Synergis Master Controller 2.2 Integration Guide for Assa Abloy Aperio- Enabled Locks This guide supplements the Synergis Master Controller Configuration Guide and explains how to configure Assa Abloy Aperio-enabled locks connected to Synergis Master Controller (SMC). It is assumed that you have read the Synergis Master Controller Configuration Guide and are familiar with the terminology and concepts used in SMC Portal and Security Center. For specific information regarding Aperio-enabled products, refer to the manufacturer s web site. Click here for the most recent version of this document. This section includes the following topics: "Aperio integration overview" on page 2 "Supported Aperio-enabled devices" on page 3 "Supported Aperio features" on page 4 "Supported SMC features" on page 5 "Supported Security Center features" on page 6 "Pairing the Aperio-enabled locks with the hub" on page 8 "Enrolling the Aperio-enabled locks connected to SMC" on page 11 "Configuring doors equipped with an Aperio-enabled lock" on page 14 IMPORTANT Topics appearing in this guide that reference information found on third-party websites were accurate at the time of publication, however, this information is subject to change without prior notice to Genetec. gtap.genetec.com Synergis Master Controller 2.2 Integration Guide for Assa Abloy Aperio-Enabled Locks 1
Aperio integration overview Aperio integration overview Aperio-enabled locks are wireless locks that communicate with an Aperio hub on the 2.4 GHz band. This hub then in turn, communicates with the SMC on an RS-485 channel. The SMC makes all access control decisions. The following diagram shows how SMC communicates with the Aperio-enabled locks. gtap.genetec.com Synergis Master Controller 2.2 Integration Guide for Assa Abloy Aperio-Enabled Locks 2
Supported Aperio-enabled devices Supported Aperio-enabled devices SMC 2.2 supports the following Aperio-enabled devices. Model Description Firmware Certification AH30 P100 iclass v2 Wireless communication hub. Each hub controls up to 8 Aperio locks. Profile Series v.n2 Mortise Lock P100 Wireless Online V2, iclass flavor 6.1.25084 Certified 6.3.25879 Certified P100 prox LF v2 P100 prox low frequency lock 6.1.19843 Certified K100 K100 Cabinet Lock Supported by design KS100 KS100 Server Cabinet Lock Supported by design An interface module is a third party security device that communicates with SMC over IP, USB, or RS-485, and provides input, output, and reader connections to the controller module. In the context of Aperio integration, it is the lock that is viewed as the interface module, although it is the hub that is directly connected to SMC through the RS-485 channel. gtap.genetec.com Synergis Master Controller 2.2 Integration Guide for Assa Abloy Aperio-Enabled Locks 3
Supported Aperio features Supported Aperio features SMC 2.2 supports the following Aperio-enabled interface module features. Legend: (N/A) t applicable. Features Category of interface module Communication protocol Encrypted communication Online operation Dependent mode b Supervised mode c Offline operation Wireless operation Contact SMC on event Scheduled radio contact Battery checks Power fail lock settings (Fail Safe/Fail Secure) Maximum number of credentials (for autonomous decision making) Supported Lock RS-485 a On read 1 to 60 min. N/A Maximum credential length (in bits) 256 Maximum number of interface modules per RS-485 channel 64 d Recommended maximum number of interface modules per SMC unit 64 a. Between SMC and the Aperio wireless communication hub. b. SMC makes all the access control decisions. c. The interface module makes all the access control decisions and reports them in real time to SMC. SMC overrides all decisions to deny access that contradict the access control logic currently in effect in SMC. d. Each channel supports 8 hubs, and each hub supports 8 locks, thus a maximum of 64 locks per channel. If SMC must control 64 locks, you ll get a better performance if you spread them evenly on all four channels, putting 16 locks on each. gtap.genetec.com Synergis Master Controller 2.2 Integration Guide for Assa Abloy Aperio-Enabled Locks 4
