SAGEM FINGERPRINT BIOMETRIC CONFIGURATION

Transcription

1 SAGEM FINGERPRINT BIOMETRIC CONFIGURATION Table Of Contents LICENSE MAINTENANCE AGREEMENT... 1 APPSERVER INSTALL... 1 CLIENT INSTALL... 1 RECTRAC SETUP... 2 For Visit Processing and/or Household Lookups... 2 Device Configuration:... 2 Optional Toggles:... 3 Other Function Keys:... 3 Family Member Fingerprint Acquisition:... 3 Scanning Member Fingerprints for Daily Processing and Visit Processing:... 5 For RecTrac Login Fingerprint Scanning... 6 Device Configuration:... 6 Optional Toggles:... 6 RecTrac Us er Fingerprint Acquisition:... 7 Important:... 7 SAGEM MODELS:... 8 Sagem MA Sagem MA200 (Used for Access Control)... 8 Sagem MA CONFIGURING THE MA200 FOR ACCESS CONTROL... 9 Assigning the MA200 an IP Address:... 9 Updating the MA200 Firmware to the VSI Ver sion: Updating Other MA200 Settings: Access Control Setup in RecTrac Creating an Access Control Device Access Control Device Creating Channels Linking Access Control Devices Access Control Daily Proce ssing FINTRAC SETUP Multiple FinTrac Database Engines (7.5a6 Only) APPSERVER INSTALL AppServer Configuration (asftlive) CLIENT INSTALL Client Icon Properties (Edit the PF file) Device Configuration Optional Toggles: Other Function Keys: Employee Fingerprint Acquisition: Important: Vermont Systems Inc. 03/09/10 i

2 2009 by Vermont Systems, Inc. This document is the property of Vermont Systems, Inc. and is provided in conjunction with software by means of a licensed contract agreement between the customer and VSI. The document(s) and software referred to in this publication may not be copied, distributed, electronically transmitted, posted on the web or altered in any way without the express written consent of Vermont Systems, Incorporated. The information contained in this document is subject to change without notice. Vermont Systems, Inc. 12 Market Place Essex Junction, VT ii 3/9/2010 Vermont Systems, Inc.

3 License Maintenance Agreement The use of this interface requires a VSI license and annual maintenance agreement. Prior to implementing any process outlined in this document, please contact the Vermont Systems Sales department at to verify that you are authorized to use this interface or to obtain a quote and approval. Appserver Install Note: The Appserver must be linked and configured to all workstations that will be processing finger scans. 1 Log onto the Vermont Systems ftp site, ftp.vermontsystems.com. Please contact VSI at if you do not know the user name and password to enter the ftp site. 2 Download the Sagem folder within the \Files Updates and Drivers folder to a local location on the Appserver machine. Note: Windows 7 users must download and unzip MorphoKit_4_0_3.zip, and then double-click on the MorphoKit4.0.msi file. 3 Run the launch.exe file from within the CD folder. -Go to Install Products -Choose Install Dongle Drivers. Click OK on the Sentinel System Driver Setup screen. -Once that is complete, choose to Install Components From within the InstallShield Wizard, select to install ActiveMkit_Matcher and ActiveMkit_Enrol on the Select Features screen. Continue with the installation. -Exit the SAGEM Morpho Integrator s Kit. -Insert the Ident dongle into a USB port on the appserver PC. This dongle must remain plugged in at all times for the Fingerscan to work correctly. -From within a DOS prompt, go to the C:\Program Files\ SAGEM\Morpho Components\ActiveMkit_Matcher\bin directory. Client Install -From within this directory, run: Activemkit_matcher.exe /service Note: Do not perform the Client install described in this section on the same server/pc where you performed the Appserver Install described in the previous section. 1 Log onto the Vermont Systems ftp site, ftp.vermontsystems.com. Please contact VSI at if you do not know the user name and password to enter the ftp site. 2 Download the Sagem folder within the Files Updates and Drivers folder to a local location on the Client machine. 3 Run the launch.exe file from within the CD folder. -Go to Install Products -Choose Install Dongle Drivers. Click OK on the Sentinel System Driver Setup screen. -Once that is complete, choose to Install MSO Drivers and except all the default options. If you receive a Software Installation screen stating that the software has not passed Windows Logo testing to verify its compatibility with Windows, click Continue Anyway. Vermont Systems Inc. 03/09/10 1

