Using Access Control.pdf

Release 2.5 

Access Control Module 

Guide 

December 2012

SATEON Release 2.5 

Access Control Module Guide 

Issue 1.0, released December 2012 

Disclaimer 

Copyright © 2012, Grosvenor Technology. All rights reserved. 

SATEON and the SATEON logo are trademarks or registered trademarks of Grosvenor 

Technology. All other brands, names, or trademarks appearing in this document are 

acknowledged as the trademarks of their respective owners. 

No part of this document may be reproduced in any form or by any means for any 

purpose without the written permission of Grosvenor Technology. 

Whilst we make every effort to ensure the accuracy of our publications, Grosvenor 

Technology assumes no responsibility or liability for any errors or inaccuracies that may 

appear in this document. 

Grosvenor Technology Ltd. 

Millars Three 

Southmill Road 

Bishop’s Stortford 

Herts 

CM23 3DH 

Telephone: +44 (0)1279 838000 

Fax: +44 (0)1279 504776 

Email: support@grosvenortechnology.co.uk 

Website: www.grosvenortechnology.co.uk 

SATEON Release 2.5 2 Issue 1.0 

Access Control Module Guide December 2012

Contents 

SATEON Access Control Module .........................................................................................5 

Version 2.5 - December 2012 ................................................................................................... 5 

Introduction ......................................................................................................................7 

About the Access Control module .................................................................................................... 7 

About system security ...................................................................................................................... 9 

Contacting Technical Support .........................................................................................................10 

Managing personnel records ............................................................................................ 11 

About personnel .............................................................................................................................11 

How do I ... set up a personnel record..........................................................................................13 

How do I ... set up a person’s access ............................................................................................17 

How do I ... issue a token to a person ...........................................................................................21 

How do I ... revoke a token from a person ...................................................................................24 

How do I ... create a new token from the personnel page ...........................................................27 

How do I ... print a token from the personnel page .....................................................................30 

How do I ... add a photo to a personnel record ............................................................................32 

How do I ... change a person’s photo ...........................................................................................35 

How do I ... view a person’s token history ....................................................................................38 

How do I ... set up a new department ..........................................................................................39 

Managing tokens ............................................................................................................. 41 

About tokens ..................................................................................................................................41 

How do I ... set up one or more new tokens ................................................................................44 

How do I ... issue a token ..............................................................................................................48 

How do I ... issue a temporary token to a person ........................................................................50 

How do I ... mark a token as lost or stolen ...................................................................................52 

How do I ... suspend a token ........................................................................................................54 

How do I ... reset a suspended token ...........................................................................................55 

How do I ... view information about a token ................................................................................56 

How do I ... revoke a token ...........................................................................................................57 

How do I ... set up a new token type ............................................................................................59 

How do I ... set up a new token pool ............................................................................................61 



How do I ... set up a new token status .........................................................................................63 

How do I ... print a token ..............................................................................................................65 

Managing access to locations ........................................................................................... 67 

About access management ............................................................................................................67 

How do I ... define which areas/buildings a person can access ....................................................69 

How do I ... restrict the times that personnel can access an area/building .................................70 

How do I ... set up a new access group .........................................................................................71 

How do I ... set up a new access set .............................................................................................73 

How do I .... set up a reader group ...............................................................................................75 

How do I ... set up a time zone .....................................................................................................77 

How do I ... set up a system mode ................................................................................................79 

How do I ... grant specific access to a person ...............................................................................81 

How do I ... set up a secured area ................................................................................................83 

Managing the system hardware ....................................................................................... 87 

About the system hardware ...........................................................................................................87 

How do I ... set up a new site ........................................................................................................89 

How do I ... set up the physical connections in the system ..........................................................90 

How do I ... set up a new comms engine ......................................................................................93 

How do I ... set up a field network and port .................................................................................95 

How do I ... set up a new panel ....................................................................................................97 

How do I ... set up a new door ....................................................................................................100 

How do I ... set up a new reader .................................................................................................104 

How do I ... set up an input .........................................................................................................109 

How do I ... set up an input group ..............................................................................................112 

How do I ... set up an output ......................................................................................................114 

How do I ... set up an output group ............................................................................................116 

How do I ... set up an automated action ....................................................................................117 

How do I ... set up a reader-triggered action..............................................................................119 

Hardware defaults summary .......................................................................................... 123 

Panel Hardware Defaults ..............................................................................................................123 

Door Hardware Defaults ...............................................................................................................124 

Reader Hardware Defaults ...........................................................................................................124 

Input Hardware Defaults ..............................................................................................................125 

Output Hardware Defaults ...........................................................................................................125 



SATEON Access Control Module 

Version 2.5 - December 2012 

SATEON is a powerful yet easy-to-use access control system that allows you to set up, manage and 

monitor physical access to a site. 

The Access Control module of SATEON enables you to set up the system hardware, the users of the 

system, the tokens they use to gain access and the access they are permitted. 

See also 

Contacting Technical Support 

About the Access Control module 



Introduction 


The Access Control module of SATEON is used to control, monitor and restrict the movement of 

people in, out and around your site. It allows you to: 

• Set up, view or edit information about the physical elements of the system and the connections 

between them. 

• Set up, view or edit information about the personnel: the people in your organisation that can 

be granted access to a building or a specific location. 

• Set up, view or edit information about tokens: the cards and other objects used by people to 

gain access to areas via readers. 

• Set up secure areas, which provides a means of monitoring and controlling the number of 

people in specific physical locations. 

• Set up and manage the access permissions that are used to define where people, as groups or 

individuals, are allowed to go. 

• Set up and manage interfaces to external systems such as alarm panels and CCTV systems. 

To access these features, choose the Access Control option from the module buttons that appear at 

the top of the page. A page with the following options is displayed: 



The options on this page are as follows: 

• Device Management. This option allows you set up and configure the physical devices in your 

system, including panels, readers and doors. You can also manage and view the connections 

between devices. 

• Action/Group Management. This option allows you to set up the building blocks of your access 

control system: groups, actions, time zones and system modes. 

• Access Management. This option allows you to set up the access permissions that are used to 

define access to specific readers at particular times. Each access permission is a unique 

combination of a reader group, a time zone and a system mode. 

• Personnel Management. This option allows you to set up and manage details of the people on 

your system whose details are held on the system for the purposes of access control. You can 

define people’s access rights, assign tokens, add photos to the records and set up departments. 

• Token Management. This option allows you to set up the tokens that can be used to gain access 

to particular sites, buildings or areas within your organisation. Tokens can be anything that can 

be scanned by some kind of reader – such as a card of some type, a proximity device or even a 

piece of biometric data, such as a fingerprint. 

• Area Management. This option allows you to set up and view defined areas and the restrictions 

that apply to them. Areas can be used to report the number of people in an area, to detect 

unoccupied areas, to prevent passback violations, and so on. 

• System Integration. This option allows you to set up interfaces to third-party systems, such as 

alarm systems or CCTV cameras. Configuring these is specific to the external equipment, so they 

are not described in this document. 

See also 

About personnel 

About tokens 

About access management 

About the system hardware 



Introduction 

About system security 

Note the following important points about security: 

• You need to log in to SATEON using a user ID and a password. Default log in IDs and passwords 

apply initially, but must be changed the first time you log in. 

• Never let anyone else use your log in ID/password. For audit purposes, your identity is logged 

against every action that you take on the system. 

• Keep your password secret and do not write it down. 

• Change your password regularly. 

See also 






For further assistance with SATEON, please contact Grosvenor Technical Support as follows: 

Phone +44 (0)1279 838000 

Email 

Web 

Technical website 

support@grosvenortechnology.co.uk 

www.grosvenortechnology.co.uk 

www.grostech.com 

Technical Support staff may need to verify that you have a valid, licensed system when you request 

support. 

To verify your system 

1. When asked, press the question icon that appears in the status bar at the bottom of the SATEON 

screen: 

2. The following dialog appears: 

3. Provide the ID number to Technical Support, and enter the code key they give you in the Key 

box. When you click the arrow button a verification code appears. 

See also 

About the Access Control Module 



Managing personnel records 

About personnel 

Within SATEON, personnel are the people whose details are held on the system for the purposes of 

access control – for example, employees, associates and contractors. Personnel should not be 

confused with users which is the term used for people who can log in and use the software 

application, such as system administrators or security staff. 

Personnel normally hold access tokens, but this is not a system requirement as you may wish to hold 

personal information about other people, such as ex-employees or contractors. 

Note: In some countries you may be required to register under a data protection act if 

you hold personal data. 

You can view details of personnel by choosing the Personnel Management option on the main 

Access Control page: 

The main Personnel Management page appears: 



• The Navigation pane includes the Personnel and Department options. 

• The Filter pane allows you to list and search for all people and departments that have been set 

up. 

• When you select an item in the Filter pane, the appropriate details appear in the Configuration 

pane. 

What do you want to do 

Create a new personnel record 

Set up a person’s access 

Issue a token to a person 

Revoke a token from a person 

Create a new token from a personnel record 

Print a token 

Add a photo to a personnel record 

Change a person’s photo 

View a person’s token history 

Set up a new department 



How do I ... set up a personnel record 

Within SATEON, personnel are individuals whose details are held on the system for the purposes of 

access control – for example, employees, associates and contractors. You can set up a new personnel 

record from scratch; alternatively you can base a new record on an existing one (this is known as 

cloning). 

Note: You can only set up a new personnel record if you have sufficient access rights. 

Contact your system administrator if necessary. 

To set up a new person from scratch 

1. Choose Access Control > Personnel Management > Personnel to list the current people on the 

system. 

