ACTAtek Training Manual

Transcription

1 Version 1.9 Nov 8, 2006 Hectrix Limited

2 Revision History Revision 1.1 Date Description 2005/07/27 Initial Release Author Cheong Updated Ch 6.1.1, 6.1.2, 6.2.2, 7.3, 10, 11, 12.2, 13.2, /08/ , , , , , , Cheong /01/04 Updated 1, , , Cheong - Added the type of external bar code reader we support - Added the chapter Introduction for the menu on the ACTAtek LCD screen - Added the method for using both smartcard and FP - Updated the whole chapter of External Mifare Reader - Updated the new address in UK Office /10/18 - Updated the MS SQL connection in ACTAtek Agent Cheong - Added the reason for auto scan in FAQ - Removed External Bar Code reader question - Added the methods for Quick Access - Added the method for using FP instead of PIN for Administrator login - Added ACTAtek Server with supported FAM /12/29 - Added LogiPrint supported FAM Clement /01/18 - Added ACTAtek hanging in FAQ Clement Updated 10.1; 13; ; ; ; ; ; ; ; ; ; /02/24 Removed 14.11; 14.12; Clement - Added Agent behind router setup - Added Backup Secondary usage /04/24 - Added Locating firmware info Clement - Procedure for export report updated - Procedure for firmware upgrade updated - Updated the Barcode Reader model - Auto IN/OUT, Reject Repeated Event updated /11/08 - Separated the Agent and Server manual from here Roger / Cheong ii

3 Copyright 2004, 2005, 2006 Hectrix Limited, All rights reserved. No part of this document may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language, in any form or by any means, electronic, mechanical, magnetic, optical, chemical, manual or otherwise without the prior written permission of Hectrix Limited. ACTAtek is a registered trademark of Hectrix Limited All trademarks, registered trademarks, and service marks are the property of their respective owners. Offices: Asia and the Rest of the World: Unit , 9/F.,Stanhope House, King s Road, Hong Kong. Tel: (852) Fax: (852) [email protected] Americas: Newport Ave suite A, Tustin, CA 92780, USA Tel: (714) Fax: (714) [email protected] Europe: 351 Pershore Road, Edgbaston, Brimingham, B5 7RY United Kingdom Tel: +44 (0) Fax: +44 (0) [email protected] iii

4 Table of Contents Chapter 1.Introduction Purpose Document Conventions Intended Audience and Reading Suggestion Software References for this document...7 Chapter 2.Product Overview ACTAtek Model number Comparison between Fingerprint and Smart Card Models: Checklist Setup Requirements...10 Chapter 3.ACTAtek Structure and Connections Configuration of ACTAtek ACTAtekTM Internal Structure and Connections Connection Details: Details of some connection items...15 Chapter 4.Fingerprint Notes Introduction Technical Information Good Image vs Bad Image Fingerprint Enrollment & Authentication Fingerprint Enrollment:...19 Chapter 5.Introduction to the menu on the ACTAtek LCD screen Chapter 6.Network Connections Connecting Directly to a PC Using Crossover Network Cable Connecting ACTAtekTM to the Corporate LAN using Patch cable: Connecting Directly to a PC Using Crossover Network Cable Connecting Directly to a PC Using Local Area Network (LAN)...24 Chapter 7.Wi-Fi Connections Access point: Ethernet Adapter...29 Chapter 8.External Mifare Reader Installation of the external Mifare reader Configuration How to use...41 iv

5 Chapter 9.External Relay To install the device: Hardware configuration Testing Secure External Relay...43 Chapter 10.Door lock connections ACTAtek Cabling Door Strike Connections Fail-Safe Lock Fail-Secure Lock Description of Fail-Safe and Fail-Secure Lock: Door Strike Sensor...49 Chapter 11.CMOS Camera Module Introduction Specifications Features...51 Chapter 12.Formatter Introduction Requirements Change the ACTAtek to become a formatter Configure the formatter Start formatting card Reset terminal as ACTAtek Terminal...55 Chapter 13.Modem Connection Setting Windows Desktop to Accept connection from Modem Hardware Setting of ACTAtek Setting ACTAtek to make connection with the Modem Setting up the ACTAtek with the ACTAtek Agent Run the ACTAtek Agent Trouble shooting...71 Chapter 14.FAQ & Troubleshooting Fingerprint issues Connection issues Hardware issues Primary-Secondary Connection issues General issues...95 v

6 vi

7 Chapter 1. Introduction This sections explains the purpose and software references of the ACTAtek Purpose ACTAtek is an Access Control and Time Attendance product which allows users to access its record from any where, at any time and on any platform. The primary objectives of this document is to provide advance features of ACTAtek. The secondary objectives of this document is to help the user to troubleshoot the ACTAtek within the shortest time. So, after read through this training manual, user will become more familiar with the functions and features of ACTAtek Document Conventions Input typed in a bold Arial font, and output using Arial. Comments are added in italics. Command prompt and Source code looks like main() { printf( Hello World\n ); } 1.3. Intended Audience and Reading Suggestion This document is self-contained but assumes a basic knowledge of ACTAtek. Advanced customers can use this document to enhance their usage in ACTAtek, and resellers can use this document to enhance their customers needs Software References for this document ACTAtek firmware: (Aug 2006) ACTAtek Agent: (Jun 2006) ACTAtek Server: pre32 (Aug 2006) 7

8 Chapter 2. Product Overview 2.1. ACTAtek Model number Model Number ACTA-[Model]-[Option]-[Others] Description Embedded SSL-Web Server with PIN / Camera / Smartcard / Fingerprint / Sample up to 10,000 users Table 1.ACTAtek Model Number Legend Model 1k 3k 5k 10k (Standalone Smartcard or Embedded SSL-Web Embedded SSL-Web Embedded SSL-Web Embedded SSL-Web Meaning Server up to 1,000 users Server up to 3,000 users Server up to 5,000 users Server up to 10,000 users Pin Model only) Option P C S (M / L / Hp / EXBC) FP FS Meaning Pin Model Camera Model Smart Card Model (Mifare/ Legic / HID / Barcode) Fingerprint Model Fingerprint + Smartcard Model Meaning Others SAM Sample Unit Table 2.Legend EXAMPLE Model Number ACTA-1k-PC ACTA-3k-S-M ACTA-5k-S-LC ACTA-1k-FP-C ACTA-1k-FS-MC ACTA-1k-FS-LC-SAM ACTA-10k-S-LC Description Pin + Camera Model (up to 1,000 users) Smartcard Model (Mifare) (up to 3,000 users) Smartcard Model (Legic) + Camera (up to 5,000 users) Fingerprint Model + Camera (up to 1,000 users) Fingerprint + Smartcard Model (Mifare) + Camera (up to 1,000 users) Fingerprint + Smartcard Model (Legic) + Camera (up to 1,000 users) Sample unit Smartcard Model (Legic) + Camera (up to 10,000 users) Table 3.Example 8

9 2.2. Comparison between Fingerprint and Smart Card Models: Features Seven-Finger Enrollment Built-in Smart Card Reader Built-in Web and Database Fingerprint ONLY Smartcard ONLY Fingerprint + Smart Card Optional Optional Optional Secondary ) Static / Dynamic IP Address Assignment Support existing DHCP 32 MB 5,000 Users 10,000 eventlogs Apple Macintosh / 32 MB 10,000 Users 10,000 eventlogs Apple Macintosh / 32 MB 5,000 Users 10,000 eventlogs Apple Macintosh / Win 95/98/NT/XP Win 95/98/NT/XP Win 95/98/NT/XP Server Built-in Web Camera Exchange of Information Between Devices (Primary / Server Non- Volatile Memory Maximum Users Maximum eventlogs stored Computers Supported Database Interface Support Encryption Multilingual Support Programming API Reporting Product Weight / Gross Weight with power supply & packaging Replaceable Modules External Devices Support LCD Module Product Dimension Weatherproof Casing (except for contact card module) Expansion Netwrok Interface Unix Machines / Unix Machines / Unix Machines / Linux Machines / Linux Machines / Linux Machines / PDA / Smart Phone ODBC / JDBC SSL SOAP PDA / Smart Phone ODBC / JDBC SSL SOAP PDA / Smart Phone ODBC / JDBC SSL SOAP 650g/1.5kg 650g/1.5kg 650g/1.5kg CPU / Fingerprint / CPU / Fingerprint / CPU / Fingerprint / Contact & Contact & Contact & Contactless Contactless Contactless Smartcard / Keypad Dot Matrix 128 x x 110 x 72 (mm) Smartcard / Keypad Dot Matrix 128 x x 110 x 72 (mm) Smartcard / Keypad Dot Matrix 128 x x 110 x 72 (mm) Serial / RS-232 / Serial / RS-232 / RS- Serial / RS-232 / RS- RS BaseT Ethernet BaseT Ethernet BaseT Ethernet (Build-in) / Optional (Build-in) / Optional (Build-in) / Optional Wi-Fi / Modem / Wi-Fi / Modem / GSM Wi-Fi / Modem / GSM GSM / GPRS / GPRS / GPRS Table 4.Comparison between Fingerprint and Smartcard Models 9

