GE Security SAPPHIRE Pro Delayed Alarm Reporting and Masking User Guide
Delayed Alarm Reporting and Masking User Guide 12 AV-137621:Revision-B / October 5, 2004
Delayed Alarm Reporting and Masking Delayed Alarm Reporting and Masking The Delayed Alarm Reporting and Masking (DARM) feature functions similar to traditional burglar alarm processing. Operators assign security areas a delay time allowing the cardholder to enter a code at a keypad to disable the alarms before they are reported. This feature can also be used to mask or unmask passwordprotected areas where masking or unmasking operations must take place inside the area. NOTE: For more information about a Secure Compartmentalized Information Facility (SCIF) please see SAPPHIRE Pro SCIF Masking AV-137619. The DARM option supports two modes, Host DARM for Field Panels that are direct-connected to the server and Local DARM for dial-up field panels. Each DARM mode supports two masking or unmasking configurations. 1. Keypad (with or without a reader) used for masking or unmasking with an LCD Display for cardholder prompts. The cardholder gains entrance to the area using a key or an access keypad/reader. The alarms are then disabled from the masking/unmasking Keypad. The keypad displays prompts that guide the cardholder the process and other information about the status of the alarms in the area. 2) Keypad masking or unmasking with a keypad (with or without a reader) that does not have an LCD display for cardholder prompts. The cardholder gains entrance to the area using a key or an access keypad/reader. The alarms are then disabled from a masking/unmasking keypad. The keypad does not display prompts. The cardholder determines the status of the alarms in the area from the flashing LEDs and beeping sounds emanating from the keypad. It is recommended that the masking/unmasking keypad be equipped with an LCD display for cardholder prompts. This provides the advantage of informing the cardholder of the status of the masking/unmasking procedure. When unmasking an area the display can tell the cardholder which alarms are reporting an alarm event so that they can be secured before unmasking is granted. It also can inform the cardholder when a request to mask the area was denied so that the cardholder can reenter the keypad PIN code. With both configurations, the mask/unmasking reader must be equipped with a keypad. NOTE: To authorize a cardholder for keypad masking, select the areas that the cardholder is authorized to mask on the Cards/Employee Masking page. For more information see the SAPPHIRE Pro software User Guide AV-136811. AV-137621:Revision-B / October 5, 2004 13
Delayed Alarm Reporting and Masking User Guide Host DARM Theory of Operation When a cardholder enters a security area that has been configured for DARM, several alarms could be triggered. Because of the DARM configuration, these alarms do not immediately report their alarm state to the SAPPHIRE Pro alarm queue. Instead, a timer begins to count down a specified number of seconds. During this time, the cardholder enters a PIN code into a designated keypad within the security area requesting the server to mask the alarms in the area. If this request is granted before the timer counts down to 0, the alarms will not report to the alarm queue or log them into the history file. All decisions and commands are handled by the server in a Host DARM configuration. Host DARM Keypad Masking with LCD Display. This is the recommended mode of DARM Masking/Unmasking. The following steps are used to mask a security area using a keypad that has an LCD display. 1. The cardholder gains access to the security area by using either a key or an access keypad to unlock the door. If the alarm points are not in the alarm mode, the keypad displays: ** ARMED ** Opening the door will have triggered at least one alarm (typically a Forced Open alarm from the door he just entered). This triggered alarm starts the keypads in the security area to beep and the LEDs on the face of the keypads to flash. 2) The keypad now displays: ENTER PIN CODE 3. a) If the keypad is an IKE (it has an OFF and an ON button), the cardholder enters their card number. As each digit is entered, an asterisk appears in place of each digit entered. * Once the last digit has been entered, the display will show: PRESS OFF The cardholder will press the OFF button to start the processing. b) If the keypad is set for IKE allows Ingress, the cardholder presses the asterisk button and the keypad displays: PRESS OFF.The cardholder then presses the OFF button and the display shows: ACCESSING SYSTEM. The cardholder enters their card number and, if the keypad is in Pin Required mode, their PIN. As each digit is entered, an asterisk appears in place of each digit entered. Once the last digit has been entered the * system processes the request. c) If the keypad is not an IKE, the cardholder enters their card number and their PIN + 20. For example, say the cardholder s PIN is 1234. To request the server to mask the area, the cardholder will enter 1254 into the keypad (1234 + 20 = 1254). As each digit is entered, an asterisk appears in place of each digit entered. When the last digit is entered, the masking command * will be sent to the server for processing. 4) The server determines whether the PIN is authorized to mask the alarms. If the request is denied, the keypad displays: DENIED, TRY AGAIN 5) If the request is granted, the keypad displays: READY and the beeping and flashing stops. If the alarm point timers expire before masking occurs, the alarms are reported to the server, but the request to mask the area will not be effected. 14 AV-137621:Revision-B / October 5, 2004