4 -Once that is complete, choose to Install Components Sagem Fingerprint Biometric Configuration From within the InstallShield Wizard, select to install only ActiveMkit_Enrol on the Select Features screen. Continue with the installation. -Exit the SAGEM Morpho Integrator s Kit. 4 Plug the FingerPrint Scanner into a USB port. When Windows recognizes the new hardware, choose to Automatically Install the Drivers. 5 Insert the Verif dongle into a USB port on the client PC. This dongle must remain plugged in at all times for the Fingerscan to work correctly. RecTrac Setup For Visit Processing and/or Household Lookups Device Configuration: Within Device Assignments add a new Sagem Input Device to the database. The Sub-Type should be FingerPrint Sagem Morpho USB and the setup should be done as follows (within your linked devices you should see INPUT=SAGEM): NOTE: The FingerPrint License Size is based upon the number of members in the RecTrac database and will be estimated before purchasing the hardware. This number can always be increased at a later time as your RecTrac database increases. NOTE: Only one Sagem Input Device should be created in the RecTrac database. If multiple Workstations have Sagem Fingerprint Scanners, they should all be linked to the same Input Device in Device Assignments. 2 3/9/2010 Vermont Systems, Inc.

5 Schedule db Rebuild: It is strongly recommended that you schedule the Sagem fingerprint database (sagem.sdb) to be rebuilt every night. This procedure will ensure that the fingerprints scanned in the RecTrac database and the sagem.sdb are always in sync with each other. Optional Toggles: Use Fingerprint On HouseHold Lookups Automatically: This toggle will automatically bring up a Fingerscan Acquisition Window when going into a Household Lookup screen within RecTrac. If needed, the end user can Cancel from this screen and do a standard Household Lookup. This toggle would only be used if customers are present and fingerprint scanning is the primary method used to lookup households. Display Fingerprint Scan Button: This toggle will create a small fingerprint scan button in the lower right hand corner of the screen as soon as the user logs into RecTrac. A user may click on this button at any time to bring up a Fingerscan Acquisition Window. This button will remain viewable at all times regardless of the RecTrac program being used. Typically, this option would not be used in conjunction with the Use Fingerprint On HouseHold Lookups Automatically toggle. Use Appserver Matching Service: This toggle should be checked on if the appserver and the client are NOT on the same machine. In most scenarios the appserver will be running on the RecTrac server and the fingerprint clients will be RecTrac clients in the field which will require this toggle to be checked on. Other Function Keys: Ctrl-Alt-F1: These keys used together will display/remove the Fingerprint Scan button from the screen. Ctrl-Alt-F2: These keys used together will display/remove the Fingerprint Acquisition Window from the screen. Family Member Fingerprint Acquisition: You can acquire fingerprints for family members during daily processing or from within Household Maintenance. To automatically acquire family member fingerprints during pass registrations two toggles must be checked on in pass type maintenance. The Use Internal Photo ID Interface? toggle and the Ask for Cross Ref Number? toggle. With these checked on, the Cross Reference box be displayed after processing a pass registration payment. At this screen, select which finger to scan (the default is Right Index) and press the Finger Scan button. Click Yes to the following message that you will receive. Vermont Systems Inc. 03/09/10 3

6 An Acquisition Window will now be displayed. This will require the family member to scan their finger three times. The finger being scanned must be lifted away from the scanner between each of the three scans. After the three finger scans, you will be returned to the Cross Reference box where you can click Done. You will then have the Acquire Photo/Pass Print Selection box displayed which can be used to gather a family member photo and finalize the transaction. If the finger scan was done incorrectly, you can highlight a Pass Member Name and click the Finger Scan button to return to the Cross Reference box. At that point, you would use the Delete xref button to remove the finger scan from the member and start over with a new finger scan. A fingerprint can also be linked to a family member by selecting a family member from the Family Member Listing within Household Maintenance and clicking the Edit XRef button in the upper right corner of the family member maintenance Core Information screen. 4 3/9/2010 Vermont Systems, Inc.