10 2.3. Checklist Please check that your ACTAtekTM has come with the following, if anything is missing, contact us at ACTAtek Unit Instructions CD Quick Installation Guide Crossover Network Cable (Black) [for connection DIRECTLY to PC/Notebook] Straight Network Cable (White) [for connection to network (hub/switch)] A 12V DC Switching Power Supply (Input: VAC 50/60 Hz) 1 Power Cord [according to Country Specification] Setup Requirements Operating System (For access via Corporate Network) Windows 95/98/2000/NT/XP Linux Machines Unix Machine Apple Macintosh PDA Smart Phone Network Interface 10 BaseT Ethernet (built-in) RJ45 Cabling for Network Connectivity. Straight Network Cable (White cable, to connect to your corporate network via Hub/Switch) Crossover Network Cable (Black cable, to connect directly to your Computer) Power Requirements A 12V DC switching power supply (provided), please do not substitute our power supply from another one Each 12V power supply can only support ONE ACTAtek, failing to do so will void the warranty. 10

11 Chapter 3. ACTAtek Structure and Connections 3.1. Configuration of ACTAtek Illustration 1.Configuration of ACTAtek 11

12 3.2. ACTAtekTM Internal Structure and Connections WARNING: DO NOT TOUCH ANY COMPONENTS WHILE ATTACHING CABLES TO THE ACTAtekTM. Illustration 2.Internal Structure and Connections 12

13 Connection Details: COM1 to COM4 COM1, by default, is connected to the fingerprint module, if installed. Other- wise, it is open for use by other applications. COM2, by default, is connected to the Mifare Contactless Smart Card Read- er/writer, if installed. Otherwise, it is open for use by other applications. COM3 is shared with the RS485 port. COM4 is open for use by any other RS232 devices RS485 The RS485 serial port shares its port with COM3 of the ACTAtek. That means either one can be used at any given time. RS485 is enabled if JP9 and JP10 are installed. Typical devices connected to RS485 are External Relay and/or external Mi- fare Contactless Smart Card Reader/Writer Weigand output Weigand output is supported in ACTAtek. Users can select either 26-bit or 40-bit outputs. Smart card ID will be sent out in 26-bit or 40-bit Weigand formats, when au- thorized Security Sensor Used to protect ACTAtek in an event when someone is trying to remove or attack the unit. Alarm output will be triggered if ACTAtek is lifted up or removed from its in- stalled position RJ45 Used to connect a RJ45 cable to the network which enables ACTAtek to be reached by Ethernet Buzzer Used to create unique beeping sounds during authentication and other situa- tions. 13

14 USB A USB interface is present and reserved for future use V DC jack Power up the ACTAtek with shipped switching power supply. Make sure you have same rated power supply (12V DC, 27W) if the one pro- vided is not used Door Switches 1 Connect both ends of the external door switch to GND and DSW1 respec- tively. Door strike will be connected once the door switch is triggered Door Strike 2 / Door Bell Door Switch mode: Connect both ends of the external door switch to GND and DSW2 respec- tively. Door strike will be connected once the door switch is triggered Door Bell mode: Connect both ends of the door bell switch to GND and DSW2 respectively. Enable the door bell in Terminal Setup. Door bell will ring once the door bell button (Top right corner of the keypads) is pressed Door Sensors (GND DS1, GND DS2) System will alert user (LCD Display message, buzzer sounds) if each of the door sensors is closed for about 30 seconds. Alert stops when sensor is open Alarm (Alarm+ Alarm-) Connect the Alarm+ and Alarm- to the external alarm. Alarm relay will trigger whenever somebody is trying to remove the ACTAtekTM if the door sensor is activated. 14

15 Door Strikes (NC1 COM1 NO1) & (NC2 COM2 NO2) Opens a door. NC Normally connect, COM Common, NO Normally Open Connect an electrical relay to NO and COM as shown below Details of some connection items Illustration 3.Details of some connection items

16 Chapter 4. Fingerprint Notes 4.1. Introduction ACTAtek TM uses latest Optical Scanning technology with its own algorithms and matching cal- culations, a step above other sensors in the market. It must be emphasized that to get an accurate enrollment and quick authentication each time a fingerprint is presented, the fingerprint placement must be towards the center of the scanner. Placing your finger far from the center position of the sensor will increase the rejection rate. Finger Rotation should be kept to a minimum during enrollment and verification. When enrolling, place the finger on the sensor where the entire core can clearly be seen by the scanner. A good image is critical for the overall performance of the fingerprint scanner. Any deviation from a good image, either by placing the finger far away from the scanner, or by applying too much pressure or not locating it in the CENTER of the scanner, will cause the scanner s rejection rate to rise. Read below on how to get a good image for your enrollment/authentication Technical Information Features Image Resolution: False Rejection Rate (FRR): False Acceptance Rate (FAR): Allowable Fingerprint Rotation: Operation Temperature: Number of minutiae being taken: Matching Speed: Scanning Speed: Technical Specification 500DPI 0.01% % +/-15degree -25 to +65 Degrees Celsius 30 to 60 depending on user 0.05 second 1.50 second Table 5.Technical Information 16

17 4.3. Good Image vs Bad Image A good fingerprint image is one in which the core of the fingerprint is well-defined and easily recognizable. The core of a finger is defined as the point located within the inner most recurring ridge, it is normally located in the MIDDLE of the fingerprint. It is therefore critical when enrolling that you place the finger on the scanner where the entire core can clearly be seen. An example of a good & bad image is displayed as follows: Good Image: The whole fingerprint Bad Image: An image where the crackles & core can be seen clearly. displacement of the fingerprint core makes it unrecognizable. 17

18 4.4. Fingerprint Enrollment & Authentication In order to receive a successful enrollment and authentication, it is critical that the following should be noted carefully. Each successful enrollment will result in a successful authentication and save a lot of time in troubleshooting and erroneous readings. Fingerprint Core. Optical Fingerprint Scanner It is highly recommended for the fingerprint core to be big and clear for a successful enrollment of a clear and good image. Make sure the fingerprint image captured is of the core of the finger presented. A fingerprint core is a point located within the innermost recurring ridge of any given finger. Also, to obtain a higher success rate, enroll the same finger 3 times in a slightly adjusted angle, one to the center, one inclined slightly to the left and the third inclined slightly to the right. If you follow the following enrollment procedure, the success rate will increase dramatically. 18

19 4.5. Fingerprint Enrollment: Step 1: Place the center of any one finger directly above the sensor right in the center, as shown below: Step 2: Place the center of the same finger (enrolled in Step 1), slightly aligned to the left. Step 3: Place the center of the same finger, slightly aligned to the right. After each placement, wait for the message Template Stored on the LCD screen to appear, and then remove your finger and press Enter/Return to enroll the second or third finger(s). If you have any questions regarding the enrollment procedure, us at 19

20 Chapter 5. Introduction to the menu on the ACTAtek LCD screen There are 8 icons on the ACTAtek's LCD screen after you login as Administrator: Add User IP Setting Fingerprint DHCP (OFF) Smartcard IP Address Add User Gateway Copy to Smartcard DNS IP Move to Smartcard Copy to Terminal Delete Smartcard Password User Management Terminal Setting Activate User Primary IP Deactivate User FP Quality Capture FP HIGH (ON) NORMAL LOW No. of FP Sample NORMAL:3(ON) ACCURATE:5 PRECISE:7 Restricted IP (OFF) Unlock Door Reboot Automatch Reset Setting Reset Event Log Reset Database Factory Default Reset Web Port Date & Time Exit Adjust Date Adjust Time 20

21 Chapter 6. Network Connections 6.1. Connecting Directly to a PC Using Crossover Network Cable Connecting your ACTAtekTM directly to your computer can be done via the BLACK crossover cable which is included in the box the ACTAtekTM came with. The IP Configuration and all necessary modifications can then take place for web administration Connecting ACTAtekTM to the Corporate LAN using Patch cable: Connecting your ACTAtekTM to your Corporate LAN via a hub or switch can be done via a patch cable or a straight network cable, which is the white cable included with your ACTAtek. TM Directly connect the Patch cable to the port of the network hub in your corporate premises. 21

