Title Aperio Online Configuration Guide. Category Aperio/Platform

Similar documents
Aperio Online Quick Installation Guide

Aperio Programming Application Manual

Aperio TM. Technology

Synergis Master Controller 2.2 Integration Guide for Axis Interface Modules

Quick Start. Appearance and pin assignments

C5S120 Installation and Connection Guide

isma-b-mg-ip User Manual Global Control 5 Sp. z o.o. Poland, Warsaw

Access Control Technology Ltd. reserve the right to change the contents of this manual and the system it applies to without prior notice.

BioPointe. User's Manual

Quick Start Installation Guide

Synergis Master Controller 2.2 Integration Guide for Mercury Interface Modules

GV-AS200 Controller. Hardware Installation Guide

SALLIS. Installation & Maintenance Guide. Issue: /07/03. Author: Jon Mendizabal

SWIFT INSTALLATION QUICK START GUIDE

Aperio. Wireless Possibilities for Online Access Control. Key Features: Warranty: Technical Information: 48 Aperio

iloq S10 Online Configuration Guide

Yale Locks. Z-Wave Plus System Integrators Guide. Yale Real Living Electronic Deadbolts. Document Revision: 4. August 23, 2016

ACTpro Single Door IP Controller. Operating & Installation Instructions

RFID A1 Module User Manual V1.183

Access Control SR35iA Aperio Controller Configuration Manual MP1. Siemens AB Security Products

1. Press "Speed Test" to find out your actual uplink and downlink speed.

GV-AS Controller. Installation Guide

Akcess BioMetrics Corporation. Bio2Touch. Access Control Fingerprint Reader. User's Manual. Akcess BioMetrics Corporation

GV-Card Reader. User s Manual

IPassan Installation guide

HRM-0800 Instruction Manual

WLS-TC Specifications

Logosol Joystick Node LS-731

SANYO DENKI Servo Amplifier SANMOTION R and Pro-face AGP-3****-CA1M/LT Connection Procedure. Instruction Manual. Version1.0 (

Basic ASSA Aperio Configuration Application Note

Access control panel U-Prox IC E (Elevator control)

Manual# Installation Manual SDU 410. Safety Shutdown Unit

6222 Two Door Module Technical Operations Manual

JMY505G User's Manual

ACTpro 1500 Single Door IP Controller

RS485 MODBUS Module 8AO

Networking the printer

Poseidon 4002 MANUAL

CRC220 and CRC221 INSTALLATION GUIDE. REF No.: DOC0014 ISSUE: 09

M2 OLED Temperature Monitor Instructions PN 1841

OMRON Corporation. IO-Link Connection Guide (EtherCAT(R) Host Communications) Machine Automation Controller NJ-series

OMNI Select troubleshooting guide

Operational Manual for ID Lock 101 with Z-Wave Module 01A

SMART RELAY SRW 01 V4.0X

GV-AS/EV Controller. User s Manual

SDM-8AO. Expansion Module 8 analog outputs. Manufactured for

Installation & User Manual

RS485 MODBUS Module 8I8O

Configuring Door and Device Templates

PHOENIX CONTACT GmbH & Co. KG

Copyright 2009, NITGEN&COMPANY Co., Ltd. All rights reserved.

What is SmartUPS. Connections. Button and LED Indicator. SmartUPS User Guide

Zone Wing Application Release Notes

Set-up of ZK RFID Pin Pad

DC M2 OLED Meter Instructions PN 1830 / PN 1832 / PN 1833 / PN 1834

Flex Series User Guide

Ethernet Network Card Installation and Operation Manual

RS485 MODBUS Module 16I-M

U-FLASH Setup Guide U-FLASH.

