Ccure-9000-V2 0-Webclient-Guide Ra0 LT en

C•CURE
9000
Version 2.0
Web Client User Guide

REVISION A0
6 Technology Park Drive

Westford, MA 01886-3140
http://www.swhouse.com
Fax: 978-577-4392 Phone: 978-577-4000
Copyright and Trademarks
C•CURE and Software House are registered trademarks of Tyco International Ltd. and its
respective companies.
The trademarks, logos, and service marks displayed on this document are registered in the
United States [or other countries]. Any misuse of the trademarks is strictly prohibited and Tyco
International Ltd. will aggressively enforce its intellectual property rights to the fullest extent of
the law, including pursuit of criminal prosecution wherever necessary. All trademarks not
owned by Tyco International Ltd. are the property of their respective owners, and are used with
permission or allowed under applicable laws.
Product offerings and specifications are subject to change without notice. Actual products may
vary from photos. Not all products include all features. Availability varies by region; contact
your regional sales manager.
Software version: 2.0

Document Number: UM-227
Revision Number: A0
Release Date: January 2011
This manual is proprietary information of Software House. Unauthorized reproduction of any

portion of this manual is prohibited. The material in this manual is for information purposes
only. It is subject to change without notice. Software House assumes no responsibility for
incorrect information this manual may contain.
© Copyright 2002 - 2011 by Tyco International Ltd. and its respective companies.
All rights reserved.
Table of Contents
Preface 7
How to Use this Manual 8
Finding More Information 9
Manuals 9
Online Help 9
Windows Help 9
Conventions 10
Chapter 1 - Introduction 11
About the C•CURE 9000 Web Client 12
For More Information 12
System Requirements 13
Web Client Configurations 14
Local Web Client Configuration 14
Remote Web Client Configuration 14
Remote Web Client Through Remote IIS Server Configuration 15
Web Client in a Workgroup 16
Installing the Web Client 18
Licensing the Web Client 22
Enabling SSL Encryption for the Web Client 23
About Certificates and Trusted Sites 23
Setting Up SSL Encryption 24
Importing the SSL Certificates into Your IIS Web Server 24
Enabling SSL on Your IIS 5.10 or 6.0 Web Server 28
Enabling SSL on Your IIS 7.0 Web Server 31
Configuring SSL Options on your IIS 5.10 or 6.0 Server 33
Web Client Configuration for Windows 2008 Server 34
Chapter 2 - Getting Started 43
Getting Started with the C•CURE 9000 Web Client 44
C•CURE 9000 Web Client User Guide 3

Understanding Operator Privileges and Partitions 46
Audit Trail for Web Client Updates 47
Exiting from the Web Client 48
Automatic Logoff 48
Troubleshooting 49
Installation 49
Starting the Web Client 50
Using the Web Client 51
Accessing Help 52
Help Toolbar 52
Next Steps 53
Chapter 3 - Personnel 55
Editing Personnel 56
Accessing the Personnel Editor 57
Next Steps 58
Searching for Personnel 60
Creating a New Personnel Record 62
Deleting Personnel Records 64
Personnel General Tab 65
Personnel General Tab Definitions 65
Personnel Credentials Tab 68
Personnel Credentials Tab Tasks 68
Personnel Credentials Tab Definitions 69
Adding a Credential to a Personnel Record 74
Editing a Personnel Credential 75
Personnel Clearances Tab 76
Personnel Clearances Tab Tasks 76
Personnel Clearances Tab Definitions 76
Adding a Clearance 78
Removing a Clearance 81
82
Enterprise Architecture Differences 82
Personnel Customer Tab 83
Personnel Customer Tab Definitions 84
Editing Personnel Customer Data 85
Personnel Customer Extended Tab 86
Personnel Customer Extended Tab Definitions 87
Personnel Previous Doors Tab 88
Personnel Previous Doors Tab Definitions 88
4 C•CURE 9000 Web Client User Guide

Editing in an Application Server Enterprise Environment 90
Chapter 4 - Dynamic Views 91
Using Dynamic Views 92
More Information About Dynamic Views 94
Accessing a Dynamic View 96
Next Steps 97
Credential Objects 98
Manual Actions 99
Manual Actions for Doors 99
Manual Actions for Events 100
Manual Action Challenge 100
Dynamic View Definitions 102
Manual Actions Context Menu for Doors 102
Manual Actions Context Menu for Events 102
Chapter 5 - Reporting 105
Reports 106
Activity Journal Reports 106
Audit Log Reports 108
Report Output Features 108
Chapter 6 - Monitoring 111
Monitoring Activities 112
More Information About Monitoring Activities 113
Activity Viewer Icons and Messages 114
Activity Viewer Icons 114
Activity Viewer Messages 114
Freezing the Activity List 115
Index 117
C•CURE 9000 Web Client User Guide 5

6 C•CURE 9000 Web Client User Guide
Preface
The C•CURE 9000 Web Client User Guide is for new and experienced security system users who want
to learn to use the C•CURE 9000 Web Client for the C•CURE 9000 Security Management System.
In this preface
• How to Use this Manual 8

• Finding More Information 9
• Conventions 10
C•CURE 9000 Web Client User Guide Preface 7

How to Use this Manual
How to Use this Manual

This manual contains chapters that provide the following information about the C•CURE 9000 Web
Client.
Chapter 1: Introduction
Provides basic information about the C•CURE 9000 Web Client.
Chapter 2: Getting Started

Explains how to sign on to and exit from the Web Client.
Chapter 3: Personnel
Explains how to use the Web Client to view and Edit Personnel in
C•CURE 9000.
Chapter 4: Dynamic Views

Describes how to use the Web Client to show Dynamic Views that list security objects in C•CURE
9000.
Chapter 5: Reporting
Describes how to run C•CURE 9000 reports using the Web Client.
Chapter 6: Monitoring
Describes how to monitor C•CURE 9000 activities using the Web Client.
8 Preface C•CURE 9000 Web Client User Guide

Finding More Information
Finding More Information

You can access C•CURE 9000 manuals and online Help for more information about C•CURE 9000.
Manuals
C•CURE 9000 software manuals and Software House hardware manuals are available in Adobe
Portable Document Format (PDF) on the C•CURE 9000 DVD.
You can access the manuals if you copy the appropriate PDF files from the C•CURE 9000
Installation DVD English\Manuals folder and install the Adobe Acrobat reader. Adobe Acrobat
Reader can be installed from the C•CURE 9000 Installation DVD English\Reader folder.
The available C•CURE 9000 and Software House manuals are listed in the C•CURE 9000 Getting
Started Guide Product Guides and Help section, and appear as hyperlinks in the online.pdf file on
the C•CURE 9000 DVD English\Manuals folder.
These manuals are also available from the Software House Member Center website
(http://membercenter.swhouse.com/home/default.aspx).
Online Help
You can access C•CURE 9000 Help by pressing F1 or clicking Help from the menu bar in the
Administration/Monitoring Station applications.
Windows Help
You can get help for the Windows products by selecting Help from the specific Windows Start menu
or by going to the Microsoft web site at www.microsoft.com.
C•CURE 9000 Web Client User Guide Preface 9

Conventions
Conventions
This guide uses the following text formats and symbols.
Convention Meaning
Bold Bold text describes one of the following items:

• A command or character to type
• A button or option on the screen to press
• A key on your keyboard to press
• A screen element or name
Italic Indicates a new term.
<text> Indicates a variable.
The following items are used to indicate important information.
Indicates a note. Notes call attention to any item of information that may be of
NOTE special importance.
Indicates an alternate method of performing a task.

TIP
Indicates a caution. A caution contains information essential to avoid damage to the

system. A caution can pertain to hardware or software.
Indicates a warning. A warning contains information that advises users that failure
to avoid a specific action could result in physical harm to the user or to the
hardware.
Indicates a danger. A danger contains information that users must know to avoid
death or serious injury.
10 Preface C•CURE 9000 Web Client User Guide

1
Chapter 1 - Introduction
This chapter introduces the C•CURE 9000 Web Client, which provides access to Personnel, Activity
Monitoring, and Dynamic Views of security objects in the C•CURE 9000 database through a web
browser.
In this chapter
• About the C•CURE 9000 Web Client 12

• System Requirements 13
• Web Client Configurations 14
• Installing the Web Client 18
• Licensing the Web Client 22
• Enabling SSL Encryption for the Web Client 23
C•CURE 9000 Web Client User Guide Chapter 1 11

About the C•CURE 9000 Web Client
About the C•CURE 9000 Web Client

The C•CURE 9000 Web Client lets you access the C•CURE 9000 database through your web
browser.
You can:
l View and edit Personnel - see Editing Personnel on Page 56
l View Dynamic View lists of security objects - see Using Dynamic Views on Page 92.
l View Monitoring Station Activities - see Monitoring Activities on Page 112.
l Create and View Reports - see Reports on Page 106.
The C•CURE 9000 Web Client is powered by Microsoft's Silverlight 4.0 technology. Silverlight brings
a consistent web viewing experience across multiple supported browsers and platforms.
To use the C•CURE 9000 Web Client, you must have a Windows account that is registered as an
Operator in C•CURE 9000.
When you sign on to your computer with your Windows account, you are authenticated to access
C•CURE 9000 through the Web Client. By pointing your browser at the URL for the C•CURE 9000
Web Client, you can begin using the Web Client immediately.
For More Information

l Getting Started with the C•CURE 9000 Web Client on Page 44
l System Requirements on Page 13
l Installing the Web Client on Page 18
l Licensing the Web Client on Page 22
l Enabling SSL Encryption for the Web Client on Page 23
12 Chapter 1 C•CURE 9000 Web Client User Guide

System Requirements
System Requirements
To access the C•CURE 9000 Web Client from your computer, it must meet the requirements listed in
Web Client System Requirements on Page 13.
Table 1: Web Client System Requirements
Category Requirement
Client One of the following:

Operating • Windows XP Professional SP3 32-bit, Standard, Enterprise, Server, and Client
System
• Windows 2003 Standard and Enterprise SP2, 3- bit
• Vista Business and Enterprise 32-bit, Client only
• Windows 7 Professional and Enterprise, 32-bit
• Windows 2008, MAS 64-bit, SAS 32-bit, Standard, Enterprise, Server only
Browser • Microsoft Internet Explorer version 8.0 or later

• Mozilla Firefox 3.0.11 or later.
• Google Chrome 2.0.172.31 or later.
Internet Silverlight v3.0. and v4.0

Application NOTE: Silverlight v3.0 and v4.0 do not support 64-bit browsers.
C•CURE 9000 2.0 Standalone, Master Application Server, Satellite Application Server
Server
Version
Web Server The C•CURE 9000 Server your Web Client connects to must be configured to run a Microsoft Internet
Information Services (IIS) Web Server, or be connected to a system running an IIS Web Server.
IIS versions supported are 5.10, 6.0 or higher (32-bit only)

Web Client Configurations

You can use the C•CURE 9000 Web Client to access a C•CURE 9000 Server from a local or remote
PC with a Web browser, without installing additional software on the PC:
l Local Web Client Configuration on Page 14
l Remote Web Client Configuration on Page 14
l Remote Web Client Through Remote IIS Server Configuration on Page 15
l Web Client in a Workgroup on Page 16
Local Web Client Configuration

If you install the Web Client software on your C•CURE 9000 Server system, you can access the Web
Client using a monitor attached to the server by running your Web browser software and navigating
to the Web Client Home page. See Figure 1 on Page 14.
Figure 1: C•CURE 9000 Server with Local Web Client
Remote Web Client Configuration

If you install the Web Client software on your C•CURE 9000 Server system, in addition to accessing
the Web Client using a monitor attached to the server, you can also use a PC or laptop that has
network access to your C•CURE 9000 Server. See Figure 2 on Page 15.