22 Troubleshooting: If the network is not working, there are a few points that can be checked to fix it: 1. Make sure the network cable is functional; sometimes a damaged cable may be the cause of all problems. To check if it is functional, make sure there are no loose ends and the jack is properly attached to the cable. Also, once plugged in, check that the light at the port blinks (either in orange or green). 2. Check that the IP Address Assignment matches the network settings of the corporate LAN or the PC being used. 3. Make sure no IP has clashed and that there are no two identical IP addresses in the network. 4. If all of these are fine, ask the network administrator why there is a problem or us at [email protected] for further assistance Connecting Directly to a PC Using Crossover Network Cable Connecting your ACTAtekTM directly to your computer can be done via the BLACK crossover cable provided in the box the ACTAtekTM came with. 1. Use the BLACK crossover network cable provided, with one end connected to the ACTAtekTM s jack, and the other end to your PC. 2. To check your PC s IP Address Settings, open the DOS Command prompt by press Start -> Run -> Type command and press OK. In the prompt, type ipconfig and press Enter 22

23 3. Following is an example. Note the IP Address displayed. 4. If there is no IP Address configured for your PC, follow the steps below to modify your PC s IP Address Settings (below is a case using Windows XP). Go to Start -> My Network Places -> View Network Connections -> Local Area Connection. 5. Right click on Local Area Connection and click Properties. 6. Under the General Tab, highlight Internet Protocol (TCP/IP) and click Properties. 7. Input an IP Address different from the ACTAtekTM (Default IP: ), for instance. IP Address: Subnet Mask: The diagram for IP Address assignment is shown on next page. 23

24 8. Click OK to confirm the changes, and OK again to set it for the computer. 9. Lastly, check the IP Address of your ACTAtekTM by clicking the Menu button, and enter the ID, A999, press Enter/Return. Enter the password (Default is 1), and press Enter/Return. Go to IP Settings, and press Enter/Return. Select IP Address option, which will display the Current IP Address of your ACTAtekTM (Default IP is ). NOTE: ENSURE THE ACTAtek AND YOUR PC DO NOT USE THE SAME IP ADDRESS. 10.Test the connection Connecting Directly to a PC Using Local Area Network (LAN) Most of the time, corporations already have in place a local area network connection, whereby all network cables come from a central hub or switch and are distributed across the company for internetworking and communication. 24

25 ACTAtek is one such device that is Internet enabled and can be connected via a corporate network for other users to configure and monitor it with the computers in the network in place. To connect the ACTAtekTM, use the white cable provided, or any other straight network cable to connect from a hub or switch to the ACTAtekTM s network port. The following steps demonstrate how to configure the ACTAtekTM to your corporate network. 1. Find out the IP address of the network. To do so, go to a PC in the network presently, press Start -> Run -> Type command and press OK. In the Command prompt, type ipconfig and press Enter 2. Note the IP Address displayed, following is an example. 3. Power on the ACTAtekTM unit (refer to Section 2 on P.5), Press the Menu button, key in the ID A999 and press Enter/Return, the default password is 1 and press Enter/Return. 4. Go to IP Settings using the Previous/Next buttons and press Enter/Return. 5. Once IP Address is highlighted, press Enter/Return. 6. Input the matching IP Address (e.g ), and make sure it does not collide with any IP Address in the current network and press Enter/Return. 7. Use the Previous/Next buttons to select Subnet Mask, and press Enter/Return. 8. Input the matching Subnet Mask (e.g ), and press Enter/Return. 9. Test the connection. 25

26 Testing the Connection Once the configuration is complete, it is recommended that the connection be tested. 1. At the PC, Click Start -> Run -> Type command and press OK. 2. Type Ping (The IP Address should reflect that of your ACTAtekTM unit) 3. If successful the following should be displayed: If unsuccessful, either Destination Host Unreachable or Request Timed Out will be displayed, please follow the above steps carefully and test the connection. If problems persist, contact us at for assistance. 4. Step 4: Once the connection is successfully established, either by using the direct connection or connecting via the corporate LAN, open an Internet browser and input at the address bar and hit Enter. 5. Step 5 : The system is now ready for web administration. 26

27 Chapter 7. Wi-Fi Connections Access point: Hardware requirements: 1. One Buffalo WZR-RS-G54 Relative features of Buffalo WZR-RS-G54: g Wireless 125* High-Speed Mode Technology Easy VPN Remote access of your ACTAteks Auto channel support will instantly select the best available wireless network- ing channel Strong wireless security with WPA, 128/64-bit WEP and MAC Address Re- striction Repeater / Bridge Mode (WDS) boosts performance and extends range Connect to an external 2.4 GHz antenna to improve wireless signal Built-in 10/100 4-port Auto-Sensing Switch for wired connections 2. One PC for Setup 3. One ACTAtek Software configuration 1. Login to the Buffalo WZR-RS-G54: IP address: (Default) User Name: root (Default) Password: no password (Default) 27

28 2. Click Advanced to do the configuration Wireless 1. The SSID field must be set to maintain the security of the wireless network, for instance, "hectrix-buffalo" 2. The wireless channel can optionally be set or you can use "Auto", you can set it to "Channel 2" Wireless LAN Security The WEP and WPA data encryption method can optionally be set accordingly Wireless MAC Filtering 1. It is strongly advised to enable the MAC address filter in order to protect the wireless LAN. 2. To do so, please register the MAC address, please register the MAC address of the Ethernet Adapter, for instance ASUS WL330g - or any adapter that you're using. 28

29 Wireless Bridging 1. If one access point is not enough to cover the whole network, you can either add an external antenna for this access point or add another buffalo access point. 2. If you choose to add another access point, please make sure of the following: The Wireless Channel should be the same The Frame Bursting Mode should be disabled The SSID can be different The Data Encryption should be the same, or no encryption for both access point The Wireless Bridging (WDS) should be enabled. The Wireless MAC Address of WDS Partner should be keyed in manually Ethernet Adapter Hardware requirements 1. One ASUS WL330g Some features of the the ASUS WL330g include: g 54Mbps Wireless Technology World's smallest Access Point Auto channel support will instantly select the best available wireless network- ing channel Strong wireless security with WPA, 128/64-bit WEP and MAC Address Re- striction DC power can be drawn from wall socket or USB bus power. 2. One PC for Setup 3. One ACTAtek 29

30 ASUS WL330g Setup with Windows XP (Part 1) Taking Windows XP as an example on how to do this, please follow the below steps. 1. Switch the ASUS WL330g to Ethernet Adaptor mode 2. Connect the ASUS WL330g to your computer 3. Run Setup.exe from the ASUS WL330g installation CD provided 30

31 4. Run the "Wireless Setting Utility" 5. Click "Configure" 31

32 6. Input User ( admin ) and Password ( admin ) 7. Select the available network which the ASUS WL330g can detect 8. Click hectrix-buffalo (Please select the available newtork in your local network) 32

33 9. Click OK. hectrix-buffalo will show in the Preferred Networks (Profiles) 10.Click Finish 33

34 ASUS WL330g Setup with Windows XP (Part 2) 1. Use a web browser, such as IE or Firefox, to type in the IP Address Login Name: admin Password: admin 2. Uncheck the MAC Cloning option 3. Confirm that the SSID, Channel and encryption are set identical to the access point setting. 4. Click Apply Application of ASUS WL330g with ACTAteks / iads 1. Unplug the RJ45 cable from the ASUS WL330g from your PC and plug one end to the ACTAtek. 2. Reconnect your PC to the internet. You should now be able to communicate with your ACTAtek via your PC using wireless LAN. 3. Plug the internet cable back to your PC, you can now communicate your ACTAteks / iads with your PC using wireless LAN 34

35 Chapter 8. External Mifare Reader 8.1. Installation of the external Mifare reader 1. Unscrew the main board from the case. 2. Connect the flat cable between the 2x5 box header (JP7) COM4 of the main board Connecting via RS485 Pin assignment: Signal Color GND Black & Brown +12VDC Red B White A Green NC Blue COM Orange NO Yellow 1. Connect the other end of the flat cable to the RS232 to RS485 converter like the picture shown above. 2. Connect the Green wire to the terminal with the D+/A label and the White wire to the terminal with the D-/B label. 35

36 Illustration 4.External Reader Connection Via RS232 to RS485 Diagram Connecting via RS232 Pin assignment: Signal Color GND Black & Brown +12VDC Red TX White RX Green NC Blue COM Orange NO Yellow 36

37 1. Connect a White wire to pin 2 of the DB9 connector, a Green wire to pin 3 of the DB9 connector and Brown wire to the pin 5 of the DB9 connector. 2. Connect the other end of the flat cable to the female type DB9 connector like the picture shown below. Illustration 5.External Reader Connection Via RS232 Diagram 37

38 Assembling the parts 1. Connect the power cables to the reader as shown in the picture. 2. Power supply requirement: 9-12VDC/500mA. Switching mode power supply is recommended. 3. Connect the signal wires to the reader as shown in the picture. 4. Remove the front shield of the enclosure and fix the 2 wall mounting screws with the given L-shaped screw driver. 5. Cover the front shield back after the reader is fixed on wall. 38