Installation & User Manual V2.08

Installation Instructions. i-net Access Control Units. Part Code: IA-PCB IA-ACB IA-ACU IA-KIT

Updating Reader Firmware

Motors Automation Energy Transmission & Distribution Coatings. Profibus DP SRW 01. User s Manual

DS-K2600 Series Access Controller. Quick Setup Guide. Ness V1.0

QCPort Cover Control Trouble Shooting Guide

USER GUIDE. Preliminary

PR602LCD v1.0 Installer Manual Rev. A

Installation guide for PR302 v2.0 Rev. E

SHP-DH520. Samsung SDS Door Lock

System Galaxy Quick Guide CONFIGURATION AND OPERATION APERIO ASSA ABLOY SG 10.4 OCT 2014 WIRELESS READERS & COMMUNICATION HUBS

SHS-P710. Samsung SDS Door Lock

ICF-1150 Series Quick Installation Guide

i-7550 PROFIBUS to RS-232/422/485 Converter User's Manual High Quality, Industrial Data Acquisition, and Control Products

Cardax FT Controller 3000

Connection Guide. SMC Corporation. EtherCAT(R) Machine Automation Controller NJ-series

How to upgrade firmware in DSL-xxx series router

Controlsoft Identity and Access Management Software Controlsoft Identity Access Management Software

SP2+ Swing Handle Lock Manual

ID Lock ID Lock 150 User Reference Manual Rev 2.1

USB-I2C USB to I2C Communications Module Technical Specification

AD-300 AD-301. Networked hardwired lock user guide Instructions for adaptable series networked hardwired locks

Supports ISO14443A Mifare Classic 1K, Mifare Classic 4K, Mifare Ultralight. Fast data transfer - Contactless communication up to 106 KHz

H2i. s u p p o r f i n g e r t e c. c o m. H2i. Simple Fingerprint Door Access & Time Attendance System. User Guide

BACnet Protocol Converter Kit for Use with Bacharach MultiZone Gas Monitors. Installation Manual

GLOSSARY. See also: Access point

F6-Fingerprint. Access Control/Reader. User Manual. F6 - Simplified Instruction. (Master Code) # (Factory default:1234) Enter the Programming Mode

UTM Content Security Gateway CS-2001

Electronic Lock System

Bluetooth RS-232 Dongle. User s Manual BTS-100

Intelligent Devices IDI 1100 Series Technical Manual

INSTALLATION GUIDE. InBio Pro Series Access Control Panels. Date: June, 2016 Version: 1.3

Startup Guide. NetAXS-123. Version 5.2

INT-RS module - short technical description

X-CAM A10-3H 3 Axis Gimbal for GOPRO. User Manual ( V2.00 )

FUNCTION OF PRODUCTS (PASSTECH CO., LTD)

SmartFan Vortex. I2C Speed Control for 12 VDC Fans CONTROL RESOURCES INCORPORATED. The driving force of motor control & electronics cooling.

e-ask electronic Access Security Keyless-entry

Quick Setup Guide AMG Skywave III AMG8300S series Wireless Radios Products

3G/4G Wireless N150 Router m2

Two Door Controller GEN-045

Transcription:

Jörgen Frejd ST-001322 A 2012-06-25 1 (28) ASSA ABLOY

Jörgen Frejd ST-001322 A 2012-06-25 2 (28) 1 Table of Contents 1 TABLE OF CONTENTS... 2 2 REVISION HISTORY... 3 3 INTRODUCTION... 3 3.1 Purpose... 3 3.2 Scope... 3 3.3 Definitions and abbreviations... 3 3.4 References... 3 4 SYSTEM OVERVIEW... 4 4.1 The Aperio system... 4 4.2 The Aperio programming application... 4 4.3 Regulatory and security information... 4 5 CONFIGURATION OF THE AH30 COMMUNICATION HUB... 5 5.1 Setting the DIP switches... 5 5.1.1 DIP 1-5 Selecting the EAC address/automatic paring... 5 5.1.2 DIP 6-8 RS-485 bus settings... 6 5.1.3 DIP 9 (AH30 only)... 7 5.1.4 DIP 10 (AH30 only) Internal/external antenna... 7 5.2 Connecting to the RS-485 bus... 8 5.3 Connecting to supply voltage... 8 6 PAIRING LOCKS AND COMMUNICATION HUBS IN PAIRING MODE... 9 7 PAIRING LOCKS AND COMMUNICATION HUBS WITH THE PROGRAMMING APPLICATION... 9 7.1 Information of Encryption key...10 7.2 Checklist for pairing locks and communication hubs...10 7.3 Step 1 - Making a new door installation...10 7.4 Step 2 - Scanning for Communication hubs...11 7.5 Step 3 - Pairing locks with communication hub...12 7.6 Step 4 - Configuration of locks and communication hubs Wizard...14 7.6.1 Apply saved configuration on several locks...19 7.7 Step 5 - Establish secure communication...21 7.8 Step 6 - Testing after the first configuration...22 8 LED INDICATIONS... 23 8.1.1 Communication Hub LED indication...23 8.1.2 Lock normal operation LED indication...24 8.1.3 Lock maintenance LED indication...24 9 TROUBLESHOOTING... 25 9.1 Lock self test LED indication...27