Figure 2: C•CURE 9000 Server with Remote Web Clients
Remote Web Client Through Remote IIS Server Configuration

If you install the Web Client software on an IIS Server that is separate from your C•CURE 9000
Server system, you can access the Web Client from a PC or laptop that has network access to the
IISServer by running your Web browser software and navigating to the Web Client Home page on
the IIS Server. See Figure 3 on Page 16.

Figure 3: C•CURE 9000 Server with Remote IIS Server and Remote Web Clients
Web Client in a Workgroup

If Web Clients are used in a Workgroup, without DNS, the following steps must be performed to
allow connection to the server:
1. Add the following to the Hosts file on the SiteServer.
(C:\\Windows\System32\drivers\etc)
siteserver ip address - siteserver name
remote client ip address - remote client1 name

remote client ip address - remote client2 name
2. Add the following to the Hosts file on the Remote Client machine.
(C:\\Windows\System32\drivers\etc)
siteserver ip address - siteserver name
3. When creating an Operator in the C•CURE 9000, use the 16 character NetBIOS name of the
Remote Client in the Domain field.
Example:
Using command prompt, change the directory (cd\), then type the following in the command
prompt to list the unique NetBIOS name for a Remote Client, as well as the associated Group
name.
C:\>NBTSTAT -n
A table displays listing the NetBIOS names for your computer.

Installing the Web Client

To enable the C•CURE 9000 Web Client access to your C•CURE 9000 server, you need to install the
Web Client software on your C•CURE 9000 Server or on a system that has an IIS Web server that
can communicate to your C•CURE 9000 server.
To Install the Web Client Software
1. Insert the C•CURE 9000 installation DVD into your DVD drive. The Installation Menu appears.
2. Select Install C•CURE 9000 Web Client from the menu. The following dialog box opens.

3. The Welcome screen appears. Click Next to proceed.

4. The License agreement screen appears. You must accept the license agreement to continue with
the installation. If you choose "I do not accept the terms in the License agreement," the
installation program terminates. Review the License agreement carefully, using the scrollbar to
view the entire agreement. You can click Print to print a copy of the license agreement.
5. When you are ready to approve the license agreement and continue with Installation, click "I
accept the terms in the license agreement" and click Install.
The Server Information screen appears. The name of the C•CURE 9000 server is displayed, click
Next.
6. The Ready to Install Program screen appears. You can click Install to begin the installation.

7. The InstallShield Wizard Completed message appears indicating that installation has
completed. Click Finish to close the Install program.
If you want to enable the SSL Encryption option, see Enabling SSL Encryption for the Web Client on
Page 23.

Licensing the Web Client
Licensing the Web Client

C•CURE 9000 Web Client is a licensable option for a C•CURE 9000 Server where Web Clients are
equivalent to traditional clients. An installed C•CURE 9000 Version 2.0 or greater includes the
following:
• A single client license capacity count of five client licenses and one Badging Client with all
SiteServers and Series L, M and N.
• For Series P through S, ten client licenses and two Badging Client licenses are available.
You can order additional Client/Web Client licenses with the CC9000-ADDCLI part number.
If you purchase additional Web Client licenses, you need to update your license to include them by
running the C•CURE 9000 Licensing application and updating the license. The C•CURE 9000
Server can support up to ten Web Client, simultaneous connections, provided that the C•CURE 9000
license includes that many Simultaneous Web Clients.
When you access the C•CURE 9000 License application on your C•CURE 9000 server, you can view
the number of Client licenses available on your system. You can also view License information from
the C•CURE 9000 Administration Client About Box. Select Help>About from the Administration
Client, then click the License tab. The number of licensed Web Clients for your server is listed in the
Simultaneous Web Clients field. The field displays the total number of Web client licenses currently
in use, and the total number of Web Client licenses available.
Example:
1/4 means one Web Client is in use out of four Web Client licenses.
To Run the C•CURE 9000 Licensing Application
1. On your C•CURE 9000 Server, click Start>All Programs>Software House> C•CURE

9000>Licensing.
2. View the Simultaneous Web Clients field to verify the number of simultaneous Web Clients
your license provides.
3. For more information about the Licensing Application, click F1 or select Help>Contents to see
the online help for the Licensing Application.

Enabling SSL Encryption for the Web Client

The C•CURE 9000 Web Client supports SSL-based encryption for communications between the Web
Client browser system and the Web Server you are using to communicate to the C•CURE 9000
Server.
The Web Client SSL Encryption option provides RSA Encryption Scheme – Optimal Asymmetric
Encryption Padding (RS-AES-OAEP) using 1024-bit key size, to encrypt the AES (128-bit key size) key
for session communications between the Web Client browser and the C•CURE 9000 Server.
You do not need to enable SSL Encryption unless your site requires additional security for all
client connections.
To use the SSL option, you must set up SSL certificates on your IIS Web Server.
You may need to ask for assistance from your IT Administrator to perform SSL installation and
configuration, depending upon your expertise with SSL and IIS and the level of access to security
and networking at your site.
About Certificates and Trusted Sites

If you decide that you need to use SSL Encryption, Software House has provided certificates that you
can use to implement SSL. These certificates provide a secure connection, but they may generate
warnings from your browser because they are generic certificates that are not matched to your web
server's network or domain address.
If you use the Software House certificates, it is likely that Web Client users may see messages in their
browsers warning about:
Certificate mismatch: Because Software House cannot know in advance what your Web Server
name is, the Software House Certificate cannot match the URL your web server uses for the Web
Client. For this reason, Web Client users may get a message such as "Server's certificate does not
match the URL."
Trusted Certificate Authority: The Software House Certificate is not issued by a Trusted Certificate
Authority recognized by Internet Explorer and other Web browsers. For this reason, Web Client users
may get a message such as "The security certificate presented by this website was not issued by a
trusted certificate authority."

Your users can safely display the Web Client by choosing to "continue to this website". The exact
message may vary from browser to browser.
However if these messages pose a risk or a nuisance at your particular site, you can:
l Configure a self-signed Certificate

see the instructions at : http://technet.microsoft.com/en-us/library/cc757327(WS.10).aspx
l Purchase an SSL Certificate from a trusted Certificate Authority such as VeriSign.com or

Entrust.net.
Setting Up SSL Encryption
Perform the following steps to set up SSL Encryption for your IIS Server.
To Enable SSL Encryption for the Web Client
1. Locate the Software House certificates on the C•CURE 9000 DVD in the root-level Certificates
folder.
You will be importing the following two Software House certificates into IIS:
l SoftwareHouse_CA.cer (Software House Certificate Authority)
l SWH_WebCert.pfx (Software House Personal Information Exchange certificate)
2. Import the certificates into your IIS Web Server - see Importing the SSL Certificates into Your IIS
Web Server on Page 24.
3. Enable SSL in the IIS Web Server - see Enabling SSL on Your IIS 5.10 or 6.0 Web Server on Page
28 or Enabling SSL on Your IIS 7.0 Web Server on Page 31
4. Configure SSL Options in IIS (versions 5.10 and 6.0 only) - see Configuring SSL Options on your
IIS 5.10 or 6.0 Server on Page 33.
Importing the SSL Certificates into Your IIS Web Server

To import Software House certificate files, use the Microsoft Management Console for the IIS Server
Machine and log in as an administrator.

Complete the following procedure for each Certificate.
l Import the Certificate Authority certificate (SoftwareHouse_CA.cer) into the Trusted Root
Certificate Authorities store. See To Import the Certificate Authority Certificate on Page 25.
l Import the Software House Personal Information Exchange certificate ( SWH_WebCert.pfx) into
the Personal store. To Import the Personal Information Exchange Certificate on Page 27.
To Import the Certificate Authority Certificate
1. Log on to the IIS Web Server system as an administrator.
2. Select Start>Run and type mmc, then click OK. The Microsoft Management Console appears.
3. Select File>Add/Remove Snap-in. The Add/Remove Snap-in dialog box appears.
4. Select Certificates and click Add.
5. Select Computer account, then click Next.
6. Select Local computer and click Finish.
7. Click Close to close the Add Standalone Snap-in dialog box. Certificates (Local Computer)
appears on the list of selected snap-ins for the new console.
8. Click OK to close the Add/Remove Snap-in dialog box.
9. To save the changes to the Microsoft Management Console, select File>Save.
10. Right-click on the Trusted Root Certificate Authorities folder, located under Certificates (Local
Computer and select All Tasks>Import.

The Certificate Import Wizard appears.
11. Click Next. The File to Import screen appears.

12. Click Browse to navigate to the Certificates folder on the C•CURE 9000 Installation DVD.
13. Select SoftwareHouse_CA.cer and click Open to choose the .cer file, then click Next.
The Certificate Store screen appears in the Certificate Import wizard.
14. Click Next to accept the default location (Place all certificates in the following store). The
Completing the Certificate Import Wizard screen appears.
15. Click Finish to complete the import process.
16. A message box appearing stating "The import was successful." Click OK.
To Import the Personal Information Exchange Certificate
1. From the Microsoft Management Console, right-click on the Personal folder, located under
Certificates (Local Computer and select All Tasks>Import.
2. Click Next, then click Browse to navigate to the Certificates folder on the C•CURE 9000
Installation DVD.

3. Choose All Files ("*") from the Files of type drop-down list.
4. Select SWH_WebCert.pfx and click Open to choose the file, click Next.
The Certificate Store screen appears in the Certificate Import wizard.
5. Click Next to accept the default location (Place all certificates in the following store). The
Completing the Certificate Import Wizard screen appears.
If you are prompted with a password field, depending on the type of certificate that
NOTE was imported, enter the password SWHdev and select Next.
Otherwise, contact your IT administrator for the password. Some certificates may
require a password for extra security.
6. Click Finish to complete the import process.
7. A message box appears stating "The import was successful." Click OK.
8. Choose File>Save to save your changes, then File>Exit to close the Microsoft Management
Console.
Enabling SSL on Your IIS 5.10 or 6.0 Web Server

After you have imported the SSL certificates into your IIS Web Server, configure the IIS Web Server to
use the SWH_WebCert.pfx (Software House certificate) for communications.
To Enable SSL on your IIS 5.10 or 6.0 Web Server
1. Right-click on My Computer and click Manage.
2. Click to expand Services and Applications to reveal Internet Information Services.
3. Click to expand Internet Information Services to reveal the Web Sites folder.
4. Click to expand the Web Sites folder to reveal Default Web Site.
5. Right-click on Default Web Site and click Properties.

6. Select the Directory Security tab on Default Web Site Properties dialog box.
7. Click Server Certificate. The Web Server Certificate Wizard appears.

8. Click Next on the Welcome screen.
9. Select Assign an existing certificate, click Next.
10. Choose Software House Certificate, and click Next.
11. On some systems, the following screen appears so that you can set the SSL port for the Web
Client. Typically you can accept the default port, but if the default port is listed as 80, you should
change it to another port number to avoid conflicts (Port 80 is the default port that a web server
uses to listen to all web clients; you need to use a separate port for the C•CURE 9000 Web
Client).

