First Name Jawa Master PIN 12345678 Master PIN 87654321 Department Department User Type User Type Credential Type w Credential Type Card Ia Master Operator Master Operator Operator Name OperatorLogin Operator Name ilco Password Password Verify Passwon d Verify Password Operator Level Operator Level t Enter a Name for your Site Change the default site PrivatelD i Enter a Name for your Site Change the default site PrivatelD and Master PIN to different values Change the default Operat and Master PIN to different values Change the default Operator Name and Password from kaba kaba to a different Name Name and Password from kaba kaba to a different Name and Password The password must be between 6 and 10 and Password The password must be between 6 and 10 characters characters e Enter your Site Name your company or facility name which will be displayed on your system reports e Change the default Site Private ID 99999999 to a different value this value combined with an internal unique factory number will be your database encryption decryption key e Enter the following information in the Master User fields for the global Master of the system E Plex FIPS 201 System Software User Guide Page 2 5 e Last Name e
8. E Plex FIPS 201 System Software User Guide Page 3 97 Users Without an Active Card Report The Users Without an Active Card report displays all users that have been defined in the E Plex FIPS 201 software but have not been assigned either permanent or temporary cards yet View Reports Choose a Report Users Without a Card Sort By Choose a Column to sort on Last Name J Users Wit Choose the directionforder of sort Ascending From to Z ProEdit Descending From Z to 4 Tuesday January 22 2008 04 54 PM Total Us Group Name lAdmin Office Staff j Total Users Last Name First Name User Type Valid From Valid To Samuels Shane Access 1 2298 4 54 pm 1 2268 4 54 pm Group Name Global j Total Users Last Name First Name User Type Valid From Valid To Thomas Jawa Manager 1 2208 11 36 am 142209 11 36 am Generate Total Page No 1 Zoom Factor 85 From this window you can print and export save the Users Without a Card report E Plex FIPS 201 System Software User Guide Page 3 98 Operating the E Plex Lock at its Keypad 4 This section describes how to operate the E Plex 5800 lock at the lock keypad including the following topics e Overview of the Lock e Configuring the Lock Functions e Initial Programming of the Lock E Plex FIPS 201 System Software User Guide Page 4 1 Overview of the Lock This section provides an overview of the lock including the following to
9. E Plex FIPS 201 System Software User Guide Page 3 8 Readback DESFire Card Creation Date vite Sequence Cod ee e Teits tos e Click Read Card e Present the DESFire card to the Smart Card enroller as shown e The enroller reads the card and displays a confirmation message 9 E Plex FIPS 201 Access Control Software DESFire card read successfull E Plex FIPS 201 System Software User Guide Page 3 9 e Click OK The system displays the user information for this card if present in the Readback DESFire Card window Readback DESFire Card Readback DESFire Card Readback Information LastName Jackie First Name Henson User Group Global User Type Manager User ID SS User Status w Card Type Permanent User Creation Date 01 22 2008 09 30 AM Walid From 01 22 2008 09 13 AM Valid To 01 22 2009 09 13 AM Card oagFaasiomireg Sequence umber DESFire card read successful e Click Close to exit the window Database Management Backup amp Restore The Database Management feature enables you to periodically back up the database You can also restore the last backed up database in case of corruption with the current database in the system It is highly recommended that you perform a periodic back up of your database After backing up in this specific MicroSoft SQL folder you can copy this backed
10. User Group All User Groups User Griesbeck Daniel User Type Operator Login daniel Operator Level Password Verify Password Select a user to define as an operator users can be filtered by user group The password must be at least six but no more than ten characters long Only level 2 and level 3 operators can be deleted Level 2 and level 3 only can change their own password Select an Operator by clicking the ellipsis button in the Operator area of the window fad E Plex FIPS 201 System Software User Guide Page 3 7 Select the Operator from the Select Operator window and click OK Select Operator Select Operator User Name User Type Griesbeck Daniel Master Jackie Henson Manager Davis Tiffany Manager e Inthe Password field enter a new password for the selected Operator Note The Password must be at least six but no more than ten characters long Level 2 and Level 3 Operators can change their own password but cannot add or delete themselves e Inthe Verify Password field re enter the password e Click Save The software displays confirmation that the changes were saved successfully e Click Close to exit the Manage Operators window Reading a DESFire Card Complete the following steps to read a DESFire user card e From the System Setup menu select Readback DESFire Card The system displays the Readback DESFire Card window
11. 1 1 228 9 13am 1 2209 9 13 am Current Page No 1 Total Page No 1 Zoom Factor 85 If you want to view more Reports select another report from Choose a Report field in the upper left corner of this View Report window When you are finished viewing the reports click the red X in the upper right corner to exit the View Report window and return to the Main Menu E Plex FIPS 201 System Software User Guide Page 3 81 Printing Reports Complete the following steps to print a report by first generating it to view e Click the Print Report icon in the Main Report pane The system displays the Print window Printer Name Status Type Where Comment auto HPSSi on peas v Ready HP Lasenet 55i Mx WPEASO1S HPS5Si _ Print to file Print range Copies All Number of copies 1 2 lE Select your printer and any additional print options Click OK The report is sent to the printer for printing Printing Page 1 of document Cancel Note On some printers the printed column alignment of a report may not be correct If this happens save the file as a text file the default folder to save reports is C Program Files Kaba E Plex FIPS 201 MainClient Reports Module Reports Later you can retrieve the saved report through Windows Explorer and then print it to get a properly aligned report Exporting a Report Complete the following steps to export an
12. Complete the following steps of each of these root certificates EntrustCA cer and PIVCA cer 3 Right click the certificate and select Install Certificate Gen Scan for Viruses Open With lt Send To Cut Copy Create Shortcut Delete Rename Properties The system displays the Certificate Import Wizard Certificate Import Wizard Welcome to the Certificate Import Wizard This wizard helps you copy certificates certificate trust lists and certificate revocation lists From your disk to a certificate store 4 certificate which is issued by a certification authority is a confirmation of your identity and contains information used to protect data or to establish secure network connections 4 certificate store is the system area where certificates are kept To continue click Next 4 Click Next 5 Select Place all certificates in the following store 6 Click Browse The system displays the Select Certificate Store window E Plex FIPS 201 System Software User Guide Page 6 27 Select Certificate Store Select the certificate store you want to use BS Personal C Trusted Root Certification Authorities J Enterprise Trust J Intermediate Certification Authorities J Trusted Publishers A Lintriicted Certificates lt C Show physical stores 7 Select Show physical stores 8 Select Trusted Root Certification Authorities Local Computer 9 Click OK The system returns
13. IF YOU DO NOT AGREE TO ALL OF THE TERMS OF THIS AGREEMENT CLICK THE BUTTON THAT INDICATES THAT YOU DO NOT ACCEPT THE TERMS OF THIS AGREEMENT AND OR DO NOT INSTALL THE SOFTWARE IF APPLICABLE YOU MAY RETURN THE PRODUCT TO THE PLACE OF PURCHASE FOR A FULL REFUND SHOULD YOU HAVE ANY DIFFICULTY OBTAINING SUCH REFUND YOU MAY CALL CONTACT CORESTREET AT THE LOCATIONS PROVIDED BELOW YOU UNDERSTAND THAT IF YOU PURCHASED THE PACKAGE TOOT AN ATITLUMDIFEN DEICTT COME TICONSAD TU AT DESCTT CD TY NAT TICCNSADI S AGENT ARTY TS WITT O I accept the terms in the license agreement Cancel e Select accept the terms in the license agreement and click Next The system displays the Destination Folder window i CoreStreet Installer Destination Folder Click Next to install to this folder or click Change to install to a different folder Install the CoreStreet Path Builder Server Validation Extension 3 0 to C Program Files CoreStreet Validation Client E Plex FIPS 201 System Software User Guide Page 6 15 e Click Next The system displays the Setup Type window ie CoreStreet Installer Setup Type Choose the setup type that best suits your needs Please select a setup type All program features will be installed Requires the most disk space Custom Choose which program features you want installed and where they iE will be installed Recommended for advanced users e Select Complete installation a
14. ProEdit Descending From Z to 4 Tuesday January 22 2008 04 29 PM Total User Groups User Group Name Admin Office Staff Global Man Office Staff Generate Total Page No 1 Zoom Factor 85 From this window you can print and export save the Departments report E Plex FIPS 201 System Software User Guide Page 3 95 Users Report The Users report displays all users up to a million defined in the E Plex FIPS 201 software View Reports a ia Choose a Report Users Filter By C Show only Revoked Users ProEdit Sorn By Choose a Column to sort on Tuesday January 22 2008 03 36 PM Total Us Last Name Group Name Admin Office Staff Total Users 1 aii Choose the direction order of sort Last Name First Name UserType Card ID Card Type Count Valid From Valid To Ascending From A to Z Pickens Latoya Access 04541551001F80 DESFire 2 12208 11 21 am 1 22 09 11 21 am Descending From Z to A comana Group Name Global Total Users 3 ard Last Name First Name User Type Card ID Card Type Count Valid From Valid To Davis Tiffany Manager 04142951001F80 DESFire 2 1 408 2 14pm 1 409 2 14pm Permanent Card Griesbeck Daniel Master 04682859001F80 DESFire 1 2298 1 04pm 1 22 09 1 04 pm Permanent Card Jackie Henson Manager O40F3451001F80 DESFire 1 2208 9 13am 1 2209 9 13 am Permanent Card _ Generate Current Page No 1 Total Page No 1 Zoom Factor 85 From this wi
15. UG Technical CAC Mario Oberthur ID One 5 2 Dual UG Office CAC Tom Gemplus Gemplus GXP3 64 2N Access Group 4G TechStatt j Total Users 9 User Group LastName First Name Card ID UG Technical CAC Giovanni Oberthu Oberthur Ply UG Office CAC Jawa Oberthur ID One 5 2 Dual UG Technical CAC Mario Gematto Gemalto Pl UG Office DG Manager1 DG Mar1 Global FRAC Thomas FRAC Jawa UG Office Guest User UG Office Service User UG Technical Shephard Robert UG Office TAIC Thomas TAIC Jawa 82161314 60992424 40268215 32585219 13487994 User PIN 63174554 49657681 66416189 98762428 67654321 88885550 XXX 70902634 65314854 4 Revoked Current Page No 1 Total Page No 1 Zoom Factor 85 From this window you can print and export save the Access Groups with Users Info report E Plex FIPS 201 System Software User Guide Page 3 92 Operators Report The Operators report displays all three levels of Operators that have been defined in the E Plex FIPS 201 software View Reports KE m 4 Main Report Choose a Report Operators Sort By Choose a Column to sort on Last Name Operators Choose the direction order of sort Ascending From to Z Descending From Z to 4 KabaAccessControl Monday November 16 2009 11 35 AM Total Operators Last Name First Name Login Name Operator Level Roberts Carla carla 2 Thomas Jawa ilco 1 Generate Current Page No 1 Total P
16. X Connectivity Components and XML data and replication x Software Development Kit This feature requires 121 MB on your hard drive It has 2 of 3 subfeatures selected The subfeatures require 99 MIB on your hard drive Installation path c Program Files Microsoft SOL Server E Plex FIPS 201 System Software User Guide Page 6 10 e Keep the default settings on the screen Click Next The system displays the Authentication Mode window ie Microsoft SQL Server 2005 Express Edition Setup Authentication Mode The authentication mode specifies the security used when connecting to SQL Server Select the authentication mode to use for this installation O Windows Authentication Mode Specify the sa logon password below Enter password Confirm password e Important You must select the Mixed Mode Enter a password this is for the sa logon which you will encounter when configuring the SQL database server when installing the Server software later and confirm the password entry by typing it in the next field e Write down this sa logon password since you must type this same password later on when you configure the SQL database server login info under the Server Software section on page 6 36 Click Next The system displays the Configuration Options window ie Microsoft SQL Server 2005 Express Edition Setup Configuration Options Configure user and administrator accounts
17. and Privilege s boxes for this user from that available Click OK when done E Plex FIPS 201 System Software User Guide Page 3 77 Optionally you can also add more Access Schedules and Credential usage during these schedules for this door from this menu itself If you do not want to do this here skip this Add Access Schedule to Door option Click Add Access Schedule to Door The software displays the Assign Door Access Schedules window Add your additional schedules with credential usage etc just like you did earlier under Managing Schedules dialog in Section 3 Manage Access Schedules i Assign Door Access Schedules Door Group Staff Offices Door Name Office 1 Lock Model E Plex 5800 Lock Function Entry Lock Door Access Schedules Schedule Name Sun Mon Tue Wed i Start End Credential Passage Mode Always w v w 12004M 12 004M Card Manual Weekend v x x x 12004M 11 00PM Card None MWF Business Hours x w x w 08 00AM 05 00PM Card None Available Schedules Required Credential Required Passage Mode Select Schedule v Card None Su Mo Tu W Th Fri Sa Start e Click Save The system returns to the updated Assign Access Schedules and Privileges to User window Important If the Always door access schedule is selected no other access schedule can be selected Choose the applicable options from the Select Available Privileges for User area e Override Holidays Vacations The user can unlock t
18. for example 000 87654321 e Enter the Master code again 87654321 for confirmation Example of complete entry 000 87654321 87654321 e Key in another to indicate the end of Pushbutton Programming Mode e After you are finished you will always have to use this Master code followed by presenting your Master Smart card if the access credential for this access schedule calls for dual credential access Please write down the PIN and keep in a safe place You should enter this same 8 digit Master PIN in the E Plex FIPS 201 software configuration screen also to be consistent The factory code is no longer valid Additional Pushbutton Keypad Commands The following operations can only be performed at the lock s keypad All other functions must be set up and sent from the E Plex FIPS 201 software through the M Unit e Setting date and time commands 001 and 002 e Activating de activating Passage Mode command 399 e Increasing decreasing programmed Passage Mode duration command 005 e Activating de activating global Lockout Mode command 499 e Performing manual diagnostics command 500 e Identifying an E Plex lock model command 501 e Start M Unit communication session with the lock command 900 Setting Date and Time Commands 001 and 002 The following two commands are performed one after the other in sequence to set the lock with current date and time The factory default is 01 01 2000 when you first connect the b
19. stall Option 2 Custom Network Installation PS HIGH ASSURANCE or FIPS General Custom Install Networking For the FIPS HIGH ASSURANCE version of the software install there is no Express Install option since networking is mandatory here For this install environment please follow the detailed procedure as shown in the following few pages The E Plex FIPS 201 software mainly consists of Server related and Client related modules including their Pre requisite software modules and the M Unit related modules Additionally for the FIPS HIGH ASSURANCE software version only you will also be required to install CoreStreet s Path Validation component modules E KANEZA E Plex General FIPS 7 Software Prerequisites Components Server Software Client Software l J Server Software Installation You must install all Server related software on your separate Server PC starting with Server Prerequisites If on the other hand you will be using one standalone PC then you will install all Server and Client modules on this PC starting with installing all the Server related software prerequisites first by clicking on Software Prerequisites Components Complete the steps in the following order KATA E Plex General FIPS Install Server Software Prerequisites E Plex General FIPS S Microsoft NET Framework 2 0 Aicrosoft SQL Server 2005 Express rosoft SideBySide libraries _ Install Client Softw
20. the M Unit modules and CoreSireet s Path Builder modules will be installed in a networked E Plex FIPS 201 System Software User Guide Page 6 6 environment User interaction will be required as per displayed prompts during the install process Asa E Plex FIPS 201 Access Control Software Install Package Z x KARA E Plex FIPS 201 Access Control Software Install Package View _ System Requirements J Software User Guide J _ Software Installation Order J _CoreStreet Validation Extension Settings Install Software Prerequisites Components J Server Software J Client Software amp M Unit PDA J Version 1 0 0 16 E Plex FIPS 201 System Software User Guide Page 6 7 e Under View Click Software Installation Order and read the brief instructions and tips on the proper sequence of steps that you must follow when installing the E Plex FIPS 201 software Note The software registration process occurs when you install the Server Software e Close this screen and start the installation process starting with installing the Software Prerequisites Components After that when you click Server Software to install the system displays the following screen which prompts you to choose an option to register your software through Kaba Access Control s dedicated website or by calling Kaba Access Control s Technical Support phone line as shown below Lea E Plex FIPS 201 Access Control Software Install Pack
21. Count Enabled Time Sec Volume Til Descending From Z to A Office 1 Standard Entry Lock 4 ei DOOR GROUP NAME Storage Closets Door Name Assurance Lock Function Remote Tamper Passage Mode Level Unlock Count Enabled Main Hall Closet Standard Entry Lock 4 Current Page No 1 Total Page No 1 Zoom Factor 85 From this window you can print and export save the Doors report E Plex FIPS 201 System Software User Guide Page 3 89 Doors for a User Report The Doors for a User report allows you to view all doors that a particular user has been assigned to as well as the access schedules associated with each door in the E Plex FIPS 201 software View Reports EE Main Report Choose a Report Doors for a User Filter By User Groups Choose a User Group E Doors for a User Report Users Choose a User Tuesday January 22 2008 04 09 PM Last Name First Name User PIN User Type Revoked User Group Davis Tiffany 11611701 Manager Global 1 Doors assigned from Staff Offices Door Group Door ID Door Name 1 Office 1 1 Doors assigned from Storage Closets Door Group Door ID Door Name 2 Main Hall Closet Tiffany Davis has access to 2 Distinct Doorfs Last Name First Name User PIN User Type Revoked User Group Jackie Henson 9281 Manager Global 1 Doors assigned from Staff Offices Door Group Door ID Door Name 1 Office 1 1 Doors assigned from Storage Closets Door Group
22. Door ID Door Name 2 Main Hall Closet Henson Jackie has access to 2 Distinct Door s Current Page No 1 Total Page No 1 Zoom Factor 85 From this window you can print and export save the Doors for a User report E Plex FIPS 201 System Software User Guide Page 3 90 Access Groups with Doors Info Report The Access Groups with Doors Info report allows you to view all doors assigned to a particular access group in the E Plex FIPS 201 software View Reports Ta ah Ki Choose a Report a Main Report Access Groups with Doors info v Filter By Door Groups Access Groups with Doors info Report Choose a Door Group Sorn By Wednesday January 14 2009 03 02 PM Total Access Groups Access Group Total Doors 4 Door Name Credentia Schedule Name Passage Mode Sun Mon Tue Wed Thu Fri Sat Start End E5800 MortD Card 7A amp M 7PM M F Wone im Ka w EA x x i 7 00 AM OF 00 PM B E5800 Resct Card 7AM 7PM M F Mone x w lw x o 7 00 A amp M 07 00 PM Lock E5800 Resdt Card BAM 1PM Sat amp S one 8 00 AM 01 00 PM Lock un JayaDemo Card Always Wanual EJ EJ Ea Ka EA EJ EZ 2 00 AM 12 00 AM E5800Cyl Choose a Column to sort on Door Name Choose the directionforder of sort Ascending From to Z Descending From Z to A Access Group AG TechStafft Total Doors 2 Door Name Credentia Schedule Name Passage Mode Sun Mon Tue Wed Thu Fri Sat Start End E5800
23. From this window you can add edit or delete users including enrolling a FIPS or DESFire ID badge to a user from either the Add or the Edit menu Important You must enroll and assign a card FIPS or DESFire to the Master from the Add User menu otherwise the Master s credential will not work in the lock after programming the lock with the M Unit E Plex FIPS 201 System Software User Guide Page 3 57 Adding a User Complete the following steps to add a user Note Ensure that the Smart Card enroller is properly connected to the PC before beginning this process e From the Manage Users window click Add The software displays the Add User window t Last Name First Name User Group Access Group User Type Valid From Valid To Manage User Profile User Information a Add User None wl None Standard User DE SFire FIPS 2 01 02 0 Save Cancel User Status Y In the Last Name field type the last name of the user In the First Name field type the first name of the user From the User Group drop down list select a user group From the User Type drop down list select a user type Note The User Type field defaults to Access User Note Service user and M Unit user types do not have the PIN amp Card access option M Unit user can be Card only type but the Service user can be either Card only or PIN only typ
24. M Enable User Instances H This option enables users without administrator permissions to run a separate instance of the SQL Server Express Database Engine O Add user to the SQL Server Administrator role This option adds the user who is running the SOL Server Express installation program to the SQL Server System Administrator role By default users on Microsoft Windows Vista operating system are not members of the SOL Server System Administrator role E Plex FIPS 201 System Software User Guide Page 6 11 e Select Enable User Instances and click Next The system displays the Error and Usage Report Settings window ie Microsoft SQL Server 2005 Express Edition Setup Error and Usage Report Settings Help Microsoft improve sorne of the SOL Server 2005 cornponents and services Automatically send Error reports for SOL Server 2005 to Microsoft or your corporate error rreporting server Error reports include information regarding the condition of SQL Server 2005 when an error occurred your hardware configuration and other data Error reports Automatically send Feature Usage data for SOL Server 2005 to Microsoft Usage data Llincludes anonymous information about your hardware configuration and how you use our software and services By installing Microsoft SOL Server 2005 SQL Server and its components will be configured to automatically send fatal service error reports to Microsoft or a Corporate Error Reporting Server Micro
25. Name Schedule Name Sun Mon Tue Wed Thu Fri Sat Start End Credential Passage Mode F ES pv Pe n n e E C DG Techrical Labxyz Always we E E A E 1200A 12 00 AM A A D E Plex FIPS 201 Access Control Software The name of the Cloned Access Group is Clone of AG TechStat 4 Unassign Selected Access Schedules Total Access Schedules 2 All Door Groups Assign Selected Access Schedul Schedules Jf Add New D oor o Schedule Name Sun Mon Tue Wed Thu Fri Sat Start Credential o Ese00Monoe E TST TTT eseo0ResdLock oo Door Hame jjbit Clone Access Group lal E Plex FIPS 201 System Software User Guide Page 3 51 Deleting an Access Group Complete the following steps to delete an access group e From the Manage Access Groups window select an access group to delete e Click Delete Manage Access Groups x Manage Access Groups Total Total Access Group Hame Doors Users 4G Office 3 5 AG TechStatt 2 gJ e he system displays the following screen with a message to caution you what will happen when you delete this access group Click Yes if you really intended to delete this access group Eg Roa E Plex FIPS Access Control Software Are you sure you want to delete this Access Group It there are any users assigned to this Access Group ther new Access Group will be None If there are Users assigned to the Doors through this Access Group then theses Users will
26. Now all the selected users will be assigned to this access group as shown on the top panel Note By default in the Access Group menu all users except the manager s do not have any privileges However any users in an Access Group can be assigned one or more of the privileges under a different menu gt the Managing Specific Access Assignment menu dialog as described later in this chapter E Plex FIPS 201 System Software User Guide Page 3 48 Last Name First Name User Group User Type Card Type Guest User fie DESFite Permanent Card T shephad bet UGTechrical Access FIPS 20TCd seve fue Sone eevee foe SSS FRACThomas FRAJ fao Mese PPS OC DGMag Demi Ueo Manag DESFie Ferman Cad T CACMatcGenato Gento U amp Techricd Asses FPS201 Cad CAC JaneObethu ID Onev52Du UGD Manag FPS 20 Cad CACGiovenni Obethu Oberthur U6 Teshris Access FPS20 Cad First Name User Group User a Card Type Access Group Name Peete LN ame saaal FName UG Office DESFire Permanent Card UG Office FIPS 2 01 Card 2 Valid User EE Invalid User Click OK and then Save E Plex FIPS 201 System Software User Guide Page 3 49 AGTeshStt Manage Assigned Users Door Group Name Door Name Schedule Name Sun Mon Tue Wed Thu Fri Sat Start End Credential r ES pw CI r r r ES C DG Techrical LabxyZ Always a E A T 1200 AM 1200 AM Passage Mode Total Access Schedules 2 Door Nam
27. Select Manager Last Name First Name User Group Tiffany Global Jackie Henson Global Thomas Jawa Global Select Manager Credential Assign Cancel Select an existing Manager User from the list to become this door group s DG Manager Click Assign The software prompts you for confirmation E Plex FIPS 201 Access Control Software Are you sure you want to assign the Manager Harris John to all Door Groups E Plex FIPS 201 System Software User Guide Page 3 28 Click Yes The software displays the updated Manage Door Group Manager window Door Group Managers ee Manage Door Group Managers Select a Manager and a credential then click on the Assign button to save the information This will assign the selected Manager to all Door Groupes in the system ou will need to re program all doors in the system Select Manager Last Name First Name User Group Global Jackie Henson Global Thomas Jawa Global Select Manager Credential Click Close to exit from this dialog J E Plex FIPS 201 Access Control Software Some data has changed Do you want to save the changes before closing Click Yes to save changes Deleting a Door Group Complete the following steps to delete a door group Note You cannot delete a door group if it contains locks doors within this group and the doors have users assigned to them You must first unassign all users from these doors and then delete all these door
28. Software amp amp M Unit PDA ma Version 1 0 Beta E Plex FIPS 201 System Software User Guide Page 6 24 e Click Client Software amp M Unit PDA The system displays the Install window E Plex General FIPS Ss Client Software with PC M Unit PC M Unit only e From this window click Client Software with PC M Unit The system displays the Installation window Follow the screen prompts which requires minimal user interaction until the installation is complete E Plex Client FIPS 201 Access Control InstallShield Wizard InstallShield Wizard Complete Setup has finished installing E Plex Client FIPS 201 Access Control on your computer e Click Finish The E Plex FIPS 201 software is now installed e Click Back on the install window O E Plex General FIPS S Client Software with PC M Unit PC M Unit onl E Plex FIPS 201 System Software User Guide Page 6 25 Note In future If you need to install only the PC M Unit program on additional Netbook PC s click PC M Unit only and install only this module e Click Back again and the system returns to the main E Plex FIPS 201 Access Control Software Install Package browser menu L E Plex General FIPS Software for Standalone J E Plex General FIPS Software for Network J Smartcard Driver Installation The Smartcard enroller currently used is an SCM Microsystem s SDI010 model After installing all main applications related softwar
29. System Software User Guide Page 3 4 Operator Area e Inthe Login field edit the login ID To select a different Operator click the ellipsis button e Select the Operator from the Select Operator window and click OK Select Operator Select Operator User Name User Type Griesbeck Daniel Master Jackie Henson Manager Davis Tiffany Manager In the Password field enter a Password for the selected Operator Note The Password must be at least six but no more than ten characters long Level 2 and Level 3 Operators can change their own password but cannot add or delete themselves In the Verify Password field re enter the password Click Save The software displays confirmation that the changes were saved successfully Click Close to exit the Manage Operators window Deleting an Operator The Delete Operator option allows you to delete an Operator from the E Plex FIPS 201 software Note Only Level 2 and Level 3 Operators can be deleted and that too by Level 1 Operators only E Plex FIPS 201 System Software User Guide Page 3 5 Complete the following steps to delete an Operator From the System Setup menu select Manage Operators The software displays the Manage Operators window Manage Operators User User Group All User Groups User Griesbeck Daniel User Type Operator Login daniel Operator Level Password Verify Password Select a
30. Types Unlock Time secs Entry Lack fh Buzzer Volume 0 Off 3 Loud b wo Possible Lock Configurations f Tamper Count of tries Cylindrical without privacy Exit Trim Mortise without deadbolt k gt k gt lt gt k gt Q Tamper Shut Time secs Manual Passage Duration hrs 4 lt gt Passage Mode Enabled Remote Unlock Enabled Save Cancel Select a different Door Group from the drop down list if appropriate Edit any or all required fields that you want changed The software notifies you about the change AN E Plex FIPS 201 Access Control Software You have changed the Lock Function Type The Passage Mode Type of each Access Schedule assigned to this door will be modified to suit the function s profile Click OK Click Save The system saves the changes and displays a confirmation message E Plex FIPS 201 Access Control Software Changes successfully saved E Plex FIPS 201 System Software User Guide Click OK The software displays the updated Manage Doors window Manage Doors Manage Doors Lock Function Last Synched Total Users Add Lock Model Never synched 1 Edit Door Group E Plex 5800 Entry Lock Staff Offices Door Name Office 1 Delete M Unit Synched Se M Unit Sync Required Close Note You should update your locks to reflect modified door groups by programming the M Unit and uploading th
31. Users Operations Users Operations Users Operations Users Operations Users Operations Users Operations Users Operations Users Operations Users Operations Users Operations Users Operations Site Confiquration Users Operations Operator Login Logout Operator Login Logout Users Operations Total Page No 2 Description Operator Login Backup Database Operator Logout Operator Login Operator Logout Operator Login Add User Modify User Add Keycard Add Keycard Modify User Add Keycard Add Keycard Add Keycard Add Keycard View Report Delete User Modify User Modify User Add Access Group Modify User Operator Logout Operator Login Add User System Activity Log Report 3 Total System Activity Logs Operator Login Level 1 ilco ilco ilco ilco ilco ilco ilco ilco ilco ilco ilco ilco ilco ilco ilco ilco ilco ilco ilco ilco ilco ilco ilco ilco h d d d et et d os oe oe ee oe oe ad oe a ee a zoom Factor 100 From this window you can print and export save the Systems Activity Log Report E Plex FIPS 201 System Software User Guide Page 3 94 91 f Departments Report The Departments User Groups report displays all departments defined in the E Plex FIPS 201 software View Reports Choose a Report User Groups Sort By Choose a Column to sort on User Group Name 5 User Groups Report Choose the directionforder of sort Ascending From amp to Z