2. Click the Create button at the bottom of the Filter pane: 

3. A set of blank fields appears in the Configuration pane: 



4. On the Basic tab, enter the following fields: 

Title 

First Name* 

Surname* 

Employee Number 

Department 

Is Escorted 

Extend Unlock 

Area Exempt 

Access Start 

Access End 

Comment 

Title of the person (Mr, Ms, Mrs, Dr, etc). This is free text so you can 

enter anything you like (up to 50 characters). 

First name of the person (up to 128 characters). 

Family name of the new person (up to 128 characters). 

Employee or staff number of the person (up to 50 characters). Note 

that if used, this must be unique. 

The person’s department, selected from a drop-down list. Can be left 

blank. To create a new department from this page, click the Add 

button next to Department 

When selected, this checkbox indicates that this person must be 

accompanied at any reader that has been specified as an escort 

reader. (See How do I ... set up a new reader) The accompanying 

escort’s token must have permission on the Secondary Reader 

Group defined on the nominated escort reader. This means that 

different people can be the escort on different readers. 

When selected, this checkbox indicates that this person will be 

allowed an extended unlock time at nominated doors. This setting 

can be used to assist people with mobility problems. (See also the 

Extended setting on the reader record in How do I ... set up a new 

reader) 

If you select this checkbox, the person will be logged in the normal 

way in and out of secure areas, but anti-passback will not be 

enforced, so they will never be refused access through a door 

because of an anti-passback violation. 

Optionally, you can specify the date/time that this person’s access 

will start. This overrides the token validity, so if a token is valid but 

the person’s access has not yet started they will not be granted 

access. You can enter a date directly or click the calendar icon and 

select a date and time from the pop-up. 

Optionally, you can specify the date/time that this person’s access 

will end. This overrides the token validity, so if a token is valid but 

the person’s defined access has ended they will not have access. You 

can enter a date directly or click the calendar icon and select a date 

and time from the pop-up. 

Free-text information about this person. 

* these are required fields 



5. If custom fields have been defined for personnel records, you can set these on the Custom 

Fields tab. 

6. Click the Save button to save the changes to the record. 

To create a new person record based on an existing person 

1. Choose Access Control > Personnel Management > Personnel. 

2. In the Filter pane, choose the person you want to base the new record on. 

3. Click the Clone button at the bottom of the Filter pane: 

4. A page as follows is displayed: 

Note: All the fields on the Basic tab are copied from the original personnel record, with 

the exception of the Employee Number, which must be unique. Normally you would 

change the name though! 

5. Enter/edit the information required as described above. 

6. Click Save to save the changes; click Cancel to cancel them. Changes take place immediately. 



See also 

How do I ... set up a person’s access 

How do I ... issue a token to a person 

How do I ... create a new token from a personnel record 

How do I ... add a photo to a person 

How do I ... set up a new department 




Once a person has been set up you can define the access that is allowed – the readers at which the 

person’s tokens are valid. This identifies the buildings, locations and areas that the person can 

access. 

To do this you assign particular access groups to the person. Access groups are used to specify the 

readers, time zones and system modes that are used to define access. 

Note: Before setting up access for a particular person, you will need to have set up all the 

elements needed for access: the readers, time zones, system modes, access permissions, 

access groups and access sets. For more details, see About access management. 

To define a person’s access 


2. Choose the person whose access you want to set up. 

3. Click the Manage Access button at the top of the Configuration pane: 

4. The following page appears: 



This lists the access groups that have been assigned to the person, if any. (In the example above, 

no access has been assigned.) 

5. To assign new access rights, click Grant Personnel Access. A page of the following format 

appears: 

The box on the left lists the access sets (collections of access groups) while the box on the right 

lists the individual access groups. 

6. If you highlight an access set and click Apply, the access groups that form the set are moved into 

the Selected Access Groups list. 

7. To list the readers that are included within an access group, click View Readers. A dialog pops up 

listing the readers and the access start and end times: 



Note that you may need to use the vertical scroll bar to view all the information. Click Close to 

close this dialog. 

8. To define the access permitted to this person, select the checkboxes next to one or more access 

groups and click the Grant Access button. The Manage Access page is redisplayed: 

For each access group listed, you can specify the times for this particular person’s access to start 

and finish. If times are already displayed, these are the defaults set up for these access groups, 

but these can be overwritten. For both Access Starts and Access Ends, type in a date and time or 

click the calendar control to select a date and time. Click Save Changes to record the changes to 

dates and times. 

9. When you have finished setting up the access rights for this person, click Done. 

Note: You can also set up a person’s access permissions from the access groups page. 

See How do I grant specific access to a user 



See also 






How do I ... revoke a token from a person 


How do I ... define which areas/buildings a person can access 

How do I ... grant specific access to a person 




Once a person is set up you can allocate one or more tokens. A token is any object which can be used 

to gain access to particular sites, buildings or other locations. Tokens can be of various types, such as 

mag-stripe cards, proximity devices or items of biometric data, such as fingerprints. 

There is no limit to the number of tokens a person can have. 

Note: You can create all the tokens you need on the Token Management page. (See How 

do I ... set up a new token) However if you have not already set up tokens, you can create 

a token directly from the Personnel page. See How do I ... create a token from the 

personnel record. 

To assign a token to an existing person 


2. Choose the appropriate person. 

3. Click the Manage Tokens button at the top of the Configuration pane: 

4. Any tokens assigned to that person are listed. When a token is selected, full details of the token 

and its status are given in the panel on the right, for example: 



Note: If necessary you can create a token directly from here by pressing the Create 

Token button at the bottom of the page. See How do I ... create a new token from 

the personnel record 

5. To issue a token, press the Issue Token button at the bottom of the page: 

All currently available tokens are listed: 



5. If there are large numbers listed, you can filter them by entering a string of characters in the 

Filter Criteria box. This can be any sequence of characters from the Token Data, Token Status or 

Token Type fields. For example, you could search for a specific number, or list tokens of a 

particular type only. You can also restrict the list to one specific token pool by choosing the pool 

from the drop-down list. Click the Filter button to update the list: 

6. To issue a token to this person, select the token that you want to assign from the list. In the 

region in the bottom of the screen, enter the following information: 

Reason 

Issue Type 

Optional reason for the token issue, such as New Employee, Forgot Token, 

etc. 

Choose Issue Permanent Token (such as for a new employee) or a Issue 

temporary token (such as for a forgotten token). 

7. Click OK. The token is assigned to the person and the list of tokens is updated. 

See also 



How do I ... set up a new token 


How do I ... print a token 

How do I ... view a person’s token history 

About tokens 




You can revoke a token from the person it is issued to. There may be various reasons for this: an 

employee is leaving the organisation, it was issued on a temporary basis and so on. When a token is 

revoked it is returned to the appropriate token pool and can be assigned to another person. 

Alternatively it can be deleted if it is no longer required. 

Note: If the token has simply expired, you can update its validity period. 

To revoke a token from an existing person 


2. Choose the person whose token you want to revoke. 

3. Click the Manage Tokens button at the top of the Configuration pane: 




This page lists all the tokens currently allocated to the person. 

5. Select the token to be revoked. If the person has several assigned tokens, ensure you select the 

right one. 

6. Click Revoke Token at the bottom of the page: 

7. A dialog appears: 

Enter a reason for the token being revoked and click the Revoke button. 

8. The token is removed from the list and returned to the token pool, where it can be reassigned to 

another person, or deleted. 



See also 






About tokens 



How do I ... create a new token from the personnel 

page 

If you need to assign a token to a user and you do not have a suitable token available in a token pool, 

you create one directly from the Personnel page. 

To create a token from the personnel record 

1. On the Personnel page, choose the appropriate person. 

2. Click the Manage Token button at the top of the Configuration pane: 




4. Click the Create Token button at the bottom of the page: 

The following dialog is displayed: 



5. Enter the following data: 

Token Data* 

Token Status 

Token Pool* 

Token Type* 

Valid From 

Valid To 

Deactivate Exempt 

Show PIN 

Pre-defined PIN 

The ID number of the token – either entered directly or read in from an 

appropriate attached USB reader. 

Select the initial status of the token, e.g. Usable. 

Select the pool that this token belongs to, e.g. Permanent Token Pool. 

Choose the type of token. See How do I ... set up a new token type 

If appropriate, specify the start of the date/time range for which the 

token is valid. You can enter the date directly or click the calendar icon 

and select a date and time. 

If appropriate, specify the end of the date/time range for which the 

token is valid. You can enter the date directly or click the calendar icon 

and select a date and time. 

Select this checkbox if you do not want this token to be deactivated 

when a new temporary token of the same type is issued to the person. 

Select this checkbox to view the PIN, if used. 

Choose this if you want to set a system PIN and choose a value from 

the drop-down. 

Personnel defined PIN Choose this if you want to set a specific PIN, and enter a value directly. 

Issue Type 

Reason 

Choose Issue Permanent Token (such as for a new employee) or Issue 

Temporary Token (such as for a forgotten token). 

Optional reason for the token issue, such as New Employee, Forgot 

Token, etc. 


6. Click the OK button to create the token and assign it to the person. 

See also 







About tokens 



How do I ... print a token from the personnel page 

SATEON enables the printing of tokens at specific printers. Card designs are held as SSRS reports; 

they can contain personal data from the SATEON database such as name, employee number, 

department, photos, etc. They can also include standard text and graphics such as company names 

and logos. 

Before you can print a token from the Token page, the printer you are using must already have been 

configured in the System Configuration > Token Printing options. One sample design for personnel 

cards is included in SATEON: if you want to change this or set up alternative designs this must be 

done outside SATEON, for example using Report Builder. Contact Technical Support for a Technical 

Bulletin that explains this process. 