12. Review the certificate information that appears on the Certificate Summary screen, then click
Next.
13. Select Finish.
The IIS server is now ready to communicate over an SSL channel, using the certificate that you have
specified.
To access the C•CURE 9000 Web Client, use a secure Web site URL once the SSL Encryption option
is enabled
Example:
https://<machinename>/CCure9000WebClient/WebStar.html
Enabling SSL on Your IIS 7.0 Web Server

After you have imported the SSL certificates into your IIS Web Server, configure the IIS Web Server to
use the SWH_WebCert.pfx (Software House certificate) for communications.

To Enable SSL on your IIS 7.0 Web Server
1. Click on Start>Administrative Tools>Internet Informations Services (IIS) Manager.
2. Click on the server name (the system name of your IIS server) for the Web Client.
3. Click to expand the Sites folder.
4. Select Default Web Site.
5. From the Actions menu on the right, click Bindings. The Site Binding dialog box appears.

6. Click Add to open the Add Site Binding dialog box.
7. Choose https from the Type drop-down list.
8. Choose All Unassigned from the IP Address drop-down list.
9. Typically, you can accept the default Port (443), but if the default port is listed as 80, you should
change it to another port number to avoid conflicts (Port 80 is the default port that a Web server
uses to listen to all Web clients; use a separate port for the C•CURE 9000 Web Client).
10. Click OK.
11. Click Close on the Site Bindings dialog box.
The IIS server is now ready to communicate over an SSL channel, using the certificate you specified.
To access the C•CURE 9000 Web Client, use a secure Web site URL (such as
https://<machinename>/CCure9000WebClient/WebStar.html) once the SSL Encryption option is
enabled.
Configuring SSL Options on your IIS 5.10 or 6.0 Server

To require that SSL be used to access C•CURE 9000 through the Web Client, set the Directory
Security for the Web Client to require secure communications.
To Configure SSL Options in IIS 5.10 and 6.0 for the Web Client
1. Right-click on My Computer and click Manage.
2. Select Services and Applications Internet Information Services Web Sites Default Web
Site CCure9000WebClient.
3. Right-click on CCure9000WebClient and select Properties, then click the Directory Security tab.
4. Choose Edit in the Server Certificate section.
5. Select Require secure channel (SSL) and click OK.

6. Click OK to close the CCure9000WebClient Web Site Properties dialog box.
Once you have configured this section, you can access the Web Client using https:// instead of http://
when connecting. Once you establish an https connection, all data transferred between the Web
Client and your C•CURE 9000 server is encrypted.
Web Client Configuration for Windows 2008 Server

The following section describes the process for configuring the C•CURE 9000 Web Client for
Windows 2008 Server. Be sure to complete the following tasks first:
l Install Windows 2008 OS (32 or 64 bits).
l Install IIS.
l Install C•CURE 9000.

To Configure the Web Client for Windows 2008 Server
1. Click the My Computer icon on the desktop
2. Click Server Manager > Roles > Web Services (IIS) > Internet Information Services (IIS)
Manager
3. On left pane under Connections, select Application Pools.
4. On middle pane under Application Pools select DefaultAppPool.
5. On right pane under Edit Application Pools, click Basic Settings. This opens Edit Application Pool
Database. Verify the .NET Framework version and settings.

7. On the left pane under Connections, select Default Web Site.
8. On the right pane under Edit Site, click Basic Settings.
9. On Edit Site, click Select then choose ‘DefaultAppPool.’
10. In the Physical path field, type in %SystemDrive%\inetpub\wwwroot

11. Click Test Settings. The Test Connection Database opens and displays that the Authentication is
valid.
12. On the Connection pane, go to Sites>Default Web Site.
13. Select CCURE9000WebClient. The CCURE9000WebClient Home displays.
14. Ensure that the CCURE9000WebClient is an application and convert it to an application if it is

not already.

15. To verify CCURE9000WebClient path settings, on left pane under Connections, right-click
CCURE9000WebClient > Manage Application > Advanced Settings.
The CCURE9000WebClient Advanced Settings Database displays.

16. To add the WebStar.html as a Default Document:
a. Under IIS section, double click on Default Document.
b. In right pane under Actions, click Add.
c. In Add Default Document Database, enter WebStar.html and click OK.
17. To enable CCURE9000WebClient Directory Browsing:

a. In left pane under Connection select CCURE9000WebClient.
b. In the middle pane under IIS, double-click Directory Browsing.
c. In the middle pane, Directory Browsing is displayed (by default, Directory Browsing
is disabled). In the right pane under Actions, click Enable.

In middle pane, note that Directory Browsing is now enabled.
18. To launch Windows Internet Explorer and open the C•CURE 9000 Web Client, in left pane
under Connections, right-click CCURE9000WebClient > Manage Application > Browse.
The Windows Internet Explorer C•CURE 9000 Web Client - Windows Authentication
displays.

With entry of a valid operator, domain and password, the C•CURE 9000 Web Client
page displays.

2
Chapter 2 - Getting Started
This chapter explains how to start the C•CURE 9000 Web Client, sign on to the Web Client, exit from
the Web Client, and access Web Client Help.
In this chapter
• Getting Started with the C•CURE 9000 Web Client 44

• Understanding Operator Privileges and Partitions 46
• Audit Trail for Web Client Updates 47
• Exiting from the Web Client 48
• Troubleshooting 49
• Accessing Help 52

Getting Started with the C•CURE 9000 Web Client

The C•CURE 9000 Web Client allows you to view and change objects in your C•CURE 9000 system
from an Internet browser. However, you can only view objects that you have Operator privileges to
view, and you can only edit objects to which you have privileges to edit.
You can sign on to the C•CURE 9000 Web Client by logging on to your PC with a login ID that is
configured as a C•CURE 9000 Operator, then navigating to the Web Client Home Page with your
Internet browser.
The C•CURE 9000 typically has the following URL:
http://<machinename>/CCure9000WebClient/WebStar.html
Where <machinename> is the name or IP address of your webserver.
If you have enabled the SSL Encryption option for the Web Client, the URL is
NOTE typically:
https://<machinename>/CCure9000WebClient/WebStar.html.
See Enabling SSL Encryption for the Web Client on Page 23.
Depending upon your browser settings, you may be asked to authenticate your Operator logon by
entering your Windows logon and password, once by IIS and once by C•CURE 9000.
When you navigate to this URL, the Web Client Home Page opens.
You can bookmark this home page in your browser to return to it later.

Figure 4: C•CURE 9000 Web Client Home Page
You will be prompted to upgrade to MS Silverlight v4.0, if you have not already done so. You can
use the following link:
http://www.microsoft.com/silverlight/get-started/install/default.aspx
Once this upgrade is finished, you must restart your client computer to begin using the C•CURE
9000 Web Client application.

Understanding Operator Privileges and Partitions
Understanding Operator Privileges and Partitions

When you open a view of a C•CURE 9000 object from the Web Client, the C•CURE 9000 server uses
the Privileges assigned to your Operator account to determine what information you can view
and/or edit, and what applications you can access. If, for example, your Operator account was not
allowed to access the Activity Viewer on the C•CURE 9000 Monitoring Station Client, then you
would similarly be not allowed to view the Activity Viewer from the Web Client.
If your C•CURE 9000 system is Partitioned, your Operator account determines the Partitioned objects
you are allowed to view and/or edit. If you try to access objects that reside in a Partition you do not
have Privileges to access, the Web Client will prevent you from accessing those objects.
If you are not able to view and edit objects that you believe you should have access to, contact your
C•CURE 9000 Administrator to determine if your Privileges need to be changed.

Audit Trail for Web Client Updates
Audit Trail for Web Client Updates

Modifications to data in the C•CURE 9000 database from the Web Client are logged in the same
manner as changes made in the Administration client and the Monitoring Station client. These
changes are visible in the Audit Log (Options & Tools>Audit Log on the Administration Client).
For example, if you make a change to a Personnel record from the Web Client, a log entry for that
change appears in the Audit Log under your Operator name logged in the same way as if you had
changed the record from the Administration client.

Exiting from the Web Client
Exiting from the Web Client

To end a Web Client session, click the Logout button on the Web Client toolbar.
The following message appears:
Automatic Logoff
When an unattended Web Client session is detected after a specified timeout period, the workstation
can be set to log off automatically. This ensures that Web Client licenses are available to active work
stations and to prevent tampering with those that are unattended.
The timeout period is configurable as a system variable called: WebClientInactivityTimeout. A value

of zero indicates that automatic logoff is not enabled, which is the default condition. To set the
Inactivity Timeout, go to the Options & Tools pane > System Variables view > Web Client variable
in the C•CURE 9000 Administration application.

Troubleshooting
Troubleshooting
If you are experiencing problems using the C•CURE 9000 Web Client, you may be able to diagnose
these problems by reading through this topic.
If you cannot find an answer to your problems, you should contact your integrator or the Software
House Technical Support Center, depending upon your service agreement.
Installation
This Problem... May be Caused by... Check or Do This...
Installation does not Internet Information Server has Install a supported version of IIS or select a different
complete. not been installed on the system system that already has IIS.
The following message where you are trying to install the
is displayed: "Internet Web Client.
Information Server was
not found on this
system. Setup will now
exit."
Installation on Windows On Windows Vista, Windows 7 or From Turn Windows features on or off in Programs
OS does not complete. Windows 2008, Internet and Features, select Internet Information Services>Web
Information Services requires IIS Management tools>IIS 6 Management Compatibility and
Metabase and IIS 6 verify that IIS Metabase and IIS 6 Configuration
Configuration Compatibility to Compatibility is installed and enabled.
be enabled.
If this option is not installed, the
Web Client installation program
will rollback and abort.

Troubleshooting
Starting the Web Client
This May be Caused

Check or Do This...
Problem... by...
Microsoft Lack of access to Check your Internet connectivity or ask your IT administrator to help you
Silverlight 4.0 is Microsoft Site to install obtain Silverlight 4.0.
not available. Silverlight 4.0.
Proxy Server The connection Turn off your Proxy Server in Tools>Internet Options in your browser
Errors between the Web (Proxy settings are browser-dependent). If you cannot turn off this setting,
Client and the C•CURE contact your IT administrators and ask them to add the Web Client to the list of
9000 Server is blocked exclusions for your site.
by your proxy server.
Multiple Your Internet security You can change Internet Explorer security settings in Tools>Internet
Authentication settings require Options>Security>Custom Level>User Authentication to Automatic
Required separate logon with current username and password, if permitted by your IT Internet
dialog boxes authentication. policies. Contact your IT administrators before changing settings.
appear despite These settings are not available from Tools>Options in Firefox or Chrome.
being logged Contact your IT Administrators to see if they have site-specific solutions for
into a valid authentication.
C•CURE 9000
Operator
account.
You receive an Your Internet security If your IT Internet policies permit, you can change settings in Tools>Internet
error message settings are set to High, Options>Security>Trusted Sites to add the IIS Server that is hosting the
including the causing Internet Web Client to the list of Trusted Sites for your Internet Explorer.
following: Explorer to deny
"... the web site access.
listed below is
being blocked
by Internet
Explorer
enhanced
security
configuration."