32. Windows to do Plex PC M Unit Software fideo i a r Gd View a slideshow of the images Ler Hi th fe al i SWEET LA Print the pictures ga using Photo Dae LA Ti Open folder to vie A Take nn actinn _ l Cancel E Plex FIPS 201 System Software User Guide Page 5 3 9 E Plex PC M Unit Software Install Package se AL AU sitwa lea Paces E Plex PC M Unit User Guide install EAP laos PE M Linit e Click Install E Plex PC M Unit and then select and click E Plex FIPS PC M Unit The software installation process will begin and you need to just follow the instructions on the screen The following are a few screen shots taken during the install process Click Finish when done E Plex PC M Unit InstallShield Wizard Preparing Setup Please wait while the InstallShield Wizard prepares the setup E Plex PC M Unit Setup is preparing the InstallShield Wizard which will guide you through the rest of the setup process Please wait InstallShield Cancel E Plex PC M Unit InstallShield Wizard License Agreement Please read the following license agreement carefully A IMPORTANT USE OF THIS SOFTWARE 15 SUBJECT TO LICENSE RESTRICTIONS CAREFULLY READ THIS LICENSE AGREEMENT BEFORE USING THE SOFTWARE ENTIRE AGREEMENT This end user license is a legal agreement between vou Purchaser and Kaba Ilco Ine hereinafter KABA It constitutes the entire agreement Agreement between Purchaser and KA
33. Worker Identity Credential issued to TSA Port Authority et al personnel e CAC NG EP Common Access Card Next Generation End Point issued to U S military personnel by the Dept of Defense The E Plex FIPS 201 software only reads the pre encoded FIPS 201 cards for validity and verification based on sophisticated software algorithm Thomas First Responder DESFire Card A sample DESFire card is shown below which is a contactless based Smartcard The DESFire card can be encoded and assigned by the E Plex FIPS 201 software for those users like the visitors who may not have the FIPS 201 cards assigned to them or as a temporary replacement cards for lost FIPS 201cards E Plex FIPS 201 System Software User Guide Page 1 4 Smartcard Contact Contactless Enroller reader writer The SCM Microsystems SDI010 contact contactless Smartcard enroller is shown below Note the card slot in front where the contact part of the FIPS 201 card will need to be inserted with the gold contact pad facing up and inserted in first to read only the card data For the reading or writing to a contactless only DESFire card you just need to present the card close to the top of the enroller for a second or so PC and E Plex FIPS 201 Software Server and Client modules The E Plex FIPS 201 software when installed allows you to manage your door locks and the associated user data from one standalone PC It also offers auditing and reporting
34. as follows Insert the mechanical override key turn to retract latch and hold in lock open position Within five seconds press and then release the key While red green lights flash alternately press 12345678 on keypad E Plex FIPS 201 System Software User Guide Page 4 8 e The lock will reset You will see two flashes of the green light with a corresponding high pitch tone followed by the sound of the lock motor crunch indicating that the reset is successful e The lock is now reset to the Factory Mode and the Master PIN is now 12345678 Note The hard reset operation does NOT delete any audited events stored in the lock for security reasons o Summary of Pushbutton Programming Commands Configuration 000 MMMMMMMM MMMMMMMM 001 MMDDYY MMDDYY Set Time Set Temporary Passage Mode Duration Manual Passage Mode Global Lockout Mode L Modify Master User PIN always Master eight digits Setup current Date MM 01 or 12 DD 01 to 31 YY Manager 08 to 99 Setup current t Time HH 00 or 23 MM 00 to 59 Master Manager Master Manager Setup Temporary Passage mode Duration HH 00 or 24 Activate de activate Passage Master Mode Manager P 0 or 1 0 disable Passage Mode 1 enable Passage Mode Activate de activate Lockout Master Mode Master User is not affected by global Lockout Mode L 0 or 1 0 disable Lockout Mode 1 enable Lockout M
35. be altered only if absolutely necessary Important If in the future after deploying your system and locks for some reason you need to change the value of the Site PrivatelD you must re initialize and re program all the E Plex 5800 locks in your facility This is because the original encryption decryption communications key inside the locks will have to be changed again since it has been modified now in the software e User PIN Length Select the appropriate global User PIN Length between four and eight digits that you will be using in your system The default user PIN length is four digits Important The first 4 digits must be always unique when assigning PIN numbers for each user later in the software this is for security reasons e Default Path for Reports This field defines the default directory path to be used when generating and saving reports files You may change the path for reports to a CD RW drive network drive or a USB flash drive etc e FIPS and DESFire Reader Name Selections Leave the default currently SCM Microsystems SD1010 shown in the drop down list e Once you have updated the desired fields click Save The software confirms that the changes saved successfully in the status bar of the window Or Click Cancel to close the System Setup window without saving changes Managing Operators The Manage Operators option allows you to create a new Operator and manage existing Operators in the E Plex FIPS 201 Impor
36. be pointed at the E Plex lock s IrDa window to transfer required data between the M Unit and the lock The USB memory drive will be used after installing the PC M Unit software on the separate Netbook PC to store and transfer the lock configuration data and the audited events data between the M Unit and the Host PC where the main E Plex Enterprise applications its locks user access configuration database reside The USB flash drive will be used as a portable transport medium between the two non networked PCs i e between the Host PC and the portable M Unit Optionally if your Host PC operates under a networked environment either by wired LAN Local Area Network or by wireless LAN you will not need the USB drive to transfer data between the Host and the M Unit You can simply make use of the Host PC s IP address to transfer data between the two PCs over the network Important Please consult with your local IT personnel on how to setup your Host PC s network IP addressing and related schemes E Plex FIPS 201 System Software User Guide Page 5 2 Note If on the other hand you use the same laptop which contains the main FIPS 201 applications and the M Unit applications built in you will not need the flash drive to transfer data this is because this data transfer and syncing occur within the same laptop s hard drive PC M Unit Software Installation This procedure is for installing the PC M Unit part of the software on th
37. before able to delete this Department D Manufacturing D Office Staff Global e Click Delete The software prompts you for confirmation E Plex FIPS 201 Access Control Software Are you sure you want to delete this User Group EZ E Plex FIPS 201 System Software User Guide Page 3 55 Click Yes The system displays the updated Manage Department window Click Close Department D Manufacturing D Office Staff Global Page 3 56 E Plex FIPS 201 System Software User Guide Managing Users In the E Plex FIPS 201 software you can add and maintain users and assign their associated Smart Cards You can add new users assign an access group and a Smart Card to each user change user information or delete existing users and the Smart Cards assigned to them The E Plex FIPS 201 software allows you to manage users from the Manage Users menu Note You can define a maximum of 3 000 users in the lock but any number of them in the database To manage users select Manage Users from the Users menu or click the Manage Users button i The software displays the Manage Users window Manage Users Manage Users Last Name First Name User Group User Type Card Type w Davis Tiffany Global Manager DESFire Permanent Card Griesbeck Daniel Global Jackie Henson Global Manager DESFire Permanent Card Add Edit Delete _ MasterUser __ Door Group Manager Valid User Se Invalid User Close
38. complete click Finish CoreStreet Components Path Builder SerVE applicable to FIPS HIGH ASSURANCE only e The system displays the CoreStreet Installer welcome window i CoreStreet Installer q4CORESTREET Y Welcome to the installer for the CoreStreet Path Builder Server Validation Extension 3 0 To install the CoreStreet Path Builder Server Validation Extension 3 0 on your computer click Next Path Builder WARNING This program is protected by copyright law and B r international treaties and one or more patents For more information see the About dialog or contact CoreStreet at info corestreet com Cancel E Plex FIPS 201 System Software User Guide Page 6 14 e Click Next The system displays the License Agreement ie CoreStreet Installer License Agreement Please read the following license agreement carefully End User License Agreement NOTICE TO ALL USERS THIS IS A LEGAL AGREEMENT BETWEEN THE END USER YOU AND CORESTREET LTD CORESTREET CAREFULLY READ THE FOLLOWING TERMS APPLICABLE TO THE LICENSE OF THE MATERIALS PRODUCED AND PROVIDED BY CORESTREET INCLUDING AS APPLICABLE EXECUTABLE COMPUTER FILES THE SOFTWARE AND CERTAIN WRITTEN MATERIALS RELATED THERETO THE DOCUMENTATION BY CLICKING THE ACCEPT BUTTON OR INSTALLING OR USING THE SOFTWARE OR DOCUMENTATION YOU EITHER AN INDIVIDUAL OR A SINGLE ENTITY CONSENT TO BE BOUND BY AND BECOME A PARTY TO THIS AGREEMENT
39. computer prior to installing this application Click Install to begin installing these eed computer prior to installing this application Click Install to begin installing these requirements requirements Status Requirement Installing NetFramework 2 0 Pending Microsoft Side By Side Libraries Pending Microsoft Side By Side Libraries Pending Microsoft SQL Server 2005 Express SP2 Pending Microsoft SQL Server 2005 Express SP2 Pending OmnikeyDriver Pending OmniKeyDriver Pending CrystalReportsLibraries for Net 2005 Pending CrystalReportsLibraries for Net 2005 Status Requirement Pending NetFramework 2 0 Installing NetFramework 2 0 Microsoft SOL Server 2005 Setup E Plex General FIPS Software InstallShield Wizard Setup Progress The selected components are being configured Choose Destination Location Select folder where setup will install files BB Install E Plex General FIPS Software to Product Status J C Program Files KABASE Ples General FIPS Qmsxmve Setup finished sar Setup Support Files Setup finished SQL Native Client Setup Finished Q SoL v55 writer Setup finished SOL Server Database Services Status Removing applications E Plex FIPS 201 System Software User Guide Page 6 15 Smartcard Driver Installation The Smartcard enroller currently used is an SCM Microsystem s SDI010 model After installing the main applications software by Express install click on FIPS Card Enroller Driver to in
40. doors 1 Save canca Edit any or all required fieds that you want changed e Click Save The system saves the changes and displays a confirmation message YD E Plex FIPS 201 Access Control Software Changes successfully saved Click OK The software displays the updated Manage Door Groups window Manage Door Groups rrr Door Group Manager Staff Offices Tiffany Davis Storage Closets Henson Jackie Assign Single Manager User j E Plex FIPS 201 System Software User Guide Page 3 27 Note You should update your locks whose parameters have been modified first by downloading the affected locks configuration data to the M Unit and then programming uploading this information to the locks Managing Door Group Managers Complete the following steps to manage door group managers e From the Manage Door Groups window click Assign Single Manager User That is here you can select or change and assign one only Door Group Manager user from a pool of previously created regular Manager users in the User profile menu of the software as this Door Group s single global Manager The software displays the Manage Door Group Managers window Door Group Managers as Manage Door Group Managers Select a Manager and a credential then click on the Assign button to save the information This will assign the selected Manager to all Door Groups in the system You will need to re program all doors in the system
41. efficient when you need to add a new employee user in the system as shown in one of the following chapters under Managing Users dialog menu ie with one selection in the menu dialog you can assign access rights to this new user in all those various doors contained in one access group Note You can assign any number of access groups in the software To manage access groups select Manage Access Groups from the Access Groups menu or click the Manage Access Groups button l ACCESS Groups te Manage Access Groups The software displays the Manage Access Groups window Adding an Access Group Complete the following steps to add an access group e From the Manage Access Groups window click Add Manage Access Groups Manage Access Groups Total Total Access Group Mame P Doors Users Total Access Groups e The software displays the Add Access Group window e Atthe top left panel of the screen enter the name of this new access group of doors with access schedules and credential types you are going to create Eg AG TechStaff E Plex FIPS 201 System Software User Guide Page 3 42 e The bottom half panel of the screen shows all available doors that can be assigned to this access group E Plex FIPS 201 System Software User Guide Page 3 43 AG TechStaffl Door Group hs e Door Name Schedule Name Sun Mon Tue Wed Thu Fri Sat Start End Credential Passage Mode Jl Unassign Select
42. friday except holidays Eastern Standard Time Email Address SEND REGISTRATION KEY e Type your Email Address in the field and click Send Registration Activation Key You will receive an e mail from Kaba Access Control with your Registration Key eplext kaa kaba com rtatun testedu 07012009 02 25 PM E Flex FIFS 201 Registration Activation Key Retrieval E Plex FIPS 201 Software Registration Registration dctivation Key Retrieval CONFIDENTIAL This is an automated message Do not reply Your Registration 7 dctivation Eey 37200992 e Write your Registration key down and close the window This number will be used to activate your software On the Install E Plex FIPS 201 Access Control Software screen click Continue Installation to complete the software registration process You will be asked to enter your Serial number again along with the Registration Activation key you received to complete the installation Proceed to Continue with Registration in this chapter E Plex FIPS 201 System Software User Guide Page 6 12 Option 2 Registering by Phoning Kaba Access Control s Technical Support e When you click this option the system displays the following screen ss E Plex FIPS 201 Access Control Software Install Package f x KAKA i E Plex FIPS 201 Access Control Software Install Package You are registering Kaba s E Plex FIPS 201 Access Control Software by BAGE Please call Kaba s Technical Support ph
43. if you want it to be anything other than the factory default Entry function Configuring the Lock Functions Before putting the lock in service you must first program the lock function when still in Factory Mode The default lock function for any lock from the factory is Entry lock function which is the same as a Cylindrical lock without a privacy thumbturn a Mortise lock without a deadbolt or an Exit Trim lock The command codes involved here are 011 and 013 Note Refer to the separate E Plex 5X00 Lock Function Setup Guide for instructions on changing to the desired BHMA lock function e Change factory master combination to your own master code always eight digits to place lock in Access Mode The lock is now activated and can be programmed using the M Unit For Error Reference source not found using the M Unit refer to Chapter 5 Default Values of the E Plex 5800 Lock Programmable Parameters Parameters Date MM DD YY Time HH MM Lock state Lock function Manual Passage Mode open time limit Passage Mode Lockout Mode Unlock time Buzzer volume control Tamper shutdown time Tamper attempt count Access code length Master PIN M Unit User s status Remote unlock E Plex FIPS 201 System Software User Guide Factory Default Values 01 01 00 00 00 Un programmed Entry Four hours Disabled Disabled Two seconds Low 30 seconds Four attempts Four digits 12345678 Eigh
44. in the File field of the Restore area Select Restore File O Backup E e plexdatabase_Jan 22 2008 9 50 Recent Desktop My Documents 8 My Computer a File name b My Network Files of type vi Database Management Ea Toci F Database Management Back Fokker L Dacep Fie Arsluen Fis Henaup aeae Jen fe a a pan Daie J k Foatatng Bachup Over 7 ays Backup Time S10AM aco Purge Tranche Keep C we encarta Meee Prge E Ami GP To cctieite the news entings for inating backup and purge ananiona pou need ta mairt EPLEX Server Doe e Click Restore The system prompts you for confirmation with a warning to say that this restore operation will overwrite your current database which will then be lost etc e Click Yes to continue or No to cancel e lf you click Yes the system restores the selected database and displays a message in the status bar of the Database Management window Restore Database Done e Click Close to close the Database Management window Rotating Backups Over 7 Days e Inthis section you can specify at which specific start time a daily automated back up will take place e Select the time you want the back up operation to start and click Apply E Plex FIPS 201 System Software User Guide Page 3 11 e The back up will be performed daily at the specified start time ensure that your PC will be on and stays on during this automated backup period eve
45. lt To ueeuhtGuutiaweeuydemesainieeriah 3 82 Access schedules REDON sisiivnacivordiuaselneineentevantvestinniesdernnndsnniaayuldmnadineuddawndewenel guihdswuaskunstanskecniwierdenehanes 3 84 Holidays Vacations Reports atest ania ceawunish adeeb sciauna ean bhansudiereestesedeueayerataanseddannecdeneadacndadtaunaddaveddeeeendedeaunives 3 85 Audits from Downloaded Doors Re pot t cccccssssececcceseeceecceeeececcceuseeceeeeeeaeeeessausecesessaseeesessagseeeess 3 86 AS FU S ROPO ecto cates cet pscwrant EE EE EE 3 87 Bisle Cigo seca RODO gee CT et a en ee N a ee 3 88 BOOS RODO diene eee te ee ene ena nem ee ee ee 3 89 DOOS Tora User REDON arinei sn aE E E E 3 90 Access Groups with Doors Info Report ccccccccseeeeeeeeeeeeeeaeeceeeeeeeeaaeeseeeeeeeeesaeaceeeeeeeessaaseeeeeeeeseesaaas 3 91 Access Groups with Users Info Report ccccccseeeceeeceeseeeeeecaeeeeeeesseeseeeeeseeeeceeeeseaeeeeeseaeeeesessageeeees 3 92 Operor RENO un a E E soca ouwee E E E 3 93 DY ems ACVIY LOO REDOT sararan ar nee TEET E T 3 94 DSO AM CMS REDON sarane E E E E mance adaneotesvieenieiaasesnennads 3 95 SES REDON aea A E E TEE 3 96 SONS TOF a DOr REDOT orraa E EA 3 97 Users without an Active Card Report ccccccccccccccccceeeeeeeesseeeeeeseeeeeeeeeeeeeeeseeeseseeeeeeesssaaeeeeeeessaesaagaases 3 98 4 Operating the E Plex Lock at its Keypad nnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnn nnmnnn 4 1 VST VS OE LOCK rset rete ei cr
46. red LED and a low beep Press 123456789 0 in that exact order to test each pushbutton If every pushbutton is working correctly you will see a green LED and hear a normal beep for each pushbutton that is pressed Example of a complete entry 500 123456789 0 Enter another to indicate the end of programming If you see a red LED at any time that you are pressing a pushbutton or at the end of the code there could be a problem with the pushbuttons Enter another to indicate the end of programming If you still see the red LED the lock has a problem Call a service person to repair or replace the lock Identifying a Lock Model Command 501 Use the Lock Model Identification code to identify if the lock model is E Plex 5800 Required User Level Master Manager Put the lock into Pushbutton Programming Mode Enter command 501 for Lock Model Identification The lock will flash the red and green LEDs eight times with accompanying high pitched tones to indicate that this is an E Plex 5800 lock Enter another to indicate end of programming Resetting the Lock You can return to factory default parameters by performing a Hard Reset This returns the lock to Factory Mode including deleting all credentials putting the lock back to factory default values four digit access PIN length and making the Master PIN 12345678 Also the lock function will revert to the default Entry lock function A hard reset is performed
47. three types of maintenance cards i acard to be used as a temporary replacement of a user s permanent card this card when used in the lock the first time will de activate this user s permanent card temporarily so that only ONE valid card for this user will work in the lock ii a card to re activate the temporarily de activated permanent card of this user and iii a card to quickly delete this user from the lock A typical scenario is when a user had either lost her his permanent card or had forgotten it at home etc so that you can encode and issue a temporary replacement card with an expiry Then when s he brings the permanent card back to work say the next day you will have to encode the re activation of the permanent card and present it on the lock reader of the locks doors where this user was using the temporary replacement card for access This action will re activate the user s permanent card for access and at the same time will kill the temporary replacement card permanently Note All these above actions are performed easily without having to use the M Unit PDA for uploading data into the lock E Plex FIPS 201 System Software User Guide Page 3 70 Click Edit The software displays the Edit User window Manage User Profile Valid From q Valid To 01 22 2008 Y 11 21AM 2 Jn 01 22 2009 11 21AM 2 01 22 2008 11 25 AM 04541551001F80 ate 01 22 2008 11 214M Sequence Number 1 User ID 10
48. to the Certificate Import Wizard window 10 Click Next The system completes the Certificate Import Wizard 11 Click Finish The system confirms that the import was successful Certificate Import Wizard i The import was successful 12 Click OK 13 Repeat steps 3 12 for the other certificates CoreStreet Server Validation Extension for FIPS HIGH ASSURANCE only 14 In Windows Explorer browse to lt C gt Program Files CoreStreet Validation Client 15 Launch the mconsole exe program by double clicking it The system displays the CoreStreet Server Validation Extension window aA CoreStreet Server Validation Extension A Server Validation Extension Management Console Server Yalidation Extension Settings Create Installer General ocsp CRL Cache Network Support A lt CORESTREET Y Path Builder SerVE Server Validation Extension Status Reporting Use this control to disable or enable Configure how validation data is this application This change will collected and presented take effect immediately Current status enabled configure notations Disable Configure Logging 16 Click Configure Logging The system displays the Logging window 17 Verify that the options shown below are selected E Plex FIPS 201 System Software User Guide Page 6 28 Log Events Log Event Log to File Log Windows Event Errors Revoked Responses Unknown Responses Good Responses adda lt I
49. which acts as both Host PC amp PC M Unit If you use one same standalone laptop PC to run both the E Plex FIPS 201 software as a Host PC and the PC M Unit software as a portable PC M Unit the system automatically does the data sync transfer without you having to specify and use a common folder location on the hard drive or on the USB flash drive like you do with manual data sync transfer on a Separate Netbook PC also no network connection is required You will still need to connect and use the IrDA interface adapter with this laptop PC when programming and or auditing an E Plex 5800 lock In this case this same integrated laptop PC functions both as the Host PC running the E Plex FIPS 201 software and as the portable PC M Unit running the PC M Unit software within From the main menu of E Plex FIPS 201 software click File and then Launch Integrated PC M Unit to open the main PC M Unit software screen Schedules HolidaysVacations Door Groups Doors Access Groups Departrr r IRES IK Sync with Separate PC M Unit Launch Integrated PE M Unit Exit X From this PC M Unit menu you can i download users lt gt locks access configuration data for each selected E Plex lock from the Host PC ii so as to program these locks iii audit each lock for event transactions iv then upload the audited info back to the Host PC to view print them under the FIPS Reports menu and or v perform lock diagn
50. 0 0 16 E Plex FIPS 201 System Software User Guide Page 6 8 e Click the Kaba Software Registration Website link The system opens your default Web browser to the E Plex FIPS 201 Software Registration page E Plex FIPS 201 Software Registration Thank you for purchasing our product Please choose the appropriate option below am registering my product for the first time If you are registering for the first time proceed to step 7 If you lost your registration activation key and need to retrieve it from Kaba Access Control proceed to step 13 Registering for the First Time E Plex FIPS 201 System Software User Guide Page 6 9 e lf you are registering your software for the first time select the first Green option The system displays the E Plex FIPS 201 Software Registration page E Plex FIPS 201 Software Registration Thank you for purchasing our product To activate your lock please fill out this form to receive your registration key Please note that any information you submit to us will be kept strictly confidential and will not be shared with any other company required fields CONTACT INFORMATION Wednesday January 07 2009 First Name Last Name Company Organization Title Position University of the North Facilities Manager Address 1123 Main Street City State Province Zip Postal Code Country or Phone Number Fax Number 969 555 1234 969 555 5676 Email
51. 0 characters and may include special characters and spaces Note 2 When you create a new door group you will be also creating various default parameter values of all the locks that will belong to this door group However these default lock parameters can be changed to suit individual door lock requirement when you create the individual doors later In the Door Group Name field type the name of the door group you are adding Select the Single Door Group Manager from the drop down list As stated earlier you must assign one and only one Door Group Manager for this door group from any one of the available normal Manager users Click Holidays Vacations to select the holidays and or vacations to be applied to this door group The software displays the Assign Holidays Vacations window Assign Holidays Vacations rr Holiday Vacation Name Start Date Start Time End Date End Time Holiday Vacation Selection Start Date Start Time End Date End Time a ae E Plex FIPS 201 System Software User Guide Page 3 24 Select the appropriate holiday or vacation from the Select Holiday Vacation drop down list at the bottom of the window The software displays the Start Date Start Time End Date and End Time Assign Holidays Vacations as Assign Holidays Vacations Door Group Door Group Holidays Vacations Holiday acation Name Start Date Start Time End Date End Time Holiday 7 Vacation Selection Start Date Start Time End Date End Tim
52. 05 SP3 or higher supplied with FIPS software Networked PCs for Custom Install applies to General amp High Assurance e Client PC Same requirements as Stand Alone PC above except the MS SQL e Server PC Same requirements as Standalone above except o Recommended 2 GB of RAM when using larger SQL database o Recommended 10 GB free hard disc space for larger SQL database o MS Windows Server 2003 amp 2008 OS if not using XP VISTA or Windows 7 Maintenance Unit M Unit Requirements e Standard Laptop PC Same requirements as Standalone PC above or e Mini Laptop Netbook PC Microsoft XP Home or higher OS and minimum 1MB of RAM minimum 1024 x 600 screen resolution 4GB of storage memory flash or hard drive 1 available USB port Optionally wired or wireless LAN interface for network communications via IP address to host PC Note Either of the above M Unit PCs requires Kaba s E Plex PC M Unit Communications Kit as an accessory containing a USB Flash drive with PC M Unit program pre loaded amp a USB gt IrDa adaptor for PC lt gt Lock communications FIPS Card Enroller Requirement e SCM Microsystems SDI010 an ISO 14443 compliant Enroller dual reader writer with USB interface to enrol the FIPS compliant and or the DESFire smart cards Required E Plex FIPS 201 System Software User Guide Page 2 2 Basic System Setup amp Quick Start Tips Complete the following steps in this order prior to setti
53. 8 12 14 PM 1 22 2008 12 15 PM 1 22 2008 12 20 PM Zoom Factor 85 From this window you can print and export save the Cards Status report E Plex FIPS 201 System Software User Guide Page 3 87 Door Groups Report The Door Groups report displays all door groups that have been defined in the E Plex FIPS 201 software View Reports Choose a Report Door Groups Sort By Choose a Column to sort on Door Group Name Door Groups Report Choose the directionforder of sort ProEdit Ascending From to Z Descending From Z to 4 Tuesday January 22 2008 04 05 PM Total Door Groupfs Door Group Name Manager Lobbies Tiffany Davis Staff Offices Tiffany Davis Storage Closets Tiffany Davis Generate Total Page No 1 Zoom Factor 85 From this window you can print and export save the Door Groups report E Plex FIPS 201 System Software User Guide Page 3 88 Doors Report The Doors report displays all doors up to 100 000 that have been defined in the E Plex FIPS 201 software View Reports Choose a Report Doors Filter By C M Unit Syne Required Lock Function Type Choose a Lock Function Type ProEdit Sort By Tuesday January 22 2008 04 08 PM Choose a Column to sort on bonis DOOR GROUP NAME Choose the directionforder of sort l Door Name Assurance Lock Function Remote Tamper PassageMode Tamper Buzzer Ascending From A to Z Level Unlock
54. AT AEA a R teh M Unit Synched E Plex FIPS 201 System Software User Guide Page 2 6 Main Menu and Toolbar This section describes the Main Menu and Toolbar which are the primary points to access the functions of the E Plex FIPS 201 Main Menu The Main Menu provides access to all functions and displays the available menu options File Schedules Holidays Vacations Door Groups Doors Access Groups User Groups Users Access Assignment Reports System Setup Help Toolbar File Menu Schedules The following 12 drop down menus are available from the Main Menu e File e Schedules e Holidays Vacations e Door Groups e Doors e Access Groups e Departments Note In previous FIPS 201 version 1 x software this field was called User Groups both terms mean one and the same e Users e Access Assignment e Reports e System Setup e Help Refer to the appropriate section in the manual in Chapter 3 for more detail on each of the options that are available from the drop down menus These options are also available from the Toolbar The Toolbar is located directly below the Main Menu and displays the icons for the Main Meare eat ewe You can select an icon on the toolbar by positioning the mouse pointer on the icon and clicking the left mouse button one time The menus available from the E Plex Main Menu and the corresponding Toolbar icon if applicable are described in the following sections
55. BA on the license and use of the Software and supersedes any and all prior agreements and documents unless expressly incorporated herein USE OF THIS SOFTWARE INDICATES YOUR COMPLETE AND UNCONDITIONAL ACCEPTANCE OF THE TERMS AND CONDITIONS SET FORTH IN THIS AGREEMENT IF vou do not agree to these terms and conditions promptly return or if received electronically certify the destruction of the Software and all accompanying items within five days after their receipt in onder to recerve a full refund of any license fee we accept the terms of the license agreement 1 do not accept the terms of the license agreement InstallShield E Plex FIPS 201 System Software User Guide Page 5 4 E Plex PC M Unit InstallShield Wizard Customer Information Please enter your information InstallShield E Plex PC M Unit InstallShield Wizard Choose Destination Location Select folder where setup will install files installshield E Plex PC M Unit InstallShield Wizard Ready to Install the Program The wizard is ready to begin installation installshield E Plex FIPS 201 System Software User Guide Page 5 5 E Plex PC M Unit InstallShield Wizard InstallShield Wizard Complete The InstallShield Wizard has successfully installed E Plex PC M Unit Click Finish to exit the wizard e The E Plex PC M Unit software is now installed on your separate M Unit portable unit and the program s icon will be displayed on your P