7 Scanning Member Fingerprints for Daily Processing and Visit Processing: The fingerprint Acquisition Window will come up automatically during Household Lookups in Daily Processing and during Visit Processing only if the Use Fingerprint on Household Lookups Automatically toggle is checked on in the Input Device. If this toggle is not on, the function keys described earlier or the Fingerprint Scan button must be used to display the Acquisition Window. A valid scan on this screen will automatically select the correct family member for Daily Processing or Visit Processing. Vermont Systems Inc. 03/09/10 5

8 For RecTrac Login Fingerprint Scanning Device Configuration: Within Device Assignments add a new Sagem Input-Logon Device to the database. The Sub-Type should be FingerPrint Sagem Morpho USB and the setup should be done as follows (within your linked devices you should see INPUT-LOGON=SAGEM-IN): NOTE: The FingerPrint License Size is based upon the number of members in the RecTrac database and will be estimated before purchasing the hardware. This number can always be increased at a later time as your RecTrac database increases.. NOTE: This device can only be linked at the Work Stations or Defaults level. The system will not allow this device to be linked at the User ID s or Menu Groups level. Only one Sagem Input-Logon Device should be created in the RecTrac database. If multiple Workstations have Sagem Fingerprint Scanners, they should all be linked to the same Input-Logon Device in Device Assignments. Optional Toggles: Only Allow Fingerprint Logons: This toggle will automatically bring up a Fingerscan Acquisition Window when logging into RecTrac. Users that do not have a fingerprint linked in Security File Maintenance will NOT be able to log into RecTrac. There is no option to cancel from the fingerprint scan and log into RecTrac using a standard User ID and Password. If you try to cancel, you will receive the following message: 6 3/9/2010 Vermont Systems, Inc.

9 With this toggle not checked, the fingerprint Acquisition Window will still be displayed when logging into RecTrac, but the system will allow the user to Cancel from the Acquisition Window and log into RecTrac using a standard User ID and Password. Use Appserver Matching Service: This toggle should be checked on if the appserver and the client are NOT on the same machine. In most scenarios the appserver will be running on the RecTrac server and the fingerprint clients will be RecTrac clients in the field which will require this toggle to be checked on. RecTrac User Fingerprint Acquisition: You can acquire fingerprints for RecTrac users from within Security File Maintenance by clicking the FingerPrint button in the middle of the Core screen. NOTE: If a RecTrac user is also in the database as a Family Member, they cannot scan the same finger for both Security File Maintenance and the xref for the Family Member. Both of these scans must be using different fingers. For example, if Right-Index is being used for Visit Processing and Household Lookups then Right-Thumb or Left-Index should be used for RecTrac Logins. An Acquisition Window will now be displayed. This will require the user to scan their finger three times. The finger being scanned must be lifted away from the scanner between each of the three scans. After the three finger scans, you will be returned to the Core screen where you can click Done. The user is now able to log into RecTrac using the fingerprint scanner. Important: The RecTrac software does not store the actual finger image, but does calculate and store the key reference points for a primary finger and a second finger to create a unique identifier for each fingerprint. The image cannot be recreated from the data stored in the database and the generated number would be meaningless to anyone who might gain access to it, so there is no security risk. Vermont Systems Inc. 03/09/10 7