39 Configuration Hardware Configuration 1. Configure the dip switch as shown in the picture below. The address of this external mifare reader should be Device address is measured in binary mode. That is device with address 2 will have the following dip switch setting, ON OFF ON ON ON ON ON ON (0x ). 3. Current firmware can only support single external reader. However, multi-reader support will be available soon. 39

40 Software Configuration ( Available from firmware version 1.11 onwards only) 1. Go to the web page of ACTAtek and enter the sub menu External Devices under the Terminal Settings. 2. Enter 1 into the Reader Address box. The Trigger and Ignore Quick Access fields are optional to change, click Add. 40

41 3. The external reader with address 1 is added How to use 1. Register a smart card user to ACTAtek. (Details of how to register a smart card user, please refer to the user manual) 2. Check the smart card which was registered to ACTAtek with the external Mifare reader. Red LED is ON if the smart card is NOT registered to ACTAtek before. Green LED is ON if the smart card is registered to ACTAtek before. 41

42 Chapter 9. External Relay Hectrix will provide an optional external relay for security of the door lock and strike, for installation within office premises. This external relay will control the door strike once properly installed with the ACTAtekTM unit To install the device: 1. Connect the cable provided to the RS485 connector (JP1) on ACTAtekTM. 2. Connect the other end of the given cable to the GREEN terminal blocks of the Secure External Relay. 3. Connect the power cables to the RED Terminal blocks of the Secure External Relay. 42

43 9.2. Hardware configuration Configure the dip switch as shown in the picture below. The address of this secure external relay should be Testing Secure External Relay 1. Register a smart card user to ACTAtek. (Details of how to register a smart card user, please refer to the user manual) 2. No response to the Secure External Relay if the smart card is NOT registered to ACTAtek before. 3. Green LED is ON and the Relay is closed if the smart card has been previously registered on the ACTAtek. 43

44 Illustration 6.Complete External Relay Connection 44

45 Chapter 10. Door lock connections ACTAtek Cabling The following diagram contains the ACTAtek connected with door locks with Wi-Fi and POE connections. Illustration 7.ACTAtek Cabling Diagram 45

46 10.2. Door Strike Connections Illustration 8. Simpe Connection Diagram for Door Strike Illustration 9.1N4004N Diode 46

47 10.3. Fail-Safe Lock Illustration 10.Connection Diagram for Fail-Safe Lock Illustration 11. Two ACTAteks Connecting To One Fail-Safe Lock 47

48 10.4. Fail-Secure Lock Illustration 12.Connection Diagram for Fail-Secure Lock Illustration 13. Two ACTAteks Connecting To One Fail-Secure Lock 48

49 10.5. Description of Fail-Safe and Fail-Secure Lock: If the ACTAtek is connected to a fail-safe lock, the door lock will be released when/if there is no electricity automatically. On the other hand, if the ACTAtek is connected to a fail-secure lock, the door will remain locked when/if there's no electricity. If the ACTAtek is used as an Access Control System, please follow the instructions below: 1. The door strike rating should be 12VDC/1A. If the operating current is above the one specified, it is highly advised to use an external relay. Please look at the Chapter External Relay for more information on External relays. 2. Use separate power supply for all devices, including ACTAtek, External Card Readers and the Relay. DO NOT SHARE POWER SUPPLY WITH THE DOOR STRIKE. 3. An additional Diode is required to avoid Back EMF from the Door Strike, which could damage the ACTAtek. 4. To operate a non-polar Door Strike, you should assign the Positive & Negative terminals for the strike according to the polarity of Diode. The terminal that connects to Negative End of Diode is Negative, the other one is Positive. 5. Diode Selection: a) Use P/N:1N4004, if the Door Strike rates at 12VDC/1A b) Use P/N:6A1, if the Door Strike operating current is within 1-6A. *Failing to comply with the above instructions may cause irreversible damage to the ACTAtek Door Strike Sensor Connect the sensor wires by loosening the 2 screws on the sensor swith and slide the exposed ends of the wires under the terminals then tighten the screws. Internal buzzer will sound if the door is left open for more than 30 seconds. The unit will then display an alert message. 49

50 Chapter 11. CMOS Camera Module Introduction ACTAtek provides built-in CMOS camera feature to avoid buddy punching problems & enhance security issues. A snapshot will be taken for each successful or rejected authentication (Fingerprint, smart card or password). The most recent 100 photos (resolution: QVGA. 320 x 240) will be stored on the ACTAtek database Specifications VGA 640 x 480 sensor ¼ double lens Camera viewing angle: Horizontal viewing angle is about 50 degrees. Vertical viewing angle is about 40 degree 50

51 11.3. Features Automatic exposure control Automatic white balance Automatic flicker cancellation 2x electronic zoom (default is no zoom) Auto Brightness, contrast, saturation Photo sizes selection, 640 x 480, 320x240, 160x120 (default is 320x240). 51

52 Chapter 12. Formatter Introduction This ACTAtek formatter software is to help your original company smartcards to be readable by ACTAtek Requirements 1. AN ACTAtek with build-in smartcard reader. (Eg ACTA-1k-S-M) 2. A software formatter patch Change the ACTAtek to become a formatter 1. If you switch from ACTAtek terminal to formatter, please backup terminal system data. Login the ACTAtek via web browser From menu, select -> 'Backup System Backup' Save the system file 2. Firmware Upgrade to formatter Login the ACTAtek via web browser From menu, select -> 'Firmware upgrade' Click <Browse> for the formatter firmware e.g. acatek_1_formatter.bin Then click <Upload>. After upload successful, click <Upgrade> to start up- grade. After upgrade successful, the terminal will reboot automatically. If the terminal does not reboot automatically, please manually reboot the terminal. 52

53 12.4. Configure the formatter Formatter Status This part will show you the Total Credit and Current Credit for the formatter. If you want to increase the number of Total Credit, please follow the steps below: 1. Login the ACTAtek via web browser 2. From menu select -> 'Formatter Setup'. 3. Under 'Formatter Status', browse for the credit file with format credit_serial#.bin (eg. for terminal 00111DA00002 the credit file is credit_00111da00002.bin ) 4. Click <upload> Configure the Card Key This part is to format the original smartcard's key to the Hectrix's key, that is to make the original smartcard to be readable by ACTAtek. You can take the reference of the steps below: 1. Login as Administrator through Web browser. 2. From menu select -> 'Formatter Setup' 3. Under Configure the Card Key, select the appropriate options then click <submit> (eg. format foreign card to use in ACTAtek terminal: Field old key, select -> 'Custom' and enter your 12 characters key. Field new key, select -> 'Hectrix' 53

54 12.5. Start formatting card 1. Login as Administrator through Web browser. 2. From menu select -> 'Formatter Setup'. 3. Configure the Card Key 4. Click <submit> 5. In the screen 'Smart Card Formatter', message [Key Modified Successful] will be displayed. 6. Click <Start> to start formatting card at terminal. 7. To begin format smart card, just put your smart card on the terminal smart card reader area ie. the keypad area. 8. Don't remove your card until you receive Success message. The LCD will display Writing, Verifying and finally Success message. After receiving Success message, you can continue formatting another card. The credit will be deduct automatically. 9. From web Click <stop> to end 'Format Smart Card'. 10.The terminal will jump back to 'Configure the Card Key' screen. 54

55 12.6. Reset terminal as ACTAtek Terminal 1. Login as Administrator through Web browser. 2. From menu, select -> 'Firmware upgrade' 3. Click <Browse> for ACTAtek firmware e.g. Acatek_1_28.2.bin 4. Then click <Upload>. After upload successful click <Upgrade> to start upgrade. After upgrade successful, the terminal will reboot automatically. If the terminal does not reboot automatically, please manually reboot the terminal. 5. After reboot, the terminal should be able to authenticate the newly formatted card. 55

56 Chapter 13. Modem Connection This modem is used to setup a link between your PC and the ACTAtek through a modem. This way, you can get the real time event log by using the modem settings in the connection profile. Illustration 14. ACTAtek-Modem Connection Diagram 56

57 13.1. Setting Windows Desktop to Accept connection from Modem 1. Launch the Connection Wizard Go to the Network Connections, Click Create a new connection 2. Connection Wizard To Continue, Click Next 57

58 Select the Network Connection Type Select Set up an advanced connection, and click Next 3. Advanced Connection Options Select Accept incoming connections, and click Next 58

59 4. Devices for Incoming Connections Select the device for the incoming connections. Select the desired modem 5. Incoming Virtual Private Network(VPN) Connection Leave the setting unchanged and click Next 59

60 6. User Permissions Create a user account for the incoming connection, Click Add Create a Use Enter the user information, remember the user name should not have space included Prepare a password for the user. In this example, the user name is user_a, and password is 1234 Click OK to confirm the creation 60