NOTE: Host DARM Theory of Operation The cardholder prompts at the IKE keypad are only generated if the field panel is equipped with firmware 6.12 or later. Host DARM Keypad Unmasking with LCD Display 1. The cardholder must verify that all alarms are not in alarm state and that the keypad displays READY before attempting to unmask zones. If any alarms are in alarm state in the area, the keypad displays: NOT READY Any reporting alarm will also display in the keypad window. If more than one alarm is in alarm state, use the up and down arrow keys on the keypad to scroll through the alarm names. These alarms must be cleared and the keypad must display READY before the unmasking operation can continue. 2. a) If the keypad is an IKE, the cardholder enters their card number. As each digit is entered, an asterisk appears in place of each digit entered. Once the last digit has been entered, * the display will show: PRESS ON The cardholder will press the ON button to start the processing. b) If the keypad is set for IKE allows Ingress, the cardholder presses the asterisk button and the keypad displays: PRESS OFF.The cardholder then presses the OFF button and the display shows: ACCESSING SYSTEM. The cardholder enters their card number and, if the keypad is in Pin Required mode, their PIN. As each digit is entered, an asterisk appears in place of each digit entered. Once the last digit has been entered the * system processes the request. c) If the keypad is not an IKE, the cardholder enters their card number and their PIN + 10. For example, say the cardholder s PIN is 1234. To request the server to unmask the area, the cardholder will enter 1244 into the keypad (1234 + 10 = 1244). As each digit is entered, an asterisk appears in place of each digit entered. When the last digit is entered, the masking * command will be sent to the server for processing. 3) The server determines whether the User is authorized to mask the alarms. If the request is denied, the keypad displays: DENIED, TRY AGAIN 4) If the request is granted, the keypad displays: ** ARMED ** The ACU sends an ARMED command to the security area s assigned keypad(s) and the keypad(s) start to beep and the LED s blink. The cardholder must now exit the area before the configured delay timer expires. 5) The cardholder leaves the area and secures the door. Once the designated delay time expires, the host unmasks the area and secures the alarms. Host DARM Keypad Masking without LCD Display. This mode of operation is for systems that do not have keypads with LCD displays. Without the displays, the status of the security area is unknown. If there are alarms in an alarm state, the cardholder will not know. This could prevent a cardholder from securing the area before leaving. 1. The cardholder gains access to the security area by using either a key or an access keypad to unlock the door. Opening the door will have triggered at least one alarm (typically a Forced Open alarm from the door he just entered). This triggered alarm starts the keypads in the AV-137621:Revision-B / October 5, 2004 15
Delayed Alarm Reporting and Masking User Guide security area to beep and the LEDs on the face of the keypads to flash. 2) If the keypad is not an IKE, the cardholder enters their card number and their PIN + 20. For example, say the cardholder s PIN is 1234. To request the server to mask the area, the cardholder will enter 1254 into the keypad (1234 + 20 = 1254). When the last digit is entered, the masking command will be sent to the server for processing. 3. a) The server determines whether the PIN is authorized to mask the alarms. If the request is denied, the red LED will flash three times and then glow solid. The delay time will continue to count down. b) If the request is granted, the beeping and flashing stops and the green LED lights up. If the alarm point timers expire before masking occurs, the alarms are reported to the host Alarm Queue. The request to mask the area will continue to be processed. Host DARM Keypad Unmasking without LCD Display. 1. If the keypad is not an IKE, the cardholder enters their card number and their PIN + 10. For example, say the cardholder s PIN is 1234. To request the server to mask the area, the cardholder will enter 1244 into the keypad (1234 + 10 = 1244). When the last digit is entered, the unmasking command will be sent to the server for processing. 2) The server determines whether the PIN is authorized to unmask the alarms. While the authorization request is being processed, the green light will flash. 3. a) If the request is denied, the red light will flash three times and then glow solid. NOTE: A denied request could mean that an alarm is in an alarm/trouble state. The area cannot be secured until the alarm is dealt with. b) If the request is granted, the keypad begins beeping and the LEDs begin flashing. The cardholder exits the security area and secures the exit door. Once the designated delay time expires, the server unmasks the area, secures the alarms and the beeping and flashing stops. Configuring DARM in Sapphire Pro Setting up the DARM configuration without an Entry Reader. This configuration is very similar to the traditional Burglar Alarm system. Access to the security area is not controlled by a reader, but by a mechanical lock which is opened with a key. 1. You must have at least one security area configured for the site. 2) On the Security Area Setup page of SAPPHIRE Pro select the security area that is configured for this area. 16 AV-137621:Revision-B / October 5, 2004