Note: The card printer you are using may have its own requirements and restrictions. 

To print a token 



3. Click the Manage Tokens button at the top of the Configuration pane. 

4. On the Manage Tokens page, click the Print Token button: 


6. Choose a design and a printer. If you haven’t created any additional designs, only the basic 

Sample User Card will be present. The printers available will depend on what has been set up 

7. Click Print. 

Note: You can also print a token for a specific person from the Token Management page 

by clicking Print Token. 



See also 







How do I ... add a photo to a personnel record 

You can add photos to a personnel record, both as a security measure and to help staff quickly and 

easily identify people. You can capture photos directly from a connected webcam or upload them 

from a file elsewhere on the system (in .jpg or .png format). You can associate several different 

photos with a person if required, with one selected as the default for display. 

To add a photo to a personnel record 

1. On the main Personnel page, choose the person you want to add a photo to. 

2. Click the Manage Photos button at the top of the pane: 

3. The person’s photo page is displayed: 

4. This page shows any existing photographs, and allows you to capture a picture from a connected 

webcam or upload a photo from elsewhere. 



To capture a photo from a webcam 

1. On the person’s photo page, click Capture to start the webcam capture process: 


3. Click the Start Capture button. 

4. The Webcam Video Feed box on the left will then display a live feed from any device that you 

have connected to your computer. 

5. When you are happy with the picture, click the Snap button to capture the image and copy it to 

the Snapshot Image on the left. 

Note: You can repeat the capture process if necessary, for example to ensure the person is 

happy with the image. 

6. When you are satisfied with the picture, click Done. 

Note: You can crop the photo if required. See How do I change a user’s photo 



To upload an existing photo from file 

1. On the person’s photo page, click the Upload button: 

2. A Windows file selection dialog appears; navigate to the appropriate picture file and click Open. 

Note that the file selection defaults to .jpg format, but you can amend this to find .png format 

files. 

3. The uploaded photo is added to the photo gallery for this person. 

4. When you are satisfied with the picture, click Done. 

Note: You can crop the photo if required. See How do I ... change a person’s photo 

Note: To ensure a photo is displayed when the person is selected, choose it and click the 

Make Default button. 

See also 




How do I ... change a person’s photo 



How do I ... change a person’s photo 

You can have a number of different photos associated with a person, and you can change the one 

you want to be displayed by default. You can delete, change or edit a person’s photo at any time. If 

the original photo is the wrong size or aspect ratio you can easily change it. 

To select a different default picture 



3. Click the Manage Photos button at the top of the pane: 

4. The person’s photo page is displayed: 

5. This page shows any existing photographs. Select the one you want to appear and click the 

Make Default button. 



To crop a photo 

1. Click the Manage Photos button at the top of the pane to display the person’s pictures. 

2. Select the appropriate photo from the gallery and click the Crop button: 

3. Choose the aspect ratio that you want the cropped image to have (note that these rations are 

given as width:height). 

Note: If you plan to print tokens including photographs, you should ensure that all photos 

are saved at the same aspect ratio. 

4. The original photo is shown on the left, with a superimposed rectangle of the correct aspect 

ratio. Drag and or resize the rectangle to select a region of the original picture (the selected 

region will automatically have the appropriate aspect ratio). 

5. Click the Preview button to see a preview of the selected picture on the right of the page. If 

necessary, repeat the cropping process until you have an image you are happy with. 

6. Click the Save Photo button when you are happy with the photo. The cropped image is added to 

the gallery. The original is also kept; if you don’t want it, just delete it. 



To delete an existing photo 

1. Click the Manage Photos button at the top of the pane to display the person’s pictures. 

2. Select the photo from the gallery and click the Delete button: 

3. A confirmation dialog is displayed: 

4. Click Yes to confirm the delete. 

See also 








You can view information about token assignment and status relating to a selected person on the 

Personnel record. 

Note: If you want to view other activity associated with the person and their token usage, 

use the Control Centre. See the Control Centre help for details. 

To view a person’s token history 


2. Choose the person whose token data you want to view. 

3. Click the Token History tab. Details of this person are displayed as follows: 

4. This tab lists details token assignments and changes of token status that have happened to that 

person since the personnel record was created. 

See also 

No changes can be made from this page. 







About tokens 




When you set up new personnel records, they can be assigned to a department, so you may need to 

set up the departments you need first. 

Note: Departments are optional; you can ignore this feature if you wish. 

Departments are set up within the Personnel Management option of Access Control. 

To create a new department 

1. Choose Access Control > Personnel Management > Departments to list the current 

departments. 

2. Click the Add button at the bottom of the Filter pane: 

3. The following appears in the Configuration pane: 

4. In the Description field, enter a name for the new department. 

5. Click Save. 

You will now be able to choose this department from the drop-down list when setting up a new 

personnel record. 

Note: You can also set up new departments from the personnel page when setting up a 

new record. See How do I ... set up a personnel record 



See also 









Managing tokens 

About tokens 

Within SATEON, a token is any object which a person can make use of to gain access to particular 

sites, buildings or areas within your organisation. This can be anything that can be scanned by some 

kind of reader – such as a card of some type, a proximity device or even a item of biometric data, 

such as a fingerprint. You can set up the specific types of tokens that you use in your organisation. 

An individual person can hold multiple tokens, and may use different tokens for access to different 

areas. 

Tokens are organised into token pools – groupings of tokens with similar characteristics. For 

example, you could have a pool of permanent tokens, and a pool of temporary tokens that you give 

out to people who have lost their permanent token. 

Note: By default the system includes three token pools (Permanent, Temporary and 

Visitor), but you can create new ones or change these if you need to. 

For a token to permit access at a reader, it must have a status of Usable, it must be assigned to a 

person and the person must have the correct access rights. In addition, it must be within a valid 

date/time range. If a token is Usable but issued before the start date, it is marked as Pending. 

Some organisations may require personnel to enter a PIN at a keypad in addition to their token being 

read, in order to gain access. In this case you can set up a PIN for a token. 

If a person forgets their normal token, you can issue a temporary one. If you wish, you can set this to 

only be valid for a limited time. You can also mark the original token as Lost, which will remove all 

access rights from the token. 

In some cases, a token can be automatically suspended by the system. For example, if a token is used 

repeatedly to attempt access to an area where the person does not have permissions, if access is 

attempted outside a valid time zone, or if a PIN is wrongly entered multiple times. In this case, the 

system administrator can reset the token. It is also possible to suspend a token manually, if 

unauthorised access is suspected. 



You can view details of tokens by choosing the Token Management option on the main Access 

Control page: 

The main Token Management page appears: 

• The Navigation pane includes the options Tokens, Token Pools, Token Types and Token Status. 

• The Filter pane enables you to list and search for items. 

• When you select an item its details appear in the Configuration pane. 


Set up a new token 

Issue a permanent token to a person 

Issue a temporary token to a person 

Mark a token as lost 

Suspend a token 



Revoke a token 

Set up a new type of token 

Set up a new token pool 

View information about a token 

Set up a new token status 

Print a token 



How do I ... set up one or more new tokens 

You can set up new tokens at any time. You can create a single token or a batch of tokens (with 

contiguous numbers) at once. 

Each token has a status, and only tokens with a status of Usable can be used to permit access. 

Additionally, a token can be set to be valid for a particular date/time range. If a token is assigned to a 

person before the validity period, it will be shown as Pending and will not allow access. 

To create a single token 

1. Choose Access Control > Token Management > Tokens. 






Token Data* 

Token Status* 

Token Pool* 

Token Type* 

Valid From 

Valid To 

Is Temporary 


Show PIN 

Pre-defined PIN 

Personnel-defined PIN 

The ID number of the token - must be a numeric value. 

Select the initial status of the token, e.g. Usable. 

Select the pool that this token belongs to from the drop-down list. 

Note that this is just a label – if you select a token from the 

Temporary Pool this does not automatically mean that it is 

temporary. To set up a new token pool, see How do I ... set up a new 

token pool 

Choose the type of token from the drop-down list. This is populated 

by all the types of token available. To set up new token types, see 

How do I ... set up a new token type 

If appropriate, specify the start of the date/time range for which the 

token is valid. You can enter the date directly or click the calendar 

icon and select a date and time from the pop-up. 

You can set a date in the future if you wish. If you do not select a 

time, the start time will be set to 00:00 and the token will be valid 

from midnight. 

If appropriate, specify the end of the date/time range for which the 

token is valid. You can enter the date directly or click the calendar 

icon and select a date and time. If you do not select a time, the end 

time will be set to 00:00 and the token will be valid until midnight. 

Select this checkbox if the token is temporary. This setting overrides 

the Temporary Default checkbox on the Token Pool page. 

Select this checkbox if you do not want this token to be deactivated 

if a new token of the same type is issued to the person. (Not 

supported at present.) 

If a person is required to enter a PIN at a keypad associated with the 

reader, select this checkbox to view the PIN. 

Select to choose a PIN from a list of system-generated options that 

appear in the drop-down box 

Select to set a PIN with a specific number. 


5. Click Save to create the new token. 



To create a batch of tokens 


2. Click the Add Batch button at the bottom of the Filter pane: 



Start Token Data* 

End Token Data* 

Token Pool* 

Token Type* 

The ID number of the first token in the batch. 

The ID number of the last token in the batch. 

Select the pool that these tokens belong to from the drop-down 

list. Note that this is just a label – if you select a token from the 

Temporary Pool this does not automatically mean that it is 

temporary. To set up a new token pool, see How do I ... set up a 

new token pool 

Choose the type of token from the drop-down list. This is 

populated by all the types of token available. To set up new 

token types, see How do I ... set up a new token type 



Token Status* 

Valid From 

Valid To 

Is Temporary 


Select the initial status of the tokens in this batch, e.g. Usable. 

