Kaba evolo Manager V 5.2. Operating Manual

Transcription

1 Kaba evolo Manager V 5.2 EN

2 dormakaba Schweiz AG Mühlebühlstrasse Wetzikon Switzerland T: +41 (0) Copyright dormakaba 2018 All rights reserved. No part of this document may be reproduced or used in any form or by any means without prior written permission of dormakaba Schweiz AG. All names and logos of third-party products and services are the property of their respective owners. Subject to technical changes.

3 1 Regarding this document Validity Target group Content and purpose Availability of the documents Additional documents Term definition Warnings 9 2 Introduction For all tasks in staff and media management Components of a master key system Authorisation concepts Overview of types of authorisation and project mode Whitelist authorisation CardLink authorisation Overview of the technologies and types of authorisation 12 3 Installation and configuration System requirements Installing software Installing the single-user version Installing the multi-user version Configuring the program Registering the software licence Registering and upgrading the licence number Access authorisations 18 4 Overview Start screen (Home) Toolbars Start Navigator Device status, information and properties Wizards Lost media Replacement badge Read back service medium Generating new door group Create master Update a temporary master Create a new service medium Copy media Copy actuators Locker lock Locker lock Settings Options Changing the language User administration Adjusting the media management forms 29 6 Parameterising a master key system Creating/opening a project Creating a project 31 Kaba evolo Manager V 5.2 3

4 6.1.2 Opening a project Editing the database server Project properties General Security settings Access technology Security cards Description LEGIC/MIFARE security functions Master media Creating a programming master Master T Using a Master T Media Programming media Actuators Determining the battery status Programming actuators Migrating actuators with V3 to V Editing actuator properties Door groups Authorisations Setting up CardLink authorisation Setting up Whitelist authorisation Copying authorisations from media and actuators Time profiles Holidays/special days Validation Key plan Persons Transfer Traceback Logbook 77 7 Terminal Function Set up Adding a terminal Parameter setting Operation Programming media Updating the terminal or fully downloading data Authorisations 84 8 Wireless Integrating a wireless gateway Editing the wireless components Parametrising components Issuing write authorisation (launch) Putting wireless components into operation Starting wireless commissioning Connecting wireless components Updating wireless components Downloading traceback of wireless components Opening and closing components via wireless Releasing components with a time limit Blocking components Setting components to normal operation CardLink update 91 9 Data 93 4 Kaba evolo Manager V 5.2

5 9.1 Importing and exporting data Migrating properties to the project Delete reports KEM operator Limitations Creating a project Creating a programming master Wizards Operation Reception Process with CardLink Process with Whitelist Kaba CheckIn Creating a project for Kaba CheckIn Registering a Kaba CheckIn project in KEM Reading in/importing media Creating an actuator and assigning a master Setting up door groups Programming doors with the programmer Configuring and activating Kaba CheckIn Registering users in user administration Operation Opening CheckIn Arrival (check-in) Generating a block-key Room status Departure (check-out) Verification Switching from CheckIn to KEM Lost medium CardLink CardLink with terminal Whitelist Care and maintenance Data security Updating Kaba evolo Manager EAC Service Tool Programmer 1460 updating firmware Programmer 1364 updating firmware Actuators updating firmware Updating desktop reader Creating a programmer memory image Kaba evolo Manager V 5.2 5

6

7 Regarding this document 1 Regarding this document 1.1 Validity This document describes the product: Product designation: KEM (Kaba evolo Manager) Release: Target group This document is intended for specialist personnel only. The descriptions are tailored to specialist personnel trained by the manufacturer. The descriptions are no replacement for product training. This document also serves as a source of information for people performing the following tasks: Commissioning the product within the network Connecting the product to user software by programming customer applications Customer-specific adjustments with product parametrisation 1.3 Content and purpose The content of these instructions is limited to the following: Operation of the Kaba evolo Manager (KEM) software of the Kaba CheckIn software of the KEM Operator software Putting wireless components into operation Putting the terminal into operation Installing the multi-user version Using the EAC Service Tool 1.4 Availability of the documents Supplementary documentation is available on the Kaba website. Technical manuals can be found in a secured area of the website. Access is only granted after a valid login. An account must be set up before logging in for the first time. Opening login screen: 1. Open your internet browser and go to 2. Choose your language in the top right-hand corner of the screen. 3. Under 'Products', choose either the 'Access Management' or 'Workforce Management' product division. 4. In the top right-hand corner of the screen, click on the following symbol: 5. Enter your address and password to log in or create a new account (see below). Kaba evolo Manager V 5.2 7

8 Regarding this document The technical manuals can be found under 'Downloads'. Creating an account: 1. Click 'Create account'. 2. Fill in the data fields and confirm your entries. A confirmation link will be sent to your address. 3. Click on the confirmation link in your to activate your account. 1.5 Additional documents The following documents are available from the sales partners: Technical manual Programmer 1460 Programming and signals user manual evolo system description Wireless planning guideline 1.6 Term definition This user manual contains specialist terms and expressions that are explained in the glossary. In order to make reading the manual easier, the following short designations have been used in this document. Short designation Product designation KEM software Kaba evolo Manager Programmer 1460 Programmer 1460 Programmer 1364 Programmer 1364 Desktop reader Desktop reader Terminal Terminal Mechatronic cylinder Mechatronic cylinder Digital cylinder Digital cylinder c-lever c-lever evolo evolo elolegic elolegic elostar elostar Gateway Wireless gateway Actuator Component 8 Kaba evolo Manager V 5.2

9 Regarding this document 1.7 Warnings This manual contains information that you must observe for your own personal safety and to avoid material damage. The information regarding your personal safety is highlighted via a warning triangle; information regarding isolated material damage does not have a warning triangle. Depending on the hazard level, the warning information is displayed in decreasing order as follows: DANGER High risk Indicates an imminent danger which could cause severe physical injury or death. WARNING Medium risk Indicates a possibly dangerous situation which may lead to severe physical injury or death. Low risk CAUTION Indicates a possibly dangerous situation which may lead to minor physical injury. NOTICE Important information on the correct use of the product. Failure to comply with these instructions could lead to malfunctions. It is possible to damage the product. The warning information for the highest level in each case is always used when several hazard levels occur at the same time. If warning information warns about personal injury, the same piece of warning information may also warn about material damage. Other warning symbols: General hazard Risk of explosion Danger from electric voltage ESD: Danger from electrostatic discharge Useful tips and information regarding safe operation of the product are labelled as follows: Tips for usage, useful information. These help to make the best use of the product and its functions. Kaba evolo Manager V 5.2 9

10 1 4 GHI 7 PQRS ENTER 2 ABC 5 JKL 8 TUV 0 3 DEF 6 MNO 9 WXYZ E Introduction 2 Introduction 2.1 For all tasks in staff and media management Staff and media management is an important component of the security concept. The KEM software fulfils both management tasks. Programming of MIFARE and LEGIC advant Kaba evolo components, as well as Kaba elolegic and Kaba elostar components Management of staff lists Logged media outputs, withdrawals and losses Logged modifications to the master key system Granting of time-limited authorisations Granting of permanent authorisations Reading out of events to the actuators (traceback [} 6.13]) 2.2 Components of a master key system Examples of hardware components and the tool chain: 2.3 Authorisation concepts The KEM software supports the two types of authorisation, Whitelist and CardLink. 10 Kaba evolo Manager V 5.2

11 Introduction Overview of types of authorisation and project mode Type of authorisation CardLink Whitelist Project mode If a project mode is used, this setting relates to all components in the project. UID in terms of organisation Card ID UID in terms of organisation Safe UID Card ID Traceback data as UID Traceback data as CID UID function, traceback data as UID Encrypted UID, traceback Encrypted CID CardLink and Whitelist The CardLink or Whitelist authorisation is applied depending on the actuator settings Whitelist authorisation UID in terms of organisation Whitelist CardLink UID function, traceback data as UID Traceback as UID Safe UID Whitelist Encrypted UID Card ID Whitelist Encrypted CID CardLink Traceback data as CID For Whitelist authorisations, the media are entered with access authorisation in the actuators' memory. The media not entered in the actuators' memory are not granted access authorisation. An actuator's memory can register up to 4000 media (TouchGo E310 up to 2000 media). The authorised programming master is required to change authorisations on the actuators CardLink authorisation With this concept, the access authorisations are written to the user media. These can then be applied to the actuators. The authorisations are managed via the user media. No management tasks need to be carried out on the actuators as it is not necessary to manually program the actuators for this concept. A single initialisation of the actuators is sufficient for Card- Link. This type of authorisation also supports validation (activation for a specified time) of user media for access authorisation at standalone actuators. Advantages include: A CardLink authorisation can be written directly to the user medium. An individual selection of doors or door groups can be assigned to a visitor on the allocated user medium. For additional user media, there is no need to configure the actuators further. In the event of loss, validation ensures that user media only continue to be valid until the validation period has expired. Kaba evolo Manager V

12 Introduction Overview of the technologies and types of authorisation Authorisation types Technologies Whitelist UID Whitelist CID CardLink 1.0 CardLink 1.1 Media TRB* Safe UID Media MIFARE classic MIFARE DESFire LEGIC advant [1] LEGIC advant [1] Actuators MultiRFID device (MRD) [2] elolegic (LEGIC prime) - [1] elostar - Legend: is possible is not possible * Media traceback [1] LEGIC (safe) UID [2] Authorisation types dependent on the technology used 12 Kaba evolo Manager V 5.2

13 Installation and configuration 3 Installation and configuration 3.1 System requirements Before the KEM software can be installed, the Windows operating system must be updated to the latest version. The add-on components are part of the installation and will be installed, if not already present on the system. The following table shows the minimum requirements for installation. Operating system (32/64 bit) Processor Main memory Hard disk capacity Interfaces Screen resolution Add-on components Compatible Windows 10 Windows 8 and 8.1 Windows 7 Windows Server 2012 Windows Server 2008 Windows Server 2008 R2 1.4 GHz or higher (2.4 GHz recommended) 1 GB (2 GB RAM recommended) 6 GB* 2x USB 1024 x 768 pixels (1920 x 1200 pixels recommended).net Framework 3.5 SP1 and 4.0 Client Profile Microsoft SQL Server 2014 Express SP2 Microsoft System CLR Types for SQL Server 2016 Microsoft SQL Server 2016 Management Objects Crystal Reports Basic for Visual Studio 2010 Kaba EAC Service Tool Windows Installer 4.5 SQL Server 2012 Express * Including all Microsoft add-on components A multi-host mode can only operate within the same domain. Otherwise a corresponding trust must be set between the two domains. 3.2 Installing software Installing the single-user version The software can only be installed on the computer with administrator rights. Any installed firewall must be deactivated for the duration of the installation. The software is installed using an installation wizard (InstallShield). Install the software including SQL Server. After downloading the software package, start the installation wizard. The installation wizard runs through the installation. Read and accept the software licence agreement. If the licence agreement is not accepted, the software cannot be installed. Kaba evolo Manager V

14 Installation and configuration The installation directory can be modified by selecting the 'Change' button. We recommend that you keep the standard settings for the target folder, e.g.: C:\Program Files (x86)\kaba\kaba evolo manager V5.X\ (64-bit system). Pay attention to the messages and notes on the screen during installation. Only continue or restart the PC when prompted Installing the multi-user version The software can only be installed on the computer with administrator rights. Any installed firewall must be deactivated for the duration of the installation. A multi-host mode can only operate within the same domain. Otherwise a corresponding trust must be set between the two domains Installing the server Do not close the Microsoft DOS window while installing the SQL server. Otherwise the SQL server will not be fully installed. 1. Install the software including SQL server. 2. Set up the network drive/folder: The client user and SQL server must have service access rights to this network drive Installing the client The software is installed using an installation wizard (InstallShield). 1. Insert the software DVD into the DVD drive and wait a moment until the installation wizard starts. 2. The installation wizard runs through the installation. Step 3: The SQL server must not be installed on the client. The Skipped status is displayed in the wizard for Microsoft SQL Server. 3. The installation wizard checks which software components still need to be installed and displays them in a window. 4. Software licence agreement step: Read and accept the licence agreement. If the licence agreement is not accepted, the software cannot be installed. 5. In the target folder step: The installation directory can be individually modified by selecting the 'Change' button. We recommend that you keep the standard settings for the target folder, e.g.: C:\Program Files (x86)\kaba\kaba evolo manager V5.X\ (installation directory structure of a 64-bit system) Establishing a connection to the SQL server 1. Start the server on which the database (SQL Server) has been installed. 2. Launch the Kaba evolo Manager software on the client. 3. Close the first Kaba evolo Manager dialogue window or select Cancel. 4. Select the Options... menu from the Start toolbar. 5. Navigate to the General tab in the Options window. 6. In the Start dialogue section, activate the Display database server checkbox. 7. Click on the OK button. 14 Kaba evolo Manager V 5.2