56. C M Unit s Desktop as shown below Whenever you want to run this program double click on this icon e For the very first time of PC M Unit login the default login User name is kaba and the default Password is also kaba Please refer to the E Plex PC M Unit User Guide for detailed operational use of this program e The main operations involving the M Unit are the following e Downloading doors users access configuration data to the M Unit from the Host PC e Programming the doors locks using the M Unit via IrDA e Auditing the doors locks using the M Unit via IrDA e Uploading doors configuration info and audits to the Host PC from the M Unit e Performing lock maintenance diagnostics via IrDA Note The functionality and features of the E Plex PC M Unit software is generic so it will work with most of Kaba s E Plex lock models and their related SACs Stand Alone Access Controllers such as E5800 Series with E Plex FIPS 201 software this software E3200 E3600 E3700 E5200 E5600 E5700 Series with E Plex Enterprise software E3000 E5000 Series with E Plex Standard software M Unit User Definition e In addition to the global Master user specific Door Group Managers and the other Manager users there can be M Unit user types who can also program and audit the E Plex FIPS software based locks such as the E5800 using the M Unit This M Unit user s credential is used only to program and or audit the loc
57. Changes Successfully Saved message E Plex FIPS 201 Access Control Software Changes successfully saved The system displays the updated schedule in the Manage Schedules window Manage Schedules Manage Schedules Schedule Name Mon Tue Wed Thu i Start End Always w v v w 12 00 M 12 00 AM MWF Busines Hours v x w x 08 00AM 05 00PM Weekend x x 12 004M 11 00 PM rae Day is assigned to Access Schedule sc Day is NOT assigned to Access Schedule Note You should update your locks if you modified any existing Access Schedules in those lock by transferring the changes to the M Unit and programming uploading the changed information to the locks For more information refer to M Unit Handheld in Chapter 5 Programming and Auditing Locks Deleting a Schedule Complete the following steps to delete access schedules Note You cannot delete an access schedule if it is assigned to a door From the Manage Schedules window click the access schedule you want to delete Click Delete The software prompts you for confirmation x7 E Plex FIPS 201 Access Control Software Do you really want to delete this schedule E Plex FIPS 201 System Software User Guide Page 3 16 e Click Yes to confirm the deletion The system deletes the schedule from the database and returns to the Manage Schedules window Manage Schedules Manage Schedules Schedule Name Fri Sat Start End v 12004M 12 004M xo 12004M 11 00PM as
58. Debugging Events Vv Include Request and Response bodies in debug log Log Directory and Size Default Location Custom Location C Documents and Settings 4ll Users Local Settings Application Browse Maximum Log Size 500 KB me x 18 Click OK The system returns to the CoreStreet Server Validation Extension window 19 Select the OCSP tab Between the next steps 20 26 for each root certificate issuer you must also configure an OCSP responder aA CoreStreet Server Validation Extension a EE lt Server Validation Extension Management Console Server Validation Extension Settings Create Installer General OCSP CRL Cache Network Support Responders Issuers Responders PIVCA OU EntrustC4 O U 5 G V Enable 414 Checking Enable a Fallback Responder UR f Trust Advanced Help About Cancel 20 Click Add The system displays the Issuer Responder Mapping window ag Issuer Responder Mapping Select Certificate Browse File System Browse Certificate Store ves Cee 21 Click Browse Certificate Store 22 Expand Root and select PIVCA E Plex FIPS 201 System Software User Guide Page 6 29 aA Select Certificate Select a Certificate from the Certificate Store Root Microsoft 4uthenticodeftm Root Authority Microsoft Root Authority Microsoft Root Certificate Authority OU NO LIABILITY ACCEPTED c 97 VeriSign Inc OU Ver
59. Delete L Day is assigned to Access Schedule Se Day is NOT assigned to Access Schedule Close E Plex FIPS 201 System Software User Guide Page 3 17 Managing Holidays Vacations A holiday vacation is a defined time period during which users will NOT be granted access to a door By default there will be no access allowed to a door lock during a defined Holiday Vacation period except for Service Users and any assigned privileged users in the system By default all Manager users have the privilege to override Holidays Vacations Note You can define a maximum of 32 holiday vacation periods in the lock but any number of them in the software To manage holidays vacations select Manage Holidays Vacations from the Holidays Vacations menu or click the Manage Holidays Vacations button Holidays Vacations The software displays the Manage Holidays Vacations window Manage Holidays Vacations Manage Holidays Vacations Holiday Vacation Name Start Date Start Time End Date End Time Add Edit Delete From this window you can add edit or delete holidays or vacations E Plex FIPS 201 System Software User Guide Page 3 18 Adding a Holiday Vacation Complete the following steps to add a holiday vacation e From the Manage Holidays Vacations window click Add The software displays the Add Holiday Vacation window Manage Holidays Vacations p Add Holiday Vacation fi 11 59 PM 23 59 indicates end of t
60. First Name e Master PIN number must be 8 digits long Note The default factory Master PIN number is 12345678 You will be prompted to enter a different 8 digit PIN number which you must enter and remember it or write it down and store it in a safe place for routine use Select a Credential Type from the drop down list By default it is Card only credential meaning that the Master user needs to present only her his card when programming or auditing the locks If you choose PIN amp Card credential then the Master will be forced to use dual credential PIN and card every time s he accesses the lock for programming or auditing Important You must assign a card FIPS or DESFire to the Master under Add User menu for the Master s credential to work in the lock after programming the lock Enter the following information in the Master Operator fields for this same global Master user e Master Operator Name this can be same as the Master s Last or First name e Password minimum 6 alphanumeric characters e Verify Password Note You must create both Operator name and Password to proceed further to login to the system The Operator name kaba Kaba KABA etc are not allowed Click OK The software displays the Main Menu for the E Plex FIPS 201 ll E Plex FIPS General eg File Schedules Holidays Vacations Door Groups Doors Access Groups Departments Users Access Assignment Reports System Setup Help Fe A
61. Guide Page 3 19 The system displays the new holiday or vacation name in the Manage Holidays Vacations window Manage Holidays Vacations Manage Holidays Vacations Holiday V acation Name Stat Date Start Time End Date End Time i Add Christmas Holiday 12 24 2008 12 00 4M 12 25 2008 11 59 PM Edit Delete Note You can add additional holidays or vacations at any time Editing a Holiday Vacation Complete the following steps to edit a holiday vacation e From the Manage Holidays Vacations window select the holiday or vacation you want to edit Click Edit The software displays the Edit Holiday Vacation window Manage Holidays Vacations oy Edit Holiday Vacation v 11 59 PM 23 59 indicates end of the calendar day which is actually 11 59 59 PM 23 59 59 Holiday Vacation Campus Spring Break Start Date and Time 03 22 2008 End Date and Time 03 30 2008 All Day Event Cancel In the Holiday Vacation name field change the name of the holiday or vacation if necessary Clear the All Day Event check box if the holiday or vacation you are changing is NOT an all day event 24 hours In the Start Date field change the start date if necessary using the drop down list and selecting the date from the calendar In the Start Time field change the start time if necessary by using the up and down arrows Note The Start Time field will be grayed out if the All Day Event check box is selected
62. If you save the information as is this or these users will not be programmed into the lock Do you want to continue and save as is EZ Click Yes E Plex FIPS 201 System Software User Guide Page 3 76 From the main user list select the user you just assigned Manage Specific Access Assignment r Lock Model E Plex 5800 Lock Type Entry Lock All User Groups v All User Types v Last Name First Name User Group User Type Status Last Name Pickens LaToya Admin Office Staff Access z Thomas Jawa Global Manager EI Davis First Name User Group User Type Sebs Priv Tiffany Global Manager 3 PESAG Henson Global Manager iJ i Hi Master User User is saved in database Schedule or Privilege is assigned __ Door Group Manager J User is not saved in database Re Schedule or Privilege is not assigned Total Users assigned to this Door 2 Set User Details Operation succeeded Click Set User Details to assign one or more schedules mandatory and any privileges optional to this user The software displays the Assign Access Schedules and Privileges to User window Manage Specific Access Assignment Lock Type Entry Lock C Always Card Manual C Weekend Card None First Authorized Passage When selected the door will enter in Passage Mode when the user will be the first person to swipe his her card Add Access Schedule to Door Check the required Access Schedule s
63. L Express Microsoft SideBySide libraries CoreStreet Components _ Install Client Software Prerequisites J Microsoft Net Framework 2 0 Microsoft SideBySide libraries Omnikey CardMan Driver V 1 1 1 5 Crystal Reports Libraries Version 1 0 Beta e Click Back E Plex FIPS 201 System Software User Guide Page 6 20 Server Software Note The software registration process occurs during the server software installation e The system displays the main E Plex FIPS 201 Access Control Software Install Package browser menu E Plex FIPS 201 Access Control Software Install Package ET KAKA E Plex FIPS 201 Access Control Software Install Package View _ System Requirements J Software User Guide J Software Installation Order J _CoreStreet Validation Extension Settings Install Software Prerequisites Components _ Server Software J Client Software amp amp M Unit PDA J Version 1 0 Beta Click Server Software to install The system checks for existing components The system displays the FIPS 201 Access Control Software installation window E Plex FIPS 201 Access Control Software InstallShield Wizard Welcome to the InstallShield Wizard for E Plex FIPS 201 Access Control Software The InstallShield Wizard will install E Plex FIPS 201 Access Control Software on your computer To continue click Next License Agreement Please read the following license agreement careful
64. Manage Access Groups Edit Access Group 7X lt ofo 12 TREET Access Group Information Yv Name AG TeshStaft Door Access Schedules Door Group Name ENABLED E oane AT W Assign Door Access Schedules DG Technical Door Group Marketing Door Name Emergency 2 Lock Model EPLEX 5800 Schedule Name i a J atia Passage Mode Always Automatic 7 FEA lected M Unit 4 Unassign Selected SS Week D Available Doors Week Days 2 Weekend 1 Filter by All Door Groups Door Name Acctg 001 R E5800 MortDB JawaDemo E5800Cyl E5800 ResdtLock j Labxyz Schedule Typ aE a s Select Schedule 20140CT31 Johnson Su Mo Tu W Susan A Pay Grade Rank CPL Geneva Conventions Identification Card All rights reserved Kaba lico Inc E Plex FIPS 201 Software Version 2 License No 123456 1 25 2 E Plex FIPS System Software Version 2 User Guide Second Edition for V2 x January 2011 First Edition for V1 x March 2010 The E Plex FIPS 201 System Software User Guide is a publication of Kaba Access Control No part of this book may be reproduced or transmitted in any form or by any means electronic or mechanical including photocopying recording or by any information storage and retrieval system without prior written permission from Kaba Access Control The information contained in this publication is accurate to the best of Kaba Access Control s knowledge Specifications are subject to change withou
65. MortD Card 7AM 7PM M F lone T Tvl e ele lt prooam 07 00PM B Lab xXYZ Card Always vanual Ka Lv w x x x 2 00 AM 12 00 4M Access Group Clone of AG TechStaf Total Doors 2 Door Name Credentia Schedule Name Passage Mode Sun Mon Tue Wed Thu Fri Sat Start End E5800 MortD Card 7AM 7PM M F Yone To Tvilyi y 7 7 prooam o7 00pm B Lab Y Z Card Always vianual v x w EJ x x 2 00 AM 12 00 4M ss is a E PDF v Current Page No 1 Total Page No 1 zoom Factor 85 From this window you can print and export save the Access Groups with Doors Info report E Plex FIPS 201 System Software User Guide Page 3 91 Access Groups with Users Info Report The Access Groups with Users Info report allows you to view all users assigned to a particular access group in the E Plex FIPS 201 software View Reports Choose a Report Access Groups with Users info Filter By User Groups Choose a User Group Sorn By Choose a Column to sort on Last Name Choose the directionforder of sort Ascending From A to Z Descending From Z to Generate v Access Groups with Users info Report Wednesday January 14 2009 03 04 PM Total Access Groups Access Group AG Office i Total Users 5 User Group Last Name First Name Card ID User PIN Revoked UG Technical CAC Giovanni Gemalto Gemalto GCX4 72K DI UG Office CA amp C Jawa Gemaltto Gematto Pl UG Office CAC Jim Gemplus Gemplus GXP3 64V 2N
66. NED IT FORA FULL REFUND 1 GRANT OF LICENSE Business Objects grants you a nonexclusive and limited license to use the Software solely for your internal business purposes and in accordance with the terms and conditions of this License Do Not Agree O Agree e Select I Agree Click Next The system displays the program installation window The program begins installation i Crystal Reports for NET Framework 2 0 x86 Installing Crystal Reports for NET Framework 2 0 x86 Crystal Reports for NET Framework 2 0 x86 is being installed Please wait ET 6 6Llrlti _ lt _i _O O SOSC C UUUUCSY Cancel E Plex FIPS 201 System Software User Guide Page 6 19 e When the installation is complete click Close ie Crystal Reports for NET Framework 2 0 x86 Installation Complete Crystal Reports for NET Framework 2 0 x86 has been successfully installed Click Close to exit Please use Windows Update to check for any critical updates to the NET Framework e The system returns to the E Plex FIPS 201 Access Control Software Install Package window 77 E Plex FIPS 201 Access Control Software Install Package eed KAKA am E Plex FIPS 201 Access Control Software Install Package install Server Software Prerequisites J Microsoft Net Frarnework 1 1 f a Microsoft Net Framework 1 1 SP1 Sapas checking fe eostent Microsoft WSE 1 0 SP2 Microsoft Net Framework 2 0 Microsoft SQ
67. Registration Require Success Minimum MDAC Yersion Requirement Success SGeeeeese Edition Change Check Success Fiter Stop Repot w Help Next gt __ Hee Next gt e Click Next The system displays a status bar for preparing the installation ie Microsoft SQL Server 2005 Express Edition Setup Microsoft SQL Server Installation Setup is preparing to continue with the installation m Please wait while setup prepares to continue with the installation Status Preparing Installation Wizard Cancel E Plex FIPS 201 System Software User Guide Page 6 9 e Click Next The system displays the Registration Information window ie Microsoft SQL Server 2005 Express Edition Setup Registration Information The following information will personalize your installation The Name field must be filled in prior to proceeding The Company field is optional Company Hide advanced configuration options e Inthe Name field type your name The Company field which is optional type your Company s name Click Next The system displays the Feature Selection window ie Microsoft SQL Server 2005 Express Edition Setup Feature Selection Select the program features you want installed Click an icon in the following list to change how a feature is installed Feature description nae Database Services Installs the SOL Server Database BX z Clent Components Engine tools for managing relational
68. Unit part of the software only The main two functions of the portable M Unit are e to send upload data to for the purpose of programming a lock and e to receive download data from the lock for the purpose of auditing the lock s events The data transfer between the portable M Unit and the E Plex 5800 lock is via the industry standard IrDa interface working in conjunction with Kaba s E Plex PC M Unit Communications Kit E Plex FIPS 201 System Software User Guide Page 5 1 Portable PC M Unit with Kaba s IrDA Kit The M Unit is Kaba Access Control system s term for a PC based portable unit that communicates with the locks through industry standard infrared IrDa interface by making use of Kaba PC M Unit Communications Kit The kit contains the following items in the package IrDa Adapter USB Ex tension Cable USB Flash Drive Netbook PC as portable M Unit 1 An industry standard IrDA Infrared Data Access adapter with a USB interface to connect to the M Unit PC 2 A USB extension cable to connect the above IrDA adapter to the M Unit if need be and 3 A USB flash drive preloaded with the E Plex PC M Unit software application along with its User Guide in electronic format 4 A 2 page Getting Started sheet in color as a quick reference guide One end of the IrDA adapter plugs in to one of the M Unit s USB ports and the other end of the IrDa transmit receive infrared data window will
69. User Status Create Maintenance Card nDate 01 29 2008 1208PM_ gt Close RI Select the function of the card to be created one of the three selections e Temporary Replacement User Card Grants the user temporary access Create this temporary card for an existing user who may have forgotten to bring her his original user card FIPS 2 01 or DESFire to work and needs normal access to all her his doors E Plex FIPS 201 System Software User Guide Page 3 71 Only this temporary card or the original permanent card of this user will work in the lock but not both at the same time The temporary card will either expire in the lock based on its encoded expiration time or it can be deactivated anytime by reactivating the original permanent user card see Reactivate Permanent User Card below and using it in the lock s The default expiration time is four days 96 hours which can be increased or decreased e Reactivate Permanent User Command Card Reactivates the permanent user card in the system database When created and then presented at a lock door this card reactivates this user s original permanent card and permanently kills the temporary replacement card of this user The default expiration time is one week seven days which can be increased or decreased e Delete User Command Card Deletes this user in the lock s without having to do the same using the PDA Important If you delete a user t
70. a FASC N Federal Agency Smart Credential Number This 40 digit long number contains the card holder s credential number the card issuing agency and system codes cryptographic digital signature card issuance and expiration dates etc PKI Public Key Infrastructure An asymmetric cryptography support service to the PIV system that provides the private lt gt public key pair needed to perform digital signature based identity verification It also protects storage of sensitive verification system data within the FIPS 201 compliant PIV ID card and communications between the card and the physical access control reader CA Certification Authority A trusted entity that issues and revokes public key certificates of the card user Card Authentication Certificate and CRL CRL Certificate Revocation List A list of revoked public key certificates created and digitally signed by a CA and stored in OCSP server E Plex FIPS 201 System Software User Guide Page 6 2 OCSP Online Certificate Status Protocol This online protocol is used to determine the status of the public key certificate and the status of the CRL The user card enrolling station verifies online through the Internet this user status by communicating to a secure OCSP server E Plex FIPS 201 System Software User Guide Page 6 3 Appendix B Software Installation This section describes the complete software installation process including the software registr
71. address Email address again to confirm rita un testedu rita un testedu Purchased from which dealer Date registered mm dd yyyy Saginaw Locks 01 07 2009 e Complete the fields of the Contact Information area Fields followed by an asterisk are required e Complete the fields of the Software Registration area Your Serial Number Software Type and the Number of Seats info are located on the sticker on your software CD jewel case SOFTWARE REGISTRATION Lock model Software version E Plex 5800 E Plex FIPS 201 Please enter your exact Site License No as printed on your CD jewel case Site License No Serial Number Type Seats Serial Number Type Seats 6 Digits 135462 1 FullFeatured e Complete the fields of the Site Information area if you choose to provide additional information to Kaba Access Control A sample of some of the fields is shown below E Plex FIPS 201 System Software User Guide Page 6 10 SITE INFORMATION How did you first hear about this Kaba product Advertisement Web Search Kaba Sales Representative Security Consultant Access Control Dealer Door Company Distributor Locksmith Wholesaler O Locksmith Other specify i What type of installation will be utilizing the software check all that apply C Commercial Building College University CI School Educational Cl Airport Port Authori
72. aded with the PC M Unit Software and the PC M Unit User Guide e E Plex PC M Unit Getting Started Sheet e An IrDA to USB adapter and a USB extension cable USB Flash Drive with M Unit Software IrDA Adapter with extension Cable E Plex FIPS 201 System Software User Guide Page 1 9 Getting Started The contents of this chapter are intended to assist you with installing and setting up your E Plex FIPS 201 system software to work with an E Plex 5800 FIPS lock series The items explained in this chapter include the following e System Requirements e Basic System Setup and Software Installation via Appenalx B e Main Menu amp Toolbar E Plex FIPS 201 System Software User Guide Page 2 1 E Plex FIPS 201 System Requirements PC amp OS Requirements Standalone PC for Express Install applies to E Plex FIPS General only e MS Window s compatible PC with minimum Pentium III 500 MHz processor e Minimum 1 GB of RAM e Minimum of 4 GB of free hard disc space when using smaller SQL database e SVGA Monitor with minimum resolution of 1024 x 768 e CD ROM drive for software installation e Minimum of 2 USB ports in PC to connect the Smartcard Enroller and the M Unit PDA e One of the Microsoft Operating Systems below o MS Windows XP Professional SP 3 or higher o MS Windows VISTA Home Premium or Business 32 or 64 bit versions or o MS Windows 7 Home Premium or higher 32 or 64 bit versions e MS SQL Express 20
73. age E KAKA i E Plex FIPS 201 Access Control Software Install Package You must first register the software proceeding further You can register by selecting either of the following two options Please have the 6 digit Serial Number found on your Software CD case ready E Option1 Register Online J Option 2 Register by Phone J Version 1 0 0 16 If you click Option1 Register Online proceed to the next step If you click Option 2 Register by Phone proceed to step 16 Option 1 Registering Through Kaba Access Control s Website e This action assumes that your PC can connect to the Internet When you select this option the system displays the following screen directing you to Kaba Access Control s software registration website ae E Plex FIPS 201 Access Control Software Install Package E Plex FIPS 201 Access Control Software Install Package You are about to register Kaba s E Plex FIPS 201 Access Control Software Online Clicking on the link below will take you to Kaba s product software registration website where you must Fill your contact information Typein your 6 digit Serial number Receive your unique 8 digit Validation Key number Kaba Software Registration Website Click on the Continue installation button to start the installation You will be prompted to enter the 6 digit Serial number and the 8 digit Validation key to proceed the installation Continue installation J Version 1
74. age No 1 zoom Factor 100 From this window you can print and export save the Operators report E Plex FIPS 201 System Software User Guide Page 3 93 Systems Activity Log Report The Systems Activity Log Report displays all Operators activity in the E Plex FIPS 201 system software View Reports Choose a Report System Activity Log Filter By Operator All Operators Activity Start Date Friday October 02 2009 Activity End Date Monday November 16 2009 Sort By Choose a Column to sort on Activity Date Choose the direction order of sort Ascending From A to Z Descending From Z to A F Main Report KabaAccessControl Monday November 16 2009 11 41 AM Activity Date 10 2 2009 10 08 AM 10 2 2009 10 16 AM 10 2 2009 10 16 AM 10 20 200902 27 PM 10 20 200902 29 PM 10 21 200902 35 PM 10 21 200902 36 PM 10 21 200902 37 PM 10 21 200902 37 PM 10 21 200902 368 PM 10 21 200902 368 PM 10 21 200902 36 PM 10 21 200902 39 PM 10 21 200902 39 PM 10 21 200902 39 PM 10 21 200902 41 PM 10 21 200902 42 PM 10 21 200902 435 PM 10 21 200902 44 PM 10 21 200902 47 PM 10 21 200902 47 PM 10 21 200902 46 PM 10 21 200902 59 PM 10 21 200903 00 PM Current Page No 1 Event Operator Login Logout Database Management Operator Login Logout Operator Login Logout Operator Login Logout Operator Login Logout Users Operations Users Operations
75. agency can be checked any time by using the OCSP Online Certificate Status Protocol online card E Plex FIPS 201 System Software User Guide Page 6 26 revocation functionality of the software and the system This feature is not available in the E Plex FIPS General version Lite of the software If you are using the HIGH ASSURANCE version you must first configure the CoreStreet Path Builder Server Validation Extension settings accurately for this OCSP dynamic checking to work correctly Important Please check with your local IT personnel to set up properly the FIPS 201 card s root certificate the card issuer s info the OCSP responder s info and other associated info required to connect to the OCSP properly This info must be obtained from your facility s IT or security personnel who issued your FIPS 201 credentials since Kaba does not have this proprietary info Here is an example and_ example only on how to configure this using CoreStreet s demo sample root certificates EntrustCA cer PIVCA cer and signature cer and CoreStreet s demo OCSP responder ocsp corestreet com You must do a similar setup with your FIPS ID cards actual root certificates and related responder info Complete the following steps to configure the CoreStreet Validation Extension Settings for this example Certificate Installation 1 In Windows Explorer browse to C Program Files KABA E Plex FIPS 201 MainClient 2
76. ager will be just like the global Master but for the doors belonging to her his door group only Note You can define any number of door groups in the database To manage door groups select Manage Door Groups from the Door Groups menu or click the Manage Door a button Groups The software a the Racal Door Groups window From this window you can add edit or delete door groups By default there already exists a Door Group called Default belonging to a default Door Group Manager called GlobalManager You can edit the name of this Door Group and this Manager s name under Users menu shown later to suit your site s needs Manage Door Groups X e Manage Door Groups Door Group Manager Globalki anager GlobalM anager Edit Delete Single Manager Assignment to all Door Groups Assign Single Manager User Adding a Door Group e Complete the following steps to add a door group From the Manage Door Groups window click Add The software displays the Add Door Group window E Plex FIPS 201 System Software User Guide Page 3 23 DG Technical Holidays acations E Plex 5800 Lessard Michell v e Entry Lock aud i 8 4 Tamper Shut Time secs 30 etd ee Wi on nes lt 4 Me n at Manual Passage Duration hrs 41S SAL Standalone Access Controle Passage Mode Enabled Remote Unlock Enabled C aiad age eae E Ce Ce Note The door group name can be a maximum of 2
77. ant to temporarily shorten the current duration by say 1 hour to end at 3 p m then you must enter HH 01 at 2 00 p m Similarly if you want to temporarily extend the current duration by say 2 more hours to end at 6 p m then you must enter HH 02 at 4 00 p m 3 Enter another to indicate the end of Pushbutton Programming Mode Activating De activating Lockout Mode Command 499 You may need to use the global Lockout Mode for example during a fire or fire drill when you do not want anyone to return to his or her office This procedure will de activate all regular user access credentials that are active including Manager credentials but excluding the Master credential E Plex FIPS 201 System Software User Guide Page 4 7 Required User Level Master Put the lock into Pushbutton Programming Mode Enter command 499 for Lockout Mode all except Master Enter 1 to activate Lockout Mode and O to disable it Example of complete entry 499 1 or 499 0 Enter another to indicate the end of programming You have now activated or de activated Lockout Mode Performing Manual Diagnostics Command 500 Use the diagnostics code to perform manual diagnostics of the lock green LED red LED buzzer and the 12 pushbuttons 0 through 9 and Required User Level Master Manager Put the lock into Pushbutton Programming Mode Enter command 500 for diagnostics You will see a green LED and hear a high beep followed by a
78. are Failed to create temporary replacement card Click OK The software returns to the Add User window and displays a confirmation message in the status bar Permanent User card creation successful UserID 10 User Status w Note This message includes the list number of the user ID created and the user Status a green check mark indicates that the user is active in the system E Plex FIPS 201 System Software User Guide Page 3 61 Click Save The system saves the changes and displays a confirmation message Y E Plex FIPS 201 Access Control Software Changes successfully saved Click OK The software displays the updated Manage Users window Manage Users Last Name First Name User Group User Type Card Type Davis Tiffany Global Manager DESFire Permanent Card w Jackie Henson Global Manager DESFire Permanent Card Pickens LaToya Admin Office Staff Access DESFire Permanent Card Samuels Shane Admin Office Staff Access None Edit Delete f Master User L Door Group Manager Valid User Ee Invalid User Close E Plex FIPS 201 System Software User Guide Page 3 62 FIPS 2 01 User FRAC PIV TWIC CAC NG EP etc type cards If you select FIPS 2 01 from the Card Type Assigned area complete the following steps You will assign a pre encoded pre authenticated by the respective agency FIPS 2 01 card to the user profile in the database during this process Manage User Profile T Add User User Info
79. are Prerequisites J l Software Prerequisites Components Microsoft NET Framework 2 0 Server Software Microsoft SideBySide libraries Client Software X Crystal Reports Libraries o Server Software Prerequisites o Server Software e Client Software with PC M Unit software Installation You must install all Client related software on your different Client PC s unless you will be using one standalone PC in which case you will install all Server and Client related modules on this PC starting with installing all Client related prerequisites modules first The Client install process will also automatically install the PC M Unit related module on the same PC Complete the steps in the following order E Plex FIPS 2 1 System Software User Guide Page 6 1 E Plex General FIPS S Install Server Software Prerequisites E Plex General FIPS Si Microsoft NET Framework 2 0 Microsoft SQL Serer 2005 Express icrosoft SideBySide libraries Install Client Software Prerequisites Microsoft NET Framework 2 0 Microsoft SideBySide libraries Crystal Reports Libraries Client Software with PC M Unit PC M Unit only J o Client Software Prerequisites o Client Software with PC M Unit e PC M Unit only If you want to install the PC M Unit software only on multiple separate portable units you just need to install only the M Unit software by selecting this opti