Jörgen Frejd ST-001322 A 2012-06-25 3 (28) 2 Revision History Revision Date Changed by Description PA1 2012-05-09 Anders Näslund/ Jörgen Frejd First draft of this manual for Aperio SW release 2.6.1. PA2 2012-06-19 Jörgen Frejd Updated after internal review. 3 Introduction 3.1 Purpose The main purpose of this manual is to provide necessary information for configuration of Aperio Online based products. The manual is intended for installation personnel, project managers and people with similar responsibilities. 3.2 Scope This manual covers the standard configuration of an AH30 communication hub using the RS-485 interface (for configuration and connection to the Wiegand interface as well as the AH15 communication hub, refer to the Aperio Online Technology Reference Manual, ref [1]). This manual is applicable to version 2.6.1 and later releases of Aperio Technology. 3.3 Definitions and abbreviations Expression [Expression] Description [Description] 3.4 References [1] ST-001321-Aperio Online Technology Reference Manual

Jörgen Frejd ST-001322 A 2012-06-25 4 (28) 4 System overview 4.1 The Aperio system The Aperio system is used in the following way: The user holds an RFID credential to the lock. The lock sends card credentials wirelessly to the communication hub which in turn communicates with an EAC (Electronic Access Control) system (wired through RS-485 or Wiegand). The EAC system makes the access decision. The decision is sent via the communication hub to the lock and access is granted or denied. Lock IEEE802.15.4 (2.4GHz) RS-485/Wiegand Programming application Communication Hub EAC system Figure 1, Aperio technology overview 4.2 The Aperio programming application The programming application is used for the configuration of a door installation. It is installed on a laptop. The laptop has an Aperio USB radio device connected to one of its USB ports. The USB radio device enables the application to connect via a communication hub to the door lock. The lock communicates via the communication hub either with the EAC or with the programming application. 4.3 Regulatory and security information Refer to the Aperio Online Technology Reference Manual, ref [1] for regulatory and security information.

Jörgen Frejd ST-001322 A 2012-06-25 5 (28) 5 Configuration of the AH30 communication hub This chapter describes how to perform a default configuration of an AH30 communication hub using the RS-485 interface (for configuration and connection to the Wiegand interface, refer to the Aperio Online Technology Reference Manual, ref [1]). Configuration of the communication hub to the EAC includes setting the DIP switches and if not done earlier, connecting it to the RS-485 bus and connecting it to power supply, according to applicable section below. 5.1 Setting the DIP switches INT/EXT Internal/external antenna Not used TERM UP DOWN A4 A3 A2 A1 Activates termination of EAC bus Activation of pull up resistor Activation of pull down resistor Manual EAC Address (Only possible with one lock paired) Manual EAC Address Manual EAC Address Manual EAC Address A0 Dip switch overview Manual EAC Address/Automatic pairing See below for an explanation on how to set the DIP Switches 5.1.1 DIP 1-5 Selecting the EAC address/automatic paring The DIP 1-5 has two functions, either automatic paring mode, or manual selection of EAC address on the RS485. Default configuration is to select an address according to below. By doing so automatic pairing will be deactivated. 5.1.1.1 DIP 1-5 Selecting EAC address It is possible to select an address 1-15 for communication hubs with several locks paired (Address 15-31 applies only for communication hubs with one lock paired. See the Aperio Online Technology Reference Manual, ref [1] for more details on use of EAC addresses over 15 and other addressing modes.)

