Operating Manual QUESTOR

Transcription

1 QUESTOR AS 273 Management Software Document: KSW3s / en Edition: August 2010

2 QUESTOR TABLE OF CONTENT 1 Product description EN Purpose... EN System components... EN Questor lock.... EN AS 270 activation software... EN AS 271 programming software... EN AS 273 management software... EN AS 274 server management software (optional)... EN APHI - Application Programming Hardware Interface (optional)... EN Modes of operation... EN Standard (Bank) mode.... EN Interactive mode OTC (One Time Combination)... EN Interactive mode ICS (Interactive Code System).... EN Security concept... EN-5 2 Information about this documentation EN Symbols and notes... EN Danger warnings / notes / information... EN Markings used in the text.... EN-6 3 Installing the software EN System requirements... EN Installing AS EN Installing the driver for the USB copy-protection dongle... EN Installing the USB copy-protection dongle.... EN-8 4 Activating the software EN Starting the application... EN Activation after the installation... EN-10 5 Using the software EN Login... EN Users setup tab... EN Locks setup tab.... EN Locks management tab... EN Generating an opening combination... EN OTC (One Time Combination) operating mode.... EN ICS (Interactive Code System) operating mode... EN Entering the close seal... EN Generating a battery combination... EN Operators tab.... EN Preferences tab... EN Audit tab.... EN About tab... EN-28 Operting Manual Page EN-2 Subject to change without prior notice

3 QUESTOR Subject to change without prior notice Operting Manual Page EN-3

4 1 Product description 1.1 Purpose The AS 273 management software is an application for managing and operating Questor locks in one of the two interactive operating modes - OTC or ICS. With only a few simple menues this software allows to generate one time opening codes and manage Questor locks activated and registered in the software. For security reasons, the software can only be installed and accessed in conjunction with a personal hardware key (in the form of a USB dongle) and by providing a valid operator name and password. All application data is encrypted to protect against misuse. 1.2 System components For a better overview, the various components of the Questor system are listed below. Some components are optional or are intended for expansion and integration of the system with other software. In addition to the lock itself, the AS 271 programming software and the AS 270 activation software are required in every case. For interactive mode operation, either the management software or an integrated solution with a Questor interface (APHI) are required Questor lock The Questor lock consists of a motorized lock with standard dimensions and an input unit with green navigation buttons. The lock is shipped from the factory in standard mode with master code , and functions as a conventional combination lock AS 270 activation software The AS 270 activation software for Windows operating systems is used to change from standard mode into one of the two one time combination modes, OTC or ICS AS 271 programming software Basic settings of the locks parameters, such as the language, opening time delays, inputs and outputs, etc., are configured with the AS 271 programming software AS 273 management software The AS 273 management software is used to issue one time combinations. This software controls and logs all operations, and enables the centralized management of all locks and users registered to the software AS 274 server management software (optional) Alternatively to AS 273, this comfortable management software makes it possible for a large number of users to work with the Questor system at the same time. Even very large and complex systems can be managed with this software APHI - Application Programming Hardware Interface (optional) The APHI external interface was developed to integrate lock management in an existing customer software solution. Once integrated with existing software, the APHI handles all tasks related to the issuance of one time combinations. Page EN-4

5 1.3 Modes of operation The Questor electronic safe lock offers three different modes of operation in one single lock Standard (Bank) mode As a factory default, the Questor lock is set to function as a conventional electronic combination lock in standard mode. It opens when a preprogrammed opening combination has been entered Interactive mode OTC (One Time Combination) In this operating mode, it is possible to generate a one time opening combination for a Questor lock and for a user who has been registered in the management software (Section System components on page 4). This combination allows the lock to be opened one time. It is valid for an unlimited period of time. As soon as the lock has been opened, the previously generated one-time combination will no longer be valid Interactive mode ICS (Interactive Code System) This operating mode provides tight control over every event at the lock. An opening combination can only be generated with the user physically present at the lock, after he has entered his four-digit identification number on the locks keypad. As a result of the users identification on the key pad, the lock will display a request code (question) that needs to be returned to the dispatch center in order to generate an opening combination with various time delays. 1.4 Security concept The Questor system is protected by a combination of different security measures. These security measures include: Every system has a unique customer number. Locks and dongles which have been registered in one system can not be used in any other customers system. The management software must be activated before it is used. Activation is carried out by registeration of two supervisor dongles. Identification with a personal dongle, operator name and password is required to login to the management software. The identification number, used by the lock user to identify himself on the locks keypad, is not visible to the dispatcher logged in to AS 273 management software. Attempts to manipulate the locks input unit are recognized on the spot and the system supervisor is notified. Attempts to manipulate an audit are recognized by both, the lock and the management software, and are indicated to the supervisor. Page EN-5