61 8. Confirm with the User Created Confirm with the user created, ensure the check box was checked (default) Repeat from step 7-8 if more than one user is needed. 9. Networking Software Setting Select Internet Protocol(TCP/IP) and click Properties 61

62 10.Incoming TCP/IP Properties Left other checkbox to default Check the box at Network access - Allow callers to access my local area network Specify the TCP/IP addresses By this sample setting ( From to ), the Desktop PC would take the IP of , while the incoming connection (ACTAtek) would take the IP of Uncheck Allow calling computer to specify its own IP address 11.Complete Connection Wizard Click Finish to complete the setup 62

63 12.Confirm the New Connection has been created. A new icon with the name "Incoming Connection" should be displayed. 63

64 13.2. Hardware Setting of ACTAtek 1. Unscrew the main board from the case. 2. Connect the flat cable to the 2x5 box header (JP7) COM4 of the main board. 3. In the modem side: Connect the modem with power Connect the serial cable to the modem Connect the phone line to the modem 64

65 13.3. Setting ACTAtek to make connection with the Modem 1. Enter the details in the Connection Profile Settings as shown below: Enter the details in Connection Profile Setting Connection Name Name of the Profile Period The time interval the unit takes to connect the remote server( in minutes) Server IP IP Address of the remote dial-up server (e.g ) Connection Type Select PPP for Modem Phone Number Phone number for the dial-up modem (Ensure phone line is physically connected to the PC) ID User ID for login to the remote server's login ID (e.g. user_a) Password Password for login to the remote server's login ID ( e.g. 1234) 65

66 2. Confirm the Connection Profile Creation After creating the profile, it should be listed under "Existing Connection Pro- file" 66

67 13.4. Setting up the ACTAtek with the ACTAtek Agent In the Web browser side 1. Go under the Terminal List At the Server List option, Click Add 2. Add a Server Agent Under the Server list, Click "Add", and enter the Details as shown below: IP Address IP Address of the remote server (eg ) Port Port of the Agent used (default:1668) Agent Version 1.2 (default) Magic Used to communicate with the Agent (eg ), blank to use default Send all logs when Enabled registered Profile Select the Connection profile that created before 67

68 3. Confirm that the Agent has been successfully created After clicking "Add", a new server entry should be displayed under the Server List. 68

69 In the ACTAtek Agent side ACTAtek Agent Configurator: Click Start --> Programs --> Hectrix --> ACTAtekAgent --> Configurator to begin the "configuration" Agent Info If Auto Detected is selected, the Agent will automatically try to detect the ACTAtek in your network. The default Agent Port is 1668 The Agent Magic is the encryption code of Agent. You should enter the same Magic as the Server List. So please enter 1234 in this example. Poll Interval should be set to > 60 seconds 69

70 To connect the Agent with an ODBC Database Please lookup the ACTAtek Agent manual for the setting up of ODBC. Database Driver: Generic ODBC Database Name: actatek (default, and set it in the above steps) Database Username and Password: We haven't set it. So, leave it blank Connection Pool Size: 5 (default) Create Table SQL: SQL command, 5 fields default Target Table Name, Map Timestamp to Field, Map UserID to Field, Map Event to Field, Map TerminalSN to Field, Map Photo (JPEG Binary) to Field: Please use the same names in the Create Table SQL command above 70

71 ACTAteks Please leave it blank in order to use modem for connection After completing the configuration setting, click <save>, the following screen will appear Run the ACTAtek Agent Click Start --> Programs --> Hectrix --> ACTAtekAgent --> ACTAtekAgent 1.29 and begin the program. You will see the following screens. Eventlog will be synchronized to your default database via modem after started the ACTAtek Agent Trouble shooting If you are connecting Agent in the first time, you are suggested to run the agent in Debug mode. To do so, open MS-DOS command prompt, and type agent -d 3 under the Agent's installation path. If there are no error debug message, Agent will work in the current setting. 71

72 Chapter 14. FAQ & Troubleshooting This chapter will show the most common Frequently Asked Questions (FAQ). If the FAQ here cannot solve your problems, please your inquiry to If you planned to us, please attach the following information in order to provide the best solutions: 1. The Terminal Status of the ACTAtek. It is the first page when you login the ACTAtek using web browser. 2. The QA page of the ACTAtek. The link for the QA page is: Address>/cgi-bin/qa.cgi 3. The problem you are facing with ACTAtek. 4. The actions did before this problem happening Usually, the ACTAtek will be fine after reboot. 72

73 FAQ list Chapter 14.FAQ & Troubleshooting Fingerprint issues Fingerprint Enrollment / Authentication Issues Why do I always get a "Bad Quality" message during enrollment or authentication? Why the successful rate for fingerprint verification is low? Why is the automatch limited to 150 users? The finger print module scans erratically with nothing on the surface? Connection issues Can we use our own software to communicate with ACTAtek? If so, what do you offer us as basis: DLL, ActiveX or SDK? How do I connect two ACTAtek units in different locations with DSL / Internet connection? How do I connect two ACTAtek units in different locations with modem (GSM modem)? Why doesn't the ACTAtek connect with my PC? Hardware issues Why the ACTAtek cannot keep the date & time after the ACTAtek is restarted? What is the rating of the internal relay? How do I handle the back EMF of the door strike? Where is the event log stored? How can I retrieve it? How to protect the ACTAtek with ESD issues? What is the material for the Optical Sensor and casing? How to connect to an IP Camera? Which kind of door locks do we support? How to setup the door bell through the ACTAtek? How to prevent EMI? What is the maximum distance of External Mifare Reader we guarantee? Which type of HID prox card do we support? Which type of external bar code reader do we support? What does ACTAtek support? Why ACTAtek keeps hanging? Primary-Secondary Connection issues Primary / Secondary Synchronization How do I connect 2 ACTAtek units with different FAM versions, i.e. FAM 3.xx 73

74 and 4.xx? When I make Primary - Secondary combination, will the existing Users on Secondary lost? What is error code (-1) and (-2)? How do we know whether the ACTAteks that are connected have any network error? Enabling Auto IN/OUT slows down the ACTAteks? How do I use a Backup Secondary unit? Using Reject Repeated Event General issues I get a message of Unauthorized and Access Denied Why does it take so long to do a DB upgrade? How do I upgrade the firmware on the ACTAtek unit? How do you use the Duress Code, SMTP options? What is the procedure to export Chinese characters report in MS Excel? What is the procedure to export Arabic characters report in MS Excel? How do Access Groups work? How to help us to translate the languages? How to configure the SNTP? How to login by using both smartcard & fingerprint? Is there other login options for the Super Administrator (A999) to access the Terminal Menu? When I click on a link, I get Session Expire: Occupied by a new admin login on the web interface? I cannot login using smartcard after a firmware upgrade to ACTAtek? Does ACTAtek Server work with FAM 3.x? Which version of ACTAtek works with LogiPrint? What are the authentication options for ACTAtek? How do I know which firmware is the ACTAtek running?

75 14.1. Fingerprint issues Fingerprint Enrollment / Authentication Issues If there are users that have problems enrolling their fingerprints or issues with authentication, please do make sure of the following: 1. Is the user s fingerprint quality difficult to read? You can check so via the web interface s fingerprint capture utility. If the quality is not too clear, please lower the user s security level via the Modify personal details option on the web interface. 2. Are there too many users using Automatch? Automatch may make it difficult for users to get authenticated since there could be too many users enrolled in the system. Try using ID + Fingerprint, and see if that improves the result. 3. Read the fingerprint notes on the manual and quick install guide that came with the ACTAtek for further details and information on better enrollment and authentication procedures. 4. Also, with the new FAM, fingerprint firmware version, a new feature has been added whereby you can improve the recognition with the smart sampling selecting from 3, 5 or 7 fingerprint images. The older version could only support getting 3 images for authentication. Features (For Fingerprint models) 1,000 Users 3,000 Users 5,000 Users 3, 5 or 7 3 or 5 templates 3 templates only Maximum number of fingerprint templates stored templates Why do I always get a "Bad Quality" message during enrollment or authentication? If users have exceptionally dry or chapped fingers, and the ACTAtek fingerprint scanner cannot accurately get a reading, it will display the "Bad Quality" message. It is advised to use moisturizer or rub your finger against your temple or nose to moisturize the fingers before putting it on the scanner for better image capture. 75