Troubleshooting
This May be Caused

Check or Do This...
Problem... by...
You receive an You have tried to open Check with other Operators to see if they have Web clients open that they are
error message a Web Client session not actively using. If another Operator closes their Web client, you should
that says: but that session would attempt to access the Web Client again.
"Unable to exceed the number of If you find that you need to add access to additional Web Clients to your
verify license / Simultaneous Web license, contact Software House or your integrator. See Licensing the Web
user Clients licensed for your Client on Page 22 for more information.
credentials. system.
Please contact
your Your license does not If you had upgraded your C•CURE 9000 system to Version 2.0, your license
administrator." include any Web Client does not include any access to the Web Client by default (Simultaneous Web
access. Clients in the license is set to zero). You can update your license to include one
Web Client, and purchase licenses for additional Simultaneous Web Clients,
by contacting Software House or your integrator. See Licensing the Web
Client on Page 22 for more information.
Using the Web Client
This Problem... May be Caused by... Check or Do This...
SSL Encryption is not This feature must be See Enabling SSL Encryption for the Web Client on Page 23 for
enabled configured manually. instructions.
On Google Chrome, Chrome blocks all pop-ups Select Options>Under the Hood>Notify me when a pop-up
Help does not open by default and considers blocked. When Chrome blocks the pop-up, an alert appears at
when you click the Help Help for the Web Client a the bottom right-hand corner of the browser window. Click the
button. pop-up. alert, then click on http://localhost/ - C•CURE 9000 Web
Client Help to allow Help to open.
You will need to do this every time you open Help on Chrome -
there is no setting to allow pop-ups.
Timeouts and This is due to the query Modify the query associated with the dynamic view to return a
unhandled exceptions taking too long to execute smaller set of records.
are encountered when within the HTTP Web
running Journal query request parameters.
in a dynamic view.
Web Client loses The C•CURE 9000 server The Web Client does not automatically re-establish connection
communication with the stopped (for various with the C•CURE 9000 server; you must manually re-establish the
C•CURE 9000 server. reasons). connection by reloading the browser.

Accessing Help
Accessing Help
You can access Help for the Web Client by clicking on the Help icon on the Web Client toolbar.
To Access Web Client Help
1. Navigate to the Web Client in your browser.
2. Click the Help button on the Web Client Toolbar. The Help Viewer opens in a separate tab or
window (depending on your browser settings) and you can browse the Help topics.
Help Toolbar
The Help toolbar for the C•CURE 9000 Web Client has the buttons shown in Table 2 on Page 53.

Accessing Help
Table 2: Web Help Toolbar
Button Description
Hide navigation – toggles the navigation pane that shows the TOC, Index, and Search tools.
TOC – Click to display the Help Table of Contents.
Index – Click to display the Help Index.
Search – Click to display the Help Search pane. You can type a word or phrase to search for, and click Search to
perform a full-text search of the Help system.
Quick search – You can search within the displayed topic for a word or phrase by typing it and clicking the Quick
search icon. Exact matches (case-insensitive) of the word or phase are highlighted in the current topic.
Print topic – Click to open a Window print dialog box to print the current help topic.
Back – Click to go to the previous Help topic.
Forward – Click to go to the next Help topic.
Next Steps
After you access Help, you can:
l Open the Help Table of Contents tab (click TOC or ) to find a topic by Title.
l Open the Help Index tab (click Index or ) to find a topic by keyword.
l Open the Search Tab (click Search or ) to search for a word or phrase in all Help topics.

Accessing Help

3
Chapter 3 - Personnel
This chapter explains how to search for and edit Personnel from the C•CURE 9000 Web Client.
In this chapter
• Editing Personnel 56
• Accessing the Personnel Editor 57
• Searching for Personnel 60
• Creating a New Personnel Record 62
• Deleting Personnel Records 64
• Personnel General Tab 65
• Personnel Credentials Tab 68
• Adding a Credential to a Personnel Record 74
• Editing a Personnel Credential 75
• Personnel Clearances Tab 76
• Adding a Clearance 78
• Removing a Clearance 81
• Personnel Customer Tab 83
• Editing Personnel Customer Data 85
• Personnel Customer Extended Tab 86
• Personnel Previous Doors Tab 88
• Editing in an Application Server Enterprise Environment 90

Editing Personnel
Editing Personnel
From the Personnel Search page you can:
l Search for Personnel (see Searching for Personnel on Page 60) using the following fields:
• First Name
• Last Name
• Text1
You can filter the Search using the following filter types:
• Begins With
• Contains
• Ends With
• Equal To
l View a Search Result - see Personnel Search Result on Page 61.
The results grid displays all the personnel that match the criteria entered by the user in the
search criteria. This grid contains the following information:
• First Name
• Last Name
• Text 1
l Edit Personnel Records (see Accessing the Personnel Editor on Page 57) using a Personnel Editor
similar to the C•CURE 9000 Administration Client.
l Add new Personnel records to the C•CURE 9000 database. See Creating a New Personnel Record
on Page 62.
l Assign Clearances to Personnel. See Adding a Clearance on Page 78.
l Delete Personnel records from the C•CURE 9000 database. See Deleting Personnel Records on
Page 64

Accessing the Personnel Editor

You access Personnel from the Web Client by clicking on the Personnel button on the Web Client
Toolbar. The Personnel Search view opens, and you can search for Personnel by First Name, Last
Name, and/or the Text1 Field. If your C•CURE 9000 has customized this Field name, the custom
field name appears on the Web Client.
When you search for Personnel, a list of Personnel records appears that conforms to your search.
You can then click on a Personnel record in the list and open the Personnel Editor to edit the record.
You can also create a new Personnel record from this tab.
To Access the Web Client Personnel Editor
1. Navigate to the Web Client Home Page.
2. Click Personnel on the Web Client Toolbar.
The Personnel Search view opens.

Figure 5: Personnel Search
If you want to see a list of all Personnel, click Refresh.
If you want to search for Personnel by Last Name, click , click on a search condition in the
list that appears (such as Begins with), and type one or more letters to search by into the Last
Name field. Then click Refresh.

Figure 6: Personnel Search Result
3. A list of Personnel appears, based on the Search conditions you chose and shows Personnel
Records with Last Name beginning with 'T'.
4. To open the Personnel Editor to edit a personnel record, click on a name in the List and then
click Edit. You can create a new Personnel record by clicking Add New from the same menu.
Next Steps
l You can sort the Personnel in the list by clicking on a column heading such as Last Name, First
Name, or Text1. Each click toggles between an ascending and descending sort by that column.
l You can create a new Personnel record by clicking on a name in the List and then clicking on
Add New. See Creating a New Personnel Record on Page 62.
l You can assign a Clearance by clicking on Assign Clearance. See Adding a Clearance on Page
78
l You can remove several clearances at once from personnel from a context menu. See Removing
a Clearance on Page 81

l You can add a Credential. See Adding a Credential to a Personnel Record on Page 74
l You can delete a Personnel record by clicking on a name in the list, then clicking Delete. See
Deleting Personnel Records on Page 64.

Searching for Personnel

You access Personnel from the Web Client by clicking on the Personnel button on the Web Client
Toolbar. The Personnel Search view opens, and you can search for Personnel by First Name, Last
Name, and/or the Text1 Field (if your C•CURE 9000 has customized this Field name, the custom
field name appears on the Web Client).
When you search for Personnel, a list of Personnel records appear that conform to your search. You
can then click on a Personnel record in the list and open the Personnel Editor to edit the record. You
can also create a new Personnel record from this tab.
You can also assign multiple clearances to personnel that you have displayed in a search and
display clearance details. See Adding a Clearance for more information.
You are also able to search any card number and to display custom header names.
To Search for Personnel
1. Navigate to the Web Client Home Page.
2. Click Personnel on the Web Client Toolbar. The Personnel Search view opens.
Figure 8: Web Client Toolbar
If you want to see a list of all Personnel, click Refresh.

If you want to search for Personnel by Last Name:
a. Click for the Last Name field (see Figure 9 on Page 61).
b. Click on a search condition in the list that appears (such as Begins with) and click
OK.
c. Type one or more letters to search by into the Last Name field.
d. Click Refresh.

Figure 9: Personnel Search
3. A list of Personnel appears, based on the Search conditions you chose. Figure 10 on Page 61
shows Personnel Records whose Last Name Begins With 'T'.

Creating a New Personnel Record

You can use the Web Client Personnel Editor to add new Personnel records to C•CURE 9000.
To Create a New Personnel Record
1. Navigate to Personnel Search by clicking Personnel on the Web Client Toolbar.
2. Click Add New.
3. The Web Client Personnel Editor opens.
4. Type the values you want in the First Name, Middle Name, and Last Name fields, using the
TAB key to move between fields.
5. Object ID is a system-generated field and is read-only, so you cannot type a value for this field.
6. To specify the Personnel Type, click , choose a Personnel Type from the drop-down box,
and click OK.
7. To specify an Operator Name, click , choose an Operator from the drop-down box, and click
OK.
8. You can enter a PIN by typing it in the PIN field.
9. You can enter a Personnel Identifier in the Personnel Identifier field. This field is typically used
only for Government extended format access cards.
10. You can specify an Association Category in the Association Category field. This field is typically
used only for Government extended format access cards
11. You can specify an Organization Category in the Organization Category field. This field is
typically used only for Government extended format access cards.
12. You can specify an Organizational Identifier in the Organizational Identifier field. This field is
typically used only for Government extended format access cards.

13. If you want to add information to another tab in this Personnel record, click on the appropriate
tab (Credentials, Clearances, or Customer).
14. To save this Personnel record and close the Personnel Editor, click Save.
If you want to discard any changes and close the Personnel Editor, click Cancel.
Web Client users who do not have access to user-defined fields cannot add personnel
NOTE records if there are any mandatory user-defined fields.

Deleting Personnel Records
Deleting Personnel Records

You can delete one or more C•CURE 9000 Personnel Records from the Web Client.
To Delete a Personnel Record
2. Search for the Personnel record to which you want to delete (see Searching for Personnel on Page
60), or just click Refresh to see a list of all Personnel and scroll to the Personnel record.
3. Click on the Personnel Record which you want to delete. If you want to delete more than one
Personnel record, you can use CTRL+click to select additional records. You can select a range of
records using SHIFT+click.
4. Select Delete from the context menu that appears or click Delete on the Personnel Toolbar.
5. A warning message is displayed. Select OK to delete the Personnel record or Cancel the deletion
request. See on Page 64.
6. When you click OK, the selected Personnel record is deleted.

Personnel General Tab

The Personnel General tab contains the basic fields that define a Personnel Record. You can enter
values in these fields when you are creating a new Personnel record, or edit these fields to modify an
existing Personnel record. Figure 11 on Page 65 shows the Personnel General Tab.
Figure 11: Personnel General Tab
See Creating a New Personnel Record on Page 62 for more information about using the Personnel
General tab.
Personnel General Tab Definitions

The following fields are available in the Web Client Personnel General Tab.