Jörgen Frejd ST-001322 A 2012-06-25 6 (28) Select a unique EAC address 1-15 for each communication hub by use of the DIP switch according to the table below (The resulting lock addresses for each communication hub address are shown to the right): DIP 4 DIP 1 AH30 Hub Lock addresses address 0000 Reserved 0001 0x01 0x01, 0x11, 0x21, 0x31, 0x41, 0x51, 0x61, 0x71 0010 0x02 0x02, 0x12, 0x22, 0x32, 0x42, 0x52, 0x62, 0x72 0011 0x03 0x03, 0x13, 0x23, 0x33, 0x43, 0x53, 0x63, 0x73 0100 0x04 0x04, 0x14, 0x24, 0x34, 0x44, 0x54, 0x64, 0x74 0101 0x05 0x05, 0x15, 0x25, 0x35, 0x45, 0x55, 0x65, 0x75 0110 0x06 0x06, 0x16, 0x26, 0x36, 0x46, 0x56, 0x66, 0x76 0111 0x07 0x07, 0x17, 0x27, 0x37, 0x47, 0x57, 0x67, 0x77 1000 0x08 0x08, 0x18, 0x28, 0x38, 0x48, 0x58, 0x68, 0x78 1001 0x09 0x09, 0x19, 0x29, 0x39, 0x49, 0x59, 0x69, 0x79 1010 0x0A 0x0A, 0x1A, 0x2A, 0x3A, 0x4A, 0x5A, 0x6A, 0x7A 1011 0x0B 0x0B, 0x1B, 0x2B, 0x3B, 0x4B, 0x5B, 0x6B, 0x7B 1100 0x0C 0x0C, 0x1C, 0x2C, 0x3C, 0x4C, 0x5C, 0x6C, 0x7C 1101 0x0D 0x0D, 0x1D, 0x2D, 0x3D, 0x4D, 0x5D, 0x6D, 0x7D 1110 0x0E 0x0E, 0x1E, 0x2E, 0x3E, 0x4E, 0x5E, 0x6E, 0x7E 1111 0x0F 0x0F, 0x1F, 0x2F, 0x3F, 0x4F, 0x5F, 0x6F, 0x7F XXXX Reserved The following figure shows an example of a default installation. Figure 2, Address allocation in a default installation Note! The communication hub must be restarted after changing the address, since the state of the DIP switch are read only at startup. 5.1.1.2 DIP 1-5 Pairing mode If DIP 1-5 is set to OFF, pairing mode will activated. This means that after powering the communication hub it will automatically try to pair with locks within range. Automatic pairing will only be made with unpaired locks. The automatic pairing procedure is described in chapter

Jörgen Frejd ST-001322 A 2012-06-25 7 (28) Pairing Locks and Communication hubs in Pairing mode on page 9. 5.1.2 DIP 6-8 RS-485 bus settings DIP switch 6 and 7 activates pull up and pull down-resistors, which must be enabled once per bus. Either in the EAC system (see the EAC documentation for use of pull up or pull down on the EAC side), or on one communication hub on the RS-485-bus. DIP 8 is used to terminate the bus, which is activated for communication hubs connected in end position on the bus. If there is more than one communication hub to connect they should be connected in a daisy chain. In this case, set DIP switches 6-8 in OFF position for all communication hubs, except for the communication hub at the end of the bus which must have DIP switch 8 in ON position. The RS-485 bus must be terminated on the EAC side. EAC System Hub 1 Hub 2 Hub X end of bus A B A B A B A B Termination enabled DIP 6 OFF DIP 7 OFF DIP 8 OFF DIP 6 OFF DIP 7 OFF DIP 8 OFF DIP 6 ON DIP 7 ON DIP 8 ON Figure 3, Daisy chain connected communication hubs, set DIP 6 and 7 in ON position for one communication hub. For a star connection, set DIP 6 and 7 in ON position for one communication hub. DIP 8 must be in ON position for all communication hubs. The RS-485 bus can not be terminated on the EAC side. Hub 1 EAC System Hub 2 A A B B A B DIP 6 ON DIP 7 ON DIP 8 ON Termination disabled DIP 6 OFF DIP 7 OFF DIP 8 ON Figure 4, Star connected communication hubs, DIP 6 and 7 in ON position for one communication hub

