Stanley ID Express Station Setup Guide

Transcription

1 Stanley ID Express Station Setup Guide

2 Copyright Stanley Security Solutions, Inc.. All rights reserved. Information in this document is subject to change without notice and does not represent a commitment on the part of Stanley Security Solutions, Inc. The software described in this document is furnished under a license agreement or nondisclosure agreement. This publication is intended to be an accurate description and set of instructions pertaining to its subject matter. However, as with any publication of this complexity, errors or omissions are possible. Please call your Stanley Security Solutions, Inc distributor at (317) if you see any errors or have any questions. No part of this manual and/or databases may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopying, recording, or information storage and retrieval systems, for any purpose, without the express written permission of Stanley Security Solutions, Inc. This document is distributed as is, without warranty of any kind, either express or implied, respecting the contents of this book, including but not limited to implied warranties for the publication s quality, performance, merchantability, or fitness for any particular purpose. Neither Stanley Security Solutions, Inc, nor its dealers or distributors shall be liable to the user or any other person or entity with respect to any liability, loss, or damage caused or alleged to be caused directly or indirectly by this publication. The Stanley logo and B.A.S.I.S. are registered trademarks of Stanley Security Solutions, Inc. T81188/Rev A ER Mar 2011

3 Contents 1 Introduction Getting technical support 1 1 How to use this guide Overview System overview 2 1 Components and connections 2 2 Setup overview First-time Server Software Installation and Configuration for a B.A.S.I.S. Access Control System Gathering the essential materials and information 3 2 Initial set up of kiosk and desktop station 3 2 Setting up the Server 3 3 Setting up the Server Configuration utility 3 7 i

4 Setting up kiosk and desktop station characteristics First-time Server Software Installation and Configuration for a Wi-Q Access Control System Gathering the essential materials and information 4 1 Initial set up of kiosk and desktop station 4 2 Setting up the Server 4 3 Setting up the Server Configuration utility 4 6 Setting up kiosk and desktop station characteristics Day-to-Day Maintenance Reloading cards 5 1 Checking transaction history 5 2 A Glossary of Terms B Index C Appendix Opening Certificates Snap-In in Microsoft Management Console C 1 Setting up B.A.S.I.S. Alarms C 8 ii

5 C h a p t e r 1 Introduction Thank you for choosing the Stanley ID Express Station, the world s leading self-serve security card encoding system. Use this guide to make sure that you set up your system in the most efficient way and to get the most out of it. Getting technical support Stanley Representatives provide telephone technical support for the Stanley ID Express Station System. Locate the representative nearest you by calling Monday through Friday, or visit us on the web at 1 1

6 Chapter 1: Introduction How to use this guide This manual is intended for use as a training guide and a reference in the setup of Stanley ID Express Station. Chapter 2, Overview This chapter provides an overview of the Stanley ID Express Station System components and an overview of how the first-time set up process will occur. Chapter 3, First-time software installation and configuration for B.A.S.I.S. This chapter provides complete step-by-step instructions in the proper installation and configuration of the Stanley ID Express Station Server software for a B.A.S.I.S. Access Control System. Chapter 4, First-time software installation and configuration for Wi-Q This chapter provides complete step-by-step instructions in the proper installation and configuration of the Stanley ID Express Station Server software for a Wi-Q Access Control System. Chapter 5, Day-to-Day Maintenance This chapter explains the day-to-day tasks necessary to maintain the entire Stanley ID Express Station System Appendix A, Glossary of Terms This appendix provides a list of terms that are specifically used in the Stanley ID Express Station System. Terms that appear in the glossary are set in italic type when they are first used. Appendix B, Index Use the index to find an answer to a specific question. Appendix C, Technical Instructions Use this appendix for technical instructions on Opening Certificates Snap-In in Microsoft Management Console and setting up B.A.S.I.S. Alarms 1 2

7 C h a p t e r 2 Overview System overview This chapter describes the big picture of the Stanley ID Express Station system. The Stanley ID Express Station is for use by universities and other temporary housing institutions to provide self-serve issue of room keys to valid students and other qualified people. The ID Express kiosk or desktop maintains a secure connection to a back-end server running either the B.A.S.I.S. or Wi-Q access control systems. Features include: integration with Lightweight Directory Access protocol (LDAP) directories support for multiple access card formats, including proximity cards encrypted client/server communications 2 1

8 Chapter 2: Overview integration with B.A.S.I.S. alarms notification of alarms and transactions via Components and connections The following diagram shows at a high level how the ID Express system integrates into an access control system. Figure 0 1: System overview diagram ID Express Station Kiosk B.A.S.I.S. or Wi-Q Access Control System B.A.S.I.S. or Wi-Q database ID Express Configuration Setup file ID Express Station Kiosk ID Express Desktop Station etc Setup overview The Stanley ID Express Station System allows card holders, such as college and university students, to receive a temporary encoded card for their assigned room and/or to reencode an existing card. This in turn, frees up administrative personnel and allows uninterrupted access to get room cards and may even speed-up the normally busy room assignment periods that occur during the beginning of semesters. The following are the major components of this system: Stanley ID Express Stations Kiosk Stations Desktop Stations B.A.S.I.S. ET680 or higher Stanley Wi-Q Stanley ID Express Station server software Web server software Magnetic stripe cards B.A.S.I.S. offline locks You will find complete step-by-step instructions on the firsttime configuration of a Stanley ID Express Station System, 2 2

9 Chapter 2: Overview first for a B.A.S.I.S. system; then, in the next chapter, for a Wi- Q system. Listed here are the major steps of that process and cross-references where you can find each corresponding task. For B.A.S.I.S. Access Control Systems Task 1 Task 2 Task 3 Install all server software components. This task begins on page 3-3. Set up the Server Configuration Utility. This task begins on page 3-7. Connect to the B.A.S.I.S. database, see page 3-8. Configure DataConduIT (for B.A.S.I.S. only), see page Configure SMTP, see page Configure LDAP, see page Set up the Identification and Verification fields, see page Define the network connections to the Stanley ID Express Station kiosks and desktop stations, see page Set up all kiosk and desktop station characteristics. This task begins on page Set up kiosk and desktop station graphics, see page Set up kiosk and desktop station behaviors, see page Set up kiosk and desktop station text messages, see page Set up kiosk and desktop station custom workflows, see page Set up kiosk and desktop station notifications, see page Set up kiosks and desktop stations to read cards and encode cards, see page Set up kiosks and desktop stations to encode magnetic stripe cards, see page For Wi-Q. Access Control Systems Task 1 Task 2 Install all server software components. This task begins on page 4-3. Set up the Server Configuration Utility. This task begins on page 4-6. Connect to the Wi-Q database, see page 4-7. Configure SMTP, see page

10 Chapter 2: Overview Configure LDAP, see page Set up the Identification and Verification fields, see page Define the network connections to the Stanley ID Express Station kiosks and desktop stations, see page Task 3 Set up all kiosk and desktop station characteristics. This task begins on page Set up kiosk and desktop station graphics, see page Set up kiosk and desktop station behaviors, see page Set up kiosk and desktop station text messages, see page Set up kiosk and desktop station custom workflows, see page Set up kiosk and desktop station notifications, see page Set up kiosks and desktop stations to read cards and encode cards, see page

11 C h a p t e r 3 First-time Server Software Installation and Configuration for a B.A.S.I.S. Access Control System You are now ready to start setting up your Stanley ID Express Station System for B.A.S.I.S. If you have a Wi-Q Access Control System, STOP and do not use this chapter; see the next section for Wi-Q setup, page 4-1. Note All instructions in this guide relating to a web interface use Microsoft Internet Explorer 7.0. The Internet Explorer 8.0 interface is slightly different, but operates essentially the same. 3 1

12 Chapter 3: First-time Server Software Installation and Configuration for a B.A.S.I.S. Access Control System Gathering the essential materials and information Make sure that you have the following components before you start installing the Stanley ID Express Station System: B.A.S.I.S. software, ET680 or higher installed. Stanley ID Express Station kiosk Optional: Stanley ID Express Station desktop station. See your Stanley Representative for complete details. Magnetic stripe cards 3 2 Before installing the Stanley ID Express Station System, also make sure that you have completed the following checklist. Make sure that you have met with the appropriate Information Technology and Security personnel to determine the following information: Static IP address for each station Gateway and subnet mask for each station Computer name for each station URL for the server Physical location of each Stanley ID Express Station kiosk Make sure you have an Information Technology person available who can set up a server with the Stanley ID Express Station server software. Make sure you have power and network availability for each Stanley ID Express Station kiosk and desktop station. Initial set up of kiosk and desktop station Once the kiosk or desktop station is physically installed with network access and power, you will need to input the server name into the kiosk or desktop station so that it can connect. To add the server name to a kiosk or desktop station 1 Open the cabinet door and connect a keyboard and mouse (optional) to the computer located inside the cabinet. You may need to attach a USB hub to connect both a keyboard and mouse. 2 If not done already, power up the computer. 3 Use the following Username and password: username: parabit [do not use quote marks] password: password [do not use quote marks]

13 Chapter 3: First-time Server Software Installation and Configuration for a B.A.S.I.S. Access Control Note It is recommended that you change the default the kiosk computer s password. 4 Click Start > ID Express Kiosk Config. 5 Start the Internet Explorer browser that is already installed on the kiosk or desktop station computer. 6 From Internet Explorer, click Tools > Internet Options > Security > Local Internet > Sites. 7 Clear Automatically detect internet network. 8 Click Advanced. The Local intranet window displays Figure 3.1 Inputting the server path to the kiosk or desktop station. Input the server path here, then click Add. 9 Input the server path: /[server name] or [server IP address]/kiosk 10 Click Add. 11 Click Close, then OK, then OK. 12 Close Internet Explorer. 13 Restart the computer. 14 Repeat steps 1 13 for every kiosk and desktop station on the network. Setting up the Server The Stanley ID Express Station Server is the software that manages all kiosks and desktop stations and answers all requests for card data to be encoded. It also keeps track of all 3 3