Table 3: Personnel General Tab
Field Description
First Name The first name of the person. This field is not required to have an entry.
Middle Name The middle name of the person. This field is not required to have an entry.
Last Name The last name of the person. The Last Name field is required.
Object ID This field contains a system generated ID number for this person. This field is read-only.
Personnel You can assign a Personnel Type for this Personnel record by typing in a Personnel Type. The system
Type provides three Personnel Types: Employee, Contractor, and None. None is the default value. Additional
Personnel Types can be created using the Personnel Type Editor to meet your site's needs. For example, a
Personnel Type called Visitor could be added if your site wanted to track visiting personnel. If you type an
invalid Personnel Type, the record is not changed.
Operator Use this field to identify this person as an Operator who can run C•CURE 9000 applications such as the
Name Administration client and the Monitoring Station. If this person is not intended to be a C•CURE 9000 user,
leave this field blank. Each Operator is a person with a Windows system account. Each Operator can be
assigned to only one Personnel record. You cannot assign an Operator to a Personnel record if that
Operator is already assigned to a different Personnel record. If you type an invalid Operator Name, the
record is not changed.
PIN Defines the Personal Identification Number for this Person. This PIN is used for readers that require Card
Access Followed by PIN. The PIN is encrypted when stored in the database, and if the Hidden PIN option is
on, it is not visible to an Operator anywhere in the C•CURE 9000 system. The number of digits in the PIN is
determined by the PINLength value set in Options & Tools>System Variables The maximum size
allowed is 9.
Modification History
Last Edited The Date and Time of the last edit of this Personnel record. This field is updated by the system and is read-
On only.
Last Edited Name of the Operator who last edited the General tab data for this personnel record. This field is updated by
By the system and is read-only.
The Last Activity field displays details of the area last accessed by the personnel shown in the Personnel
Last Activity
Editor main page. This last known area is retrieved from the Journal Last Admitted message.
Last Activity The Last Activity On field displays the full activity message logged in the journal.
On

Field Description
Options
Disabled Select this option if you want to deny this person access. All of this person's access credentials will be denied
access as long as Disabled is selected.
Checking this box does not cause any of the person's access credentials to be marked as Disabled on the
Credentials tab, but none of these credentials will grant access as long as Disabled is selected on the
General tab.
Alternate Select this option to cause the alternate shunt relays for ADA (Americans with Disabilities Act) door timings to
Shunt (ADA) be activated whenever this person is granted access to a door equipped with these options. Alternate shunt
relays typically provide additional time for a person to go through a door without causing an alarm condition.
Noticed Select this option to track activities by this person:

• Displays the Noticed tag in access/reject admit messages.
• Triggers any Noticed Events defined when Doors were configured.
AntiPassBack Select this option to make this person exempt from antipassback rules (regular and timed) for all Areas. The
Exempt person is permitted entry to/exit from antipassback Areas regardless of a violation. While no violation
messages are generated/logged, access activity is logged as usual.
Activate Select this option so this person activates antipassback events—whether or not the person is antipassback
AntiPassBack exempt—if the access/exit would ordinarily cause a violation.
Event
Keypad Select this option to enable this person to use Keypad Commands even if the person is not in a Personnel
Commands Group granted the Keypad Command permission.
Administrator
Intrusion Select this option to enable this person to Arm/Disarm Intrusion Zones using the Card swipe Arm/Disarm
Zone methods even if the person is not in the Personnel Group configured for that Intrusion Zone.
Adminstrator

Personnel Credentials Tab

The Web Client Personnel Credentials tab lets you view, add, and configure access credentials for a
person. For each credential, you can specify the credential type, its format, its activation and
expiration dates/times, and its current status. Figure 12 on Page 68 shows the Personnel Credentials
Tab.
Figure 12: Personnel Credentials Tab
Personnel Credentials Tab Tasks

Adding a Credential to a Personnel Record on Page 74
Editing a Personnel Credential on Page 75

Personnel Credentials Tab Definitions

When you click on a Credential in the Credential table, the information in the Credential fields
changes to show the settings for the selected Credential.
The following fields are displayed on the Web Client Personnel Credentials Tab.
Table 4: Credential Toolbar
Button Description
Add Card Click this button to add a new access credential. This button is unavailable if the person already has the
Access maximum amount of credentials.
Add Pin Only This option is not currently available. Use the Personnel Editor in the Administration Client to add PIN-Only
Access Credentials. If the Personnel record has a PIN-Only credential, it will be displayed in the Credential table.
Remove Click this button to remove the selected access credential. A dialog box appears asking you to confirm the
removal. Click Yes and the credential is removed.
Validate This option is not currently available. Use the Personnel Editor in the Administration Client to Validate CHUID
CHUID Uniqueness.
Uniqueness

Table 5: Credential Table
Field Description
Credential The sequence number for each Credential, incremented for each Credential for a given person. This value is
ID unique and, therefore, useful for Importing Personnel and their credentials. This value is auto-generated and
cannot be changed by the user.
Card Card Number is a value up to 20 digits in length (with a maximum value of 18446744073709551615). The card
Number number is manually typed in and need not be unique as long as the CHUID it is part of is unique (for example, a
card number of 333 with a facility code of 2 would not conflict with a card number of 333 with a facility code of 3, if
the facility code was part of the CHUID). For a PIN-Only credential, the label PIN is displayed in the Card
Number field. The PIN itself is never displayed.
Access The Access Type for each Credential. The value is set to Card Access if you click Add Card Access or PIN-
Type Only if you click Add Pin Only Access.
Active This read-only field shows the setting from the Card Status fields. If none of the Card Status fields are selected,
and the current date is between the Activation and Expiration Dates on this tab, the Credential Status is Active.
If Today's date is outside of the Activation and Expiration Dates range, the Credential is Expired.
CHUID There are seven Card Holder Unique Identifier (CHUID) formats:
Format • CardOnly
• Card-Facility-Issue
• Government Card
• Card Only - 64
• Card-Facility
• PIN Only
• Government Card with HMAC
Disabled If the credential has been manually disabled (either by selecting Disabled on the General tab to disable all
credentials, or Disabled on the Credential tab to disable a specific credential) then the Credential Status displays
Disabled.
Lost If the Credential has been marked as Lost, the status is displayed as Lost .
Stolen If the Credential has been marked as Stolen, the status is displayed as Stolen.

Table 6: Credential Fields
Field Description
Card A read-only field displaying the Card Number that was entered into the Credentials table for this record.
Number
Facility Code The Facility Code for the credential, entered manually, which can be up to 9223372036854775807, unless
limited by the CHUID Format.
Issue Code The Issue Code, usually used to indicate the number of times the credential has been issued. The value can
be up to 2147483647, as limited by CHUID Format.
Activation The Activation Date and Time for the credential. The time defaults to the time the credential is created. You
can select the date from the calendar control and the current time will be appended to the selected date and
displayed in the control. You can also change the date and time from the edit control and save the changes.
Expiration Defines the Date and Time when this Card is considered expired. For new credentials, this will be set to the
number of years specified in the System Options to be added to the Activation Date Time. You can select the
date from the calendar control and the current time will be appended to the selected date and displayed in the
control. You can also change the date and time from the edit control and save the changes.
Badge Displays the Badge Layout to be used for this credential.

Layout
Card Status This set of check boxes allows you to specify if an access card is lost, stolen, disabled or expired.
Lost Use this selection to indicate that a badge has been reported lost. Not applicable to PIN-Only credentials.
Stolen Use this selection to indicate that the credential has been reported stolen.
Disabled Use this selection to indicate that the badge has been manually disabled.
Expired This field is set to True ( ) when the Expiration Date has passed.
Agency Identifies the government agency issuing the credential.

Code
System Identifies the system the card is enrolled in and is unique for each site.
Code
Credential This 1-digit field is available to reflect major system changes.

Series

Field Description
Credential A value that is set to '1' the first time a card is issued, and is incremented by one whenever a replacement card
Issue is issued. The code can be up to 20 digits in length but the usual length in a government card format is 1 digit.
HMAC Hash Message Authentication Code. This value is unique for each card record, and is calculated by smart
card readers based on card data, the site key, and the hashing algorithm used by the reader. The HMAC for a
card can be different based on the reader type at which the card is presented because different reader
manufacturers use different hashing algorithms. As a result, you may have to configure multiple card records
for a given card if that card will be used for access at multiple reader types. Set this value to 0 for non-extended
cards.
CardInt1 – CardInt fields are user-named fields provided for proprietary extended card fields that you may use at your
CardInt4 site.
CHUID The Card Holder Unique Identifier (CHUID) is a number generated by the system, based on the CHUID
Format and the values in other credential fields. The CHUID has an 80 Digit Maximum and a 10 Digit
Minimum. It must have an even number of digits. All CHUIDS in the system, regardless of the format used,
must have the same length, so CHUIDs using a shorter CHUID Formats are be padded with 0s.
Miscellaneous
Personnel A number field usually used in Government, extended-format access cards. Its use is optional. It need not be a
Identifier unique value. Its maximum size can be 9223372036854775807. It can be included in a CHUID Format, in
which case its length may be limited by the CHUID format.
Association A number field usually used in Government extended format access cards. Its use is optional. It need not be a
Category unique value. Its maximum size can be 9223372036854775807. It can be included in a CHUID Format, in
Organization A number field usually used in Government, extended-format access cards. Its use is optional. It need not be a
Category unique value. Its maximum size can be 9223372036854775807. It can be included in a CHUID Format, in
Organization This is a numeric identification usually used in Government, extended-format access cards. Its use is optional.
Identification It need not be a unique value. Its maximum size can be 9223372036854775807.
PIN PIN (Personal Identification Number) is a number assigned to a cardholder. The cardholder uses this PIN at
Credential keypads when required. This field is used only if your card readers has keypads. This PIN field on the
Credentials tab is used for PIN-only access credentials. If you are using a General PIN, the PIN is displayed on
the General tab. Currently,this is a read-only field and the Auto Generate button is inoperable.

Table 7: Credential Tab Buttons
Button Description
Save Click Save to save your changes to this Personnel record, including changes made on
other tabs. After the record is saved, the Personnel Search screen is re-displayed.
Cancel Click Cancel to discard any changes you have made to this Personnel record,
including changes made on other tabs. After you cancel editing the record, the
Personnel Search screen is re-displayed.

Adding a Credential to a Personnel Record
Adding a Credential to a Personnel Record

You can add a Credential to a Personnel record from the Web Client Personnel Credentials tab.
To Add a Credential from the Personnel Credentials Tab
1. Navigate to the list of Personnel records. See Searching for Personnel on Page 60.
2. Click on the Personnel Record to which you want to add a Credential.
3. Select Edit from the Context menu that appears.
4. Click on the Personnel Credentials tab.
5. Click Add Card Access to add an access card. A row is added to the Credentials table for the
new credential.
6. Enter data for the card number in the Card Number field, the facility code in the Facility Code
field, and the issue code (if needed) in the Issue Code field.
7. To set the Activation date for the credential, click in the Activation field. Select a date from
the calendar that appears. Use the arrows on the calendar ( ) to navigate to
the month and year as needed.
8. To set the Expiration date for the credential, click in the Expiration field. Select a date from
the calendar that appears. Use the arrows on the calendar ( ) to navigate to
the month and year as needed.
9. You can select one or more card status fields (Lost, Stolen, or Disabled) as needed.
10. You can enter values for Extended fields such as Agency Code and HMAC as needed. See
Personnel Credentials Tab on Page 68 for definitions of these fields.
11. Click Save to save your changes, or Cancel to discard changes.

