Featuring enhanced biometric security with two-factor authentication,black the perfect blend of security and simplicity.

Transcription

1 SAC500MSA-10K SAC500MSA-25K SAC500MSA-50K SAC500MSA-UK SAC501MSA SAC506SCA SAC5098XA Intelli-Pass Biometric Access Control Management Software Featuring enhanced biometric security BOX with two-factor authentication,black providing the perfect blend of security and simplicity. Customer Support Information Order toll-free in the U.S.: Call BBOX (outside U.S. call ) FREE technical support 24 hours a day, 7 days a week: Call or fax Mailing address: Black Box Corporation, 1000 Park Drive, Lawrence, PA Web site: info@blackbox.com

2 Trademarks Used in this Manual Trademarks Used in this Manual Black Box and the Double Diamond logo are registered trademarks, and Intelli-Pass is a trademark, of BB Technologies, Inc. Internet Explorer and Windows are registered trademarks of Microsoft Corporation. Any other trademarks mentioned in this manual are acknowledged to be the property of the trademark owners. We re here to help! If you have any questions about your application or our products, contact Black Box Tech Support at or go to blackbox.com and click on Talk to Black Box. You ll be live with one of our technical experts in less than 30 seconds. Page blackbox.com

3 FCC and IC RFI Statements Federal Communications Commission and Industry Canada Radio Frequency Interference Statements This equipment generates, uses, and can radiate radio-frequency energy, and if not installed and used properly, that is, in strict accordance with the manufacturer s instructions, may cause inter ference to radio communication. It has been tested and found to comply with the limits for a Class A computing device in accordance with the specifications in Subpart B of Part 15 of FCC rules, which are designed to provide reasonable protection against such interference when the equipment is operated in a commercial environment. Operation of this equipment in a residential area is likely to cause interference, in which case the user at his own expense will be required to take whatever measures may be necessary to correct the interference. Changes or modifications not expressly approved by the party responsible for compliance could void the user s authority to operate the equipment. This digital apparatus does not exceed the Class A limits for radio noise emis sion from digital apparatus set out in the Radio Interference Regulation of Industry Canada. Le présent appareil numérique n émet pas de bruits radioélectriques dépassant les limites applicables aux appareils numériques de la classe A prescrites dans le Règlement sur le brouillage radioélectrique publié par Industrie Canada blackbox.com Page 3

4 NOM Statement Instrucciones de Seguridad (Normas Oficiales Mexicanas Electrical Safety Statement) 1. Todas las instrucciones de seguridad y operación deberán ser leídas antes de que el aparato eléctrico sea operado. 2. Las instrucciones de seguridad y operación deberán ser guardadas para referencia futura. 3. Todas las advertencias en el aparato eléctrico y en sus instrucciones de operación deben ser respetadas. 4. Todas las instrucciones de operación y uso deben ser seguidas. 5. El aparato eléctrico no deberá ser usado cerca del agua por ejemplo, cerca de la tina de baño, lavabo, sótano mojado o cerca de una alberca, etc. 6. El aparato eléctrico debe ser usado únicamente con carritos o pedestales que sean recomendados por el fabricante. 7. El aparato eléctrico debe ser montado a la pared o al techo sólo como sea recomendado por el fabricante. 8. Servicio El usuario no debe intentar dar servicio al equipo eléctrico más allá a lo descrito en las instrucciones de operación. Todo otro servicio deberá ser referido a personal de servicio calificado. 9. El aparato eléctrico debe ser situado de tal manera que su posición no interfiera su uso. La colocación del aparato eléctrico sobre una cama, sofá, alfombra o superficie similar puede bloquea la ventilación, no se debe colocar en libreros o gabinetes que impidan el flujo de aire por los orificios de ventilación. 10. El equipo eléctrico deber ser situado fuera del alcance de fuentes de calor como radiadores, registros de calor, estufas u otros aparatos (incluyendo amplificadores) que producen calor. 11. El aparato eléctrico deberá ser connectado a una fuente de poder sólo del tipo descrito en el instructivo de operación, o como se indique en el aparato. 12. Precaución debe ser tomada de tal manera que la tierra fisica y la polarización del equipo no sea eliminada. 13. Los cables de la fuente de poder deben ser guiados de tal manera que no sean pisados ni pellizcados por objetos colocados sobre o contra ellos, poniendo particular atención a los contactos y receptáculos donde salen del aparato. 14. El equipo eléctrico debe ser limpiado únicamente de acuerdo a las recomendaciones del fabricante. 15. En caso de existir, una antena externa deberá ser localizada lejos de las lineas de energia. 16. El cable de corriente deberá ser desconectado del cuando el equipo no sea usado por un largo periodo de tiempo. 17. Cuidado debe ser tomado de tal manera que objectos liquidos no sean derramados sobre la cubierta u orificios de ventilación. 18. Servicio por personal calificado deberá ser provisto cuando: A: El cable de poder o el contacto ha sido dañado; u B: Objectos han caído o líquido ha sido derramado dentro del aparato; o C: El aparato ha sido expuesto a la lluvia; o D: El aparato parece no operar normalmente o muestra un cambio en su desempeño; o E: El aparato ha sido tirado o su cubierta ha sido dañada. Page blackbox.com