14 Chapter 3: First-time Server Software Installation and Configuration for a B.A.S.I.S. Access Control System other information that is gathered by the stations such as pictures (picture data is not available on desktop stations). ID Express works with either the B.A.S.I.S. or the Wi-Q access control database. To set up ID Express for Wi-Q, see page 4-1. This process assumes that the B.A.S.I.S. database is fully functional. The first task is to choose which access control database is used. The configuration options are determined by this decision. Make sure that the B.A.S.I.S. software is installed and that a database is running You must have an installation of B.A.S.I.S. Access Control Software, ET680 or higher, on a server within your network and a B.A.S.I.S. database must be running. If you do not yet have a complete installation or the correct version of B.A.S.I.S., contact your Stanley Representative. Also, the Stanley ID Express Station issues cards that are currently only compatible with B.A.S.I.S. offline, online or Wi-Q Wireless locks. If you do not yet have B.A.S.I.S. offline or online locks or readers installed, contact your Stanley Representative. The following tasks must be performed by someone with local Administrator rights: Confirm that B.A.S.I.S. version or higher is installed with the latest hot fixes installed for Open IT support. Make sure that the server has Internet Information Services (IIS) installed and running. If you have a Vista machine you must: install IIS6 compatibility by navigating to and selecting Internet Information Services > Web Management Tools > IIS6 Management Compatibility > IIS Metabase and IIS 6 configuration compatibility. manually select the following items under Internet Information Services > World Wide Web Services > Application Development Features:.NET Extensibility, ASP.NET, ISAPI Extensions and ISAPI Filters. Internet Information Services is a standard Microsoft Windows web service that enables you to publish information 3 4

15 Chapter 3: First-time Server Software Installation and Configuration for a B.A.S.I.S. Access Control on your intranet. This service is available as part of the Windows operating system but is not installed by default. If not already installed, it can easily be installed from the Windows installation CD-ROM. Locate the Microsoft Windows operating system installation CD-ROM. You may need this disk during the IIS installation process. If.NET has been installed prior to installing IIS, please execute the following command from a command prompt: (To find out if.net has been installed, look in Control Panel > Add or remove Programs for Microsoft.NET Framework 2.0 If you find it, you will need to execute the following command: c:\windows\microsoft.net\framework\v \aspnet_regiis.exe -r Make sure that the.net Framework 1.1 is installed. The.NET Framework is a component of the Microsoft Windows operating system and is being used by an increasing number of software developers to build web-enabled applications. You may or may not already have version 1.1 of the.net Framework installed. Typically the.net Framework is updated from Windows Updates. Configure the server firewall to accept connections through port 80. If you have an XP machine follow these steps: 1 Open Control Panel. 2 Click Windows Firewall. 3 On the Exception tab, click the Add Port... button. 4 Enter IDExpress for the Name field. 5 Enter 80 for the Port field. 6 Select the TCP radio button. 7 Click OK. 8 Click OK. If you have a Vista machine follow these steps: 1 Open Control Panel. 2 Click Security. 3 Click Allow a program through Windows Firewall 4 On the Exception tab, click the Add Port... button 3 5

16 Chapter 3: First-time Server Software Installation and Configuration for a B.A.S.I.S. Access Control System 5 Enter IDExpress for the Name field 6 Enter 80 for the Port field 7 Select the TCP radio button 8 Click OK. 9 Click OK. Install the Stanley ID Express Station Server Configuration utility Installation note All installations must be performed by a user that has local administrator rights. To install the Stanley ID Express Station Server Configuration utility 1 If any items were configured in previous steps, restart the computer that will run the server software. 2 Close all applications that may have auto-started. This includes any anti-virus program that may be running. 3 Insert the installation disk. 4 From the Windows desktop, click Start > Run and type in X:\stanleyidexpressstation\serverinstall\setup.exe (where x: is the CD-ROM drive letter of the installation CD). 5 Follow the Stanley ID Express Station setup wizard instructions. Important step! 6 Set up the.net Security Configuration by installing the.net 2.0 configuration Tool: Execute configwizard.msi found in Client- Setup\DotNet20Configuration on the Wi-Q SDK install CD. Accept the terms and click Install to continue. Click Finish to complete the installation. Launch the.net Framework Configuration 2.0 Tool (Control Panel > Administrative Tools). Expand My Computer. Expand Runtime Security Policy. Expand Machine. Expand Code Groups. Expand All_code. Select LocalIntranet_Zone. 3 6

17 Chapter 3: First-time Server Software Installation and Configuration for a B.A.S.I.S. Access Control Select edit Group Properties (Displays the properties dialog). Select the Permission Set tab. Select FullTrust as the permissions set. Select Apply and then click OK. Close the.net Framework 2.0 Configuration window. 7 Restart the server computer. Setting up the Server Configuration utility Now that all necessary software has been installed on the server, you need to use the Stanley ID Express Station Server Configuration utility to set up how kiosk and desktop stations will operate. The server configuration utility allows you to perform the following functions: Set up the database connection to Stanley ID Express Stations. Determine what database information fields will be used to identify and verify Stanley ID Express Station users. Set up the network connections to all Stanley ID Express Stations. Set up how each Stanley ID Express Station will look on the screen. Customize the error and help messages that will be displayed on the Stanley ID Express Stations. Determine values for various features such as the number of times to allow a user to try to get a temporary card. To add the user ASPNET to the SQLServer instance with dbwriter and dbreader rights to the B.A.S.I.S. database 1 Open Microsoft SQL Server Management Studio Express. 2 Connect to the database using Windows Authentication. 3 In the Object Explorer window, expand the Security folder. 4 Right-click the Logins folder and select new Login from the menu. 5 Click the Search button next to the login name text box. 6 Enter ASPNET (no quotes) into the text box and click the check names button. 7 Click OK. 8 Select User Mapping from the list on the left. 3 7

18 Chapter 3: First-time Server Software Installation and Configuration for a B.A.S.I.S. Access Control System 9 Check the box next to the AccessControl database. 10 Select db_datareader, db_datawriter, and public from the permissions listed at the bottom of the window. 11 Click OK. Connect to the B.A.S.I.S. Database To connect the Stanley ID Express Station to the B.A.S.I.S. database 1 From the Windows desktop, click Start > Programs > Stanley ID Express > ID Express Server Configuration. The Server Configuration utility window displays 2 On the Configuration Utility, click the Access Control link. Figure 3.2 Finding the Access Control section to connect to the B.A.S.I.S. database Click the Access Control link to connect to the B.A.S.I.S. database. Enter the database connection string parameters to let the configuration utility know where to look for the database. 3 Under the access control system field, select BASIS. 4 Under database type, select the type of database that the B.A.S.I.S. database runs on. 5 Enter the database connection string by clicking on the button and entering the needed information. 3 8

19 Chapter 3: First-time Server Software Installation and Configuration for a B.A.S.I.S. Access Control 6 Use the following format to structure the database connection string. For Microsoft SQL Server Connections: Server = server computer name or IP address Database = name of B.A.S.I.S. database User = user ID of the B.A.S.I.S. database owner account Password = password of the user ID An example for a system that has the ID Express Server and B.A.S.I.S. database server running on the same machine: Server=localhost;uid=lenel; pwd=multimedia;database=accesscontrol For Oracle Server Connections: Host = Oracle database server name Port = Oracle database connection port Service Name = Oracle Service name on the host User = Oracle login Password = User 7 Click Try Connection. A message appears on the screen, Valid database connection if the configuration is correct. If a connection cannot be established, the message appears, Database Info is in error or the server is down. See your network or B.A.S.I.S. Administrator. Some common errors: Figure 3.3 Invalid server error 3 9

20 Chapter 3: First-time Server Software Installation and Configuration for a B.A.S.I.S. Access Control System Figure 3.4 Invalid user name or password Figure 3.5 Invalid database name 8 When a successful database connection is made, click Apply. Note Make sure to click the Apply button before proceeding to another tab in the configuration utility. Clicking apply will make any changes that you have applied to the configuration active from any section that has been modified. By clicking Apply after modifying each section, it will help ensure that if there are problems, they can be addressed promptly. You can revert to a previous state by clicking the Revert button. This action will return the configuration to the previous saved Apply. Configure DataConduIT Connection Configuration for the DataConduIT connection is made under the Access Control section of the software. The DataConduIT service is only available and needed for B.A.S.I.S. access control databases. If you have a SQL Server B.A.S.I.S. database Before DataConduIT can work with your SQL Server B.A.S.I.S. database you must complete the following steps: To add the user ASPNET to the SQLServer instance with dbwriter and dbreader rights to the B.A.S.I.S. database 1 Open Microsoft SQL Server Management Studio Express. 2 Connect to the database using Windows Authentication. 3 In the Object Explorer window, expand the Security folder. 3 10

21 Chapter 3: First-time Server Software Installation and Configuration for a B.A.S.I.S. Access Control 4 Right-click the Logins folder and select new Login from the menu. 5 Click the Search button next to the login name text box. 6 Enter ASPNET (no quotes) into the text box and click the check names button. 7 Click OK. 8 Select User Mapping from the list on the left. 9 Check the box next to the AccessControl database. 10 Select db_datareader, db_datawriter, and public from the permissions listed at the bottom of the window. 11 Click OK. Enable Single sign-on in B.A.S.I.S. and link the ASPNET user ID to a B.A.S.I.S. user that has System Admin and Cardholder Admin privileges. Creating a B.A.S.I.S. user specifically for DataConduit is strongly encouraged. For information on this configuration, refer to the System Administration User Guide located in the Documentation folder in the B.A.S.I.S. program group. If you have an Oracle Server B.A.S.I.S. database If the B.A.S.I.S. database is Oracle and the IDExpress server is NOT installed on the database server, Oracle Data Access Components must be installed on the IDExpress server. The Oracle Data Access Components installation program may be found in the Server Supplementary Content folder of the installation package. To install Oracle Data Access Components on the IDExpress server 1 Copy ODTwithODAC exe from the installation package to the server's hard drive and execute it. 2 Open the install directory that has been created in the same directory as the ODTwithODAC executable. Execute Setup.exe 3 On the Welcome screen click Next. 4 Select only Oracle Data Access Components and click Next. 5 Accept the default values for the destination and click Next. 6 From the Available Product Components list select only Oracle Data Provider for.net 2.0 and click Next. 3 11

22 Chapter 3: First-time Server Software Installation and Configuration for a B.A.S.I.S. Access Control System 7 Click Install. To configure ID Express to work with DataConduIT 1 From the Windows desktop on the ID Express Server machine, click Start > Programs > Stanley ID Express > ID Express Server Configuration. The Server Configuration utility window displays 2 On the Configuration Utility, click the Access Control link. The Integration Options window displays Note On the Database tab of the IDExpress Configuration Tool, enter the DataConduIT path. If DataConduIT is running on the same server as the IDExpress Server, the User and Password fields MUST be left blank. Figure 3.6 Finding the Integration section to be able to connect to the B.A.S.I.S. database Enter the connection parameters to let the configuration utility know where the DataConduIT server and login information is. 3 Enter the username and password for the DataConduIT server. If DataConduIT is running on the B.A.S.I.S. server, the user ID and password must be blank. B.A.S.I.S. must be configured for single sign-on for DataConduIT connections. 3 12