6 2 Information about this documentation 2.1 Symbols and notes! i Danger warnings / notes / information Specific symbols, notes and markings are used according to the type of danger. They generally contain a message, an explanation, and measures that can be taken to avoid the danger at hand, or instructions on how you should proceed. Please observe these instructions so that you can handle system components safely, and so that you can work with the documentation in an efficient manner. Warning! Provides important information which must be observed for the process being described. Note! Indicates a note, advice or reference, which makes the task at hand easier, or which contains additional background information or emphasises specific details. Requirement! Indicates a requirement, which must be met before the described function is carried out, activated, modified or deleted Markings used in the text The symbol stands for see, please refer to or also see. Example: For an explanation of the master code 4.1 Starting the application On page EN-10. Text that appears in the display is printed in capital letters and placed in quotation marks. Example: CLOSED. Buttons which have to be pressed are printed in bold, capital letters: DEL = delete button NUMERIC = numeric keys 0 9 INFO/ESC = information/escape button ENTER = enter button MODE = mode button LEFT = move arrow to the left RIGHT = move arrow to the right Page EN-6

7 3 Installing the software Sequence for the installation and activation of the management software: Installation of the AS 273 management software Installation of the driver for the USB dongles for each USB port used on the computer Activation of the AS 273 management software on the computer by registering the first two supervisor operators (see Section Activation after the installation on page 10). 3.1 System requirements A computer with a 1 GHz CPU, at least 512 MB of RAM and a Windows XP operating system are required to install and use the Questor software. The graphics card and monitor must support a resolution of at least 1024x768. The computer being used must have two free USB ports (also see Section Activation after the installation on page 10). 3.2 Installing AS 273 Installation is automatically executed by double clicking on the installation file AS273e0xyz.exe (0xyz refers to the version number), or through the menu contained in the installation CD-ROM. Installing the AS 273 management software Page EN-7

8 3.3 Installing the driver for the USB copy-protection dongle The software produced by Kaba is a copy-protected product. A license in the form of a USB dongle is required to use the software and to identify the individual software operator. Software licenses and additional dongles can be obtained from your Kaba partner Installing the USB copy-protection dongle Before starting the application, the USB dongle marked with AS 273/S has to be plugged in to a free USB port on the computer. The Windows XP operating system will automatically recognize a USB dongle. If this is the first time the dongle will be connected to a particular USB port, the operating system will require the installation of a device driver. The following installation dialog window will appear: Provided the installed operating system is currently up-to-date, access to Windows Update is not required for the installation of the driver. Proceed with the installation by selecting No, not this time and clicking on Next >. Page EN-8

9 Selecting a compatible device driver: The operating system should already have the driver for the USB dongle in its standard driver set; a CD is not required. The software will be installed automatically. The installation of the USB driver for the copy-protection dongle has been successfully completed. i Multiple USB ports The USB driver has to be installed once for every USB port that a copy-protection dongle will be connected to. Page EN-9

10 QUESTOR - Management 4 Activating the software 4.1 Starting the application The application is started by clicking on the program icon that was automatically created in the Kaba folder under the Windows Start Menu. Start screen of the AS 273 management software 4.2 Activation after the installation For security reasons, the application must be registered when started for the first time. Two Supervisor USB dongles will be required for this registration process. They have been supplied with the delivery of purchased AS 273 management software. Additional Supervisor dongles can be ordered from Kaba at any time. Personal USB login dongles (the color may vary from those shown here) Plug one of the USB dongles labelled with Supervisor into the computer. Note: Registration of the first Supervisor is required The first supervisor is registered by entering an operator name and a password consisting of at least six digits. The Description field can be used to save additional information about the individual users of the AS 273 management software if needed. Page EN-10