5 Table of Contents Table of Contents 1. Installing the Software, USB Scanner, and Card Reader Initial Software Setup Storing/Sharing Your Data on a Server Desktop Firewalls Logging In Initial Setup Zones Before Connecting to Your LAN/Network Add Units (Network Scan) Add Units (Manually) Timebands Departments User Groups Register Users Setting Up the Dashboard Managing Units Zones Manually Adding a Unit Scan Network Edit a Unit Deleting a Unit Wiegand Options Reset All User List Process in Queue Reboot Managing Users User Groups Adding a User Editing a User Deleting a User Printing the User List Updating the System Parameters Managing Departments Managing Timebands Printing Door Reports System Lockdown Help blackbox.com Page 5

6 Chapter 1: Installing the Software, USB Scanner, and Card Reader 1. Installing the Software, USB Scanner, and Card Reader The Intelli-Pass Management Software is an easy-to-use software application specifically designed to manage your Intelli-Pass Access Control System. It includes built-in features that allow you to manage both your users and your Intelli-Pass Biometric Access Control Units. NOTE: You must have local administration rights to install this software. To install the Intelli-Pass Management Software, place the Inteli-Pass Management Software CD in your PC s CD/DVD drive. If you have autorun disabled, you will need to browse to your CD/DVD drive and run setup.exe. Otherwise, the Intelli-Pass Installation Wizard should start automatically. Please read the software license agreement. Figure 1-1. Intelli-Pass Management Software Installation Wizard. You also have the option to click the Print button to print a copy of the software license agreement for your hard-copy records. If you accept the terms of the agreement, click the I accept the terms in the license agreement radio button, followed by the Next button. Page blackbox.com

7 Chapter 1: Installing the Software, USB Scanner, and Card Reader Figure 1-2. Intelli-Pass Software License Agreement. Enter your name and organization name, then click on the Next button. Review the software installation options. Figure 1-3. Enter Customer Information blackbox.com Page 7

8 Chapter 1: Installing the Software, USB Scanner, and Card Reader If you need to make any changes to your installation options, click on the Back button. Otherwise, click Install to begin the Intelli-Pass Management Software installation. Figure 1-4. Starting the installation. Once the software installation is complete, you will see the Installation Wizard Completed screen. Click on the Finish button. Figure 1-5. Intelli-Pass Management Software installation is complete. Page blackbox.com

9 Chapter 1: Installing the Software, USB Scanner, and Card Reader The software installation is complete. Remove your Intelli-Pass desktop USB fingerprint scanner from its packaging and connect it to an available USB port on your PC. The scanner should be automatically detected and the New Hardware Wizard will start. Click on the Install the software automatically (Recommended) radio button, followed by the Next button. Figure 1-6. New Hardware Wizard (Fingerprint Scanner). When installing the USB desktop fingerprint scanner under certain operating systems, you may get a Windows Logo testing warning (as shown in Figure 1-7). Click Continue Anyway ; otherwise the scanner drivers will not be installed and your software will not run blackbox.com Page 9

10 Chapter 1: Installing the Software, USB Scanner, and Card Reader Figure 1-7. Windows Logo Testing Warning During the USB Fingerprint Scanner detection/installation phase, you may be prompted for the location of the drivers. Click on the Browse button and select your CD/DVD drive. Figure 1-8. Browsing to the driver file location. Page blackbox.com

11 Chapter 1: Installing the Software, USB Scanner, and Card Reader The Hardware Installation Wizard should now locate the required driver files on your CD/DVD drive and automatically transfer/ install them. Click Finish to complete the desktop USB Fingerprint Scanner installation wizard. Figure 1-9. The Desktop USB Fingerprint Scanner installation has completed. Remove your Omnikey Smart Card Reader from its packaging and connect it to an available USB port on your PC. The Smart Card Reader should be automatically detected and the New Hardware Wizard will start. Click the Install the software automatically (Recommended) radio button, followed by the Next button blackbox.com Page 11

12 Chapter 1: Installing the Software, USB Scanner, and Card Reader Figure New Hardware Wizard (Omnikey Smart Card Reader) Windows should automatically locate the required drivers/software to complete the installation of your Ominkey Smart Card Reader. Figure The Omnikey Smart Card Reader installation is completed You have now completed the initial installation of your Intelli-Pass Management Software, your desktop USB fingerprint scanner, and your Omnikey Smart Card Reader. Review the next section of the manual. It will guide you through the initial setup of the Intelli-Pass Management Software. Page blackbox.com

13 Chapter 2: Initial Software Setup 2. Initial Software Setup After you complete the initial installation of your Inteli-Pass Management Software, your desktop USB fingerprint scanner, and your Omnikey Smart Card Reader as described in Chapter 1, you are ready to set up the software. If you have not completed these items, refer back to Chapter 1 of this manual, Installing the Software, USB Scanner, and Card Reader. When ordering your Intelli-Pass Access Control System, you will have ordered a separate software license that configures your software for a maximum number of Intelli-Pass Access Control Units. NOTE: Your software key is specifically tied to your company name. If you make any errors when entering either your company name or software key, you will not be able to activate your software. Enter your company name exactly as it appears on your license, followed by your software key (see Figure 2-1). Click Next to continue. Figure 2-1. Entering the License Details. When you install the Intelli-Pass Access Control System, enter your own contact information and support details (see Figure 2-2). Click on Next to continue blackbox.com Page 13