10 Sagem Models: Sagem MA300 Sagem MA200 (Used for Access Control) Sagem MA /9/2010 Vermont Systems, Inc.

11 Configuring the MA200 for Access Control Assigning the MA200 an IP Address: 1. On the Keypad press # * #. This will bring you into an Administrator Identification Login screen. 2. For the PIN, enter and press the OK Menu Button. This will bring you into the Administrator Mode. Note: After 15 seconds of inactivity, the Administrator Identification or Administrator Mode screens will time out and you will be returned to the Main Fingerprint Acquisition Screen. 3. Select the SYSTEM Command from the Menu Options. 4. Select the ASYSTE Application from the Menu Options. This will bring you to the SYSTEM MENU Login screen. (The MACCES selection will return you to the Main Fingerprint Acquisition Screen) 5. Enter a SYSTEM MENU Password of and press the OK Menu Button. You are now logged into the SYSTEM MENU. 6. Press the CONFIG Menu Button and press NEXT until you get to the File of /cfg/net. 7. Press the EDIT Menu Button. At this point you should be in FILE: /cfg/net and SECTION: ip. If not, use the PREV or NEXT Menu Buttons until you have selected this FILE and SECTION. 8. Press the EDIT Menu Button. Press the PREV or NEXT Menu Buttons until subnet is displayed on the screen. Press EDIT, set the subnet, and press OK. 9. Press the NEXT Menu Button. The address field should now be displayed on the screen. Press EDIT, set the IP address, and press OK. 10. Press the NEXT Menu Button. The default gateway field should now be displayed on the screen. Press EDIT, set the default gateway, and press OK. 11. Press the EXIT Menu Button until you are returned to the SYSTEM MENU. From this Menu you will need to use the MORE Menu Button to get to the EXIT Menu Button. This will return you to the Select Your Application screen where the MACCES Menu Button will return you to the Main Fingerprint Acquisition Screen. NOTE: Progress 9 users must make Host file entries on the computer running Access Control for each Sagem MA200 Device. The name for these entries does not matter, but the address must be correct. For example, for 3 Devices your Host file entries would like this (with your IP addresses being used): SAGEM_ SAGEM_ SAGEM_ This is not needed for Progress 10 users. Vermont Systems Inc. 03/09/10 9

12 Updating the MA200 Firmware to the VSI Version: Sagem Fingerprint Biometric Configuration 1. Before updating the Firmware, the MA200 must be placed in the mode that will accept the Firmware download. To do so, disconnect and reconnect the power supply. While the Device is booting up, press the # Button and the second blue Menu Button from the left simultaneously and immediately release. This must be done after the Sagem logo appears on the screen and before STARTING is displayed underneath the logo. If the sequence is successfully completed, the Menu Button options displayed on the screen will be NET, CFG, GO, and RESET. 2. Go into the Sagem folder that was downloaded from ftp.vermontsystems.com, then go into the download folder, then into the Tools folder, and then into the EasyDownloader folder. From within this folder, run the EasyDownloader_1.1.exe. 3. At the EasyDownloader screen enter the IP Address of the Sagem MA200. Do not check on the Password toggle. Select Go. 4. If you receive the following question box, select Yes. If the Sagem MA200 is not in the correct mode you will receive the following error: If so, repeat Step 1 to put the Sagem MA200 in the correct mode to accept the Firmware download. 5. An Open box will now appear, prompting you to select a Download list (*.dnl) file. Browse to the Sagem folder that was downloaded from ftp.vermontsystems.com. Once in that folder, go to the Firmware folder and select the MA.Dnl file. A Communication in Progress box will appear while the files are being loaded. 6. An Open box will now appear, prompting you to select a (*.key) file. Go to the Firmware folder from Step 5 and select the cfg.key file. A Communication in Progress box will appear while the files are being loaded. 10 3/9/2010 Vermont Systems, Inc.