If appropriate, specify the start of the date/time range for which 

the tokens in this batch are valid. You can enter the date 

directly or click the calendar icon and select a date and time 

from the pop-up. 

You can set a date in the future if you wish. If you do not select 

a time, the start time will be set to 00:00 and the tokens will be 

valid from midnight. 

If appropriate, specify the end of the date/time range for which 

the tokens in this batch are valid. You can enter the date 

directly or click the calendar icon and select a date and time. If 

you do not select a time, the end time will be set to 00:00 and 

the tokens will be valid until midnight. 

Select this checkbox if the tokens in this batch are temporary. 

This setting overrides the Temporary Default checkbox on the 

Token Pool page. 

Not supported at present.. 


5. Click Save to create the new batch of tokens. 

See also 

How do I ... create a new token from the personnel record 


How do I ... issue a temporary token to a person 

How do I ... mark a token as lost 

How do I ... suspend a token 

How do I ... revoke a token 


How do I ... set up a new token pool 



How do I ... issue a token 

For a token to permit access at a reader, it must have a status of Usable, be assigned to a person and 

it must be within a valid date/time range. In addition, the person it is issued to must have the correct 

access rights for the reader. If a token is assigned to a person but issued before the start date, it is 

marked as Pending. 

Note: You can also issue a token to a person from the Personnel page. See How do I 

issue a token to a person 

To issue a token 


2. Choose the token you want to assign. 

3. Click the Issue Token icon: 

Note: You cannot select the Issue Token icon if the selected token is already assigned to a 

person. 

4. A screen of the following format appears: 



This page lists all existing personnel. 

5. You can restrict the list as follows: 

− 

− 

By entering a string of characters from the First Name, Surname or Employee Number into 

the Filter box. 

By choosing a Department from the drop-down list. 

Then press the Search icon: 

All users matching the search criteria are listed. 

6. Select the relevant person in the list. 

7. To issue a token to this person, enter the following: 

Reason 

Issue Type 

Reason for the token issue, such as New Employee, Lost Token, etc. 

Choose Issue Permanent Token (such as for a new user) or Issue 

Temporary Token (such as for a forgotten token). 

8. Click Issue Token to assign the token. The token page is redisplayed, with the person’s name at 

the top of the token page. 

See also 













If a person forgets or loses their normal token, you can issue a temporary one. 

Note: Before assigning a temporary token, ensure it is valid for the correct date and time 

range. 

To assign a temporary token 


2. Choose the person you want to issue the temporary token to. 

3. Click the Manage Tokens button at the top of the pane. 

4. A page appears listing the tokens that have already been allocated to this person. To issue a new 

token, press Issue Token at the bottom of the page: 

5. All currently available tokens are listed: 



6. If you wish you can restrict the list to a particular pool by choosing the Pool from the drop-down 

list. You can also filter the displayed list by entering a string of characters in the Filter Criteria 

box. 

7. To issue a token to this person, select the token that you want to assign from the list. In the 

region in the bottom of the screen, enter the following information: 

Reason 

Issue Type 

Optional reason for the token issue, such as Forgot Token, Lost Token, etc. 

Choose Issue Temporary Token. 

8. Click Issue Token. The temporary token is assigned to the person and the list of tokens assigned 

to this user is redisplayed. 

See also 











How do I ... mark a token as lost or stolen 

All tokens have a status which appears at the top of the appropriate page. Only tokens with a status 

of Usable permit personnel to access areas via readers/doors. 

If a person reports a token missing you can mark it as Lost or Stolen, which temporarily removes all 

access rights associated with the token, preventing it from being used. 

To mark a token as lost or stolen from the personnel record 


2. Click the Manage Tokens button at the top of the pane. 

3. Select the token 

4. In the Token Status field, choose Lost or Stolen from the drop-down: 

5. Click Close. The status of the token is changed. A token with a status of Lost or Stolen will not 

permit access at any door. 

6. If the token is subsequently found, you can reset the status to Usable. 

To mark a token as lost or stolen from the token record 


2. Find the token you want to mark as lost (you can search for a token by entering characters from 

the Token Data field). 

3. In the Token Status field, choose Lost or Stolen from the drop-down: 

4. Click Save. The status of the token is changed and will appear at the top of the page. A token 

with a status of Lost or Stolen will not permit access at any door. 

5. If the token is subsequently found, you can reset the status to Usable. 



See also 












If you suspect a token has been misused, you can manually set it to a Suspended state, removing all 

access rights associated with it. 

The suspended token can be subsequently reset by someone with sufficient access permissions. 

Note: A token can also be automatically suspended by the system, for example if it has 

repeatedly been used to attempt to gain access to an area where the person does not 

have access rights, or if the wrong PIN has been entered repeatedly. 

To suspend a token directly 


2. Find the token you want to suspend (you can search for a token by entering characters from the 

Token Data field). 

3. Click the Suspend icon: 

4. The token is suspended. In this state, it will not permit access at any door. 

Note: You can check this on the Token State tab. See How do I ... view information about a 

token 

5. To subsequently reset the permissions associated with this token, you can click on Reset 

Suspend. 

See also 





How do I ...reset a suspended token 

How do I ... view information about a token 



How do I ... reset a suspended token 

If a token has been misused, it can be set to a Suspended state, removing all access rights associated 

with it. 

A token can also be automatically suspended by the system, for example if it has repeatedly been 

used to attempt to gain access to an area where the person does not have access rights, or if the 

wrong PIN has been entered repeatedly. 

The suspended token can be subsequently reset by someone with sufficient access permissions. 

To reset a token 


2. Find the token that is suspended (you can search for a token by entering characters from the 


3. Click the Reset Suspend button. 

4. The previous access rights are restored. 

See also 









If a token is misused, for example, used repeatedly to attempt access to an area where the person 

does not have permissions, outside a valid time zone, or if a PIN is wrongly entered multiple times, 

the token will accrue penalty points. The number of points is configurable at a system level. 

When a certain number of points is reached, the token is automatically suspended by the system. 

It is also possible to suspend a token manually, if unauthorised access is suspected. 

Once a token has been suspended, it cannot be used to gain access until it is reset by a suitable 

system user. 

On the Token page you can view the current state of a token, the number of points that have been 

accrued, and so on. 

To view details of the token 


2. Find the token you want to check (you can search for a token by entering characters from the 


3. Select the Token State tab: 

See also 

This tab indicates where the token was last used, and shows the number of points and whether 

or not the token is suspended. 



How do I ... reset a suspended token 




You can revoke a token from a person to unassign it. There may be various reasons for this: an 

employee is leaving the organisation, the token was issued on a temporary basis and so on. 

When a token is revoked it is returned to the appropriate token pool and can be assigned to 

someone else. Alternatively it can be deleted if it is no longer required. 

Note: If the token has simply expired, the end time of its validity period can be updated. 

To revoke a previously issued token 


2. In the Filter pane, choose the token you want to revoke from a person and click the Revoke 

Token at the top of the page: 

3. A screen of the following format appears. 

4. Optionally, enter a reason for revoking the token. Click the Revoke button. 

Note: You can also revoke a token from the appropriate personnel record. See How do I ... 

revoke a token from a person 



See also 



How do I ... issue a token to a user 







Token types are used to identify the sorts of tokens in use in your organisation. For example, you 

could use mag-stripe cards, smartcards, proximity devices and biometric tokens. 

To create a new token type 

1. Choose Access Control > Token Management > Token Types. 


3. A set of blank fields appears: 

4. Enter the following fields: 

Description* 

Can Print 

Is Returnable 

The identifying name of the new token type. 

Select this checkbox if tokens of this type can be printed, using the 

Token Printing facility. If not selected, tokens of this type are not 

available for printing. See How do I ... print a token 

Select this checkbox if the tokens of this type can be returned from 

the person. 




Not implemented at present. 

Reader Format Type* Choose the type of reader that is required to read tokens of this type. 

The drop-down is populated with all available reader types. 

* required fields 


See also 











Token pools are used to group tokens with similar characteristics. All tokens must be assigned to a 

pool. 

Two token pools are included in SATEON by default: Permanent and Visitor token pools. However, if 

required, you can set up a new pool (or amend the existing ones). 

To create a new token pool 

1. Choose Access Control > Token Management > Token Types. 




Description* 

Temporary Default 

The identifying name of the new token pool. 

Select this checkbox if any tokens issued from this pool are to be 

treated as temporary. 

* this is a required field 

Note: If the Temporary Default checkbox is selected fora token pool, you will need 

to override the setting for an individual token if you want to make it a permanent 

issue. 

5. To allocate tokens to this pool, click the Manage Tokens button. Tokens are listed as follows: 



6. You can move tokens into and out of this pool by clicking the arrow buttons. 

7. Click Done. 

See also 

How do I ... create a new token from the personnel record 








How do I ... set up a new token status 

All tokens have an associated status. By default the possible status values are Usable, Damaged, Lost, 

Not Returned and Stolen. Additional statuses can be created for information purposes. 

For a token to permit access at a reader, it must have a status of Usable. All other values will prevent 

the token from being used. The status will appear on the screen when the token is selected and will 

be shown in the Control Centre when an event related to this token occurs. This enables security 

personnel to see at a glance if a token is being used when it shouldn't be. 

To create a new token status 

1. Choose Access Control > Token Management > Token Status. 



4. In the Description field enter a name for the new token status. 

5. Click Save. The new token status can be set on the token page. 

Any status other than Usable is shown on the main Token screen in red, for example: 



See also 









SATEON enables the printing of tokens at specific printers. Card designs are held as SSRS reports; 

they can contain personal data from the SATEON database such as name, employee number, 

department, photos, etc. They can also include standard text and graphics such as company names 

and logos. 