23 Chapter 3: First-time Server Software Installation and Configuration for a B.A.S.I.S. Access Control 4 Enter the path information to the Dataconduit server. Enter it as \\<servername>\root\onguard 5 Click Try Connection to confirm a valid connection. A Valid Dataconduit connection is displayed If a connection cannot be established, the message appears, Database Info is in error or the server is down. See your network or B.A.S.I.S. Administrator. A common error: Figure 3.7 Invalid Dataconduit error Configure SMTP (Simple Mail Transfer Protocol) The Stanley ID Express system can be configured to send automated s for the following conditions: IT Administration notices. These events are for the support of the ID Express Card Administration notices. These events are notifications of transactions at the ID Express User Notices. These are verifications sent to users of the ID Express, notifying them of transactions that they have made, including a temporary badge, updating a badge, or failed transactions. In order for the Stanley ID Express to be able to send notifications, the SMTP server sending the s, must be set up. Configuration of the SMTP Server is done from the integration section of the configuration software. To configure the SMTP Server 1 From the Windows desktop on the ID Express Server machine, click Start > Programs > Stanley ID Express > ID Express Server Configuration. The Server Configuration utility window displays 2 On the Configuration Utility, click the Integration link. The Integration Options window displays 3 13

24 Chapter 3: First-time Server Software Installation and Configuration for a B.A.S.I.S. Access Control System Figure 3.8 Finding the Integration section to be able to connect to the B.A.S.I.S. database Enter the configuration information for the setup of the SMTP Server. 3 Enter the configuration information for the SMTP Server. Information here will typically need to be provided by the end user s IT department. See your database administrator. Server = SMTP Server name Port = port that the SMTP server uses for communication Sender = Sender account for sent by ID Express. Format is Display name [user@xxx.com] or user@xxx.com Examples of a valid sender: Stanley Smith [ssmith@anycustomer.com] or ssmith@anycustomer.com User = Username for access to the SMTP Server Password = Password for access to the SMTP Server 4 Click Try Connection to ensure configuration is valid. A Valid SMTP Server connection is displayed If a connection cannot be established, the message appears, SMTP Server Info is in error or the server 3 14

25 Chapter 3: First-time Server Software Installation and Configuration for a B.A.S.I.S. Access Control is down. See your network or B.A.S.I.S. Administrator. Configure LDAP (Lightweight Directory Access Protocol) The Stanley ID Express can be configured to use LDAP Authentication rather than using B.A.S.I.S. fields or Wi-Q fields for identification and verification. This functionality will allow for the user of the Stanley ID Express to use the same user name and password that they normally use to log into a computer to be able to get a card issued to them at the ID Express. To configure LDAP with B.A.S.I.S. 1 From the Windows desktop on the ID Express Server machine, click Start > Programs > Stanley ID Express > ID Express Server Configuration. The Server Configuration utility window displays 2 On the Configuration Utility, click the Integration link. The Integration Options window displays 3 15

26 Chapter 3: First-time Server Software Installation and Configuration for a B.A.S.I.S. Access Control System Figure 3.9 Finding the Integration section to be able to connect to the B.A.S.I.S. database Configuration information autopopulates from the authenticating directory in B.A.S.I.S. The first item for setting up the LDAP Server is to set up a link to the authenticating directory in B.A.S.I.S. For instructions on this refer to Chapter 12: Directories Folder of the B.A.S.I.S. System Administration User Guide. This is needed so that the directory account can be linked to the card holder record so that the authentication at the Stanley ID Express can be processed. Note Make sure that you have the necessary B.A.S.I.S. license to run an LDAP directory. 3 Set up the link to the authenticating directory in B.A.S.I.S. 4 Click the B.A.S.I.S. button. The B.A.S.I.S. LDAP Lookup displays 3 16

27 Chapter 3: First-time Server Software Installation and Configuration for a B.A.S.I.S. Access Control Figure 3.10 Choosing the B.A.S.I.S. directory Select the B.A.S.I.S. LDAP directory. 5 Select the appropriate directory from the list and click Select. The information will auto-populate into the LDAP form based on the settings from B.A.S.I.S. to the Stanley ID Express software. 6 Click Try Connection to ensure that the configuration is valid. A Valid LDAP Server connection is displayed If a connection cannot be established, the message appears, LDAP Server Info is in error or the server is down. See your network or B.A.S.I.S. Administrator. Note To complete the connection of ID Express users to access and use the B.A.S.I.S. LDAP service, see the B.A.S.I.S. Advanced Installation Guide for LDAP Setup. Set Up User Identification and Verification Use one of two methods to identify and verify users: Option 1: LDAP (Lightweight Directory Access Protocol), see See Configure LDAP (Lightweight Directory Access Protocol) on page Option 2: B.A.S.I.S. fields, see the following. To set up identification and verification using B.A.S.I.S. Option 2 To allow only valid B.A.S.I.S. users to access the Stanley ID Express Station, proper identification must be input and then verified with another piece of information. For example, you may want to ask for first and last name and then to verify, you may want to ask for the Social Security Number. Stanley ID Express Stations allow you to set up 3 17

28 Chapter 3: First-time Server Software Installation and Configuration for a B.A.S.I.S. Access Control System the user information that you want to use for this purpose. Valid identification fields that can be used either for identification or verification include: Last name First name Middle initial Social Security Number Birth date Address State Zip Code Phone Birth date Title Department Division Building Floor Office Phone Location You may choose up to three fields for identification and three for verification. (Normally only two or at the most three fields are sufficient to insure a secure verification.) To set up identification and verification fields for all stations using B.A.S.I.S. fields 1 From the Windows desktop, click Start > Programs > Stanley ID Express > ID Express Server Configuration. 2 Click the Fields tab. The identification and verification fields setup window appears 3 18

29 Chapter 3: First-time Server Software Installation and Configuration for a B.A.S.I.S. Access Control Figure 3.11 Choosing which database fields will identify and verify a user Select up to three database fields to identify the user asking for Stanley ID Express Station access. Select up to three database fields to verify the user s identity. When you re satisfied with the fields and their order, click Apply. Note If you don t see any fields listed in the left column, contact your database administrator. See page 3-6. Or, if the Fields tab is inaccessible, the database connection has not been set up. See also page Select the identification fields in the available column and then click the right-arrow button to transfer the fields to the selected column. Use the up- or down-arrow buttons on the right to arrange the order in which the fields will appear on the Stanley ID Express Station Identification screen. If you change your mind, use the left-arrow button to return a field in the selected column to the available column. 4 Repeat step 3 to choose the verification fields. 5 When you re satisfied with the identification and verification fields and their order, click Apply. The configuration is saved. 3 19

30 Chapter 3: First-time Server Software Installation and Configuration for a B.A.S.I.S. Access Control System Although you are not required to, you can also customize the fields that you ve chosen in three ways: Label the field with a term that makes sense for the user Guide the user in the entry of the data Restrict the user in the proper entry of the data Mask the user s entry so that it doesn t appear on the screen. To customize fields 1 While on the Fields screen, right-click on a field that you have selected and want to label, provide guidance, and/or mask. 2 Click Properties. The Field Definition Properties screen displays Figure 3.12 Customizing field properties Use these fields to make user data entry easier to understand and to make sure data is entered correctly and securely. The following definitions describe the fields in this window: Label This is the text that will appear to the left of the data entry field and describes to the user what to enter. For example, in the figure above, the SSN data name is renamed as Social Security Number. Format label This is the text that will appear next to the Label (described above) and describes or gives an example of how to enter the data. For example, in the figure above, the Social Security Number is to be entered as So for this combination of Label and Format Label, the field on the screen will appear like this: Social Security Number ( ): 3 20

31 Chapter 3: First-time Server Software Installation and Configuration for a B.A.S.I.S. Access Control Format Use this field to enter a regular expression formula that enforces the correct entry format. Regular expressions are a powerful, but complex subject. For information on how to compose regular expressions, see Mask Entry Selecting this check box will cause an asterisk to appear in place of any text that the user enters. Use this field to mask sensitive user information. 3 Click OK. 4 Click Apply. 3 21

32 Chapter 3: First-time Server Software Installation and Configuration for a B.A.S.I.S. Access Control System Although you are not required to, you can also customize the fields that you ve chosen in three ways: Label the field with a term that makes sense for the user Guide the user in the entry of the data Restrict the user in the proper entry of the data Mask the user s entry so that it doesn t appear on the screen. For more information See To customize fields on page Define Network Connections to the Stanley ID Express Station Kiosks and Desktop Stations Now that you have established a Stanley ID Express Station server-to-database connection, connections also need to be defined for each Stanley ID Express Station kiosk and desktop station that you will be installing. You will do this by defining the station name and IP address. Confer with the network administrator if these names and IP addresses have not yet been determined. The Stanley ID Express Station supports the use of SSL communication across the network to secure the information as it is being passed between the server and the kiosk and desktop stations. Using SSL requires a security certificate to be installed on the server and the public key of that certificate to be installed on each kiosk. This process must be done before enabling the functionality in the Server configuration. See Appendix C for complete instructions on setting up security certificates. To define the network connections to the kiosk and desktop stations 1 From the Windows desktop, click Start > Programs > Stanley ID Express > ID Express Server Configuration. 2 Click the Security tab. The Network Security Setup window appears 3 22

33 Chapter 3: First-time Server Software Installation and Configuration for a B.A.S.I.S. Access Control Figure 3.13 Defining the kiosk and desktop station network addresses Enter a station description and its IP address, then click Add. 3 In the Description field, enter a kiosk or desktop station description. Commonly, stations are described based on their location. You may also want to differentiate between desktop and kiosk stations. Descriptions become especially helpful in identifying a station in the Transaction History Log. Kiosk or desktop stations do not have to be installed yet for this step to be completed. 4 In the Host IP Address field and description field, enter the IP address and description of the station. 5 Click Add. The station is added to the list below. Note To cancel or re-type an entry, click on the listed station and then click Remove. You cannot remove the default entry: Repeat steps 3 5 for each station. 7 Click Apply. The configuration is saved. 3 23

34 Chapter 3: First-time Server Software Installation and Configuration for a B.A.S.I.S. Access Control System Setting up kiosk and desktop station characteristics There are several graphic and functional characteristics of kiosk and desktop stations that need to be defined. The Configuration Utility will allow you to set these up. Use these to customize your stations for clearer communication and better control in automatically issuing key cards. In making these decisions, make sure to think about how these decisions will affect all stations on the network. These graphic and functional characteristics will apply to all stations; a single station cannot behave differently than another station on the same network. Once these characteristics are set up, they can always be changed or adjusted later. The types of characteristics that need to be defined include: Customize the graphics that display in the header and body area of the station screen. Doing this associates the Stanley ID Express Station System with your university or business. Define the number of attempts that a person is allowed to to validate their identity in getting a key card before the user is locked out. Define the amount of time that a person will be locked out. Define the number of days that transaction history is kept before it is automatically purged. Decide whether you want to show the transaction photo in the transaction history. Decide whether to issue temporary cards. Decide how long temporary cards will be valid. Customize error or information messages that display on station screens. Set Up Kiosk and Desktop Station Graphics If the Stanley Security Solutions graphic is acceptable, you can skip the following procedure; it has no effect on how the system behaves. Remember you can change the appearance at any time in the future. 3 24