13 7. Once completed you should receive the following messages and the Sagem MA200 will start up and go to the Main Fingerprint Acquisition Screen. Updating Other MA200 Settings: 1. Before updating the other settings, the MA200 must again be placed in the mode that will allow the unit to accept downloads. To do so, disconnect and reconnect the power supply. While the Device is booting up, press the # Button and the second blue Menu Button from the left simultaneously and immediately release. This must be done after the Sagem logo appears on the screen and before STARTING is displayed underneath the logo. If the sequence is successfully completed, the Menu Button options displayed on the screen will be NET, CFG, GO, and RESET. 2. Go into the Sagem folder that was downloaded from ftp.vermontsystems.com and unzip the MtCfg.zip file. Once unzipped, run the MtCfg.exe. 3. At the Morpho Touch Config box enter the IP Address of the Sagem MA200 and click Connect. 4. This will bring up a Configuration Tree screen. Expand the Maccess key. Vermont Systems Inc. 03/09/10 11

14 5. Expand the Relay key. There will be two values listed under this key, one labeled active and one labeled time in 100ms.The active value should be set to 2 and the time in 100ms value can be set to your desired relay time. Both values can be modified by right-clicking on the value and going to Change Value. 6. Expand the ManualEntry key. There will be four values listed under this key, allow manual entry, hotkey label, max id length, and mid id length. The allow manual entry value should be set to 7. Expand the MatchOnServer key. There will be three values listed under this key, port, serverip, and uri. The port value should be set to The serverip value should be set to the IP Address of the Access Control Computer and the uri value should be left blank. 8. Go to the Config pull-down menu in the Configuration Tree and select Send CFG to MT. A box will quickly be displayed on the screen showing Work In Progress, Writing CFG Information. 9. Return to the Sagem MA200 and press the GO Menu Button. The Sagem MA200 will start up and go to the Main Fingerprint Acquisition Screen. Access Control Setup in RecTrac Creating an Access Control Device 1 Go to Files System Other Maintenance Printer/Device Maintenance. Click Add to add a device. This will bring you into the following screen. 1. new 2 In the Type field, choose Access. In the ID field, enter a user defined device name (Ex. MA200). In the Sub-Type field select Ethernet Access (MA200). Click Next. 12 3/9/2010 Vermont Systems, Inc.

15 3 Enter the device description in the Desc field and confirm that the Status is Active. 4 The Accept Message is the message that will be displayed on the MA200 screen when a valid fingerprint is scanned. Text on multiple needs to be separated by a pipe (the character which is created by holding down Shift and the backslash key \ at the same time). The Denied Message is the message that will be displayed on the MA200 screen when an invalid fingerprint is scanned. 5 The Exit Password field is the password used to exit the Access Control program on the RecTrac client machine. 6 The Display Photos toggle will display photos on the RecTrac Access Control machine when members are scanning their fingerprints. 7 Toggling on Do Not Allow Access within Specified Time will prevent the access point to be opened again with the same pass within the Minimum Time Between Swipes (Sec). If this toggle is not toggled on, the access point will open on every swipe but will only record a single visit for the same pass that is swiped during the Minimum Time Between Swipes (Sec). 8 In the Minimum Time Between Swipes (Sec), enter the minimum amount of time you require before the same card can be used again. See the previous step for additional information. 9 Adjust the FingerPrint License Size to your number of licenses. After adjusting the FingerPrint License Size, you will need to contact VSI for an Access Code. 10 The Use AppServer Matching Service and Allow Matching Service to Store Fingerprints toggles should be checked on if the appserver and the client are NOT on the same machine. For a typical setup, these toggles would be checked on. 11 The Sagem Morpho db Path/Filename should be set to c:\vsi\misc\sagem.sdb (or the appropriate drive letter for the VSI folder) and the Matching Threshold should be set to The next step is to configure each individual channel (access point) that this device controls. Click the Next button to advance to the Channels screen. Vermont Systems Inc. 03/09/10 13

16 26BAccess Control Device Creating Channels 1 To create a channel for an access control device click the New Channel button. 2 In the Please Enter the Channel Number For This New Channel field, enter the first channel. Click OK. 14 3/9/2010 Vermont Systems, Inc.