Jörgen Frejd ST-001322 A 2012-06-25 8 (28) 5.1.3 DIP 9 (AH30 only) This DIP switch is not used. 5.1.4 DIP 10 (AH30 only) Internal/external antenna Normally the communication hub s internal antenna is sufficient. In a difficult installation environment or if the radio signal needs to be amplified for extended range, an external antenna can be used. Set the DIP 10 to OFF to use an external antenna. 5.2 Connecting to the RS-485 bus The RS-485 bus should be made up of a twisted-pair cable with characteristic impedance between 90 Ohm and 120 Ohm. Maximum bus length is about 1000 m. Depending on the EAC system, a maximum of 32 units (31 communication hubs plus the EAC, when using the DIP Switch for RS-485-addressing) can be connected to the same bus. If not already done, connect all RS485 A connectors together and all RS485 B connectors together, depending on connection type, see Figure 3 and Figure 4 above. 5.3 Connecting to supply voltage If the communication hub has not been connected to supply voltage already, connect the wires to 8-24V (positive voltage) and GND (ground). Note! The communication hub must be powered with a voltage between 8V DC and 24V DC. Minimum current for robust operation is 120mA@8V, 110mA@9V, 80mA@12V, 40mA@24V.

Jörgen Frejd ST-001322 A 2012-06-25 9 (28) 6 Pairing Locks and Communication hubs in Pairing mode If Pairing mode is selected as setting with the DIP Switch the programming application is not needed for pairing and configuration of communication hubs and locks. Instead the communication hubs automatically search after locks within reach to pair with. Note! Automatic pairing will only be made with unpaired locks. Note! Communication hub and locks are often sold pre-paired from factory. If this is the case, the following procedure is not necessary. To perform pairing with communication hubs set in Pairing mode, do the following: 1. Power cycle the communication hub if necessary and check that the LED is constant yellow. Pairing active Yellow 2. Swipe the Mifare credential to activate the lock for pairing. Result: Communication hub pairs with lock and indicates with one green flash. Pairing succeeded Yellow + one green flash 3. After successful paring, power off the Communication hub. 4. Set the DIP switch 1-5 to desired RS-485 address (1-15 for communication hubs with one or several locks paired. 1-31 for communication hubs with one lock paired.) This will also deactivate pairing mode. (For devices operating in Wiegand mode, set the DIP switch 5 to OFF, to turn off Pairing mode.) 5. Power the communication hub to start up for normal operation. Note! Locks and communication hubs that are paired with Pairing mode will communicate in Manufacturing mode, and not in Customer mode that offers encrypted communication. To activate Customer mode you must use the programming application. 7 Pairing locks and Communication hubs with the programming application After the configuration of the Communication hub, the programming application can be used to pair locks with communication hubs and to do final configuration of the hardware. Using the programming application also allows you to establish encrypted communication between locks and communication hubs. This is achieved with a customer key, obtained from your ASSA ABLOY supplier. This chapter will guide the user to perform a complete installation, applicable for most EAC system communicating on the RS-485 interface where Mifare/DESFire credentials are used.

Jörgen Frejd ST-001322 A 2012-06-25 10 (28) To communicate with communication hubs and locks through the programming application, you also need an USB Radio dongle. For installation of the programming application and the USB Radio dongle, refer to the Aperio Online Technology Reference Manual, ref [1]. 7.1 Information of Encryption key To obtain secure communication between communication hubs and locks an Encryption key is used. This Encryption Key should be handled with the same care as the Master Key in a traditional Master Key System. A person with access to the Encryption key can gain unauthorized access to any Aperio door in the system. Once loaded into the Programming Application, it will be stored encrypted in a local database and should be erased from the hard drive. A copy should be stored safely. Proper handling of encryption keys is essential to lock security! It is absolutely necessary to use the customer encryption key by setting all communication hubs and locks in Customer mode to ensure a secure and encrypted communication with the lock. 7.2 Checklist for pairing locks and communication hubs A complete configuration includes the following steps: making a door installation scanning for communication hubs pairing with locks configuring the hardware: setting security mode, addressing mode, override credentials etc. verifying a stable and secure operation of the lock These steps are described with start in section 7.3 Step 1 - Making a new door installation. For some configurations a number of additional advanced settings can be necessary, such as: configuration of status and alarm messages. configuration of the radio communication. These and a number of other advanced settings are described in the Aperio Online Technology Reference Manual, ref [1]. 7.3 Step 1 - Making a new door installation The first step is to create a new door installation, which will handle all the communication hubs and Aperio locks in the access system. Insert the USB Radio dongle and start the programming application and follow these steps to make a new door installation: 1. Select File New in the Programming Application. 2. Enter a name for the installation and click the button in the Key file field. to add the Encryption key.