15 Installation and configuration Opening a project on the database server or creating a new one Procedure for creating a new project 1. Launch the Kaba evolo Manager software on the client. 2. Select New project [} 6.1.1] (Ctrl+N) to create a new project. 3. Follow the instructions in the wizard. 4. Select the database server. If the server does not appear in the list, the address can also be entered, e.g. 'Computer Name (SQL Server)\ KABAKEYSYSTEMV3'. 5. Enter a project name and then click on the Next button. 6. Continue to follow the wizard. Procedure for opening a project 1. Launch the Kaba evolo Manager software on the client. 2. Select the database server from the list for an existing project. If the server does not appear in the list, the address can also be entered, e.g. 'Computer Name (SQL Server)\ KABAKEYSYSTEMV3:'. 3. Select the project name (existing project). 4. Click on the Open button. Kaba evolo Manager V

16 Installation and configuration Shared folder for client/server SQL export The SQL server and the client require full access to a joint folder. 1. Select the Options menu from the Start toolbar. 2. Navigate to the Advanced tab in the Options window. 3. Specify the network path of the shared folder in the Shared folder for client/server SQL export section (e. g. \\Server\Share). Note: Windows users must log in as administrators. 4. Click on the OK button. 3.3 Configuring the program Once-only program configuration following software installation. The first software start-up following installation must be carried out as an administrator. The configuration wizard starts. 16 Kaba evolo Manager V 5.2

17 Installation and configuration The configuration wizard runs through the configuration. Additional basic settings step: The KEM operator offers a greatly simplified user interface for the KEM software. However, this means there are some functionality limitations. [} 10.1] License mode step: The product ID (licence number) required for this step can be found on the licence card Registering the software licence In order to register the product ID (licence number), fill out the form and send it to the specified licensing centre in one of the following ways. Print out the completed licence form and send it to the specified fax number. Click on the Mail button to send the completed form to Kaba by Registering and upgrading the licence number Registering the software licence. [} 3.3.1] 1. Select the 'Register licence number' button in the Start toolbar. 2. Enter the (upgrade) licence number. The fields below open with a red background. 3. Enter the registered licence number. Both licence numbers have been entered. 4. Close the window by clicking on OK. Kaba evolo Manager V

18 Installation and configuration 3.4 Access authorisations The KEM software manages sensitive and security-relevant data. Increased data security is achieved with the user administration [} 5.3] by restricting authorisations. 18 Kaba evolo Manager V 5.2

19 Overview 4 Overview 4.1 Start screen (Home) The start screen makes all functions available in the required sequence. The start screen helps new users to navigate the system. The screen elements help with the following tasks: Setting up the basics, organisation and time profiles Defining access using authorisations, the key plan or reception Transferring access data to the programmer, the wireless gateway and then to the individual actuators Displaying reports from the logbook or the traceback data Completing more complex tasks with ease using the wizards 4.2 Toolbars Start All settings and data functions for the software are arranged thematically in the Start toolbar. Settings Options See [} 5.1] Kaba evolo Manager V

20 Overview Languages See [} 5.2] User administration See [} 5.3] Register licence number See [} 3.3.2] Kaba EAC Service Tool See [} 15] Media management forms See [} 5.4] Data Import See [} 9.1] Export See [} 9.1] Delete reports See [} 9.3] Terminal See [} 7] 20 Kaba evolo Manager V 5.2

21 Overview Navigator All functions which are needed for everyday work (like the start screen) are arranged thematically in the Navigator toolbar. Navigator Home Start screen See [} 4.1] Set up Basics Media Actuators Master Door groups Terminals Gateways See [} 6.5] See [} 6.6] See [} 6.4] See [} 6.7] See [} 7] See [} 8] Organisation Persons See [} 6.11] Time profiles Access Authorisations Key plan Time profiles Validation Holidays/special days CardLink authorisation Whitelist authorisation Actuator group assignment CardLink configuration Overview Electronic CardLink/Whitelist Mechanical Group right (CardLink) Door group assignment See [} 6.9] See [} 6.9.2] See [} 6.9.1] See [} 6.8.1] See [} 6.8.2] See [} ] See [} ] See [} 6.10] Transfer Transfer (to programmer, gateways and actuators) See [} 6.12] Reception Reception (CardLink and Whitelist) See [} 11] Reports Traceback Actuator Medium See [} 6.13] Logbook Logbook list See [} 6.14] Accessories Wizards Working with wizards See [} 4.4] 4.3 Device status, information and properties The status bar displays all connected devices as enabled or inactive. The status of the desktop reader and of the media configurations is also displayed for your information. 1. Select the 'Device status' button to open the information window. 2. The connected devices can be manually connected or disconnected in this window if the tick is removed from the 'Automatic' checkbox. Kaba evolo Manager V

22 Overview 3. In addition, you can click on the information symbol in order to see information about the desktop reader, and to view or adjust programmer properties (F4\'Show programmer properties...' button), as shown in the following example using a LEGIC desktop reader. Additional information about security cards C1 and C2 can be found in the evolo system description. 4.4 Wizards This chapter covers all the wizards available in the KEM software. In the program selection, only wizards which can be used with the selected technology are offered Lost media This wizard helps you take the necessary steps to keep the site secure. MIFARE LEGIC advant elolegic elostar Replacement badge This wizard helps you create a replacement badge while maintaining site security. MIFARE LEGIC advant elolegic elostar Read back service medium This wizard reads traceback and status data of the components from the service medium into the project. MIFARE LEGIC advant elolegic elostar Generating new door group This wizard helps you create new door groups. MIFARE LEGIC advant elolegic* elostar * Only possible for U-line 22 Kaba evolo Manager V 5.2

23 Overview Create master This wizard helps you to create a programming master. MIFARE LEGIC advant elolegic elostar Update a temporary master This wizard helps you update a Master T. The wizard is only enabled once the security card has been read in. MIFARE LEGIC advant elolegic elostar Create a new service medium This wizard helps you create a service medium. The service medium is needed to block individual badges at specific doors. MIFARE LEGIC advant elolegic* elostar * A prime card can be converted into a service medium. This does, however, result in the following limitation: The status cannot be read Copy media This wizard helps you copy the authorisations from one medium to other media. MIFARE LEGIC advant elolegic elostar Copy actuators This wizard helps you copy the authorisations from one actuator to other actuators. MIFARE LEGIC advant elolegic elostar Locker lock This wizard helps you create or read a locker lock medium. MIFARE LEGIC advant elolegic elostar Locker lock This wizard helps you create or read media for locker lock The following are supported: MIFARE LEGIC advant elolegic elostar Kaba evolo Manager V

24 Overview 24 Kaba evolo Manager V 5.2

25 Settings 5 Settings Various basic settings are available for the KEM software. 5.1 Options Select the 'Options' menu from the Start toolbar (Ctrl+Shift+O). General General Authorisation settings Accept time profile and Master B selection for Whitelist authorisations Automatic tab switching (user media/actuators/ door groups) The selected settings are automatically accepted in the authorisation window. Programming help for experienced users. Start-up dialogue Display start-up dialogue Load last opened project Database server Miscellaneous Selecting elements in the lists Suppress 'New time profile' dialogue With this option, the start-up dialogue can be switched on or off. The project (key plan) last edited is opened. (If only one project is available, it will be opened.) If a client/server variant was selected, the respective database server is displayed in the dialogue. In the case of the authorisations, the rows are marked with the elements included in the selection. This suppresses the dialogue for selecting time profiles V2 and V3 or V3 and V4. Kaba evolo Manager V

26 Settings Automatic loading of the key plan in the programmer Using this option, transfer of the key plan to the programmer can be automated. Colours The colour of various elements can be changed to provide better guidance. Advanced Advanced Log Collect debug information in the background Support Kaba Support Provide package Information about the program behaviour is retained in a file. This file aids support during troubleshooting. Creates an and adds the data package with all the following information. Registration Project data Log files Login options 26 Kaba evolo Manager V 5.2

27 Settings Use single sign-on (SSO): The Windows login is adopted for KEM. Shared folder for client/server SQL export For client/server SQL export The Windows login is adopted for the KEM software. A user logged into Windows is therefore also logged into KEM. Enter the network path which can be used by both KEM and the remote SQL server. 5.2 Changing the language The Kaba evolo Manager software is available in multiple languages. 1. Select the Languages menu from the Start toolbar. 2. Select the desired language from the list. You can then continue working in the chosen language immediately. 5.3 User administration Users can be added, configured and deleted using the user administration menu. Different roles and rights (user rights) can be assigned to these users. User rights with different roles Different roles can be assigned to the users: Role User Description Unable to view Traceback Logbook User management Super user Able to view Traceback Logbook Unable to view User management Administrator Only reception Kaba CheckIn user ReadOnly user This user has unrestricted rights. Authorisation is only valid for the reception area. 'Room reservation' application only applies to Kaba CheckIn users. Able to view Access authorisations This user cannot make any changes. The roles specified in the KEM software cannot be modified. User rights for wireless commissioning The user rights for wireless commissioning can be modified in User roles. These rights can only be modified by users with the user management right. User rights for Master T The user rights for Master T can be modified in User roles. These rights can only be modified by users who have these rights themselves. Kaba evolo Manager V

28 Settings Only users set as having 'Full access' in User roles under the 'Basic settings' sub-item can add a Master T. Only users who have the required rights can execute the 'Update a Master T' function. Managing user authentication based on requirements Password (Kaba evolo Manager) and local user (Windows) Domain user (Windows network) Use LDAP (network directory service) User administration should be registered separately for each project. A pre-configured project can be passed on. Adding a user 1. Select the 'User administration' menu from the Start toolbar. 28 Kaba evolo Manager V 5.2

29 Settings 2. Click on the 'New' button. A new user is added on the left-hand side. 3. Register the user properties on the right-hand side. 4. Activate the 'Kaba evolo Manager password' option. 5. Select the 'Change' button to open the password dialogue. 6. Enter the password. 7. Click on the 'OK' button. User authentication with a password is activated. The administrator is activated in the user rights as the first user. If only one user is registered, the Admin [Administrator] user right cannot be modified. 8. Exit user administration by clicking on the 'Close' button. Deleting a user 1. Select the 'User administration' menu from the Start toolbar. 2. Select the user to be removed. 3. Click on the 'Delete' button. The user is removed. 4. Click on the 'Close' button. When the last user (Admin) is deleted, user administration is disabled. Changing the user password 1. Select the 'User administration' menu from the Start toolbar. 2. Select the user. 3. Navigate to the 'Authentication' menu. 4. Click on the 'Change' button. 5. Enter the password. 6. Click on the 'OK' button. 7. Click on the 'Close' button. 5.4 Adjusting the media management forms 1. Select the 'Media management forms' button from the Start toolbar. 2. Activate the 'user-defined' option. Kaba evolo Manager V

30 Settings 3. Make changes in the required section. The 'Media issue' menu is shown here as an example. 4. Click on the 'Save and close' button. Tip: If only minor text amendments are required, the standard text can be copied to the clipboard and inserted in the user-defined field. The desired changes can then be made there. Format rules The following applies to the formatting of user-defined texts: Image data: Image data format Text formatting JPG or GIF (max. 100 Kbytes) Logo 160 x 40 pixels Arrow 100 x 40 pixels HTML tags HTML tags: Notation Result Bold <b>example</b> Example Underlined <u>example</u> Example Italics <i>example</i> Example Larger font <big>example</big> Example Smaller font <small>example</small> Example Line break Example<br>Text Example Text 30 Kaba evolo Manager V 5.2