17 3 On the resulting screen, you will have the new channel listed in the browser. Set the specifications for this individual channel by highlighting the channel. 4 Valid Pass Settings In the Swipe Input From: (Host:Port) field, enter the IP Address of the Sagem MA200 Device, a colon, and then the port number of the device. The default port number for the device is The #Pulses and the Duration-1/10 Sec fields are set on the MA200 and are not used in this Device. 5 Invalid Pass Settings (Alarms) In the Alarm Output To: (Host:Port) field, enter the same IP address and port as entered in the previous step. The #Pulses and the Duration-1/10 Sec fields are set on the MA200 and are not used in this Device. 6 Select the Channel Is Active option if the channel you are creating is active at this time. This toggle is typically turned on. 7 The Alarm Is Active toggle should be on if you want the system to use the Invalid Pass Settings (Alarms) information established in step 5. This toggle is typically turned on. 8 The Data Input 1: field should be set to Not Used. 9 In the Label field, enter the description of the access point that this channel controls. For instance, if setting up a channel for Door #1 at the Gymnasium, enter Gym Door #1. 10 The Valid Pass Types and Times browser displays a list of valid pass types for the highlighted channel and time ranges for when those valid pass types can be scanned. 11 To add a pass type to the list, click the Add Pass button. Right-click in the first available box of the Description column. This will display a pick list of all of your pass types. Vermont Systems Inc. 03/09/10 15

18 12 Highlight the first pass type that will yield a valid swipe for this channel and click the Select button. 16 3/9/2010 Vermont Systems, Inc.

19 13 At the Channel screen, the pass type that was selected will be listed. Right click in the Restrict/Allow Code field and the restriction/allowance code that represents the time a pass of this type can be validated. 14 Repeat steps for each pass type that should yield a valid swipe for this channel. 15 Click Save Channel. The settings for this channel will display in the channel browser. 16 To create more than one channel, repeat steps Keep in mind that each device can hold up to eight channels. For the ninth channel, create another access control device. 17 Complete the channel setup and click Done. Vermont Systems Inc. 03/09/10 17

20 27BLinking Access Control Devices 1 From the main menu in RecTrac, go to Files System Users/Menus Maintenance Security Maintenance. Enter the Master Password and click OK. 2 You will want to create an individual User ID and Menu Group to be used to run the Access Control Program. If you needed to create more than one device due to having more than 8 channels, you will also need to create one User for each Device. 3 If you do not have an Access Control User, you must create a new one. If you do not have an Access Control Menu Group, you must create a new one as well. You will also need to create a hot button that runs the Access Control program. To do this go to Func Edit Desktop Hot Button Maintenance. You will need to add a button that runs pm0321.r. Use RecTrac help (F1) to assist in creating this hot button for the access control menu group. 4 With the Access Control User created, go to Files System Device Maintenance Device Assignments. Expand the User ID s and select the Access Control User. 5 In the Device Type field, select ACCESS. In the Device To Add field, choose the device created in the Creating an Access Control Device in RecTrac section (on page12). 6 Click the Add To Linked Devs button to link the device to this user. The device type and name will display in the linked devices box to the right of the screen. 7 After the Device is linked to the User, click Done and repeat the steps for all other Users/Devices. When finished, Exit from Device Assignments. 18BAccess Control Daily Processing 1 Log into RecTrac as the Access Control user. 2 Click on the Access Control hot button to start the Access Control program (pm0321.r). 3 View the entries list to verify that the Sagem MA200 Devices are communicating with the Access Control program. 4 As individuals swipe into an Access Control location, the Log browser will record the pass numbers of the 20 most recent visits. 5 The Statistics button displays all swipe statistics since the last time you logged into the access control program. 6 The Raw Log is used for debugging purposes. If you want to view the raw data for a swipe, activate this option and then process a swipe. 18 3/9/2010 Vermont Systems, Inc.