11 Registering an operator; supervisor in this example Registration of the second supervisor When registering the second supervisor it is imperative that the USB dongle for the first, previously registered supervisor remains plugged in to the USB port on the computer. You will now be prompted to insert the second supervisor USB dongle to finalise the registration process. this second dongle must be connected to the computer while the first one is still connected as well.! Note: Registration process not yet complete An operator name and password msut be specified for the second supervisor. Click on OK to confirm the message and proceeds with the registration of the second supervisor. Registration of the newly installed management software can be aborted by clicking on the Cancel button. The registration process can be resumed at any time. Creating unique codes During the course of commissioning and setting up the software, all codes must be personalized. Never use simple numerical combinations (e.g , ) or personal data (e.g. birthdays). For security reasons, codes should be changed at regular intervals. Page EN-11

12 QUESTOR - Management 5 Using the software 5.1 Login If the software was successfully activated, the AS 273 management software login window will appear when launching the application. Login window of AS 273 management software To log in to the software, a registered operator (after the initial activation, it must be one of the two supervisors) has to plug his USB dongle to the computer and log in with operator name and password. 5.2 Users setup tab This tab is available to a supervisor. It allows a supervisors to register lock users in the management software, change user names, and delete users. i Users setup tab in the AS 273 management software Generating one time opening combinations. One time opening combinations for locks can only be generated for registered users. Add - adds a new lock user to the AS 273 management software. A user is specified with a unique, 4-digit identification number (ID) and a user name. Page EN-12

13 i User identification number The 4-digit identification number serves to identify an individual user at the lock. It must be unique for each user. The identification number is assigned by the supervisor. It will not be visible to the dispatcher at any time. The maximum number of users for the Questor system is limited to Locks setup tab Edit - allows to change a users ID number and/or name. Delete - deletes a user from the list. This tab is available to a supervisor. It allows a supervisors to manage locks associated with the Questor system.! Locks setup tab in the AS 273 management software Add from file - this function is used to import newly activated locks into the AS 273 management software. A file that was created during activation with the AS 270 software will be imported. This activation file must be electronically transferred to the computer on which the AS 273 management software is installed. Edit - the name and description of locks which have already been imported can be modified at any time with this button. Delete - locks which are no longer in service, or have been replaced, can be deleted from the AS 273 management software by a supervisor. Deleting a lock Once a lock has been deleted, it can not be restored. A deleted lock must be reactivated before it can be used again (see the Questor operating instructions for Programming and Activation). Page EN-13

14 QUESTOR - Management 5.4 Locks management tab This tab is used to create and process Questor combinations. Locks management tab in the AS 273 management software Get an opening combination - used to generate an opening combination for locks which are registered in the software (Section Generating an opening combination on page 14). Enter a close seal - used to enter the confirmation code (close seal) from the lock in the software (Section Entering the close seal on page 19). Get a battery combination - generates a battery combination used to reset the battery message on the lock display (Section Generating a battery combination on page 23) Generating an opening combination Start of the procedure to generate a one time opening combination. Window for selecting a user and lock Page EN-14

15 In this window, the user requesting a one time opening combination is selected from the column on the left. Users are selected by name. By entereing the first characters of a users name in the search field on top of the column, the list of users shown is filtered acordingly. The requrested lock is selected from the column on the right. Previous - this button exits the procedure and returns to the previous Locks management tab. Next - After user and lock have been selected from the two lists, this button becomes active and is clicked to continue to the next step in the process OTC (One Time Combination) operating mode Lock-opening sequence for a one time combination in OTC mode Procedure in the AS 273 management software: In this window, an opening combination with different opening time delays can now be generated depending on the options configured by a supervisor. Generating a one time combination in OTC mode; select the type of opening delay The selection buttons on the left side are used to specify the type of opening delay (Section Preferences tab on page 26). Page EN-15

