ManagerTM. Installation and Programming MagStripe Readers

ManagerTM Installation and Programming MagStripe Readers WSE TECHNICAL SUPPORT SERVICE GROUP, 1998, P/N 6600038 47102 Mission Falls Court Fremont, CA 94539-7818 an ISO 9001 certified company PHONE (510) 360-7800 FAX (510) 360-7820

Table of Contents PURPOSE...3 THE MSR / MSRK READER...4 General Information... 4 Installation... 4 Basic Operation... 4 LED's... 4 S-Net Connection... 5 Recommended S-Net Cable... 5 Termination Jumper... 5 Address Switches... 6 Mounting Location... 6 Reader Wiring... 7 MAGNETIC STRIPE ENCODING...8 DECODING ABA CARDS...10 To decode an ABA card:... 10 SELECTING, ASSEMBLING AND ENTERING DATA...12 Selecting the Digits... 12 Programming the NexSentry Host... 12 Site Codes... 12 Programming the MagStripe Reader... 15 MagStripe Reader Testing... 19 2 WSE TECHNICAL SUPPORT SERVICE GROUP, 1998, P/N 6600038

NexSentry Manager 2.0X Installation and Programming MagStripe Readers Purpose The purpose of this manual is to provide information to the field technician in installing and configuring the NexSentry Manager Host and NexSentry 41XX Controllers when using MagStripe card readers. This manual will focus on the use of MSR/MSRK readers, the NexSentry Controller and the NexSentry Manager 2.X software. The information is to be used in addition to the current product manuals: NexSentry Manager 2.0 Installation and Operation Manual and, MSR/MSRK Magnetic Swipe Card Reader Manual. The American Banking Association developed a standard for encoding data on magnetic stripe cards that are used by all US and most international financial institutions. This standard sets out the location, numbering scheme and format for data on the magnetic stripe. Other non-financial organizations have adopted the ABA format for their standard. Many of these financial and non-financial cards are used in Access Control applications. Data on ABA cards is contained in 40 digits and includes: An individual card number An Expiration date A Site or Facility code Most users of ABA cards will be able to provide documentation to you detailing the format of their cards. Some, however, won't know, or be able to easily find out. In those cases, the NexSentry Controller can help. The NexSentry Controller has the ability to read and decode the Site code, Expiration date and up to eight selected digits of the individual card number. Access decisions can be made on any combination of these three pieces of data. The following chapters will describe how to install a Magnetic Stripe reader, Decode the data on a set of ABA cards, and program the NexSentry Manager 2.0 to use the data for access decisions. 3

The MSR/ MSRK Reader Installation The MSR / MSRK Reader General Information Installation The MSR and MSRK family of magnetic card readers are designed for reading standard or high-coercively magnetic stripe cards. Each reader will operate up to 28 volts DC and is supplied in a die cast metal housing resistant to: corrosion, abrasion, and tampering. Other features include: Two high brightness red/green status indicators, a tamper detection switch, address switches, WSE proprietary S-Net protocol, and RS-485 interface. MSRK readers also provide a 12-key keypad for PIN entry. Basic Operation The MSR/MSRK Magnetic Stripe Reader will read the information on track 2 of ABA formatted magnetic stripe cards. Once the reader has read the code, the information is sent to the ACU for processing. The ACU identifies the coded message and decodes based on a set of defined parameters. The ACU will then make the decision grant or deny access based on the result of the decoded message. LED's There are two bi-color LEDs on the reader that are controlled by the ACU. When power is first applied to the reader, the top LED will flash green four times and extinguish. When the unit is on line with the ACU, the top LED will turn red; both LEDs will turn red if you are using the MSRK with the VIP option enabled. MSR (without keypad) When the top LED is red, the reader is ready to read a card. If a valid card is swiped through the reader, and access is granted by the ACU, the top LED will turn green. When the door unlock time has elapsed or when the door is opened, the LED will turn back to red. MSRK (with keypad) When both LEDs are red, the reader is ready to read ether a card or PIN entry. Swiping a card through the reader slot, the LEDs will change to yellow indicating that it is ready for the user to enter his/her PIN. Entering a PIN will also change the LEDs to yellow, 4 WSE TECHNICAL SUPPORT SERVICE GROUP, 1998, P/N 6600038