80. are refers to a lock that is operational for user access AFTER it is programmed by the M Unit with its lock user configuration data downloaded from the E Plex FIPS 201 system software When the lock enters the Access Mode the method of lock access is either Smartcard only or PIN followed by the associated Smartcard However optionally you can assign certain Service users with PIN only access if required e Important From now on all LearnLok specific lock keypad commands to add delete users at the lock without software and PDA will not work in the lock That is the lock can be operated only in conjunction with software from now on Pushbutton Programming Mode The E Plex 5800 enters the Pushbutton Programming Mode when the Master user or one of the Manager users or an M Unit user enters the key first on the lock keypad E Plex FIPS 201 System Software User Guide Page 4 2 followed by presenting the credential card or PIN followed by card to put the lock in programming mode for example credential Once the E Plex 5800 is in the Pushbutton Programming Mode the Master Manager can enter one or more command sequences Each command sequence ends with a that acts like an lt enter gt button ona PC keyboard At the very end of all sequences of programming commands enter one more to remove the lock from the Pushbutton Programming Mode to return to the normal Access Mode Battery Life and Replacement The E Plex 5800 lock
81. as Holiday 12 24 2008 12 00AM 12 25 2008 11 59PM Independence Day 07704 2008 12 004M 07 05 2008 11 59PM Holiday Vacation Selection Start Date Start Time End Date End Time Select Holiday Vacation Click OK The software displays the Add Door window E Plex FIPS 201 System Software User Guide Page 3 36 e Adjust the following default parameters as appropriate using the up and down arrows e Unlock Time secs e Buzzer Volume 0 Off 3 Loudest e Tamper Count of tries e Tamper Shut Time secs Note The available Tamper Shut Time values range between 0 and 90 seconds Zero means the lock will never go into a tamper shutdown mode the default is 30 seconds e Manual Passage Duration hrs Select Passage Mode Enabled and enable it if you required free passage in this lock Select Remote Unlock Enabled and enable it if you have this option in the lock hardware Select one of the three Lock Function Types from the drop down list Note For each lock function a different possible lock configuration s will be displayed The software notifies you about the change E Plex FIPS 201 Access Control Software You have changed the Lock Function Type The Passage Mode Type of each Access Schedule assigned to this door will be modified to suit the function s profile Click OK Note Refer to the separate E Plex 5X00 Lock Function Setup Guide for instructions on changing to the desired BHMA loc
82. ation and activation process There are two versions of the E Plex FIPS 201 software i a General version where the FIPS card authentication is performed without going through the internet to check with an external OCSP server and ii an HIGH ASSURANCE version Online Certificate Status Protocol where the card s authentication is performed via the internet by contacting a secure OCSP server in this case the FIPS compliant card is also verified for the card holder s High Assurance mode status and her his revocation status if applicable Note 1 For the FIPS General version of the software installation you can simply select the Standalone Express installation on a single Standalone PC laptop where the user interaction will be minimal during interaction It will automatically install the Server module and the Client module including the PC M Unit component of the software on this PC Please follow the self guided software install screen prompts for Express installation You may also instead choose the Network Custom installation option if you are going to be working in a Server Client networked environment Note 2 The software installation procedure for the HIGH ASSURANCE version of the E Plex FIPS 201 software can be Network Custom install only Here both the Server and the Client parts of the pre requisite amp final components of the modules and also CoreStreet s Path Builder Server Val
83. attery and so must be changed to reflect the actual current date amp time Required User Level Master e Put the lock into Pushbutton Programming Mode e Enter command 001 followed by MMDDYY and again MMDDYY where MM 01 to 12 Month DD 01 to 31 Day and YY 08 to 99 Year 3 Enter command 002 followed by HHMM and again HHMM where HH 00 to 23 Hour and MM 00 to 59 Minute 4 Enter another to indicate the end of programming Note The date and time can also be set by the M Unit Whenever you program the lock with the M Unit the M Unit automatically sends the current date time and the DST setting from the PDA s settings to the lock E Plex FIPS 201 System Software User Guide Page 4 6 Activating De activating Passage Mode Command 399 You have already set up in the software a duration for a lock to remain in manual Passage Mode default is 4 hours and enabled it When you activate manual Passage Mode at the lock keypad it becomes active for the duration you have set in the software If your duration is setup as six hours and you manually activate Passage Mode at 10 00 a m it will automatically re lock at 4 00 p m Even if the lock was taken in and out of Passage Mode multiple times during the six hour period it will still re lock after six hours from the original starting period This ensures that a lock will never remain in Passage Mode beyond the programmed time period Note This manual Passage Mode funct
84. be opened with the Default Factory Master User PIN of 12345678 and no Smartcard is recognized by the lock Access Mode by LearnLok This mode refers to a lock that is operational for user access after the factory default Master PIN of 12345678 is changed to something else When the lock enters the Access Mode in LearnLok mode the Master and Manager users can add or delete regular users in the lock simply by entering relevant command codes at the lock keypad Please refer to the E Plex 58xx FIPS Lock Series Operations Manuaf for details Access Mode by Software This mode refers to a lock that is operational for user access AFTER itt is programmed by the M Unit with its lock user configuration data downloaded from the E Plex FIPS 201 system software When the lock enters the Access Mode the method of lock access is either Smartcard only or PIN followed by the associated Smartcard However optionally you can assign certain Service users with PIN only access if required Important From now on all LearnLok specific lock keypad commands to add delete users at the lock without software and PDA will not work in the lock That is the lock can be operated only in conjunction with software from now on Pushbutton Programming Mode This mode is typically used to program or audit the lock In this mode the Master User the Manager s or the M Unit User s can enter one or more command sequences to program and configure t
85. be unassigned from these Doors E Plex FIPS 201 System Software User Guide Page 3 52 Managing Departments In the FIPS 201 software you can group similar users into user groups like departments For example you may have a group of users who can be assigned to a Department called Office Staff The Department assignment in the software is strictly for operator convenience and does not have any other effect in the functionality of the E5800 lock or the FIPS 201 system Note You can assign any number of Departments in the database The Department name called Global is pre assigned in the system as a default Department In the E Plex FIPS 201software version 1 x the Department was called User Group e To manage Departments select Manage Department from the Department menu or click the Manage Department button Note In FIPS 201 software version 1 x the term User Group was used to refer to the Department they both mean the same thing Departments Users Access Assig Manage Departments find e The software displays the Manage Departments window Manage Departments X Pii Manage Departments Department Add D Office Staff Global Edit Delete e From this window you can add edit or delete Departments Adding a Department Complete the following steps to add a user group e From the Manage Department window click Add The software displays the Add Department window
86. ber window E Plex FIPS 201 System Software User Guide Page 6 22 E Plex FIPS 201 Access Control Software InstallShield Wizard Enter the Server Port Number Port 8740 Default Value 8740 e Keep the default port number unless your Server calls for another port number check with your IT personnel e Click Next The system displays the Database Server Login window Database Server Login Specify a new SQL Login ID and Password The password must not be less than 6 characters Login IB Password Confirm e Important Create your new SQL Login ID name and Password and Password again to confirm it and remember them or write them down and store them in a secure place It is recommended that you use the same Login ID name and the Password combo in the E Plex FIPS 201 software also later on so that you do not have to remember too many login and password info when you actually use the software everyday Eg Logon ID john Password kabailco e Click Next The system displays the Ready to Install window E Plex FIPS 201 Access Control Software InstallShield Wizard Ready to Install the Program The wizard is ready to begin installation Click Install to begin the installation If you want to review or change any of your installation settings click Back Click Cancel to exit the wizard Install Cancel e Click Install E Plex FIPS 201 System Software User Gui
87. ble to install the software if you do not complete the registration process with Kaba Access Control Software Registration Complete the following steps to register the software e Insert the E Plex FIPS 201 Installation CD into the appropriate drive of the PC e The E Plex FIPS 201 Software Installation Browser loads and displays the E Plex FIPS 201 Access Control Software browser menu For FIPS General Software Express Install on Stand alone PC e You will perform the Express Install where all the Server and Client related modules and the M Unit modules will be installed on one Stand alone PC without much user interaction If you are going to be using one PC no separate Server PC and other Client PCs to do the job please select this install option BEK al E Plex General FIPS Softwe System Requirements Software User Guide Install E Plex General FIPS Software E Plex FIPS 201 System Software User Guide Page 6 5 E Plex General FIPS Softw You must first register the software before proceeding further You can register by selecting either of the following two options Please have the 6 digit Serial Number found on your Software CD case ready mo tion 1 Register Online Option 2 Register by Phone e Continue to Option 1 Registering Through Kaba Access Control s Website Or For FIPS General Software Custom Install option for Network Environment e You will perform the Cust
88. capabilities The software consists of the Server and the Client parts modules which can both be installed on a single Standalone PC along with the SQL server database Optionally you can install the server related modules and the SQL database ona separate Server PC only and then install the Client related modules on one or more individual Client PCs in a networked configuration In this networked configuration you must have the right card enroller connected to each client PCs if you use card token based E Plex locks Portable PC M Unit Netbook Laptop and PC M Unit Software The E Plex universal PC M Unit software is installed on either i the same PC where the main FIPS 201 applications software is installed or ii on a separate mini Laptop Netbook PC In either case the M Unit software will work in conjunction with Kaba s PC M Unit IrDa Communications Kit to program and audit the locks This portable PC M Unit device in addition to letting you program and audit the lock allows for the downloading of Users Locks configuration data from the PC to the M Unit and also the uploading of the lock audits data from the M Unit back to the PC for Reports at the PC System Definitions This section contains system definitions for the following items e PC System Operator Classifications e Door Groups and Doors e Access Schedules e Holidays Vacations e Access Groups e Lock User Personnel Classifications Departme
89. cattiOn cccccccsssccecseeeceeceeseeecseeeeeseeeeesseseeessaueeesseeeeeseaeeessaseeesaaeeeeseseneeessaess 3 22 Ma nading Door GO ONS sce settee sinters aia E E 3 23 Addmng a Door GU OUID sessirnar E EEE EE E 3 23 Ear a DOO OU D es E E E E E A E 3 27 Managing Door Group Managers cccccccceeseeeeeecaeeeeeeeeeseaeeeeesaeeeeeeeeaeaueeeeessaeeeeeeesseueeeessaaeeeeeeeesas 3 28 Deleng a Door Grousser a eee eee ee a ee eee eee eens 3 29 Managing DOIS asesenengan ea a 3 31 AOAO a DOON eri A E E E E E A 3 33 ECU AD OOM eea E E E E 3 39 Deleting DOOI rsa e E a E E ae E EE ERa 3 40 Managing Access Groups ac ciisdcmecsssicsceesasanendcesasetnesnecancesaiscitaaseencecnesineenieesdnenseetesuawebanedataontdenwabsaanvonscsesaieentes 3 42 E Plex FIPS 201 System Software User Guide Page ii Adding an Access GOUD issena e een eee ee ee ee 3 42 Editing an Access GOUD as ccs eaten enea EAE Ea AAE AE A aE 3 47 Deleting an Access GIOUD cccccsssseeecccaeseeeecccaeeceeccsaaeecesaaueceessuuaeeceeseaaaeeeeessaaaeceesseaaueesssaageeeesssaaess 3 52 Managing Departments cccccecceeeeeeee eee eeeeeeeeeaeeeeeeeeeaaeeeeeeeeaaaaeeeeeeseaaeeeeeeaaaeeeesaaaeeesessaageeeeeeesaageeeeensas 3 53 Adding a Department cccccceseeecceeeeceeeessseeeeeceeseesseeeeeeeeseeeassaeeeeeeeseeeaasaeeeeeeeessaaaseeeeeessnsauaeseeeeseesenanas 3 53 Editing a DepariMeN eessen p e EEA EREE S SA SEEEN SEEE E Se 3 54 Deleting a Department nnann
90. ccssesencececsesccsseeeceesesecesseseceescssaceeseteeesecssccesseseeeessccccessenerees 6 15 Option 1 Standalone Express Installation cccccccccceecceseseeseeeeeeeeeeeeeeeeeeeeesssaeseeeeeeeeesseaeesseeeeees 6 15 Option 2 Custom Network Installation cccccccccccccceceeseeseeeceeeeeeeaeeeeeeeeesseeeaeeeeceeeeesssaeaeeeeseeeesaaas 6 19 Configuring CoreStreet Validation Extension Settings for FIPS HIGH ASSURANCE only 6 45 E Plex FIPS 201 System Software User Guide Page iv About the E Plex FIPS 201 The E Plex 5800 door lock is designed to control entry or access to an area or premises through the presentation of either a FIPS 201 Federal Information Processing Standard 2 01 compliant Personal Identity Verification PIV Smartcard ID card or a Philips DESFire Smartcard The lock is designed to work in conjunction with the E Plex FIPS 201 system software with the intent to use a handheld Pocket PC or a mini Laptop Netbook PC to transfer information between the PC and the lock when programming or auditing the locks Note For the purposes of this manual the Pocket PC and the mini Laptop Netbook PC will be referred to as the M Unit Maintenance Unit because its primary function is to perform maintenance at the lock The items explained in this chapter include the following e System Components e System Definitions e The E Plex FIPS 201 Software either of the two below o E Plex FIPS General Soft
91. d If he or she enters at the end of the code for example Credential the lock will go out of Pushbutton Programming Mode and return to its normal Access mode Note 1 The pound sign acts like the Enter key on a keyboard in your communications with the lock The tells the lock that one part of the entry is finished The serves another purpose to distinguish a programming type command from a simple access code to open the door A Master or Manager User can use the same Credential to open the door or to put the lock in Pushbutton Programming Mode the only difference being that he or she uses the sign in front to signal that he or she is about to enter a programming command Note 2 Correct errors during a command sequence If an invalid entry occurs recover from the mistake by entering the key which will clear all entries made from the beginning of the current command sequence and will reset the 5 second time limit for entering the code In this case you still have 15 seconds from the first number entered to enter the whole code E Plex FIPS 201 System Software User Guide Page 4 5 Modifying the Master User PIN Required User Level Master To change the factory code or current Master code follow these steps e Put lock into Pushbutton Programming Mode e Use the command 000 for Master and then enter the new Master code number e You must use eight digits between 00000000 and 99999999 as follows 000 MMMMMMMMs
92. d save a report in a specific file format by first generating it to view e Select the specific file format you want the report file to be exported and saved The available file formats are PDF Word Excel Rich Text and HTML e Click the Export Report icon E Plex FIPS 201 System Software User Guide Page 3 82 e The folder path where the report shall be exported and saved must have been already configured in the System Setup Systems Settings menu The report with the selected file format PDF Excel Word etc will be exported and saved in this folder s ip E Plex General FIPS Software The report is successfully exported to C Program Files KABAME Fles General FIPS MainChent Reports Users for a Door 2009 11 16_103438 pdf _ The file name of the report will be the actual name of this Report appended with today s date and time Click OK The software returns to the Report window E Plex FIPS 201 System Software User Guide Page 3 83 Access Schedules Report The Access Schedules report displays all schedules that have been defined in the E Plex FIPS 201 software View Reports a ne Choose a Report Main Report Access Schedules Filter By C Access on Sunday Access Schedule Report C Access on Monday C Access on Tuesday ProEdit C Access on Wednesday C Access on Thursday C Access on Friday Schedule Name Sat Start End Fri C Access on Saturday Always 12 00 AM 42 00 4M MAF Bus
93. database to the M Unit part of the database so as to be able to program the locks with the M Unit 16 Take the M Unit the same laptop or a separate Netbook PC which contains the M Unit program to each of the desired doors locks and program them one at a time Repeat this step to program all locks in your facility 17 Similarly you can go to the desired locations and audit the required locks in your facility for later uploading back to the PC for viewing printing the lock audit Reports E Plex FIPS 201 System Software User Guide Page 2 4 tarting the E Plex FIPS 201 Server and Client Software on the Standalone PC or on a Client PC in networked configuration Note Ensure that your Smartcard enroller is connected to your Client PC through the USB port and is recognized by the PC You can start the E Plex FIPS 201 on the PC by clicking the installed E Plex FIPS 201 icon on the desktop Ed E Plex High Assurance FIFS Client m E Plex General FIPS Client z for FIPS General or for FIPS HIGH ASSURANCE Note Do not delete the default desktop icon or modify it in any way Logging On for the First Time When you have clicked the E Plex FIPS 201 Client icon on the desktop for the very first time the software displays the Define First Master Operator window E Plex FIPS General x E Plex FIPS General x s se i Define First Master Operator T Define First Master Operator Site Site Site Name
94. dd edit or delete access schedules E Plex FIPS 201 System Software User Guide Page 3 13 Adding a Schedule Complete the following steps to manage schedules Note You may add additional schedules at any time e From the Manage Schedules window click Add The software displays the Add Schedule window Manage Schedules at Add Schedule Schedule Name Schedule Days Selection Week Only Unselect All Weekend Only Any Days Sun Mon Tue Wed Thu Fri Sat O O Schedule Time Settings Start Time End Time 08 00AM_ 05 00PM_ Cancel In the Schedule Name field type the name of the schedule you are adding Egs Day Shift or 7AM 6PM M F etc Note The schedule name can be a maximum of 20 characters and may include special characters and spaces Select the appropriate time range Week Only Weekend Only or Any Days Select the appropriate check box for the day s you want to add to the access schedule These are the days that users will have access to a door In the Start Time field select a start time This is the time that access begins each day In the End Time field select an end time This is the time that access ends each day Click Save The software displays a Changes Successfully Saved message E Plex FIPS 201 Access Control Software Changes successfully saved E Plex FIPS 201 System Software User Guide Page 3 14 Click OK The system displays the new access
95. de Page 6 23 e The system displays the Setup Status window as the program installs to the computer Setup Status The InstallShield Wizard is installing E Plex FIPS 201 Access Control Software Executing_SQL_Scripts Cancel e When the software completes installation the system displays the InstallShield Wizard Complete window E Plex FIPS 201 Access Control Software InstallShield Wizard InstallShield Wizard Complete The InstallShield Wizard has successfully installed E Plex FIPS 201 Access Control Software Before you can use the program you must restart your computer O No will restart my computer later Remove any disks from their drives and then click Finish to complete setup e Select Yes want to restart my computer e Click Finish The computer will automatically shut down and restart which may take a few minutes Eject and re insert the E Plex FIPS 201 software CD to view the main installation screen again Client Software and PC M Unit e Finally you must install the Client module which will also automatically install the PC M Unit related module 2 E Plex FIPS 201 Access Control Software Install Package E Plex FIPS 201 Access Control Software Install Package View _ System Requirements J _ Software User Guide J _ Software Installation Order J _CoreStreet Validation Extension Settings Install Software Prerequisites Components Server Software J Client
96. dential types assigned to this access group will be saved in the database Door Group Name Door Name Schedule Name Sun Mon Tue Wed Thu Fri Sat Start End Credential Passage Mode d d gt x lt iw fv jx E DG Technicai _ LabxyZ Always 1200AM 12 00AM Card Manual JW Unassign Selected Access Schedules Total Access Schedules 2 All Door Groups v Assign Selected Access Schedules Modify Door Schedules ae oO Schedule Name Sun Mon Tue Wed Thu Fri Sat Start End Credential Sara ode e Click OK to continue E Plex FIPS 201 System Software User Guide Page 3 46 AG TexhStatt Manage Assigned Users _ Door Group Name Door Name Schedule Name Sun Mon Tue Wed Thu Fi Sat Start End Cres x Pv iviw ie iv x DG Technical Labxyz Always ee tno AM 12 00AM Care D E Plex FIPS 201 Access Control Software p Changes successtully sawed 4 Unazsign Selected Access Schedules Modify All Door Groups Agsign Selected Door Hame OK O Schedule Hame Editing an Access Group Complete the following steps to edit an access group e From the Manage Access Groups window select an access group to edit e Click Edit The software displays the Edit Access Groups window Total Total Door Users Access Group Name e In addition to editing adding or removing doors to access group you can also assign u
97. e In the User PIN field the user PIN for this user will be automatically generated by the software You can override the PIN by entering a new 4 digit PIN or clicking the PIN Generator button From the Access Group drop down list select an access group or leave it as default None Select the appropriate card type to be assigned None Standard User DESFire or FIPS 2 01 E Plex FIPS 201 System Software User Guide Page 3 58 None If you select None from the Card Type Assigned area complete the following steps You will not assign a Smart Card to the user This is typically done when your user is not yet assigned a FIPS 201 smart card but you want to enroll her him in the system database Manage User Profile T User Information Last Name Samuels First Name Shane User Group Admin Office Staff UserType Access v User PIN 7219 i rie si None ssgned CO Standard User DESFire FIPS 2 01 Valid From Valid To Save Cancel Note The Valid From and Valid To date and time drop down lists are grayed out when None card type is selected e Click Save The system saves the changes and displays a confirmation message LD E Plex FIPS 201 Access Control Software Changes successfully saved E Plex FIPS 201 System Software User Guide Page 3 59 Click OK The software displays the updated Manage Users window Manage Users Las
98. e Independence Day 07704 2008 12 00 4M 07 05 2008 11 59 PM Click Assign The system displays the holiday or vacation in the Door Group Holidays Vacations area Assign Holidays Vacations as Assign Holidays Vacations Door Group Door Group Holidays Vacations Holiday Vacation Name Start Date Start Time End Date End Time Independence Day 07 04 2008 12 00 AM 07 05 2008 11 59 PM Holiday Vacation Selection Start Date Start Time End Date End Time Select Holiday Vacation v Click OK The software returns to the Add Door Group window Adjust the following default lock parameters for all locks in this door group as appropriate using the up and down arrows e Unlock Time secs e Buzzer Volume 0 Off 3 Loudest e Tamper Count of tries e Tamper Shut Time secs E Plex FIPS 201 System Software User Guide Page 3 25 e Manual Passage Duration hrs Select Passage Mode Enabled option if you want your locks in this door group to be able to set the free passage option manually at the lock keypad Note The Passage Mode is automatically and permanently enabled for a lock with Residence Lock function and so this option will be grayed out if the lock function selected is Residence Select Remote Unlock Enabled option if you need Note For this option to work you must have an E Plex 5800 lock that is electronically configured as such from the factory Note The Remote Unlock is automatically disabl
99. e click on FIPS Card Enroller Driver to install the smart card enroller driver e When the installation is complete the system displays the InstallShield Wizard Complete window click Finish when installation is completed Note There are also a couple of optional hidden utility programs included on the CD gt Microsoft Studio SQL Server Management Studio Expresss for both 32 bits and 64 bits OS This can be used as SQL database diagnostics tool These programs can be installed from this main screen but they are hidden From this main install menu pressing the Insert key on the PC keyboard will display this hidden Options tab to select and install these two programs pressing the Insert key again will hide this Options tab h E Plex General FIPS Software for Standalone E Plex General FIPS Software for Network J Microsoft SQL Server Management Studio Express x86 32 bit J Microsoft SQL Server Management Studio Express x64 bit J Options P lt Back e Click Exit to leave the installation menu since all modules are installed now e Important Restart your computer to activate all the installation changes Configuring CoreStreet Server Validation Extension Settings applicable to FIPS HIGH ASSURANCE only In the E Plex FIPS 201 HIGH ASSURANCE version Full Featured of the software the user s FIPS 201 credential s termination or cancellation from its issuing
100. e Choose Destination Location window E Plex FIPS 201 Access Control Software InstallShield Wizard K Choose Destination Location Select folder where setup will install files Install E Plex FIPS 201 Access Control Software to C Program Files Kaba E Plex FIPS 201 e Leave the location as the default or choose a different one and click Next The system displays the Database Server window Database Server Select database server and authentication method Select the database server to install to from the list below or click Browse to see a list of all database servers You can also specify the way to authenticate your login using your current credentials or a SQL Login ID and Password Database Server local SQLE xpress v Connect using Windows authentication SQL Server authentication using the Login ID and password below Login IB sa Password UT e The Database Server is SQL Express by default if it is different in your case eg if itis My Instances change to this name e For Connect using select SQL Server authentication using the Login ID and password Important The Login ID must be sa and the Password must be the same sa logon password that you created and entered earlier under section Microsoft SQL Express on page 6 23 Refer to Microsoft SQL Express for more information e Click Next The system displays the Server Port Num
101. e Passage Mode ES800 MortDB JawaD emo E 5800Cyl ES800 ResdtLock Labwi 4 Terme ee ee PERRE Clone Access Group e You may also clone an existing access group and give it a different name After cloning you can easily add or remove doors and or users in the cloned access group to suit your need e Click on Clone Access Group E Plex FIPS 201 System Software User Guide Page 3 50 Manage Assigned Users _ 4G TechStalt Door Group Hame Door Name Schedule Name Sun Mon Tue Wed Thu Fri Sat Start E EA CA rA rA Ea C DG Technical End Credential Passage Mode be e be le ee ef 1200 AM 00am Cad Manual 4 Unassign Selected Access Schedules Total Access Schedules 2 All Door Groups t Assign Selected Access Schedules _ Door Mame ES800 MotDB JawaD emo E 5800Cyl E5800 AesdtLock Labesrz Modi Door Schedules_ Jf Add New Door Passage Mode Oo schedule Name Sun Mon Tue Wed Thu Fri Sat Start End Credential e By default the system will automatically name this cloned access group as Clone of xxxxx where xxxxx Is the name of the access group that was cloned from You can rename this to whatever name you want e Click Save to save this cloned access group in the database Clone of AG TechStat Door Group Name Door
102. e Software Prerequisites click Software Prerequisites Components The system displays the list of prerequisites applications including the following e Server Software Prerequisites e Client Software Prerequisites is E Plex FIPS 201 Access Control Software Install Package E Plex FIPS 201 Access Control Software Install Package Install Server Software Prerequisites J Microsoft Net Framework 1 1 Microsoft Net Framework 1 1 SP1 Microsoft WSE 1 0 SP2 Microsoft Net Framework 2 0 Microsoft SOL Express Microsoft SideBySide libraries CoreStreet Components _ Install Client Software Prerequisites J Microsoft Net Framework 2 0 Microsoft SideBySide libraries Omnikey CardMan Driver 1 1 1 5 Crystal Reports Libraries Version 1 0 Beta Server Software Prerequisites You will be installing the following Server Software Prerequisites from the installation CD Prerequisite Used By Microsoft Net Framework 1 1 CoreStreet Microsoft Net Framework 1 1 SP1 CoreStreet Microsoft WSE CoreStreet Microsoft Net Framework 2 0 CoreStreet and Kaba Microsoft SQL Express CoreStreet and Kaba Microsoft Side by Side Libraries CoreStreet and Kaba CoreStreet Components Click Install Server Software Prerequisites The system checks for existing components and then installs each component one after another If a particular software prerequisite is already installed on the computer the system does not r
103. e information to the locks For more information refer to M Unit Handheld in Chapter 5 Programming and Auditing Locks Deleting a Door Complete the following steps to delete a door From the Manage Doors window select a door to delete Click Delete The system prompts you for confirmation Da E Plex FIPS 201 Access Control Software Are you sure want to delete this door from the system E Plex FIPS 201 System Software User Guide Page 3 40 Click Yes The door is deleted and the software displays the updated Manage Doors window Manage Doors Manage Doors Door Name Door Group Lock Model Lock Function Last Synched Total Users Add Main Hall Closet Storage Closets E Plex 5800 Entry Lock Never synched 1 Edit ar we Office 1 Staff Offices E Plex 5800 Entry Lock Never synched 1 Delete M Unit Synched BE M Unit Syne Required Close Click Close to exit the Manage Doors window and return to the Main Menu Note You should update your locks to reflect modified door groups by programming the M Unit and uploading the information to the locks For more information refer to M Unit Handheld in Chapter 5 Programming and Auditing Locks E Plex FIPS 201 System Software User Guide Page 3 41 Managing Access Groups In the E Plex FIPS 201 software you can group a bunch of doors with their own schedules and credential access types ie card only or PIN amp card etc in an Access Group This makes it extremely
