Zodiac iclass II OPERATOR GUIDE July 2013
Page 2 of 24
Table of Contents INTRODUCTION... 4 PC REQUIREMENTS... 5 INSTALLING THE USB FINGERPRINT SCANNER (HAMSTER)... 5 INSTALLING THE USB SMARTCARD PROGRAMMER (32-BIT OS)... 6 INSTALLING THE USB SMARTCARD PROGRAMMER (64-BIT OS)... 7 INSTALLING THE ZODIAC ENROLLER SOFTWARE... 11 STARTING THE ZODIAC ENROLLER SOFTWARE FOR THE FIRST TIME... 11 CHANGING COM PORTS... 12 SOFTWARE SETTINGS AND CONFIGURATION... 13 ENROLLING USERS... 16 ENROLLING ALTERNATE FINGERPRINTS... 17 BYPASS FINGERPRINT VERIFICATION... 18 TROUBLESHOOTING USER ENROLLMENT... 18 DELETE DATA ON A CARD... 19 OVERWRITE FINGERPRINT DATA ON A CARD... 19 USING SAVED TEMPLATES... 19 VIEW CARD PROPERTIES... 20 APPENDIX... 21 Page 3 of 24
INTRODUCTION Congratulations on your decision to purchase the Zodiac iclass II fingerprint reader. The Zodiac iclass II system combines Cansec's powerful biometric technology with 16k bit iclass SmartCard credentials. User's fingerprint templates are stored on the SmartCard, making it one of the fastest and most secure fingerprint readers in the Zodiac line. In addition, because fingerprint templates are stored on users' cards, and not on the reader, the Zodiac iclass II system has an unlimited user capacity. The Zodiac iclass II system is designed so users can access both non-biometric readers and biometric fingerprint readers with the same SmartCard. Zodiac iclass II readers accept the biometric templates stored on the SmartCard, while proximity readers accept the user ID. The Zodiac iclass II reader can also be used with existing non-biometric cards! Instead of replacing existing access cards and credentials, a stick-on 16k bit iclass patch can be easily affixed to the existing cards, adding biometric storage capability. The iclass patch is the ultimate solution for retrofitting an existing system to use biometrics without the hassle of re-badging and replacing all existing readers. NOTE: proximity cards must be 125 khz. Page 4 of 24
PC REQUIREMENTS 2 USB PORTS, 1 CD-ROM Windows 2000/XP/Vista/7 (x32/x64)/8 (x32/x64) You must have administrator privileges on the PC INSTALLING THE USB FINGERPRINT SCANNER (HAMSTER) 1. Insert the Zodiac iclass II Smartcard Enroller Software CD into your PC's CD-ROM drive. 2. When the Zodiac iclass II Smartcard Enroller Software main menu appears, choose Install Fingerprint Scanner Driver. 3. Select USB FingKey Hamster (HFDU01/04/06) from the list. Click Install. 4. Click NEXT. 5. Windows Security in Windows Vista/7/8 may prompt for confirmation. Click Install. Page 5 of 24
6. When prompted, plug the Fingerprint Scanner (Hamster) into an available USB port. Click NEXT and then click FINISHED. Biometric devices should appear under Device Manager in Computer Management. INSTALLING THE USB SMARTCARD PROGRAMMER (32-BIT OS) 1. From the Zodiac iclass II Smartcard Enroller Software main menu, select Install Smartcard Programmer Driver. 2. At the Accesso Installation Package welcome screen click NEXT. 3. Note the destination folder for the driver and click OK. 4. Plug the SmartCard Programmer into an available USB port. 5. Do not click NEXT yet. 6. Wait for the Windows Found New Hardware Wizard window to appear. 7. When the wizard offers to find drivers, select No, not at this time and click NEXT. 8. Select Install from a list or a specific location, and click NEXT. 9. Select the Include this location in the search: radio button. 10. Type in or browse to the destination folder*. Page 6 of 24
*Note: if you are using a CLAUSB or any other USB device, you may need to replace existing drivers. 11. Click NEXT, and then click FINISH. 12. Return to the Accesso Installation Package window and click NEXT. 13. Click FINISH. INSTALLING THE USB SMARTCARD PROGRAMMER (64-BIT OS) Note: For Windows 8, see Appendix section before installing the driver. 1. Insert the Smartcard programmer into an available USB port. 2. Windows may attempt to install the driver and indicate that a new device is found. Navigate to Device Manager. The Accesso USB Reader may be found under Other devices. Page 7 of 24
3. Right-Click on ACCESSO USB READER and select Update Driver Software 4. Select Browse my computer for driver software. Click Browse and navigate to the CD. Assuming that the CD is in D drive, the driver should be located at D:\AutoPlay\Software\accesso_x64. 5. Click Next Page 8 of 24