76 Why the successful rate for fingerprint verification is low? There are something you need to pay more attention about the FP quality level: If you find it difficult to verify their fingers, there are few steps you can do. 1. In the ACTAtek terminal Keypad --> Use Admin login--> Terminal Setting --> FP Quality --> Set to "High" 2. Register Users with 7 FP templates of the SAME finger Please do not register more than 3 different fingers using 7 templates. When you are asking the user to register, you can try to ask the user to put his FP in different altitude. But, please make sure that the "circle center" of the FP must me on the sensor of ACTAtek. 3. In the Web page --> Terminal Setup --> Set "Security Level (for Automatch)" to "Low" 4. In the Web page --> Click to a specific user --> Set "Fingerprint Security Level (for ID Match)" to "Low" The above flow can let the ACTAtek take a good quality image when registration. However, in the verification stage, a normal or low quality image will be taken (Higher successful rate) Actually, not 100% of people can get a good fingerprint for the reader to read. You can take the reference of that user's fingerprint by: In the ACTAtek terminal --> Admin Login --> User Management --> Capture FP In the PC --> In the web browser --> click "Capture Fingerprint" You will see that user's fingerprint image. If you find that his fingerprint is really not good, then it is the real case for him to use password instead. 76

77 Why is the automatch limited to 150 users? The main reason for this limitation is the processing speed and to keep the FRR low on the ACTAtek unit. The more Automatch user, the slower authentication process The finger print module scans erratically with nothing on the surface? A possible reason to this would be the surface is dirty and require cleaning. Check and see if there is any residue left on the finger print lens. Sometimes a dirty finger print may result in such behavior. 77

78 14.2. Connection issues Can we use our own software to communicate with ACTAtek? If so, what do you offer us as basis: DLL, ActiveX or SDK? Yes, we provide the API (SOAP based) with sample programs (with source code) to guide you through the development and communication process. Please kindly download the latest SOAP API from: How do I connect two ACTAtek units in different locations with DSL / Internet connection? You need to make sure that the main office has static IP and VPN Support. After that, setup the branch office as a VPN client so that the ACTAtek units at both locations can view one another in the same subnet. It is better to use a router as a bridge to connect between the Internet and ACTAtek, so that the router can filter out the noise and is suitable for different ISPs. ACTAtek can be used directly with the Internet if no login is needed. That is, ACTAtek does not support PPPoE or broadband / DSL that needs login authentication. All you need to do is forward the web server port (80 for http and 443 for https or any that you have assigned if it's not those 2) of the router to the ACTAtek. Also, you can connect the ACTAtek to the Internet directly first to see if it works. Once completed, the IP, Subnet, Gateway need to be set according to the info provided by the ISP. 78

79 How do I connect two ACTAtek units in different locations with modem (GSM modem)? There are 2 methods to connect the HQ computer to the remote site by modem. 1. Use traditional modem: This solution is economy in price (about USD50). You need to connect each remote site with a traditional modem. Once connected in this configuration, HQ's PC can get the eventlog of each remote site. 2. Use LAN modem: The LAN modem cost about USD each. This solution can let the Headquarter's PC dial up to the remote site, and do everything the same as you are in the remote site using the Headquarter's PC. 79

80 Why doesn't the ACTAtek connect with my PC? If you are using a hub, please check if the straight RJ45 cable is connected to a regular port and not an uplink port. Also, find out the IP address of the ACTAtek unit (you can do so by pressing the Enter button 6 times). To make sure the network cable is properly plugged in, do check the LED light in the ACTAtek's network port, as well as the hub/switch's network port. Try to ping the ACTAtek using the MS DOS command prompt or another computer in your network and make sure your network connection is working. Check the firewall settings and make sure it is set to where it doesn't affect the connection to the ACTAtek. If it still does not work, please try the following: 1. Reset the unit to "Factory Default", then reboot the unit, assign the ACTAtek IP to be Change your PC's IP to , Subnet Mask: , then reboot your PC if necessary. 3. Use the crossover RJ45 cable (black) provided and connect your PC with the ACTAtek unit directly. 4. Go to the MS-DOS command prompt, and type " PING , and press Enter. 5. If the message displayed is "reply from..." it means the unit has no network problems, please check your network connections when you connect it through a hub/switch. 80

81 14.3. Hardware issues Why the ACTAtek cannot keep the date & time after the ACTAtek is restarted? Problems: The unit can keep the date & time if the RTC works with the back up battery. If the date appears to be 1970, it means the RTC fails to keep the date and time as the backup battery supplies the wrong voltage to the RTC. Solutions: Solder a diode (spec.smd 4148) in between the positive pole of the battery holder and a wire, please see pictures diode_a.jpg & diode_b.jpg. If a diode was already there (maybe covered by a black insulator), add a 2.2M resistor (SMD 0805) in the position showed in photos res_2m2.jpg & res_2m2a.jpg. Please aware of shorting the circuit around when soldering. Drawing 1. diode_a.jpg Drawing 2. diode_b.jpg Drawing 3. res_2m2.jpg Drawing 4. res_2m2a.jpg 81

82 What is the rating of the internal relay? Item Specification Contact Arrangement SPDT (1FORMC) Contact Material Silver alloy Contact Resistance 100mΩ Max. (Measured at 1A 6VDC) Contact Rating (Resistive Load) 1A 12V DC Switching Voltage DC 60V Max. Switching Current 1A Max. Switching Capacity 62.5VA / 30W Operate Time (Initial) 5ms Max. Release Time (Initial) 5ms Max. Bounce Time 5ms Max. Insulation Resistance 1000mΩ Max. (500V DC) Dielectric Strength 400VAC (50Hz/min.) between open contacts 1000VAC (50Hz/min.) between coil and contact Shock Resistance 100ms2 Vibration 3.3mm Double amplitude, 10-55Hz Ambient Temperature -30 C C Humidity 35% - 85% RH Operating Life Mechanical: 5 x 106 (36000 ops/hr) Electrical: 1 x 105 (1800 ops/hr) 82

83 How do I handle the back EMF of the door strike? Please add a diode (1N4004) in parallel with the door strike. Details of the door strike connection, please refer to the separated documents, which you can download from the following link: Under the tab Support --> ACTAtek --> ACTAtek Door Strike Connection Few Points to note: 1. Is the door strike in question using 12V DC and less than 1 amp? The door strike should be 12V DC and using less than 1 amp current. Please make sure and use the correct lock. 2. Is the power supply shared between the door strike and the ACTAtek unit? If so, please stop sharing it. The door strike and ACTAtek should be using two different power supplies and sharing it could cause the unit to malfunction. 3. Are any ACTAtek units connected sharing the power supply? Please make sure each ACTAtek uses a separate power supply for its function. If not, and this causes the unit to malfunction, the unit will be void of warranty. 83

84 Where is the event log stored? How can I retrieve it? The most recent 10k logs are permanently stored on the ACTAtek device, A flash memory storage called Disk-On-Chip (with fail-safe capability) will store all of these logs. Once the ACTAtek is online again, you can view the log through the web interface or connect it with the ACTAtek Agent/ Server. Both of which will store the log on your PC directly How to protect the ACTAtek with ESD issues? Basically, the ESD (usually up to several kv, some more than 10kV) can create a very large current flow through the electronic components inside ACTAtek (some even may be burnt owing to this high ESD attack). As with the EMI and EMF, they're more or less the same thing, like most of the electronic devices may have draw back from other RF generated sources. For example, during the take-off or landing of a plane, people must switch off the mobile phone. Like other electronic products, ACTAtek are operated with a 200MHz clock and other crystals (20MHz-LAN processor, 3.68MHz-UART processor, 13.56MHz-Mifare reader). Strong RF source from surroundings will affect the performance of ACTAtek unless the outer sources are CE & FCC approved. There are 2 approaches that can protect against the ESD spikes - Mechanical and Electrical. 1. Mechanical Please try to shield the RS485 cable and the door strike cable. Connect the drain to the Earth, if available, so that ESD spike can be discharged. Make sure the power source is clean (add line filter in between AC plug and our switching power supply) Make sure the length of the 12VDC cable is not too long. don't try to cut and extend the ca- ble. Shield all cables (relay to door strike) and connect the drain to Earth. 2. Electrical Connect a Zener diode (eg, 1N4148) across the the door strike, ie. in parallel with your (1N4004, already installed), such that ESD current will flow through this diode (both forward bias and breakdown) instead of going into the ACTAtek. (basically gives a loop back path so that ESD won't flow into the ACTAtek). 84

85 What is the material for the Optical Sensor and casing? The optical scanner that is used in the ACTAtek is a glass prism. It is possible to be scratched by sharp metal tools. Please DO NOT test this as it may break the glass. However, the optical scanner has certain advantages over the traditional capacitive sensor, such as, difficult to be damaged by ESD, and not easy to be scratched by fingertips as the thickness of the glass prism is 15 mm. Our case is IP65 approved (dust and water proof) and the keys and enclosure of the ACTAtek are made of ABS (Acrylonitrile Butadiene Styrene) plastic, which is a very hard plastic that is tough to break or damage. However, the paint on the enclosure can be scratched off by sharp tools How to connect to an IP Camera? First, you need to obtain the IP Address of the IP camera. To do this, run the IPSearcher.exe (please [email protected] for a copy of this software). IPSearcher.exe helps you identify the IP Address of your IP Camera. Once you have found the information, input the information in the actatek web interface under "Network Camera setup" under Terminal setup. Please also verify that active scripting is enabled in IE for correct display of the stream. To enable Active Scripting: Open Internet Explorer -> Tools -> Internet Options -> Security -> Custom Level -> In settings box, you can find Scripting label and enable active scripting. To enable showing pictures: Open Internet Explorer -> Tools -> Internet Options -> Advanced -> Multimedia -> Show Pictures Possible causes for failure camera connection: Network settings. Since the ACTAtek, by default, uses port 80 to access the IP Camera. Ensure the IP Camera is accessible from port 80 within the network. IP Camera password protected. If the IP Camera require password to view the capturing, disable the password protection (Refer to the IP Camera manual). 85