Before you can print a token from the Token page, the printer you are using must already have been 

configured in the System Settings > Token Printing options. One sample design for personnel cards is 

included in SATEON: if you want to change this or set up alternative designs this must be done 

outside SATEON, for example using Report Builder. Contact Technical Support for a Technical Bulletin 

that explains this process. 

Note: The card printer you are using may have its own requirements and restrictions. 

To print a token 


2. In the Filter pane, choose the token you want to print. 

3. Click Print Token at the top of the page: 


5. Choose the appropriate design from those available; select a printer from those that have been 

configured. 

6. Click Print. 

Note: You can also print a token for a specific person from the Personnel page by 

clicking Print Token. 



See also 



How do I ... print a token from the Personnel page 



Managing access to locations 

About access management 

Fundamentally, access management is about defining which personnel can access certain buildings, 

areas and parts of a building. This is achieved by setting up access permissions, which define groups 

of readers that permit the same access, and assigning them to people. 

Each reader on the system belongs to a reader group, normally the name of the area to which the 

reader controls access (such as Accounts, Maintenance, Directors’ Offices). Personnel are then 

associated with a specific reader group which will allow them access to each of the readers within 

that group. 

Note the following terms: 

• A reader group is a group of one or more readers that manage specific access. Reader groups 

are normally given the name of the area to which the readers control access: for example, 

Warehouse or Accounts. 

• An access permission is a single reader group associated with a single time zone and a system 

mode. For example, “Car Park – Weekends – Normal Mode”. 

• An access group is a group of one or more access permissions and can be assigned to any 

person on the system. 

For example, a single access group could contain the following access permissions: 

• Car Park – Weekends - Normal 

• External Doors – Weekends - Normal 

• Works Office – Weekends - Normal 

Several access groups can be linked together as access sets – these are optional but if you have a 

complicated system to set up they may be helpful. 

In order to set up access rights you must first create the constituent parts: reader groups, time zones 

and system modes. You can view and set up this information by choosing the Action/Group 

Management option from the main Access Control page. 



You can then set up the access groups. You can view and set up this information by choosing the 

Access Management option on the main Access Control page: 


Define the areas/buildings a person can access 

Restrict the times that personnel can access an area 

Set up a new access group 

Set up an access set 

Set up a new reader group 

Set up a new time zone 

Set up a system mode 

Grant specific access to a person 

Set up a secured area 



How do I ... define which areas/buildings a person can 

access 

Defining the access that a particular person is permitted involves several steps. You need to do the 

following: 

• Create reader groups for readers that will control access to areas with different requirements. 

For example you may have a group of readers called External Doors for the main doors to the 

building, another called Office for all normal internal doors and a third for Secure Area which 

will be restricted to just a few people. See How do I ... set up a reader group 

• Create time zones that define times that personnel can gain access through doors. For example 

you could have a time zone called Normal Office Hours which permits access between 8:00 and 

18:00 Monday to Friday, and another one called Weekends which permits access at any time on 

Saturday and Sunday and would be restricted to security staff. See How do I ... set up a time 

zone 

• Create system modes that define the situations in which personnel can gain access. For example 

you could have a Normal Use mode which would apply in normal working hours, and an 

Emergency mode that would apply if an alarm was activated. See How do I ... set up a system 

mode 

• Create access groups which categorise the access you want. Each access group can be assigned 

to any person on the system and consists of one or more individual access permissions. An 

access permission defines the reader group, time zone and mode. See How do I ... set up a new 

access group 

• Grant specific personnel access to the access group. Once this is done, the person's tokens will 

work at the readers within the reader groups, at the times specified in the time zones and when 

the specific modes are operational. See How do I ... grant specific access to a person 

• If you want to control and monitor the number of people entering and exiting a specific area, 

you need to set up secure areas, controlled by specific entry and exit readers. Areas can also be 

used to implement anti-passback measures. See How do I ... set up a secured area 

See also 

How do I ... restrict the times that personnel can access an area 

How do I ... set up a new access group 

How do I ... set up an access set 

How do I ... set up a new reader group 

How do I ... set up a new time zone 

How do I ... set up a system mode 


How do I ... set up a secured area 



How do I ... restrict the times that personnel can access 

an area/building 

You can restrict the times that personnel can access a site/building or area by creating time zones 

that define times that people can gain access through doors. 

For example you could have a time zone called Normal Office Hours which permits access between 

8:00 and 18:00 Monday to Friday, and another one called Weekends which permits access at any 

time on Saturday and Sunday and would be restricted to security staff. 

If you want to restrict access to a single individual or a small group you could set up an access group 

and assign it to that person. 

See also 

How do I ... define the areas/buildings a user can access 



How do I ... grant specific access to a user 




An access group is a group of one or more access permissions and can be applied to any person on 

the system to define their access. 

As part of setting up a new access group you can create new access permissions. 

To create a new access group 

1. Choose Access Control > Access Management > Access Groups 




Description 

Access Start 

Access End 

Name of this access group. We recommend that you use a name that 

indicates what the access group does, such as First Floor – security staff. 

Start date and time of the access period (optional). Either type in a date 

and time or click the calendar control to select a date and time. 

End date and time of the access period (optional). Either type in a date 

and time or click the calendar control to select a date and time. 


6. To add the individual access permissions that form this access group, click the Manage 

Permissions button: 



7. The following screen appears: 

8. Any access permissions already set up are listed in the lower part of the page. 

If you need to add a new access permission, choose a reader group, time zone and system mode 

from the drop-down lists at the top of the page and click Add Permission to include it in the 

access group. 

9. Click Done to save the changes. 

See also 

How do I ... define the areas/buildings a person can access 








How do I ... set up a new access set 

An access set is a collection of access groups. You can use access sets if you want to assign multiple 

access groups to a person. 

To create a new access set 

1. Choose Access Control > Access Management > Access Sets. 




Description 

Name of this access set. We recommend that you use a name that indicates 

what the access group does, such as Full access – security staff. 



5. The Available access groups box lists all groups that are not currently in the access set. To 

include these in the current access set, select them and click the right-arrow button: 

6. Click Save to save the new access set. 

Note: If access sets are amended, the changed access is not applied to the appropriate 

users until access is reapplied. 

See also 









How do I .... set up a reader group 

A reader group is a set of readers that control access to an area. Reader groups are normally given 

the name of the area to which the readers control access, for example, Car Park, First Floor, 

Accounts, and so on. 

Every reader belongs to a reader group which is used when assigning access to personnel. A reader 

cannot be a member of more than one group, but it is possible to have a reader group with only one 

reader in it. 

Note: Before creating reader groups, you must have set up the readers. See How do I ... 

set up a new reader 

To create a reader group 

1. Choose Access Control > Action/Group Management > Reader Groups. 


3. The following page is displayed: 



4. On the Basic tab, enter the following: 

Description 

Name of this reader group. We recommend you give it a name that indicates 

its location and purpose, such as First Floor. 

5. The Readers not in a group box lists all readers that are not currently allocated to a group. To 

include a reader in the current group, select it and click the right-arrow button: 


See also 




How do I ... set up a reader 



How do I ... set up a time zone 

A time zone defines the periods during which personnel can gain access through doors. For example 

you could have a time zone called Normal Office Hours which permits access between 8:00 and 

18:00 Monday to Friday, and another one called Weekends which permits access at any time on 

Saturday and Sunday and would be restricted to security staff. 

Each time zone record consists of the seven days of the week with up to three time periods for each 

day, although for most time zones you will only need to define one period per day. 

Two time zones are included by default in the system – All the Time and Never. 

Time zones are used when setting up access groups which categorise the access you want. When 

these access groups are assigned to users they define the readers and doors that the personnel can 

use and at what times. 

Time zones can also be used when setting up actions. For example, you could set up an action that 

automatically unlocks doors during certain time zones. 

To create a new time zone 

1. Choose Access Control > Action/Group Management > Time Zones. 

2. Click the Add button at the bottom of the Filter pane. 





Description 

Name of this time zone. We recommend you give it a name that indicates its 

purpose, such as Office Hours. 

5. Under Period 1, set a Start time and Stop time for each day of the week. Enter all times in the 

format hh:mm (using 24 hour clock). 

6. If more than one time period is required on the same day, you can enter further Start and Stop 

times for Period 2 and Period 3. You can set up to three time periods for each day. 

Note: A Start time of midnight is 00:00 and a Stop time of midnight is 24:00. 

7. Click Save to save the record. 

See also 

How do I ... restrict the times that personnel can access an area 


How do I set up an action 




System modes are a means of making rapid changes to the way in which SATEON operates without 

having to make substantial changes to the programming of individual tokens, actions or time zones. 

For example, your site could usually be set to Normal mode, requiring all personnel to badge in and 

out, but switch to Emergency mode in the case of a fire alarm, allowing all external and fire doors to 

be unlocked with a single action. 

System modes are used when setting up access groups which categorise the access you want. When 

these access groups are assigned to personnel they define the readers and doors that the person can 

use and in what situations. For example, system modes allow you to ensure that access through 

certain doors is only permitted in the case of emergencies. 

System modes can also used be when setting up actions. For example, you could set up an action 

that automatically unlocks doors when a certain system mode is active. 

Note: System modes should generally reflect when you want something to happen or to 

be enabled, rather than when you want something not to happen or to be disabled. 

To create a new system mode 

1. Choose Access Control > Action/Group Management > System Modes. 






Description 

Name of the system mode. We recommend you give it a name that 

indicates its purpose, such as Emergency. 