6. Select Install this driver software anyway. Click Close when done. 7. Right-Click on USB Serial Port and select Update Driver Software 8. Select Browse my computer for driver software 9. Click Browse and navigate to the CD drive, e.g. D:\AutoPlay\Software\accesso_x64. Page 9 of 24
10. Select Install this driver software anyway 11. Click Close to finish. Page 10 of 24
12. The port should now be assigned a number, e.g. COM4, shown in the device manager. Note: Your computer may assign it a different COM port number than the one shown in the image. Record this number as it will be prompted for in the Zodiac Enroller software. INSTALLING THE ZODIAC ENROLLER SOFTWARE 1. From the Zodiac iclass II Smartcard Enroller Software main menu, select Install Zodiac iclass II Enroller. 2. When the Welcome screen appears, click NEXT. Ensure that the fingerprint drivers are installed then click Yes to continue. Follow the on screen instructions to complete the installation. 3. Click FINISH when done. STARTING THE ZODIAC ENROLLER SOFTWARE FOR THE FIRST TIME 1. Click on the Windows START button 2. Select Programs \ Zodiac iclass Enroller \ Launch Enroller 3. The following window will appear: Page 11 of 24
4. Choose Card Encoding and Fingerprint Capture, and click OK. CHANGING COM PORTS If the software continually displays the Detection window below, it is scanning for the USB SmartCard Programmer on the wrong COM ports. You will need to specify the correct port to scan. How to specify the correct COM port: 1. Click the Windows START button. 2. Click Control Panel \ System. 3. Click on the Hardware tab. 4. Click Device Manager. 5. Click the + sign beside Ports (COM & LPT) to display a list of USB devices. Page 12 of 24
For Windows 32-bit, the port name is USB Virtual Serial Port (Accesso) For Windows 64-bit, the port name is USB Serial Port 6. The port number for each device is listed in brackets beside the device name, for example: (COM15). 7. Note the port number for the USB Virtual Serial Port (Accesso). 8. Close the Device Manager. 9. Use the arrow keys to select (or use your keyboard to type in) the correct port number in the COM Count To Check: box on the Detection window. SOFTWARE SETTINGS AND CONFIGURATION 1. To access the program settings, click the fingerprint icon on the title bar. 2. Select Settings... Page 13 of 24
The Setup and Configuration window will appear. 1 3 2 4 Page 14 of 24
Port Settings Hamster Interface Set to USB by default (do not change) Program Settings Encoding only, no capture Allow user name encoding Allow bypass changes Allow fingerprint overwrite Save fingerprint templates to disk Disables fingerprint enrollment capability (use for encoding user and bypass data only) Enables the user s name to be encoded into the card Enables bypass settings to be changed (see instructions for enrolling users) Allows fingerprint data to be overwritten Automatically saves a copy of each encrypted template on the computer's hard disk so the SmartCards can be programmed without the need to re-enroll the users (see Enrolling Users for more info) Program Security Enable auto inactivity logout Password-protect settings Record events to a log file Logs user out of the enrollment software after a specified period of keyboard/mouse inactivity. Zodiac Logon card required to log back in Enables password protection of the settings page (password entry in appropriate field is required) Logs all programming activity - click advanced to export log to a text file Registration Settings Image quality Security level Increase or decrease the quality of the fingerprint capture process - set to maximum by default (recommended) Increase or decrease the tolerance level of the fingerprint capture process - set to maximum by default (recommended) Page 15 of 24
ENROLLING USERS Return to the main Zodiac iclass II Smartcard Enroller screen: 1. Place a SmartCard or iclass patch on the SmartCard programmer. Note: If the card or patch has been encoded, the user name will appear automatically in the appropriate field. In the Fingerprint Capture section, the green light should be on and the message "Ready" should be displayed. Page 16 of 24