16 Get combination - generates a one time opening combination. Previous - this button exits the procedure and returns to the previous window. Finish - the procedure of generating a one time opening combination is finished. i Procedure for OTC mode at the lock In order to open the lock in OTC mode, the 4-digit user identification number must be entered first (also see page EN-13). The entry is confirmed by pressing the ENTER button twice on the lock input unit keypad. Triggering a duress notification in OTC mode. Entry of the 4-digit, personal identification number is confirmed with the ENTER button on the input unit: If there is no duress, the entry is confirmed by pressing the ENTER button on the lock input unit twice. In case of duress, the entry of the user ID is confirmed by pressing the ENTER button on the lock input unit only once, thus triggering a duress notification. The duress notification can also be forwarded to an alarm system by relay output 1. In OTC mode, the duress status is reported to the operator when entering the close seal in the AS 273 management software. After entering the user ID and confirming with the ENTER button, a countdown of 2:30 minutes will start in the lock. Now the 6-digits one time opening combination must be entered on the keypad of the lock input unit during this time to open the lock ICS (Interactive Code System) operating mode Differences in procedure for OTC and ICS. OTC Enter the 4-digit user ID - - Enter 6-digit opening combination at lock ICS Enter the 4-digit user ID Request combination appears on the lock display Enter and validate the request combination in management software Enter 6-digit opening combination at lock Lock opening sequence for a one-time combination in ICS mode Page EN-16

17 Procedure in the AS 273 management software Generating a one time combination in ICS mode; entering the request combination After the user and lock have been selected (see Section Generating an opening combination on page 14), the management software prompts the software operator to enter the request combination. The request combination will appear on the display of the lock after the user has identified himselve with the 4-digit ID on the locks keypad. This request combination must be communicated to the operator of the AS 273 management software (e.g. via telephone, text message, etc.) and entered in the software window shown above. The software verifies the request combination which has been entered: Validation of the request combination generated by the lock Previous - this button is used to go back to the previous window. Next - this button is used to proceed to the next step after the request combination has been verified. Page EN-17

18 QUESTOR - Management Incorrect request combination / user under duress When validating the request comobination given by the lock, these two other messages may appear alternatively to the Combination accepted message. i Message: Wrong input and The user is under duress The Wrong input message in ICS mode is given if: The request combination read from the display of the lock input unit was not entered correctly in the AS273 software. -> Compare the combination entered with the combination on the lock display. The user selected in the software does not correspond to the user ID entered at the lock. -> Wait until the code entry time window and the non return time delay have expired, then repeat the procedure after confirming the user ID number with a supervisor. The lock selected in the software does not correspond to the lock the user is attempting to open. -> Wait until the combination entry time window and the non return time delay have expired, verify that the correct lock has been selected, then repeat the procedure. Maximum time allowed to enter an ICS combination. As soon as the user has identified themselves at the lock, a countdown of 2:30 minutes starts to elapse at the moment the request combination appears in the display. The opening combination generated by the management software must be entered within this time window. After the 2:30 minute window has expired, the combination becomes invalid. The User is under duress message is given if a user has triggered a duress while he entered his user ID at the locks key pad. It is informing the operator of a duress situation on site even befor an opening code has been calculated. Depending on your companys individual security regulations and procedures in hold up situations, the operator must be instructed to react accordingly when a User is under duress message is shown in AS273 management software. A supervisor can preconfigure AS 273 in order to force the dispatch of an opening combination with duress time delay in case a duress message is detected when validating the request code. The duress status of a user is active until this opening process has been finished. Page EN-18