86 Which kind of door locks do we support? The Electrical Lock should be within 12 V DC (1A or less). However, for an AC type of lock could cause a problem. The reason for this is BACK EMF from the Lock, usually fixed by fitting a diode between the door strike and unit. The following Electrical Locks have been tested and approved by our engineers: Gianni (Taiwan) EM Lock: EM-350M Dropbolt: EB-180 Shear Lock: GS-705N-30 (With Power Supply: PSB2A-230/12) 2. Yale Yale 9504 Electric Strike How to setup the door bell through the ACTAtek? For the door bell to work, you need to: 1. Go to Terminal Setup of the web interface using the browser 2. Enable the door bell 3. On the back of the ACTAtek, you can connect 2 wires from the external door bell to "Door strike #2" 4. Once you press the door bell button on the keypad..., and the bell will ring. 86

87 How to prevent EMI? If the environment of the ACTAtek installed experienced a strong EMI, fierrite ring should be rounded to the door strike wire. From the ACTAtek (NO, NC, COM), about a distance of 2-3cm, please insert a fierrite ring. And then in a further distance of 2-3cm, insert another fierrite ring. This can reduce the affects from EMI What is the maximum distance of External Mifare Reader we guarantee? There are 2 types of External Mifare Reader. One type is RS232 (ACTA-ERMF-232) type and another is RS485 (ACTA-ERMF-485) type. Only one external mifare reader can be connected to one ACTAtek only (1 to 1) For ACTA-ERMF-232, the maximum distance we support is 50m. For ACTA-ERMF-485, the maximum distance we support is 150m. 87

88 Which type of HID prox card do we support? In the current stage, we have internal HID reader only. And very soon the HID will be build inside the ACTAtek, like the internal mifare reader. The HID reader support the following type of HID smartcards: ProxCard II card ISOProx II card DuoProx II card Smart ISOProx II card Smart DuoProx II card HID Proximity & MIFARE card ProxCard Plus card ProxKey II keyfob MicroProx Tag *Depending on local installation conditions Which type of external bar code reader do we support? At this moment, we support 5 types of external bar code readers: 1. PSC VS800 Magellan PSC VS2200 Compact Bar Code Scanner with RS232 Interface 2. Argoscan 8110 Bar Code Scanner (hand held) 3. Z-6070 Zebex Z-6070 Omni Directional Scanner with RS232 interface 4. Champtek BR800 Series Barcode Slot Reader 5. Tech Omni Card Readers 88

89 What does ACTAtek support? Smartcard: We support Mifare, LEGIC, HID prox, HID iclass, ACS, EM Barcode: We support barcode reader Wi-Fi / GPRS: We support wireless connection to an access point (with external ethernet adaptor). If you use PDA or smartphone to connect to the ACTAtek, we have a simplified IE interface (support SSL) to control the ACTAtek (including Remote door open, view eventlog...) Languages: We support English, Chinese Tradition, Chinese Simplified, Korean, Thai, Arabic, Polish, German, Croatian, Spanish...and more to come Why ACTAtek keeps hanging? There could be several reasons for this to happen. Is the door strike operated under DC or AC? The door strike should be 12V DC and consume less than 1 amp current. Please make sure and use the correct lock. Is diode being use? To avoid Back EMF from the door strike, which could damage the ACTAtek unit, we suggest adding a Diode in between the door strike terminal. Please refer to document ACTAtek Door Strike Connection from our website: Is the power being shared? Use separate power supply for ACTAtek. External Card Reader and External Relay, DO NOT share the power supply with the door strike. All of the above may contribute to the cause of ACTAtek hangs. Please ensure the above criteria follow to the standard. 89

90 14.4. Primary-Secondary Connection issues Primary / Secondary Synchronization If you have problem synchronizing the primary and secondary units in the network, please check the terminal list on the primary unit. If they exist and are ok, there shouldn t be a problem with the connection. Make sure you can access both the primary and secondary units over the web interface; another option would be to check if you can PING both the devices. If it s a network issue, please adjust the network connections and check again. Once the network connection is correctly setup and able to communicate with devices, the synchronization should start automatically. If the network connection is fine, try to reboot both the devices. Before you do a reboot, on the secondary unit, cancel the primary, and reboot after that. In addition, to rebooting, do a factory default on the secondary unit; you will not be losing any data doing this since the data is synchronized with the primary unit. After the reboot and reset, try to assign the primary unit s IP on the secondary unit again. For synchronizing multiple units, do it one at a time, make sure one synchronization is successful before you carry on to do the next. Also, make sure all your units in a primary / secondary configuration have the same firmware version and FAM version. If you are doing a firmware upgrade on any one unit, make sure you do it on all the units in the network to assure they have the same features and are the same version, or else, it could cause synchronization errors. To network ACTAteks in different logical networks, which could be caused by them being in different areas, make sure you create a Virtual Private Network (VPN) without firewall to network them in primary / secondary mode. To make sure there aren t any problems with the primary / secondary configuration & synchronization, you have to make sure the time on all the units in the network is identical. They can be set to using the same SNTP server, such as, clock.ics.org, if you know of any other, please feel free to use it. 90

91 How do I connect 2 ACTAtek units with different FAM versions, i.e. FAM 3.xx and 4.xx? Setting up units in Primary / Secondary configuration requires them to have the same FAM versions. 2 ACTAtek units with different FAM, ie. FAM 3.xx and 4.xx technically cannot be in the same network. What we could do is downgrade the 4.xx to 3.xx for them to operate correctly. To do so, download the 3.xx FAM version from: - firmware_fw3.63.bin and do a firmware upgrade to the unit that has FAM version 4.xx. You should then be able to communicate with a FAM 3.xx in the network as primary / secondary. Also, in future if you are adding units in the network that have 3.xx FAM version units, please specify to your dealer that you would need 3.xx FAM versions on your ACTAtek units to avoid the hassle. WARNING: Upgrading the FAM version from 3.xx to 4.xx with cause a permanent damage of the fingerprint module. 91

92 When I make Primary - Secondary combination, will the existing Users on Secondary lost? When you connect a device as a secondary unit, the primary unit it is connecting to will copy all the data from the primary device and overwrite any data in the secondary unit. Both devices will have the same group of people in their databases, which means when you register a person in the primary unit, he/she will be recognized by the secondary unit as well. In this case, you will need to re-register all old users previously exists in the secondary unit. Another option is to use the ACTAtek server to copy the users from the unit to the Primary unit and then change the unit to a secondary unit. Also, be reminded to backup all data before making any configuration changes to your devices - to prevent any data loss What is error code (-1) and (-2)? For a successful setting up primary-secondary connection, you need both ACTAteks are in the same firmware version and in the same FAM version. If you are setting up primary-secondary connections but not success, there will have some error codes come out. Error code:-1, that means there are no network connection between those 2 ACTAteks. Please check the network cable or the hub. Error code:-2, that means either the firmware version or the FAM version are not the same. Please upgrade the ACTAteks to the same firmware version. 92

93 How do we know whether the ACTAteks that are connected have any network error? For instance, there is a network of 11 units, 1 primary and 10 secondary units. If the primary is not connected properly or there is some network error, all the 10 secondary units' LCD will display "Primary Offline" if someone tries to clock in. Once this message is displayed, you can either try to fix it or call the network administrator. If one of the secondary units has been disconnected, you will see a "Cannot be reached" message displayed on the Terminal list of the Primary ACTAtek unit for the respective offline secondary unit Enabling Auto IN/OUT slows down the ACTAteks? In Primary/Secondary mode with multiple secondary units, enabling Auto In/Out may create heavier traffic during synchronization. As a result, terminal may take longer time to response. NOTE: Ensure all terminal clocks are synchronized. The easiest way to accomplish this is to use the SNTP feature on the Terminal Setup page How do I use a Backup Secondary unit? A Backup Secondary keeps a mirror copy of Primary unit's data upon successful run of scheduled backup (11AM/PM daily). In the event of Primary failure and require a substitution, try the following: 1. Cancel the Secondary mode on one of the Backup Secondary. 2. Save a copy of system data from this Backup Secondary. 3. Restore the saved system data to a new Primary unit. 4. Manually, reconfigure all the Secondary units to point to the new Primary. NOTE: Due to scheduling of the backup process (11AM/PM), it is possible to experience data lost in between the last backup time and the actual down time. 93