21 6BFinTrac Setup Must be on FinTrac 7.5a6 or higher Used for FinTrac TMS 28BMultiple FinTrac Database Engines (7.5a6 Only) 1 Log onto the Vermont Systems ftp site, Hftp.vermontsystems.comH. Please contact VSI at if you do not know the user name and password to enter the ftp site. 2 Browse to the Files Updates and Drivers folder. Copy the FinTrac 2 folder to the <path to>\vsi directory on your server that hosts your existing FinTrac database. 3 On the database server, browse to the <path to >\vsi\fintrac2 directory. Edit the fintrac2.st file so that the paths in the file are correct (e.g., c:\vsi\fintrac2\fintrac2.d1). Save the file. 4 Repair the database using the repair utility located in Start Programs VSI Database Utilities RepairDB. 5 Create a new FinTrac2 database engine. The new engine must point to the fintrac2 database that you repaired in the previous step. 6 Make sure the port number for this engine is Start the FinTrac2 database engine. 7BAppserver Install Perform the steps in the following section on the server that has your FinTrac appserver configured. Generally this is the same server that hosts your FinTrac database. 1 Log onto the Vermont Systems ftp site, Hftp.vermontsystems.comH. Please contact VSI at if you do not know the user name and password to enter the ftp site. 2 Download the Sagem folder within the Files Updates and Drivers folder to a local location on the Appserver machine. 3 Run the launch.exe file from within the CD folder. -Go to Install Products -Choose Install Dongle Drivers. Click OK on the Sentinel System Driver Setup screen. -Once that is complete, choose to Install Components From within the InstallShield Wizard, select to install ActiveMkit_Matcher and ActiveMkit_Enrol on the Select Features screen. Continue with the installation. -Exit the SAGEM Morpho Integrator s Kit. -Insert the Ident dongle into a USB port on the appserver PC. This dongle must remain plugged in at all times for the Fingerscan to work correctly. -From within a DOS prompt, go to the C:\Program Files\ SAGEM\Morpho Components\ActiveMkit_Matcher\bin directory. -From within this directory, run: Activemkit_matcher.exe /service Vermont Systems Inc. 03/09/10 19

22 29BAppServer Configuration (asftlive) Sagem Fingerprint Biometric Configuration Modify the settings of your existing appserver asftlive. After making the changes described below you must stop and then re-start the appserver (asftlive). This section is only required for version 7.5a6. 1 On the FinTrac database server Open the Progress Explorer Tool. 2 Expand the + symbol to the left of AppServer. Right click asftlive. Click Properties. Expand the + symbol to the left of Server. Click General. In the Server startup parameters: field add the following behind the existing value in this field: -db fintrac2 -H <db servername> -S 2682 Where <db servername> is the name of the server that hosts the fintrac2 database. Do not include the < or > symbols. The line should look similar to the following line: -db FinTrac -H <db servername> -N tcp -S ld fin1 -db fintrac2 -H <db servername> -S 2682 rereadnolock 3 Click OK. 4 Stop and then start the asftlive AppServer. 20 3/9/2010 Vermont Systems, Inc.

23 8BClient Install Note: Do not perform the Client install described in this section on the same server/pc where you performed the Appserver Install described in the section titled Appserver Install. 1 Log onto the Vermont Systems ftp site, Hftp.vermontsystems.comH. Please contact VSI at if you do not know the user name and password to enter the ftp site. 2 Download the Sagem folder within the Files Updates and Drivers folder to a local location on the Client machine. 3 Run the launch.exe file from within the CD folder. -Go to Install Products -Choose Install Dongle Drivers. Click OK on the Sentinel System Driver Setup screen. -Once that is complete, choose to Install MSO Drivers and except all the default options. If you receive a Software Installation screen stating that the software has not passed Windows Logo testing to verify its compatibility with Windows, click Continue Anyway. -Once that is complete, choose to Install Components From within the InstallShield Wizard, select to install only ActiveMkit_Enrol on the Select Features screen. Continue with the installation. -Exit the SAGEM Morpho Integrator s Kit. 4 Plug the FingerPrint Scanner into a USB port. When Windows recognizes the new hardware, choose to Automatically Install the Drivers. 5 Insert the Verif dongle into a USB port on the client PC. This dongle must remain plugged in at all times for the Fingerscan to work correctly. 30BClient Icon Properties (Edit the PF file) 1 On a client PC right click a FinTrac Live icon and select Properties. In the target field find the pf parameter. Make a note of the path to the live.pf file. Click OK. Browse to the live.pf file (e.g., c:\vsi\fintrac\ini\live.pf). 2 Using Notepad, edit the live.pf file. You will need to add a line below the line that starts with ld fin1 (the second line) and insert the following information: -db fintrac2 -H <db servername> -S N tcp Where <db servernane> is the name of the server that hosts the fintrac2 database. Do not include the < or > symbols. The file should look similar to the following: -db fintrac -H <db servername> -S N tcp -ld fin1 -db fintrac2 -H <db servername> -S N tcp -ld fin2 -p ft1000.p -filterocxevents -mmax Bt D Save the file. Vermont Systems Inc. 03/09/10 21