19 In this window, an opening combination with different opening time delays can now be generated depending on the options configured by a supervisor. Generating a one time combination in ICS mode; selecting the type of opening delay The selection buttons on the left side are used to select the type of opening delay (Section Preferences tab on page 26). Get combination - generates a one time opening combination. Previous - this button exits the procedure and returns to the previous window. Finish - the procedure of generating a one time opening combination is finished. i Procedure for OTC mode at the lock In order to open the lock in OTC mode, the 4-digit user identification number must be entered first (also see page EN-13). The entry is confirmed by pressing the ENTER button twice on the lock input unit keypad. Triggering a duress notification in OTC mode. Entry of the 4-digit, personal identification number is confirmed with the ENTER button on the input unit: If there is no duress, the entry is confirmed by pressing the ENTER button on the lock input unit twice. In case of duress, the entry of the user ID is confirmed by pressing the ENTER button on the lock input unit only once, thus triggering a duress notification. The duress notification can also be forwarded to an alarm system by relay output 1. In OTC mode, the duress status is reported to the operator when entering the close seal in the AS 273 management software. After entering the user ID and confirming with the ENTER button, a countdown of 2:30 minutes will start in the lock and at the same time the request combination is shown on the display. Now the 6-digits one time opening combination must be entered on the keypad of the lock input unit during this time to open the lock Entering the close seal As soon as an opening combination has been generated for a lock, its status in AS 273 management software changes to open. No more opening combinations can be generated until the locks status has been changed back to closed in the software. Page EN-19

20 QUESTOR - Management At the end of every opening procedure, a 6-digit close seal will appear on the lock display. The close seal appears regardless of whether the lock did actually open or not. The close seal serves as an important feedback to the AS 273 management software. The close seal must be read from the lock display and entered in the AS 273. The menu to enter the close seal is accessed through the AS 273 main menu by clicking on the Locks management tab (see Section Locks management tab on page 14). Entering a close seal; selecting the lock The list contains all registered locks for which an opening combination has been issued, and which therefore are listed in open status in the software. This window is used to enter a close seal, thus changing the lock status back to status closed in the software. The desired lock, for which a close seal is to be be entered, is selected from the list. It is possible to filter the list of currently open lock by entering the first charcter(s) in the search field on top of the screen. Previous - this button exits the procedure and returns to the Locks management tab. Next - As soon as a lock has been selected from the list, this button becomes active and can be clicked to continue to the next step. Page EN-20

21 In this window, the close seal given by the lock is entered and verified by the management software. Entering a close seal; verify the close seal Validate - this button evaluates the close seal entered. Previous - this button exits the procedure and return to the previous window. Finish - the procedure is finished Incorrect close seal If the close seal which entered does not correspond to what expected by the software, the following message will appear: Message: Close seal not accepted This message appears if an incorrect close seal was entered. The close seal obtained from the display of the lock input unit was not properly entered into the software. -> Compare the close seal entered with the close seal on the lock display, then enter the close seal again. Page EN-21

22 QUESTOR - Management If the second attempt to enter the close seal is again unsuccessful, one of the two following messages will appear: Message 1: Wrong input Possible cause for the Wrong input message received after entering the close seal: The close seal that was entered is not valid. -> Ensure that the right lock was selected from the list. -> Contact your sales representative. Message 2: Previous close seal bypassed This message appears if a difference in opening counter was found between the locks value and software. The close seal that was entered does not correspond to what expected. The data in the management software has been modified as a result of the information contained in the close seal. -> Now the lock and software are re-synchronised and will function normally again. If this is not the case, please contact your sales representative. Page EN-22

23 5.4.5 Generating a battery combination For security purposes, the opening of the battery compartment is monitored by the lock. If the battery compartment has been opened an information message is shown on the locks display. This message must be confirmed before the lock can be operated again. One possibility to confirm this battery message is to connect to the lock with the AS 271 programming software and entering the locks master code, or by entering a battery combination calcualted by the AS273 managemnt software on the locks input unit. The menu used to generate a battery combination can be accessed through the AS 273 main menu by clicking on the Locks management tab (see Section Locks management tab on page 14). Generating a battery combination; selecting a lock The lock for which a battery combination is to be be generated is selected from the list. The list only contains locks whose status is closed. A battery combination cannot be generated for open locks. Previous - this button exits the procedure and returns to the Locks management tab. Next - As soon as a lock has been selected from the list, this button becomes active and is used to continue to the next step. Page EN-23