Supported SMC features Supported SMC features The Aperio integration supports the following SMC 2.2 features. For a description of these features, see Synergis Master Controller Configuration Guide. Legend: (N/A) t applicable. SMC features (SMC Portal) Hardware configuration Manual enrollment (Add hardware dialog box) Automatic enrollment (Scan button) Property configuration Configuration cloning (Clone button) I/O diagnostics (Live monitoring of inputs, relays, and readers) Interface module firmware display Interface module firmware upgrade Primitive key store Dual-swipe lock toggle Access control behavior Beep on door held open Beep on door forced open Beep on access denied Interlock setting (Single door unlock or Single door open) Reader setting (Card or PIN or Card only) Maximum PIN length in digits Degraded mode settings Lock relay (After door opens or When door closes) Logging options Reader activity Input activity Output activity Access granted reasons Access denied reasons I/O linking Security clearance Supported a b Lock only N/A (4 or 5) c N/A a. Connection parameters only. b. Output relays set in the I/O diagnostics page may take up to one minute to take effect, assuming that the scheduled radio contact is every minute. c. PINs with less than four digits are not accepted. gtap.genetec.com Synergis Master Controller 2.2 Integration Guide for Assa Abloy Aperio-Enabled Locks 5
Supported Security Center features Supported Security Center features The Aperio integration supports the following Security Center access control features. For a description of these features, see Security Center Administrator Guide. Legend: (N/A) t applicable. Security Center features Live event monitoring in Security Desk Module running state (Online, Offline) AC fail Battery fail Deadbolt (Secured, Released) Key override Door open/closed Door forced open Door held open too long Door properties (pushed from Security Center) Standard grant time Extended grant time Entry sensor b Standard access time Extended access time Maintenance mode (ignore all access events) Time to ignore REX after access is granted (in sec.) Unlock on REX (On/Off) Ignore REX events while door is open (On/Off) Time to ignore REX after door closes (in sec.) Enforce minimum security clearance level on areas Automatic credential enrollment using custom card format Unlock schedules Unlock schedule override Maintenance mode Activate/deactivate reader in Security Desk (reader shunting) Antipassback Soft (only logs antipassback violations without denying access) Hard (logs and deny access on antipassback violations) Timeout (automatically forgive violations after a certain time) Strict (antipassback checked on both area entrance and exit) Supported N/A a c Updated at next radio contact gtap.genetec.com Synergis Master Controller 2.2 Integration Guide for Assa Abloy Aperio-Enabled Locks 6
Supported Security Center features Security Center features Interlock Zone management (hardware zone) Supported a. t all Aperio-enabled locks support the key override sensor. You ll need to confirm with the manufacturer the exact sensors that are supported for each model. b. The entry sensor is required to accurately detect entry into an area. In the absence of the entry sensor, the door sensor is used, and the entry is assumed when the door sensor is triggered. c. The option Unlock on request to exit must always to set to off in Config Tool. See "Configuring doors equipped with an Aperio-enabled lock" on page 14. gtap.genetec.com Synergis Master Controller 2.2 Integration Guide for Assa Abloy Aperio-Enabled Locks 7
Pairing the Aperio-enabled locks with the hub Pairing the Aperio-enabled locks with the hub Before you can enroll the Aperio-enabled locks connected to your SMC unit, you must pair the Aperio-enabled locks with the hub using Aperio Programming Application (APA). Before you begin Make sure you have the following: Aperio Online Programming Application Manual. Instruction manual for the installation and use of all Aperio applications. Aperio Programming Application (APA). Main application used to configure the Aperio hub and locks. Both the hub and the locks are configured through the wireless connection. USB dongle. Hardware device that must be plugged to the computer running the APA. TriBee Bootloader. Includes the USB dongle driver. Supported firmwares. See "Supported Aperio-enabled devices" on page 3. A computer for running the APA. A card that is compatible with the lock s reader (used to activate the lock pairing). The credential on the card does not need to be enrolled in Security Center. To pair the Aperio-enabled lock with the hub: 1 Set the EAC address (1 to 15) on the hub using the DIP switches. IMPORTANT Up to 8 hubs can be connected to the same RS-485 channel in daisy-chain, but all of them must use a different EAC address. 