104. e separate portable Netbook or mini laptop the FIPS 201 applications software should have been already installed and running on the Host PC Important If you are using one same integrated portable PC where the E Plex FIPS 201 software was installed you can skip the next few pages and go directly to the Section on Page 5 9 gt Automatic PC M Unit Sync This is because the E Plex PC M Unit part of the software already resides within the main FIPS 201 applications software and so no separate PC M Unit installation is required Note This same PC M Unit installation procedure can also be found in the PC M Unit User Guide It is shown here again in this document for convenience Please also refer to the 2 page color E Plex PC M Unit Getting Started sheet as a quick reference guide e The E Plex PC M Unit Software and the PC M Unit User Guide are located on the USB flash drive that comes with Kaba s PC M Unit Communications Kit e Plug in this USB drive into one of the USB ports of your dedicated M Unit Laptop or Netbook PC e n afew seconds you will see the following screen on your M Unit portable unit Ensure that Show Kaba s E Plex PC M Unit Software is highlighted Click OK to continue which will open the next window giving you an option to either view print the PC M Unit User Guide or install this software E Plex PC M Unit D This disk or device contains more than one type of i content What do you want
105. e you selected here all the default lock parameter values of this door will be exactly the same values as those in this door group since they are derived from this door group However you can change any or all lock parameter values for this door if preferred In the Door Name field type the door name Note A door name can be a maximum of 20 alohanumeric characters Select the Assurance Level for this door from the drop down list There are two Assurance levels Standard default and High If you assign High Assurance then the lock will grant access to only the FIPS 201 card users who have the High Assurance level status guarantee pre encoded on their FIPS 201 cards E Plex FIPS 201 System Software User Guide Page 3 32 Click Access Schedules to select the schedules that were previously created under the Manage Schedules menu for assigning them to this door during which time the lock will grant access to valid users The software displays the Assign Door Access Schedules window Manage Access Schedules i Assign Door Access Schedules Door Group Staff Offices Door Name Office 1 Lock Model E Plex 5800 Lock Function Entry Lock Door Access Schedules Schedule Name i Start End Credential Passage Mode Always wo 12004M 1200AM Card None Available Schedules Required Credential Required Passage Mode Select Schedule v Card Su Mo Tu W Th Fn Sa Start Select an Available Schedules from the drop down l
106. ed Access Schedules Total Access Schedules All Door Groups m Assign Selected Access Schedules IE Modify Door Schedules Door Name Oo Schedule Name Sun Mon Tue Wed Thu Fri Sat Start End Credential Bue ge Eseo E ToT Te Te rAr C PBA Clone Access Group Save Cance De SS Ses SS En e Select one door at a time for the selected door on the right side you will see the access schedules and credential types that have been already assigned to this door earlier All Door Groups vy Assign Selected Access Schedules Jk Modify Door Schedules IA Add New Door Door Name T Schedule Name Sun Mon Tue Wed Thu Fri Sat Start End Credential esa ge d i d 4 d d d d 0 7AM7PMMF gt e e ee se 07 00AM 07 00PM Cad None E5800 ResdtLock BAB Clone Access Grou save Cima e Select the required access schedule s for this door by checking the box s against it them and click on Assign Selected Access Schedules tab All Door Groups x Assign Access Schedules Ed Modify Door Schedules _ mr aa Add New Door aj Schedule Name Sun Mon Tue Wed Thu Fri Sat Start End Credential Fa Acctg 001 son O Always DO ee ae ee 12 00am 1200AM Card None o z EA CAKA rA eT Door Name fJawaDemo E5800Cyl E5800 ResdtLock THD Cove hcom an e You will see that this selected door E5800 MortDB in this example with all its parameters i
107. ed for a lock with Residence lock function and so this option will be grayed out if the lock function selected is Residence Select the Lock Function from the drop down list either Entry default Residence or Privacy Note For instructions on how to setup a Lock Function in an actual E Plex 5800 lock and what each Lock Function means please refer to the E Plex 5x00 Lock Function Setup Guide that came with the lock in the lock box By default all locks come out of the factory whose lock function is pre configured as Entry e Click Save The system saves the changes and displays a confirmation message i E Plex FIPS 201 Access Control Software Changes successfully saved Click OK The software displays the updated Manage Door Groups window Manage Door Groups Manage Door Groups Door Group Manager Staff Offices Tiffany Davis Edit Delete Single Manager Assignment to all Door Groups Assign Single Manager User Note You can add additional door groups at any time E Plex FIPS 201 System Software User Guide Page 3 26 Editing a Door Group Complete the following steps to edit a door group e From the Manage Door Groups window select a door group to edit e Click Edit The software displays the Edit Door Group window nad JOOr Uroups DG Technical Holidays Vacations Lessard Michell M Mew o o Passage Mode Enabled 7 Remote Unlock Enabled C Number of assigned
108. edentias Fecess denied Fecess denied Invalid Credentias Fecess denied Fecess denied Invalid Credent s Focess denied Lockunlocklock Dueto anaccess granted thelock unlockedand afterthe programmed opening duration relocked Foecess denied The useris not foundin thelock database 1 1 1 1 1 1 1 2 1 24 2008 02 11 PM 1 1 24 2008 02 11 Pal 1 Fecess denied The useris not foundin thelock database 1 24 200802 11 P Pickers LaToya Focess 5 DESFire command card reactivate FIPS succeed 1 24 200802 11 PM Pickers LaToya Focess 5 DE Fire command card reactivate FIPS succeed 1 24 200802 16 Pal Griesbeck Daniel htaster 1 Fecess denied Invalid Credenti 1 24 2008 02 16 Pal Davis Tiffany htanager 2 afterthe programmed opening duration relocked 0 Fecess denied 2 Lockunlocklock Dueto anaccess granted thank unlocked and 1 1 5 5 0 Lockunlocklock Dueto anaccess granted thelock unlockedand 1 24 2008 02 18 PM 1 24 200802 19 Pal Pickers LaToya Focess afterthe programmed opening duration relock 1 24 2008 02 20 Pal Griesbeck Daniel Master 1 24 200802 20 Pl Griesbeck Daniel htaster 14242003 02 20 PM Pickers LaToya Access 14242008 02 20 PM Pickers LaToya Focess 1 24 2008 02 22 Pl Fecess denied Fecess denied Invalid Credentits Fecess denied DESFire command card reactivate FIPS succeed DESFire command card reactivate FIPS succeed Current Page No 1 Total Page No 5 Zoom Factor Page Width From th
109. einstall it Note If your OS is Vista Home Premium or higher or if it is Server 2003 or higher the Microsoft _NET Framework 1 1 Microsoft NET Framework 1 1 SP1 and Microsoft NET Framework 2 0 are already installed on your machine because they are part of these Windows OS packages E Plex FIPS 201 System Software User Guide Page 6 3 Microsoft WSE 1 0 Service Pack 1 e The system displays the InstallShield Wizard for Microsoft WSE 1 0 Service Pack 1 i Microsoft WSE 1 0 Service Pack 1 InstallShield Wizard Welcome to the InstallShield Wizard for Microsoft WSE 1 0 Service Pack 1 The InstallShield R Wizard will install Microsoft WSE 1 0 Service Pack 1 on your computer To continue click Next WARNING This program is protected by copyright law and international treaties Cancel Click Next The system displays the License Agreement ie Microsoft WSE 1 0 Service Pack 1 InstallShield Wizard License Agreement Please read the following license agreement carefully END USER LICENSE AGREEMENT FOR MICROSOFT SOFTWARE IMPORTANT READ CAREFULLY This End User License Agreement EULA is a legal agreement between you either an individual or a single entity and Microsoft Corporation Microsoft for the Microsoft software that accompanies this EULA which includes computer software and may include associated media printed materials online or electronic documentation and Internet based services S
110. els gt lt application gt lt system runtime remoting gt lt appSettings gt lt add key RemoteHostUri values gts se 27 0 0 ferao lt add key FIPSReaderName value OMNIKEY CardMan 5x21 0 lt OMNIKEY CardMan 5x210 OMNIKEY AG Smart Card Reader L E Plex FIPS 201 System Software User Guide Page 6 32 e The Custom Network install of the software is completed now including the installation of the smartcard enroller driver e Important You must restart the PC after which you should be ready to launch and use the E Plex FIPS 201 software by clicking the E Plex FIPS General or FIPS High Assurance Client icon from your PC desktop w ae E Plex Assurance General FIFS Client FIPS Client or e Now please go back to the Chapter 2 Getting Started and resume from the Section Starting the E Plex FIPS 201 Server and Client Software on the PC E Plex FIPS 201 System Software User Guide Page 6 33 E Plex FIPS 201 System Software User Guide Page 6 34 Kaba Access Control 2941 Indiana Avenue Winston Salem NC 27105 USA Tel 800 849 8324 336 725 1331 Fax 800 346 9640 336 725 3269 www kabaaccess com www e plexlock com PKG3282 0111 Disclaimer While reasonable efforts were made to ensure the accuracy of this document at the time of printing Kaba assumes no liability for any errors or omissions This information is subject to be revised without notice and changes may be incorporated i
111. er Browse File System Browse Certificate Store OK Cancel 33 Click OK The system returns to the OCSP Trust window 34 Click OK The system returns to the CoreStreet Validation Extension window 35 Click Advanced The system displays the OCSP Settings window 36 Verify that the options shown below are selected H ocsP Settings General V Enable MiniCRL support m Digitally sign outgoing requests sist Response Cache Time Enable Response Caching Responses can be cached to avoid repeated duplicate requests Please choose a cache time between 0 seconds and 5 184 000 seconds 60 days Cache Time seconds Response Buffer Time Time can be added before and after the response time window to accommodate differences in computer synch time Please choose a buffer time between 0 seconds and 5 184 000 seconds 60 days Buffer Time 600 seconds me x 37 Click OK The system returns to the CoreStreet Validation Extension window No changes should be made to the other tabs of the window 38 Click Apply and then OK 39 All parts of the software installation are completed now and you should be ready to E Plex FIPS 201 System Software User Guide Page 6 31 run and use the E Plex FIPS 201 software Dedicated Server PC IP Addess for Networked Installation Important Please consult with your IT personnel on network installation of the E Plex FIPS software involving a dedicated Server PC a
112. es The system confirms that the FIPS 2 01 user card was enrolled successfully f i E Plex General FIPS Software FIPS 2 01 User card enrolled successfully ee ee Click OK and then Close The system displays the updated Add User window alid From 01 03 2008 m 10 31AM 5 0170372003 m CEMIS Enroll FIPS 2 01 User Card 01 03 2008 10 56 AM gt Date 12 20 2006 03 43 PM 12 20 2009 03 43PM Se Create Maintenance Card Click Save The system saves the changes and displays a confirmation message D E Plex FIPS 201 Access Control Software Changes successfully saved E Plex FIPS 201 System Software User Guide Page 3 66 Click OK The software returns to the updated Manage Users window Manage Users Manage Users Last Name First Name User Group User Type Card Type Davis Tiffany Global Manager DESFire Permanent Card Jackie Henson Global Manager DESFire Permanent Card Pickens LaToya Admin Office Staff Access DESFire Permanent Card Samuels Shane Admin Office Staff Access None Thomas Jawa Global Manager FIPS 2 01 Card Edit Delete Master User __ Door Group Manager Valid User E Invalid User Close You can now safely remove the FIPS 2 01 card from the Smart Card enroller E Plex FIPS 201 System Software User Guide Page 3 67 Editing a User Complete the following steps to edit a user e From the Manage Users window click the preferred user Click Edit The so
113. ete tench eine eects EEE E cea EEA 4 2 alec ONS COCK acct acetate eee E capers cts ake Ate E TAEAE E ge ade EEEE 4 2 Battery Life and TRCOIA COMIC I wc dacesice tee ccccadnesssahenactahita tile deteebaedcbevene ccdiewtautcanahde deddebeeh dcimtaetadeakiaanee ntent 4 3 SEGUENCE Of QPCALONS securis E E AE R ESEA 4 4 Configuring the LOCK FUNCTIONS cccccccssseeseccceeeeeeeeeeeeeeeeseeeeseeceeeeeeesaeeeeseeeeseseeaseeeeeeseessseaseeeeeeeeeessaas 4 4 Default Values of the E Plex 5800 Lock Programmable ParameterS cc ccccessseeseeeeeseeeeeseeeeees 4 4 Initial Programming of the LOCK ss sstsnadendevnsisasnnesiansiiertaniedudneardaysnnen nacasiunaiosiseinsstnnal ddan asneemacauedeeeiausenniesaieneneciies 4 5 Entering Pushbutton Programming MOde cccccsseesseeeeceeeeaeeeeeeeeeeeeesaaeseeeeeeeeeeaaeeeeeeeeeeaaaaaeeeeeeeess 4 5 Modifying the Master User PIN cccccsssssssseceeeeceeessseeeeeceeeseeasseeeeeeesenaaaeeeeeessssaasseeeeeeessssanssseeeneess 4 6 Additional Pushbutton Keypad Commands cccccccccecceseessseeeeeeeeeeeeeeeeeeeesaaaeeesceeeseeeeeeeeeeeeseneaaaaaags 4 6 Bice lla elal m LOCK Conn ener a etree ee ron ren tere eee er ten een etek eter e reer re te err 4 9 Summary of Pushbutton Programming COMMANAS cccccccccececssseeeeessseseeeeeeeeeeeeeeeaaaaaeseseeeeeeeeeeeeeeeees 4 9 Visual Feedback Message Definitions ccccccsssssssseeeeeceeeeeeseeeeeeeeeaeasseeeeeeeeseeeaaseeeeeessaeaseeeesee
114. ficate This setting is not recommended due to serious security implications Implicitly Trusted Validation Authorities Specify how the client should deal with responder certificates that are not explicitly trusted and do not contain the id pkix ocsp nocheck extension Automatically reject Automatically accept C Allow client to attempt to verify certificate x For the Unknown Responses selection leave the Unknown box checked but the other two boxes unchecked For Implicitly Trusted Validation Authorities selection leave the Automatically Rejected box checked but the other two boxes unchecked 29 Click Add The system displays the Add Trusted VA window E Plex FIPS 201 System Software User Guide Page 6 30 H Add Trusted VA Select Certificate Browse File System Browse Certificate Store C 30 Click Browse Certificate Store 31 Expand Root and select CoreStreet Partner Validation Authority aA Select Certificate Select a Certificate from the Certificate Store Root Microsoft Authenticodeftm Root Authority Microsoft Root Authority Microsoft Root Certificate Authority OU NO LIABILITY ACCEPTED c 97 VeriSign Inc OU VeriSign Tir OU Copyright c 1997 Microsoft Corp OU Microsoft Time Stamping OU EntrustC4 O U 5 Government C US PIVCA RTC OCSP Responder Symantec Root C4 AuthRoot Im i HJ Add Trusted VA Select Certificate RTC OCSP Respond
115. ftware displays the Edit User window m HaTe OOOO w wo E 10 21 2008 02 08PM 5 fooospm Ss Enrall FIFS Card 10 21 2008 02 10 PM mo 12 74 2007 06 46 PM Card ID EIBS3240048C4F 8021 234428 D9E 2828 7 12 07 2012 06 46 PM Edit any or all required fields where changes needed to be made Click Save The system saves the changes and displays a confirmation message E Plex FIPS 201 Access Control Software Changes successfully saved E Plex FIPS 201 System Software User Guide Page 3 68 Click OK The software displays the updated Manage Users window Manage Users Manage Users Last Name First Name User Group User Type Card Type Davis Tiffany Manager DESFire Permanent Card None Jackie Manager DESFire Permanent Card Pickens Admin Office Staff Access DESFire Permanent Card Samuels Admin Office Staff Access None Thomas Global Manager FIPS 2 01 Card Add Edit Delete Master User EE Door Group Manager Valid User ae Invalid User Close Note You should update your locks to reflect modified user profile by transferring the changed info to the M Unit and uploading programming the information to the locks For more information refer to M Unit Handheld in Chapter 5 Programming and Auditing Locks Deleting a User Complete the following steps to delete a user Note You cannot delete a user if s he is assigned to a door you must first unassign this user from the door and then dele
116. he calendar day which is actually 11 59 59 PM 23 59 59 Holiday vacation Start Date and Time 01 22 2008 v 12 00 End Date and Time 02 21 2008 All Day Event Cancel In the Holiday Vacation name field type the name of the holiday or vacation you are adding Note A holiday or vacation name can be a maximum of 16 characters and may include special characters and spaces Leave the All Day Event check box selected if you want a 24 hour period holiday like New Year s Day Uncheck the box if the holiday or vacation you are entering is a block of consecutive vacation days with specific start end dates and times Note The All Day Event check box is selected by default In the Start Date field select the start date by using the drop down arrow Note 12 00 AM indicates midnight or the start of the calendar day In the Start Time field select a start time by using the up and down arrows Note The Start Time field will be grayed out if the All Day Event check box is selected In the End Date field select the end date by using the drop down arrow In the End Time field select an end time by using the up and down arrows Note The End Time field will be grayed out if the All Day Event check box is selected Click Save The system saves the changes and displays a confirmation message 3 E Plex FIPS 201 Access Control Software Changes successfully saved E Plex FIPS 201 System Software User
117. he current date time To update the current date amp time you can either use the lock keypad command sequences 001 and 002 along with their date and time parameters or simply re program this lock with its proper lock ID using the M Unit This is described in Chapter 5 Programming and Auditing Locks under the section Programming Locks Important Please ensure that your M Unit s current date and time are set correctly before synchronizing with the lock If you forget to update the date time the lock will keep flashing the red LED every 10 seconds as a reminder until the lock s date time is updated Note In rare instances when you reconnect the lock with new batteries the lock may not re initialize properly a typical symptom is that the lock does not recognize any pushbutton input If this happens disconnect the battery pack press any one of the pushbuttons for a minimum of 2 seconds to discharge the built in circuit capacitance and then re connect the battery pack Wait a couple of seconds until you see the green LED flash once followed by the sound of the motor crunching and a high pitched beep indicating that the lock has re initialized properly E Plex FIPS 201 System Software User Guide Page 4 3 Sequence of Operations This section describes the sequence of operations for accessing and programming the E Plex 5800 lock With the E Plex 5800 in Factory Mode do the following e Program the lock function of the lock
118. he door during holiday vacation period e Override Deadbolt The user can unlock the door even if the deadbolt privacy is thrown from inside projected for privacy e First Authorized Passage The door will enter Passage Mode when this user with this privilege will be the first person to swipe his her card E Plex FIPS 201 System Software User Guide Page 3 78 Click OK The software displays the updated Define Access User List window Manage Specific Access Assignment ne Define Access User List Door Group Staff Offices DoorName Office 1 Lock Model E Plex 5800 Lock Type Entry Lock Assign Filter By To assign Schedules amp Privileges to a User double click on one User or select a User and click on Set User Details button All User Groups v All User Types Last Name First Name User Group User Type Status Last Name First Name User Group User Type Schs Priv Pickens LaToya Admin Office Staff Access Griesbeck Janiel Globa Master v v Thomas Jawa Global Manager FJ Davis Tiffany Manager vw vw Master User User is saved in database Schedule or Privilege is assigned C Door Group Manager C Useris not saved in database se Schedule or Privilege is not assigned Total Users assigned to this Door 3 Set User Details Click Save Click Close The software returns to the Manage Specific Door User Access window Click Assign Users to assign additional users or click Close to exit Note Y
119. he global Master user having complete access to all E Plex FIPS 201 System Software User Guide Page 1 6 the door groups and doors in the facility the difference here being that this DG Manager will have complete access only to her his doors in this door group rather than the doors in the entire facility Access Schedules Example You can define an unlimited amount of access schedules in the system database However you can define only up to 16 access schedules in a lock When assigning access schedules to a user you may only use the access schedules that have been assigned to the lock There is a default access schedule Always 24 hours per day seven days per week that is built into the system software and cannot be changed or deleted An access schedule is a defined time period during the span of a week during which users are granted access to a door Operators using the E Plex FIPS 201 software at the PC define the access schedules by selecting the days of the week that the schedule is active and by specifying the schedule s start time and end time for the days specified You can define a descriptive schedule name for each access schedule Once defined you can assign access schedules to a door from the Access Assignment menu of the software A maximum of 16 access schedules can be assigned to a single door Because you may specify whether the door access method is Smart Card or PIN and Smart Card the different access schedu
120. he lock or download the lock audits For more information about using the lock in these modes refer to States of the Lock in Chapter 4 Operating the E Plex Lock at its Keypad E Plex FIPS 201 System Software User Guide Page 1 2 Lock Access Methods You can open a lock using one of the following different access methods either by Smartcard only access or by PIN followed by Smartcard access or optionally for selected Service users only by PIN only access You can set up the lock to require different access methods for different users or for the same user operating the lock on different access schedules Smartcard Only Only the presentation of a valid Smartcard is required to access the lock PIN and Smartcard The entry of a valid PIN followed by the presentation of a valid associated Smartcard is required to access the lock Access through PIN and Smartcard is referred to as Dual credential access Important The global user PIN length is configurable from 4 to 8 digits but the first 4 digits must be unique for security reasons PIN Only for Service Users only Only entering of a valid PIN is required to access the lock but only if programmed as such for selected Service users only ie all regular Access users Manager users and the global Master do not have PIN only access Smartcards and Smart Card Enroller Reader Writer The E Plex 5800 lock supports both FIPS 201 compliant PIV Personal Identity Verificat
121. his way you must also remember to delete this user in the Access Assignment configuration profile in the database because this person is still in the PC s database The default expiration time is four days 96 hours which can be increased or decreased Select the Expiration Date from the drop down list and calendar Select the Expiration time using the up and down arrows Click Create Card The software prompts you to place a card on the card reader writer Present a DESFire Card on card reader writer to encode one of the three types of maintenance cards you chose to encode When encoding is complete the software confirms that the card was created i E Plex FIPS 201 Access Control Software Reactivate User Command card creation successfull E Plex FIPS 201 System Software User Guide Page 3 72 Click OK The system displays the updated Create Maintenance Card window Create Maintenance Card Expiration Date 01 26 2008 V 1213PM eation Date 01 22 2008 12 15PM baala 04531451001F80 Expiration Date 01 26 20081213PM Sequence Number Reactivate User Command card creation successfull When you are finished click Close The system returns to the Edit User window Click Save The system saves the changes and displays a confirmation message YD E Plex FIPS 201 Access Control Software Changes successfully saved Click OK The system returns to the Manage Users window E Plex FIPS 201 Sy
122. iSign Tirr OU Copyright c 1997 Microsoft Corp OU Microsoft Time Stamping OU EntrustC4 O U 5 Government C U5 RTC OCSP Responder Symantec Root C4 4uthRoot a lt gt Select Cancel 23 Click Select The system returns to the Issuer Responder Mapping window 24 Click Next 25 Complete the Responder field by typing this info exactly as shown http ocsp corestreet com A Add Issuer Responder Mapping Issuer PI CA Responder http Jocsp corestreet com 4051 responder Test This Responder lt Back Cancel 26 Click Finish The system returns to the CoreStreet Validation Extension window 27 Repeat steps 20 26 This time in step 22 select OU EntrustCA O U S Government C US 28 Click Trust The system displays the OCSP Trust window HJ ocsP Trust Explicitly Trusted Yalidation Authorities Specify the certificates which are explicitly trusted as Validation Authorities RTC OCSP Responder Add Unknown Responses The client should treat unknown responses as Treating unknown responses as errors will result in revoked C Errors certificate status which will prevent the relying party From accepting the certificate Treating unknown responses as unknown will allow the relying Unknown party to attempt to validate the certificate through other means Treating unknown responses as good will result in valid certificate status and the relying party should accept the certi
123. icrosoft SQL Server 2005 Setup End User License Agreement MICROSOFT SOFTWARE LICENSE TERMS a MICROSOFT SQL SERVER 2005 EXPRESS EDITION SERVICE PACK 2 These license terms are an agreement between Microsoft Corporation for based on where you live one of its affiliates and you Please read them They apply to the software named above which includes the media on which you received it if any The terms also apply to any Microsoft updates supplements Internet based services and support services e Select I accept the licensing terms and conditions and click Next The system displays the Installing Prerequisites W Microsoft SQL Server 2005 Setup Installing Prerequisites Installs software components required prior to installing SOL Server SOL Server Component Update will install the following components required for SQL Server Setup Microsoft SOL Native Client Microsoft SOL Server 2005 Setup Support Files Click Install to continue e Click Install As the software installs the system displays a status bar at the bottom of the window W Microsoft SQL Server 2005 Setup Installing Prerequisites Installs software components required prior to installing SQL Server SOL Server Component Update will install the following components required for SQL Server Setup gt Microsoft SOL Native Client Microsoft SOL Server 2005 Setup Support Files Configuring components Cancel E Ple
124. idation Extension Setting module will need to be installed Careful user interaction will be required during installation and so you must follow the correct order sequence of installation which is described in the Software Installation Procedure document that can be viewed from the software CD main menu Important You must also install the Smartcard enroller driver software after installing the main E Plex FIPS 201 software components Software Registration and Licensing Software Licensing Kaba Access Control s E Plex Enterprise software requires you to register your individually licensed copy of the software with Kaba Access Control in order to use the software Registering the software will help secure your system database and the locks on your site and will also aid Kaba Access Control in making you aware of any new software upgrades patches etc when required On the CD envelope of the E Plex FIPS 201 software CD you will see a sticker with a unique 6 digit Serial Number for the software which is part of your unique 10 digit Site License Number Additionally the second line of the label on the CD jewel case will be titled Site Private ID with a blank space against it For easy reference you can write down this 8 digit software security key number that you will be asked to enter when you login to the software system the very first time This key is used in the system as part of a unique encryption key for your facility a
125. ile is circular and the oldest record is overwritten by the most recent A hard reset does not clear the audit trail for security reasons The Audits from Downloaded Doors report displays all door audits that have been downloaded from a door to the PC through the M Unit The software displays a list of download data files indicating the name of each door lock from which a data file has been received View Reports Choose a Report Audits from Downloaded Doors Filter By Door Groups Staff Offices KARA Auditsfrom Doors Report Doors Office 1 Audit Dates Thursday January 24 2008 0324 Phi Choose an Audit Date Door Grop Staff Offices Andit Date 1 24 2008 3 21 13 PM Total Events 100 a a on Door Name Office 1 Firmware Version 1 0 Number of Opers 4 0 User Groups Lock Function Entry Lock Lock Model E Plex 5800 Operator daniel Choose a User Group DateTime Last Name First Name User Type Card eq Transaction E 1 24 200802 10 Pal Griesbeck Daniel lulaster 1 Fecess denied Invalid Credentis Users 1 24 200802 10 Pl Griesbeck Daniel htaster ann 1 24 200802 10 MA Griesbeck Daniel htaster Choose a User 1 24 200802 10 Pl Griesbeck Daniel htaster 1 24 200802 10 MA Griesbeck Daniel luiaster 1 24 200802 10 MA Griesbeck Daniel hiaster 1 24 200802 10 MA Griesbeck Daniel htaster 1 24 200802 10 P Griesbeck Daniel htaster 14242008 02 10 PM Pickers LaToya Focess Foecess denied Fecess denied Invalid Cr
126. iness Hours 08 00 AM 05 00 PM Sort By Weekend 12 00 AM 11 00 PM Tuesday January 22 2008 03 53 PM Total Schedules Choose a Column to sort on a Schedule Name Choose the directionforder of sort Ascending From A to Z Descending From Z to 4 Generate Total Page No 1 Zoom Factor 85 From this window you can print and export save the Access Schedules report E Plex FIPS 201 System Software User Guide Page 3 84 Holidays Vacations Report The Holidays Vacations report displays all holiday vacation periods that have been defined in the E Plex FIPS 201 software View Reports Choose a Report Holidays acations Sort By Choose a Column to sort on Holiday Vacation Name Holidays and Vacations Report Choose the directionforder of sort Ascending From A to Z Descending From Z to 4 ProEdit Tuesday January 22 2008 04 24 PM Total Holidays acations Holiday Vacation Name Start Date Time End Date Time Campus Fall Break 10 11 2008 12 00 AM 1019 2008 11 59 PM Christmas Holiday 12 24 2008 12 00 AM 42 25 2008 11 59 PM Independence Day 7 4 2008 12 00 AM 7 5 2008 11 59 PM Generate Current Page No 1 Total Page No 1 Zoom Factor 85 From this window you can print and export save the Holidays Vacations report E Plex FIPS 201 System Software User Guide Page 3 85 Audits from Downloaded Doors Reports Each E Plex 5800 lock stores up to 30 000 audit events The audit f
127. ion Smartcards and DESFire Smartcards for access control as the primary method of lock entry for users An authorized E Plex FIPS 201 system Operator enrolls Smartcards for users at the PC through the SCM Microsystems SDIO10 Smartcard enroller which is actually a reader writer device That is the enroller can read user ID card data either from the contact side of the FIPS 201 compliant PIV card or through the contactless interface of a DESFire card it can also write user ID and related data onto a DESFire card FIPS 2 01 Card A sample FIPS 2 01 card is shown below which is the contact based Smartcard Note the gold contact pad where the user ID related data is stored including the biometric and the photo data of the user All FIPS 201 compliant PIV cards are already authenticated E Plex FIPS 201 System Software User Guide Page 1 3 and produced by the applicable U S government agencies with appropriate user ID data and so the E Plex FIPS 201 software only reads and verifies the user ID related data on these cards excluding the biometric data In the card enroller the user ID data is read from the contact side and in the E Plex 5800 lock it is read through the card s contactless interface The following smartcards are FIPS 201 compliant e PIV Personal Identity Verification issued to U S government federal employees e FRAC First Responder Authentication Credential issued to non federal employees e TWIC Transportation