35 Chapter 3: First-time Server Software Installation and Configuration for a B.A.S.I.S. Access Control To customize the graphics of the station screens 1 From the Windows desktop, click Start > Programs > Stanley > ID Express Station Configuration Utility. 2 If not already on the Appearance/Graphics tab, click Appearance/Graphics. The Appearance/Graphics window displays Figure 3.14 Customizing the graphics displayed on all kiosk and desktop stations Use this to replace the default Stanley graphic that appears in the top-left of the kiosk screen. Use this to replace the default background of the kiosk screen. Use this to replace the default header background of the kiosk screen. 3 Create if needed and save your custom graphic files to the location c:\program Files\Stanley ID Express. You can customize the following screen items. See Figure 3.15 for the different sections of the client screen that will be affected by the changes in the custom graphics section. Top left logo Background image Header background image Important When selecting graphics, if they are not the size of the screen, they will automatically be set up as a series of images to fill the section that is being configured. All text on the screen is configured in the next section of the software. The custom graphics section is just for the graphics that will appear on the ID Express screen. Compatible graphic formats include bmp, jpg, gif, and png. 3 25

36 Chapter 3: First-time Server Software Installation and Configuration for a B.A.S.I.S. Access Control System Figure 3.15 Customizing the graphics displayed on all kiosk and desktop stations Top left logo Background image header Background image (shown as solid white here) 4 To customize the kiosk and desktop stations with your own logo graphic, click the browse button in the upper right-hand corner and navigate to the graphic file that will replace the default Stanley Security Solutions logo. Or simply type in the path and file name of the graphic file in the top left logo image file field. 5 To customize the kiosk and desktop stations with a different background graphic, click the second browse button and navigate to the graphic file that will replace the default background. Or simply type in the path and file name of the graphic file in the background image file field. Make sure that this graphic will not compete or be a distraction to the text that will be displayed on it. It should be a light background image. 3 26

37 Chapter 3: First-time Server Software Installation and Configuration for a B.A.S.I.S. Access Control 6 To customize the kiosk and desktop stations with a different header background graphic, click the third browse button and navigate to the graphic file that will replace the default header background graphic. Or simply type in the path and file name of the graphic file in the header background image file field. Make sure that this graphic will not compete or be a distraction to the logo file that will display on it. 7 Click Apply. The appearance configuration is saved. Set Up Kiosk and Desktop Station Behaviors Behaviors are options that limit or extend functional characteristics of the Stanley ID Express Stations. The following table describes the behaviors or options that you can modify. In many cases the default or preset values of the behaviors may be acceptable as they are. If so, you can skip the following procedure. Remember you can change the behaviors at any time in the future. One set of behaviors applies to all kiosks and desktop stations on a network. Behavior Description Retry count Retry lockout timeout Idle timeout Number of retries allowed for entering Identity, Verify and LDAP Sign-on screens. A value of zero (0) will allow infinite retries. Time period in minutes the kiosk is locked after a transaction fails because retries are exceeded on the Identify, Verify or LDAP Sign-on screens. Number of seconds of idle time allowed on a user prompt screen before the transaction is cancelled. Default value Min Max attemp ts minutes seconds 3 27

38 Chapter 3: First-time Server Software Installation and Configuration for a B.A.S.I.S. Access Control System Behavior Description Kiosk communications timeout System error retry interval Resource down notification interval Number of minutes after which the server should generate an IT Admin notice (set up in Notifications) and a B.A.S.I.S. alarm if it has not received a communication from the kiosk. Time interval in minutes at which the kiosk should check the status of system resources (LDAP server, Server, DataConduIT server, etc.) and local resources (card dispenser and camera) when a resource is down. Time interval in minutes at which IT Admin notification and B.A.S.I.S. alarms should be generated when a system resource is down. Default value Min Max minutes minutes Transaction history age Capture photo in transaction history Maximum age (in days) of transactions kept in the Transaction History log. Transactions older than this will be purged from the Transaction History log. If selected, the kiosk will take a picture of the user executing a transaction and store it in the Transaction History log days Selected Allow temporary keys Temp key expiration Allow unencoded keys to be inserted If selected, the Issue Temp button will be available on the Welcome screen. Number of days a temporary key is active. If selected, the card encoder/ dispenser will allow unencoded or blank key cards to be inserted. Selected 3 1 Unlimited days Selected 3 28

39 Chapter 3: First-time Server Software Installation and Configuration for a B.A.S.I.S. Access Control Behavior Description Default value Min Max Display Room If selected, the user's Room Assignment will be displayed on the Summary screen upon successful completion of a transaction (i.e. when a key card is encoded and issued). Selected Display PIN If selected, the user's PIN will be displayed on the Summary screen upon successful completion of a transaction (i.e. when a key card is encoded and issued). Selected To set up kiosk and desktop station behaviors 1 From the Windows desktop, click Start > Programs > Stanley > ID Express Station Configuration Utility. 2 If not already on the Behavior tab, click Behavior. The Behavior window displays 3 29

40 Chapter 3: First-time Server Software Installation and Configuration for a B.A.S.I.S. Access Control System Figure 3.16 Customizing the behaviors on all kiosk and desktop stations Make changes to the timeout/ retry counts, transaction history, temporary keys, existing keys and room and PIN as needed. 3 Using the table above, change any or all of the default behaviors. 4 Click Apply. The behavior configuration is saved. Set Up Kiosk and Desktop Station Text Messages You can customize the text messages displayed on the kiosk and desktop stations. You may want to do this if you need to give specific directions, or provide instructions in other languages. You can also use HTML tags and special characters as part of the text messages; they will be displayed on the screen as they would with any other web page. The following table describes the text messages that you can modify. In many cases the default text messages may be 3 30

41 Chapter 3: First-time Server Software Installation and Configuration for a B.A.S.I.S. Access Control acceptable as they are. If so, you can skip the following procedure. Remember you can change text messages at any time in the future. One set of text messages applies to all kiosks and desktop stations on a network. Use up to 255 characters for a message text. Configura tion Screen Label Appears Default Message Text Header Header Header text that appears on each kiosk screen. Stanley ID Express A Kiosk Page Prompts Welcome Identification Verification LDAP Sign- On Charge Confirmation Insert Prox Card Assign Prox Card Messages User instruction displayed on the Welcome screen. User instruction displayed on the Identification screen. User instruction displayed on the Verification screen. User instruction displayed on the LDAP Sign-On screen. User instruction displayed on the Charge Confirmation screen. User instruction at the time a prox card is needed. User instruction to take newly assigned proximity card and present it to the proximity reader. Insert Card<br><br>or<br><br> B press Button for Temporary Card Enter Identification Information: Enter Verification Information: Enter Login Information: A fee will be assessed in order to receive a replacement key card. To proceed, press the I Accept button, otherwise press the Cancel button. Please Insert Card Please take card.<br><br><br><br>s wipe the card past the reader as shown. 3 31

42 Chapter 3: First-time Server Software Installation and Configuration for a B.A.S.I.S. Access Control System Configura tion Screen Label Retries Exceeded Lockout Appears Default Message Text Message displayed on the Summary screen when a transaction is unsuccessful due to the number of Identify, Verify, LDAP Sign-On or Face Detection retries have been exceeded. Maximum number of attempts exceeded. Restricted Area Access Lockout Transaction Timeout Transaction Cancelled Successful Transaction System Error Occurred Identification Failed Verification Failed Message displayed on the Summary screen when a client with an unauthorized IP Address attempts to access the ID Express Server. (Authorized IP Addresses are configured on the Security page of this application.) Message displayed on the Summary screen when a transaction is due to the user failing to respond to a prompt in the configured idle timeout. See Behavior page of this application to set the Idle Timeout seconds. Message displayed on the Summary screen when a transaction has ended as a result of the user cancelling the transaction. Message displayed on the Summary screen when a transaction has completed successfully (i.e. a card is encoded and dispensed). Message displayed on the Summary screen when a transaction is unsuccessful due to a system error. Message displayed on the Identify screen when the system cannot identify the user from the information provided. Message displayed on the Verify screen when the system cannot verify the student based on the information provided. Authentication failed. Unauthorized access. Transaction timed-out. User failed to respond. Transaction cancelled. Transaction complete. A System Error Occurred. Maintenance Required. Identification failed! Please try again. Verification failed! Please try again. 3 32

43 Chapter 3: First-time Server Software Installation and Configuration for a B.A.S.I.S. Access Control Configura tion Screen Label Appears Default Message Text LDAP Authentication Failed Message displayed on the Sign-On screen when the system cannot authenticate the user based on the User ID and Password provided. Sign-On failed! Please try again. Badge Not Found Magnetic Card Encoding Failed Magnetic Card Read Failed Proximity Card Read Failed Message displayed on the Summary screen when the user is found in the system but no badges using the configured encoding card formats can be found. See the Encoding page of this application for Card Format configuration. Message displayed on the Summary screen when an error occurs during the encoding of the magnetic card. Message displayed on the Summary screen when a card inserted into the kiosk's card reader/encoder cannot be read. Message displayed on the Summary screen when a card presented to the proximity reader cannot be read. A. The text string " " displays the TM symbol on a web page B. The text <br> inserts a single return on a web page. Badge not found. An error occurred encoding the Key Card. Please try again. <br><br> If the error persists, contact the Card Administration office. The Key Card could not be read. Please try again.<br><br>if the error persists, contact the Card Administration Office. The Key Card could not be read. Please try again.<br><br>if the error persists, contact the Card Administration Office. To customize text messages 1 From the Windows desktop, click Start > Programs > Stanley > ID Express Station Configuration Utility. 2 Click the Custom Text Link. The Appearance/Text window displays 3 33

44 Chapter 3: First-time Server Software Installation and Configuration for a B.A.S.I.S. Access Control System Figure 3.17 Customizing the text messages on all kiosk and desktop stations Customize text messages for specific directions or use multi-lingual messaging to make sure all users can read and understand the message. 3 Using the table above change any or all of the default text messages. Use up to 255 characters for a message text. 4 Click Apply. The text messages configuration is saved. Set Up Custom Workflows You may want to set up your own web pages to communicate policy or procedures specific to your site. For example, you may want to notify users of charges or direct them to call an administrator. You can set up web pages and their URLs for: Successful authentication for a temporary badge Successful authentication to update an existing badge Successful transaction Failed transaction Communicating or collecting charges or fees (for lost cards, etc) To set up custom workflows You must set up and test your own web pages and their transactions, each with its own dedicated URL, for each workflow before assigning URLs to the workflow configuration. 3 34