14 Chapter 2: Initial Software Setup Figure 2-2. Installer/Support Details. Any Intelli-Pass Access Control Units that are added to the system will use the settings shown in Figure 2-3 as defaults. The default settings that are initially displayed are the recommended settings. If you are integrating your Intelli-Pass Biometric Access Control Units with an existing Wiegand based Access Control System, you will need to enable Wiegand Output. See your existing site manual or speak to the installer of your Wiegand based Access Control System to confirm your site code, pulse width, and pulse interval. Your Intelli-Pass Access Control System can output either your Intelli-Pass User ID or a Mapped Code that corresponds to an existing swipe card ID (or similar). If you need to amend any previous settings, click Back to move to the previous screen. Otherwise, click Next to continue. Page blackbox.com

15 Chapter 2: Initial Software Setup Figure 2-3. Intelli-Pass Access Control Unit default settings. Your Intelli-Pass Access Control System requires that you register your first system administrative user as part of the setup process (see Figure 2-4). This is because your Intelli-Pass software is biometrically protected and only authorized administrative users can log in to the software. Select a PIN (Personal Identification Number) for your first administrative user and enter his/her first and last names in the respective boxes. If you enabled Wiegand Output in the previous screen, you will also have to enter your administrative user s mapped code (swipe card ID). If you need to amend any previous settings, click Back to move to the previous screen. Otherwise, click Next to continue blackbox.com Page 15

16 Chapter 2: Initial Software Setup Figure 2-4. Registering your first Intelli-Pass administrative user. Now we need to capture your first administrative user s fingerprint template (see Figure 2-5). Using the graphical hands representation, click on the radio button above the first finger you want to capture. Black Box Recommends If your user is right-handed, capture his/her right index fingerprint template as the primary, normal use (non-duress) finger. If your user is left-handed, capture his/her left index fingerprint template as the primary, normal use (non-duress) finger. If you plan to use the systems duress feature and your user is right-handed, capture the left index fingerprint template as the primary, duress finger. If your user is left-handed, capture the right index fingerprint template as the primary, duress finger. Again, make these recommendations to your users but be sure to listen to their preferences. Some people may find using their thumb much more comfortable and natural than using an index finger. Once you ve selected which fingerprint template you would like to capture, click on the Register button (see Figure 2-5). This will activate the scanner and you will see a red flashing light. Make sure your user is directly in front of the scanner and, when he/she places a finger onto the capture surface, make sure he/she places the finger rather than pressing hard on the surface (this can cause problems with captured templates at a later date). Page blackbox.com

17 Chapter 2: Initial Software Setup Figure 2-5. Capturing a user s fingerprint template. After a successful capture, your user will be asked to remove the finger from the capture surface. An on screen prompt will confirm that the fingerprint scanner has detected the removal of your user s finger from the capture surface. Your user will be prompted to place the same finger on the scanners capture surface (the red light will begin to flash again) so that the original capture can be validated (see Figure 2-6). This helps to ensure greater reliability in the system. NOTE: Images displayed in the capture window are used only to give an administrative user visual feedback on the quality of the template captured. The Intelli-Pass Management System does not store any fingerprint images. Successfully scanned and verified fingerprint templates are denoted by a green circle around the option button above the fingernail. Fingerprint templates that are to be uploaded (default) to the Intelli-Pass Access Control Units have a green circle on the fingernail blackbox.com Page 17

18 Chapter 2: Initial Software Setup Figure 2-6. Verifying a user s fingerprint template. Once your user s fingerprint template is scanned and verified, you have an option to assign it as a duress template (see Figure 2-7). To do this, simply click the Enabled radio button in the Duress Finger? section (look for the blue square on the lower section of the screen). Once you enable a fingerprint template as a duress template, a blue square appears on the knuckle of the finger marked as a duress finger. NOTE: A maximum of two duress templates can be assigned per user. What is duress? Duress is where one of your users is forced to gain access by a third party. By using a duress finger rather than normal access finger, your user is able to gain access in a normal way and send a covert duress signal. This duress signal can be acted upon in a number of ways including triggering a remote alert or notifying a security officer. Page blackbox.com

19 Chapter 2: Initial Software Setup Figure 2-7. Marking a user s fingerprint template as a duress template. Your Intelli-Pass Access Control Unit allows you to store up to 10 fingerprint templates per user. If you would like to scan another fingerprint template, click on the radio button above the next finger you want to capture and click the Register button. Continue the process as described above. When you have finished capturing your first administrative user s fingerprint templates, click the Finish button (see Figure 2-8). You will be prompted to save your system settings. Click Yes. If you need to amend any previous settings, click Back to move to the previous screen. Otherwise, click Next to continue blackbox.com Page 19