Jörgen Frejd ST-001322 A 2012-06-25 11 (28) 3. Select the key file and click Select. Note! The xml-file (key file) containing the encryption keys should be delivered via encrypted e-mail or on a USB memory stick. 4. Click Create new. 5. Enter a password of at least 8 characters for the door installation and confirm it. Click OK. 7.4 Step 2 - Scanning for Communication hubs Follow these steps to scan for doors: 1. Select Scan-Quick scan to find communication hubs. (Or open a earlier created installation) Result: All communication hubs within reach of the USB Radio device of your computer are displayed in the scan result table. 2. Locate a communication hub by the last four characters of the communication hub MAC address (ex. 01CF) in the scan result table. The same characters should be on a label on the cover of the communication hub.

Jörgen Frejd ST-001322 A 2012-06-25 12 (28) Click Rescanning if the communication hubs that you want to configure are not shown in the list. 3. Select the communication hub(s) that you want to include in your installation. Click Show details to view detailed information in the installation view. 7.5 Step 3 - Pairing locks with communication hub AH30 version of the communication hub can be paired with up to 8 locks. AH15/AH20 can manage one lock. 1. Right click and select Communication hub - Pair with lock.

Jörgen Frejd ST-001322 A 2012-06-25 13 (28) 2. The pairing process starts. Swipe the Mifare credential at the lock to pair with the communication hub. When the lock has stopped blinking you can click Done to see the pairing result. Result: The result is displayed.

Jörgen Frejd ST-001322 A 2012-06-25 14 (28) 3. Repeat the pairing for all communication hubs and locks in reach of the USB Radio Dongle. 7.6 Step 4 - Configuration of locks and communication hubs Wizard This procedure describes a default configuration of locks and communication hubs: Mifare Classic UID user credential, override credential card (Mifare Classic UID), secure communication and DIP Switch addressing mode. For other credential types, settings and addressing modes, refer to Aperio Online Technology Reference Manual, ref [1]. Before configuration, check that Update device time during door configuration is activated. Enter the Views - Installation Configuration window.

Jörgen Frejd ST-001322 A 2012-06-25 15 (28) Follow the steps below to perform a default configuration of locks and communication hubs: Note! The changes you make during the update of the door configuration are not carried out until you perform the device update on the last page in the wizard. 1. Select a lock in the scan result table, right click and select Lock-Configure. 2. On the RFID Configuration page, click Next without any changes.

Jörgen Frejd ST-001322 A 2012-06-25 16 (28) 3. On the Override Credential page it is recommended to add a credential. Select the credential type in the drop down list and click Add and enter a Mifare Classic UID credential number. This credential can for example be used to gain access through all doors during installation and when the EAC is offline. 4. Click OK followed by Next in the Wizard main window. 5. On the Security mode Setting page, click Change to switch to Customer mode in the lock and communication hub, to obtain secure communication using the Encryption key. Proper handling of Encryption keys is essential to lock security! If the installation and first configuration is not performed correctly by setting all locks in customer mode, the radio communication will not be secure and the locks will therefore be vulnerable to intrusion attempts.

Jörgen Frejd ST-001322 A 2012-06-25 17 (28) 6. Click OK followed by Next in the wizard main window. 7. On the Electronic Access Controller Setting page, in the Enable Dip Switch field, click Change and select Enable Dip Switch. 8. Click OK followed by Next in the wizard main window. 9. On the Device Update page, check that the summary of the configuration tasks that will be sent to the lock are correct. Click Save configuration to facilitate further lock configurations using the same communication hub. 10. Click OK followed by Next in the wizard main window to download the configuration to the lock.

Jörgen Frejd ST-001322 A 2012-06-25 18 (28) 11. If necessary swipe the credential at the lock to activate the lock. 12. After successful update, click Close.

Jörgen Frejd ST-001322 A 2012-06-25 19 (28) Note! Since the customer mode is set only for the lock a security mode conflict will appear. This however, is in order, since customer mode for the communication hub will be the last step, after changing the security mode for all the locks. 7.6.1 Apply saved configuration on several locks If you have more than one lock that will use the same configuration you can apply the recently saved configuration on any lock in your installation. 1. Right click on a lock and select Lock Apply configuration [your configuration]

Jörgen Frejd ST-001322 A 2012-06-25 20 (28) 2. Confirm the update by clicking Confirm. 3. Swipe the credential at the lock to download the configuration.