indicating the user must swipe his/her card through the reader slot. After presenting the card and PIN, the reader will send the information to the ACU for an access decision. If access has been granted, the LEDs will change to green until the door unlock time has expired or when the door is opened,. When the unlock time has expired the LEDs will change back to red, indicating that the reader is ready for the next user. S-Net Connection S-Net is a serial network for communications between the ACU and its node devices. Typically, S-Net cable is two twisted pairs with an overall shield; one pair is for data, the other is for DC power. Terminate the first and last devices on the S-Net cable run with a 120 ohm termination resistor across the data A (+) and the data B (-) wires (See Termination Jumper). The maximum S-Net length is 4000 feet (1200 meters). Install the S-Net cable as a single cable. Solder any splices in the S-Net cables. WSE does not support "T" tapping of the data lines. The DR4305 NexStar RS-485 Multiplexer may be used to simplify wiring and extend a network. Recommended S-Net Cable The type of cable used for the S-Net will depend upon the total length and the number of devices connected. Separate twisted-pair cables should be use for data and power when the S-Net exceeds 500 feet (152 meters). Termination Jumper The first and last device on a S-Net communication cable must be terminated with 120 Ω resistor for proper operation. If the MSR / MSRK is the last device on the communication cable, install the 120 Ω termination jumper in the reader in place of the resistor. 5

Address Switches Each Magnetic Stripe Reader on an ACU must have a unique address. The reader's address is set by the position of the DIP switches inside the reader. Using a paper clip bent as shown, set the appropriate address for each reader. Switch 1 is toward the top of the reader, Top Address DIP Switch Settings 4 3 2 1 Reader Address Off Off Off Off Off Off Off On 1 Off Off On Off 2 Off Off On On 3 Off On Off Off 4 Off On Off On 5 Off On On Off 6 Off On On On 7 On Off Off Off 8 Mounting Location The MSR/MSRK Reader is a single piece reader designed to mount on metal window frames or doorframes (mullions) as is suitable for locations that require a small reader. The reader may be mounted to any flat surface and is suitable both for indoor or a protected outdoor location. 6 WSE TECHNICAL SUPPORT SERVICE GROUP, 1998, P/N 6600038

Reader Wiring The reader uses a RJ-11 modular jack for easy field connection between the magstripe reader and the cables to the ACU. An eight-inch pre-terminated cable is supplied with each reader for field wiring. Cables interfacing the reader to the controller must be a minimum of 24 AWG, twisted pair, shielded. Refer to your controller manual for S-Net wiring specifications. The MSR / MSRK readers can operate for either 12 VDC or 24 VDC by using a special dropping resistor (attached to the mounting plate at the factory). For 24 VDC operation, connect the dropping resistor in series with the +12 VDC input led to the reader and the ACU / reader +24 VDC power source. 7

Decoding ABA Cards Magnetic Stripe Encoding ISO standards 7810, 7811 and 7813 describe Magnetic Stripe Cards; their physical size, embossing, magnetic encoding, etc. These cards can carry three magnetically encoded 'Tracks' as shown below. Tracks are encoded using an F/2F recording technique where clocking pulses occur at regular intervals. A flux transition between clocks signifies a 'one' bit, the absence of a transition signifies a 'zero'. Track 2 and 3 characters are encoded using 4 data bits plus one parity bit giving 16 unique characters used to store numeric and special purpose codes. 8 WSE TECHNICAL SUPPORT SERVICE GROUP, 1998, P/N 6600038

Clocking pulses ('0' bits) are encoded before the data to enable card readers to synchronize to the incoming data stream. A special 'Start Sentinel' character indicates the start of data while an 'End Sentinel' character indicates the end of data. A Longitudinal Redundancy Character, or LRC, is encoded after the End Sentinel to further ensures the accuracy of the recovered data. Bi-directional reading is enabled by also encoding clocking pulses at the end of the card. Card reader software must interpret the recovered bit stream to determine whether the card was swiped in a forwards or backwards direction. Given the length of the encoded data and the bit density, there is space for approximately 6.6 mm of clock pulses at either end of the card, i.e. approximately 18 clock pulses on tracks 2 and 3. TIP: Card programming. Un-encoded tracks may generate random noise at the read head outputs. It is possible that some of this noise will appear in the pattern of a 'Start Sentinel' resulting in a bad read. The possibility of accidentally detecting a Start Sentinel will be reduced by checking that it is preceded by a number of zero bits. 9