20 Chapter 2: Initial Software Setup Figure 2-8. Save the system settings. Page blackbox.com

21 Chapter 3: Storing/Sharing Your Data on a Server 3. Storing/Sharing Your Data on a Server By default, your Intelli-Pass Biometrics Management Software is installed in standalone mode. The software is installed on a single PC, and the database is stored on that PC system. Some organizations may require multiple PCs to have access to the data. For example, you may have a manager who specifically requires the ability to add his/her own users, or someone else who requires access to the system for reporting purposes. NOTE: You will require one additional software license/desktop USB fingerprint scanner per additional user of the system. To do this, move your Intelli-Pass data to a central shared location. After completing the setup processes described earlier in this manual on your first PC, your IT administrator will need to perform the following tasks: 1. Close your Intelli-Pass Access Software. 2. Close your Intelli-Pass Queue Processor (see the db icon in your PC s taskbar, near the clock at the bottom of the screen) by right-clicking, then Exit. 3. Create a share on your server where you can move/store the data. 4. Create a security group that will contain users who have access to your Intelli-Pass data. 5. Assign your security group. Modify rights to your Intelli-Pass data share. 6. Create a mapped drive (via network login script/group Policy). 7. Move your database from the local PC to the data share. Your Intelli-Pass data is stored in the following location by default: C:\Program Files\Intelli-Pass\Management Software data.mdb Using Internet Explorer, browse to the C:\Program Files\Intelli-Pass\Management Software folder. Locate the file data.mdb. If the file data.ldb exists, this means that you may have not closed your Intelli-Pass Access Software or the Intelli-Pass Queue Processor may still be running. Verify that both software applications have been closed/exited. Right-click the file data.mdb and select Copy (or highlight the file in Windows Explorer and press CTRL+C). Browse your network to your shared location (for example, \\SERVER\Digitus) and right-click followed by Paste (or press CTRL+V). Once the file is in place on the server, you can delete it from your PC. Use a secure delete method. The first time you try to run your Intelli-Pass Access Software after moving your data to a new location, you need to tell the Intelli- Pass Access Software where to find its data. Click on the Browse button (see Figure 3-1) blackbox.com Page 21

22 Chapter 3: Storing/Sharing Your Data on a Server Figure 3-1. Database not found, specify the database location. Click on Data.mbd (for this example, we mapped drive U: to our data share), followed by the Open button (see Figure 3-2). Figure 3-2. Browsing for your Intelli-Pass data. You will then be notified that your Intelli-Pass Access Software has successfully updated its database location (see Figure 3-3). Click the OK button. Page blackbox.com

23 Chapter 3: Storing/Sharing Your Data on a Server Figure 3-3. Database location successfully changed. You can see in Figure 3-4 that the database location has been changed to U:\Data.mdb. Click OK to accept the changes. Figure 3-4. Confirmation of the new data path. Your Intelli-Pass Access Software will now load and you will be presented with the login screen. Select your user from the list and log in to the software by placing one of your previously scanned fingers on the desktop USB scanner. After installing the Intelli-Pass Access Software on your other PCs, delete the data.mdb file from C:\Program Files\Intelli-Pass\ Management Software folder and follow the above process to point to your shared data. There are just a couple more things required to finalize moving your data to the server and ensuring your client PCs are set up correctly. Your Intelli-Pass Access Software consists of two applications. The first and most used is the Intelli-Pass Access Software. The second, which runs in the taskbar at the bottom of your Windows Desktop (near your PC clock), is the Intelli-Pass Queue Processor. The Intelli-Pass Queue Processor is the interface between the Intelli-Pass Access Software and your Intelli-Pass Access Control Units. This software can only run on one PC at a time; otherwise, communications errors may occur. Once you ve moved your data to your server, and knowing that the Intelli-Pass Queue Processor can only run on one PC (we suggest one that can run 24/7 and is protected by an uninterruptible power supply unit), you need to tell the other client PCs not to run the Intelli-Pass Queue Processor. Make a note of the IP Address for the PC that will run the Intelli-Pass Queue Processor, because you will need it to configure the Intelli-Pass Access Dashboard later on. Using Internet Explorer, browse to the following folder: C:\Program Files\Intelli-Pass\Management Software blackbox.com Page 23

24 Chapter 3: Storing/Sharing Your Data on a Server Locate and open (double-click the file) the file data.ini, and you should see the following: Figure 3-5. Setting the flag so that the Intelli-Pass Queue Processor does not load on this PC. The file only consists of two lines. The first tells the Intelli-Pass Access Software where your data is located and the second controls whether the PC loads the Intelli-Pass Queue Processor or not. Edit the line that begins with QUEUELOAD= and make sure that there is a zero after the equals sign (as shown in Figure 3-5). If this is the PC that is running the Intelli-Pass Queue Processor, the line should read: QUEUELOAD=1 And finally, don t forget to add the Intelli-Pass data path (whether it s on the local PC or shared on your server) to your daily backups. Page blackbox.com

25 Chapter 4: Desktop Firewalls 4. Desktop Firewalls The installation of your Intelli-Pass Biometrics Management Software creates two exceptions in the Windows firewall. Note that if you use a third-party firewall product, you will need to manually add exceptions for the following programs: C:\Program Files\Intelli-Pass\Management Software\Management.exe C:\Program Files\Intelli-Pass\Management Software\Queue.exe If you don t add the above programs to your firewall exceptions, communications problems will occur between your Intelli-Pass Access Software, Intelli-Pass Queue Processor, and your Intelli-Pass Access Control Units blackbox.com Page 25

26 Chapter 5: Logging In 5. Logging In Whenever you open the Intelli-Pass Access Software, you will be presented with the main login screen (see Figure 5-1). Click on the pull-down box and select your name from the list. You will then be asked to place one of the fingers you previously registered on the desktop USB fingerprint scanner so that your template can be verified. NOTE: Only users who are registered as system managers or supervisors are allowed to log in to the software, so only those users will be listed. Managers have full access, while supervisors have restricted access and management rights. If verification of your fingerprint succeeds, you be shown an Authorization Granted message and the Intelli-Pass Access Software will load. If verification fails, you will be shown an Access Denied message. To attempt to log in again, select your name from the list again and repeat the process above. Figure 5-1. The Intelli-Pass Login Screen. Page blackbox.com