Jörgen Frejd ST-001322 A 2012-06-25 21 (28) 7.7 Step 5 - Establish secure communication Proper handling of encryption keys is essential to lock security! If the installation and first configuration is not performed properly by setting all communication hubs in customer mode, the radio communication will not be secure and the lock will therefore be vulnerable to intrusion attempts. 1. Change the security mode for all communication hubs in your installation to Customer mode through the right click menu. Result: The warning symbol will change to the yellow lock symbol instead of the unlock symbol, that shows that secure communication between communication hub and locks are enabled. The red warning symbol on the right will also disappear when both lock and communication hub are in the same security mode.

Jörgen Frejd ST-001322 A 2012-06-25 22 (28) 7.8 Step 6 - Testing after the first configuration Follow these steps to test that the installation and first configuration of each communication hub and lock have been performed correctly and that the hardware is working: 1. Check that the communication hub LED has a steady green light. This indicates that the installation and configuration have been performed correctly. 2. Show a credential that is configured in the EAC to deny access to the lock. Result: Access is denied and the lock LED flashes red once. 3. Show a credential that is configured in the EAC to grant access to the lock. Result: Access is granted and the lock LED flashes green once. See chapter 8 below for details on the different LED indications.

Jörgen Frejd ST-001322 A 2012-06-25 23 (28) 8 LED Indications 8.1.1 Communication Hub LED indication The communication hub has a single LED. It supports an optical scheme with red, green and yellow. The indication scheme is described by the two figures below: 2s Online Aperio lock offline EAC offline Aperio lock and EAC offline UHF communication Green Green + one red flash Green + two red flashes Green + three red flashes Yellow + off, fast flash Figure 5, Communication hub normal operation LED indication Some special LED indication schemes are used during lock maintenance actions: 2s Pairing active Yellow + green Figure 6, Communication hub maintenance LED indication

Jörgen Frejd ST-001322 A 2012-06-25 24 (28) 8.1.2 Lock normal operation LED indication The lock has three LEDs. They support an optical scheme with red, yellow and green. The indication scheme is described by the figures below: Card read (configurable) One yellow flash (.25 second) Access granted, EAC offline or online Force closed in remote open/office mode Busy blink, comhub Busy with other locks Access denied, EAC online One green flash (1 second) Five yellow flash (0,25 second) and one red flash Continuous yellow flashes (.25 seconds every second) One red flash (1 second) Access denied, EAC offline Lock mechanism is blocked when closing 1) Error in lock, maintenance required 2) Time to replace the battery Battery reached end of life, lock disabled Three red flashes (.5 s each) Continuous red flashes (.125 seconds every 1 second) Ten red flashes (.125s each) repeated if lock can t close Continuous yellow flashes (.25 seconds every 5 seconds) Continuous red flashes (.25 seconds every 5 seconds) Figure 7, Lock normal operation LED indication NOTE 1: NOTE 2: When the lock mechanism is blocked (lock jammed) the knob must be turned to release it. The Error in lock indication is also shown instead of the POST flashes if the battery is not accepted as new after a power-on-reset. 8.1.3 Lock maintenance LED indication Some special LED indication schemes are used during lock maintenance actions: Enter configuration mode Five yellow flashes (.125 s each)

Jörgen Frejd ST-001322 A 2012-06-25 25 (28) 9 Troubleshooting The table below shows possible problems when using the Aperio technology, and how to solve them: Problem indication Cause Action During installation of the programming application The New hardware found dialog box is opened (in Windows) when inserting the USB Radio Dongle device Missing driver. Install the driver of the USB Radio Dongle device. See the Reference Manual, ref [1]. During door installation and update Not possible to pair communication hub and lock Not possible to add default override credentials The device update fails Not possible to open a version 1.0 installation in version 1.1 The communication hub has only one channel in its channel mask You are using a credential configured as an override credential. The lock and the hub are on different radio channels. No default override credentials are configured for the installation. You have not shown the credential to the lock within 30 seconds. It is not possible to upgrade the Aperio programming application. Link measurement has failed. Use a credential that is not on the override credentials list. Check the radio channel settings for the lock and the hub so that they match. Add the credentials one by one in the door configuration wizard. Perform device update again and show the credential to the lock within 30 seconds. Create a new installation with the same encryption key and create the default override credentials list. Change the radio channel. See the Reference manual, ref [1].