Decoding ABA Cards The NexSentry ACUs has the ability to read and display the full 40-digit string from an ABA card. Ordinarily this would be undesirable but it is necessary, temporarily, to decode cards. To decode an ABA card: 1. Log into the ACU via the terminal port. 2. Enter the command DOOR 3. Enter the door number (1-8) for the magstripe reader to used to decode the card and press the enter key. 4. Go to question 7 for the selected door, enter Y for MSR ENABLE, and press the enter key. 5. Press the ESC key to return to the command prompt. 6. Enter the command MAGSTRIPE. 7. Enter the MAG-STRIPE number (same number used for the door in step 3). 8. Go to question 17, ABA CARD DATA REPORT (0-32): 0? Enter 1, or any other valid report number. 9. Press the enter key to return to the command prompt. 10. Log off the ACU by the command BYE followed by pressing the enter key. This will display the full data string when reading an ABA card at the defined reader. Take a sample of the ABA card set and swipe it through the selected reader. The 40- character string will be broken into 5 strings of 8 characters each. 10 WSE TECHNICAL SUPPORT SERVICE GROUP, 1998, P/N 6600038

In this example the string can be broken down this way: To determine where the significant pieces of data begin, count from the left starting with the B as #1. In our example: The Card Number begins with Character #2 (through #16). The Site Code begins with Character #24. NOTE: Site Codes may be located anywhere in the data string, even as part of the Card Number. Be careful to locate the correct part. The Expiration Date begins with Character #19. Swipe several more cards through the reader to verify the validity of the Site Code and Expiration Date. Also, take note of which parts of the Card number are unique on each card. The following section will show you how to pick out and use up to three segments of the long Card Number to create a KEY NUMBER of up to 9 digits to be entered under the KEY Holder screen. 11

Programming the NexSentry Manager Selecting, Assembling and Entering Data Selecting the Digits Using the card below as an example, we want to use the second digit, 6; the sixth digit, 4; and the digits from position ten through the sixteen for the remaining digits for the Key Number. We also want to use the site code of '1968' and the expiration date of "0210'. The Site Code starts at position 24, and the Expiration Date begins at position 19. This means the Key Number for this card will be 645042038, with a Site Code of 1968 and an Expiration Date of 0210. All cards that will be read at this reader will use the same parameters for Key Number, Site Code and Expiration date. You can program each MagStripe reader with different read parameters if your customer requires this feature. Programming the NexSentry Host Now that you know how to read the information on the card, you will need to program the NexSentry Manager Host computer. Programming a door to use a magstripe is similar to programming a door with a digital reader. Site Codes To enable the use of Site Codes, you must program a Site Code in the NexSentry Host. To enter a Site Code, explore the database by clicking on the icon and select the System Administration folder. 12 WSE TECHNICAL SUPPORT SERVICE GROUP, 1998, P/N 6600038

Exploring the database: Site Codes Any existing Site Code will appear in the window on the right. If you need to create a Site Code, move you mouse to the blank window and click the right mouse button. Select Add.. and a new window appears for programming Site Codes. Enter an ID number for this Site Code. If you are not sure of which number to use, select Next unused ID. Next, click the left mouse button in the Description box and enter a description for this Site Code. After entering the description, click the left mouse button in the Code box. Enter the site code for the magstripe cards. You can use the character * as a wildcard to stand for all numbers between 0 and 9. If you enter 123* as a site code, it will include all site codes between 1230 and 1239. This feature is extremely useful in setting up a broad range of site codes. After entering all information click the OK button and the box will disappear. Your Site Code will now appear in the right side of the explorer window. 13