31 Parameterising a master key system 6 Parameterising a master key system 6.1 Creating/opening a project Creating a project The software operates based on projects. A project must first be created before key plans, users or media can be created. A new project can be created either when the program starts or using the 'File' menu. Procedure 1. Select the option 'New project' (Ctrl+N) in the selection window when the program starts or in the 'File' menu Note: The checkbox to skip the dialogue when the program starts is not activated. View when the program starts. View in the 'File' menu. The wizard for creating a new project is launched. Kaba evolo Manager V

32 Parameterising a master key system 2. Click on the 'Next' button. 3. Select the project type (see 'Project type' table). 4. Click on the 'Next' button. 5. Select the database server from the list. Note: Skip this step if 'Display database server' is not selected in 'Options'. See Chapter [} 5.1]. The 'Database server' drop-down menu is not visible in this case. If the server is not in the list, you must add it as described in 'Editing the database server' [} 6.1.3]. 6. Enter the project name in the 'Project name' input field. 7. Click on the 'Next' button. 32 Kaba evolo Manager V 5.2

33 Parameterising a master key system 8. Select the identification technology (LEGIC; see 'Identification technology' table). 9. Click on the 'Next' button. 10. Select an authorisation type (see 'Authorisation type' table). Additional information on the types of authorisation can be found in Chapters [} 2.3.2] and [} 2.3.3]. 11. Click on the 'Next' button. 12. Select a project mode (see 'Authorisation mode' table). For more information about the project mode, see Chapter [} 2.3.1]. 13. Click on the 'Next' button. Kaba evolo Manager V

34 Parameterising a master key system 14. Select the traceback properties (see 'Traceback properties' table). 15. Click on the 'Next' button. 16. Read in the security card (see 'Security cards' table). The security card can also be read in later. 17. Click on the 'Next' button. 18. Select 'Create key plan' and fill in the input fields. Select 'Do not create key plan' if you would like to create or import the key plan later. 19. Click on the 'Create' button. 34 Kaba evolo Manager V 5.2

35 Parameterising a master key system 20. Click on the 'Finish' button. The new project and the key plan have been created and can be parameterised. Parameter tables The tables contain notes for parameterising when setting up a project. Project type table Project type Description Read in import file New MIFARE project New LEGIC advant, elolegic or elostar project New mechanical project A KIF file (project/site) is imported. A MIFARE project is created. Once a technology has been selected, it cannot be changed. A LEGIC project is created with one or more identification technologies. It is possible to switch between the technologies offered at any time. A mechanical project is created. An empty project will be created only for mechanical components. This project can be upgraded with electronic components later by enabling the LEGIC/elolegic/elostar or MIFARE technology. Identification technology table Identification technology elostar V2 elolegic V2/V3 LEGIC advant V4 Description The project is created for elostar V2 components. The project is created for LEGIC V2 or V3 components. The project is created for LEGIC V4 components. Authorisation type table Type of authorisation Description CardLink Whitelist CardLink and Whitelist Authorisations are saved to the media so that the actuators only need to be configured once. The authorisations are saved in the actuator. All actuators can be individually set up for CardLink or for Whitelist. (Mixed use is not possible for the actuators.) Project mode table Kaba evolo Manager V

36 Parameterising a master key system Project mode Description Card ID The media are identified via a programmed card number. The media must be configured accordingly for this purpose. Safe UID (default) The UID is also encrypted and verified. Special applications on the media are required to do this. These are available by default on Kaba media. UID in terms of organisation Only the UID is used. This mode is suitable for the 'Whitelist' authorisation type for organisational applications without stringent demands in terms of security. Traceback properties table Properties Description Traceback disabled No traceback is written. Write traceback to actuator The actuator writes traceback entries to its memory. Write traceback to actuator and medium The actuator checks for a CardLink authorisation to see whether the medium requires a traceback entry. The actuator then writes the traceback entry to the medium and to its memory. Kaba recommends only enabling the actuator traceback. When you activate the media traceback, the writing and reading speed diminishes. This results in higher actuator power consumption and a shortened battery life. Media traceback is only possible for MIFARE DESFire and LEGIC advant 14443A media. Security cards table Project mode MIFARE security card Card ID C CardLink C Others LEGIC security card Information C1 or C2 16 memory locations are available per desktop reader for LEGIC security cards C1 or C2. For a new project with other security cards, a memory location needs to be deleted in the desktop reader properties. Opening a project In order to open an existing project, select one of the last opened projects in the 'File' menu or click on the 'Open' button. 36 Kaba evolo Manager V 5.2

37 Parameterising a master key system All projects on the selected database server are displayed in the 'Open project' dialogue. Note: A database server can only be chosen if you have selected this in 'Options/General/Display database server'. See Chapter [} 5.1]. Following options: Note: If 'Display database server' is not selected in the options, only displayed projects can be selected and opened. Select an entry from the project list. Click on the 'Open' button. Select a database server from the list. See 'Editing the database server: Selecting the database server' [} 6.1.3] Editing the database server Note: 'Display database server' must be selected under 'Options' in order to make use of this option. See Chapter [} 5.1]. Selecting the database server Kaba evolo Manager V

38 Parameterising a master key system 1. Select the list entry. Add favourite: see 'Adding database servers'. Local database server Server XY Note: The local database server cannot be selected from the favourites. In this case, use the 'Local database server' entry. Adding database servers 1. Click on the '...' button. The 'Favourites' selection window is displayed. 2. Click on the 'Load' button. All available SQL servers are displayed. 3. Select/deselect the desired server(s) as a favourite. If a server is a favourite, the star will be yellow in colour. 4. Click on the 'Save' button. Selected servers can be chosen from the list. See 'Selecting the database server'. Adding a database server manually If your desired database server is not listed, you can add the server manually. 38 Kaba evolo Manager V 5.2

39 Parameterising a master key system Procedure: 1. Enter the name/path of the server in the 'Add SQL server manually' row 2. Click on the 'Add' button. 3. Select the added server as a favourite. 4. Click on the 'Save' button. The server can be selected from the list. 6.2 Project properties General The project properties can be displayed by using the F4 command key. Security back-up MIFARE LEGIC advant elolegic elostar Activate security back-up A security back-up is automatically created in the directory specified under the security back-up path. Back up when opening the project The security back-up is created when opening the project. Back up when closing the project The security back-up is created when closing the project. Traceback settings Traceback disabled No traceback is completed. Kaba evolo Manager V

40 Parameterising a master key system Write traceback to actuator Write traceback to actuator and medium When programming a medium, always read medium traceback Write the traceback to the actuator. Write the traceback to the actuator and medium. Before each time a CardLink authorisation is programmed, the traceback data is first read into the medium. Security settings Identification UID or UID in terms of organisation. Actuator binding (SPC) Actuator programming counter enabled Disable manual programming Follow-up time in days Display programmer properties and PIN protection Upgrades Use terminal Use wireless Not used For actuator export For actuator export and clock adjustment Numbering system of the actuator configuration. This ensures that no outdated configuration can be loaded into the actuator. Period for which a medium can still be validated on a validation actuator after the validation time has expired. The programmer properties are displayed and can be modified. PIN protection can be activated. Activates the terminal for authorisation transfer. Activates the wireless option for authorisation transfer. Note: When using elolegic, only for U-Line Security settings The SPC (system protection code) is additional protection for a master key system, as following activation only components of the master key system that belong together can exchange data and authorisations with one another. Settings The settings for the system protection code can be configured in the project properties. This is described in Chapter [} 6.2.1]. Activation of PIN protection is recommended when using an SPC. The following properties are to be observed: The actuator binding (SPC) and PIN protection are only supported with the Programmer If the export to the Programmer 1460 and to the components has not been completed, an existing SPC is valid. An INI reset of all actuators is required to deactivate the SPC. These must then be re-programmed. 40 Kaba evolo Manager V 5.2

41 Parameterising a master key system The SPC settings for the components can no longer be modified. Procedure to activate PIN protection 1. Open the project properties (F4). 2. Select the 'Display programmer properties and PIN protection' button. 3. Select 'Set PIN'. 4. Enter a four-digit numerical PIN. Kaba evolo Manager V

42 Parameterising a master key system 5. Click on the 'OK' button. Once a PIN has been activated and the programmer has been connected, you have the following options: Enter the PIN in the programmer. Reset the PIN. Note: All data is deleted from the programmer. The programmer must be re-synchronised with the software. Deleting a PIN If you would like to delete a PIN, you can do so by means of the 'Delete PIN' button in the 'Programmer properties' window. Importing protected data from the programmer The data of a master key system protected by an SPC can only be imported from the programmer if the programmer's SPC and the software's SPC match Access technology Select the access technology and access mode. The following table displays all possible combinations: Access authorisations MIFARE LEGIC advant elolegic elostar CardLink Activate CardLink Whitelist Activate Whitelist CardLink and Whitelist Activate CardLink and Whitelist System version 42 Kaba evolo Manager V 5.2

43 6.3 Parameterising a master key system V4 Time profile version V3 Time profile version V2 Time profile version Security cards The security cards are used in a Kaba LEGIC or a MIFARE environment. The functions of the security cards vary depending on the technology used Description There are two security cards for LEGIC advant: Security card C1 for the site-specific segmentation of media. Security card C2 for the initialisation of the site with desktop readers and validation actuators in CardLink. Security card C is available for MIFARE: Security card C is required to integrate the site-specific key of a MIFARE environment in the master key system. This defines the site key as well as the memory organisation in the user media. Kaba evolo Manager V

44 Parameterising a master key system LEGIC/MIFARE security functions Security card C1/C2 (LEGIC) (Can only be loaded with project mode Card ID or CardLink.) MIFARE LEGIC advant elolegic elostar Configure LEGIC media Security card C1 for segmenting, reading and writing to the media. Security card C2 for permanently reading and writing to the media. Security card C (MIFARE) (Can only be loaded with project mode Card ID or CardLink.) Read site key into project Security card C is read into the project and the project is customised. A security card C does not need to be presented for the same desktop reader after each system restart. Active LEGIC advant technologies Auto Manual LEGIC prime LEGIC advant 14443A LEGIC advant Authorisation status (colour statuses) Red Orange Green Desktop reader is not authorised Read and write functionality for media is enabled (LEGIC) Segmenting of media is possible Legend = property available = property not available 44 Kaba evolo Manager V 5.2

45 Parameterising a master key system Master media Creating a programming master The access authorisations for user media can be transferred to the actuators using a number of different programming types, using the up-to-date programming media (Master A, Master B and Master T). Programming masters can only be initialised within the MIFARE technology. Programming masters for LEGIC technology are registered under the basic settings. Authorisations Master A A/B B Whitelist without tool chain -- Recommended Possible Whitelist with tool chain -- Possible Recommended CardLink Possible -- Recommended Combination of CardLink and Whitelist Possible Possible Recommended Procedure 1. Open the 'Wizards' menu from the Navigator toolbar. 2. Launch the 'Create master' wizard. 3. Follow the instructions in the wizard. 4. In step 2, place security card C on the desktop reader. 5. In step 3, place the new programming master A on the desktop reader and fill in the 'Designation' field in the wizard. Kaba evolo Manager V

46 Parameterising a master key system 6. In step 4, click on the 'Finish' button Master T The temporary master (master T) is a special type of programming media for standalone components. Temporary master media can be used in a master key system. These are only valid for a certain period of time and have limited functionality. A master T can only be used if the site components are first configured with the programmer. Updating master T Update a temporary master medium using the wizard. 1. Open the 'Wizards' menu from the Navigator toolbar. 2. Launch the 'Update temporary master' wizard. 3. Place a master T medium on the desktop reader. 4. Click on the 'Next' button. 46 Kaba evolo Manager V 5.2

47 Parameterising a master key system 5. Select the validation period. After making the selection, the expiration time for the validation will be shown. 6. Click on the 'Next' button. The medium is now valid as a master until that expiration time. 7. Exit the wizard by clicking on the 'Finish' button Using a Master T Master T for LEGIC: Master T media for LEGIC can be defined with the software. A Master T is derived from the security card and can only be used as Master T. Master T for MIFARE: Master T media for MIFARE can be defined with the software. A Master T is derived from security card C. The Master T media for LEGIC and MIFARE have the following properties: Can be used in both CardLink and Whitelist authorisation mode. Can update actuators (actuators must be configured). Kaba evolo Manager V