24 QUESTOR - Management In this window, a battery combination to confirm the Battery compartment open message on the display of the lock can be generated for the lock previously selected. Generating a battery combination; generating a combination Get combination - generates a 6-digit battery combination. To confirm and reset the Battery compartment open message, the combination must be entered and confirmed with the ENTER button on the locks input unit. Previous - this button exits the procedure and returns to the previous window. Finish - the procedure is finished Battery combination is not accepted by the lock If the Battery compartment open message still appears in the display after the battery combination has been entered, then the battery combination that was entered was not accepted. Check whether the battery combination that was entered matches the combination generated by the management software. -> Enter the combination again on the keypad. If the Battery compartment open message does not disappear despite the correct entry of the combination, check if the correct lock was selected from the list. -> If the Battery compartment open message still appears, contact Kaba. Page EN-24

25 5.5 Operators tab This tab is available to a supervisor. It allows a supervisors to manage operators, Supervisors and Dispatchers, registered in the Questor system. Operators tab in the AS 273 management software This tab is available to the supervisors registered in the software. Supervisors can use this tab to manage operators in the AS 273 management software. Add - adds a new operator to the AS 273 management software. The Supervisor checkbox is used to select the authority level for the new operator; check the box for Supervisor, or leave it unchecked for Dispatcher. i Adding a new operator (dispatcher or supervisor) Adding an operator Every operator of the management software needs a personal USB dongle. In order to add a new operator, a new USB dongle must be connected to the computer. The USB dongles for AS 273 operators are programmed at the factory with one of the two authority levels - Supervisor or Dispatcher. Delete - deletes a lock operator from the list. Edit - allows the description and/or password for an operator to be changed. A forgotten password can not be displayed. A supervisor can overwrite the lost password with a new one, and then forward it to an operator. Afterwards, the operator can change his personal password. Page EN-25

26 QUESTOR - Management 5.6 Preferences tab This tab is available to a supervisor. It allows a supervisors to configure the AS273 Questor management software. Preferences tab in the AS 273 management software This tab is available to a supervisor. Hecan use this tab to define the functions available to operators of the AS 273 management software. With time delay - if this box is checked, an operator with Dispatcher authority will be allowed to generate one time opening combinations with normal time delay. With duress time delay - if this box is checked, an operator with Dispatcher authority will be allowed to generate one time opening combinations with a duress time delay. Immediate (no time delay) - if this box is checked, an operator with Dispatcher authority will be allowed to generate one time opening combinations which open the lock immediately, without time delay. Only allow opening with duress time delay... - with this box checked, if a user at the lock is under duress, an operator with Dispatcher authority can ONLY generate a one time opening combination with duress time delay. Language - this drop-down selection box is used to select the languageof AS 273 management software GUI. Page EN-26

27 5.7 Audit tab This tab is available to a supervisor. It allows a supervisors to audit the AS273 Questor management software. i Audit tab in the AS 273 management software This tab is available to supervisors. Supervisors can use this tab to audit all of the events and operations performed in AS 273 management software. The following audits are... - This selection field is used to specify the type of audit to be displayed. Under normal operation, all events in the AS 273 management software are written to an individual audit file. This file can be archived from time to time, and a new file can be created. Displaying an archived audit file In the Audit selection box, audit files will be displayed which: Are located in the AS 273 installation directory Have a file name that begins with audit273 End with.dat Includes a list of locks - if this box is checked, the audit will include a list of all locks that are registered in the software. Includes a list of users - if this box is checked, the audit will include a list of all lock users registered in the software. Includes a list of operators - if this box is checked, the audit will include a list of all operators (dispatchers and supervisors) registered in the software. Page EN-27

28 QUESTOR - Management 5.8 About tab About tab in the AS 273 management software The version of the installed management software is shown in this tab. Page EN-28

29 Page EN-29

30 QUESTOR INDEX C Creating unique codes EN-11 D Declaration of conformity EN-6 I Intended use EN-4 M Markings used in the text (used) EN-6 N Notes (description) EN-6 P Personalizing codes EN-11 Purpose EN-4 S Symbols (used) EN-6 Page EN-30 Subject to change without prior notice

31 QUESTOR Subject to change without prior notice Page EN-31

32 QUESTOR Kaba is a registered trademark of Kaba AG. This documentation may not be reproduced or otherwise exploited either digitally or photographically without written permission from Kaba AG. by. Document: KSW3s / en Edition: August 2010 Operating Instruction Subject to changes without notifice Page Z-32