5. Click Save to save the new system mode. 

See also 


How do I ... restrict the times that a person can access an area 



How do I ... set up an action 




Once you have set up the access groups you can grant access to specific personnel. 

You can choose to grant access to all people or choose specific individuals. 

Note: Before granting access to a person, you should have set up all the access groups you 

need (including individual access permissions). 

To create a new access group 

1. Choose Access Control > Access Management > Access Groups. 

2. Choose the access group to assign from the Filter pane. 

3. Click the Bulk Grant User Access button: 

4. The Grant or Revoke access window appears. 



Choose All Personnel to apply the selected access group to all users; choose Select Personnel to 

choose the specific users to apply this group to: 

5. If you have chosen Select Personnel, you can set up a set of selection criteria to define the 

users. To add a search clause, click the plus icon at the right of the page: 

A set of drop-downs appears: 

− 

− 

− 

In the first drop-down, choose a field such as Employee Number, Surname or Department. 

In the second drop-down, choose a comparison expression such as Is Equal To, Starts With 

or Contains. 

In the third drop-down, enter a value to match the field against. 

This gives you a search clause, such as “Employee Number Starts with 100”, “Department Equals 

Sales”, “Surname contains th” 

To add additional search criteria, click the plus icon again. An additional blank line is displayed 

allowing you to set up a further clause. 

Choose And from the drop-down list to find people who match all of the specified clauses or 

choose Or to find people who match any of the clauses. 

6. To check the criteria you can click the Test Criteria button. The system will indicate how many 

personnel this will affect. 

7. Define the start and end of the access that applies to the selected people in the Access Starts 

and Access Ends fields. Either enter appropriate dates and times directly, or click the calendar 

button to select the date and time from the control. 

8. Click Grant Access to apply the selected access group to the defined personnel. 

9. Click Done. 

See also 


How do I ... restrict the times that a person can access an area 






How do I ... set up a secured area 

The use of areas provides a means of monitoring and controlling the number of people in specific 

physical locations. 

Areas can also be used to prevent passback violation, sometimes known as tailgating. This is when 

one or more additional people follow a legitimate token holder into an area without using their 

tokens. Anti-passback can be implemented to track whether a token is inside or outside a secure area 

and apply system rules if a violation occurs. 

To implement area control, readers must be installed at each entrance to and exit from the 

controlled area. 

If you need to maintain details of who is an area at particular times, you can record periodic 

snapshots. You can define how often snapshots are taken, by either defining the frequency of 

snapshots or the number of events occurring between snapshots. You can also specify how long 

snapshots are retained in the system. 

To create a new area 

1. Choose Access Control > Area Managements > Areas. 






Description 

Comms Engine 

Timeout Period 

Forgiveness 

Maximum 

Occupancy 

Minimum 

Occupancy 

Enforced 

Offline 

Local 

Name of this area. We recommend you give it a name that indicates its 

purpose. 

Choose the comms engine responsible for managing this area. 

This value determines how long a person can be in this area for before they are 

removed. 

This value is used to clear all tokens from an area at a set time each day. 

At the specified time, any token present within an area is removed and 

deemed to be of unknown whereabouts by the system. 

Specify the maximum number of people that are permitted in this area. 

Leave it blank if there is no maximum. 

Specify the minimum number of people that are permitted in this area. 

Leave it blank if there is no minimum. 

When this checkbox is selected, anti-passback rules are enforced. 

When this checkbox is selected, anti-passback will not be enforced by 

the panel if it cannot communicate with the main SATEON server. When 

the panel comes back on-line, its anti-passback status is automatically 

updated. 

When this checkbox is selected, the anti-passback status will only be 

held in the local panel. This is used if there is only one door into an area 

and the In and Out readers are on the same panel. In this case other 

panels do not need to know the real-time status of this area, which 

saves system traffic. 

5. On the Advanced tab, enter details about snapshots, if you need to maintain a historical record 

of the people in an area at particular times. The snapshot can be based on either a time period 

or a number of events. 



Snapshot Period 

Snapshot Period 

Events 

Retention Period 

How often a snapshot (recording details of the people in area) is taken. 

The number of events recorded in each snapshot. When this number of 

events has occurred, the snapshot is saved and a new one started. 

How long the snapshot data is retained. 

Note: The accuracy of the snapshot reporting can be improved by increasing the 

frequency of the snapshots. However, this has an impact on the storage 

requirements, so some testing may be required to discover the optimum settings. 

6. On the Entry Readers tab, you can define the readers that control entry into this secure area. 

The Available Readers box lists all readers that are available to be assigned. The Current Entry 

Readers box on the right lists the readers that are assigned to control entry to this area. To 

move readers between lists, select them and click the arrow buttons: 

7. On the Exit Readers tab, you can define the readers that control exit from this secure area. 

The Available Readers box lists all readers that are available to be assigned. The Current Exit 

Readers box on the right lists the readers that are assigned to control exit from the area. To 

move readers between lists, select them and click the arrow buttons: 

8. Click Save to save details of the new area. 

See also 



How do I ... set up a new reader 




Managing the system hardware 

About the system hardware 

This section describes how to set up the information related to system hardware – including the 

comms engines, field networks, panels, readers, doors, inputs and outputs on the system. 

Note: The hardware details are normally set up by an installer or engineer when the 

system is first installed and configured, and often do not require any changes. However in 

some cases you may need to make amendments at a later date. 

When setting up system hardware, you may need to configure the following: 

• The sites, which define your access control locations. A site is a logically separate access control 

location. 

• The comms engines, which are the elements that communicate with and configure the 

hardware panels. 

• The field networks (comms lines) that connect the panels to the main computer. (IP-connected 

panels do not need field networks as they connect directly via the IP network.) 

• The ports that the field networks are connected to. 

• The panels (sometimes called controllers or boxes) – the IDCs, IPCs and EZ panels within the 

system, which are the intelligent devices that control doors and peripherals. 

• The doors that can be opened by the access control system. 

• The readers that control access to an adjacent door. 

• The devices that provide inputs to the system, such as fire alarm sensors or passive infrared 

detectors. 

• The outputs that trigger devices such as lighting systems or alarms. 

You can view details of the physical system by choosing the Device Management option on the main 

Access Control page: 



The main Device Management page appears: 


Set up a new site 

View or amend the physical connections in a system 

Set up a comms engine 

Set up a field network and port 

Set up a panel 

Set up a door 

Set up a reader 

Set up a input 

Set up a output 

Set up an automated action 

Set up a reader-triggered action 



How do I ... set up a new site 

SATEON supports multiple sites, where each site is a single separately-managed access control 

location. Each defined site can be managed by one or more comms engines, though each comms 

engine is specific to a site. (Note that the physical location is irrelevant.) 

To create a new site 

1. Choose Access Control > Device Management > Site. 

2. Click the Add button at the bottom of the filter pane: 



Description 

Site Code 

Organisation 

Name of this site. We recommend you give it a name that indicates its 

purpose and/or location. 

A unique code to identify this site. 

Choose from drop-down list; not used in this version. 

5. Click Save to save this site. 

See also 

How do I ... set up a new comms engine 

How do I ... set up a new panel 


How do I ... set up a new door 

How do I ... set up a new input 

How do I ... set up a new output 



How do I ... set up the physical connections in the 

system 

When setting up the hardware in SATEON, you do not have to do it in a particular order. You may 

find it easier, for example, to set up all the panels, readers and doors separately and then set up the 

connections between them. 

The easiest way of viewing and updating connections between hardware elements is via the Manage 

Local Devices page, which you can access from the following pages: 

• Field Network 

• Panel 

• Door 

To view physical connections 

5. Choose Access Control > Device Management and choose the appropriate Field Network, Panel 

or Door. 

6. Click the Manage Local Devices button which appears at the top of each of each page: 




4. The pane on the left of the page shows the elements of each type that can be assigned from this 

page, and the number that are configured and not configured. For example on a Panel page, this 

might be as follows: 

The items that appear depend on the type of device: 

− 

− 

− 

On a Field Network page you can assign Panels of different types and Ports. 

On a Panel page you can assign Readers, Doors, Inputs, Outputs and Lifts. 

On a Door page you can assign Readers. 

In each case, the numbers that appear in the red boxes indicate the number of items of this type 

that are currently unconnected, while those in white indicate the number that have already 

been connected. Therefore if all the red numbers are zeros, all items are connected. 

5. In the remainder of the page you can assign the hardware items of the specified type. For 

example, if you select Reader from the list on the left, you can view and assign readers: 

The Available box on the left lists all items of this type that are not currently assigned. The 

Connected box on the right lists the items that are assigned to this hardware element. To move 

items between lists, select them and click the arrow buttons: 



6. Click Done at the bottom of the page when all items have been assigned. 

See also 









The comms engine is the part of SATEON that communicates with and configures the hardware 

panels (door controllers and peripheral controllers). 

To create a new comms engine 

1. Choose Access Control > Device Management > Comms Engine. 




Description* 

Hostname* 

Site* 

Name of this comms engine. We recommend you give it a name that 

indicates its purpose and/or location. 

The hostname of the machine the comms engine is running on. (Note: do not 

include the http:// prefix, and do not use localhost or an IP address). 

Choose the site appropriate to this comms engine from the drop-down list of 

configured sites. 




5. Click Save to save these details. 

See also 

How do I ... set up a new field network and port 


How do I ... set up a new site 







How do I ... set up a field network and port 

For all 485-connected panels you need to set up a field network (comms line) and port to define how 

the panel is connected to SATEON. 

Note: IP-connected panels do not require a field network and port. 