Editing a Personnel Credential
Editing a Personnel Credential

You can edit a Credential on a Personnel record from the Web Client Personnel Credentials tab.
To Edit a Credential from the Personnel Credentials Tab
1. Navigate to the list of Personnel records. See Searching for Personnel on Page 60.
2. Click on the Personnel Record which you want to edit.
4. Click on the Personnel Credentials tab.
5. Click on the row in the Credentials table that contains the credential that you want to edit.
6. Edit the data for the card number in the Card Number field, the facility code in the Facility Code
field, and the issue code (if needed) in the Issue Code field.
7. To change the Activation date for the credential, click in the Activation field. Select a date
from the calendar that appears. Use the arrows on the calendar ( )to
navigate to the month and year as needed.
8. To change the Expiration date for the credential, click in the Expiration field. Select a date
from the calendar that appears. Use the arrows on the calendar ( )to
navigate to the month and year as needed.
9. You can select or clear one or more card status fields (Lost, Stolen, or Disabled) as needed.
10. You can edit values for Extended fields such as Agency Code and HMAC as needed. See
Personnel Credentials Tab on Page 68 for definitions of these fields.
11. Click Save to save your changes, or Cancel to discard changes.

Personnel Clearances Tab

The Personnel Clearances tab allows you to add or remove Clearances to or from a Personnel
Record. Figure 13 on Page 76 shows the Personnel Clearances tab.
Figure 13: Personnel Clearances Tab
Personnel Clearances Tab Tasks

Adding a Clearance on Page 78
Removing a Clearance on Page 81
Personnel Clearances Tab Definitions

Table 8 on Page 77 describes the fields and buttons on the Personnel Clearances tab.

Table 8: Clearances Tab Clearance Table
Field/Button Description
Add Click this button to add a new clearance.

You can select one or more Clearances from the Clearance Select dialog box that appears, and click OK to
add them to the Personnel record.
To select multiple Clearances, hold down CTRL and click the left mouse button for each Clearance. To
select a range of Clearances, click one Clearance to select it, then hold SHIFT and click the left mouse
button on the last Clearance in the range. The entire range is selected.
You can right-click a Clearance in this list and choose Edit to view or modify the Clearance.
The number of clearances allowed per person is defined in Options & Tools>System Variables.
Remove Click this button to remove the selected clearance(s). A dialog box appears asking you to confirm the
removal. Click Yes and the selected clearances are removed.
Name Displays the name of the Clearance.
Description Displays the description of the Clearance entered by the Operator when the Clearance was last edited.

Adding a Clearance
Adding a Clearance
You can assign a Clearance to a Personnel record from either Personnel Search or the Web Client
Personnel Clearances tab.
To Add a Clearance from Personnel Search
2. Search for the Personnel record to which you want to add a Clearance (see Searching for
Personnel on Page 60. Searching for Personnel), or just click Refresh to see a list of all Personnel
and scroll to the Personnel record.
3. Click the Personnel Record to which you want to add a Clearance. If you want to add a
Clearance to more than one Personnel record, you can use CTRL+Left-click to select additional
records. You can select a range of records using SHIFT+Left-click.
4. Select Assign Clearances from the Context menu that appears.
Figure 14: Personnel Context Menu

Adding a Clearance
5. Select the Clearance you wish to add from the list of Clearances that appears (see Figure 15 on
Page 79).
Figure 15: Personnel Clearance Selection Popup
6. Click OK.
7. Click Save to save your changes.
To Add a Clearance from the Personnel Clearance Tab
2. Search for the Personnel record to which you want to add a Clearance ( Searching for Personnel
on Page 60), or just click Refresh to see a list of all Personnel and scroll to the Personnel record.
3. Click on the Personnel Record to which you want to add a Clearance.
5. Click on the Personnel Clearances tab.
6. Click Add.

Adding a Clearance
7. Select the Clearance you wish to add from the list of Clearances that appears.
8. Click OK.

Removing a Clearance
You can remove a clearance from a Personnel record from the Web Client Personnel Clearances tab.
The Remove Clearances action from the Context Menu lets an Operator with the appropriate
privileges remove clearances from personnel records from the Dynamic View. Previously you could
use the Editaction from the Context Menu to delete a clearance from one personnel record at a time.
With the Remove Clearances action from the context menu, you can remove clearances from several
personnel at the same time as long as you have Edit access to Personnel.
To Remove a Clearance from Personnel Search
2. Search for the Personnel record from which you want to remove a Clearance (see Searching for
Personnel on Page 60. Searching for Personnel), or just click Refresh to see a list of all Personnel
and scroll to the Personnel record.
3. Click the Personnel Record from which you want to remove a Clearance. If you want to remove
a Clearance to more than one Personnel record, you can use CTRL+Left-click to select additional
records. You can select a range of records using SHIFT+Left-click.
4. Select Remove Clearances from the Context menu that appears.
To Remove a Clearance from the Personnel Clearance Tab
2. Search for the Personnel record to which you want to add a Clearance (seeSearching for
Personnel on Page 60), or just click Refresh to see a list of all Personnel and scroll to the
Personnel record.
3. Click on the Personnel Record from which you want to remove a Clearance.
5. Click on the Personnel Clearances tab.
6. Click Remove .

7. Select the Clearance you wish to remove from the list of Clearances that appears.
8. Click OK.
Enterprise Architecture Differences

In an application server environment, an Operator may need to remove clearances from many
personnel records due to the nature of synchronization. For example, suppose a global clearance is
deleted on the Master Application Server (MAS) and the change is not synchronized to a Satellite
Application Server (SAS) because the SAS is not connected. On the SAS, in the meantime, an
operator may assign this clearance to several personnel. When the SAS comes back online,
synchronization conflicts can occur because the system tries to delete the clearance and fails because
the clearance has been assigned to some new personnel.
The SAS will fail to synchronize the personnel records to the MAS because the clearance has been
deleted from the MAS. In order to resolve the conflicts, the Operator must manually delete the
clearance from personnel records. With the Remove Clearances action, the Operator can remove the
clearance from all the affected personnel records at the same time.
For more information on an application server environment, see Enterprise Architecture Guide.

Personnel Customer Tab

The Web Client Personnel Customer Tab displays data from 22 Customer fields. These fields can be
used in any way a user wishes. These fields are not used directly by C•CURE 9000, they are
reserved for customer use. These fields can be included on badges designed using the C• CURE ID
Badge Designer.
The name and usage of these fields is configured with the C•CURE 9000 Administration Client
Customer Field Editor. Using the Customer Field Editor, these fields can be renamed, resized, and re-
arranged on the C•CURE 9000 Administration Client Personnel Customer tab. However, on the Web
Client, the field names and positions cannot be modified. The data in the fields can be viewed and
modified from the Web Client Personnel Customer tab.
The Web Client Personnel Customer tab displays either the default names for these fields or the
customized names that your C•CURE 9000 Administrator has configured. If you change the default
name of the fields, that is,. int1, text1, and so forth, the Web Client is able to detect this change and
display the heading accordingly in the search result grid and personnel search grid.
Figure 16 on Page 83 shows the Personnel Customer Tab.

Figure 16: Personnel Customer Tab

Personnel Customer Tab Definitions

The following fields are displayed on the Web Client Personnel Customer tab. The names shown are
the default field names. If your C•CURE 9000 Administrator has customized the names of these
fields, the customized names appear on the Web Client Personnel Customer tab instead.
Table 9: Personnel Customer Tab
Field Description
Text1 – Text1 through Text11 are intended for personnel information such as department, address, city, and state.
Text11
Text12 Text12 is required to have a unique text value for every record in the database. If two or more records have an
identical value for Text12, an error message is displayed.
Int1 – Int1 through Int5 are intended for numeric personnel information such as department number, salary, and age.
Int5
Int6 Int6 is required to have a unique numeric value for every record in the database. If two or more records have an
identical value for Int6, an error message is displayed.
Logical1 You can use these two boolean fields for Yes/No value information such as whether a person is a full-time
– employee. You can click the check box to signify "yes" or clear the check box to signify "no".
Logical2
Date1 – You can use these two date fields to specify personnel information such as a starting date or a promotion date.
Date2

Editing Personnel Customer Data
Editing Personnel Customer Data

You can change the data in the fields on the Personnel Customer Data tab.
To Edit Personnel Customer Fields
2. Search for the Personnel record which you want to edit (see Searching for Personnel on Page 60),
or just click Refresh to see a list of all Personnel and scroll to the Personnel record.
3. Click on the Personnel Record to which you want to edit.
5. Click on the Personnel Customer tab.
6. Click in the field that you want to edit and type the text or number (as appropriate).

Personnel Customer Extended Tab

The Web Client Personnel Customer Extended tab displays data from 22 Customer fields. These
fields can be used in any way a user wishes. These fields are not used directly by C•CURE 9000,
they are reserved for customer use. These fields can be included on badges designed using the C•
CURE ID Badge Designer.
The name and usage of these fields is configured with the C•CURE 9000 Administration Client
Customer Field Editor. Using the Customer Field Editor, these fields can be renamed, resized, and re-
arranged on the C•CURE 9000 Administration Client Personnel Customer tab. However, on the Web
Client, the field names and positions cannot be modified. The data in the fields can be viewed and
modified from the Web Client Personnel Customer tab.
The Web Client Personnel Customer Extended tab displays either the default names for these fields
or the customized names that your C•CURE 9000 Administrator has configured. If you change the
default name of the fields, that is, int1, text1, and so forth., the Web Client is able to detect this
change and display the heading accordingly in the search result grid and personnel search grid.
Figure 17 on Page 86 shows the Personnel Customer Tab.

Figure 17: Personnel Customer Extended Tab

Personnel Customer Extended Tab Definitions

The following fields are displayed on the Web Client Personnel Customer tab. The names shown are
the default field names. If your C•CURE 9000 Administrator has customized the names of these
fields, the customized names appear on the Web Client Personnel Customer tab instead.
Table 10: Personnel Customer Tab
Field Description
Text13 – Text13 through Text24 are intended for personnel information such as department, address, city, and state.
Text24
Text25 Text25 is required to have a unique text value for every record in the database. If two or more records have an
identical value for Text25, an error message is displayed.
Int7 – Int7 and Int8 are intended for numeric personnel information such as department number, salary, and age.
Int8
Int9 Int9 is required to have a unique numeric value for every record in the database. If two or more records have an
identical value for Int9, an error message is displayed.
Logical3 You can use these two boolean fields for Yes/No value information such as whether a person is a full-time
– employee. You can click the check box to signify "yes" or clear the check box to signify "no".
Logical4
Date3 – You can use these two date fields to specify personnel information such as a starting date or a promotion date.
Date4

Personnel Previous Doors Tab

The Web Client Personnel Previous Doors tab shows information about the Doors personnel have
accessed.
This tab allows you to display a list of the accesses and rejects for personnel.
The list is ordered by most recent accesses first and retains past records to the date limit that you
have configured. The Journal System Variable setting for Number Of Days To Store determines how
many days of journal activity are stored.
Figure 18 on Page 88 shows an example of the Personnel Previous Doors tab.

Figure 18: Personnel Previous Doors Tab
Personnel Previous Doors Tab Definitions

The following fields appear on the Previous Doors tab.

Table 11: Previous Doors Tab Definitions
Field Description
Message Displays the type of the message from the Journal for this person's activity at a door.
Type
Message Displays the date and time that this activity occurred (in client local time).
Date/Time
Server Displays the date and time the server received this message (in client local time).
Date/Time
Message Displays the message text from the Journal entry for this activity. The message identifies
Text the person and the door they accessed.