128. ion is different than the automatic access schedule based Passage Mode setup in the software Required User Level Master Manager 1 Put the lock into Pushbutton Programming Mode 2 Enter command 399 to activate de activate Passage Mode e Enter the code where 1 activate Passage Mode and 0 de activate Passage Mode An example of complete entry to activate Passage Mode is 399 1 and to de activate Passage Mode it is 399 0 e Enter another to indicate the end of Pushbutton Programming Mode Increasing Decreasing Passage Mode Duration Temporarily Command 005 As in the above example say your manual passage mode duration is programmed for duration of six hours So if you manually activated Passage Mode at 10 00 a m it will automatically re lock at 4 00 p m However there may be times when you may want to either shorten or prolong this remaining passage mode duration temporarily on that day only by a few hours You can do this but you must enter this command sequence before the expiry of the current passage mode end time Keep in mind that the next day onwards the manual passage mode duration that was set originally will take effect again Required User Level Master Manager 1 Put the lock into Pushbutton Programming Mode 2 Enter command 005 HH where HH 01 to 24 hours Let us take the same example as before gt activate manual passage at 10 a m so that it will automatically end at 4 p m after 6 hours But if you w
129. is FIPS card user s private PIN encoded on the card E Plex FIPS 201 System Software User Guide Page 3 64 Important This FIPS card PIN which has already been encoded on the FIPS card is different from the PIN that is generated in the E Plex FIPS 201 database for this user Only the holder of this FIPS card knows this PIN for confidentiality and so you will require this card holder s presence to input the PIN on the PC keyboard when enrolling this user Enter this FIPS Card PIN and click OK The system continues with the FIPS 2 01 Card Enrollment Validation process as shown below in this window pser po FIPS 2 01 Card Enrollment Sin x ji FIPS 2 01 Card Enrollment i Yalidation Steps i ET 25 Retrieved PIV issuer information v 26 Retrieved PIY serial number 2 V 27 Retrieved PIY issuance date V 28 Retrieved PIY expiry date V 29 Retrieved facial image a When the enrollment process is completed the system displays a Confirm Visual Identification window pq k e T Confirm Visual Identification Does this photograph match the person presenting the card The software prompts you to confirm the photograph for the user extracted from the card Click Yes E Plex General FIPS Software Do you wish to use this photograph as the default photograph for this user profile es E Plex FIPS 201 System Software User Guide Page 3 65 Click Y
130. is window you can print and export save the Audits from Downloaded Doors report E Plex FIPS 201 System Software User Guide Page 3 86 Cards Status Report The Cards Status report displays enrollment creation and expiry status of all cards in the system Permanent FIPS cards Permanent and Temporary DESFire etc cards View Reports Choose a Report Cards Status Filter By _Card Types Choose a Card Type Sorn By Choose a Column to sort on Last Name Choose the direction order of sort Ascending From amp to Z Descending From Z to A Generate Main Report ProEdit Tuesday January 22 2008 04 04 PM Card Type Last Name Davis Griesbeck Jackie Pickens Card Type Last Name Pickens Pickens Pickens DESFire Permanent Card First Name Tiffany Daniel Henson LaToya Card ID 041 42951001F 80 2 046682659001 F 80 1 040F34 51001F 80 1 04541551001F 80 5 DESFire Reactivate Permanent User DESFire First Name LaToya LaToya LaToya Card ID 04531451001F80 5 04531451001F80 5 04531 4 51001F80 5 Total Cards Expiration 1 4 2009 02 14 PM 1 22 2009 01 04 PM 1 22 2009 09 13 AM 4 22 2009 11 21 AM Expiration 1 22 2009 11 21 AM 1 22 2009 11 21 AM 1 22 2009 11 21 AM Total Page No 1 Cards Status 7 DESFire Creation Date 1 22 2008 01 03 PM 1 22 2008 01 04 PM 1 22 2008 09 30 AM 1 22 2008 12 01 PM DESFire Creation Date 4 22 200
131. ist at the bottom of the window The software displays the schedules in the Door Access Schedules pane Note Once a schedule is highlighted the Available Schedules area becomes grayed out Manage Access Schedules 5 Assign Door Access Schedules Door Group Staff Offices Door Name Office 1 Lock Model E Plex 5800 Lock Function Entry Lock Door Access Schedules Schedule Name i Sat Start End Credential Passage Mode Always wo 12 004M 12 004M Card None Available Schedules Required Credential Required Passage Mode A Card Su Mo Tu W Th Fri Sa Start End 12 00 4M 11 00 PM Select the Required Credential Card access or PIN amp Card access during this selected schedule from the drop down list E Plex FIPS 201 System Software User Guide Page 3 33 Select one of the four Required Passage Mode options from the drop down list either i None ie the lock never grants free passage ii Automatic ie the lock automatically enters free passage at the start of this schedule and locks back at the end of the schedule automatically ili First Authorized Passage ie the lock goes into free passage only after a valid user opens it with her his credential at or after the start of this schedule or iv Manual ie only the Master or the Manager users can manually set reset the free passage at the lock keypad between the start and end times of this schedule for the Manual Passage mode duration set in the software
132. k as a maintenance function only ie the M Unit credential will NOT open the lock When an M Unit User presents her his M Unit credential the lock enters the E Plex FIPS 201 System Software User Guide Page 5 6 Communications Mode with the M Unit handheld immediately equivalent to entering the command sequence Master credential 900 or Manager s credential 900 indicated by alternate green and red flashing LEDs Now the M Unit User can program or audit the lock Important Ensure that the current date and time on your system PC and your portable M Unit are accurate including the Daylight Saving Time setup If the date and time are not correct your users will not be able to access the lock even if they have the right credentials E Plex FIPS 201 System Software User Guide Page 5 7 Manual PC M Unit Sync Data Transfer with Separate PC M Unit via a USB flash drive You must perform the manual data transfer both from the E Plex FIPS 201 Host PC s side and from the separate portable PC M Unit s side as described below Ensure that both the E Plex FIPS and the E Plex PC M Unit programs are running on both PCs Host and M Unit From the main menu of E Plex FIPS 201 software click File and then Sync with Separate PC M Unit Schedules Holidays Vacations Door Groups Doors Access Groups Departm eer a Sync with Separate PC M Unit El ie Launch Integrated PC M Unit 7 Exit From this
133. k function e Click Save The system saves the changes and displays a confirmation message 1 E Plex FIPS 201 Access Control Software Changes successfully saved E Plex FIPS 201 System Software User Guide Page 3 37 Click OK The software displays the updated Manage Doors window Manage Doors Manage Doors Door Name Door Group Lock Model Lock Function Last Synched Total Users Add Office 1 Staff Offices E Plex 5800 Entry Lock Never synched 1 Edit Delete M Unit Synched BE M Unit Sync Required Close Note You will see an orange color X symbol against the Door Name in the very first column indicating that this door configuration data needs to be synchronized with transferred to the M Unit PDA before programming this door Once sync d with the PDA the orange X will be replaced with a green check symbol for this door You can add additional doors at any time E Plex FIPS 201 System Software User Guide Page 3 38 Editing a Door Complete the following steps to edit a door e From the Manage Doors window select a door to edit Click Edit The software displays the Edit Door window Manage Door Profile Edit Door Door Group REIRES Access Schedules DoorName Office 1 Lock Model Assurance Level Standard Holidays acations Use Door Group Default Holidays Override Holidays for this door Holidays acations Lock Parameters Lock Function
134. les in the system cannot overlap If you have a need for periods of time where access for certain groups of users overlaps partially you will need to break those time periods into separate access schedules Also an access schedule cannot bridge a time period between two consecutive days If you have an access schedule that needs to start before midnight and end after midnight you must set this up as two separate access schedules During the week have three shifts at my company e First Shift 7 00 a m to 3 00 p m e Second Shift 2 00 p m to 11 00 p m e Third Shift 10 00 p m to 8 00 a m These three shifts will need to be broken into seven access schedules so they do not overlap e 7 00 a m to 2 00 p m First shift e 2 00 p m to 3 00 p m First and second shift overlap e 3 00 p m to 10 00 p m Second shift e 10 00 p m to 11 00 p m Second and third shift overlap e 11 00 p m to 12 00 a m First part of third shift first day e 12 00 a m to 7 00 a m Second part of third shift next day e 7 00 a m to 8 00 a m Third and first shift overlap By default all user types except the global Master and the Door Group Manager s are not assigned any access to the lock These user types include the Manager users the Access users the Guest users and the Service users One or more of the access schedules must be assigned to these user types who must have access to the affected locks doors
135. ly A IMPORTANT USE OF THIS SOFTWARE IS SUBJECT TO LICENSE RESTRICTIONS CAREFULLY READ THIS LICENSE AGREEMENT BEFORE USING THE SOFTWARE ENTIRE AGREEMENT This end user license is a legal agreement between you Purchaser and Kaba Ilco Inc hereinafter KABA It constitutes the entire agreement Agreement between Purchaser and KABA on the license and use of the Software and supersedes any and all prior agreements and documents unless expressly incorporated herein USE OF THIS SOFTWARE INDICATES YOUR COMPLETE AND UNCONDITIONAL ACCEPTANCE OF THE TERMS AND CONDITIONS SET FORTH IN THIS AGREEMENT If you do not agree to these terms and conditions promptly return or if received electronically certify the destruction of the Software and all accompanying items within five days after their receipt in order to receive a full refund of any license fee w I do not accept the terms of the license agreement InstallShield Select accept the terms of the license agreement Click Next The system displays the Customer Information window E Plex FIPS 201 System Software User Guide Page 6 21 E Plex FIPS 201 Access Control Software InstallShield Wizard Customer Information Please enter your information Please enter your name and the name of the company for which you work User Name Company Name e Enter your User Name and the Company Name as before e Click Next The system displays th
136. n future releases
137. nd can also be accessed from the System Setup menu The 10 digit unique Site License number contains your i Serial number 6 digits always unique ii Software Type 1 digit 1 Full Featured version ie Not a Trial version iii Number of Seats 2 digits 25 Unlimited and iv Software Product 1 digit 2 FIPS General or 0 FIPS HIGH ASSURANCE E Plex FIPS 201 System Software User Guide Page 6 4 You will be required to enter the above digits of your Site License number which is printed on the sticker of the software CD envelope Note The very last digit 2 or 0 for Software Product is not required to be entered The following are a few examples of End Users Site License number that you must enter to register the software Note that only your 6 digit Serial number is unique you must enter the Software Type as always 1 and the Number of Seats as always 25 as shown on the software CD envelope sticker 112233 1 25 223344 1 25 334455 1 25 The registration process is quite simple and you can register the software in one of two ways Register online at Kaba Access Control s software registration website anytime of the day or night 24 7 or Register by calling our Technical Support line at 800 849 8324 or 336 735 1331 Monday through Friday between 8 00 AM and 5 00 PM Eastern Standard Time Important You will not be a
138. nd click Next The system is ready to begin installation i CoreStreet Installer Ready to Install the Program A lt C The installer is ready to begin installation Y Click Install to begin the installation If you want to review or change any of your installation settings click Back Click Cancel to exit the wizard E Plex FIPS 201 System Software User Guide Page 6 16 e Click Install The system displays a status bar while the program is installed i CoreStreet Installer Installing the CoreStreet Path Builder Server Validation Extension 3 0 The program features you selected are being installed Please wait while the CoreStreet Path Builder Server Validation Extension 3 0 is installed This may take several minutes Status e When installation is complete click Next The system displays the Installer Completed window i CoreStreet Installer A q4CORESTREET Y Installer Completed The installer has successfully installed the CoreStreet Path Builder Server Validation Extension 3 0 Click Finish to exit the installer Path Builder SerVE e Click Finish to return to the Install Package window Client Software Prerequisites e You must install the following Client Software Prerequisites from the installation CD Prerequisite Used By Microsoft Net Framework 2 0 Microsoft Side by Side Libraries SCM SDIO10 Driver Smart Card enroller Crystal Reports Libraries The Reports feature
139. nd contractors to achieve a very high degree of authentication of these users Part of this standard also calls for the seamless interoperability of the FIPS 201 compliant smart ID user cards between various federal government agencies and related communities Encrypted FIPS 201 card ID info is stored on the smart chip of the card and contains the card holder s unique identifier CHUID cryptographic pair of keys digitized finger print templates photograph etc so that the claimed identity of the card holder can be authenticated precisely Typical FIPS 201 Compliant Personal Identity Verification ID Cards Used by Various U S Federal Government Communities CAC NG amp EP Common Access Credential Next Generation amp End Point Used by the Department of Defense such as the military the National Guard etc FRAC First Responder Authentication Credential Used by fire medical law enforcement and other emergency response personnel TWIC Transportation Worker Identification Credential Used by border security port authority airline passenger security control Transportation Security Administration personnel etc PIV Personal Identity Verification Credential Used by all Federal employees and their contract workers CHUID Card Holder Unique Identifier This is a long unique number typically from 1 000 to 2 000 bytes long and includes the FASC N see below and all other mandatory PIV related dat
140. nd other multiple Client PCs e By default each E Plex FIPS Client PC s configuration file IP address will point to 127 0 0 1 as the remote Host s Server PC s IP address You must edit this text file using a text editor such as Notepad and replace this default IP address with the actual Server PC s IP address e Ifthe Client part of the software was installed in the default path of the Client PC C Program Files Kaba E Plex FIPS Main Client go to this directory and open the configuration file ACSNetEplex exe config with the Notepad e Replace the default IP address value 127 0 0 1 of RemoteHostUrl with the actual IP address value such as 10 106 15 44 example IP address only save the file and close Repeat this in each Client PC in your facility e The following screen shot shows where exactly the value should be replaced in the client configuration file ACSNetEplex exe config Notepad File Edit Format View Help lt configuration gt lt configSections gt lt configSections gt lt connectionStrings gt lt connectionStrings gt lt system runtime remoting gt lt application gt lt lifetime leaseTime 0 sponsorship Timeout 1M renewOnCallTime 1M leaseManagerPollTime 1M l gt lt channels gt lt channel type Belikov GenuineChannels Ge MaxQueueditems 100 MaxTimeSpanT oReconnect 5000 MaxContentSize 50000000 Max T otalSize 50000000 gt lt chann
141. ndow you can print and export save the Users report E Plex FIPS 201 System Software User Guide Page 3 96 Users for a Door Report The Users for a Door report allows you view all users assigned to a particular door in the E Plex FIPS 201 software View Reports Choose a Report Users for a Door Filter By Door Groups Choose a Door Group Doors Choose a Door Sort By Choose a Column to sort on Last Name Choose the direction order of sort Ascending From A to Z Descending From Z to Generate ProEdit Tuesday January 22 2008 04 51 PM Door Name Door Group Main Hall Closet Storage Closets Total Users 2 Last Name Davis First Name Tiffany Card ID 04142951001F80 040F3451001F80 Jackie Henson oor Name oor Group Total Users 3 Last Name Davis First Name Tiffany Card ID 04142951001F80 Jackie Henson 040F3451001F80 Pickens LaToya 04541551001F80 Lock Function Entry Lock Passage Mode Card Type CardCount User PIN DESFire 2 11611701 Permanent Card DESFire Permanent Card User Type Manager 9281 Manager oc Entry Lock unction assage Mode Card Type CardCount User PIN DESFire 2 11611701 Permanent Card DESFire Permanent Card DESFire Permanent Card User Type Manager 9281 Manager 3578 Access Total Page No 1 Zoom Factor 85 From this window you can print and export save the Users for a Door report
142. ng steps to view reports e Select a report from the Choose a Report drop down list in the View Reports window Note The available Filter By and Sort By options change based on the type of report you choose E Plex FIPS 201 System Software User Guide Page 3 80 Select from the Filter By options if you want to filter out particular data item s to view Select from the Sort By options to view the data item s in a particular sorting order Click Generate The software displays the selected report in the Main Report pane View Reports Choose a Report Users Filter By C Show only Revoked Users Sort By Choose a Column to sort on Last N ame Choose the direction order of sort Ascending From A to Z Descending From Z to A Generate ProEdit Tuesday January 22 2008 03 36 PM Group Name Admin Office Staff Total Users 1 Last Name First Name UserType Card ID Pickens LaToya Access 04541551001F80 Group Name Global Total Users 3 Last Name First Name User Type Card ID Davis Tiffany Manager 041 42951001F80 Griesbeck Daniel Master 04682659001 F80 Jackie Henson Manager 040F3451001F80 Total Us Card Card Type Count Valid From Valid To 2 1 22 08 11 21 am 1 22 09 11 21 am DESFire Permanent Card Card Card Type Count Valid From Valid To 2 14408 214 pm 1 499 2 14pm DESFire Permanent Card DESFire Permanent Card DESFire Permanent Card 1 1 2208 1 04pm 1 2299 1 04 pm
143. ng up the system for use Note In this example it is assumed that you will be using one standalone laptop to run the E Plex FIPS 201 Server Client applications software and again use the same laptop to operate it as a portable M Unit device to program audit locks 1 The actual Software Installation section is found at the very end of this manual under Appendix B Please continue to read this section and then jump to the Appendix section to actually install the applications software from the E Plex FIPS 201 software CD on your laptop 2 Ensure that you have the administrative rights to install the software on the PC If you do not you will require your IT personnel s help in installing the software During installation you will be required to register the E Plex FIPS 201 software with Kaba so as to activate and use the software 3 Connect your Smartcard ID Enroller which enrolls the contact side of the FIPS 201 compliant ID badge and or also the contactless side of the DESFire card if used to the PC through a USB port Important Ensure that the enroller driver is already installed from your E Plex FIPS 201 software CD 4 Standalone Express Installation For most situations you will be installing the software which consists of the Server Client amp M Unit parts of the modules on one standalone PC Select the Standalone Express install option which will automatically install all FIPS 201 software modules wi
144. nnnnonennnenannntnenrntteentntttretnttttrantttt enntre enEEtECAEEEE CEEE EEECAEEEE EEEE EEEn EEEE 3 55 Managing USOS ie sintixecnetanienicttimesusetiniescen E EEEN Ee E EAEN SE ET ENA ENE E ENEE anis 3 57 Adding a USO essensen Ea a EEEn EE Ea E EE EN 3 58 EGUNO A USE aee E E E E E 3 68 Deleting BUS cies siescescieve vanes sntvan wasnt enues insanwacsui ana deatan oni la tins selaesadasnnasins ns Venexesnidaumestaeoenbtieaeatvecnindatbuenaseteas 3 69 Creating Maintenance Cards Temporary Replacement amp Quick Delete Cards cccccseeeeeeeeeeees 3 70 Managing ACCESS Assignment ccccceeseccceeeeeeeseeeeeeseeeeeeseeeeeeeeeeeeeseaeeeeseaeeeeeeaeeessageeessaeeesegeeesenseneeneas 3 74 Assigning All Users to Locks in Access Assignment ccccceeeeeeeeeeeeeeeeeeeeeeeeeeeeeaaeeeeeeesaaeeeeesaaaees 3 74 FONG E E S E E E E sisnnsiatcavnetencgh chew dawoieea interes E A A A E ET 3 80 Viewing Printing Exporting REDOItS cccccsececeeeeceeeeeeeeeeaeeeeeeeeeaeaeeeeeesaaaeeeeesaaaeeeseesaaaeeessaeaeeeeeseeaaaees 3 80 Viewing Reports aa cceiscscites cet sire wites erie talten tea cteals or eNi aN k eN Ear E ani A REAN AEren aai a raae Naia raaa E a ai 3 80 Printing NS OU S se et petted ta gie act ncetide as Carseat aaalen sis widanccaisha tee denen dieda sa Nie uch wate faux siNcken tact ante cfeescdatoodsinecamtnbenceuys 3 82 Exporting TSO ay watts erties nN bch v nines cole vc ncieuisfiemediNic ict maaan aan does Pnuecaietseen toneiand
145. nternal unique number in your software is used as your unique Customer Security key This unique key is encrypted and passed back and forth between the PC software the M Unit and the locks during E Plex FIPS 201 System Software User Guide Page 2 3 their data communications Refer to Logging On for the First Time in this chapter for more information 2 Change the default 8 digit Master PIN 12345678 to be used in the locks by the global Master to a different 8 digit Master PIN and remember this important PIN 3 Onthe System Setup window change any default parameters such as all users PIN length date time format etc if desired 4 Your unique 10 digit Software License number is displayed on the Help About window You will need to refer to this License number when contacting Kaba s technical support team to receive any technical support 5 Ensure that the Smartcard enroller is connected to your PC 6 Create your Access Schedules assigning each schedule with period of time for each day when users should have entry access 7 Optional Create your Holidays and Vacation blocks Create your Door Groups 9 Create your Doors one door at a time assigning each door with its various configuration parameters 10 Optional Create your Access Groups assigning each access group with door or doors with schedules attached to each door 11 Create your Departments referred to as User Groups in FIPS 201 version 1 x soft
146. nts amp Users E Plex FIPS 201 System Software User Guide Page 1 5 PC System Operator Classifications e Three types of operators can use and operate the E Plex FIPS 201 software e Level 1 Operator The software system can have up to 10 Level 1 Operators The global Master user of the system will automatically become the very first Level 1 Operator All Level 1 Operators will have the highest system authorization and will have access to all operational functions of the E Plex FIPS 201 software Any Manager user can also be assigned as Level 1 Operator or as Level 2 but not as Level 3 The Level 1 Operator can add Level 2 or Level 3 Operators to the Enterprise system The Level 1 Operator can add a maximum of 255 Level 2 and Level 3 Operators combined to the system When a Level 2 or Level 3 Operator is added to the system this Operator s Logon Name and Password must also be established e Level 2 Operator Can be a maximum of 255 Level 2 Operators can perform all functions of Level 1 Operators with the exception of the following o Adding modifying or deleting any other operators o Adding modifying or deleting any managers o Modifying the site s software Private ID o Will not be able to view any user s access PIN e Level 3 Operator Can be a maximum of 255 Level 3 Operators can be M Unit and or Access users only and can perform all functions of Level 1 Operators with the exception of the following
147. o Adding modifying or deleting any other operators Adding modifying or deleting any managers Modifying the site s software Private ID Will not be able to view any user s access PIN Cannot perform a system database restore operation Can only change her his own Password in the System Setup O O O O e Note 1 An M Unit user can be assigned only as a Level 3 Operator this user cannot login to the E Plex FIPS 201 Client software but can login to the Separate if configured as such PC M Unit software to program audit locks e Note 2 An Access user can be only a Level 3 Operator s he can login to the FIPS 201 software but cannot perform any M Unit software functions to program audit locks e Note 3 The Guest and Service users cannot be assigned any Operator status Level 3 2 or 1 Door Groups amp Doors You can define up to a maximum combination of 100 000 door groups and doors in the system database A door group represents a group of physical doors that contain the E Plex 5800 locks For example you can have a couple of door groups called DG Factory and DG Offices each containing the door locks belonging to them In each door group you must assign one and only one Door Group DG Manager user However you can assign many regular Manager users to each door group The DG Manager will have complete access to all the doors in this door group without any restrictions This is very similar to t
148. ode Diagnostics 500 Manual diagnostics Master 123456789 0 Manager Lock Model 501 Identification Identify if the lock is an E Plex 5800 Eight sets of green and red LEDs flash for E Plex 5800 Master Manager Communication 900 IrDa Communication startup Master Startup between the lock and M Unit PDA Manager Visual Feedback Message Definitions Condition Parameters E Plex FIPS 201 System Software User Guide Page 4 9 Parameters Access granted ea 0 sec w sec Access granted battery 1 10 sec 1 sec low condition Access denied asec o asec o Once o Invalid programming OFF ON 1 sec Once entry including duplicate access code Tamper shutdown 2 sec Once purr COEN in ON Alternate ON Alternate 1 10 sec 1 Sec progress Hard Reset sequence in N Alternate N Alternate 1 2 sec Continuously progress Hard Reset sequence ON OFF 2 sec Once successful Hard Reset sequence OFF ON 2 sec Once failed On first battery connect 2 sec Once Power paa sequence Battery is about to go OFF ON 2 Sec Once Dead fully discharged E Plex FIPS 201 System Software User Guide Page 4 10 5 Programming and Auditing LOCKS A PC based Maintenance Unit called the M Unit this can be either i the same laptop PC where the FIPS 201 Client software has the PC M Unit part of the software integrated within it or ii a Separate mini laptop Netbook PC used as a portable device running the PC M
149. oftware An amendment or addendum to this EULA may accompany the Software YOU AGREE TO BE BOUND BY THE TERMS OF THIS EULA BY INSTALLING COPYING OR OTHERWISE USING THE SOFTWARE IF YOU DO NOT AGREE DO NOT INSTALL COPY OR USE THE SOFTWARE YOU MAY RETURN IT TO YOUR PLACE OF PURCHASE IF ANNTT ADI CO OAD A VIITT DEDIIAITY OI accept the terms in the license agreement InstallShield Cancel E Plex FIPS 201 System Software User Guide Page 6 4 Select accept the terms in the license agreement and then click Next The system displays Setup Type ie Microsoft WSE 1 0 Service Pack 1 InstallShield Wizard Setup Type Choose the setup type that best suits your needs Please select a setup type Installs the runtime files only O Complete Installs the runtime files docurnentation and samples Either Microsoft NET Framework 1 0 SDK or Microsoft Visual Studio NET are required to view the documentation Microsoft Visual Studio NET is required to build and run the samples O Custom Choose which program features you want installed and where they will be installed Recommended for advanced users Select Runtime Only and then click Next The system indicates that it is ready to install the application ie Microsoft WSE 1 0 Service Pack 1 InstallShield Wizard Ready to Install the Program The wizard is ready to begin installation Click Install to begin the installation If you want to review or change any of
150. om Install where all the Server and Client related pre requisite and other modules and the M Unit modules will be installed in a networked environment User interaction will be required as per displayed prompts during the install process If you are going to be using a separate Server PC and one or more other Client PC s to do the job please select this install option ork 2 0 ri 3 Microsoft NET i Microsoft SQL Server 2005 Express b Microsoft SideBySide libraries __E Plex General FIPS Software for Standalone J E E Plex General FIPS Software for Network J _ Install Client Software Prerequisites J Microsoft NET Framework 2 0 Microsoft SideBySide libraries Omnikey CardMan Driver V 1 2 0 6 Crystal Reports Libraries lt Back j Exit j lt Back e Note When you install the Server module the install software will prompt you to register the software first After registering the software the actual software will be installed and follow the procedure as shown below for installing the FIPS HIGH ASSURANCE software with Custom install option The procedure is very similar except you will not be installing the final CoreStreet s Path Builder related modules this is applicable for the HIGH ASSURANCE version of the software only For FIPS HIGH ASSURANCE Software Custom Install option only e You will perform the Custom Install where all the Server and Client related modules
151. on Complete the steps in Client Software and M Unit PDA by selecting and installing the PC M Unit program only Complete the following steps to install the E Plex FIPS 201 software which consists of the Prerequisite modules Server modules and Client amp PC M Unit modules Note Ensure that the Smartcard enroller is connected to the Client PC through the USB port Insert the E Plex FIPS 201 software installation CD into the appropriate drive of the PC The E Plex FIPS 201 Software Installation Browser loads and displays the E Plex FIPS 201 Access Control Software Install Package browser menu i E Plex FIPS 201 Access Control Software Install Package E KAKA a E Plex FIPS 201 Access Control Software Install Package View System Requirements J Software User Guide J Software Installation Order J CoreStreet Validation Extension Settings Install Software Prerequisites Components J _ Server Software J Client Software amp amp M Unit PDA ll Version 1 0 Beta From this window you can view and install the following e View System Requirements Software User Guide this manual Software Installation Order CoreStreet Validation Extension Settings only in HIGH ASSURANCE software CD e Install o Software Prerequisites Components o Server Software o Client Software and M Unit PDA O O O E Plex FIPS 201 System Software User Guide Page 6 2 Prerequisites When you are ready to install th
152. one line at 800 849 8324 or 336 725 1331 between 8 00 PM and 5 PM Monday through Friday except holidays Eastern Standard Time Give your contact information Give your 6 digit Serial number Receive your unique 8 digit Validation Key number Click on the Continue installation button to start the installation You will be prompted to enter the 6 digit Serial number and the 8 digit Validation key to proceed the installation Continue installation J Version 1 0 0 16 lt Back Follow the instructions on the screen to register by calling Kaba Access Control s Technical Support line e Kaba Access Control s Technical Support personnel will first register your contact info Serial Number Type of Software info and the Number of Seats info for your software from your software CD jewel case sticker and will then give you a unique 8 digit Registration Activation Key for your software over the phone e Write your Registration key down and click Continue Installation to complete the software registration process You will be asked to enter your Serial number again along with your Registration Activation key you just received to complete the registration and activation of the software Proceed to Continue with Registration below Continue with Registration Complete the following steps to finish registering the E Plex FIPS 201 Software 19 Click Continue Installation on the Install E Plex FIPS 201 Access Control Software sc