48 Parameterising a master key system The clock of the actuators can be set. Can read traceback. 6.5 Media User media are required for authorisation of the users at the actuators Programming media Set up media for CardLink See [} ] Set up media for Whitelist See [} ] Prepare media in Whitelist for CardLink See [} ] If the authorisation type is Whitelist or CardLink and the project mode is Card ID, the Card ID must be assigned manually for new media. This cannot be changed retrospectively. If the Card ID is already assigned to a medium, this is displayed in the dialogue. 6.6 Actuators Determining the battery status The battery status of the actuators can be checked under the following conditions: In a wireless environment. With the Programmer 1460 (directly at the actuator). In a CardLink environment. With the terminal. With the desktop reader (only in the event of low power) Programming actuators Set up actuators for CardLink See [} ] Set up actuators for Whitelist See [} ] Migrating actuators with V3 to V4 The advanced functions Time profile V2, TimePro 'Day/Night drive' and S-module are no longer supported after migrating. Requirements The hardware components support V4. The master media for V4 are registered in the project. The time profiles for V4 are registered in the project. Only supported time profiles are copied. The properties and functions are transferred to the same properties and functions of V4. The existing authorisations are retained. Migrating with context menu It is not possible to undo a migration. We recommend making a back-up copy of the existing project before migrating. 1. Open the 'Basic settings' menu from the Navigator toolbar. 2. Navigate to the 'Actuators' tab. 48 Kaba evolo Manager V 5.2

49 Parameterising a master key system 3. Select all or individual actuators. 4. Open the context menu. 5. Select the menu entry 'Migrate, elolegic to LEGIC advant'. It is not possible for all actuators or individual actuators to be migrated. As an example, elolegic cylinders cannot be transformed into digital cylinders or c-levers. 6. Follow the instructions in the wizard. The number of steps depends on the type of actuator. 7. Click on the 'Close' button after migrating Editing actuator properties 1. Open the 'Basic settings' menu from the Navigator toolbar. 2. Navigate to the 'Actuators' tab. 3. Select all or individual actuators. 4. Open the context menu. 5. Click on the 'Properties...' button. Kaba evolo Manager V

50 Parameterising a master key system General Time components Time zone TimePro time profile Standard Set the local time zone No higher-level time profile on the actuator. Office Within the entered time profile, actuators can be changed to their open state by presenting authorised media. Day/Night Holidays/special days If authorised user media are presented when the actuators are in the open state, they will close again. When the time profile has expired, the actuators close automatically. The period of time for which the actuators are in the open state is determined by the time profile. The actuator opens and closes automatically according to the set time profile. Shows the current and the downloaded holidays and special days. 50 Kaba evolo Manager V 5.2

51 Parameterising a master key system Options The elements in this window have the following functions: Option Authorised beep Illumination unit Unauthorised beep Actuator traceback enabled Media traceback enabled (CardLink) Opening time period Advanced Description Switches the acoustic signal indicating authorised access on or off. Switches the optical display on or off. Switches the acoustic signal indicating unauthorised access on or off. Writes the traceback to the actuator memory. [} 6.1.1] If the option has been selected in the project properties, the traceback is written to the actuator memory and the medium [} 6.1.1]. The opening mechanism is enabled for this time period. 'Bolt Recreation Time' defines the time interval at which the engaging state of the mechatronics unit should be checked. This function is not available on all devices. We recommend deactivating the sound for the authorised state. This reduces energy consumption. This sound is already deactivated as standard for all components except the mechatronics cylinders. CardLink update reader The checkbox only appears in this window if the selected actuator is parameterised as Card- Link update reader. Kaba evolo Manager V

52 Parameterising a master key system Accessories S-module Depending on the actuator type, various options such as S-module or Pass-Lock (only for c- lever) can be selected under Accessories, and their properties can be determined. The S-module is not supported in wireless. Information about the 'escape return' function can be found in the 'Kaba c-lever escape return (k1evo818xy)' quick guide. Medical practice example: Patients must have access to a medical practice during opening times. The main door can be released for patients using a button. The patients do not require any media and the media practice can be accessed Operating mode: electric strike with S-module functionality The behaviour of the Kaba evolo Manager can be changed by way of the contact connected to the digital input. The contact overrides the authorizations and activates the behaviour programmed in Kaba evolo Manager or in Kaba exos. Possible contact: switch, time switch or building control system (e.g. alarm system) Behaviour available for selection in Kaba evolo Manager or Kaba exos Active if: As long as input is active As long as the input is active (green), the programmed behaviour is active (blue). Period limited The measurement of the duration starts with the deactivation of the input. t If the input is reactivated before the set duration has elapsed, the programmed behaviour is extended correspondingly. t 52 Kaba evolo Manager V 5.2

53 Parameterising a master key system Pulse mode With the first flank of the input as active the programmed behaviour becomes active, with the next flank as active the behaviour is deactivated. Key Input active (green) Programmed behaviour active (blue) If active: Always open Always closed Open with any medium Disable TimePro Effect Always open Always closed, access not possible Can be opened with any medium (writes UID of the medium to traceback) TimePro is disabled Defining the logic The S-module functionality includes an auto-learn function. Upon initialization (INI reset) of the Kaba evolo Manager, the current position of the contact is interpreted as the base position. If the position of the contact changes, the behaviour programmed under Activation is activated. This is how a closing or opening contact can be defined Pass-Lock The following properties can be selected from the list for unlocking the selected actuator using Pass-Lock: Authorised master medium Authorised user medium The parameterised door can then be opened from the outside again after Pass-Lock has been activated by means of the media type selected here. The door can always be opened from the inside Locker lock These properties can only be parameterised for a locker lock Kaba evolo Manager V

54 Parameterising a master key system The following can be parameterised in this window: Closing behaviour: a) With authorised medium: The locker can only be opened or closed with an authorised medium. b) Without medium: The locker is closed by pressing the door. Locker lock number: The number of the locker in which this lock is located. These numbers can be assigned multiple times, for example, if lockers are located in various areas of a building. A UID or CID saved on a medium is uniquely assigned to this medium. Upon closing, this UID or CID is saved in the lock and thus assigned to this locker. The locker can then only be opened with the same medium. For locker lock numbers which have been assigned multiple times, the UID or CID of the closing medium is authoritative. The locker lock number is entered on the medium during the closing process. If this has not been assigned (empty field), the serial number of the locker lock is entered. Administration media: If the checkbox is ticked, the parameterised administration media can only open a locker and not close it. Administration media can be added or removed using the context menu and both buttons on the right-hand side. 6.7 Door groups For simpler management of door authorisations, door groups are registered. [} ] Door groups are only available in the CardLink authorisation type. 54 Kaba evolo Manager V 5.2

55 Parameterising a master key system 6.8 Authorisations Different authorisation structures are possible in the KEM software. A distinction is made between the CardLink type of authorisation and the Whitelist type of authorisation. CardLink authorisation Blacklist (CardLink) Whitelist authorisation Free locker selection with Whitelist Free locker selection with CardLink The access authorisations are stored on the media. If a user medium has to be blocked within its validity period, it must be entered in the blacklist. This ensures that the authorisation of this user medium is cancelled. A whitelist consists of the number of media entered in the actuator which are authorised on this actuator. This function can only be parameterised in connection with the locker lock This function can only be parameterised in connection with the locker lock Note: Modifications to the time profiles must be transferred to the actuators with the aid of a programmer. [} 6.12] Setting up CardLink authorisation Information about the technologies Kaba evolo supports CardLink Kaba elolegic only supports CardLink with U-Line actuators Kaba elostar does not support CardLink Setting up time profiles for door groups 1. Open the 'Time profiles' menu from the Navigator toolbar. 2. Navigate to the 'Time profiles' tab. 3. Click on the 'New time profile' button and register a new profile. 4. Enter a name in the Designation field. 5. Activate time profile details. [} 6.9] Setting up validation times 1. Open the 'Time profiles' menu from the Navigator toolbar. 2. Navigate to the 'Validation' tab. 3. Modify the end time type or the programmable types. See the table for modification options. The set validation times can now be used to set time profiles for actuators and media in the 'Basic settings' menu. Validations are unchangeable 24 hours Kaba evolo Manager V

56 Parameterising a master key system Validations are unchangeable 'Always' (unrestricted) Validation with programmable time End time (whole hours only) 5 x validations with programmable duration Days and hours For validations with a programmable time or duration, the Designation field can be filled in as defined by the user. The set time profiles and validation data can be used for the individual actuators and media in the 'Basic settings' menu: In the 'Actuators' tab in the fields TimePro TimePro time profile In the 'Media' tab in the fields Medium validation Reading in/importing media elostar and elolegic media are read in using Programmer The desktop reader can also be used for LEGIC media. 1. Open the 'Basic settings' menu from the Navigator toolbar. 2. Navigate to the 'Media' tab. 3. Select the key plan to which the media are to be read in. 4. Place a medium on the desktop reader. 5. Fill in the 'Designation', 'Cont. no.' and 'Users' fields. 6. Click on the 'Save' button. Media can be registered manually by selecting the 'New medium' button. A media list can also be imported. [} 9.1] Creating an actuator and assigning a master Procedure Open the 'Basic settings' menu from the Navigator toolbar. 2. Navigate to the 'Actuators' tab. 3. Create and register a new actuator by selecting 'New actuator'. Kaba evolo Manager V 5.2

57 Parameterising a master key system 4. Select suitable values from the technology, form factor, line and version lists for the actuator to be created in the 'Type' field. 5. In the Access mode field, select the mode for the selected type. 6. Fill in the Cont. no., Designation and Door no. fields. 7. Select a profile type in the 'TimePro' field. 8. Confirm with 'OK'. 9. Select the programming master from the list under Programming master. Actuators should preferably be imported using a KIF file. Defining validation actuators In LEGIC advant projects, the validation actuator must be activated with security card C2. Write authorisation for LEGIC advant Procedure 1. Present the master medium to authorise the actuator. 2. Present security card C2 to start the write authorisation. The write authorisation is enabled for 20 seconds and the LED lights up green. 3. After three beeps, the green LED goes out and the write authorisation is terminated. Authorisation data is deleted after an INI reset. The authorisation must be carried out again. 1. Open the 'Basic settings' page from the Navigator toolbar. 2. Navigate to the 'Actuators' tab. 3. Select the validation mode from the list. 4. Select the media or actuators. Defining validation time for medium or actuator Procedure 1. Open the 'Basic settings' menu from the Navigator toolbar. 2. Navigate to the 'Actuators' tab. 3. Select the desired entry for the validation time from the 'Actuator validation' list. Example: The validation in a building is written to the media with the validation actuators, e.g. a validation time of one day. This means a medium is valid for one day only. So that an expired medium still grants access at the parking barrier in the case of a lengthy user absence, the actuator at the parking barrier is set to 'Actuator 120 days' validation mode. If the user is absent for longer than 120 days, they will no longer have access to the car park. Kaba evolo Manager V

58 Parameterising a master key system P Setting up door groups 1. Open the 'Basic settings' menu from the Navigator toolbar. 2. Navigate to the 'Door groups' tab. 3. Click on the 'New door group' button. 4. Register a new group. 5. Enter a name for this door group in the 'Name' field. 6. Select a time profile for this door group from the list under 'Time profile'. Actuator group assignment (assignment to the door groups) Door groups can also be created with the aid of the 'Create new door group' wizard. Procedure 1. Open the 'Authorisations' menu from the Navigator toolbar. 2. Navigate to the 'Actuator group assignment' tab. 3. Navigate to the 'Door groups' sub-tab. 4. Select the door group from the list. 5. Drag the door group and drop in the top right-hand window. The selected door group is displayed in the window. 58 Kaba evolo Manager V 5.2

59 Parameterising a master key system 6. Navigate to the 'Actuators' sub-tab. 7. Drag the desired actuator from the list in the left-hand window and drop in the righthand window (door group...). A number of different door groups can be assigned to one actuator. Creating CardLink authorisation Procedure 1. Open the 'Authorisations' menu from the Navigator toolbar. 2. Navigate to the 'CardLink' tab. 3. Navigate to the 'Door groups' sub-tab. 4. Select a door group from the list. 5. Drag the selected door group and drop in the top right-hand window. The selected door group is displayed in the window. 6. Navigate to the 'User media' sub-tab. Kaba evolo Manager V