27 Chapter 6: Initial Setup 6. Initial Setup When configuring your Intelli-Pass Access Software for the first time, click the Start Here button at the upper left of the initial screen. Black Box strongly recommends that you follow and become acquainted with these functions and their associated processes. This option presents seven initial configuration operations, to be performed in order (see Figure 6-1). Figure 6-1. Initial Software Setup, Start Here 6.1 Zones The first thing you need to set up is your zones (see Figure 6-2). As far as your Intelli-Pass Access Software is concerned, zones represent the physical makeup of your site or building. For example, a small operation with one single-level building and maybe four or five Intelli-Pass Access Control Units might only set up a single zone. However, a larger operation with several multilevel buildings might chose to set up multiple zones on a per-building, per-level basis. It is completely up to you how your zones are set up, and planning your zones before setting them up in the software is definitely worth consideration. The only restriction is that any unit can only exist in a single zone. Zones are used to group Intelli-Pass Access Control Units into smaller, manageable units. If one of your zones has Intelli-Pass Access Control Units assigned to it, and you want to give a user access to all the units in that zone, simply select the zone rather than having to select all the units. Similarly, if you want to revoke a user s access to a particular zone, you can simply de-select the zone rather than having to de-select the units in that zone blackbox.com Page 27

28 Chapter 6: Initial Setup Figure 6-2. The initial Zones screen For more information on setting up/managing Zones, please see Section 8.1, Zones. 6.2 Before Connecting to Your LAN/Network Your Intelli-Pass Access Control or Intelli-Pass Cabinet System uses IP over Ethernet for communications. This means that you need an IP address for each unit. You could simply plug your Intelli-Pass Access Control or Intelli-Pass Cabinet System into the LAN and set each unit to automatically receive an IP address for your DHCP server. However, although this may be acceptable for a small operation, it won t be for any larger organization. A larger organization will have its IP network fully planned, and simply plugging new devices into the network will be against IT policy. We recommend that you involve your IT department or service provider so that it can properly assign a range of IP addresses for your Intelli-Pass Access Control or Intelli-Pass Cabinet System. Once you have been assigned your IP addresses, you can add your Intelli-Pass Access Control or Intelli-Pass Cabinet System to your software. 6.3 Add Units (Network Scan) As an Intelli-Pass system manager, there are two methods available to allow you to add Intelli-Pass Access Control or Intelli-Pass Cabinet System to the software. Clicking the Add units, network scan (LAN) button opens a new Unit Setup screen (see Figure 6-3). Upon opening, this issues a network broadcast on the LAN. Each Intelli-Pass Access Control or Intelli-Pass Cabinet System that is currently connected to the same LAN (subnet) as the PC that is running the software will respond with its respective MAC addresses. All units that respond to the broadcast will appear in the Unit List. Page blackbox.com

29 Chapter 6: Initial Setup Figure 6-3. Add Units, Network Scan (LAN). To add your Intelli-Pass Access Control or Intelli-Pass Cabinet System to the software, simply double-click it. The screen in Figure 6-4 appears. Figure 6-4. Assign Unit Settings. Unit Name: Give the Unit a unique and meaningful name (such as IT Closet or Building 101, Main Entrance). This is how this Unit will be referenced in the software. Unit Zone: Select the appropriate Zone from the list blackbox.com Page 29

30 Chapter 6: Initial Setup IP Assignment: Set to Automatic DHCP by default. If you have a DHCP server on your network that manages the distribution of IP addresses, this is the preferred option. If you need to specify a manual IP address, change IP Assignment to Manual and enter the IP Address, Subnet Mask, and Default Gateway. Port: The default is 1001 for all Intelli-Pass Access Control and Intelli-Pass Cabinet Systems. Under certain conditions, this may need to be changed, for example, if you are using port forwarding or can only open specific ports through a firewall. Consult your network administrator before changing the Remote Port setting. Encryption Key: The key must match the one entered at the Unit during the initialization phase. Once you re happy with your settings, click on the OK button. You will then be prompted to confirm that you want to update the Unit with your settings. Click Yes. (See Figure 6-5.) Figure 6-5. Update Unit with your settings. Your Intelli-Pass Access Control or Intelli-Pass Cabinet System will now be programmed with your IP-related settings. Once complete, the database is updated and the Unit Setup screen is updated. You ll see a screen like the one in Figure 6-6. Repeat the process until all your Units are programmed and added to the database. Page blackbox.com

31 Chapter 6: Initial Setup Figure 6-6. Unit has been successfully programmed and added to the database. 6.4 Add Units (Manually) The second method of adding an Intelli-Pass Access Control or Intelli-Pass Cabinet System to the software allows you to add units that are not reachable with a network broadcast. This could be units that are on a different subnet or at a remote location. Clicking the Add units, manually (WAN) button allows you to add Intelli-Pass Access Control or Intelli-Pass Cabinet System from remote subnets into the database (see Figure 6-7). When physically installing an Intelli-Pass Access Control or Intelli-Pass Cabinet System at a remote location or a remote subnet, the Intelli-Pass IP Set utility must be used to configure your Units and assign them IP addresses. If you have misplaced the IP Set utility disk, contact Black Box Technical Support at or info@blackbox.com blackbox.com Page 31