Host DARM Theory of Operation Place a check mark in the box beside Keypad Masking Allowed. The Delay for Securing Area drop-down list will appear. Select the number of seconds that will be allowed before Alarms will be reported to the Server. The range is 0-255. Be certain to allow enough time for the cardholder to enter the area and enter the masking PIN code. 3) Next determine which alarm points in this security area are likely to activate before the security area can be masked. For example, a motion detector Alarms monitoring the area around the interior keypad. On the Alarm Setup page, select the alarm that is to be modified. Enter the required number of seconds in the Alarm Reporting Delay field. Repeat the process for each alarm. 4) On the Reader Option 1 page select the Reader that will be used to mask the security area. Place a checkmark in the Box beside the IKE Reader field. DO NOT place a checkmark in the Box beside IKE Allow Ingress. Setup Host DARM Configuration with an Entry Reader 1. You must have at least one security area configured for the site. 2) On the Security Area Setup page of SAPPHIRE Pro select the security area that is configured for this area. Place a check mark in the box beside Keypad Masking Allowed. The Delay for Securing Area drop-down list will appear. Select the number of seconds that will be allowed before Alarms will be reported to the Server. The range is 0-255. Be certain to AV-137621:Revision-B / October 5, 2004 17
Delayed Alarm Reporting and Masking User Guide allow enough time for the cardholder to enter the area and enter the masking PIN code. 3) Next determine which alarm points in this security area are likely to activate before the security area can be masked. For Example, a Motion Detector Alarm that monitors the area around the interior keypad. On the Alarm Point Setup page select one of the alarms to be modified. Enter the required number of seconds in the Alarm Reporting Delay field on the Alarm Point Setup page for each of these alarms. Repeat the operation for each alarm. 4) On the Reader Option 1 page select the reader that will be used to ENTER the security area. Place a checkmark in the Box beside the IKE Reader field. Place a checkmark in the Box beside IKE Allow Ingress. This will allow the reader to grant access but will not mask the alarms. 5) On the Reader Option 1 page, select the reader that will be used to mask the security area. Place a checkmark in the Box beside the IKE Reader field. DO NOT place a check mark in the Box beside IKE Allow Ingress. 18 AV-137621:Revision-B / October 5, 2004
Local DARM Theory of Operation Local DARM Theory of Operation Local Delayed Alarm Reporting and Masking is used for dialup field panels and other configurations where communication between the host and the panel are not consistent. The principle difference between this and Host DARM is that all decisions regarding the validity of masking/unmasking requests are made at the Field Panel. All alarms and keypads must be connected to the same field panel and only one field panel can be used for the security area. If the delay timer expires, the field panel will connect to the server to report the alarm. Local DARM operates much the same way as Host DARM. However the setup is a little different. Follow the steps listed above to mask and unmask the security area. Setup the Local DARM Keypad Masking or Unmasking. 1. Follow the instructions in the SAPPHIRE Pro User Manual, setup the field panel as a Dial-Up device. This will require configuring a COM port as a Dial-Up Port. Selecting that port on the Field Panel Setup page and completing the required information on the Field Panel Dial-Up page. 2) On the Security Area Setup page select the security area that is configured for this area. Place a check mark in the box beside Keypad Masking Allowed. The Delay for Securing Area drop-down list will appear. Select the number of seconds that will be allowed before Alarms will be reported to the Server. The range is 0-255. Be certain to allow enough time for the cardholder to enter the area and enter the masking PIN code. 3) Next determine which alarm points in this security area are likely to activate before the security area can be masked. For example, a Motion Detector Alarm that monitors the area around the internal keypad. On the Alarm Setup Page select on of the alarms to be modified. Enter the required number of seconds in the Alarm Reporting Delay field on the Alarm Point Setup page for each of these alarms. Repeat the operation for each of the alarms. AV-137621:Revision-B / October 5, 2004 19
Delayed Alarm Reporting and Masking User Guide 4) If the area will be accessed by a reader, on the Reader Option 1 page select the reader that will be used to ENTER the security area. Place a checkmark in the Box beside the IKE Reader field. Place a checkmark in the Box beside IKE Allow Ingress. This will allow the reader to grant access without masking the alarms. 5) On the Reader Option 1 page select the reader that will be used to mask the security area. Place a checkmark in the Box beside the IKE Reader field. DO NOT place a check mark in the Box beside IKE Allow Ingress. NOTE: For this method to work properly all maskable alarm points under DARM control must reside on the same Field Panel (ACU device). 110 AV-137621:Revision-B / October 5, 2004
Local DARM Theory of Operation Mailing Address 791 Park of Commerce Boulevard Suite 100 Boca Raton, Florida 33487 (714)890-0083 AV-137621:Revision-B / October 5, 2004 111
Manual Number: AV-137621