153. oor groups Each Door Group must contain one and only one Door Group Manager Doors Doors Manage Doors From the Doors menu you can add edit or delete any number of physical doors with associated E Plex 5800 lock configuration parameters You must select and assign from previously assigned Access Schedules in the system one or up to 16 access schedules with Credential Type card only or PIN and card for each schedule period You must ensure that these access schedules do not overlap but if you do the system will prompt you to correct this scenario Optionally you can also select and assign from previously assigned Holidays Vacations in the system one or up to 32 holiday vacation periods Free passage is disabled in the lock by default but you can enable one of three Passage mode options for each schedule period Manual passage at lock keypad Automatic Schedule based passage or First authorized user access passage Access Groups Access Groups User Groups Users From the Access Groups menu you can add edit or delete any number of access groups which contain the doors with their schedules and associated users An access group can consist of one or many doors each with a schedule and credential type to use during that schedule info attached for each door You can also assign one or many users in each access group you create Additionally each access group can be cloned as a new access group this cloned access grou
154. ostics Note Whenever you need to talk communicate to the E Plex 5800 lock you must use Kaba s IrDA communications PC M Unit kit gt the IrDA dongle and its cable E Plex FIPS 201 System Software User Guide Page 5 9 Online Logged in as ico From this point on please refer to the E Plex PC M Unit User Guide on how to perform the data transfer to perform the above tasks in more details The E Plex PC M Unit user guide is included as an electronic document on the USB flash drive of the E Plex PC M Unit kit The following are a few sample screens showing the PC M Unit sub menus from where you will launch the above five gt i through v tasks Audit Door Maintenance Upload Audits via IP Manual Sync Audit Door h Maintenance b Exit Help Download Doors wia IF Upload Audits via IF Manual Sync k Audit Door E Plex FIPS 201 System Software User Guide Page 5 10 Appendix Appendix A FIPS 201 Key Definitions This section gives brief explanations of a few key terminologies used in FIPS 201 related systems Please review these definitions to better understand the different elements of the E Plex 5800 lock and FIPS 201 system software E Plex FIPS 2 1 System Software User Guide Page 6 1 FIPS 201 Key Definitions FIPS 201 Federal Information Processing Standard Publication 2 01 a technology standard for adoption and use by United States federal employees a
155. ou should synchronize all updated doors locks with these newly assigned users with the M Unit PDA and then program these doors with the M Unit by uploading the information to the locks For more information refer to M Unit Handheld in Chapter 5 Programming and Auditing Locks E Plex FIPS 201 System Software User Guide Page 3 79 Viewing Printing Exporting Reports The Reports option can be used to view and report on the data that you have defined in the E Plex FIPS 201 software and locks It can also report on the data that you have uploaded to locks defined in the software and also the lock audits downloaded from locks Once data have been synchronized from the lock to the PC you can view and report on data from the lock The E Plex FIPS 201 software allows you to generate reports from the Reports menu Note Once a report is open for viewing you will have the option to either print this report or export it in a specific file format type like PDF Excel Word etc and save it in any folder of your choice either in your local drive or in any external storage drive To access reports select Reports from the Reports menu or click the Reports button Reports Reports The software displays the View Reports window View Reports Choose a Report Choose a Report v Current Page No Total Page No Zoom Factor 100 From this window you can select a report to view print or export Viewing Reports Complete the followi
156. p can be edited to add or remove door s and or user s from it very quickly instead of trying to create a new one from scratch thus saving enormous operator data key entry time Optionally you do not need to create any access groups in the system if you have only a handful of locks doors and only limited E Plex FIPS 201 System Software User Guide Page 2 8 users who will need access in your facility If this is the case you can configure your facility s door user access assignment setup under the Access Assignment menu Departments Departments Users Access Assigt Manage Departments From the Departments menu you can add edit or delete any number of Departments The use of Departments in the software is for your convenience to define and organize each one as a user group in your facility but is not recognized by the E5800 lock Users Users i Manage Users From the Users menu you can add edit or delete any number of users in the database but up to 3 000 users and their associated PINs in a lock You can also enroll add or remove their previously assigned Smart Cards FIPS or DESFire Additionally from this menu you can assign a previously created access group to this user generate and manage any Temporary DESFire only user cards for both permanent FIPS and permanent DESFire card users if required There are five types of users in each lock e Manager lock programming auditing rights
157. pics e States of the Lock e Battery Life and Replacement Sequence of Operations e Default Values of the E Plex 5800 Lock Programmable Parameters States of the Lock There are four states of the lock Factory Mode Access Mode by LearnLok Access mode Software and Pushbutton Programming Mode Factory Mode The Factory Mode is one of three primary states of the E Plex 5800 locks The main characteristics of this state include the following e The E Plex 5800 opens only when the 8 digit factory default Master PIN 1 2 3 4 5 6 7 8 is entered at the lock keypad e The visual indication for access granted is the green LED flashing once A high pitched tone is also generated while the green LED is on e The Master User must change this factory default Master PIN to be able to exit permanently from the Factory Mode and switch to the normal Access Mode and or the Pushbutton Programming Mode of operations Access Mode by LearnLok e The Access Mode by LearnLok refers to a lock that is operational for user access after the factory default Master PIN of 12345678 is changed to something else When the lock enters the Access Mode in LearnLok mode the Master and Manager users can add or delete regular users in the lock simply by entering relevant command codes at the lock keypad Please refer to the E Plex 58xx FIPS Lock Series Operations Manuaf for details Access Mode by Software e The Access Mode by Softw
158. point on please refer to the E Plex PC M Unit User Guide on how to perform the data transfer manually between the two devices via a USB flash drive The E Plex PC M Unit user guide is included as an electronic document on the USB flash drive of the E Plex PC M Unit kit Data Transfer via IP Addressing The M Unit data transfer between the Host PC and the PC M Unit can also be performed via the Host PC s IP address without having to use the USB flash memory drive In this case the data transfer is initiated only from the PC M Unit side as Download Doors to M Unit or as Upload Audits to Host PC The transferred data will be automatically stored both in the Host PC s and the M Unit s respective databases no initiate data transfer action is necessary from the Host PC s side Please refer to the E Plex PC M Unit User Guide for more details on how to transfer data between the Host PC and the M Unit via the IP Addressing scheme You must have either wired or wireless network connection for the FIPS Host PC and the M Unit for this IP address based data transfer to function Note If on the other hand you use one same standalone laptop PC as one integrated PC to run both the FIPS 201 applications and the PC M Unit applications go to the next section gt Automatic PC M Unit Sync E Plex FIPS 201 System Software User Guide Page 5 8 Automatic PC M Unit Sync Data Transfer within the same Integrated Laptop PC
159. pyright information by clicking on About E Plex FIPS 201 System Software User Guide Page 2 10 Software User Guide E Plex FIPS 201 System Software User Guide Page 2 11 E Plex FIPS 201 System Software User Guide Page 2 12 Using the E Plex FIPS 201 Software This chapter explains how to use the E Plex FIPS 201 system software on a regular basis to suit your physical access control security needs It typically involves the following items System Setup Menu Managing Schedules Managing Holidays Vacations Managing Door Groups Managing Doors Managing Access Groups Managing Departments Managing Users Managing Access Assignment Viewing Printing Exporting Reports E Plex FIPS 201 System Software User Guide Page 3 1 System Setup Menu The System Setup menu allows you to define and maintain global system settings that in most cases you need to do this only during the initial system setup To access system settings select an option from the System Setup menu or click the System Setup menu icon System Setup System Settings Manage Operators Readback DESFire Card Database Management Changing System Settings You should establish the system settings before you begin using the E Plex FIPS 201 on a daily basis However you can leave all the default values as they are or use this feature at any time if you need to update any of the existing system configura
160. r Name Office 1 Lock Model E Plex 5800 Door Holidays Vacations Holiday acation Name Start Date Start Time End Date End Time Independence Day 07 04 2008 12 00AM 07 05 2008 11 59 PM Holiday Vacation Selection Start Date Start Time End Date End Time Select Holiday Vacation Unassign OK Cancel Note By default the window displays the holidays vacations associated with the door group for this door E Plex FIPS 201 System Software User Guide Page 3 35 Select the appropriate holiday or vacation period from the Holiday Vacation Selection drop down list at the bottom of the window The software displays the Start Date Start Time End Date and End Time Manage Holidays Vacations HA Assign Holidays Vacations Door Group Staff Offices DoorName Office 1 Lock Model E Plex 5800 Door Holidays Vacations Holiday Vacation Name Start Date Start Time End Date End Time Independence Day 07 04 2008 12 00AM 07 05 2008 11 59PM Holiday Vacation Selection Start Date Start Time End Date End Time Christmas Holiday i 12724 2008 12 00 AM 12 25 2008 11 59 PM Assign Unassign OK Cancel Click Assign The system displays the holiday or vacation in the Door Holidays Vacations area Manage Holidays Vacations HA Assign Holidays Vacations Door Group Staff Offices Door Name Office 1 Lock Model E Plex 5800 Door Holidays Vacations Holiday Vacation Name Start Date Start Time End Date End Time Christm
161. r access assignment select Manage Specific Access Assignment from the Access Assignment menu or click the Manage Specific Access Assignment button Access Assignment The software displays the Manage Specific Door User Access window Manage Specific Access Assignment HA Manage Specific Door User Access Door Group PERMADI AELE Door Name v As sign Users Close From this window you can manage door access assignment including the following e Assigning access schedules e Assigning users You may optionally enable the Passage Mode option allowing free access to the door without any valid PIN or card Assigning All Users to Locks in Access Assignment Complete the following steps to manage door access assignment e Select a Door Group from the drop down list e Select a Door Name from the drop down list E Plex FIPS 201 System Software User Guide Page 3 74 Click Assign Users The software displays the Define Access User List window Manage Specific Access Assignment Lock Model E Plex 5800 Lock Type Entry Lock rr All User Groups All User Types v Last Name First Name User Group User Type Status Last Name First Name User Group User Type Schs Priv TATA Jackie Henson Global Manager it Pickens LaToya Admin Office Staff Access Davis Tiffany Global Manager E Eg Thomas Jawa Global Manager a ii E lt E Master User User is saved in database W Sched
162. r logs For information describing any Failurefs that occurred during setup Click Finish to exit the installation wizard Summary Log To minimize the server surface area of SQL Server 2005 some features and services are disabled by default for new installations To configure the surface area of SQL Server use the Surface Area Configuration tool Configuring and Managing SQL Server Express Forimproved manageability and security SQL Server 2005 provides more control over the SQL Server surface area on your system To minimize the surface area the following default configurations have been applied to your instance of SQL server TCPIIP connections are disabled hilawsad Dinan ia dianklad Mi Finish e Click Finish E Plex FIPS 201 System Software User Guide Page 6 13 Microsoft Side By Side Libraries e The system displays the Microsoft Side By Side Libraries InstallShield Wizard Microsoft Side By Side Libraries InstallShield Wizard Welcome to the InstallShield Wizard for Microsoft Side By Side Libraries The InstallShield Wizard will install Microsoft Side By Side Libraries on your computer To continue click Next Ready to Install the Program The wizard is ready to begin installation Click Install to begin the installation IF you want to review or change any of your installation settings click Back Click Cancel to exit the wizard Install Cancel e Click Install When installation is
163. reen e The system displays the Enter Registration Information screen Enter Registration Information Enter Serial number Enter Registration key e Complete the Enter Serial number and Enter Registration key fields e Click OK The system congratulates you for successful registration with Kaba E Plex FIPS Congratulations you have successfully registered this product E Plex FIPS 201 System Software User Guide Page 6 13 e Click OK and proceed to the final part of the installation of the E Plex FIPS 201 software Client Software amp M Unit PDA as described in the following section Software Installation E Plex FIPS 201 System Software User Guide Page 6 14 Install Option 1 Standalone Express Installation F IPS General Express Install on Stand alone PC If you are installing the E Plex FIPS General version of the software on a single Standalone PC please choose Standalone Express Install option The software will get installed with minimal user interaction The following are a few sample Express install screen shots J es E Plex General FIPS Sof E Plex General FIPS Software for Standalone J E Plex General FIPS Software for Network J InstallShield Wizard InstallShield Wizard 44 E Plex SoftRequirements requires that the following requirements be installed on your N E Plex Softh equirements requires that the following requirements be installed on your 2
164. rmation Last Name Thomas First Name Jawa User Group Global Ni User Type Manager v User PIN 6044 yee pe None sagnet Standard User DESFire FIPS 2 01 Valid From 01 22 2008 11 36AM 2 Valid To 01 22 2009 11 36AM _ FIPS 2 01 Card Enrollment Enroll FIPS 2 01 User Card Last FIPS 2 01 Card Enrollment Enrollment Date Assurance Level Issuance Date Card ID Expiration Date Sequence Number Create Maintenance Card User Status wv e Select the Valid From date from the drop down list Select the Valid From time using the up and down arrows Select the Valid To date from the drop down list Select the Valid To time using the up and down arrows Click Enroll FIPS 2 01 User Card The software displays the FIPS 2 01 Card Enrollment Validation Steps window FIPS 2 01 Card Enrollment tT FIPS 2 01 Card Enrollment Validation Steps Insert the FIPS 2 01 card inside the front of the Smart Card enroller slot with the gold plated smart chip inserted into the card slot to make contact with the enroller contact reader inside as shown below E Plex FIPS 201 System Software User Guide Page 3 63 Leave the FIPS 2 01 card in the enroller in the slot until enrollment is complete During the validation steps the system will display the FIPS Card PIN Authentication window to verify th
165. ryday The format of the saved files are as follows oy Fie Edit View Favorites Tools Help aw Q Beck z gt Ba pp Search Folders Hab Address C Program Files Microsoft SQL Serveri MSSQL 1 MSSQL Backup v EJ co Al Name i i Type Date Modified ic File and Folder Tasks EPLEXEnterprise bak_Friday BAK_FRIDAY File 7IS2009 10 41 AM EPLEXEnterprise bak_Monday BAK MONDAY File Fl6f2009 10 41 AM EPLEXEnterprise bak Saturday BAK SATURDAY File Fi4f2009 10 42 AM c Make a new Folder E Publish this Folder to E EPLExEnterprise bak_ Sunday BAK SUNDAY File F S 2009 10 41 AM the Web ret chara the Faldce E EPLEMEnterprise bak_ Thursday BAK THURSDAY File Flzf2009 10 41 AM EPLESEnterprise bak_Tuesday BAK TUESDAY File Fi7f2009 10 41 AM EPLE Enterprise bak Wednesday BAK WEDNESDAY Fie 7 1 2009 10 41 4M Other Places Py MSS Purge Transactions e Inthis section you can specify how long to keep the record of all operators activities at the Host PC s E Plex FIPS Database This information is viewable via the System Activity Log as described in the section called Viewing Printing Exporting Reports e You can choose either to Keep the PC activity logged transactions for the number of months you specify or to Never Purge them e Make your selection and click Apply Database Management X Tools Z Database Management Backup File Restore File Bcakup e ple
166. s assigned to this access group as shown at the top left panel e Repeat the process by selecting other doors one at a time to assign them in this access group If a door has more than access schedule assigned to it you can select this door again and select a different schedule s for this door and assign it again to the access group AG TechStaff Manage Assigned Users Door Group Name Door Name Schedule Name Sun Mon Tue Wed Thu Fr Sat Start End Credential Passage Mode I Unassign Selected Access Schedules Total Access Schedules 1 All Door Groups Assign Selected Access Schedules J Modify Door Schedules mr Add New Door Door Name oO Schedule Name Sun Mon Tue Wed Thu Fri Sat Start End Credential ea ge san O Aways D ae i le ee ee 12 00am 12 00AM Card None JawaDemo E5800Cyl E5800 ResdtLock LabxvZ e lf you want to un assign a previously assigned door or doors from this access group simply check against that box or boxes and click on Unassign selected Access Schedules now these doors will be removed from this access group E Plex FIPS 201 System Software User Guide Page 3 45 4AG TexhS taff Manage Assigned Users _ Door Group Name Door Name Schedule Name Sun Mon Tue Wed Thu Fri Sat Start EA rA rAr ES C DG Technical Labxyz Always ew e 12 00 AN e Finally click Save and all the doors with their access schedules and cre
167. s from this door group Only after this will you be able to delete this door group from the database e From the Manage Door Groups window select a door group to delete Click Delete The software prompts you for confirmation 2 E Plex FIPS 201 Access Control Software Are you sure you want to delete this Door Group E Plex FIPS 201 System Software User Guide Page 3 29 Click Yes The software displays the updated Manage Door Groups window Manage Door Groups Manage Door Groups Door Group Manager Staff Offices Tiffany Davis Storage Closets Henson Jackie Edit Delete Single Manager Assignment to all Door Groups Assign Single Manager User Click Close to exit the Manage Door Groups window Note You should update your locks to reflect modified door groups by programming the M Unit and uploading the information to the locks For more information refer to M Unit Handheld in Chapter 5 Programming and Auditing Locks E Plex FIPS 201 System Software User Guide Page 3 30 Managing Doors In the E Plex FIPS 201 software doors are literally the physical doors at your site where E Plex 5800 PIN amp Smart Card locks are installed You can define new doors edit parameters of doors and delete existing doors from the database The E Plex FIPS 201 software allows you to manage doors through the Manage Doors menu Note You can define unlimited number of doors in the database To manage doors selec
168. s use four AA alkaline batteries A variety of factors will determine how long your lock operates on a set of batteries including the following e Shelf life of the batteries e Number of openings per day e Environmental conditions e Battery brand e Access credential settings Smart Card only or both PIN amp Smart Card e Lock parameter settings In ideal conditions you can expect up to 60 000 openings using four AA alkaline batteries A flash of both red and green LEDs identifies a low battery condition when a valid credential Smart Card or PIN and Smart Card is presented and the lock will still open The lock will keep operating for another thousand or so openings but the batteries must be replaced as soon as possible when you observe a low battery condition Battery Pack Replacement Always replace all four batteries in the pack with good quality AA alkaline batteries If you replace the batteries within two to three minutes the lock will continue working as before granting and denying access to users based on their access schedules If the battery replacement time is longer than two to three minutes you may lose the current date and time of the lock even though all user and lock configuration parameter information will not be lost When the lock loses its date time all of your access schedule times will be out of sync thus denying access to valid users In this case you MUST update the lock s date time with t
169. schedule in the Manage Schedules window Manage Schedules Schedule Name Sun Mon Tue Wed Thu i Sat Start End Add v v Sd v Dd wo 1200M 1200 AM dit wx ax X X Wo 1200AM 11 00PM ee Delete Day is assigned to Access Schedule Se Dayis NOT assigned to Access Schedule Close Click Close to exit the Manage Schedules window Note Once added the access schedule becomes available in the Schedule drop down list throughout the E Plex FIPS 201 software Editing a Schedule Complete the following steps to edit access schedules e From the Manage Schedules window click an access schedule to edit Click Edit The software displays the Edit Schedule window Manage Schedules a Edit Schedule Schedule Name Schedule Days Selection Week Only Unselect All O Weekend Only Any Days Sun Mon Tue Wed Thu Fri Sat O O O d Schedule Time Settings Start Time End Time 08 00AM 05 00PM Cancel In the Schedule Name field change the name of the schedule if necessary Select the appropriate check box for the day s you want to change in the schedule These are the days that users will have access to a door In the Start Time field change the start time if necessary This is the time that access begins each day E Plex FIPS 201 System Software User Guide Page 3 15 In the End Time field change the end time if necessary This is the time that access ends each day Click Save The software displays a
170. scheduled based access with optional privileges 3 years max expiry o Door Group Manager One and only one DG Manager in all locks belonging to her his Door Group 24 7 lock programming auditing rights and 24 7 access with all privileges ie same functionality as the Global Master except applies to this Door Group locks only e Access scheduled based access with optional privileges 3 years max expiry e Guest scheduled based access with optional privileges 1 year max expiry e Service 24 7 access from first access with various expiry options either one time entry only or 1 96 hours expiry or no expiry e M Unit 24 7 lock programming auditing rights only but no access 3 yr max expiry Refer to the Summary of Pushbutton Programming Commands table in Chapter 4 Operating the E Plex Lock at its Keypad for detailed lock programming amp auditing rights of the global Master Manager s and the M Unit s users Access Assignment l Manage Specific Access Assignment Note The Access Assignment menu is the most important menu everything related to door lt gt users access control info is tied together in this menu From the Access Assignment menu you must select a door that you want to populate with valid users for access For each user select and assign required access schedules from the available door schedules that were previously assigned in the Door configuration menu for this door Also for each user type
171. seeeeceeseeeeceseeeseeeseeeseeeseeeeeonssessoonseessoonseees 3 1 Emoe MEM aone a E E a R es eteansendagesacacdeus ones 3 2 Chanding Systems Seting S sages caserienctadenees soca tecsonanswsscadenens E TEE N a a E 3 2 Varna oni OC ONS so aae E E E E E 3 3 CIS TING AI OD Cl AON EEE A E A A 3 5 Changing an Operator PASSWOIKC cccccccceeeccceeeeeseeeseeeceeeeeseaseesseceeeeeesaaaseseeesessuaesseeeeeeeessaaaaeeeeeeeeesaaas 3 7 Reading a DESF ING Card occsccesaccenceesccnsscdennasddadetaed ea enetan aT EEEn aKa E Aan ea aneti 3 8 Database Management Backup amp Restore ccccceeeccceeeeeceeeeeeeceeseeeeseeeeeeeeaeeeseaeeeessaeeeeeneneeeeseegs 3 10 Managing Sch d leS sis csc20sxcecneratqedensecawnedestacddedabandeceducadsedacaxtedsstasdecupsvendsagacexneds Ivecluudasawseseieiosdetvacneves 3 13 PACTUAL CCUG srera nea oad avae cons ste a E EATE E EEA OE E EOE SEEN EGE 3 14 Eding a SCC ONS sessenta a EE a a 3 15 PD LST a SS HN Coats cctscizduc estan secre ctratianin E E E E E 3 16 Managing Holidays Vacations wornsisnavsunsinsiaudetesventasondaudeiaaninndasvsoeniaiaatuindanansaasalsuannad hasinielebadinaiddvenedddvsuie 3 18 Adding a Holiday Vacation wijinicindcses snazanecaumcesetseaiaunnestmsainseniedespeaandebestendehaclonasenstioninaaindedeigtnansoneenbssnansiecdss 3 19 Editing a Holiday Vacation siscainsdiccsvsessaeanesinsaiesiantananasamsniyaibivedieiysmeaieuiaiininSwnsnenciulauniundaandoaintehnsluuaunersusianenaes 3 20 Deleting a Holiday Va
172. sennags 4 10 5 Programming and Auditing LOCKS cssseceeeseeeeeeseeseeseeseeseeeeenseeseenseseessesconseeeeeseesoensessonss 5 1 Portable PC M Unit with Kaba s IrDA Kit 0 0 0 0 ccc ccccccceeeeeeeeeeeeeeeeceeeeeceeecseeeeeeeeeseaeeeeeesseaseeeeessegseeeeeeas 5 2 PC M Unit Software Installation 2 0 0 cccccccccccccccessseeeceeeeeeeeeeeseeeeeeeeeeeeseeeeeeeesseeeseeeeeeeesssaeeeeeeseeeeessaaaaaess 5 3 M Unit User DefinitiON cisco unanini a ia a 5 6 Manual PC M Unit Sync Data Transfer with a Separate PC M Unit via a USB flash drive 5 8 Automatic PC M Unit Sync Data Transfer within the same Integrated Laptop PC via flash drive 5 9 E Plex FIPS 201 System Software User Guide Page iii 6 Appendix see os Se wo waren cn a ec ee pee E E E 6 1 Append A FIPS 201 Key DEMONS seccetersssctecenesenctatentunnencindeistsudueseunvenctederdscstteivieibansrstsiedeterewientess 6 1 Appendix B FIPS 201 Software Installation cessssssssssscccccesssssssesensesssssseeeessseeceensessssssnsssnsnssaaganansasees 6 4 Software Registration ANd LICENSING ccssssssssssesseeeeeeeeeeeeeeeeeeeeeeseeeeeeeeeeeeeeeeeeeeeeaaaaaaaeeeeeeeeeeeeeeeneees 6 4 SOWAS ICSI SNAG wins incemeesnmenieuaveecang i a enc E EEE cng E E 6 4 Software REGIStrAtiON sccccecceeceeceeeeeeneaasuseeeeeeeeeeeeeeeeeeesauaaaausceeeeeeeeeeeeeseeeauaaaagecsessseeeeeeeeeeeesess 6 5 Software Installation cccceccscessseececeesc
173. sers in the selected access group in this dialog menu Click on Manage Assigned Users tab on top part of the screen panel E Plex FIPS 201 System Software User Guide Page 3 47 AG TechStaff Manage Assigned Used J Door Group Name Door Name Schedule Name Sun Mon Tue Wed Thu Fr Sat Start End Credential Passage Mode 4 Tee ye ye ye C DG Technical LabxyZ Aways D me A A 1200AM 12 00AM Cad Manual y la e The following window will open up showing the available users in the system that can be selected and assigned to this access group as shown below Last Name First Name User Group User Type Card Type 4 Unassign Selected F asion Saenen AI Use Gc lne ly Last Name First Name User Group User Type Card Type Access Group Name CAC JawaObert ID OneV5 2Dual UG Office Manager FIPS 2 01 Cad Nome _ CAC Mario Gemalto GematoPIV _ UG Technical Access FIPS 2 01 Cad Nome ooo o DG Manage DG Morl UG Office Manager DESFitePermanentCard None _ FRAC Thomas FRAC Jawa Global Master FIPS20 Cad Nome cjiewacac fic UG Office Access FIPS 2 01Card Nome Service User UG Office Service None Nome _ Shelberg Mark UG Office Access FIPS 2 01 Card None o d TWIC Thomas TWICJawa UG Office Manager FIPS 2 01 Card Nome E vade essen ok oe _ e Select required users by checking the boxes against them and click on Assign Selected tab on the left side of the bottom panel
174. soft uses error reports to improve SQL Server functionality and treats all information as confidential e Leave both items above unchecked Click Next The system displays the Ready to Install window ie Microsoft SQL Server 2005 Express Edition Setup Ready to Install Setup is ready to begin installation Setup has enough information to start copying the program files To proceed click Install To change any of your installation settings click Back To exit setup click Cancel The following components will be installed SQL Server Database Services Database Services E Plex FIPS 201 System Software User Guide Page 6 12 e Click Install The system begins the installation E Microsoft SQL Server 2005 Setup Setup Progress The selected components are being configured Product Status MSXML P SQL Setup Support Files Configuring components SOL Native Client SOL YSS Writer SOL Server Database Services m Status E Microsoft SQL Server 2005 Setup Setup Progress The selected components are being configured Product Status Qmsxmre Setup finished soL Setup Support Files Setup finished Q SQL Native Client Setup finished Qsor SS Writer Setup finished CEN Server Database Services Setup finished E Microsoft SQL Server 2005 Setup Completing Microsoft SQL Server 2005 Setup Setup has finished configuration of Microsoft SQL Server 2005 Refer to the setup erro
175. stall the smart card enroller driver software ensure that the Smartcard enroller is connected to your PC via a USB port E Plex General FIPS Sof E Plex General FIPS Software for Standalone J E Plex General FIPS Software for Network J lt Back Exit e When the installation is complete the system displays the InstallShield Wizard Complete window Click Finish when all installation is completed E Plex General FIPS Software InstallShield Wizard InstallShield Wizard Complete The InstallShield Wizard has successfully installed E Plex General FIPS Software Before you can use the program you must restart your computer Yes want to restart my computer now O No will restart my computer later Remove any disks from their drives and then click Finish to complete setup e The Standalone Express install of the software is completed now including the installation of the smartcard enroller driver e Important You must restart the PC after which you should be ready to launch and use the E Plex FIPS 201 software by clicking the E Plex FIPS General or FIPS High Assurance Client icon from your PC desktop ai are E Plex Assurance General FIPS Client FIPS Client or e Now please go back to Chapter 2 Getting Started and resume from the Section Starting the E Plex FIPS 201 Server and Client Software on the PC E Plex FIPS 201 System Software User Guide Page 6 16 In F
176. stem Software User Guide Page 3 73 Managing Access Assignment The specific access assignment function allows you to assign each door one ata time its access granting schedules to users their privileges if any etc Important If you had already assigned doors access to your users either via the Managing Access Group menu dialog or via the Managing User menu dialog but want to give privileges to certain users you have to do this under this menu dialog Also If you have only a handful of doors locks say under 10 and have only say under 50 users in your facility it may be more convenient to assign door access to users in this menu dialog rather than in the Access Group menu as described earlier From this menu you must select a door and assign the users who should have access to this door Also for each user you must select and assign one or more available schedules that were already assigned to this door earlier For each user you can also optionally assign any one or more of the following three privileges e Override holidays vacations e Override deadbolt privacy e First user passage entry Finally you can optionally enable the Passage Mode function by default it is disabled so that the lock can be put in free passage mode if desired later After this process the lock configuration data with its users are set up and prepared to be synchronized to the M Unit and then uploaded to the door lock To manage doo