60 Parameterising a master key system 7. Drag the desired user media from the list in the left-hand window and drop in the righthand window. 8. The CardLink authorisation properties are displayed. 9. Click on the 'OK' button. The user medium or the selected user media are displayed in the window. 10. Place a user medium on the desktop reader and program. 11. Program the actuators on the doors with a programmer. 60 Kaba evolo Manager V 5.2

61 Parameterising a master key system Programming media Media can also be programmed via the 'Reception' or 'Key plan' menus. Procedure 1. Open the 'Authorisations' menu from the Navigator toolbar. 2. Navigate to the 'CardLink' tab. 3. Navigate to the 'User media' sub-tab. 4. Drag the properties 'Group right', 'Individual right' or 'Reservation' and drop in the top right-hand window. 5. Place the medium to be programmed on the desktop reader. 6. Click on the 'Programming (media name)...' button. Programming actuators The LEGIC advant and MIFARE actuators are programmed with the Kaba Programmer The elolegic and elostar actuators are programmed using the Kaba elo Programmer If projects contain actuators of different technologies, e.g. LEGIC advant and elolegic or elostar, both programmer types are required. Each of these is shown in its own tab. Procedure 1. Connect the programmer and the computer with a USB cable. The programmer is displayed in the status bar. Kaba evolo Manager V

62 Parameterising a master key system 2. Open the 'Transfer' menu from the Navigator toolbar. 3. Select the key plan from the list. 4. Click on the 'Update programmer' button. The data is loaded on to the programmer. 5. Disconnect the programmer from the computer. 6. Transfer the data to the actuators using the programmer. Confirming programming 1. Connect the programmer and the computer with a USB cable. 2. Open the 'Transfer' menu from the Navigator toolbar. 3. Select the key plan from the list. The data is automatically updated. The status of the programmed actuators is indicated as 'Current' in the status column Setting up Whitelist authorisation Setting up time profiles for actuators 1. Open the 'Time profiles' menu from the Navigator toolbar. 2. Navigate to the 'Time profiles' tab. 3. Click on the 'New time profile' button and register a new profile. 4. Select the time profile type. 5. Enter a name for the time profile in the Designation field, such as 'work week'. 6. Activate the corresponding checkboxes with the desired time profile details. 62 Kaba evolo Manager V 5.2

63 Parameterising a master key system Reading in/importing media Media can be registered manually via the 'New medium' dialogue. It is possible to import a media list. 1. Open the 'Basic settings' menu from the Navigator toolbar. 2. Navigate to the 'Media' tab. 3. Place the medium on the desktop reader. 4. Fill in the 'Designation' and 'Cont. no.' fields. If necessary, enter the 'Card ID' as well. 5. Click on the 'Save' button. 6. Click on the 'Close' button. Creating an actuator and assigning a master Actuators should preferably be imported using a KIF file. 1. Open the 'Basic settings' menu from the Navigator toolbar. 2. Navigate to the 'Actuators' tab. 3. Click on the 'New actuator' button and register a new actuator. 4. Select the technology, form factor, line and version from the list in the 'Type' column. Kaba evolo Manager V

64 Parameterising a master key system 5. Click on the 'OK' button. 6. Select the access mode from the list. 7. Fill in the 'Cont. no.', 'Designation' and 'Door no.' fields. 8. Assign a programming master to the actuator. Assigning media to the actuators (with time profile) Media can be assigned to the actuators using the 'Authorisations' button in the Navigator toolbar. 1. Open the 'Key plan' menu from the Navigator toolbar. 2. Navigate to the Whitelist or Electronic (CardLink) tab. 3. Activate the desired assignment using the matrix. 4. Assign a time profile to the selected intersection. 5. Click on the 'OK' button. 64 Kaba evolo Manager V 5.2

65 Parameterising a master key system Prepare media in Whitelist for CardLink If a project is created with Whitelist authorisation, the user media can be prepared for a later project with CardLink authorisation. The CardLink authorisations will already be saved to the media and do not need to be activated when switching the actuators to CardLink. It is also possible to switch from a project with Whitelist authorisation to a project with Card- Link authorisation retrospectively. Requirements in the project properties (F4): The project must have been created fully in Whitelist mode. Access technologies: elolegic LEGIC advant MIFARE Access mode Whitelist and CardLink Security card The security card exists or has already been read into the project. Preparing for CardLink 1. Open the project properties (F4). 2. Change the access mode to 'Whitelist and CardLink mode'. 3. Read in the security card if it is not already present in the project. 4. Close the project properties. 5. Open the 'Authorisations' menu from the Navigator toolbar. 6. Navigate to the 'CardLink' tab. 7. Navigate to the 'User media' sub-tab. Kaba evolo Manager V

66 Parameterising a master key system 8. Drag the user media individually from the list in the left-hand window and drop in the top right-hand window. The user medium is displayed in the window. 9. Select the authorisation type and the time profile. 10. Navigate to the 'Actuators' sub-tab. 11. Drag the actuators individually from the list in the left-hand window and drop in the large right-hand window. The actuators are greyed out because they are not yet in CardLink mode. 12. Place the corresponding user medium on the desktop reader and program. The user media are now prepared for CardLink. Programming actuators 1. Connect the programmer and the computer with a USB cable. The programmer is displayed in the status bar. 2. Open the 'Transfer' menu from the Navigator toolbar. 3. Select the key plan from the list. 4. Click on the 'Update programmer' button. The data is loaded on to the programmer. 5. Disconnect the programmer from the computer. 6. Transfer the data to the individual actuators using the programmer. Confirming programming 1. Connect the programmer and the computer with a USB cable. 2. Open the 'Transfer' menu from the Navigator toolbar. 3. Select the key plan from the list. 66 Kaba evolo Manager V 5.2

67 Parameterising a master key system The data is automatically updated. The status of the programmed actuators is indicated as 'Current' in the status column Copying authorisations from media and actuators Media or actuators and their authorisations can be copied using this function. The following is possible: Copying within the key plan of a project. Copying to other key plans of a project. Copying to one or several media. Copying to one or several actuators. Requirements Media and actuators can be copied from a project with Whitelist or CardLink. All authorisations are copied from Whitelist and/or CardLink. Copying media The media can be copied using the 'Wizards' button or from the 'Authorisations' menu using the 'Copy medium' function. Select a medium as reference and copy to one or more target media. The changed actuators must be updated using the programmer. Media with CardLink authorisation must be updated with a desktop reader or a terminal. Procedure 1. Open the 'Wizards' menu from the Navigator toolbar. 2. Click on the 'Copy medium' button. 3. Follow the instructions in the wizard. 4. Click on the 'Close' button after copying. Copying actuators The actuators can be copied by clicking on the 'Wizards' button or copied from the authorisations using the 'Copy actuator' context menu. Select an actuator as reference and copy to one or more target actuators. The changed actuators must be updated using the programmer. Media with CardLink authorisation must be updated with a desktop reader or a terminal. 1. Open the 'Wizards' menu from the Navigator toolbar. 2. Click on the 'Copy actuator' button. 3. Follow the instructions in the wizard. 4. Click on the 'Close' button after copying. 6.9 Time profiles Time profiles are used to define the times at which a medium is authorised at an actuator. Kaba evolo Manager V

68 Parameterising a master key system Alongside the basic access authorisations, time profiles enable time restrictions to be applied to authorisations. The time profiles can be defined in the KEM software and then transferred to the actuators with the programmer. Requirement The time and date are set correctly for all the elements in the 'Time profiles' option. Description Whitelist authorisation CardLink authorisation With individual time profile. 15 user-definable time profiles are available per actuator, each of which features 12 time windows (V3/V4) or 4 time windows (V2). With a TimePro functions time profile. Office time profile or Day/Night time profile. With time profile (door groups right, individual right, reservation). 15 different time profiles can be used system-wide. With validation 1000 time profiles can be created. The first 16 time profiles are reserved for CardLink and Whitelist. All subsequent time profiles are exclusively for Whitelist. The time profile offers the following options in the time profile details: - Period 'from' 'to' Combination with the options - 'Day' and the selection of one or several weekdays - Holidays, special days. Settings for holidays and special days are configured under the 'Holidays/special days' tab [} 6.9.1]. Process for parameter setting 1. Open the 'Time profiles' menu from the Navigator toolbar. 2. Navigate to the 'Time profiles' tab. 3. Click on the 'New time profile' button and register a new profile. 4. Enter a name for the time profile in the 'Designation' field. 5. Click on the row in the options box to activate the desired time profile details. Example: 1 Only during weekdays (Mon to Fri) 2 Only during holidays 3 During weekdays and holidays (Mon to Sun) 4 On Special Days A, see [} 6.9.1] 68 Kaba evolo Manager V 5.2

69 Parameterising a master key system Holidays/special days Differences for holidays/special days between time profile V2, time profile V3 and time profile V4: Time profile V4 Time profile V3 Time profile V2 - Special Days A and B - Special Days A - Special Day A - No restriction for 'day' when it comes to holidays When the actuators are updated with the programmer, the software always uses future holidays and special days as of the update time. Time profiles for holidays Special days within a holiday block overlap with the holiday block. The time profile of the special days then has priority over the time profile of the holiday block. For periods made up of consecutive days (e.g. holidays), access authorisation can be granted or withdrawn. The length of a period is defined by entering the start and end date. 20 holiday blocks can be defined in the actuators with V4 and 10 holiday blocks can be defined in the actuators with V3/V2. In the V2 time profile, the holiday days are firmly defined by selecting the holiday blocks. A restriction using the 'Day' option field is not possible. Time window for special days An individual time window for specified special days. For special days (e.g. bank holidays), two different days Special Day A and Special Day B can be created in V3 and V4. This creates two time windows, e.g. one time window for a day preceding a bank holiday (Special Day A) and the bank holiday itself (Special Day B). For each of the two types of special day, a total of 32 special days can be stored in the actuator. Registering holidays Registering holidays Registering a bank holiday (Special Day A and/ or B) Displaying a holiday block Displaying the context menu Using the left mouse button, select the desired range and confirm by clicking on the 'Holiday block' button. Select the bank holiday using the left mouse button and click on the 'Special Day A' or 'Special Day B' button. Hover the mouse over the entered holiday block or special day and wait for the tool tip. The details for the holiday block will be displayed in the tool tip. - Hover the mouse over the entered holiday block or special day. - Use the right mouse button to open the context menu. - Select 'Rename holiday block' to rename the entry. The holiday block or special day can be renamed in the entry window, e.g. as summer holidays. The entered text is shown in the tool tip, in the actuator properties and on the printed form. - Select the 'Delete holiday block' to delete the entry. Kaba evolo Manager V

70 Parameterising a master key system Validation The validation is only available in the CardLink type of authorisation. For a CardLink authorisation, the access authorisations are written directly to the user media. The validation determines the length of time for which a medium is valid. There are eight validation choices. These cannot be deleted or upgraded. Six of these validations can be edited. See [} 6.8.1] 6.10 Key plan The authorisations are clearly displayed in a key plan matrix. The 'Export key plan to Excel...' function can be accessed using a grid square context menu. The key plan is exported as an Excel file. 70 Kaba evolo Manager V 5.2

71 Parameterising a master key system Overview Authorisations for all media and actuators Electronic CardLink/ Whitelist Editing is not possible Authorisations of mechanical media and actuators Authorisations of electronic media and actuators Editing is possible Mechanical Authorisations of mechanical media and actuators Group rights (CardLink) Door group authorisation of the electronic media Assignment of door groups (CardLink) Editing is possible Door group assignment of the electronic media Editing is possible 6.11 Persons A staff list containing the media assigned to individual persons is drawn up for media management. 1. Open the 'Organisation' menu from the Navigator toolbar. 2. Register a new user by clicking on the 'New person' button. Kaba evolo Manager V