2 Power on the hub. 3 Plug the USB dongle to your computer. 4 Install TriBee Bootloader (installs the USB dongle driver). 5 Install Aperio Programming Application (APA). 6 Open APA (see the Aperio Online Programming Application Manual for instructions). 7 Using APA, update the firmware on the hub and the locks (see "Supported Aperio-enabled devices" on page 3). 8 Connect to the hub. gtap.genetec.com Synergis Master Controller 2.2 Integration Guide for Assa Abloy Aperio-Enabled Locks 8
Pairing the Aperio-enabled locks with the hub 9 Enable the Remote open option to enable the use of Security Center unlock schedules. You can ignore the value of Default unlock duration for Wiegand. 10 Set the Status Report Interval to 1 minute (the minimum time) to minimize the time lag for starting and ending the unlock schedule thus, reducing the reaction time of the locks. gtap.genetec.com Synergis Master Controller 2.2 Integration Guide for Assa Abloy Aperio-Enabled Locks 9
Pairing the Aperio-enabled locks with the hub TIP If you do not use unlock schedules, you may consider using a higher value. Using a higher status report interval increases the reaction time, but also helps prolong the battery life. 11 Set the hub to use secure radio communication (Customer Mode). 12 For each wireless lock, do the following: a Present the card at the lock to activate it. b Pair the lock with the hub. The hub automatically assigns an EAC address to the lock. c Write down the EAC address (1 to 127) assigned to the lock. The hub s EAC address is incorporated in the lock s EAC address. To obtain the hub s EAC address from the lock s EAC address, use the following formula: Hub s EAC address = Lock s EAC address modulo 16 or Hub s EAC address = Remainder of Lock s EAC address divided by 16 d Set the lock to use secure radio communication (Customer Mode). After you finish Enroll the locks on SMC (see "Enrolling the Aperio-enabled locks connected to SMC" on page 11). gtap.genetec.com Synergis Master Controller 2.2 Integration Guide for Assa Abloy Aperio-Enabled Locks 10
Enrolling the Aperio-enabled locks connected to SMC Enrolling the Aperio-enabled locks connected to SMC For SMC to communicate with the Aperio-enabled locks connected to it, you must enroll them with SMC Portal. Before you begin Pair the Aperio-enabled locks to the hub (see "Pairing the Aperio-enabled locks with the hub" on page 8). Connect the hub to the SMC RS-485 channel (A, B, C, or D) as follows: Connect the hub s A connector to the "+" of the channel. Connect the hub s B connector to the "-" of the channel. Set the local echo switches for all RS-485 channels to the ON position (see "About the RS- 485 local echo switches" on page 13). To enroll the Aperio-enabled locks connected to SMC: 1 Log on to SMC (see the Synergis Master Controller Configuration Guide). 2 On the Home page, click Hardware. 3 At the bottom of the page, click Add ( ). 4 In the Add hardware dialog box, select Aperio as the Hardware type. 5 Select the Channel (A, B, C, or D). 6 Select Aperio as the Module type. 7 Specify the locks you want to enroll. You can enroll the locks automatically or manually. TIP If you know the EAC addresses of the locks and you only have a few to enroll, it would be faster if you enroll them manually. Do one of the following: To enroll automatically, click Scan ( ). The scan feature finds and enrolls all interface modules supporting the same protocol that are connected to the same channel. If SMC Portal does not find all attached interface modules, try the manual enrollment. To enroll manually, enter the lock s EAC address (1 to 127) written down while pairing the lock to the hub (see "Pairing the Aperio-enabled locks with the hub" on page 8), and click Add ( ). gtap.genetec.com Synergis Master Controller 2.2 Integration Guide for Assa Abloy Aperio-Enabled Locks 11