45 Chapter 3: First-time Server Software Installation and Configuration for a B.A.S.I.S. Access Control 1 See your web administrator to set up web pages for any or all of these workflows. 2 From the Windows desktop, click Start > Programs > Stanley > ID Express Station Configuration Utility. 3 Click the Workflow Link. The Workflow window displays Figure 3.18 Customizing a workflow showing URL to display after a successful authentication of a temporary badge Input the URL that your web administrator has set up for any the workflows. 4 Input the appropriate URL or URLs. 5 To input a URL to enable the charge workflow, click the Behavior link and then select the charge confirmation checkbox. Doing this will activate the URL after charge accepted field. Otherwise the field is inactive. Set Up Custom Notifications You can set up ID Express to notify you via of many scenarios and even customize messages to go out to members of your staff. Note Make sure to set up your SMTP server before setting up custom notifications. See Configure SMTP (Simple Mail Transfer Protocol) on page

46 Chapter 3: First-time Server Software Installation and Configuration for a B.A.S.I.S. Access Control System Standard situations that you can get notified of include: IT Admin notices Card Admin notices Notices sent to users of a successful transaction Notices sent to users of a failed transaction Notice that the card hopper is low. You can also customize these standard messages with macros that include other information. Here s a complete list of the macros that you can use. Macro Description Use to... <Date> <Time> <DateTime> <LongDate> <Message> <TransType> Transaction date in MM/ DD/YYYY Transaction time in HH:MM AM format Transaction date and time in MM/DD/YYYY HH:MM AM format Transaction date in long format (example Monday, August 2, 2009) Transaction summary message Transaction type (issue temp key update existing key) Document when the transaction happened. Document when the transaction happened. Document when the transaction happened. Document when the transaction happened. <Kiosk> Kiosk description Your description of the particular kiosk where the transaction took place <KioskIP> Kiosk IP address The Internet protocol address of the particular kiosk <Outcome> Outcome of transaction Document what transaction took place. Outcomes include: transaction cancelled system error or post error retries exceeded timeout encoding error; badge not found; mag card or prox card read error all credentials deactivated 3 36

47 Chapter 3: First-time Server Software Installation and Configuration for a B.A.S.I.S. Access Control Macro Description Use to... <IDFIelds> Field used for identification Document the user by using the fields that you ve selected to identify users, for example, First name, Last name, badge number. <ASCID> ASC ID information <LdapID> LDAP User ID Usually the address of the user. <PIN> Badge PIN (personal identification number) Document whose card was used in the transaction <Room> Room assignment Document the transaction room assignment <CardDispensed> Y/N indicating if card was dispensed to use. Document whether a card was dispensed. To set up notifications 1 From the Windows desktop, click Start > Programs > Stanley > ID Express Station Configuration Utility. 2 Click the notifications Link. The notifications window displays Figure 3.19 Setting up an notification message Input the addresses that you want to receive the notifications. Click [...] to see a list of macros to customize the message. Click Test Message to send a test message to the s addresses) listed. 3 37

48 Chapter 3: First-time Server Software Installation and Configuration for a B.A.S.I.S. Access Control System 3 Choose a standard message to be enabled and select the enabled checkbox. 4 Input the addresses to receive the notification message. You can input multiple addresses by inserting a semi-colon between the addresses. 5 Optional: modify the subject line by clicking the ellipsis button [...]. You can add a macro to the subject line. For example, you can add <Kiosk> to let the recipient know which kiosk the message is about. 6 Optional: modify the message by clicking the ellipsis button [...]. You can add a macro to the message. 7 Click Test message to send a test to the recipient(s). 8 Check the message to see if it matches the macro formula. Set Up Kiosks to Read Cards ID Express can read magnetic stripe cards and proximity cards for B.A.S.I.S. You can set up ID Express to read two different types of access cards: Magnetic stripe cards Track 2 Track 3 Proximity cards GuardDog HID Access Control (iclass) To set up ID Express to read one or more magstripe card formats 1 From the Windows desktop, click Start > Programs > Stanley > ID Express Station Configuration Utility. 2 Click the Card Formats Link. The Card Format window displays 3 38

49 Chapter 3: First-time Server Software Installation and Configuration for a B.A.S.I.S. Access Control Figure 3.20 Setting up magstripe card read formats Select the format that you want ID Express to read, then click Add. Repeat for all formats that ID Express may see. After clicking Add, the card track format is listed here. Multiple formats can be Click Remove to remove formats that you do not need. 3 Under Magnetic Decode Formats, select a format that you need the ID Express kiosk to read. 4 Click Add. The card format appears under the selected track formats. 5 Repeat steps 3 and 4 until all formats are added. 6 Click Apply. To set up ID Express to read a proximity card format Note Desktop stations are not able to read proximity cards. 1 From the Windows desktop, click Start > Programs > Stanley > ID Express Station Configuration Utility. 2 Click the Card Formats Link. The Card Format window displays 3 39

50 Chapter 3: First-time Server Software Installation and Configuration for a B.A.S.I.S. Access Control System Figure 3.21 Setting up proximity card read formats for B.A.S.I.S. Select the format that you want ID Express to read. ID Express can only be set up to read one kind of proximity for- 3 Under Proximity Formats, select a format that you need the ID Express kiosk to read. The card format details appear in the format details field. 4 Once the correct proximity card format is selected, click Apply. Note ID Express kiosks can be set up to read both magstripe cards and proximity cards, but limitations do apply. Set Up Kiosks to Encode Magstripe Cards You can set up ID Express to encode magnetic stripe cards for both offline and online card readers. You can also encode a single card that will have both online and offline access. Typically this is done by encoding for online readers on track 2 and for offline readers on track 3. See your access control administrator for card encoding format parameters. See also the B.A.S.I.S. Administration User Guide for complete details on card encoding. 3 40

51 Chapter 3: First-time Server Software Installation and Configuration for a B.A.S.I.S. Access Control To set up ID Express to encode offline and online magstripe cards 1 From the Windows desktop, click Start > Programs > Stanley > ID Express Station Configuration Utility. 2 Click the Card Formats Link. The Card Format window displays Figure 3.22 Setting up magstripe card encoding formats Select the online and/or offline formats that you want ID Express to encode. ID Express can only encode one kind of online format and one kind of offline format. Select the track field to change and click Add or to remove, click remove. 3 Under Magnetic Formats, select a format that you need the ID Express kiosk to encode. The card format details appear in the format details field. 4 Once the correct card format is selected, click Apply. 3 41

52 Chapter 3: First-time Server Software Installation and Configuration for a B.A.S.I.S. Access Control System 3 42

53 C h a p t e r 4 First-time Server Software Installation and Configuration for a Wi-Q Access Control System You are now ready to start setting up your Stanley ID Express Station System for Wi-Q. If you have a B.A.S.I.S. Access Control System, STOP and do not use this chapter; see the previous chapter for B.A.S.I.S. setup, page 3-1. Gathering the essential materials and information Make sure that you have the following components before you start installing the Stanley ID Express Station System: Wi-Q Access Management Software or higher. 4 1

54 Chapter 4: First-time Server Software Installation and Configuration for a Wi-Q Access Control System Software Development Kit (SDK) version or higher. Stanley ID Express Station kiosk Optional: Stanley ID Express Station desktop station. See your Stanley Representative for complete details. Magnetic stripe cards Before installing the Stanley ID Express Station System, also make sure that you have completed the following checklist. Make sure that you have met with the appropriate Information Technology and Security personnel to determine the following information: Static IP address for each station Gateway and subnet mask for each station Computer name for each station URL for the server Physical location of each Stanley ID Express Station kiosk Make sure you have an Information Technology person available who can set up a server with the Stanley ID Express Station server software. Make sure you have power and network availability for each Stanley ID Express Station kiosk and desktop station. Initial set up of kiosk and desktop station Once the kiosk or desktop station is physically installed with network access and power, you will need to input the server name into the kiosk or desktop station so that it can connect. To add the server name to a kiosk or desktop station 1 Open the cabinet door and connect a keyboard and mouse (optional) to the computer located inside the cabinet. 2 If not done already, power up the computer. 3 Use the following Username and password: username: parabit [do not use quote marks] password: password [do not use quote marks] 4 Click Start > ID Express Kiosk Config. 5 Start the Internet Explorer browser that is already installed on the kiosk or desktop station computer. 4 2

55 Chapter 4: First-time Server Software Installation and Configuration for a Wi-Q Access Control 6 From Internet Explorer, click Tools > Internet Options > Security > Local Internet > Sites. 7 Clear Automatically detect internet network. 8 Click Advanced. The Local intranet window displays Figure 4.1 Inputting the server path to the kiosk or desktop station. Input the server path here, then click Add. 9 Input the server path: /[server name] or [server IP address]/kiosk 10 Click Add. Setting up the Server 11 Click Close, then OK, then OK. 12 Close Internet Explorer. 13 Restart the computer. 14 Repeat steps 1 13 for every kiosk and desktop station on the network. The Stanley ID Express Station Server is the software that manages all kiosks and desktop stations and answers all requests for card data to be encoded. It also keeps track of all other information that is gathered by the stations such as pictures (picture data is not available on desktop stations). ID Express works with either the B.A.S.I.S. or the Wi-Q access control database. To set up ID Express for Wi-Q, see page 4-1. This process assumes that the Wi-Q database is fully functional. 4 3

56 Chapter 4: First-time Server Software Installation and Configuration for a Wi-Q Access Control System The first task is to choose which access control database is used. The configuration options are determined by this decision. To set up ID Express to work with a Wi-Q database you must have installed Wi-Q AMS Software and the Wi-Q SDK (software development kit) included with the Wi-Q Access Control system installation. For more information see the WI-Q AMS User Guide or Wi-Q AMS Getting Started Guide. If you do not yet have a complete installation contact your Stanley Representative Also, the Stanley ID Express Station issues cards that are currently only compatible with Best Access Systems B.A.S.I.S. offline or Wi-Q Technology Wireless locks. If you do not yet have B.A.S.I.S. offline locks or Wi-Q Technology Wireless locks installed, contact your Stanley Representative. The following tasks must be performed by someone with local Administrator rights: Confirm that Wi-Q AMS Software is installed and operational. Configure the server firewall to accept connections through port 80. If you have an XP machine follow these steps: 1 Open Control Panel. 2 Click Windows Firewall. 3 On the Exception tab, click the Add Port... button. 4 Enter IDExpress for the Name field. 5 Enter 80 for the Port field. 6 Select the TCP radio button. 7 Click OK. 8 Click OK. If you have a Vista machine follow these steps: 1 Open Control Panel. 2 Click Security. 3 Click Allow a program through Windows Firewall 4 4