72 Parameterising a master key system 3. Assign media to persons in the list: -- The person to whom a medium is to be assigned is marked in the list and their name appears in the bottom right. -- Use the arrow button (in the middle) to move a selected medium from left to right, or drag and drop it from left to right. 4. In the printing dialogue, select if the output form should be printed with or without comments Transfer Transfer involves the exchange of data between the KEM software, the programmer and/or the gateway (GW) for the wireless option. Alongside the fields Type, Designation, User etc., the field 'Path' can also be activated. The current path of a key plan, including sub-folders, is displayed under 'Path'. The path can be sorted. Actuators (wireless) Actuators with the wireless option are shown in the Actuators (wireless) tab as inactive as long as the commissioning of these actuators (connected to the GW) [} 8.3]has not been completed yet. The actuators must be programmed once with the Programmer 1460 before the wireless option is put into operation. After being put into operation and following the data transfer from the Programmer 1460 to the software, the actuators are automatically shown as enabled in the Actuators (wireless) tab. In this tab, various properties can be called up, traceback can be loaded and the actuators can be updated. Programmer 1460 The LEGIC advant and MIFARE actuators are programmed with the Programmer Connect the programmer to the computer with a USB cable. 2. Select the key plan from the list. 3. Click on the 'Update programmer' button. The data is loaded on to the programmer. All commands relate to the selected key plan. 72 Kaba evolo Manager V 5.2

73 Parameterising a master key system Update programmer Update traceback Delete all files The current data for the actuators is loaded on to the programmer. The current traceback data is loaded from the programmer into the KEM software. All actuator data is deleted from the programmer. Programmer 1364 The Kaba elolegic and Kaba elostar actuators are programmed using the Kaba elo Programmer Connect the Programmer 1364 to the computer with a USB cable. The programmer is displayed in the status bar. 2. Select the key plan from the list. 3. Click on the 'Update programmer' button. The data is loaded on to the programmer. Update Programmer 1364 Load status of all actuators Update traceback The current data for the actuators is loaded on to the Programmer The status of all actuators is loaded on to the Programmer The current traceback data is loaded from the Programmer 1364 into the KEM software Traceback The traceback function enables activities on actuators to be traced. The traceback data can be transferred from the user medium or the actuator to the system software for display. The following options are available: Transfer traceback data from the actuator. Kaba evolo Manager V

74 Parameterising a master key system Transfer traceback data from the medium. Once the method has been selected, the procedure continues as follows: Transferring traceback data from the actuator The actuator saves the relevant traceback data. Traceback data is read from the actuator using the programmer and transferred to the system software. Requirement: The traceback data from the actuators has been read using the programmer. Procedure 1. Connect the programmer to the computer with a USB cable. 2. Click on the 'Transfer' button in the Navigator toolbar. 3. Select the key plan from the list. 4. Click on the 'Update traceback' button. The data is loaded from the programmer into the system software. 5. Click on the 'Traceback' button in the Navigator toolbar. 6. Navigate to the 'Actuator' tab. 7. Select a key plan if one has not already been selected. 8. In the actuators list, select the desired actuator by double-clicking. Alternatively, drag the actuator and drop it in the top right-hand bar. 74 Kaba evolo Manager V 5.2

75 Parameterising a master key system Transferring traceback data from the medium The actuator writes its traceback data on to the medium presented to it. This traceback data can be transferred to the system software using the desktop reader. This function can be activated in the project properties. [} 6.2] Procedure 1. Click on the 'Traceback' button in the Navigator toolbar. 2. Navigate to the 'Medium' tab. 3. Place the medium on the desktop reader. 4. Click on the 'Read (media name) traceback...' button. The following table explains the meaning of the read traceback data. Kaba evolo Manager V

76 Parameterising a master key system # Traceback codes event Access? 01 Authorised Yes X X 02 Not authorised X X 03 Incorrect time X X 04 Authorised with emergency power supply Yes X X 05 Start manual programming (encryption) X X 06 Start programmer access X X 07 Clock set X X 09 Open TimePro Office Yes X X 0A Close TimePro Office X X 0F Close Hold Open mode (only for remote and compact reader) X X 10 Actuator reconfigured (reboot) X X 12 Locking module error (unable to close) X X 13 Locking module error rectified (attempt to close was successful) X X 14 Coupling position incorrect (only for digital cylinder) X X 15 Coupling position correct (only for digital cylinder) X X 19 Open TimePro DayNight Yes X X 1A Close TimePro DayNight/Office (end of time window) X X 1B Open Pass mode Yes X X 1C Close Pass mode X X 20 Site key modification (site key added/deleted/changed) X X 21 Site key modification error X 30 Launch (Advant/Prime only) X 31 Withdraw (Advant/Prime only) X 40 S-module: start 'Open' mode X X 41 S-module: start 'Closed' mode X X 42 S-module: start 'Any medium' mode X X 43 S-module: end of S-module action X X 45 S-module: unauthorised as in 'Closed' mode or 'Authorised medium' mode 46 S-module: authorised as in 'Any medium' mode X X 47 S-module: start 'Authorised medium' mode X X 48 S-module: start 'Switch off TimePro' mode X X 50 Modification successful X X 57 Modification: blacklist full X X 60 CardLink: not authorised X X 61 CardLink: validation invalid X X 62 CardLink: incorrect administration area X X 63 CardLink: incorrect time X X 65 CardLink: blacklisted medium in the validation actuator: header deleted E30 0 X X TG O E31 0 X X Wir e- less 76 Kaba evolo Manager V 5.2

77 Parameterising a master key system # Traceback codes event Access? 6A CardLink: authorised (individual right) Yes X X 6B CardLink: authorised (door groups right) Yes X X 6C CardLink: authorised (reservation) Yes X X 6D Not authorised, incorrect binding X 70 Lockerlock: manual opening (without medium, UID=0) Yes X X 71 Lockerlock: opening/closing by maintenance medium Yes X X 72 Lockerlock: maximum occupancy period exceeded X X 73 Lockerlock: file/segment not available or no free room X X 80 Paired RCID medium authorised Yes X X 81 RCID medium not authorised X X 82 Validation invalid X 83 Incorrect time X 85 Medium in blacklist X 8A Commissioning started (wireless connection) X X 8B Commissioning successful X X 8C Commissioning not successful X X 8D Leave network X X 90 Anti-barricade: panic mode activated X X 91 Anti-barricade: panic mode deactivated X X 95 Escape return activated (ESC return) Yes X 96 Close with button (ESC return) X 97 Authorised closing (ESC return) X 9A Remote opening (unlock) Yes X X 9B Remote access profile check (access control) X X 9C Remote locking (shutdown) X X 9D Remote normal operation (normal) X X 9E Remote single opening (open once) X X 9F Remote unauthorised as in 'Shutdown' mode Yes X X B0 Door broken into (monitoring door status) X X F0 Medium in blacklist X E30 0 TG O E31 0 Wir e- less 6.14 Logbook The logbook function in the system software registers the time and user during the following events: A project has been opened closed exported imported Data from the programmer has been downloaded or uploaded. Kaba evolo Manager V

78 Parameterising a master key system Actuator data has been downloaded or uploaded. Media have been issued withdrawn reported as lost Traceback data has been read. The logbook list view can be limited by activating filters. 78 Kaba evolo Manager V 5.2

79 Terminal 7 Terminal 7.1 Function The terminal can be used to grant access rights and validate user media centrally. The access rights are configured in the system software. These are sent to the terminal via Ethernet and saved there. When presenting a user medium, the granted access rights are either written to the user medium or the available access rights are revoked. Detailed information on assembly and other installation information for the terminal can be found in the terminal installation instructions. 7.2 Set up The terminal is only activated in the project properties once the set up is complete. Process for activation 1. Open the properties for the project (F4). 2. Activate the 'Use terminal' checkbox in the 'General' tab. The installation set up is launched. 3. Follow the wizard through the five steps. 4. In step 4, enter or select the IP address of the computer. Note: Do not use a WiFi IP address. Kaba evolo Manager V

80 Terminal 5. In step 5, click on the 'Finish' button. The 'Use terminal' checkbox is activated in the project properties. 6. Click on the 'Save' button. The Terminal tab is added Adding a terminal Terminals cannot be used for different projects in the system software. The terminal must be connected to the network. 1. Open the 'Basic settings' menu from the Navigator toolbar. 2. Navigate to the 'Terminals' tab. 3. Click on the 'Add new terminal' button. 4. Follow the wizard through the four steps. 80 Kaba evolo Manager V 5.2

81 Terminal 5. In step 2, enter the IP address of the terminal and enter a name. 6. In step 4, click on the 'Finish' button. The terminal has been added to the project. The wizard finishes. Examples of terminal views Example of the view on the display of the terminal after launching. Example of the view on the display of the terminal during the restart and the B-COMM login. During the launch of the terminal, the IP address can be read as follows on the display. Example of the view on the display of the terminal when logged in. 7.3 Parameter setting The security card of the technology used is read in. Kaba evolo Manager V

82 Terminal 1. Navigate to the 'Terminals' tab. 2. Select a terminal from the list. The corresponding row is marked in blue. 3. Click on the 'Parameterise...' button. 4. The wizard runs through setting the parameters. During the final step, the terminal carries out a warm start. This process may take a few minutes. The terminal is parameterised and available in the software. If a LEGIC project is being used, the terminal still needs to be launched with security card C2 in order to activate the write authorisation. 82 Kaba evolo Manager V 5.2

83 Terminal 5. Present security card C2 to the terminal and wait for the signals (one beep then another three beeps after 20 seconds). The terminal has received its write authorisation (launch) and can be used in the project. Example of the terminal view The terminal is ready for operation. 7.4 Operation Programming media Before operating the terminal, all user media belonging to the project must be programmed using the desktop reader Updating the terminal or fully downloading data If the terminal has been added to the project and parameterised and a LEGIC terminal has been launched, it can be used in the project. The Start toolbar displays two terminal symbols with which you can run the following functions. Update terminal Modifications to CardLink authorisations are transmitted to all Kaba terminals. Kaba evolo Manager V

84 Terminal Download complete set All data is re-downloaded to all Kaba terminals. The terminal is blocked for the duration of the download. Any existing data is deleted. 7.5 Authorisations With the CardLink authorisation type, the authorisations for a user medium can be sent directly to the terminals. Procedure 1. Drag the medium and drop in the right-hand field. 2. Click on the 'Send to terminals...' button. When the data has been sent to the terminal, the status changes from Prepared to Prepared (on terminal). When user media have obtained their access authorisation at the terminal, the status changes from Prepared (on terminal) to Current. The following must be transmitted to the actuators using the programmer: Changed time profiles. Changed assignments of door groups. Changed validation duration. When the user has presented their medium to the terminal, the new status can be seen in the respective project in the software. 84 Kaba evolo Manager V 5.2

85 Wireless 8 Wireless This chapter describes how to set up wireless components and put them into operation. You can find additional information about using wireless here: Programmer 1460 user manual Kaba wireless gateway technical manual PG wireless gateway planning guideline 8.1 Integrating a wireless gateway Preparing KEM: 1. Launch the KEM software. 2. In the KEM software, open 'Project settings' (F4). 3. Activate the 'Use wireless' checkbox in the 'Upgrades' tab. 4. Save the settings. The 'Gateways' tab will be added to basic settings. The 'Actuators (wireless)' tab will be added to the 'Transfer' menu. Adding a gateway to KEM: ü The IP address of the gateway is known. 1. Navigate to the 'Gateways' tab. 2. Click on the 'Add new gateway' button. 3. Follow the instructions in the wizard. Kaba evolo Manager V

86 Wireless Enter the cable-linked IP address of the gateway here. If it is not possible to assign a fixed IP address to the wireless gateway, the DHCP server must be parameterised so that a wireless gateway is always assigned the same IP address with every connection. 4. Parameterise the gateway. The view in the 'Transfer' menu and the 'Programmer 1460' tab switches to the 'Actuators (wireless)' tab. 8.2 Editing the wireless components Parametrising components The parameterisation of components with the wireless option is a similar process to the parameterisation of standalone components. You must also note: Wireless can only be chosen for components which are operated in V4 mode. Select E32x from the list in the 'Type' field under the 'Actuators' tab. Wireless access is activated When updating CardLink via the remote reader, the option 'CardLink update' must be selected in the 'Access mode' column. Under Legic, write authorisation must also be issued to the remote reader so that the data can be written to the media. See Issuing write authorisation (launch) [} 8.2.2] 86 Kaba evolo Manager V 5.2