Editing in an Application Server Enterprise Environment
Editing in an Application Server Enterprise Environment

In an enterprise environment running Application Servers, the Web Client does not support the
editing of fields which reference other fields on Dynamic Views.There are some restrictions when
editing personnel records from a Web Client in an Application Server environment in the enterprise.
For more information on the application server enterprise environment, see the Enterprise Architecture
Guide.
If you are connected to a Master Application Server (MAS) and editing a person owned by a Satellite
Application Server (SAS), you are restricting in editing. You can only refer to objects that are global
or reside on the SAS. This restriction applies to the following fields:
l Person/Personnel type
l Person/Operator name
l Credential/Badge layout
l Credential/CHUID format
l Person/Clearance assignments
If you are connected to a Satellite Application Server (SAS) and editing a global person, you are also
restricting in editing. You can only refer to objects which are global which include Person/Personnel
type, Person/Operator name, Credential/Badge layout, and Credential/CHUID format. This
restriction does not apply to Person/Clearance assignments.

4
Chapter 4 - Dynamic Views
This chapter explains how to use Dynamic Views from the C•CURE 9000 Web Client.
In this chapter
• Using Dynamic Views 92

• Accessing a Dynamic View 96
• Manual Actions 99
• Dynamic View Definitions 102

Using Dynamic Views
Using Dynamic Views

Web Client Dynamic Views provide access to selected dynamic views that you have previously
configured on your C•CURE 9000 Administration Client.
If you are working with C•CURE 9000 in an enterprise environment, and you are
NOTE viewing a local-only object on the Master Application Server, the Dynamic View
fields are read-only.
You can view the following Dynamic View types on the C•CURE 9000 Web Client.
Dynamic View Schedule apC Controller ISC Controller iStar Controller
System Variables Time Zone apC Input ISC Door iStar Input
Elevator Door apC Output ISC Input iStar Reader
Controller Input apC Reader ISC Reader iStar Door
Personnel Personnel Type apC Door Output Holiday
Reader Operator Clearance Journal Event
When you click on the Dynamic View icon on the Web Client home page, a Dynamic View pop-up
toolbar appears that lets you chose which Dynamic View to open. The Dynamic View pop-up
toolbar is shown in Figure 19 on Page 92 with Personnel selected.
Figure 19: Dynamic View Toolbar
This toolbar auto-hides after a short time at the bottom of the page (unless you keep the mouse
pointer on the toolbar). To re-display the Dynamic View Toolbar after it auto-hides:

Using Dynamic Views
l Hover the mouse pointer just above the Tyco Copyright statement at the bottom of the page (see
Figure 20 on Page 93).
l Click on the Dynamic View icon on the Web Client toolbar again, and the toolbar opens.
When you display a Dynamic View of an Object Type, the View appears in a tab on the Web Client,
as shown in Figure 20 on Page 93. You can open multiple Dynamic Views and click on a tab to
display that view.
Figure 20: Dynamic View Tabs
The same type dynamic views are shown in list view control with the name of each dynamic view
can be displayed without clicking or hovering over the view, making it easier to navigate to the
desired view (see Figure 3).

Using Dynamic Views
Figure 21: Dynamic View Toolbar - Same Type Views Displayed
The toolbar and icon sizes are adjusted to automatically fit as many dynamic view types as possible
onto the horizontal toolbar. The default number of views displayed in the toolbar is 20 views. If the
Web Client detects more than 20 views, the size of the icons and toolbar are modified. An example of
a Dynamic View of Credentials is shown in Figure 22 on Page 95.
You can close a Dynamic View tab by clicking the on the tab title bar.
Some columns that can be displayed by the Administration Client cannot be

NOTE displayed by the Web Client. Typically these are complex columns that are available
only on the Administration Client. If you add columns to your Dynamic Views and
they do not appear in the Web Client Dynamic Views, it is because these columns
are not accessible to the Web Client.
More Information About Dynamic Views

Accessing a Dynamic View on Page 96 shows how to open Dynamic Views.
Manual Actions on Page 99 explains how to perform Manual Actions on Doors and Events from a
Dynamic View.
Dynamic View Definitions on Page 102 provides definitions for the Dynamic View context menus
for Doors and Events.

Using Dynamic Views
Figure 22: Dynamic View Example - Credentials Displayed

Accessing a Dynamic View

You can access Dynamic Views that display lists of objects from your C•CURE 9000 database.
The Web Client can display selected default Dynamic Views or Dynamic Views created by C•CURE
9000 Operators.
To Access a Dynamic View
1. Click on the Dynamic Views icon on the Web Client home page toolbar.
A Dynamic View pop-up toolbar appears at the bottom of the page. When you hover the mouse
over a Dynamic View category on the toolbar, it enlarges and a heading is visible.
2. Click on the icon for the type of view you want to see. A Stack menu opens that displays the
Dynamic Views available for that object type.
If you hover the mouse pointer over an icon in the Stack menu, the name of the Dynamic View it
represents is displayed, as shown in the example.

3. Click on the Dynamic View in the stack menu that you want to see. You can click on the down
arrow to cancel opening a Dynamic View from the Stack Menu. The view opens in a tab on the
Web Client page.
Next Steps
If you want to display different columns in the Dynamic View, edit the Dynamic View view using a
C•CURE 9000 Administration Client to add the columns that you want to see.
Some columns that can be displayed by the Administration Client cannot be

NOTE displayed by the Web Client. Typically these are complex columns that are available
only on the Administration Client. If you add columns to your Dynamic Views and
they do not appear in the Web Client Dynamic Views, it is because these columns
are not accessible to the Web Client.
You can change the width of the displayed columns in a Dynamic View by hovering the mouse
pointer over a column divider in the Column heading and dragging to make the column wider or
narrower.
You can also sort each column in the dynamic view by clicking the header of the column.

Credential Objects
Credential objects are also supported to allow you to view the Credential type object in the Dynamic
View toolbar.

Manual Actions
Manual Actions
You can perform manual actions from a Dynamic View of doors or a Dynamic View of events.
Manual Actions for Doors on Page 99
Manual Actions for Events on Page 100
Manual Actions for Doors

If you create a Dynamic View that displays doors, you can perform Lock and Unlock manual actions
on doors that appear in the Dynamic View.
To Perform a Manual Action on a Door
1. Display a Dynamic View of Doors in the Web Client.
2. Click on for the Door that you want to Lock or Unlock. A manual action context menu
appears.
3. Click:
l Lock to unlock the Door.
l Unlock to unlock the Door.
l Momentary Unlock to temporarily unlock the Door.
If you want to close the context menu without performing an action, click .

Manual Actions
Manual Actions for Events

If you create a Dynamic View that displays Events, you can perform Activate and Deactivate
manual actions on Events that appear in the Dynamic View.
To Perform a Manual Action on an Event
1. Display a Dynamic View of Events in the Web Client.
2. Click for the Event that you want to Activate or Deactivate. A manual action context menu
appears.
3. Click:
l Activate to activate the Event.
l Deactivate to deactivate the Event if it is already activated.
If you want to close the context menu without performing an action, click .
Manual Action Challenge

If Manual Action Challenge is enabled and you attempt a manual action in the Monitoring
Station, a Credentials Request dialog box appears. You must enter the domain name, user name
and password of a privileged user and click the OK button on this dialog box to complete the
manual action.

Manual Actions
If the Current User or any authorized operator is authenticated, the manual action is executed.
After the manual action is complete, login privileges revert back to the originally logged-in user.
If you fail to complete the Credentials Request dialog box, a Manual Action Challenge
Credentials Supplied Failed to Authenticate error message is displayed, allowing you to Retry
the login or to Cancel. This message is recorded in the journal and displayed in all Monitoring
Stations.
Manual actions are available through the Web Client dynamic view page and can be applied
only to Door or Event view types. Available Door manual actions are Lock, Unlock or
Momentary Unlock, while Event manual actions are Activate or Deactivate.
Manual Action Challenge is enabled or disabled using the Requires Manual Action Challenge
check box in the Configuration > Privilege dialog box > Manual Actions tab found in the
C•CURE 9000 Administration application.

Dynamic View Definitions

Each Dynamic View displays the properties of an object in columns of a list. The columns you see
are defined when the Dynamic View is configured and can be unique to that view.
When you click the Dynamic View icon on the Web Client Toolbar, the Dynamic View types that are
available from your C•CURE 9000 server are displayed as icons on the Dynamic View selector.
Manual Actions Context Menu for Doors

If you have a Dynamic View of C•CURE 9000 Doors, you can left-click a Door in the view to bring
up a context menu with the selections shown in Table 12 on Page 102
Table 12: Manual Actions Context Menu for Doors
Selection Description
Lock Click this selection to lock the door.
Unlock Click this selection to unlock the door.
Momentary Click this selection to temporarily unlock the door. The door remains unlocked for the duration of the Unlock
Unlock Time setting for the door, and then the door is re-locked by the system.
Manual Actions Context Menu for Events

If you have a Dynamic View of C•CURE 9000 Events, you can left-click an Event in the view to
bring up a context menu with the selections shown in Table 13 on Page 102.
Table 13: Manual Actions Context Menu for Events
Selection Description
Activate Click this selection to activate the Event and carry out the actions defined in the Event.
Deactivate Click this selection to deactivate the Event if it is active.
If Manual Action Challenge is enabled and you attempt a manual action in the Monitoring Station, a
Credentials Request dialog box appears. You must enter the user name and password of a privileged
user and click the Login button on this dialog box to complete the manual action.

See Manual Action Challenge on Page 100 for more information about Manual Action Challenge.


5
Chapter 5 - Reporting
This chapter explains how to use Reporting features offered in the C•CURE 9000 Web Client.
In this chapter
• Reports 106

Reports
Reports
The Web Client allows you to perform basic reporting such as creating, configuring, loading and
saving reports. With the Web Client reporting feature you can review personnel history stored in the
journal table to review personnel activities. The audit log is also accessible through the reporting
interface and the results of these report types can be generated and displayed in the Report View
page or saved in the desired file format. You are prompted to select from several report outputs.
When the Reporting icon is selected, the Reporting Configuration Web page displays, allowing
you to select the parameters for either the Access Control Journal or the Audit Log report. Use the
selection check box to select between the two reports. The default selection is the Access Control
Journal. When a pre-selected report is selected, the appropriate check box is selected.Figure 23 on
Page 107 shows the Activity Journal Reporting Configuration (default) web page. The Audit Log
Reporting Configuration Web page shows the same parameters with the exception of the Location
selection drop-down.
Once you have selected parameters for your report, click Run Report.
Activity Journal Reports

The Activity Journal Report includes activity occurring in the system and monitored by the system:
l accesses
l rejects
l event activations
l input/output state changes
This information is also known as the activity log. An example of the Activity Journal is shown
inFigure 23 on Page 107.

Reports
Figure 23: Activity Journal Reporting Configuration
An example of an Activity Journal that has been exported to CSV format is shown in Figure 24 on
Page 107.
Figure 24: Activity Journal Report Exported to CSV

Reports
Audit Log Reports

The Audit Log includes changes made to the C•CURE 9000 database by the Administration
application such as:
l additions
l modifications
l deletions
of security objects and personnel records. This information is known as the Audit Log. An example
of the Audit Log Report is shown in Figure 25 on Page 108.
Figure 25: Audit Log Reporting Configuration
Report Output Features

• Columns can be sorted by clicking the heading.
• Column size can be altered.