94 Using Reject Repeated Event. The ACTAtek "Reject Repeated Event" feature, similar to "Auto IN/OUT", depend heavily on the terminal timestamp as well as event trigger ID. If you encounter unexpected behavior from using such feature, please verify the terminal clock time between Primary and Secondary unit is synchronized or read only coherent. NOTE: It is recommended to ensure a correct Timezone is set on each terminal and if possible, use SNTP feature to keep the time clock coherent. 94

95 14.5. General issues I get a message of Unauthorized and Access Denied If you get error message Unauthorized, it is because you haven t created the appropriate Access Rights for the user. Please check the Access Group and the relevant Access rights for the user, and make sure the time has been enabled. If there is a primary / secondary configuration, make sure ALL the units in the configuration have the identical access rights setting. If you get error message Access Denied, it is because the user is having issues with accessing the unit, if they are using automatch, advise them to use ID + Fingerprint. Make sure the finger is placed in the right method, or reduce the security level for the respective user Why does it take so long to do a DB upgrade? In the latest firmware, when the system goes through a firmware upgrade, on the lower left hand corner, a message will be displayed on the process taking place at the moment. The DB upgrade may take longer due to the fact that the old DB has to be converted to the new DB, this will not affect the data in the unit, and should take less than 5 minutes. Also, you can easily diagnose the problem with the message displayed while the loading is taking place, it will display one of the following DB Upgrade Network ACTAtek This way, if the loading fails, you can pinpoint which facet failed, and we can diagnose and fix the problem accurately and quickly. 95

96 How do I upgrade the firmware on the ACTAtek unit? 1. Download the latest firmware from: 2. Backup system data before doing firmware upgrade 3. Reboot the ACTAtek terminal. 4. Go to the ACTAtek login page using a web browser. (If you found your network is not stable, please use a cross cable directly connect between the ACTAtek and your computer). 5. Go to the ACTAtek terminal and login as a Super Admin 6. Click "Firmware Upgrade" 7. Browse to the latest firmware you have just downloaded and hit OK. 8. Click on Upload 9. After the patch has uploaded to the unit, and click "Upgrade" to begin the upgrade process. 10.After the firmware upgrade has successfully completed, reboot the unit manually after 30 seconds after the message "Firmware Upgrade Successful" has appeared. 11.Please make sure that every ACTAtek terminal should be reboot after the firmware upgrade process How do you use the Duress Code, SMTP options? These options have been added to send out a distress to an administrator during a crisis situation. When an ACTAtek is installed in a commercial location and a distress message needs to be sent, this option can be enabled. To do so, specify a mail server in the SMTP Server field. Specify a 2-digit code to use, for example, 99. This code will be used for any user trying to gain access. For instance, you have user ABC in the system, with password 123. To trigger the distress , she would login with the ID (ABC), press Enter, then the password with the distress code in front, which would become This will send an to the specified Administrator s Address. 96

97 What is the procedure to export Chinese characters report in MS Excel? 1. Download Report in.csv format (ie. report.csv) 2. Open a new MS Excel spread sheet. 3. Choose Data --> Import External Data --> Import Data 4. Choose the file report.csv and then open it 5. A Text Import Wizard is appeared. 6. Choose Delimited --> Next 7. Choose Comma --> Next --> Finish 8. You can select the location for this new table (click OK if you are not sure) What is the procedure to export Arabic characters report in MS Excel? 1. Download Report in.csv format (ie. report.csv) 2. Open a new MS Excel spread sheet. 3. Choose Data --> Import External Data --> Import Data 4. Choose the file report.csv and then open it 5. A Text Import Wizard is appeared. 6. Choose Delimited --> Next 7. Choose Comma --> Next --> Finish 8. You can select the location for this new table (click OK if you are not sure) 97

98 How do Access Groups work? The following example is to control 3 doors (A, B and C) with 3 groups of people that belong to 3 corresponding access groups. Access Group 1 - Can access ALL Doors (For instance, Managers) Access Group 2 - Can Access Door B only (For instance, General staff, Engineers) Access Group 3 - Can Access Doors A and C (For instance, Sales / Marketing Staff) ---> just give them access in group 3 for door A & C ACTIONS: First you need to add a new user, an admin manager, and set his access group to Group 1. Also, add an engineer and set his Access group to Group 2. Then add a third user as a Sales representative and set him as Access Group 3. 1.Now, go under Access Groups > Click "Admin / Manager" 3. --> Delete All the access rights first > Add Access Right 5. --> Select Door A 6. --> Quick Access Enable 7. --> Click "Set Terminal" 8. --> Click "Set Time" to enable ALL the time 9. --> Click "Submit & Create Another Access Right" 10. Now Select Door B > Repeat steps Now Select Door C > Repeat steps After set all the Doors, click "Submit Access Group" When you click on the "Admin / Manager" of "Access Groups", you will now see 3 Access Rights for that access group. So now, you can follow the steps 1-14 to create the rights for Access Groups 2 and 3 correspondingly. So now, you can follow the steps 1-14 to create Access Group 2 and Access Group 3 corresponding. 98

99 How to help us to translate the languages? For the different languages we provided in ACTAtek, mainly are being translated by our resellers. If you find that the languages are not updated at all, you can request us to send you the translation file and do the translation. Following are the steps to update the translation file. 1. We will send you the translation file, eg called abc.txt 2. Open the abc.txt file with Wordpad 3. Translate the blank items, BUT DON'T DELETE THE ITEMS WHICH HAVE NOT BEEN TRANSLATED 4. Save as the file type to "Unicode Text Document", say abc_new.txt 5. Send back the translated file to us How to configure the SNTP? 1. First, you need to set all the Gateway, DNS(or use IP address) and IP address correctly, and make sure that your ACTAtek can be connected to the Internet. 2. Go to the "Terminal Clock" in the web page 3. Choose your timezone. 4. Check the "Enable SNTP" check box 5. Enter the SNTP Server Name (time.windows.com) 6. Press "Set" Now, the time of ACTAtek will be synchronized to the Server's time. And in every 10 minutes, ACTAtek will try to connect the Server to synchronize the time. If you are using the SNTP, actually you can ignore the upper part in the ACTAtek, Terminal Clock setting page. The upper part is just for the ACTAtek network which cannot be connected to the Internet to get the Internet time. And, even if you are choosing to Auto Adjust the PC time, it will auto adjust once when you click "Set Time". So if you are not using SNTP, and you are pressed Auto Adjust, the PC time will not synchronize to ACTAtek time unless you are setting it manually. For the upper part, the grey colored time is the ACTAtek's current time. And the black colored time is the time you want to set. 99

100 How to login by using both smartcard & fingerprint? Here is the procedures for doing so: 1. Please go to the add user manual --> Add user --> Fingerprint to add a new fingerprint user in the ACTAtek 2. Please go to the add user manual --> Add user --> Smartcard --> Copy to Smartcard to copy the fingerprint of the user added in Step 1 to the smartcard. 3. Please login the web page of ACTAtek. Go to Access groups --> Select the first group --> first Access Right --> Change the Quick Access from enable to disable. Submit the changes. 4. Please try to use put that smartcard on the reader, and then the ACTAtek will ask you for the fingerprint Is there other login options for the Super Administrator (A999) to access the Terminal Menu? The super administrator can login to the Terminal Menu either by a combination of user ID and PIN, or a combination of user ID and fingerprint, given the proper status is assigned When I click on a link, I get Session Expire: Occupied by a new admin login on the web interface? Starting from firmware , ACTAtek web interface only allows one super administrator login at a time. If a super administrator logs in, during which there is another super administrator already logged in, then the previous web session will expire hence leaving only one super administrator from the latest session I cannot login using smartcard after a firmware upgrade to ACTAtek? Since firmware 1.29, all users need to enable the smartcard check box manually. Select View User List from the menu-----> select the user ID -----> check the Smart Card box -----> click the Modify button to submit the changes. 100

101 Does ACTAtek Server work with FAM 3.x? Currently, the ACTAtek Server is only supported with ACTAtek using FAM 4.x Which version of ACTAtek works with LogiPrint? LogiPrint can only be used with ACTAtek running FAM 4.x What are the authentication options for ACTAtek? Depending on the model, ACTAtek supports three different authentication methods PIN, Smartcard and Fingerprint. Model Fingerprint Smartcard PIN Fingerprint + Smartcard Fingerprint only Smartcard only PIN only How do I know which firmware is the ACTAtek running? You can find out the firmware version by logging into the web interface with super administrator account, then click on Terminal Status page. The same information can be found on the terminal by pressing the Return key six times on the keypad. 101