ACU Site Codes To enable the use of Site Codes, you must also program the ACU for which Site Codes to use. To activate a Site Code in the ACU, explore the database by clicking on the icon and select the Hardware folder followed by Access Control Units, followed by the NexSentry ACU folder. Select the ACU that will be using the MagStripe Readers by double clicking on the icon with the left mouse button. This will open the ACU programming window. Next, click on the MISC tab to set the Site Code. Click on the box with the arrow pointing down in the Site Code window to display a pull down menu. Select the Site Code for this ACU from the list of site codes that you just defined. With the Site Code selected, click the OK button to save and close the ACU programming window. 14 WSE TECHNICAL SUPPORT SERVICE GROUP, 1998, P/N 6600038

Note: When enabling a site code for use at an ACU, al the NexSentry Manager Host will download all site codes to the ACU. Programming the MagStripe Reader Programming a door to use a magstripe reader is similar to programming a door with a digital reader. To begin, explore the database by clicking on the icon and select the Hardware folder, Doors folder followed by the NexSentry ACU folder. In our example, we will look at the programming of our MSRK5 MagStripe Reader and will focus on the MSR programming requirements. When using a magstripe reader, it is important that the digital reader is disabled. To verify the digital reader is disabled, click on the tab PROX READER. Verify the digital reader box is unchecked. Next, select the tab, MSR to set the read parameters for the magstripe reader. 15

Click the box in the upper left corner to Enable the MagStripe card reader and to activate the programming window. In the example, we wanted to read specific digits off the card for use as the card number. Reader Type First, select the type of MagStripe reader, MSR5 for a standard MagStripe reader or MSRK5 for MagStripe reader with a built in keypad. ABA Data Fields Next, set the ABA card data fields for decoding the card number. In the example, we are using specific data positions for the card number and have entered these positions in the ABA Data Field entry. 16 WSE TECHNICAL SUPPORT SERVICE GROUP, 1998, P/N 6600038

Field 'A' defines the first location of where the ACU will start reading the card number as well as for how many places. In our example, the ACU begins the card number at position 2 and will only read the one digit. Field 'B' and Field 'C' defines the second and third locations of where the ACU will continue to read the card number and for how many digits. In many systems, the card number will begin at the second digit and will use eight digits, leaving fields B and C unused. Expiration & Site Code Enter the starting position of expiration date and the site code in the expiration and site code fields. In the example, the Expiration Date begins at position 19 and the Site Code begins in position 24. ABA Conditions The ABA condition fields define what conditions access will be denied. Placing a check in the box will activate the condition associated. In the example, a persons card will be denied access if one of the conditions occur: The card is not in the ACU's memory The site code is not in the ACU's memory The card has expired. If you are not using site codes or expiration dates, uncheck the boxes associated with these options. Note: Many customers do not use the site codes or expiration dates and will grant access on a valid card number only. This simplifies both programming of the system as well as encoding of MagStripe Card data. 17

MSRK5 Keypad To enable the Keypad on the MSRK5, select the VIP tab. To enable the use of a keypad, check the box enable in the upper left corner. Next, select the times when the keypad will be required. If the keypad will be used at all times, you may check the boxes, OPEN, LIMITED, and CLOSED or you may select the time group "All the time". Click the OK box to close and save the data entered. For the system to work properly, a card user must have PIN assigned for use with their card. See the NexSentry Manager Operators Manual for PIN selection and programming. 18 WSE TECHNICAL SUPPORT SERVICE GROUP, 1998, P/N 6600038

MagStripe Reader Testing & Troubleshooting Before testing a reader, perform both a system and cardholder download for each ACU in the system. Once all downloads are complete, view the system monitor window and test both a valid and an invalid card at each reader. If you swipe a card through a magstripe reader and no messages are viewed in the System Monitor, check the Action Group assignment. If the Action Group window looks like the window below with the ABA Card section displaying Create a new Action Group with the same parameters as the existing Action Group and assign the new Action Group to the magstripe reader. Creating a new Access Group will set the ABA Card action to <NO SELECTION> and will allow normal operation of the magstripe reader. Verify your programming and download both system and cardholder data to each ACU in the system. If you are still having trouble after following the instructions in this manual, call WSE Technical Support at 1-800-227-1667 (Monday through Friday, 6:00 AM to 6:00 PM PST). 19