57 Chapter 4: First-time Server Software Installation and Configuration for a Wi-Q Access Control 4 On the Exception tab, click the Add Port... button 5 Enter IDExpress for the Name field 6 Enter 80 for the Port field 7 Select the TCP radio button 8 Click OK. 9 Click OK. Install the Stanley ID Express Station Server Configuration utility Installation note All installations must be performed by a user that has local administrator rights. To install the Stanley ID Express Station Server Configuration utility 1 If any items were configured in previous steps, restart the computer that will run the server software. 2 Close all applications that may have auto-started. This includes any anti-virus program that may be running. 3 Insert the installation disk. 4 From the Windows desktop, click Start > Run and type in X:\stanleyidexpressstation\serverinstall\setup.exe (where x: is the CD-ROM drive letter of the installation CD). 5 Follow the Stanley ID Express Station setup wizard instructions. Important step! 6 Set up the.net Security Configuration by installing the.net 2.0 configuration Tool: Execute configwizard.msi found in Client- Setup\DotNet20Configuration on the Wi-Q SDK install CD. Accept the terms and click Install to continue. Click Finish to complete the installation. Launch the.net Framework Configuration 2.0 Tool (Control Panel > Administrative Tools). Expand My Computer. Expand Runtime Security Policy. Expand Machine. Expand Code Groups. Expand All_code. Select LocalIntranet_Zone. 4 5

58 Chapter 4: First-time Server Software Installation and Configuration for a Wi-Q Access Control System Select edit Group Properties (Displays the properties dialog). Select the Permission Set tab. Select FullTrust as the permissions set. Select Apply and then click OK. Close the.net Framework 2.0 Configuration window. 7 Restart the server computer. Setting up the Server Configuration utility Now that all necessary software has been installed on the server, you need to use the Stanley ID Express Station Server Configuration utility to set up how kiosk and desktop stations will operate. The server configuration utility allows you to perform the following functions: Set up the database connection to Stanley ID Express Stations. Determine what database information fields will be used to identify and verify Stanley ID Express Station users. Set up the network connections to all Stanley ID Express Stations. Set up how each Stanley ID Express Station will look on the screen. Customize the error and help messages that will be displayed on the Stanley ID Express Stations. Determine values for various features such as the number of times to allow a user to try to get a temporary card. To add the user ASPNET to the SQLServer instance with dbwriter and dbreader rights to the Wi-Q database 1 Open Microsoft SQL Server Management Studio Express. 2 Connect to the database using Windows Authentication. 3 In the Object Explorer window, expand the Security folder. 4 Right-click the Logins folder and select new Login from the menu. 5 Click the Search button next to the login name text box. 6 Enter ASPNET (no quotes) into the text box and click the check names button. 7 Click OK. 8 Select User Mapping from the list on the left. 4 6

59 Chapter 4: First-time Server Software Installation and Configuration for a Wi-Q Access Control 9 Check the box next to the AccessControl database. 10 Select db_datareader, db_datawriter, and public from the permissions listed at the bottom of the window. 11 Click OK. Connect to the Wi-Q Database To connect the Stanley ID Express Station to the Wi-Q database 1 From the Windows desktop, click Start > Programs > Stanley ID Express > ID Express Server Configuration. The Server Configuration utility window displays 2 On the Configuration Utility, click the Access Control link. Figure 4.2 Finding the Access Control section to connect to the Wi-Q database Click the Access Control link to connect to the Wi-Q database. Select the Wi-Q database. Enter the SDK Web Service URL string to let the configuration utility know where to look for the database. 3 Under the access control system field, select Wi-Q. 4 Enter the SDK Web Service URL string to let the configuration utility know where to look for the database. 5 Click Try Connection. A message appears on the screen, Valid Wi-Q SDK connection if the configuration is correct. 4 7

60 Chapter 4: First-time Server Software Installation and Configuration for a Wi-Q Access Control System If a connection cannot be established, the message appears, Wi-Q SDK URL is in error or the server is down. See your network or Wi-Q Administrator. 6 When a successful database connection is made, click Apply. Note Make sure to click the Apply button before proceeding to another tab in the configuration utility. Clicking apply will make any changes that you have applied to the configuration active from any section that has been modified. By clicking Apply after modifying each section, it will help ensure that if there are problems, they can be addressed promptly. You can revert to a previous state by clicking the Revert button. This action will return the configuration to the previous saved Apply. Configure SMTP (Simple Mail Transfer Protocol) The Stanley ID Express system can be configured to send automated s for the following conditions: IT Administration notices. These events are for the support of the ID Express Card Administration notices. These events are notifications of transactions at the ID Express User Notices. These are verifications sent to users of the ID Express, notifying them of transactions that they have made, including a temporary badge, updating a badge, or failed transactions. In order for the Stanley ID Express to be able to send notifications, the SMTP server sending the s, must be set up. Configuration of the SMTP Server is done from the integration section of the configuration software. Note You must use a custom address field in Wi-Q to be able to use SMTP. To configure the SMTP Server 1 From the Windows desktop on the ID Express Server machine, click Start > Programs > Stanley ID Express > ID Express Server Configuration. The Server Configuration utility window displays 2 On the Configuration Utility, click the Integration link. 4 8

61 Chapter 4: First-time Server Software Installation and Configuration for a Wi-Q Access Control The Integration Options window displays Figure 4.3 Finding the Integration section to be able to connect to the Wi-Q database Enter the configuration information for the setup of the SMTP Server. 3 Enter the configuration information for the SMTP Server. Information here will typically need to be provided by the end user s IT department. See your database administrator. Server = SMTP Server name Port = port that the SMTP server uses for communication Sender = Sender account for sent by ID Express. Format is Display name [user@xxx.com] or user@xxx.com Examples of a valid sender: Stanley Smith [ssmith@anycustomer.com] or ssmith@anycustomer.com User = Username for access to the SMTP Server Password = Password for access to the SMTP Server 4 Click Try Connection to ensure configuration is valid. A Valid SMTP Server connection is displayed 4 9

62 Chapter 4: First-time Server Software Installation and Configuration for a Wi-Q Access Control System If a connection cannot be established, the message appears, SMTP Server Info is in error or the server is down. See your network or Wi-Q Administrator. Configure LDAP (Lightweight Directory Access Protocol) The Stanley ID Express can be configured to use LDAP Authentication rather than Wi-Q fields for identification and verification. This functionality will allow for the user of the Stanley ID Express to use the same user name and password that they normally use to log into a computer to be able to get a card issued to them at the ID Express. Before configuring LDAP in ID Express, you will need to create a custom field for user identification in the Wi-Q Access Management System at the facility level and then populate that field with the appropriate data for all users. See your LDAP Administrator for data requirements to set up LDAP with Wi-Q. To configure LDAP with Wi-Q 1 From the Windows desktop on the ID Express Server machine, click Start > Programs > Stanley ID Express > ID Express Server Configuration. The Server Configuration utility window displays 2 On the Configuration Utility, click the Integration link. The Integration Options window displays 4 10

63 Chapter 4: First-time Server Software Installation and Configuration for a Wi-Q Access Control Figure 4.4 Finding the Integration section to be able to connect to the Wi-Q database Enter data from your LDAP Administrator. 3 Select the directory type. 4 Enter the Server path, port, etc. 5 Enter attributes: ID, User Name, etc 6 Click Try Connection to ensure that the configuration is valid. A Valid LDAP Server connection is displayed If a connection cannot be established, the message appears, LDAP Server Info is in error or the server is down. See your network or Wi-Q Administrator. 4 11

64 Chapter 4: First-time Server Software Installation and Configuration for a Wi-Q Access Control System Set Up User Identification and Verification Use one of two methods to identify and verify users: Option 1: LDAP (Lightweight Directory Access Protocol), see See To set up identification and verification using LDAP on page Option 2: Wi-Q fields, See To set up identification and verification using Wi-Q on page To set up identification and verification using Wi-Q Option 2 To allow only valid Wi-Q users to access the Stanley ID Express Station, proper identification must be input and then verified with another piece of information. For example, you may want to ask for first and last name and then to verify, you may want to ask for a PIN number. Stanley ID Express Stations allow you to set up the user information that you want to use for this purpose. Valid identification fields that can be used either for identification or verification include: Last name First name Middle initial PIN (personal identification number) You may choose up to three fields for identification and three for verification. (Normally only two or at the most three fields are sufficient to insure a secure verification.) To set up identification and verification fields for all stations using Wi-Q fields 1 From the Windows desktop, click Start > Programs > Stanley ID Express > ID Express Server Configuration. 2 Click the Fields tab. The identification and verification fields setup window appears 4 12

65 Chapter 4: First-time Server Software Installation and Configuration for a Wi-Q Access Control Figure 4.5 Choosing which database fields will identify and verify a user Select up to three database fields to identify the user asking for Stanley ID Express Station access. Select up to three database fields to verify the user s identity. When you re satisfied with the fields and their order, click Apply. Note If you don t see any fields listed in the left column, contact your database administrator. Or, if the Fields tab is inaccessible, the database connection has not been set up. 3 Select the identification fields in the available column and then click the right-arrow button to transfer the fields to the selected column. Use the up- or down-arrow buttons on the right to arrange the order in which the fields will appear on the Stanley ID Express Station Identification screen. If you change your mind, use the left-arrow button to return a field in the selected column to the available column. 4 Repeat step 3 to choose the verification fields. 5 When you re satisfied with the identification and verification fields and their order, click Apply. The configuration is saved. 4 13

66 Chapter 4: First-time Server Software Installation and Configuration for a Wi-Q Access Control System Although you are not required to, you can also customize the fields that you ve chosen in three ways: Label the field with a term that makes sense for the user Guide the user in the entry of the data Restrict the user in the proper entry of the data Mask the user s entry so that it doesn t appear on the screen. For more information See To customize fields on page To set up identification and verification using LDAP To set up identification and verification fields for all stations using LDAP 1 From the Windows desktop, click Start > Programs > Stanley ID Express > ID Express Server Configuration. 2 Click the Integration Link and scroll down to the LDAP section. The identification and verification fields setup window appears Figure 4.6 Choosing to use LDAP authentication method Select the LDAP Authentication Enabled checkbox to use this method of identification and verification. 3 Select the LDAP Authentication Enabled checkbox to use this method of identification and verification. Form information on setting up the LDAP information, refer to page Click Apply. 4 14