24 31BDevice Configuration Within Device Assignments add a new Sagem Input Device to the database. The Sub-Type should be FingerPrint Sagem Morpho USB and the setup should be done as follows (within your linked devices you should see INPUT=SAGEM): NOTE: The FingerPrint License Size is based upon the number of employees in the FinTrac database and will be estimated before purchasing the hardware. This number can always be increased at a later time. NOTE: Only one Sagem Input Device should be created in the FinTrac database. If multiple Workstations have Sagem Fingerprint Scanners, they should all be linked to the same Input Device in Device Assignments. Schedule db Rebuild: It is strongly recommended that you schedule the Sagem fingerprint database (sagem.sdb) to be rebuilt every night. This procedure will ensure that the fingerprints scanned in the FinTrac database and the sagem.sdb are always in sync with each other. 22 3/9/2010 Vermont Systems, Inc.

25 37BOptional Toggles: Use Fingerprint On HouseHold Lookups Automatically: This toggle will automatically bring up a Fingerscan Acquisition Window when going into a Employee Lookup screen within FinTrac. If needed, the end user can Cancel from this screen and do a standard Employee Lookup. Display Fingerprint Scan Button: This toggle will create a small fingerprint scan button in the lower right hand corner of the screen as soon as the user logs into FinTrac. A user may click on this button at any time to bring up a Fingerscan Acquisition Window. This button will remain viewable at all times regardless of the FinTrac program being used. Typically, this option would not be used in conjunction with the Use Fingerprint On HouseHold Lookups Automatically toggle. Use Appserver Matching Service: This toggle should be selected if the appserver and the client are NOT on the same machine. In most scenarios the appserver will be running on the FinTrac server and the fingerprint clients will be FinTrac clients in the field which will require this toggle to be selected. 38BOther Function Keys: Ctrl-Alt-F1: These keys used together will display/remove the Fingerprint Scan button from the screen. Ctrl-Alt-F2: These keys used together will display/remove the Fingerprint Acquisition Window from the screen. 32BEmployee Fingerprint Acquisition: You can acquire fingerprints for FinTrac users from within Employee Payroll Record Maintenance (Files Payroll Employee Records Maintenance Employee Payroll Record Maintenance.) Once in the program, highlight the employee ID and then click the Finger Enroll button at the bottom of the screen. A Cross Reference box appears, the Finger Scanner box will default to Right Index. Click Finger Scan. An Acquisition Window will now be displayed. This will require the user to scan their finger three times. The finger being scanned must be lifted away from the scanner between each of the three scans. After the three finger scans are complete, click Done. The employee can now punch into and out of TMS using the Sagem fingerprint scanner if the PC they are punching into has a Sagem Input device linked.. Vermont Systems Inc. 03/09/10 23

26 3BImportant: Sagem Fingerprint Biometric Configuration The FinTrac software does not store the actual finger image, but does calculate and store the key reference points for a primary finger and a second finger to create a unique identifier for each fingerprint. The image cannot be recreated from the data stored in the database and the generated number would be meaningless to anyone who might gain access to it, so there is no security risk. 24 3/9/2010 Vermont Systems, Inc.