Reports
• Column order can be changed.
• When Print is selected, the selected output is directed to the browser default printer.
• When Export is selected, the output is saved to a file. You must specify a file name and file type
either CSV or XML.
• When e-mail is selected, the report output file is attached to an e-mail message. You are prompted
to enter an e-mail address when this option is selected.

Reports

6
Chapter 6 - Monitoring
This chapter explains how to Monitor Activities from the C•CURE 9000 Web Client.
In this chapter
• Monitoring Activities 112

• Activity Viewer Icons and Messages 114
• Freezing the Activity List 115

Monitoring Activities
The Monitoring page displays an Activity Viewer which is modeled from the C•Cure 9000
Administration application.
The Activity Viewer shows each activity as a row in a table with columns for the Data - Time and
the Activity Message. See the example below:
As new activities occur, they appear at the bottom of the Activity Viewer list. After a certain amount
of time (set by the system administrator), the cursor returns to the bottom of the list to display the
most recent message.
Activities in the list are displayed in rows that contain the date and time of the activity.
The Activity Viewer Toolbar allows you to navigate through the list of activities. The maximum
number of Activity Messages displayed in the Viewer are 1000.
Operator Privileges determine whether the Activity Viewer displays certain security objects and
events for a Web Client user. See Understanding Operator Privileges and Partitions on Page 46.
If Manual Action Challenge is enabled and a manual action is activated in the Monitoring Station
application, a Credentials Request dialog box will appear in the Web Client. To complete the Manual
Action Challenge in the Web Client, you must enter the user name and password of a privileged
user and click the Login button on this dialog box to complete the manual action.
See Manual Actions for more information about Manual Action Challenge.

More Information About Monitoring Activities

Activity Viewer Icons and Messages on Page 114 provides definitions and descriptions of the icons
and messages that appear in the Web Client Activity Viewer.
Freezing the Activity List on Page 115 explains how to temporarily stop the list from scrolling by
using the Freeze button on the toolbar.

Activity Viewer Icons and Messages
Activity Viewer Icons and Messages

This topic provides definitions and descriptions of the icons and messages that appear in the Web
Client Activity Viewer.
Activity Viewer Icons

The following icons appear on the Activity Viewer.
Table 14: Activity Viewer Icons
Icon Name Description
Page Up Click this icon to scroll the list up one page.
Page Down Click this icon to scroll the list down one page.
Top Click this icon to scroll the list to the first entry.
Bottom Click this icon to scroll the list to the last entry.
Freeze Click this icon to freeze the list (stop the list from scrolling).
Stop Click this icon to stop selected activities.
Start Click this icon to start selected activities.
Activity Viewer Messages

Activity Viewer Messages are displayed in a format similar to that of the Monitoring Station
application. Each message shows the date and time of the message and text describing the Activity.
Because Activity messages vary according to the objects and applications that are configured with
your C•CURE 9000, refer to the help or documentation for the application or object type for more
information. The Activity Viewer displays up to 1000 activity messages.

Freezing the Activity List

Normally, the Activity List scrolls upward as new activities are added to the bottom of the list. In an
active system, the list can scroll rapidly. You can temporarily stop the list from scrolling by using
the Freeze button on the toolbar.
To Freeze the Activities List
1. With the Activity Viewer displayed, click ( ). The Activities List stops scrolling.
2. If you click ( ) again, the list begins to scroll again, starting with activities that occurred while
the list was frozen.


Index
A B
About the Web Client 12 Badge Layout 71
Access Control Journal 106
Access Type 70
C
Cancel 73
Accessing Dynamic Views 96
Card Number 70
Accessing Help 52
Card Status 71
Accessing Personnel 57
CardInt1 - CardInt4 72
Acency Code 71
Caution symbol 10
Activate 102
Chrome 13
Activate Event 99
CHUID 72
Activation 71
CHUID, Validate Uniqueness 69
Active 70
Clearance Description 77
Activity Journal Reporting Configuration 106
Clearance Name 77
Activity List, Freeze 115
Clearance tab 79, 81
Activity Viewer Icons 114
Clearance, assign 78
Activity Viewer Messages 114
Close Web CLient 48
Add Card Access 69
Configure SSL Options in IIS 5.10 and 6.0 for 33
Add Clearance 77 the Web Client
Add Credential 74 Conventions
Add Pin Only Access 69 documentation 10
Adding Personnel 62 Conventions used in this manual 10
Assign a Clearance 78 Creating Personnel 62
Association Category 72 Credential ID 70
Audit Log 47 Credential Issue 72
Audit Log Reporting Configuration 106 Credential Series 71
Audit Log Reports 108 Credential, adding 74
Audit Trail 47 Credential, Edit 75
Authentication, Windows account 12 Credential, Remove 69
Automatic Logoff 48 CSV 109
C•CURE 9000 Web Client User Guide Index 117

Index
Customer Tab, editing 85

G
D Getting Started 44
Danger symbol 10 Google Chrome 13, 51
Date1 84
Date2 84
H
Help, accessing 52
Date3 and Date4 87
HMAC 72
Deactivate 102
Home Page, Web Client 44
Deactivate Event 99
Delete Personnel 64 I
Disabled 70-71 IIS Metabase and IIS 6 Configuration Com- 49
patibility
Documentation conventions 10
IIS versions 13
Dynamic View Definitions 102
IIS Web Server 23
Dynamic View toolbar 92
Importing SSL Certificates 24
Dynamic View, accessing 96
Installing Web Client 18
Dynamic View, Manual Actions 99
Int1 - Int5 84
Dynamic Views 92
Int6 84
E Int7 and Int8 87
Edit Credential 75 Int9 87
Editing Personnel 56 Internet Explorer, 7.0 13
Editing Personnel customer data 85 Internet Information Server 49
Enabling SSL 28, 31 Internet Information Services (IIS) 13
Exiting Web Client 48 Issue Code 71
Expiration 71
Expired 70-71 L
Last Name 66
F License 22
Facility Code 71 List Personnel records 60
Firefox 13 Location 106
First Name 66 Lock Door 99, 102
Freeze 114 Log, Audit 47
Freeze, toolbar icon 115 Logical1 84
Freezing the Activities List 115 Logical2 84
118 Index C•CURE 9000 Web Client User Guide

Index
Logical3 and Logical4 87 Personnel Customer Tab 83, 85-86

Lost 70 Personnel Editor 57
Personnel General tab 65
M Personnel ID 66
Manual Actions 99
Personnel Identifier 72
Message Date/Time 89
Personnel List 57
Message Text 89
Personnel Previous Doors Tab 88
Message Type 89
Personnel Search 56
Microsoft Silverlight v3.0 50
Personnel Type 66
Middle Name 66
Personnel, Adding 62
Momentary Unlock 99, 102
Personnel, Clearance 78
Monitoring 112
Personnel, Deleting 64
Mozilla Firefox 13
Personnel, Editing 56
Multiple Authentication Required 50
Personnel, remove Clearance 81
N Personnel, Search 60
Name, Clearance 77 PIN 66
NetBIOS 17 Prev. Doors 88
New Personnel 62 Privileges, Operator 46
O Proxy Server Errors 50
Online Help 52 R
Operator Name 66 Remote Client 17
Operator privileges 44 Remove Clearance 77, 81
Operator Privileges 46 Remove Credential 69
Organization Category 72 Report Output Features 108
P Report View page 106
Partitions 46 Reporting Configuration 106
Personnel Clearance tab 79, 81 Reports
Personnel Clearances tab 76 Excel format 107
Personnel Credential, adding 74 Run Report 106
Personnel Credential, Edit 75 S
Personnel Credentials tab 68 Save 73
C•CURE 9000 Web Client User Guide Index 119

Index
Searching, Personnel 60 Web Client, About 12

Serach, Personnel 56 Web Client, Exiting 48
Server Date/Time 89 Windows account 12
Sign on, Web Client 44
Silverlight 12-13
Simultaneous Web Clients 22
Software House certificate 24
Software House Certificate Authority 24
SSL Encryption 23, 44, 51
Stolen 70-71
System Code 71
System Requirements 13
T
Text1 - Text11 84
Text12 84
Text13 through Text24 87
Text25 87
Toolbar, Dynamic View 92
U
Unlock Door 99, 102
URL, Web Client 44
V
Validate CHUID Uniqueness 69
W
Warning symbol 10
Web Client for Windows 2008 Server 34
Web Client Home Page 44
Web Client Installation 18
Web Client reporting 106
Web Client URL 44
120 Index C•CURE 9000 Web Client User Guide

Ccure-9000-V2 0-Webclient-Guide Ra0 LT en

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Ccure-9000-V2 0-Webclient-Guide Ra0 LT en

Uploaded by

Copyright:

Available Formats

C•CURE

Web Client User Guide

6 Technology Park Drive

Software version: 2.0

This manual is proprietary information of Software House. Unauthorized reproduction of any

C•CURE 9000 Web Client User Guide 3

4 C•CURE 9000 Web Client User Guide

C•CURE 9000 Web Client User Guide 5

• How to Use this Manual 8

C•CURE 9000 Web Client User Guide Preface 7

How to Use this Manual

Chapter 2: Getting Started

Chapter 4: Dynamic Views

8 Preface C•CURE 9000 Web Client User Guide

Finding More Information

C•CURE 9000 Web Client User Guide Preface 9

Bold Bold text describes one of the following items:

Italic Indicates a new term.

<text> Indicates a variable.

The following items are used to indicate important information.

Indicates an alternate method of performing a task.

Indicates a caution. A caution contains information essential to avoid damage to the

10 Preface C•CURE 9000 Web Client User Guide

• About the C•CURE 9000 Web Client 12

C•CURE 9000 Web Client User Guide Chapter 1 11

About the C•CURE 9000 Web Client

l View and edit Personnel - see Editing Personnel on Page 56

l View Monitoring Station Activities - see Monitoring Activities on Page 112.

l Create and View Reports - see Reports on Page 106.

For More Information

l System Requirements on Page 13

l Installing the Web Client on Page 18

l Licensing the Web Client on Page 22

l Enabling SSL Encryption for the Web Client on Page 23

12 Chapter 1 C•CURE 9000 Web Client User Guide

Client One of the following:

Browser • Microsoft Internet Explorer version 8.0 or later

Internet Silverlight v3.0. and v4.0

C•CURE 9000 Web Client User Guide Chapter 1 13

Web Client Configurations

l Local Web Client Configuration on Page 14

l Remote Web Client Configuration on Page 14

l Remote Web Client Through Remote IIS Server Configuration on Page 15

l Web Client in a Workgroup on Page 16

Local Web Client Configuration

Remote Web Client Configuration

14 Chapter 1 C•CURE 9000 Web Client User Guide

Figure 2: C•CURE 9000 Server with Remote Web Clients

Remote Web Client Through Remote IIS Server Configuration

C•CURE 9000 Web Client User Guide Chapter 1 15

Web Client in a Workgroup

1. Add the following to the Hosts file on the SiteServer.

siteserver ip address - siteserver name

remote client ip address - remote client1 name

16 Chapter 1 C•CURE 9000 Web Client User Guide

remote client ip address - remote client2 name

siteserver ip address - siteserver name

A table displays listing the NetBIOS names for your computer.

C•CURE 9000 Web Client User Guide Chapter 1 17

Installing the Web Client

To Install the Web Client Software

18 Chapter 1 C•CURE 9000 Web Client User Guide

3. The Welcome screen appears. Click Next to proceed.