87 Wireless Issuing write authorisation (launch) (LEGIC only) Write authorisation is required in the following cases: If the actuator/remote reader is intended to write to a write-protected segment of a medium, e.g. validation of write-protected CardLink segments in CardLink applications. Requirement A security card C2 is required for write authorisation. The actuator/remote reader is in normal operation and is awaiting an RFID input. Procedure 1. Present the programming master (admin master) to the actuator/registration unit. 2. Present the security card C2 to the actuator/registration unit and hold it there for approximately 15 seconds. The green light on the registration unit will come on during this procedure. Signal if successful: three beeps If the actuator/remote reader has already been issued with write authorisation using the same security card C2, this will be indicated immediately by way of three beeps. No signal: write authorisation has not been granted. Possible reasons - The security card C2 was removed from the RFID field too early. 3. Remove the security card C2 from the field. 8.3 Putting wireless components into operation This chapter describes how wireless components can be put into operation and parameterised using the wireless gateway. Action steps need to be performed at the components and at the gateway in order to put the components into operation Starting wireless commissioning Start the wireless commissioning of the gateway. In order to connect the components to the gateway, the wireless commissioning must be started in the gateway. Commissioning can be started as follows: With the KEM system software In the web interface of the gateway When operating several gateways, only ever start the wireless commissioning on one gateway. The components could connect to an unwanted gateway. Commissioning with KEM 1. Launch the KEM system software. 2. Navigate to the 'Gateways' tab in the 'Basic settings' section. 3. Select the gateway. 4. Open the context menu of the selected gateway. 5. Activate 'Start wireless commissioning...'. Kaba evolo Manager V

88 Wireless 6. Determine the duration of the commissioning (in minutes). The time period required to add/commission components. During this period, components can be connected to the gateway. 7. 'Start wireless commissioning...' The components must be connected to the gateway within the set time period. 8. Connect the components within the set time period using the programmer [} 8.3.2]. If not all required components could be put into operation within the set time period, the process can be repeated. Commissioning via web interface 1. Select the gateway for commissioning in the file manager. 2. Start the web interface of the gateway. 3. Call up the 'Wireless commissioning' function. 4. Set the time period for the commissioning. During this period, components can be connected to the gateway. 5. Start the wireless commissioning. 6. Connect the components within the set time period using the programmer [} 8.3.2]. If not all required components could be put into operation within the set time period, the process can be repeated Connecting wireless components Connecting wireless components to a wireless gateway: Requirements The actuator is parameterised. The wireless gateway is parameterised in the system software. The wireless gateway is connected to the system software. Procedure 1. Start the wireless commissioning [} 8.3.1] in the gateway. The following steps must be taken within the time period set there: 2. Find the actuator to be connected using the programmer. 3. Log in to the actuator using the programming master. 4. Transfer the configuration data from the programmer to the actuator by clicking on 'Export'. 5. Select the 'Actuator/wireless' menu in the programmer. 6. Select the menu point 'Connect'. 7. Start the connection process by clicking on 'Enter'. These steps will now run: Searching for network... GW found Commissioning... Connected to GW 8. View the status of the actuator in the 'Wireless' menu. The wireless commissioning is complete and the actuator can be addressed by the system software via wireless. 88 Kaba evolo Manager V 5.2

89 Wireless 8.4 Updating wireless components The wireless components have been put into operation. Procedure ü The actuator has been initialised and connected to the network. 1. Select the 'Transfer' option from the Navigator menu. 2. Navigate to the 'Actuators (wireless)' tab. 3. Select the components to be updated. 4. Select 'Update actuator' in the context menu. The selected actuator is updated. 8.5 Downloading traceback of wireless components The components save their traceback data in the internal memory. In the 'Transfer' view, you can transfer the traceback data to the KEM software. See [} 6.13] 8.6 Opening and closing components via wireless Releasing components with a time limit 1. Open the 'Transfer' menu from the Navigator toolbar. 2. Navigate to the 'Actuators (wireless)' tab. 3. Select all actuators or individual actuators. 4. Open the context menu. 5. Select the menu point 'Door commands'. 6. Select the menu point 'Release time limited'. The command is sent to the components. The components open for 10 seconds. Kaba evolo Manager V

90 Wireless 7. Carry out the action on the components. After the set time interval has expired, the components return to normal operation Blocking components 1. Open the 'Transfer' menu from the Navigator toolbar. 2. Navigate to the 'Actuators (wireless)' tab. 3. Select all actuators or individual actuators. 4. Open the context menu. 5. Select the menu point 'Door commands'. 6. Select the menu point 'Block...'. The request is sent to the components. The components are blocked. Information about unblocking can be found in the following chapter [} 8.6.3] Setting components to normal operation 1. Open the 'Transfer' menu from the Navigator toolbar. 2. Navigate to the 'Actuators (wireless)' tab. 90 Kaba evolo Manager V 5.2

91 Wireless 3. Select all or individual actuators. 4. Open the context menu. 5. Select the menu point 'Door commands'. 6. Select the menu point 'Normal operation...'. The request is sent to the components. The components are set to normal operation. 8.7 CardLink update The CardLink update function can be used via wireless to update authorisations on user media. A remote reader with the wireless option is used for this. When using with LEGIC, carry out write authorisation on the remote reader as well. Requirements The following settings apply to the project properties: Actuator settings for a used reader: An actuator used for the CardLink update must have the following parameters. The actuator type is remote reader E320 (wireless) Wireless access is activated One of the following access modes is selected: Kaba evolo Manager V

92 Wireless CardLink update with access CardLink update without access (with validation) The actuator is connected via a wireless gateway as described under Wireless [} 8]. Settings in the actuator properties An actuator used as a CardLink update reader will read back the status data of the used actuators from the user media if the relevant checkbox has been activated. Updating the data records on the CardLink update reader A maximum of 3500 data records from user media can be sent to a CardLink update reader. 1. Navigate to the 'Transfer' menu in the Navigator. 2. Navigate to the 'Actuators (CardLink update)' tab. Only the actuators which are used for the CardLink update are shown in this window. 3. Click on the 'Update all CardLink update data' button. After all transfer tasks are complete, the notification 'On the reader' will appear. A connected terminal (not wireless) must be updated separately as described in the Chapter Terminal [} 7]. 92 Kaba evolo Manager V 5.2

93 Data 9 Data 9.1 Importing and exporting data The following options are available for exchanging site data. Import Import project Kaba import file (.kif) Media list (.txt) Staff list (.txt) Calendar data (.txt) Export Export project Media list (.txt) Staff list (.txt) Calendar data (.txt) Site file which can be requested from Kaba. This saves registering the installed components manually in a master key system. Media data imported from a text file Staff data imported from a text file Calendar data imported from a text file Media data exported as a text file Staff data exported as a text file Calendar data exported as a text file Importing example 1. Open the 'Import data' menu from the 'Start' toolbar. 2. Select, for example, 'Media list...' from the list. 3. Select the key plan with the media via the drop-down menu. 4. Click on the 'OK' button. 5. Search for the media list on the corresponding drive and import it. 9.2 Migrating properties to the project Various functions will no longer be available or will have changed properties after projects have been migrated. A copy is always created for existing projects. The copied project file is then called 'ProjectName_Copy'. In general, the following applies: The information about the time zones must be re-assigned. (The time zone used on the computer is used as the default time zone.) For version KEM 4.4, the following applies: New temporary Master B cannot be produced. The existing temporary Master B can still be used and updated. For version KEM 3.2, the following applies: The OKS functions such as modifications, TwinTime and TwinTime Terminal are no longer supported. Manual programming can no longer be switched off for the individual actuators. Settings can now only be configured in the project properties. After migration, 'Block keys' is deactivated for all actuators. Passive components are no longer supported. Kaba evolo Manager V

94 Data 9.3 Delete reports Delete logbook and traceback entries. All entries with the displayed date and older entries are permanently deleted. In the interest of security, we recommend creating a back-up copy of the logbook or traceback files before issuing this command. Example: In this example, the older traceback entries including the entries from 09/03/2017 must be deleted. 1. Open the 'Delete reports' menu from the Start toolbar. 2. Select the date. 3. Activate the tick in the traceback entries checkbox. 4. Click on the 'Delete' button. The traceback entries with this date and older entries are deleted. 94 Kaba evolo Manager V 5.2

95 KEM operator 10 KEM operator The KEM operator is a simplified user interface for the KEM software. However, this also means there are some limitations in terms of functionality Limitations Limitations in terms of functionality Access mode Key plan Mechanics Time profiles User administration Reception Logbook Traceback Organisation Holidays/special days Validation The access mode for all actuators applies across the whole CardLink or Whitelist project. Projects with multiple key plans are not supported. Projects which only contain mechanical components are not supported. Only V4 projects (MIFARE or LEGIC advant) are supported. Is not offered. Is not offered. Is not offered. Is not offered. Persons can be registered and used with surname and first name. Further personal information is not offered. Cannot be changed. The following validation types are available: Duration in days and hours 24 hours (1 day) End time 'Always' 10.2 Creating a project Security cards must be read in for a Whitelist project with CID (Card ID) to be created or a CardLink project. These cards are as follows depending on the media type used: Security card C for use with MIFARE media Security card C1 or C2 for use with LEGIC media. Procedure 1. Open the context menu in the toolbar on the left next to the 'Start' tab. 2. Click on the 'KEM operator' button. Kaba evolo Manager V

96 KEM operator 3. Open the context menu next to the 'Start' tab. 4. Open the 'New...' menu. (Ctrl + N). 5. Follow the instructions in the wizard. 6. In step 2, select the project type. 7. Follow the instructions in the wizard. 8. Conclude the process by clicking on 'Finish'. The project has been created. The wizard closes Creating a programming master A programming master is needed for administrator access to standalone components (actuators). [} 6.4.1] 10.4 Wizards Update programmer Wizard for transferring the key plan data to the programmer. Lost media This wizard helps you take the necessary steps to keep the site secure. Note: The key plan/project must already be present on the programmer. Read back service medium This wizard allows you to import the actuator status data from the service medium into the project. Add media This wizard helps you add additional media. Edit actuators With this wizard, you can - view or - edit the actuator list, or - add new actuators. Time profiles This wizard helps you create, modify or delete a time profile. Create a new service medium This wizard helps you create a service medium for CardLink. The service medium is needed to block individual badges at specific actuators. 96 Kaba evolo Manager V 5.2

97 KEM operator Configure CardLink This wizard helps you determine the basic configuration for Card- Link. Note: The actuators must have already been created in the project. - Define the validation actuator - Define the validation duration 10.5 Operation Procedure 1. Activate the desired assignment by clicking in the corresponding grid square. 2. Assign the authorisation type and the time profile. 3. Click on the 'OK' button. 4. Place a medium on the desktop reader. Kaba evolo Manager V

98 KEM operator 5. Click on the 'Program medium' button. The authorisations are written to the medium. After first configuring the KEM software, and when making modifications to the time profiles and actuators, the updates need to be transferred to the actuators. The Update programmer wizard [} 10.4] helps you transfer the changed data to the programmer. In the next step, the actuators are updated using the programmer. Switching from KEM operator to KEM software, or exiting the program 1. Click on the 'Kaba evolo Manager' button in the 'File' menu to switch the view to the start screen of the KEM software. 2. The KEM software can be closed by clicking on the 'Exit' button. 98 Kaba evolo Manager V 5.2

99 Reception 11 Reception The Reception function simplifies the allocation of individual authorisations. These are issued to individual or several media. The process is not bound to users. Prepared rights for a selection of actuators and door groups are transferred to the medium with a selected time profile. The Reception function is available for CardLink and for Whitelist Process with CardLink Media can be programmed and issued or withdrawn in just a few steps. Issuing media 1. Transfer door groups and/or actuators to the 'Prepared rights' tab using the 'Arrow' button (in the middle). 2. Assign a time profile and/or period of validity. 3. Place the medium on the desktop reader and click on 'Program'. The data is written to the medium. Returning media 1. Place the medium on the desktop reader. 2. Click on the 'Delete and return' button. The access authorisations of the medium are deleted Process with Whitelist Kaba evolo Manager V