67 Chapter 4: First-time Server Software Installation and Configuration for a Wi-Q Access Control Define Network Connections to the Stanley ID Express Station Kiosks and Desktop Stations Now that you have established a Stanley ID Express Station server-to-database connection, connections also need to be defined for each Stanley ID Express Station kiosk and desktop station that you will be installing. You will do this by defining the station name and IP address. Confer with the network administrator if these names and IP addresses have not yet been determined. The Stanley ID Express Station supports the use of SSL communication across the network to secure the information as it is being passed between the server and the kiosk and desktop stations. Using SSL requires a security certificate to be installed on the server and the public key of that certificate to be installed on each kiosk. This process must be done before enabling the functionality in the Server configuration. See Appendix C for complete instructions on setting up security certificates. To define the network connections to the kiosk and desktop stations 1 From the Windows desktop, click Start > Programs > Stanley ID Express > ID Express Server Configuration. 2 Click the Security tab. The Network Security Setup window appears 4 15

68 Chapter 4: First-time Server Software Installation and Configuration for a Wi-Q Access Control System Figure 4.7 Defining the kiosk and desktop station network addresses Enter a station description and its IP address, then click Add. 3 In the Description field, enter a kiosk or desktop station description. Commonly, stations are described based on their location. You may also want to differentiate between desktop and kiosk stations. Descriptions become especially helpful in identifying a station in the Transaction History Log. Kiosk or desktop stations do not have to be installed yet for this step to be completed. 4 In the Host IP Address field and description field, enter the IP address and description of the station. 5 Click Add. The station is added to the list below. Note To cancel or re-type an entry, click on the listed station and then click Remove. You cannot remove the default entry: Repeat steps 3 5 for each station. 7 Click Apply. The configuration is saved. 4 16

69 Chapter 4: First-time Server Software Installation and Configuration for a Wi-Q Access Control Setting up kiosk and desktop station characteristics There are several graphic and functional characteristics of kiosk and desktop stations that need to be defined. The Configuration Utility will allow you to set these up. Use these to customize your stations for clearer communication and better control in automatically issuing key cards. In making these decisions, make sure to think about how these decisions will affect all stations on the network. These graphic and functional characteristics will apply to all stations; a single station cannot behave differently than another station on the same network. Once these characteristics are set up, they can always be changed or adjusted later. The types of characteristics that need to be defined include: Customize the graphics that display in the header and body area of the station screen. Doing this associates the Stanley ID Express Station System with your university or business. Define the number of attempts that a person is allowed to to validate their identity in getting a key card before the user is locked out. Define the amount of time that a person will be locked out. Define the number of days that transaction history is kept before it is automatically purged. Decide whether you want to show the transaction photo in the transaction history. Decide whether to issue temporary cards. Decide how long temporary cards will be valid. Customize error or information messages that display on station screens. Set Up Kiosk and Desktop Station Graphics If the Stanley Security Solutions graphic is acceptable, you can skip the following procedure; it has no effect on how the system behaves. Remember you can change the appearance at any time in the future. 4 17

70 Chapter 4: First-time Server Software Installation and Configuration for a Wi-Q Access Control System To customize the graphics of the station screens 1 From the Windows desktop, click Start > Programs > Stanley > ID Express Station Configuration Utility. 2 If not already on the Appearance/Graphics tab, click Appearance/Graphics. The Appearance/Graphics window displays Figure 4.8 Customizing the graphics displayed on all kiosk and desktop stations Use this to replace the default Stanley graphic that appears in the top-left of the kiosk screen. Use this to replace the default background of the kiosk screen. Use this to replace the default header background of the kiosk screen. 3 Create if needed and save your custom graphic files to the location c:\program Files\Stanley ID Express. You can customize the following screen items. See Figure 4.9 for the different sections of the client screen that will be affected by the changes in the custom graphics section. Top left logo Background image Header background image Important When selecting graphics, if they are not the size of the screen, they will automatically be set up as a series of images to fill the section that is being configured. All text on the screen is configured in the next section of the software. The custom graphics section is just for the graphics that will appear on the ID Express screen. Compatible graphic formats include bmp, jpg, gif, and png. 4 18

71 Chapter 4: First-time Server Software Installation and Configuration for a Wi-Q Access Control Figure 4.9 Customizing the graphics displayed on all kiosk and desktop stations Top left logo Background image header Background image (shown as solid white here) 4 To customize the kiosk and desktop stations with your own logo graphic, click the browse button in the upper right-hand corner and navigate to the graphic file that will replace the default Stanley Security Solutions logo. Or simply type in the path and file name of the graphic file in the top left logo image file field. 5 To customize the kiosk and desktop stations with a different background graphic, click the second browse button and navigate to the graphic file that will replace the default background. Or simply type in the path and file name of the graphic file in the background image file field. Make sure that this graphic will not compete or be a distraction to the text that will be displayed on it. It should be a light background image. 4 19

72 Chapter 4: First-time Server Software Installation and Configuration for a Wi-Q Access Control System 6 To customize the kiosk and desktop stations with a different header background graphic, click the third browse button and navigate to the graphic file that will replace the default header background graphic. Or simply type in the path and file name of the graphic file in the header background image file field. Make sure that this graphic will not compete or be a distraction to the logo file that will display on it. 7 Click Apply. The appearance configuration is saved. Set Up Kiosk and Desktop Station Behaviors Behaviors are options that limit or extend functional characteristics of the Stanley ID Express Stations. The following table describes the behaviors or options that you can modify. In many cases the default or preset values of the behaviors may be acceptable as they are. If so, you can skip the following procedure. Remember you can change the behaviors at any time in the future. One set of behaviors applies to all kiosks and desktop stations on a network. Behavior Description Retry count Retry lockout timeout Idle timeout Kiosk communications timeout Number of retries allowed for entering Identity, Verify and LDAP Sign-on screens. A value of zero (0) will allow infinite retries. Time period in minutes the kiosk is locked after a transaction fails because retries are exceeded on the Identify, Verify or LDAP Sign-on screens. Number of seconds of idle time allowed on a user prompt screen before the transaction is cancelled. Number of minutes after which the server should generate an IT Admin notice (set up in Notifications). Default value Min Max attemp ts minutes seconds minutes 4 20

73 Chapter 4: First-time Server Software Installation and Configuration for a Wi-Q Access Control Behavior Description System error retry interval Resource down notification interval Time interval in minutes at which the kiosk should check the status of system resources (LDAP server, Server, DataConduIT server, etc.) and local resources (card dispenser and camera) when a resource is down. Time interval in minutes at which IT Admin notification and alarms should be generated when a system resource is down. Default value Min Max minutes Transaction history age Capture photo in transaction history Maximum age (in days) of transactions kept in the Transaction History log. Transactions older than this will be purged from the Transaction History log. If selected, the kiosk will take a picture of the user executing a transaction and store it in the Transaction History log days Selected Allow temporary keys Temp key expiration Allow unencoded keys to be inserted If selected, the Issue Temp button will be available on the Welcome screen. Number of days a temporary key is active. If selected, the card encoder/ dispenser will allow unencoded or blank key cards to be inserted. Selected 3 1 Unlimited days Selected Display Room If selected, the user's Room Assignment will be displayed on the Summary screen upon successful completion of a transaction (i.e. when a key card is encoded and issued). Selected 4 21

74 Chapter 4: First-time Server Software Installation and Configuration for a Wi-Q Access Control System Behavior Description Default value Min Max Display PIN If selected, the user's PIN will be displayed on the Summary screen upon successful completion of a transaction (i.e. when a key card is encoded and issued). Selected To set up kiosk and desktop station behaviors 1 From the Windows desktop, click Start > Programs > Stanley > ID Express Station Configuration Utility. 2 If not already on the Behavior tab, click Behavior. The Behavior window displays Figure 4.10 Customizing the behaviors on all kiosk and desktop stations Make changes to the timeout/ retry counts, transaction history, temporary keys, existing keys and room and PIN as needed. 3 Using the table above, change any or all of the default behaviors. 4 22

75 Chapter 4: First-time Server Software Installation and Configuration for a Wi-Q Access Control 4 Click Apply. The behavior configuration is saved. Set Up Kiosk and Desktop Station Text Messages You can customize the text messages displayed on the kiosk and desktop stations. You may want to do this if you need to give specific directions, or provide instructions in other languages. You can also use HTML tags and special characters as part of the text messages; they will be displayed on the screen as they would with any other web page. The following table describes the text messages that you can modify. In many cases the default text messages may be acceptable as they are. If so, you can skip the following procedure. Remember you can change text messages at any time in the future. One set of text messages applies to all kiosks and desktop stations on a network. Use up to 255 characters for a message text. Configura tion Screen Label Appears Default Message Text Header Header Header text that appears on each kiosk screen. Stanley ID Express A Kiosk Page Prompts Welcome Identification Verification LDAP Sign- On User instruction displayed on the Welcome screen. User instruction displayed on the Identification screen. User instruction displayed on the Verification screen. User instruction displayed on the LDAP Sign-On screen. Insert Card<br><br>or<br><br> B press Button for Temporary Card Enter Identification Information: Enter Verification Information: Enter Login Information: 4 23

76 Chapter 4: First-time Server Software Installation and Configuration for a Wi-Q Access Control System Configura tion Screen Label Charge Confirmation Insert Prox Card Assign Prox Card Messages Retries Exceeded Lockout Appears Default Message Text User instruction displayed on the Charge Confirmation screen. User instruction at the time a prox card is needed. User instruction to take newly assigned proximity card and present it to the proximity reader. Message displayed on the Summary screen when a transaction is unsuccessful due to the number of Identify, Verify, LDAP Sign-On or Face Detection retries have been exceeded. A fee will be assessed in order to receive a replacement key card. To proceed, press the I Accept button, otherwise press the Cancel button. Please Insert Card Please take card.<br><br><br><br>s wipe the card past the reader as shown. Maximum number of attempts exceeded. Restricted Area Access Lockout Transaction Timeout Transaction Cancelled Message displayed on the Summary screen when a client with an unauthorized IP Address attempts to access the ID Express Server. (Authorized IP Addresses are configured on the Security page of this application.) Message displayed on the Summary screen when a transaction is due to the user failing to respond to a prompt in the configured idle timeout. See Behavior page of this application to set the Idle Timeout seconds. Message displayed on the Summary screen when a transaction has ended as a result of the user cancelling the transaction. Authentication failed. Unauthorized access. Transaction timed-out. User failed to respond. Transaction cancelled. 4 24