177. t Manage Doors from the Door menu or click the Manage Doors button Doors Manage Doors The system alerts you if there are no door groups in the system E Plex FIPS 201 Access Control Software No Door was found in the system Click OK The software displays the Manage Doors window Manage Doors Manage Doors Door Name Door Group Lock Model Lock Function Last Synched Total Users Add Edit Delete M Unit Synched ee M Unit Sync Required Close Adding a Door Complete the following steps to add a door e From the Manage Doors window click Add The software displays the Add Door E Plex FIPS 201 System Software User Guide Page 3 31 window Manage Door Profile Door Group Remaster mete v Door Name Lock Model Assurance Level Holidays acations Use Door Group Default Holidays Override Holidays for this door Holidays acations Lock Parameters Lock Function Types Unlock Time secs lt gt 14 gt Buzzer Volume 0 Off 3 Loud J Possible Lock Configurations Ja Tamper Count of tries Cylindrical without privacy Exit Trim Mortise without deadbolt Q2 mm lt gt lt gt Tamper Shut Time secs Manual Passage Duration hrs lt gt g Passage Mode Enabled Remote Unlock Enabled O Cancel Select a Door Group from the drop down list Note Depending on the door group nam
178. t Name First Name User Group User Type Card Type Davis Tiffany Global Manager DESFire Permanent Card ad o Jackie Henson Global Manager DESFire Permanent Card Samuels Shane Admin Office Staff Access None TF MasterUser C Door Group Manager 2 Vaid User E Invalid User Standard User DESFire Card If you select Standard User DESFire from the Card Type Assigned area complete the following steps You will encode and assign a DESFire card to the user during this process Manage User Profile 3 Pickens oup Admin Office Staff a v UserPIN 6843 User Status E Plex FIPS 201 System Software User Guide Page 3 60 e Select the Valid From date from the drop down list Select the Valid From time using the up and down arrows Select the Valid To date from the drop down list Note This for now is limited to 3 years max or the expiry date encoded on the FIPS card for this user whichever date expires first Select the Valid To time using the up and down arrows Click Create Card The Smart Card enroller prompts you to present a card Present a blank DESFire card to the Smart Card enroller as shown When encoding is complete the software confirms that the permanent card was created e J E Plex FIPS 201 Access Control Software Permanent User card creation successfull If encoding is not successful the system displays a failure message y J E Plex FIPS 201 Access Control Softw
179. t digits Disabled Disabled Page 4 4 Initial Programming of the Lock Once the required lock function is set the lock must be programmed before daily use This section provides information about the initial programming of the lock including the following Entering Pushbutton Programming Mode Modifying the Master User PIN Additional Pushbutton Keypad Commands Resetting the Lock Summary of Pushbutton Programming Commands Visual Feedback Message Definitions Entering Pushbutton Programming Mode This section describes the sequence of tasks to program the lock at the keypad in Pushbutton Programming Mode Put the lock in Pushbutton Programming Mode by pressing Master or Manager Credential Use the Summary of Pushbutton Programming Commands table on page 8 of this Chapter to enter the three digit command sequence command type function code followed by Enter the appropriate numbers as required Press to end Pushbutton Programming Mode Once the lock is in Pushbutton Programming Mode multiple command sequences can be entered without having to repeat the Credential However if there is no activity for 5 seconds at the keypad the lock will automatically exit from Pushbutton Programming Mode Example If the Master or Manager User presents her his credential the door will open If he or she enters Credential the lock will enter into the Pushbutton Programming Mode and wait for the next part of the comman
180. t notice Trademarks The following items are trademarks or registered trademarks of Kaba Ilco in the United States and or other countries e E Plex e LectroBolt Technical Support Please call Kaba Access Control s Technical Support phone line at 800 849 8324 or 336 725 1331 between 8 00 a m and 5 00 p m Monday through Friday except holidays Eastern Standard Time KALA Kaba Access Control 2941 Indiana Avenue Winston Salem NC 27105 Phone 800 849 8324 or 336 725 1331 Fax 800 346 9640 or 336 725 3269 www kabaaccess com Document PKG 3282 0111 2011 Kaba E Plex FIPS 201 System Software User GuidePage I Page i Table of Contents 1 AbDou t ING E PleXx B20 cise sctecaten aai a a Aaa 1 1 System COMPONENTS anisi E A E a 1 2 F PES S00 COCE nee E E eee ee E eee ee ee 1 2 Smart Cards and Smart Card Enroller vicsanisdnsnenavnasannsuasncanndwhaniacuansanwitwnadwentinndauemnionsanetunaseaavanianmdarsiads 1 3 PO and E PlexFIPS 201 OM ANS uee Ea REENE 1 5 Portable PC M Unit and PC M Unit Software 2 00 0 cccecccccccceeeseeeseeeeeeeeseeeeeeeeeeeeesseeeaeeeeeeeeeseeaaaeeeeeeees 1 5 VS eN DEION td atest E dud san E E EE A 1 5 PC System Operator Classifications cccccccecccccccceceeeeeeseeeceeeeeeeeeseceeeeessaeeeseeeeeessseaeaseeeeeeesassaaeaeees 1 6 Door Groups amp DOOS eos cearcete area ee eascnacestigd anesension iiai E E raa 1 6 PICCESS SCC OU SS srneninananio nenna na iea ga a E a i aaa N 1 7 Holida
181. tant The first Operator that you create in the software upon installation automatically becomes a Level 1 highest authority Operator Only Level 1 Operators can add or delete other Level 2 or Level 3 lowest authority Operators See Chapter 1 for a detailed description of the E Plex 5800 FIPS System Operator Classifications Complete the following steps to manage Operators e From the System Setup menu select Manage Operators The software displays the Manage Operators window E Plex FIPS 201 System Software User Guide Page 3 3 Manage Operators User User Group User User Type Operator Login Operator Level Password Verify Password Manage Operators All User Groups Griesbeck Daniel daniel O C Select a user to define as an operator users can be filtered by user group The password must be at least six but no more than ten characters long Only level 2 and level 3 operators can be deleted Level 2 and level 3 only can change their own password User Area e From the User Group drop down list select Global or All User Groups To add edit or delete a user group refer to Managing User Groups in this chapter e From the User drop down list select the appropriate user whom you want to be an Operator of the software also To add edit or delete a user click the ellipsis button Refer to Managing Users in this chapter E Plex FIPS 201
182. te from the database e From the Manage Users window select a user to delete e Click Delete The software prompts you for confirmation p 2 E Plex FIPS 201 Access Control Software Are you sure you want to delete Samuels Shane Click Yes The software displays the updated Manage Users window E Plex FIPS 201 System Software User Guide Page 3 69 Manage Users Manage Users Last Name First Name User Group User Type Card Type w Davis Tiffany Global Manager DESFire Permanent Card Jackie Henson Global Manager DESFire Permanent Card Pickens LaToya Admin Office Staff Access DESFire Permanent Card Thomas Jawa Global Manager FIPS 2 01 Card E MasterUser __ Door Group Manager Valid User Se Invalid User Close Note You should update your locks to reflect any unassigned and deleted users by transferring the deleted user s info to the M Unit and uploading programming this information to the locks For more information refer to M Unit Handheld in Chapter 5 Programming and Auditing Locks Creating Maintenance Cards Temporary Replacement amp Quick Delete cards Complete the following steps to create a maintenance replacement card for a user Note Maintenance cards can only be DESFire cards e From the Manage Users window select a user who had been assigned either a permanent Standard DESFire card or a permanent FIPS 2 01 card for whom you need to create a maintenance card You can encode
183. the holiday or vacation to delete Click Delete The software prompts for confirmation 2 E Plex FIPS 201 Access Control Software Do you really want to delete this Holiday Vacation Click Yes to confirm The software displays the updated Manage Holidays Vacations window Manage Holidays Vacations Manage Holidays Vacations Holiday acation Name Start Date Start Time End Date End Time Christmas Holiday 12 24 2008 12 00 AM 12 25 2008 11 59 PM Jelete Click Close to exit the Manage Holidays Vacations window E Plex FIPS 201 System Software User Guide Page 3 22 Managing Door Groups Door groups provide a way to manage multiple doors at a site The E Plex FIPS 201 software allows Operators to group doors according to any criteria For example your site may be a small government office campus where you will be installing E Plex 5800 locks in three different buildings In this case you can create three different door groups and name them Admin Bldg Library and Supplies Depot Or you can create many door groups within one building like Staff Offices Common Area and Storage Closets The E Plex FIPS 201 software allows you to manage door groups from the Door Groups menu Important When creating a new door group you will be prompted to assign one and only one Door Group Manager for this door group The DG Manager will have complete control over all the locks doors belonging to this door group ie the DG Man
184. thout any user operator intervention Or Custom Network Installation If on the other hand you are going to be using a separate Server PC and one or more Client PCs in a networked environment please check with your IT Network Administrator for software installation rights SQL password details etc Typically all Server related Prerequisites followed by the Server part of the software module and the E Plex SQL database module will need to be installed on the Server PC you will be registering the software with Kaba during the Server part of the installation only once Then on each Client PC you must install all Client related Prerequisites the Client part and the M Unit part of the software as specified in the Software Install Procedure document on the CD You must also connect a Smartcard ID enroller to desired Client PC s to enroll your facility s user ID badges Software Installation amp Registration Quick Start Tips You can follow these useful tips to quickly set up and use the E Plex FIPS 201 system and the associated E Plex 5800 locks in your facility e Click the E Plex FIPS 201 Client icon on your PC desktop to launch the software 1 Setup the global Master User for the application and if it is you remember your new Level 1 Operator Name and Password for future login sessions Change the default Your Private ID number from 99999999 to a different 8 digit number This Private ID combined with an i
185. tion information From the System Setup menu configure your System Settings The system displays the System Setup window System Settings X g System Settings Time Format User PIN Length 405060708 12 Hour Time AM PM 24 Hour Time Site PrivatelD 11111111 Default Path for Reports C Program Files KABASE Plex General FIPS MainClient Reports Reader Configuration FIPS Reader Name SCM Microsystems Inc SDIO10 Smart Card Reader 0 a DESFire Reader Name SCM Microsystems Inc SDI010 Contactless Reader Cv e Edit the following data areas as desired e Time Format and Daylight Savings Time DST Select the display of Time Format for your system The default is 12 Hour Time a m and p m display and the other option is 24 Hour Time display Note The E Plex FIPS 201 software uses the start and end dates times of the DST setup if enabled directly from your PC s Operating System You must also ensure that the DST setup and the current date amp time are setup correctly on your M Unit PDA The M Unit automatically sends this information to the locks every time the lock is programmed so that the DST switching in the lock will occur automatically in Fall and Spring e Site Private ID E Plex FIPS 201 System Software User Guide Page 3 2 Once set and used this value which is part of the database and PC lt gt lock communications encryption decryption key for your entire system should
186. to open locks Each lock may have up to 3 000 Access Users which are permanent However their credential do expire in the system and the locks in 3 years from the time of enrollment or earlier if the expiry encoded on the card FIPS 201 or DESFire is earlier than 3 years Guest A Guest only has the ability to open locks just like an Access user except the maximum expiry for a Guest user is one year Each lock may have up to 3 000 Guest Users which are temporary and last between 1 day and 365 days 1 year M Unit User An M Unit User does not have access to open any locks The M Unit User can only perform maintenance on locks using the M Unit handheld as well as any lock programming and auditing Each lock may have up to 3 000 M Unit Users The credential for an M Unit user is card only no PIN associated Service User A Service User has authorization any time of day to a lock for a specified period of time gt either one time entry one shot only or from 1 hour to E Plex FIPS 201 System Software User Guide Page 1 8 96 hours access only from the first time he or she presents the credential or with no expiry access The Service user s credential is either card only or PIN only but no PIN followed by card access The Service user has access anytime irrespective of the door s access schedule setup and or the door s credential requirement setup PIN card or PIN amp card Note All of the user types incl
187. ty C Industrial Manufacturing Cl Government Military C Hospital Healthcare Cl Other specify Note Information submitted is kept private and used only by Kaba Access Control for informational purposes e When you have completed the registration click Submit gt SUBMIT gt CLEAR Click on SUBMIT only once and wait It may take up to 30 seconds for the system to process and validate your request Copyright 2009 Kaba Ilco Corp The system will automatically generate your unique 8 digit Registration Activation Key based on your input Your Registration Key 37200992 Please write dova your registration key number and close this page Follow the software install screen prompts to finalize your installation e Proceed to step 15 E Plex FIPS 201 System Software User Guide Page 6 11 Lost Registration Activation Key e If you lost your registration key select the second Red option The system displays the Registration Activation Key Retrieval screen E Plex FIPS 201 Software Registration Registration Activation Key Retrieval If you lost your registration activation key the system can send it to the original email account that was used to register your product If you do not remember the email address you used when you registered your product please call Kaba s technical support phone line at 1 800 849 8324 or 1 336 725 1331 between 8 00am and 5 00pm monday through
188. types of users can perform various operations at the lock Master User The Master User is the top level user who performs the initial lock setup activities and can program all lock functions There is only one global Master User per facility all door groups and all doors whose credential will be accepted in all locks in the entire facility The Master User is the only user who has Always access to any lock and has all the access privileges all the time and cannot be locked out The global Master user s credential Card only or PIN amp Card acts just like an emergency mechanical override key The Master User s PIN is always eight digits in length In E Plex 5800 locks Manager amp Door Group DG Manager Users A regular Manager User is a second tier administrator who can program most of the lock functions as the Master user and these are specified in the Error Reference source not found table in Chapter 4 Error Reference source not found at its Keypad Each lock can have up to 3 000 Manager Users The Door Group DG Manager on the other hand is just like the global Master user except that her his credential is always valid without any restrictions only in the doors belonging to her his Door Group All locks doors belonging to a Door Group must contain one and only one Door Group DG Manager though you can have multiple regular Manager users in the same door group Access User An Access User has only the ability
189. uding Manager Users can have one or all of the following three privileges e Override holidays vacations e Override deadbolt privacy e First entry passage authorization The E Plex FIPS 201 Software Package There are three 3 software packages kits available from Kaba to be used with the E Plex FIPS 201 system as described below 1 Kit 1 E Plex FIPS 201 Software CD Kit This kit includes the following items a E Plex FIPS 201 General or High Assurance Software installation CD b E Plex FIPS 201 Getting Started Sheet c E Plex FIPS 201 Software User Guide this guide in electronic form on the CD 2 Kit 2 E Plex FIPS 201 Implementation Kit e This package combines the E Plex FIPS 201 Software CD kit Kit 1 above and the E Plex PC M Unit Communications kit Kit 3 below e Kit 2 is the only kit you will need to run the FIPS 201 software system in your facility You need this whether your PC M Unit part of software module runs on the same laptop PC where the main FIPS applications software is also running or that you are planning to use a dedicated separate Netbook Mini laptop PC to run the PC M Unit software 3 Kit 3 E Plex PC M Unit Communications Kit e A Laptop or a Netbook PC does not have a built in IrDA interface This kit will provide that interface when connected to the M Unit PC s USB port to talk to the lock via IrDa communications This kit includes the following items e AUSB Flash drive pre lo
190. ule or Privilege is assigned __ Door Group Manager L User is not saved in database Se Schedule or Privilege is not assigned Total Users assigned to this Door 2 Set User Details tee Note Once you select the door group and the door name the software displays the Lock Model and Lock Type for that door In the Assign area select from the All User Groups and All User Types drop down lists to filter search data Click the appropriate user name in the list to select it Click the right arrow E Plex FIPS 201 System Software User Guide Page 3 75 The system adds the to the main user list on the right side of the window Manage Specific Access Assignment Lock Model E Plex 5800 Lock Type Entry Lock All User Groups All User Types i Last Name First Name User Group User Type Status Last Name Pickens LaToya Admin Office Staff Access im amp Thomas Jawa Global Manager CA Davis First Name User Group User Type Tiffany Global Manager 17 Jackie Henson Global Manager _ Master User User is saved in database Schedule or Privilege is assigned __ Door Group Manager C Useris not saved in database Se Schedule or Privilege is not assigned Total Users assigned to this Door 2 l Set User Details Click Save The system alerts you if the user name does not have an access schedule assigned to it P E Plex FIPS 201 Access Control Software One or more users do not have an Access Schedule assigned
191. up file to an external drive a USB drive or a network drive etc Important It is highly recommended that you perform a periodic back up of your database Backing up the Database Complete the following steps to back up the database e From the System Setup menu select Database Management The software displays the Database Management window Database Management x Tools F f Database Management Backup Folder File e plexdatabase X Restore Fie Rotating Backup Over 7 Days Backup Time 9 10AM a Purge Transactions Keep months Never Purge Apply v To activate the new settings for rotating backup and purge transactions you need to restart EPLEX Server E Plex FIPS 201 System Software User Guide Page 3 10 e Enter a file name in the File field of the Backup area e Click the Backup button to back up the database The database will be backed up automatically in the secure Micro Soft SQL system directory by default with date time stamp for later retrieval if need be When the backup is complete the system displays a message in the status bar of the Database Management window plexdatabase Jan 22 2008 9 50 Restoring the Database Complete the following steps to restore the database e Click the ellipsis button in the Restore area e The system displays the Select Restore File window Choose the database that you want to restore and click Open The system displays the file location
192. user to define as an operator users can be filtered by user group The password must be at least six but no more than ten characters long Only level 2 and level 3 operators can be deleted Level 2 and level 3 only can change their own password Select an Operator by clicking the ellipsis button in the Operator area of the window Lead Select the Operator from the Select Operator window and click OK Select Operator Select Operator User Name User Type Griesbeck Daniel Master Jackie Henson Manager Davis Tiffany Manager e Click Delete The software prompts you for confirmation E Plex FIPS 201 Access Control Software Are you sure you want to delete this operator e Click Yes The system deletes the operator E Plex FIPS 201 System Software User Guide Page 3 6 From the Manage Operators window click Close to exit the window The system prompts you to save your changes 2 E Plex FIPS 201 Access Control Software Some data has changed Do you want to save the changes before closing e Click Yes to save changes and exit the window Click No to exit the window without saving changes Changing an Operator Password The Change Password option allows you to change an Operator s password Complete the following steps to change an Operator s password From the System Setup menu select Manage Operators The software displays the Manage Operators window Manage Operators Manage Operators User
193. ware 12 Create your Users one user at a time assigning each user with various user parameters such as a PIN user type etc You will also need to enroll the user s ID card whether it is a FIPS 201 compliant card or a DESFire card to have access to any E Plex 5800 locks in the facility Important The Service user type does not have to be assigned a card s he can have PIN only access anytime 13 For each user you can also assign an Access Group if you had already created a few access groups earlier Or Access Assignment lf you did not create any Access Groups in the system you can assign the user to a door for access under the Access Assignment menu Select a previously created door and assign schedules and access credential required PIN only card only or PIN amp card during each schedule holidays vacations and assign users for this door who should have access Additionally assign schedules to each user in this door including any user Privileges if desired 14 Repeat Steps 12 through 13 above for other users created in the system for door s access go Important Ensure that the actual E Plex 5800 lock on the door to be programmed is properly installed and initialized and its Lock Function is configured for Privacy and or Residence locks only according to the Lock Function Setup Instructions that came with the lock in the box 15 Transfer download your locks lt gt users configuration data from the PC
194. ware no OCSP communication or o E Plex FIPS HIGH ASSURANCE Software communicates in real time to an OCSP server via internet to authenticate the FIPS compliant card during card enrollment E Plex FIPS 201 System Software User Guide Page 1 1 System Components The E Plex FIPS 201 contains the following system components E Plex 5800 FIP 201 compliant lock s Smartcards FIPS 201 compliant or DESFire and Smart Card enroller Microsoft OS compatible PC or Laptop running the E Plex FIPS 201 Host PC applications software FIPS General or the FIPS High Assurance version A Microsoft OS compatible Netbook PC portable or the same laptop as above to program and audit locks using the FIPS 201 PC M Unit part of the software E Plex 5800 Lock The E Plex 5800 door lock is a stand alone battery operated electronic lock that grants access to authorized users An E Plex 5800 lock will grant access if a user presents a valid Smartcard to the Smartcard reader on the lock front housing or enters a valid PIN followed by an associated valid Smartcard The lock can store up to 3 000 unique users and store the last 30 000 transactions audits in the lock memory There is only one global Master User per lock Lock Modes You can access the E Plex 5800 lock by four modes Default Factory Mode The lock is shipped from the factory in Default Factory Mode with a default factory Master PIN In the factory mode the lock can only
195. will guide you through the steps required to install Crystal Reports for NET Framework 2 0 x86 on your computer WARNING This computer program is protected by copyright law and international treaties Unauthorized duplication or distribution of this program or any portion of it may result in severe civil or criminal penalties and will be prosecuted to the maximum extent possible under the law Cancel E Plex FIPS 201 System Software User Guide Page 6 18 e Click Next The system displays the License Agreement window i Crystal Reports for NET Framework 2 0 x86 License Agreement Please take a moment to read the license agreement now If you accept the terms below click Agree then Next Otherwise click Cancel CRYSTAL REPORTS FOR MICROSOFT VISUAL STUDIO 2005 LICENSE AGREEMENT IMP ORTANT READ CAREFULLY THIS IS A LEGAL AGREEMENT BETWEEN YOU AND BUSINESS OBJECTS SOFTWARE LIMITED BUSINESS OBJECTS FOR THE BUSINESS OBJECTS SOFTWARE PRODUCT IDENTIFIED ABOVE WHICH MAY INCLUDE COMPUTER SOFTWARE ASSOCIATED MEDIA PRINTED MATERIALS AND ONLINE OR ELECTRONIC DOCUMENTATION SOFTWARE BEFORE CONTINUING WITH THE INSTALLATION OF THE SOFTWARE YOU MUST READ ACKNOWLEDGE AND ACCEPT THE TERMS AND CONDITIONS OF THE SOFTWARE LICENSE AGREEMENT THAT FOLLOWS AGREEMENT IF YOU DO NOT ACCEPT THE TERMS AND CONDITIONS OF THE AGREEMENT YOU MAY RETURN WITHIN THIRTY 30 DAYS OF PURCHASE THE SOFTWARE TO THE PLACE YOU OBTAI
196. x FIPS 201 System Software User Guide Page 6 7 e The system displays a confirmation when installation is complete W Microsoft SQL Server 2005 Setup Installing Prerequisites Installs software components required prior to installing SQL Server SOL Server Component Update will install the following components required for SQL Server Setup vY Microsoft SOL Native Client vY Microsoft SOL Server 2005 Setup Support Files The required components were installed successfully Microsoft SQL Server 2005 Setup System Configuration Check SQL Server Setup is scanning your computer s configuration The system displays the Microsoft SQL Server Installation Wizard ie Microsoft SQL Server 2005 Setup gt Welcome to the Microsoft SQL Server Installation Wizard Setup will help you install modify or remove Microsoft SQL Server To continue click Next a ena asl E Plex FIPS 201 System Software User Guide Page 6 8 e Click Next The system displays the System Configuration Check window ie Microsoft SQL Server 2005 Setup System Configuration Check Wait while the system is checked for potential installation problems 13 Total D Error Success 13 Success 0 Warning Details Action Status Message Minimum Hardware Requirement Success Pending Reboot Requirement Success Default Installation Path Permission Re Success Internet Explorer Requirement Success COM Plus Catalog Requirement Success ASP Net Version
197. xdatabase_Jan 22 2009 9 50 mm Rotating Backup Over 7 Days Backup Time 9104M 5 Purge Transactions Keep months Never Purge Apply fi To activate the new settings for rotating backup and purge transactions you need to restart EPLEX Server E Plex FIPS 201 System Software User Guide Page 3 12 Managing Schedules A schedule is a defined time period during the span of a week during which users are granted access to the door The E Plex FIPS 201 software allows you to globally define schedules Once you have defined schedules you will assign them to doors and to the users who will access those doors The E Plex FIPS 201 software allows you to manage schedules through the Schedules menu Note You can define up to 16 schedules in the lock but any number of them in the software However the Always schedule is standard and is pre defined in the software It cannot be changed or deleted The Always schedule allows 24 7 access to its associated doors and users To manage access schedules select Manage Schedules from the Schedules menu or click the Manage button Schedules _ Manage Schedules The software displays the Manage Schedules window Manage Schedules Manage Schedules Sun Mon Tue Wed Thu Fri Sat Start End Add w w wv v v v wW 1200M 12 00AM Edi ait Delete Day is assigned to Access Schedule Se Day is NOT assigned to Access Schedule Close From this window you can a
198. y VacalliiS sarscgrens sntecasstesttaynanten tainacndlensesivartlon iniedaten wlan snleemimeewaa inieenslenbianemaneidnianss isin EEEE EERS 1 8 A CESS OUDS eee een ee ee ee ee eee E ee 1 8 Lock User Personnel Classifications Departments amp USCIS cccccccssseeeeeeeeeeeeeeseeeeeeeeeeeeeseeeeeeas 1 8 The E Plex FIPS 201 Software Package ccccccsecsccccceccsssssseceeeeeeeeeeseeeeeeeeessueeseeeeeeesseeeseeeeeeeeesssaasageees 1 9 2 Getting Started iowa ies arnt cece etd E i Eea 2 1 oye Redurre nmi i eseina EE E E A 2 2 POS OD REGUN MIEI ar A E saan E E E E E T natesesaes 2 2 Maintenance Unit M Unit REQUIFEMENTS cccccccesseeecceeseeeceeseeeceeuececseaseeessaseeessaeeessenseesseaeeeess 2 2 FIPS Card Enroller REQUINGME IN vsindacbeceverce lt ceesasiecascsnzcowa cuspid cangucdeenceaniesancoddasasaactsdaeceueteaa EE 2 2 Basic System Setup and QUICK Start TipS cjcttssecccitesencacderasosizdievcssdosscstsuen cates esoseusdendecuasacbaddnanceeacetee 2 3 Software Installation amp Registration described in Appendix B J u 1 scccsssscsssesensenensneneneneenenens 2 5 Starting the E Plex FIPS 201 Server and Client Software on the Client PC cccccccsseseeeeeeeeeeeeaes 2 5 Main Menu and TOODA gencnsceacwnanseceinsines selene aa EE aE e ea aa ie Aia aaa 2 7 EUDEN a t PE ENEE E E T T A TE T T A ETE IAT AE ET A E T E E T T 2 7 TOODA sa E E A es 2 7 3 Using the E Plex FIPS 201 Software cccceccces
199. you can optionally assign any one or more of the following three Privileges e Override holidays vacations by default assigned to a Manger user but can be changed E Plex FIPS 201 System Software User Guide Page 2 9 e Override deadbolt e First user passage entry by default assigned to a Manger user but can be changed After this access assignment process the lock configuration data is set up and prepared to be synchronized with the M Unit PDA for lock s uploading Note The PC to M Unit synchronization is always initiated by the M Unit and not by the PC Reports From the Reports menu you can generate many useful reports from the E Plex FIPS 201 system database for viewing and or printing The reports can also be exported in PDF Word Excel etc file formats if required System Setup System Settings Manage Operators Readback DESFire Card Database Management From the System Setup menu you can set up and maintain all important system information manage system Operators and their passwords backup or restore system database etc Note You can also read any DESFire user cards under this menu Help Help A About From the Help menu you can either view print the Software User Guide by clicking on Software User Guide or can view the following info E Plex FIPS 201 Software Version number End user s Site License number Kaba s Technical Support phone numbers and Co
200. your installation settings click Back Click Cancel to exit the wizard E Plex FIPS 201 System Software User Guide Page 6 5 Click Install to install the program ie Microsoft WSE 1 0 Service Pack 1 InstallShield Wizard Installing Microsoft WSE 1 0 Service Pack 1 The program features you selected are being installed Please wait while the InstallShield Wizard installs Microsoft WSE 1 0 Service Pack 1 This may take several minutes Status InstallShield Once the installation is complete select Finish to exit the InstallShield Wizard and return to the previous window ie Microsoft WSE 1 0 Service Pack 1 InstallShield Wizard InstallShield Wizard Completed The InstallShield Wizard has successfully installed Microsoft WSE 1 0 Service Pack 1 Click Finish to exit the wizard Installing or Removing the Microsoft WSE 1 0 Service Pack 1 Runtime components updates the configuration settings for the Microsoft NET Framework It is recommended that you restart ASP NET before using the product Cancel Microsoft SQL Express MS NET Framework 1 1 and 2 0 setup will be done here and the files will be extracted to their directory Extracting Files Extracting File Setup Program Files Microsoft SQL To Directory cha 33f22c562c027eaNc1663261 4c0bf2 HRGERORDREGORRE ERA R esl E Plex FIPS 201 System Software User Guide Page 6 6 e The system displays the Microsoft SQL Server 2005 Setup W M

E-Plex FIPS 201 Software User Guide

Contents

Download Pdf Manuals

Related Search

Related Contents