32 Chapter 6: Initial Setup Figure 6-7. The Add unit, manually (WAN) screen. When using the Intelli-Pass IP Set utility to configure your remote units, you should note the location (or zone), unit name, IP settings and encryption keys (entered when initializing the Unit for the first time after power on). IP Address: Enter the IP Address, Subnet Mask, and Default Gateway of the Unit as determined by the IP Set software. Port: Enter the Remote IP Port as determined by the IP Set software. Unit Name: Give the unit a unique and meaningful name (such as IT Closet or Building 101, Main Entrance). This is how this unit will be referenced in the software. Zone: Select the appropriate Zone from the list. Encryption Key: The key must match the one entered at the unit during the initialization phase. Once you re happy with your settings, click the Add Unit button. The Intelli-Pass Access Software will try to initiate contact with the Unit before adding it to the database. If the unit cannot be contacted, you will be prompted to confirm that you want add the Unit with your settings. Repeat the process until all your remote units are added to the database. 6.5 Timebands Your Intelli-Pass allows you to set up something called Timebands. Timebands are essentially time restrictions. They can be viewed as work or shift patterns. By default, Timeband 00 is reserved for 24/7 access. All other Timebands are completely configurable. Every user belongs to a particular Timeband and their physical access times will be restricted by the Timeband they are assigned to. You can set up as many as 99 Timebands. To set up a Timeband, select the first available undefined Timeband from the list (see Figures 6-8 and 6-9). Page blackbox.com

33 Chapter 6: Initial Setup Figure 6-8. Setting up Timebands for the first time. Name: Enter a unique and meaningful name for the Timeband you are setting up, such as Office Hours (7 Days), or Night Shift, Weekdays (10pm-6am) for example. Date Display Format: This controls the way that time is displayed on this screen only. Clicking on the radio button next to 1:00 PM shows the time in 12 hour AM/PM format, while clicking on the radio button next to 13:00 shows the time in 24 hour (or military) time. Times: Enter the start and end times for each day. If you need to make the next day the same, just click the Same as button to copy the previous day s start and end times. To disable access for any day, make sure the start and end times for both columns for that particular day are 12:00AM or 00:00 (depending on the display format selected). The right-hand column in the Times section comes into play when access for a particular day crosses midnight. For example, Night Shift, Weekdays (10pm-6am) would see Monday s left column set to start at 09:30 PM and end at 11:59 PM. Tuesday s left column would be set to start at 00:00 AM and end at 06:30 AM and Tuesday s right column would be set to start at 09:30 PM and end at 11:59 PM. You would then click the Same as buttons next to the times for Wednesday, Thursday, and Friday. The left column would be set to start at 00:00 AM and end at 06:30 AM. This would copy Tuesday s times to Wednesday, then Wednesday s to Thursdays, and so on. Leave all Sunday s times to 00:00 AM to disable access blackbox.com Page 33

34 Chapter 6: Initial Setup Figure 6-9. Timeband Setup. 6.6 Departments Departments (see Figure 6-10) are used to help filter (or drill-down) your door access reports. They can mirror your own organization s departmental setup. Figure Maintaining Departments. Page blackbox.com

35 Chapter 6: Initial Setup Each user must belong to a single Department. Out of the box, your Intelli-Pass Access Software has a single department called Default. If you don t want to separate your users into Departments, simply assign all your users to the Default department. 6.7 User Groups User Groups provide physical access to groups of users. Do not confuse User Groups with Departments. A Department is used for reporting purposes, but User Groups are used to allow a user physical access to one or more access points that can be spread across multiple access Zones (as set up previously). Figure Setting up User Groups. Each user must belong to a single User Group. Out of the box, your Intelli-Pass Access Software has a single User Group called Default. See Figure Register Users Once you have set up your Zones; added your Intelli-Pass Access Control Units (both local and remote); and set up Timebands, Departments, and User Groups, you re ready to start adding users to your Intelli-Pass Access Solution. To add new users, you ll use the User Registration Wizard (see Figure 6-12) blackbox.com Page 35

36 Chapter 6: Initial Setup Figure The User Registration Wizard. You can specify a user s PIN, User Level, personal details, Department, employment start date, capture his/her photo, assign an RFID card, capture his/her fingerprint templates, and assign physical access. Your Intelli-Pass Access Software allows for four different user levels that control access to the software itself. User: This is a basic user who cannot access the Intelli-Pass Access Software. Dashboard Operator: Only has access to the Dashboard, ideal for an on-site security guard to receive alerts, review live audit data, and print related reports. Super User: Only has access to the Dashboard and can manage (add, edit, or delete) basic users. Manager: Has access to every part of the software. Page blackbox.com

37 Chapter 7: Setting Up the Dashboard 7. Setting Up the Dashboard The Intelli-Pass Access Dashboard (Figure 7-1) gives Intelli-Pass Access Software a complete, almost real-time view of systemrelated events and user audit data and checks the status of the Intelli-Pass Queue Processor. Clicking on the Settings button, allows you to configure your dashboard settings. Here you can control what kind of data is displayed in the Critical Alerts and Live Audit Activity sections of the Intelli-Pass Access Dashboard and also set up alerts. Figure 7-1. The Intelli-Pass Access Dashboard. To send alerts, your Intelli-Pass Access Dashboard needs to know how to route (see Figure 7-2). You may be required to create a separate address (such as Intelli-Pass_alerts@yourdomain.com) if you are routing your Intelli-Pass Access Dashboard s via your internal system (Exchange, for example). Contact your IT administrator/service provider to confirm/set up your settings. Click on Save to update your Intelli-Pass Access Software with your server settings blackbox.com Page 37