77 Chapter 4: First-time Server Software Installation and Configuration for a Wi-Q Access Control Configura tion Screen Label Appears Default Message Text Successful Transaction System Error Occurred Identification Failed Verification Failed LDAP Authentication Failed Badge Not Found Magnetic Card Encoding Failed Magnetic Card Read Failed Message displayed on the Summary screen when a transaction has completed successfully (i.e. a card is encoded and dispensed). Message displayed on the Summary screen when a transaction is unsuccessful due to a system error. Message displayed on the Identify screen when the system cannot identify the user from the information provided. Message displayed on the Verify screen when the system cannot verify the student based on the information provided. Message displayed on the Sign-On screen when the system cannot authenticate the user based on the User ID and Password provided. Message displayed on the Summary screen when the user is found in the system but no badges using the configured encoding card formats can be found. See the Encoding page of this application for Card Format configuration. Message displayed on the Summary screen when an error occurs during the encoding of the magnetic card. Message displayed on the Summary screen when a card inserted into the kiosk's card reader/encoder cannot be read. Transaction complete. A System Error Occurred. Maintenance Required. Identification failed! Please try again. Verification failed! Please try again. Sign-On failed! Please try again. Badge not found. An error occurred encoding the Key Card. Please try again. <br><br> If the error persists, contact the Card Administration office. The Key Card could not be read. Please try again.<br><br>if the error persists, contact the Card Administration Office. 4 25

78 Chapter 4: First-time Server Software Installation and Configuration for a Wi-Q Access Control System Configura tion Screen Label Proximity Card Read Failed Appears Default Message Text Message displayed on the Summary screen when a card presented to the proximity reader cannot be read. A. The text string " " displays the TM symbol on a web page B. The text <br> inserts a single return on a web page. The Key Card could not be read. Please try again.<br><br>if the error persists, contact the Card Administration Office. To customize text messages 1 From the Windows desktop, click Start > Programs > Stanley > ID Express Station Configuration Utility. 2 Click the Custom Text Link. The Appearance/Text window displays Figure 4.11 Customizing the text messages on all kiosk and desktop stations Customize text messages for specific directions or use multi-lingual messaging to make sure all users can read and understand the message. 3 Using the table above change any or all of the default text messages. Use up to 255 characters for a message text. 4 26

79 Chapter 4: First-time Server Software Installation and Configuration for a Wi-Q Access Control 4 Click Apply. The text messages configuration is saved. Set Up Custom Workflows You may want to set up your own web pages to communicate policy or procedures specific to your site. For example, you may want to notify users of charges or direct them to call an administrator. You can set up web pages and their URLs for: Successful authentication for a temporary badge Successful authentication to update an existing badge Successful transaction Failed transaction Communicating or collecting charges or fees (for lost cards, etc) To set up custom workflows You must set up and test your own web pages and their transactions, each with its own dedicated URL, for each workflow before assigning URLs to the workflow configuration. 1 See your web administrator to set up web pages for any or all of these workflows. 2 From the Windows desktop, click Start > Programs > Stanley > ID Express Station Configuration Utility. 3 Click the Workflow Link. The Workflow window displays 4 27

80 Chapter 4: First-time Server Software Installation and Configuration for a Wi-Q Access Control System Figure 4.12 Customizing a workflow showing URL to display after a successful authentication of a temporary badge Input the URL that your web administrator has set up for any the workflows. 4 Input the appropriate URL or URLs. 5 To input a URL to enable the charge workflow, click the Behavior link and then select the charge confirmation checkbox. Doing this will activate the URL after charge accepted field. Otherwise the field is inactive. Set Up Custom Notifications You can set up ID Express to notify you via of many scenarios and even customize messages to go out to members of your staff. Note Make sure to set up your SMTP server before setting up custom notifications. See Configure SMTP (Simple Mail Transfer Protocol) on page 4-8. Standard situations that you can get notified of include: IT Admin notices Card Admin notices Notices sent to users of a successful transaction Notices sent to users of a failed transaction Notice that the card hopper is low. 4 28

81 Chapter 4: First-time Server Software Installation and Configuration for a Wi-Q Access Control You can also customize these standard messages with macros that include other information. Here s a complete list of the macros that you can use. Macro Description Use to... <Date> <Time> <DateTime> <LongDate> <Message> <TransType> Transaction date in MM/ DD/YYYY Transaction time in HH:MM AM format Transaction date and time in MM/DD/YYYY HH:MM AM format Transaction date in long format (example Monday, August 2, 2009) Transaction summary message Transaction type (issue temp key update existing key) Document when the transaction happened. Document when the transaction happened. Document when the transaction happened. Document when the transaction happened. <Kiosk> Kiosk description Your description of the particular kiosk where the transaction took place <KioskIP> Kiosk IP address The Internet protocol address of the particular kiosk <Outcome> Outcome of transaction Document what transaction took place. Outcomes include: transaction cancelled system error or post error retries exceeded timeout encoding error; badge not found; mag card or prox card read error all credentials deactivated <IDFIelds> Field used for identification Document the user by using the fields that you ve selected to identify users, for example, First name, Last name, badge number. <ASCID> ASC ID information <LdapID> LDAP User ID Usually the address of the user. 4 29

82 Chapter 4: First-time Server Software Installation and Configuration for a Wi-Q Access Control System Macro Description Use to... <PIN> Badge PIN (personal identification number) Document whose card was used in the transaction <Room> Room assignment Document the transaction room assignment <CardDispensed> Y/N indicating if card was dispensed to use. Document whether a card was dispensed. To set up notifications 1 From the Windows desktop, click Start > Programs > Stanley > ID Express Station Configuration Utility. 2 Click the notifications Link. The notifications window displays Figure 4.13 Setting up an notification message Input the addresses that you want to receive the notifications. Click [...] to see a list of macros to customize the message. Click Test Message to send a test message to the s addresses) listed. 3 Choose a standard message to be enabled and select the enabled checkbox. 4 Input the addresses to receive the notification message. You can input multiple addresses by inserting a semi-colon between the addresses. 5 Optional: modify the subject line by clicking the ellipsis button [...]. You can add a macro to the subject 4 30

83 Chapter 4: First-time Server Software Installation and Configuration for a Wi-Q Access Control line. For example, you can add <Kiosk> to let the recipient know which kiosk the message is about. 6 Optional: modify the message by clicking the ellipsis button [...]. You can add a macro to the message. 7 Click Test message to send a test to the recipient(s). 8 Check the message to see if it matches the macro formula. Set Up Kiosks to Read Cards ID Express can read magnetic stripe cards and proximity cards for Wi-Q databases. You can set up ID Express to read two different types of access cards: Magnetic stripe cards Track 2 Track 3 Proximity cards 26-bit cards 37-bit cards (contact factory) 37-bit OEM cards (contact factory) Prox Card 1000 To set up ID Express to read one magstripe card format and one proximity card 1 From the Windows desktop, click Start > Programs > Stanley > ID Express Station Configuration Utility. 2 Click the Card Formats Link. The Card Format window displays 4 31

84 Chapter 4: First-time Server Software Installation and Configuration for a Wi-Q Access Control System Figure 4.14 Setting up magstripe and proximity card read formats Select the magnetic card format that you want ID Express to read. Format details describe the card format as set up in Wi-Q. Select the proximity card format that you want ID Express to read. Format details describe the card format as set up in Wi-Q. Click Apply. 3 Optional: Under Magnetic Format, select a format that you need the ID Express kiosk to read. 4 Optional: Under Proximity Format, select a format that you need the ID Express kiosk to read. 5 Click Apply. 4 32

85 C h a p t e r 5 Day-to-Day Maintenance Reloading cards Now that you ve set up your Stanley ID Express Station System you need to be aware of some simple day-to-day maintenance features to keep the system in good running order. Two common maintenance tasks are recommended: reloading cards into the card hopper checking transaction history If notifications is enabled, the administrator of the system will be notified by an when the card hopper is low and another when the card hopper is empty. For information on enabling notifications for B.A.S.I.S. Access Control Systems, see page 3-35 and for Wi-Q Access Control Systems, see page

86 Chapter 5: Day-to-Day Maintenance Stanley ID Express Station Kiosks have a maximum capacity to hold 300 cards. To reload cards into the kiosk or desktop encoder For the kiosk station For the desktop station 1 Open the cabinet door using the keys provided with your system. 2 Unlock and slide the cover off of the encoder enclosure. See Figure 5.1. Figure 5.1 Desktop enclosure showing the card hopper Card hopper Encoder cover 3 Remove the card weight. See Figure Load up to 300 cards into the kiosk hopper. See Figure 5.2. Figure 5.2 Loading the cards into the card hopper Card weight Cards with stripe facing down Card hopper Load stripe down Put the stripe towards the kiosk cabinet door or toward the right side of the encoder enclosure (when facing the front of the encoder) Put the card weight back on top of the card stack. 6 Close and lock the cabinet door or encoder enclosure. Checking transaction history The Stanley ID Express Station System records all transactions and system errors in a database that you can review using the view transaction report feature. You can do this to find out: How often a kiosk is being used Whether the card hopper is getting low

87 Chapter 5: Day-to-Day Maintenance Troubleshoot an error that someone reports Periodically checking the transaction history report is important to do on a daily or weekly basis. The following are the types of data that are collected: Cancelled a card transaction cancelled by the user before the transaction was completed. This occurs when the user presses the cancel button. SystemError internal software error. RetriesExceeded a transaction that a user tried that exceeded the number of attempts that are granted. For example, if a maximum of three tries are allowed, the fourth try will generate this error. Succeeded a transaction resulting in an encoded card. Timeout a transaction that a user tried that exceeded the amount of time allotted to complete the transaction. UnauthorizedAccess an attempted card transaction where the user failed to enter correct identification or verification data. PostError a system error that occurs when a component is not found, such as card hopper empty or database not found. 5 3

88 Chapter 5: Day-to-Day Maintenance To run a transaction history report for all kiosk and desktop stations 1 From the Windows desktop, click Start > Programs > Stanley ID Express > ID Express Server Configuration. Figure 5.3 The Behavior screen showing the show transaction history button Select the transaction history start and end dates and status that you want to display and then click Submit. 2 On the left, select the start and end dates that you want the transaction history to display. 3 Select which types of transactions you want to report on. To report on all status history, select ALL. 4 Click Submit. The Transaction History Report configuration screen displays 5 4

89 Chapter 5: Day-to-Day Maintenance Figure 5.4 Transaction History Report configuration screen Adjust the report parameters and then click Submit. Clearing the picture or thumbnails options will cause the report to generate faster. 5 Make adjustments to the start date, end date, status, or other parameter. 6 Click Submit. The Report displays at the bottom of the screen Figure 5.5 The report showing the latest data 7 Scroll down as necessary to see all of the data. 5 5