Jörgen Frejd ST-001322 A 2012-06-25 26 (28) Problem indication Cause Action During scanning The communication hub and lock are not found when scanning = no connection between the programming application/laptop and the communication hub All channels are busy. The programming application and the communication hub have different channel masks. The communication hub is not working. 1. Click Scan again. 2. Click Scan all. 3. Change the radio channel. See the Reference manual ref [1]. The communication hub is not powered. None or not all of the communication hubs are found when scanning The communication hub(s) are out of range. The communication hub(s) are operating with a different radio channel. The communication hub(s) are not powered. Too many communication hubs are using the same channel. 1 1. Click Scan again. 2. Click Scan all. Change the radio channel. See the Reference manual, ref [1]. Temporary reduce the number of powered up Hubs within radio range during configuration. n/a is shown for the installation in the communication hub field and in the Lock field of the scan result table The communication hub and/or communication hub paired with a lock belongs to another installation and has another encryption key. The lock is not paired with the communication hub. Switch installation or create a new installation with the correct encryption key. Pair the lock and communication hub in the Configure door wizard of the programming application. Unstable communication between communication hub and lock even though the MAC address is displayed at scan. A probable cause is bad radio conditions or limited radio range. Try moving the USB radio closer to the communication hub or moving the USB radio to a higher location. Either by moving the laptop or by using an A-A USB extension cable to distance the USB radio from the PC. 1 Aperio Hubs is default configured to select the best channel out of three possible, if the selected channel is disturbed a new channel selection will be done automatically. Communication hubs in an Aperio system normally distribute themselves on different channels but a synchronized power up of all Hubs may cause them to initially choose the same channel. (Note that this problem do not affect performance of already installed and paired lock/cylinders and Hubs, only Programming Application scan functionality is affected)

Jörgen Frejd ST-001322 A 2012-06-25 27 (28) Problem indication Cause Action During configuration The program application reports a update failure. The firmware on the device is outdated. Check the current firmware on the device and perform an upgrade if needed. During normal operation The communication hub LED is flashing red once = no connection between the lock and the communication hub The lock and communication hub are not paired. The lock and the communication hub have different channel masks. The battery of the lock has run out. Click Scan again. Pair the lock and communication hub in the Configure door wizard of the programming application. Change the radio channel. See the Reference manual, ref [2]. Change the battery of the lock. See the Reference manual, ref [1]. The communication hub LED is flashing red twice = no connection between the EAC system and the communication hub The EAC address is not properly configured in the communication hub. The EAC system is not properly configured. Configure the EAC address. See section 4.2.1 - Selecting the RS485 address. Unstable radio communication between lock and communication hub Poor radio link quality. The lock and the communication hub have different channel masks. Measure the radio link. See the Reference manual, ref [1]. Change the radio channel. See the Reference manual, ref [1]. 9.1 Lock self test LED indication After replacing the battery, a Power on Self Test (POST) is performed. The result is indicated using a series of red and green LED flashes as is described by the figure below: POST successful One red, one green flash (1 second each)... Failure during POST One red flash followed by 16 Figure 9, Lock POST LED indication 1 2 3... 17 red or green flashes (.5 s each)

Jörgen Frejd ST-001322 A 2012-06-25 28 (28) The first flash is always red. If the POST fail, the color of the 16 trailing flashes indicate the status of each individual test as described by the following table: Blink Meaning if red Code in event log 2 Main board firmware corrupt 0x0001 3 Override list corrupt 0x0002 4 Production data corrupt 0x0004 5 Security data corrupt 0x0008 6 Configuration data corrupt 0x0010 7 Load Circuit Error 0x0020 8 Configuration data corrupt 2 0x0040 9 Secure Area Encryption Key error 0x0080 10 Secure Area Motor error 0x0100 11 Secure area communication error 0x0200 12 Secure area memory corrupt 0x0400 13 Secure area sensor or motor error 0x0800 14 Radio modem communication error 0x1000 15 Radio modem memory corrupt 0x2000 16 Radio modem configuration error 0x4000 17 Radio modem RF circuit error 0x8000 NOTE! If the battery is not accepted as new after a power on reset, no POST is performed, instead the 10 quick red flashes used to indicate Error in lock is shown.