2. Enter a name in the User Name field. 3. Click ENCODE. 4. Select the Enroll Primary Finger radio button. 5. Click CAPTURE. 6. When the hamster's red sensor light turns on, ask the user to place his or her primary finger on the sensor. 7. When prompted, ask the user to lift and replace his or her finger. 8. Wait for the fingerprint data to be downloaded onto the SmartCard or iclass patch. ENROLLING ALTERNATE FINGERPRINTS 9. If desired, select the Enroll Alternate Finger radio button and repeat the process with an alternate fingerprint. 10. Remove the SmartCard or iclass patch. Note: Enrolling an alternate finger is recommended in case the user's primary finger is damaged. Enrolling an alternate finger will slightly increase read time. When a user presents a finger at a Zodiac reader, the reader cycles through two attempts to create a match with the primary fingerprint before attempting to match the alternate fingerprint. This means that the user must leave the alternate finger on the scanner for a slightly longer period of time. Page 17 of 24
BYPASS FINGERPRINT VERIFICATION Certain users may experience difficulty enrolling. Bypass capability can be programmed on these users' cards so that the cardholders can gain access by presenting their cards only. Because bypass verification is less secure than fingerprint verification, the number of users with bypass-enabled cards should be kept to a minimum. Users who are having difficulty enrolling should follow the suggestions in the troubleshooting section first before being granted a bypass-enabled card. To issue a bypass-enabled card: 1. Place the SmartCard on the programmer. 2. Enter the user name. 3. Check the Bypass Fingerprint Verification box. (NOTE: the CAPTURE button will be greyed out) 4. Click ENCODE. 5. Remove the SmartCard or iclass patch. TROUBLESHOOTING USER ENROLLMENT Good enrollment is crucial to fast and accurate access at the reader. If a user is having difficulty enrolling, try the following suggestions: Try again with the same finger Try a different finger If your finger is dry, moisten it by breathing on it, or by rubbing it against your forehead Cover the entire prism with your finger Only place your finger on the scanner when the scanner is glowing red Leave your finger on the scanner until the red light turns off Page 18 of 24
DELETE DATA ON A CARD To delete data from a SmartCard or iclass patch, re-encode the user name. OVERWRITE FINGERPRINT DATA ON A CARD To overwrite fingerprint data on a card: 1. Place the card on the programmer. 2. Click CAPTURE and repeat the enrollment process. USING SAVED TEMPLATES If an existing user loses his or her card, you can create a new card without having to recapture fingerprint data provided that the Save fingerprint templates to disk option was enabled in Program Settings. To write fingerprint data to a card using a saved template: 1. Place the card on the programmer. 2. Enter the appropriate Tag ID*. 3. Click FROM DISK. 4. The existing fingerprint template will be automatically downloaded onto the card. Note: For security reasons, the file names for the saved templates are saved using a file convention that does not associate the file to a user. *The Tag ID must be the same as the Tag ID of the lost card. Page 19 of 24
VIEW CARD PROPERTIES To view card properties for a card: 1. Click the fingerprint icon on the title bar. 2. Select View Card Properties. 3. When the Card Properties window appears, click READ. Property UDP Version: Data Type: Template Count: Compressed: By Pass: Keypad: OEM Code: Bit Stream Count: Description Number of changes that have been made to the card Default = Wiegand Number of fingerprint templates on the card True = compressed False = uncompressed True = bypass enabled False = bypass disabled A built-in feature to allow future expansion The OEM number programmed into the system's readers Indicates the Weigand bit-format of the card Page 20 of 24
Appendix Windows 8 requires drivers to be signed for a successful installation. The USB SmartCard Programmer Driver is not signed. To disable driver signature enforcement follow the steps below. 1. Press Windows logo key AND I key ( + I) to activate PC Settings screen. 2. Click Change PC settings at the bottom of the screen. 3. Select General on the left menu and on the right, scroll all the way down. Click Restart now Page 21 of 24
4. On the right menu, under Advanced startup, click Restart now. 5. Select Troubleshoot. 6. Select Advanced options. 7. Select Startup Settings. Page 22 of 24
8. Click Restart. 9. During startup, press 7 to select Disable driver signature enforcement Page 23 of 24
10. The driver signature enforcement has now been disabled. Proceed with unsigned driver installation for the USB Smartcard programmer. Page 24 of 24