Enrolling the Aperio-enabled locks connected to SMC Repeat this step as many times as necessary to enroll all locks connected to the same channel. 8 Click Save ( ), then click Refresh ( ). The hardware type and locks you just added appear in the hardware tree. 9 Select a lock to view its properties in the right pane. Both the hub s and the lock s EAC address are indicated. 10 At the bottom of the page, click Save ( ). gtap.genetec.com Synergis Master Controller 2.2 Integration Guide for Assa Abloy Aperio-Enabled Locks 12
Enrolling the Aperio-enabled locks connected to SMC 11 Test your interface module connection and configuration with the I/O diagnostics page (see the Synergis Master Controller Configuration Guide). After you finish Enroll the SMC unit in Security Center (see "Enrolling the SMC unit in Security Center" in the Synergis Master Controller Configuration Guide). Configure the doors equipped with Aperio-enabled locks (see "Configuring doors equipped with an Aperio-enabled lock" on page 14). About the RS-485 local echo switches All RS-485 channels support the local echo feature. The local echo can be turned on or off with the switches SW3 to SW6 found on the Four-port RS-485 module.see the following diagram for the location of those switches on the board. The ON position is when the switch is aligned with its vertical marker (to the right). SW3 and SW4 Local echo switches for channel A and B SW5 and SW6 Local echo switches for channel C and D IMPORTANT For Aperio-enabled interface modules, the local echo switches must always be set to the ON position. gtap.genetec.com Synergis Master Controller 2.2 Integration Guide for Assa Abloy Aperio-Enabled Locks 13
Configuring doors equipped with an Aperio-enabled lock Configuring doors equipped with an Aperio-enabled lock You must make sure that the Unlock on request to exit option is set to off on all doors equipped with an Aperio-enabled lock. Before you begin Enroll the Aperio-enabled locks connected to SMC (see "Enrolling the Aperio-enabled locks connected to SMC" on page 11). Enroll the SMC unit in Security Center (see "Enrolling the SMC unit in Security Center" in the Synergis Master Controller Configuration Guide). What you should know The Aperio-enabled lock uses a mechanical REX. It is not SMC that controls the unlocking of the door when REX is triggered. Enabling this option in the door configuration causes the Door locked and Door unlocked events to be received twice in Security Desk. To configure a door equipped with an Aperio-enabled lock: 1 Connect to Security Center with Config Tool. 2 In the Logical view task, select the door that is equipped with an Aperio-enabled lock. 3 Select the Properties tab, and then set Unlock on request to exit to OFF. 4 Select the Hardware tab, and then select the SMC unit that controls the lock. TIP All peripherals corresponding to the same lock are named with the same prefix Aperio X - Interface n, where X is the channel name (A, B, C, or D), and n is the lock s EAC address. gtap.genetec.com Synergis Master Controller 2.2 Integration Guide for Assa Abloy Aperio-Enabled Locks 14
Configuring doors equipped with an Aperio-enabled lock 5 On the door entry side, assign the reader corresponding to the door. 6 On the door exit side, assign the REX sensor corresponding to the door. 7 Under Additional connections, assign the lock relay to Door lock, and assign the door sensor input to Door sensor. assign the KeyCylinderInside or the KeyCylinderOutside to Manual station, if applicable. 8 If the reader ought to work in Card and PIN mode, make sure you configure a timeout long enough for the cardholder to enter the PIN. gtap.genetec.com Synergis Master Controller 2.2 Integration Guide for Assa Abloy Aperio-Enabled Locks 15
Configuring doors equipped with an Aperio-enabled lock The default access timeout of 5 seconds is not long enough for Aperio-enabled locks. After presenting their credential at the door, the cardholder has to wait until the LED turns green before entering the PIN. That process invariably takes longer than 5 seconds. a Click Reader settings ( ) beside the Reader. b In the Reader settings dialog box, set Use card and PIN to ON. c Set the Access timeout (PIN entry timeout) to the desired duration (we recommend 10 seconds). d Click Save. 9 Click Apply ( ) to save your changes. gtap.genetec.com Synergis Master Controller 2.2 Integration Guide for Assa Abloy Aperio-Enabled Locks 16