38 Chapter 7: Setting Up the Dashboard Figure 7-2. Intelli-Pass Access Dashboard Settings. The Intelli-Pass Queue Processor is a critical part of the Intelli-Pass Access Solution. Without it, data (such as adding new users) cannot be uploaded to the Intelli-Pass Access Control or Intelli-Pass Cabinet System. Data (such as audit data or critical system events) cannot be downloaded either. See Figure 7-3. If you are running your Intelli-Pass Access Solution in standalone mode, enter the IP address of your workstation. If you are running your Intelli-Pass Access Solution in shared/networked mode, enter the IP address of the PC assigned to run the Intelli-Pass Queue Processor (you should have noted this after moving your data to your central database location). Click on Save to update your Intelli-Pass Access Software with your Intelli-Pass Queue Processor IP address. Figure 7-3. Intelli-Pass Access Dashboard Queue Server IP Settings. To use the Intelli-Pass Access Dashboard as an effective tool, you can configure which Door Events or Access Events will be reported as Critical Alerts, to be displayed in the upper left section of the Dashboard (see Figure 7-4). Click on Apply to save your preferences. Page blackbox.com

39 Chapter 7: Setting Up the Dashboard Figure 7-4. Intelli-Pass Access Dashboard Critical Events Preferences. After configuring your Intelli-Pass Access Dashboard settings, you now have to decide who is to receive alerts by . alerts are optional and do not have to be configured for the system to run. To add an alert recipient, simply right-click on the list box on the left of the screen (which is empty in Figure 7-5). Figure 7-5. Intelli-Pass Access Dashboard, Alerts Configuration. As an Intelli-Pass Access Dashboard user, you can produce Door Event based reports (see Figure 7-6) blackbox.com Page 39

40 Chapter 7: Setting Up the Dashboard Select Units: Choose from all units, a single unit, or a zone. Figure 7-6. Intelli-Pass Access Dashboard Event Reports. Date Range: Choose from all dates or a selection of dates (by selecting a start and end date for the report). Sorting: You can sort the report using up to four selectable criteria. By default, the report is sorted in ascending order. Simply check the Descending box to have your report sorted in descending order. Door Events: Check the boxes of the types of events to include in your report. You can also produce Dashboard Access based reports (see Figure 7-7). Page blackbox.com

41 Chapter 7: Setting Up the Dashboard Figure 7-7. Intelli-Pass Access Dashboard Access Reports. Select Users/Units: Choose from all users/units, a single user, a group of users (User Group), department, a single unit, or a zone. Date Range: Choose from all dates or a selection of dates (select a start and end date for the report). Sorting: Sort the report using up to four selectable criteria. By default, the report is sorted in ascending order. Check the Descending box to sort your report in descending order. Access Events: Check the boxes of the types of events to include in your report blackbox.com Page 41

42 Chapter 8: Managing Units 8. Managing Units Your Intelli-Pass Access Software provides a comprehensive array of options to allow you to manage your Intelli-Pass Access Control or Intelli-Pass Cabinet System (see Figure 8-1). Add a unit, edit its settings, or delete it from the system. Options are also provided for enabling/disabling Wiegand Output, resetting units after an alarm condition, printing a list of users on a given unit, including/excluding a unit from being processed by the Intelli-Pass Queue Processor (enabling or disabling communication with a unit), and rebooting a unit. Figure 8-1. Managing Units Control Screen 8.1. Zones As previously discussed in Section 6.1, zones represent the physical makeup of your building or site. The left-hand column of the screen in Figure 8-2 is a list of all those Zones that have been set up. Clicking on a Zone in the left-hand column will populate the center column with a list of Intelli-Pass Access Control or Intelli-Pass Cabinet System currently assigned to that Zone. Clicking on a Unit in the center column will populate the right-hand column with a list of users who currently have access to the selected unit. You can manage Zones by right-clicking on the left-hand (Zones) column. Page blackbox.com

43 Chapter 8: Managing Units Figure 8-2. Zones Management Screen. To add a new Zone, after right-clicking over the Zones column, click Add. (See Figure 8-3.) Figure 8-3. Zones Management Menu blackbox.com Page 43

44 Chapter 8: Managing Units Give the new Zone a meaningful name and description (see Figure 8-4). For example, Zone Name BLD103F1, Zone Description Building 103, First Floor. The format of the Zone Name and Description are not fixed and you could use the same text for both. Occasionally, you might need to rename a zone. Figure 8-4. Adding a Zone. Select the Zone you want to rename in the left-hand (Zones) column, then click Rename (see Figure 8-5). Figure 8-5. Renaming a Zone (Menu). Enter the new Zone Name and/or Description and save your changes by clicking the Apply Changes button (see Figure 8-6). Page blackbox.com

45 Chapter 8: Managing Units Figure 8-6. Renaming a Zone. Managing Units, Zones Again, depending how your Zones are set up, you may need to delete a Zone. Select the required Zone in the left-hand (Zones) column, then click Delete (see Figure 8-7). Figure 8-7. Deleting a Zone blackbox.com Page 45