To create a new field network 

1. Choose Access Control > Device Management > Field Network. 




Description Name of this field network. We recommend you give it a name that indicates its 



Note: At this point you can click Manage Connections to set up the panels and ports 

that are associated with this field network. 

To create a new port 

1. Choose Access Control > Device Management > Port. 






Description* 

Field Network 

IP Address* 

Encrypted 

Name of this port. We recommend you give it a name that indicates its 


The field network (comms line) that connects to this port. Note: If this has 

not yet been configured, you can set it later. The port will appear as 

Unassigned in the list. 

The IP address that identifies this port. 

Select this checkbox if the field network is encrypted. 

* these are required fields. 


See also 

How do I ... set up the physical connections in a system 







A panel is the hardware device that manages access to doors and other hardware. All access 

decisions are made by the panel. SATEON supports various types of panel, which may have the 

following features: 

• EZ or legacy hardware 

• Door controllers and peripheral controllers 

• 485-connected or IP-connected 

• Aperio wireless variants 

• Supporting different numbers of inputs and outputs 

For example, the EZ-IDC-E-AP is a EZ door controller, connected via IP and supporting Aperio wireless 

locks. 

Ensure you select the correct panel type as this will affect the options available. For 485-connected 

panels, you need to set up a field network and a port. Field networks do not need to be configured 

when IP-connected panels are used, since they are connected directly over the network. 

To create a new panel 

1. Choose Access Control > Device Management > Panel. 






Description* 

Panel Type 

Comms Engine 

Comment 

Mains Failure 

Poll 

Interlock 

Name of this panel. We recommend you give it a name that indicates 

its purpose and/or location. For example, a recommended naming 

convention may be Building-Level-Location-Enclosure-ID. 

Select the appropriate panel type from the drop-down. 

Select the comms engine that controls this panel. 

You can specify any free-text here; for example the physical location 

of the panel. 

Define how long the mains power can be disconnected before an alert 

is raised. 

When selected, this checkbox indicates that the panel is to be polled 

by the system. In normal use this would be selected, but during set-up 

and commissioning you can clear the checkbox to avoid alarms being 

raised if the panel is not communicating with the comms engine. 

When selected, this checkbox indicates that the two doors controlled 

by this panel are never to be unlocked at the same time by valid 

tokens. 

The following fields appear for 485-connected panels, which require a field network and port to 

be set up: 

Field Network 

Address 

Choose the field network for this panel from a drop-down list. Note: If 

this has not yet been configured, you can set it later. The Panel will 

appear as Unassigned in the list. 

The Address is an identification number that identifies the field 

network to the system. The number you enter here has to be set on 

the panel hardware itself. 

The following fields appear for IP-connected panels which are connected via their IP address. 

Address 

Encrypted 

The IP address of this panel. Note: If this has not yet been configured, 

you can set it later. The Panel will appear as Unassigned in the list. 

When selected, communications between the panel and the comms 

engine are encrypted. 


5. Click Save to save this panel. 



See also 



How do I ... set up a new field network and port 





Hardware defaults 




Doors are used to enter and exit a site, building or area. Doors are associated with one or two 

readers (there may be a reader on each side of a door). 

A door is controlled by a panel, so as part of setting up the door you need to define the panel that 

manages it. However if you wish you can set up the door and connect to the panel later. 

To configure a door 

1. Choose Access Control > Device Management > Door. 




Description* 

Name of this door. We recommend you give it a name that 

indicates its purpose and/or location. Follow the naming 

conventions agreed by your organisation, such as Building-Level- 

Location-Enclosure-ID. 



Panel 

Address 

Unlock Output Group #1 

Unlock Output Group #2 

Sounder Output Group 

Unlock Period 

4-State Supervision 

Exit Switch 

Indicate Valid on sounder 

Choose the panel that manages this reader from the drop-down. 

Note: If this has not yet been configured, you can set it later. The 

Door will appear as Unassigned in the list. 

Choose an address – either 1 or 2, depending upon which set of 

terminations is being used at the panel for this door. 

This field defines when the doors are unlocked. If you want doors 

to be opened automatically by triggering an action, you can choose 

the output group from the drop-down list. Leave this blank if the 

door is to be unlocked at all times. 

This field defines an additional output grou. 

This field defines a output group that will operate a sounder when 

the door is opened. Leave this blank if this is not required. 

The length of time that the relay controlling the door lock will 

activate when access is granted. Hardware default = 5 seconds 

If the door sensor is wired with line monitoring/supervising 

resistors, select this checkbox. 

Select this checkbox if this door is controlled by an exit switch. 

Select this checkbox to operate a local alarm sounder whenever a 

valid token is used at this door. 

Indicate Invalid on sounder Select this checkbox to operate a local alarm sounder if an attempt 

is made to use a token that does not have permission for this door. 


5. The Sensor Settings tab allows you to configure an associated sensor, where present: 



Door Sensor 

Maximum Open Period 

Minimum Open Period 

Open Reminder Period 

Indicate Wedged 

Interlocked 

Select this checkbox if the reader has an associated sensor used to 

monitor whether the door is open or closed. Additional fields are 

enabled when this is selected. 

The maximum length of time that the door sensor can be open 

before the door is deemed to be wedged open. Hardware default = 

30 seconds 

The minimum length of time that the door sensor is allowed to be 

open. Hardware default = 3 seconds 

If the door sensor is in an active state for longer than the length of 

time you type here, a reminder will be displayed. The sensor may 

be faulty. Enter Continuous if you never want a reminder. 

Select this checkbox to operate a local alarm sounder if the door 

sensor indicates that the door remains open after a valid token 

read for more than the length of time specified in the Maximum 

Open Period field. 

This checkbox indicates if the interlock feature is set on the panel. 

If this is the case the two doors on the same panel cannot be 

unlocked at the same time. 



Indicate Forced 

Relock On Open 

Select this checkbox to operate a local alarm sounder if the door 

sensor indicates that the door has been opened without either a 

valid token presentation or the exit button being pressed. 

Select this checkbox if you wish the lock to re-lock when the door 

sensor detects that the door has opened. This can prevent the door 

bouncing open if the door closer is too strong. Do not select this 

option if the lock is a magnetic type and the door sensor is the 

type that detects the completion of the magnetic circuit. 

6. Click Save when you have set up the door. 

See also 










A reader is a device that controls access to an adjacent door. Readers come in a variety of types: 

swipe cards, contactless proximity, biometric, PIN based, and so on, and there is a wide range of 

manufacturers. They are sometimes known as card readers even if cards are not used. 

A reader is controlled by a panel, so as part of setting up the reader you need to define the panel 

that manages it. However if you wish you can set up the reader and connect to the panel later. 

Two readers can be attached to a door, one in and one out. 

To configure a reader 

1. Choose Access Control > Device Management > Reader. 



4. On the Basic tab, enter the following fields. 

Description* 

Name of this reader. We recommend you give it a name that indicates 

its purpose and/or location. A recommended naming convention is 

Location-IN/OUT. 

Reader Format Type* Choose the type of reader from the drop-down list, which is populated 

by various types and technologies available. 



Reader Group 

Panel 

Address 

Door 

Extend Unlock 

If you have already set up reader groups, you can choose the 

appropriate one from the drop-down list. (You can add this later if you 

haven’t set up groups yet. See How do I ... set up a reader group) 

Choose the panel that manages this reader. Note: If this has not yet 

been configured, you can set it later. The Reader will appear as 


The address is either 1 or 2, depending upon which set of terminations 

is being used at the panel for this reader. 

Choose the door that is controlled by this reader. The drop-down is 

populated by all the doors attached to this panel. 

When this checkbox is selected, indicates that an extended unlock 

period is permitted at this reader/door. 


5. The Indicator Periods tab is used to specify the length of time you want the LED/sounder to 

operate in various situations. Defaults apply: 

Sounder Periods 

Valid Period 

Invalid Period 

Wedged Indicator 

Period 

Length of time that the sounder is to operate when a valid token is 

presented. A valid token is one that is assigned to a person and is 

within a valid date/time range. Hardware default = 0.2 second. 

Length of time that the sounder is to operate when an invalid token is 

presented. Hardware default = 2 seconds. 

Length of time that the sounder is to operate when the associated 

door is wedged open. Hardware default = 10 seconds. 



Forced Indicator 

Period 

Length of time that the sounder is to operate when the associated 

door has been forced. Hardware default = 10 seconds. 

Token Output Periods 

Valid LED Period 

Invalid LED Period 

Length of time that the LED illuminates when a valid token is 

presented. A valid token is one that is assigned to a person and is 

within a valid date/time range. Hardware default = 3 seconds. 

Length of time that the LED illuminates when an invalid token is 

presented. Hardware default = 5 seconds. 

6. The Keypad tab allows you to configure an associated keypad, where present. 

Has keypad 

Select Keypad Input 

Group 

Keypad Timeout 

Select this checkbox if the reader has an associated keypad. Additional 

fields are enabled when this is selected. 

If you want to activate this keypad by triggering an action, choose the 

action from the drop-down list. Leave this blank if the keypad is to be 

active at all times. 

Specify the length of time that the keypad should allow for a valid PIN 

to be entered. Hardware default = 30 seconds. 

7. The Advanced Security tab allows you to configure additional features, including escort reader 

options and location verification. 



Escort Reader Group 

Escort Reader Group 

Timeout Period 

Escort Reader 

Static Escort 

Verification Reader 

This field is used for high security doors where two tokens must be 

read before the door will unlock. This is often referred to as a Dual 

Read. When a token that has permission for the primary reader group 

is read, the LED is activated for a specified time without unlocking the 

door. During this time a second token must be read before the door 

will unlock. The second token must have permission for the Escort 

Reader Group. Leave this field blank if the door is to unlock with one 

token. 