100 Reception Requirements The authorisations of the media are preconfigured. The persons to whom media are to be assigned must be added to the staff list. Issuing media An unassigned medium is placed on the desktop reader. 1. Select the person to whom the medium will be assigned from the list under 'Users'. 2. Print the issue ticket in the following dialogue. Returning media Media return is only enabled if a medium has been assigned to a user and this medium is placed on the desktop reader. A medium placed on the desktop reader is assigned to a person. 1. Click on the 'Media return' button. The assignment to a person on the medium is deleted. 2. Print the return ticket in the following dialogue. The authorisations assigned to the medium remain unaffected. The medium can be assigned to another person with the same authorisations. 100 Kaba evolo Manager V 5.2

101 Kaba CheckIn 12 Kaba CheckIn Kaba CheckIn is a compact and convenient management program for the check-in and checkout procedure. It can be used to manage access authorisations for guests and staff at small hotels, guest houses and bed and breakfast establishments Creating a project for Kaba CheckIn Requirements The following points must be observed when creating a project for Kaba CheckIn: Kaba CheckIn can only be operated with CardLink authorisations. All doors and, where necessary, the respective door groups must be registered in the project. The CheckIn column must be shown in the Actuators and Door groups tabs within the KEM software. Actuator programming must be up-to-date. A block-key (service key) must be created. 1. Launch the KEM software. 2. Create a new project or open an existing project. User (administration) To use Kaba CheckIn, users of the program must be created and registered. To do this, a user with the 'Administrator' role and at least one user with the 'Kaba CheckIn user' role are required. These can be created immediately upon starting the CheckIn wizard or in the user administration settings Registering a Kaba CheckIn project in KEM Reading in/importing media Set up media with CardLink authorisation. [} 6.8.1] Creating an actuator and assigning a master Set up actuators [} 6.8.1]. Actuators with a registered door no. and a tick in the CheckIn column are available for the rooms in the Check-in view. If there is no tick in the CheckIn column, the actuators are not displayed in the Check-in view Setting up door groups Procedure 1. Set up door groups. [} 6.8.1] Other access points such as those for underground parking, lifts, restaurants and fitness centres and spas can be grouped in door groups. To display them in the program, they must be marked accordingly in the CheckIn column of the 'Door groups' tab in KEM. Kaba evolo Manager V

102 Kaba CheckIn 2. Select one of the following options in the CheckIn column: a) Not used - Register new project in KEM in full b) Used - Select CheckIn project c)used, preselected - Open CheckIn project in KEM Programming doors with the programmer Program actuators. [} 6.8.1] 12.3 Configuring and activating Kaba CheckIn Requirement The project is registered in KEM in full. Procedure The following steps must be performed for the configuration and activation: 1. Click on the 'Wizards' button in the Navigator toolbar. 2. Launch the CheckIn wizard. 3. Follow the instructions in the wizard. 4. Individual requirements can be defined in the Kaba CheckIn default data. Once a user profile has been created, the project can then only be opened with the corresponding user name and the associated password. The user names determine whether the Kaba CheckIn or the KEM software should be opened. Changing the background image The background image in the Kaba CheckIn default data can be changed as follows. PNG, JPG and BMP formats are supported. Select the desired image file from the computer drive Registering users in user administration 1. Select the 'User administration' menu from the Start toolbar. 2. Click on the 'New' button. A new user is added on the left-hand side. 3. Register the user properties on the right-hand side. 4. Activate the 'Kaba evolo Manager password' option. 5. Select the 'Change' button to open the password dialogue. 6. Enter the password. 7. Click on the 'OK' button. 102 Kaba evolo Manager V 5.2

103 Kaba CheckIn User authentication with a password is activated. The 'Administrator' option is activated within the user rights. If only one user is registered, the Admin [Administrator] user right cannot be modified. 8. Exit user administration by clicking on the 'Close' button. Deleting a user 1. Select the 'User administration' menu from the Start toolbar. 2. Select the user to be removed. 3. Click on the 'Delete' button. The user is removed. 4. Click on the 'Close' button. When the last user (Admin) is deleted, user administration is disabled. Changing the user password 1. Select the 'User administration' menu from the Start toolbar. 2. Select the user. 3. Navigate to the 'Authentication' menu. 4. Click on the 'Change' button. 5. Enter the password and click on the 'OK' button. 6. Click on the 'Close' button Operation Opening CheckIn 1. Launch the Kaba evolo Manager (KEM) software. 2. Select one of the following options: a) Create a new project: - Register a new project in KEM in full. - Configure and activate a CheckIn project. The rest of the process continues as described in [} 12.2]. b) Open a project with CheckIn (existing project): - Select CheckIn project. - Enter the user name and password for the respective CheckIn project. - Click on the 'OK' button. c) Open a project without CheckIn (existing project): - Open CheckIn project in KEM. - Enter the user name 'Admin' and the password for the respective KEM project. - Click on the 'OK' button Arrival (check-in) Kaba CheckIn is opened. Kaba evolo Manager V

104 Kaba CheckIn 1. Click on the 'Check-in' button. 2. Place an empty medium on the desktop reader. 3. Check or modify the check-in date and time. 4. Enter the number of days or check-out date (departure). 5. Check or modify the check-out date and time. 6. Modify the number of keys being issued. 7. Select the room under 'Rooms' and activate by moving to 'Selected rooms'. 8. Activate other access points, e.g. for the spa or fitness centre. 9. Enter the name of the guest. 10. Complete the process by clicking on the 'Program key' button. 104 Kaba evolo Manager V 5.2

105 Kaba CheckIn Generating a block-key A block-key is created by selecting 'Generate block-key' and can be used to block keys, if they are lost, for example. Requirement Kaba CheckIn is opened. Procedure 1. Click on 'Check-in'. 2. Place the block-key (service key) on the desktop reader. 3. Select one or more rooms under 'Rooms'. If multiple rooms are to be blocked, multiple rooms can be selected and transferred together to the block-key. Every time a block-key is generated, the previous block-key on the medium in question is deleted. 4. Click on the 'Generate block-key' button. 5. Select the key being blocked. 6. Click on the 'Block selected key' or 'Block all keys' button. The block-key is created. 7. Present this block-key to the actuators of the relevant rooms. Wait for the confirmation/ signals from each actuator (one long acoustic signal and one green optical signal). The rooms can then no longer be accessed using the blocked key Room status The 'Room status' is an overview of the current room occupations. Kaba evolo Manager V

106 Kaba CheckIn Departure (check-out) Kaba CheckIn is opened. 1. Place the guest's medium on the desktop reader. 2. Complete the process by clicking on the 'Check-out' button. The check-out process is completed and the authorisations on the medium are deleted Verification Verification provides the option to check the data that is on the presented key, such as on a key that has been found Place the key or block-key on the desktop reader. 2. The current data is displayed. Kaba evolo Manager V 5.2

107 Kaba CheckIn Switching from CheckIn to KEM 1. Exit the CheckIn program by selecting 'ESC'. 2. Open KEM using the user name, e.g. Hotel Taube, and password. Kaba evolo Manager V

108 Lost medium 13 Lost medium The access authorisations for lost media must be revoked CardLink If user media are lost, their validation will no longer be renewed. As a result, these user media become invalid and access is blocked. If a user medium must be blocked within the duration of validity of a validation, the block should be carried out on all affected components. Procedure 1. Open the 'Basic settings' menu from the Navigator toolbar. 2. Navigate to the 'Media' tab. 3. Select all media or an individual lost medium. 4. Open the context menu. 5. Navigate to 'Change status'. 6. Select the status 'Lost'. 7. A form can be printed out if required. 8. Open the 'Authorisations' menu from the 'Navigator' menu bar. 9. The relevant components which need to be updated are displayed in the blacklist. 10. Program components. [} 6.8.1] 11. Confirm programming. [} 6.8.1] 108 Kaba evolo Manager V 5.2

109 Lost medium The blacklist is only available for the CardLink authorisation type. When operating with validation components, the user medium should be entered in the blacklist. The lost medium can then no longer be validated. The medium only becomes invalid once the validation duration has lapsed. When operating with standalone components, the medium should be entered in the (CardLink) blacklist and subsequently transferred to all standalone components for the respective site with the programmer or service medium. All media which have been entered in the blacklist are blocked for the corresponding components CardLink with terminal In terminal mode, the medium is assigned the 'Lost' status in the KEM software. The medium is no longer validated by the terminal Whitelist When a medium is lost, it is important to revoke the authorisation on the actuators. When operating with standalone actuators, the current list of authorised media is transferred to all standalone actuators with the programmer. A lost medium no longer appears on this list. Procedure 1. Open the 'Basic settings' menu from the Navigator toolbar. 2. Navigate to the 'Media' tab. 3. Select the lost medium. If several media are to be entered as lost, select them. 4. Open the context menu. 5. Navigate to 'Change status'. 6. Select the status 'Lost'. 7. A form can be printed out if required. 8. Program the actuators. [} 6.8.2] 9. Confirm programming. [} 6.8.1] Kaba evolo Manager V

110 Care and maintenance 14 Care and maintenance 14.1 Data security A sudden system crash can corrupt data on a computer. It is important to regularly save data to external media and to keep these in a secure location (e.g. safe or safe deposit box). A security back-up can be automated in the project properties [} 6.2] Updating Kaba evolo Manager An update can be purchased via the distribution channel. The installation should be carried out as indicated in the chapter on Installing software [} 3.2]. 110 Kaba evolo Manager V 5.2

111 EAC Service Tool 15 EAC Service Tool The EAC Service Tool is an auxiliary program for updating firmware data and for diagnoses. The EAC Service Tool can also be launched directly (the system software must not have already been started up). Path: Start/All Programs/Kaba/Kaba EAC Service Tool. Programmer 1364 Programmer 1460 Actuators firmware Desktop reader LE- GIC/MIFARE/MRD Programmer 1460 memory image Actuator memory image (V4) Wizard for updating the programmer firmware. Wizard for updating the programmer firmware. Wizard for transferring the firmware for the components to the programmer. Wizard for updating the desktop reader firmware for the selected technology. Wizard for creating a ZIP file with the memory content of the programmer. A tool for problem-solving in support cases. Wizard for creating a ZIP file with the memory content of the component. A tool for problem-solving in support cases Programmer 1460 updating firmware 1. Start the 'EAC Service Tool auxiliary program. 2. Connect the programmer to the computer. 3. Click the 'Programmer 1460' button. 4. Follow the Wizard s instructions. 5. Select the current firmware file and confirm by selecting 'Next'. The programmer is updated. Kaba evolo Manager V

112 EAC Service Tool 6. Click on the 'Finish' button Programmer 1364 updating firmware 1. Start the 'EAC Service Tool auxiliary program. 2. Connect programmer 1364 to the computer. 3. Click the 'Programmer 1364' button. 4. Follow the Wizard s instructions. 5. Select the current firmware file and confirm by selecting 'Next'. The programmer is updated. 6. Click on the 'Finish' button Actuators updating firmware 1. Start the 'EAC Service Tool auxiliary program. 2. Connect the programmer to the computer. 3. Press the 'Actuators firmware' button. 4. Follow the Wizard s instructions. 5. Search for firmware files on the computer. Please note: The firmware files are located on the computer drive in the Kaba\Kaba evolo manager V5.X\Firmware\Actuator folder. (All available files are displayed.) 6. Mark the desired firmware files. Note: files displayed as inactive are already on the programmer. The current files are marked with a green PIN marker. 7. Using the arrow button (in the middle), transfer the selected files to the programmer page. 8. Click on the 'Next' button. The selected firmware files are transferred to the programmer. 112 Kaba evolo Manager V 5.2

113 EAC Service Tool It is also possible to copy several firmware files directly from the Explorer to the 'Files on the programmer' folder. 9. Click on the 'Finish' button. The firmware files are now on the programmer and can be used for a firmware update to the actuator. The firmware update is described in the user manual for programmer Updating desktop reader Start the 'EAC Service Tool auxiliary program. 2. Connect the desktop reader to the computer. 3. Press the button 'Desktop reader < selected technology>'. 4. Follow the Wizard s instructions. 5. Select the current firmware file. Please note: The firmware files are located on the computer drive in the Kaba\Kaba evolo manager V5.X\Firmware\Desktopreader9108 folder. 6. Click on the 'Next' button. The desktop reader is updated. 7. Click on the 'Finish' button Creating a programmer memory image The memory image can only be created with the Programmer Start the 'EAC Service Tool auxiliary program. 2. Connect the programmer to the computer. Kaba evolo Manager V