46 Chapter 8: Managing Units 8.2 Manually Adding a Unit The Add option allows you to add units that a network broadcast (scan network) cannot reach. Good examples are units that are on a different subnet or at a remote location. When physically installing an Intelli-Pass Access Control or Intelli-Pass Cabinet System at a remote location or a remote subnet, use the Intelli-Pass IP Set utility to configure your Units and assign them IP addresses. If you have misplaced your IP Set utility disk, contact Black Box Technical Support at or info@blackbox.com. Figure 8-8. Manually Adding a Unit. When using the Intelli-Pass IP Set utility to configure your remote Units, you should have noted the location (or zone), Unit Name, IP settings, and encryption keys (entered when initializing the Unit for the first time after power on). (See Figure 8-8.) IP Address: Enter the unit s IP Address, Subnet Mask, and Default Gateway as determined by the IP Set software. Remote Port: Enter the Remote IP Port as determined by the IP Set software. Unit Name: Give the unit a unique and meaningful name (such as IT Closet or Building 101, Main Entrance). This is how this unit will be referenced in the software. Zone: Select the appropriate Zone from the list. Encryption Key: The key must match the one entered at the Unit during the initialization phase. Once you re happy with your settings, click on the Add Unit button. The Intelli-Pass Access Software will try to initiate contact with the unit before adding it to the database. If the software cannot contact the unit, you will be prompted to confirm that you want to add the unit with your settings. Repeat the process until all your remote units are added to the database. 8.3 Scan Network Clicking the Add units, network scan (LAN) button opens a new Unit Setup screen. (See Figure 8-9.) Upon opening, this issues a network broadcast on the LAN. Each Intelli-Pass Access Control or Intelli-Pass Cabinet System that is currently connected to the same LAN (subnet) as the PC running the software will respond with its respective MAC address. All units that respond to the broadcast will appear in the Unit List. Page blackbox.com

47 Chapter 8: Managing Units Figure 8-9. Add Units, Network Scan (LAN). To add your Intelli-Pass Access Control or Intelli-Pass Cabinet System to the software, simply double-click it. Figure Assign Unit Settings with Auotmatic (DHCP) IP Assignment. Unit Name: Give the unit a unique and meaningful name (such as IT Closet or Building 101, Main Entrance). This is how this unit will be referenced in the software. Unit Zone: Select the appropriate Zone from the list. IP Assignment: Set to Automatic DHCP by default (see Figure 8-10). If you have a DHCP server on your network that manages the distribution of IP addresses, this is the preferred option. If you need to specify a manual IP address, change IP Assignment to Manual and enter the IP Address, Subnet Mask, and Default Gateway (see Figure 8-10). Remote Port: The default is 1001 for all Intelli-Pass Access Control and Intelli-Pass Cabinet Systems. Under certain conditions this may need to be changed, for example, if you are using port forwarding or can only open a specific port through a firewall blackbox.com Page 47

48 Chapter 8: Managing Units Consult with your network administrator before changing the Remote Port setting. Encryption Key: The key must match the one entered at the Unit during the initialization phase. Once you re happy with your settings, click the OK button. You will then be prompted to confirm that you want to update the unit with your settings. Click Yes. Figure Assign Unit Settings with Manually Assigned (Static) IP Assignment. Your Intelli-Pass Access Control or Intelli-Pass Cabinet System will now be programmed with your IP related settings. Once complete, the database is updated and the Unit Setup screen is updated. Repeat the process until all your units are programmed and added to the database. 8.4 Edit a Unit Once a unit has been set up, you may need to edit/update/change its settings. You can do this by either double-clicking the unit in the list or by clicking the unit in the list and clicking the Edit button on the menu bar above. The screen in Figure 8-12 will appear. Page blackbox.com

49 Chapter 8: Managing Units Unit Name: Enter a meaningful name for the Unit. Zone: Select the Zone from the list that this Unit belongs to. Figure Edit Unit Details Screen. Unit Function: Your Intelli-Pass Access Control Unit can function as either an Access Control Unit or a Time Clock. Click on the radio button that corresponds to the function you require. Default Credentials: Your Intelli-Pass Access Control Unit supports 1-, 2-, or 3-factor authentication. Check the boxes that match the functions you require. Date Format on LCD: Your Intelli-Pass Access Control Unit can display the date in either U.S. or U.K. (European) format. Click the radio button that corresponds to the date format you require. Network Settings: You can change the IP settings (Manual/Auto DHCP, IP Address, Subnet, Default Gateway, and IP Port) for this Unit by clicking the Change IP Address button. Unit Settings: Security Level: Can be set as 1, 2, or 3 with 1 as the lowest and 3 as the highest. Entry Delay (Seconds): Determines how long your Intelli-Pass Access Control or Intelli-Pass Cabinet System will keep its door relay open following a successful user validation. Exit Delay (Seconds): Determines how long your Intelli-Pass Access Control or Intelli-Pass Cabinet System will keep its door relay open after a Request to Exit switch is pressed/released. Propped Door (Minutes): When your Intelli-Pass Access Control or Intelli-Pass Cabinet System opens its door relay (following successful validation of a user or a Request to Exit switch being pressed) and the door contact remains open beyond the amount of time setup here, an alarm event will be triggered and the Units buzzer will sound. Enable Duress: Determines whether and alarm event will be triggered following successful user validation of a fingerprint template that is assigned in your Intelli-Pass Access Software as a duress template. Enable Forced Door: If enabled and your door contacts are forced open (a successful user validation has not occurred nor has the Request to Exit switch been pressed), an alarm event will be triggered and the unit s buzzer will sound blackbox.com Page 49