Note: The Escort Reader Group can be the same as the primary reader 

group but the door will only unlock if two different tokens with 

suitable permissions are used. 

Where a Dual Read is required, this field specifies the timeout for the 

second read. Hardware default = 10 seconds. 

Select this checkbox if you want this reader to be an escort reader. If a 

user is recorded as Is escorted, it will also require a host token valid 

for the reader’s Secondary Reader Group to be presented. If not, the 

door will not unlock. 

Select this checkbox if the escorting token is read but the escorting 

person does not pass through the door. 

If area management is being used, the escorting person remains in the 

original area, while the primary person will be counted in the new 

area. 

This checkbox allows you to specify that this reader is a verification 

reader – used to confirm the location of a user. 

8. Click Save to save the new reader record. 



See also 






How do I … set up an output group 

How do I ... set up an automated action 

How do I ... set up a reader group 



How do I ... set up an input 

You need to set up all input devices on the system such as external contacts and passive infrared 

detectors (PIRs). The possible number of inputs that can be configured per panel depends on the 

panel type. 

Inputs are used when setting up actions. When an input activates it can trigger one or more outputs 

to change state. 

To set up an input 

1. Choose Access Control > Device Management > Input. 






Description* 

Input Type 

Input Group 

Panel 

Address 

4-State Supervision 

Normally Open 

Sense Period 

Name of this input. We recommend you give it a name that indicates its 


Select the type of input. The choices available are: 

Normal – for a normal input switch or ‘dry’ contact. 

PIR – This type is used primarily for PIR detectors and is used to prevent 

multiple alarms occurring for the same event. This input type will only 

report once in each time period after the initial alarm has been 

detected. 

Output – this triggers the equivalent output on the same panel for a 1 

second pulse. For example, if input 5 is activated, output 5 on the same 

panel would be pulsed for 1 second. 

If you have already set up input groups, you can choose the group that 

this input is a member of from the drop-down. (You can add this later if 

you haven’t set up groups yet.) 

Choose the panel that manages this input from the drop-down. Note: If 

this has not yet been configured, you can set it later. The Input will 

appear as Unassigned in the list. 

Choose an address for this input, depending on the termination in the 

panel. 

Select this checkbox if the contact is wired with end-of-line resistors to 

monitor for circuit tamper and fault. 

Select this checkbox if the input is normally in an open or on state 

Enter the length of time to wait after an input becomes active before 

generating an alarm. Hardware default = 0.2 seconds. 

Activate Description Enter the text that is to be reported when this input is activated. 

Defaults to Activated. 

Reset Description 

PIR Inhibit 

PIR Active 

Enter the text that is to be reported when this input is reset. Defaults to 

Reset. 

Used for PIR detectors. Defines the length of time that the input will be 

inhibited after an initial alarm. The default time is 30 seconds. 

Used for PIR detectors. If a PIR remains in the active state for the length 

of time entered here, it will be deemed to be faulty. The default time is 

60 seconds. 




See also 



How do I … set up an input group 






How do I ... set up an input group 

An input group is an association of inputs with similar characteristics – for example you could create 

an input group consisting of all the PIRs on the first floor. 

All input devices on the system must be a member of an input group. An input can only be a member 

of one input group. 

Input groups are required when setting up actions. When an input activates it can trigger one or 

more outputs to change state. As well as these general actions, specific actions can be set up to 

unlock doors and make keypads active. 

To configure an input group 

1. Choose Access Control > Action/Group Management > Input Groups. 






Description 

Name of this input group. We recommend you give it a name that 

indicates its purpose, such as First Floor PIRs. 

5. You can then choose the inputs that are members of this group. 

The Inputs not in a Group box lists all inputs that are not currently in a group. The Current 

Inputs box on the right lists the inputs in the current group. To move inputs between groups, 

select them and click the arrow buttons: 

6. Click Save when you have set up the members of this input group. 

See also 







How do I ... set up an output 

You need to set up all output devices that can be activated in order to trigger devices such as lighting 

systems or alarms. The possible number of outputs that can be configured depends on the panel 

type. 

Outputs are used when setting up actions. When an input activates it can trigger one or more 

outputs to change state. 

To set up an output 

1. Choose Access Control > Device Management > Output. 




Description 

Name of this output. We recommend you give it a name that indicates its 




Panel 

Address 

Output Group 

Pulse Length 

Choose the panel that manages this output from the drop-down. Note: If this 

has not yet been configured, you can set it later. The Output will appear as 


Choose an address for this input, depending on the termination in the panel. 

If you have already set up output groups, you can choose the group that this 

input is a member of from the drop-down. (You can add this later if you 

haven’t set up groups yet.) 

The length of time that this output will remain switched on when activated 

by the system. Hardware default = 1 second. 


See also 









How do I ... set up an output group 

An output group is an association of outputs with similar characteristics – for example all the alarm 

sounders can be in a single output group called Alarms. 

All output devices on the system must be a member of an output group. An output can only be a 

member of one output group. 

Output groups are required when setting up actions. 

To configure an output group 

1. Choose Access Control > Action/Group Management > Output Groups. 




Description 

Name of this output group. We recommend you give it a name that indicates 

its purpose, such as First Floor PIRs. 


See also 








You can set up SATEON so that certain actions are performed or triggered automatically. When an 

input in a specified input group activates it triggers the outputs within a specified output group to 

change state. 

You must already have set up the time zones, system modes, input groups and output groups that 

you need. 

To set up an action 

1. Choose Access Control > Action/Group Management > Actions. 




Description* 

Name of the action to be set up. 



System Mode* 

Timezone* 

Input Group* 

Output Group* 

Output Period 

Choose a system mode from the drop-down list. This means the 

action can only be triggered when this mode is active. 

Choose a time zone from the drop-down list. This means the 

action can only be triggered during the times specified in this 

time zone. 

Choose the input group that will trigger the outputs. 

Choose an output group that will be triggered. 

Choose one of the following to specify how long the output will 

be activated: 

Preset – Select this option if you want each output in the group to 

be switched on for the time specified in its Pulse Length field. 

Preset – Cancel on Input reset – Select this option if you want 

each output in the output group to be switched on for the length 

of time specified in its Pulse Length field, or until the input group 

ceases to be active, whichever is soonest. 

Follows Input – Select this option if you want each output in the 

group to be switched on while the input group is active, and off 

while the input group is inactive. 


See also 







How do I ... set up a reader-triggered action 

You can set up SATEON so that an specific output can be triggered automatically when a valid read 

occurs at a specific reader. This enables system actions to be related to a particular person's access 

rights. 

You must already have set up the readers, reader groups and outputs that you need. 

This feature can in many situations, for example: 

• Controlling lifts: If a person presenting a token at a reader has valid permissions for the defined 

reader group, an output will operate, enabling a floor button in the lift. 

• Area management, such as in car parks. A reader action will be able to put a person into an area 

and/or out of an area. If a person presenting a token has valid permissions for the defined 

reader group, they will be marked as being in/out of the specified area. If an area is marked as 

Enforced and the person fails anti-passback, the area details will not be updated and the 

associated output will not be triggered. 

In addition, an event can be raised when the reader action occurs. 

To set up a reader-triggered action 

1. Choose Access Control > Action/Group Management > Reader Actions. 






Description* 

Reader* 

Reader Group* 

Entry Area 

Exit Area 

Name of the reader action to be set up. 

Choose a reader from the drop-down list. The action will be triggered 

when a valid read occurs at this reader. 

Choose a reader group from the drop-down list. The person must have 

valid permissions for this reader group. 

For area management, choose the area that the person will be marked 

as entering on a valid card read. If the Entry Area Enforce Limits 

checkbox is set, area limits are enforced. 

For area management, choose the area that the person will be marked 

as exiting on a valid card read. If the Exit Area Enforce Limits checkbox 

is set, area limits are enforced. 



Output 

Raise Event 

Where required, select the output that will be triggered when a valid 

read occurs. 

Select this checkbox if an event is to be raised when this reader action 

occurs. (Note that it is then possible to use the command invoker to 

control a particular piece of hardware.) 



See also 







Appendix A 

Hardware defaults summary 

The following defaults apply to all hardware within SATEON, and are set in the firmware. 

Panel Hardware Defaults 

Name Type Default 

Mains Input 10 minutes 

Tamper Input 0.1 second 

Power Input 0.1 second 

Low Battery Input 1 second 

PSU monitor Input 1 second 

Lock power fails Input 1 second 

Low 5 volts Input 1 second 

Ext power Input 1 minutes 

Offline Timer 1 hour 

Xport power Timer 2 seconds 



Door Hardware Defaults 


Door Sensor Input 0.3 second 

Exit switch Input 0.1 second 

Lock Output 5 seconds 

Min Open Period Timer 3 seconds 

Max Open Period Timer 30 seconds 

Interlock Output 0.2 second 

Alarm State Timer 15 minutes 

Sensor Fault Input 0.2 second 

Reader Hardware Defaults 


PIN timeout Timer 30 second 

Readertimeout Timer 10 second 

Valid LED Output 3 seconds 

Sound Invalid Output 2 seconds 

Sound Forced Output 10 seconds 

Sound Wedged Output 10 second 

Sound Valid Output 0.2 seconds 

Invalid LED Output 5 second 



Input Hardware Defaults 


Sense Time Input 0.2 second 

Min Timer 30 seconds 

Max Timer 1 day 

Fault Input 0.4 seconds 

Tamper Input 0.2 seconds 

Action Input 0.1 seconds 

Output Hardware Defaults 


Period Output 1 second 

See also

Using Access Control.pdf

Create successful ePaper yourself

Delete template?

Save as template?