4G Lite Operator Manual

Copyright
4G LITE OPERATOR’S
MANUAL
Version 4.4.5.0.0.0.0
Part # 430-4G-060-00-005 1
© 2012 - L-1 Identity Solutions Inc. All rights reserved
Copyright
Copyright Information
© 2012 L-1 Identity Solutions, Inc.
All rights reserved. This product and related documentation are protected by copyright and
distributed under licenses restricting their use, copying, distribution, and de-compilation. No
part of this product or related documentation may be reproduced in any form by any means
without written permission from L-1 Identity Solutions and its licensors, if any.
Redistributions of source code must retain the above copyright notice, this list of conditions
and the following disclaimer. Redistributions in binary form must reproduce the above
copyright notice, this list of conditions and the following disclaimer in the documentation
and/or other materials provided with the distribution.
Neither the name of the L-1 Identity Solutions, Inc. nor the names of its contributors may be
used to endorse or promote products derived from this software without specific prior written
permission.
TRADEMARKS
The trademarks identified herein are the trademarks or registered trademarks of L-1 Identity
Solutions, Inc. All other brands and products referenced herein are acknowledged to be
trademarks or registered trademarks of their respective holders or manufacturers.
THE PRODUCT AND PUBLICATION ARE PROVIDED ―AS IS‖ WITHOUT WARRANTY OF
ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE
IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR
PURPOSE, OR NON-INFRINGEMENT.
THIS PUBLICATION COULD INCLUDE TECHNICAL INACCURACIES OR

TYPOGRAPHICAL ERRORS. CHANGES ARE PERIODICALLY ADDED TO THE
INFORMATION HEREIN; THESE CHANGES WILL BE INCORPORATED IN NEW
EDITIONS OF THE PUBLICATION. L-1 IDENTITY SOLUTIONS, INC MAY MAKE
IMPROVEMENTS AND/OR CHANGES IN THE PRODUCT(S) AND/OR THE PROGRAM(S)
DESCRIBED IN THIS PUBLICATION AT ANY TIME.
IMPORTANT—Please refer to the L-1 Identity Solutions End User License Agreement
document and read it carefully before using any L-1 Identity Solutions software on your
computer. This document contains important information about your legal rights.
Part # 430-4G-060-00-005 2
Table of Content
TABLE OF CONTENT
CHAPTER 1 - INTRODUCTION ...................................................................................................................................... 16

1.1 TEMPLATE SUPPORT................................................................................................................................................... 16
1.1.1 1:1 TEMPLATE OR 348-BYTE TEMPLATES ............................................................................................................ 16
1.1.2 1:500 SEARCHING TEMPLATES ............................................................................................................................... 17
1.1.3 USER RECORDS .......................................................................................................................................................... 17
1.1.4 BIOMETRIC USER RECORDS ................................................................................................................................... 18
1.1.5 CARD ONLY RECORD ............................................................................................................................................... 18
1.1.6 TEMPLATE SUPPORT SUMMARY ........................................................................................................................... 19
1.2 PROXIMITY CARDS ..................................................................................................................................................... 20
1.2.1 COMMAND CARDS .................................................................................................................................................... 20
1.3 SMART CARDS .............................................................................................................................................................. 21
1.4 SECUREADMIN LITE APPLICATION ........................................................................................................................ 21
1.4.1 LOGIN........................................................................................................................................................................... 21
1.4.1.1 TO LOGIN ................................................................................................................................................................. 21
1.4.2 SECUREADMIN LITE MAIN SCREEN...................................................................................................................... 22
1.3.2.1 QUICK ACCESS PANEL ......................................................................................................................................... 22
1.3.2.2 MENU BAR ............................................................................................................................................................... 23
CHAPTER 2 - MANAGING USERS ................................................................................................................................. 24

2.1 MANAGING USERS ...................................................................................................................................................... 24
2.2 USERS TAB .................................................................................................................................................................... 25
2.2.1 TO FILTER BY USER .................................................................................................................................................. 25
2.2.2 TO ADD A USER .......................................................................................................................................................... 25
2.3 MANAGING TEMPLATES ............................................................................................................................................ 26
2.3.1 VIEWING TEMPLATES ON A DEVICE .................................................................................................................... 27
2.3.1.1 FILTER BY TEMPLATE DETAILS ......................................................................................................................... 28
2.3.2 VIEWING TEMPLATES IN A DATABASE ............................................................................................................... 28
2.3.2.1 FILTER BY TEMPLATE DETAILS ......................................................................................................................... 28
2.3.3 EDITING TEMPLATES IN DATABASE .................................................................................................................... 29
2.3.4 VERIFYING TEMPLATES .......................................................................................................................................... 31
2.3.4.1 TO VERIFY TEMPLATES ON A DEVICE ............................................................................................................. 32
2.3.4.2 TO VERIFY TEMPLATES FROM DATABASE ..................................................................................................... 32
2.3.5 COMPARING TEMPLATES ....................................................................................................................................... 32
2.4 MANAGING TEMPLATE SETTINGS .......................................................................................................................... 34
2.4.1 PROX USER MODE ..................................................................................................................................................... 34
2.4.2 SMART CARD USER MODE ...................................................................................................................................... 35
2.4.3 DOOR TIMEOUT ......................................................................................................................................................... 37
2.4.4 TEMPLATE EXPIRY ................................................................................................................................................... 37
2.4.5 CONFIGURE TEMPLATE SETTINGS ....................................................................................................................... 37
2.5 USER GROUPS TAB ...................................................................................................................................................... 38
2.5.1 TO FILTER BY A USER GROUP ................................................................................................................................ 38
2.5.2 TO ADD A USER GROUP ........................................................................................................................................... 39
2.6 COMPANIES TAB .......................................................................................................................................................... 41
2.6.1 TO FILTER BY COMPANY ........................................................................................................................................ 41
2.6.2 TO ADD A COMPANY ................................................................................................................................................ 42
2.7 SITES TAB ...................................................................................................................................................................... 43
2.7.1 TO FILTER BY SITE .................................................................................................................................................... 43
2.7.2 TO ADD A SITE ........................................................................................................................................................... 44
Part # 430-4G-060-00-005 3
Table of Content
2.8 DEPARTMENTS TAB .................................................................................................................................................... 44

2.8.1 TO FILTER BY DEPARTMENT .................................................................................................................................. 45
2.8.2 TO ADD A DEPARTMENT ......................................................................................................................................... 45
CHAPTER 3 - MANAGING NETWORK SETTINGS .................................................................................................... 47

3.1 VIEW DEVICES IN NETWORK .................................................................................................................................... 48
3.2 REGISTER DEVICE VIA SERVER ............................................................................................................................... 49
3.3 REGISTER DEVICE VIA CLIENT ................................................................................................................................ 52
3.4 UNREGISTERING THE DEVICE .................................................................................................................................. 56
3.5 VIEW DEVICE SETTINGS IN NETWORK .................................................................................................................. 59
3.5.1 GENERAL TAB ............................................................................................................................................................ 60
3.5.2 COMMUNICATION TAB ............................................................................................................................................ 62
3.5.3 LED TABLE TAB ......................................................................................................................................................... 67
3.5.4 TAMPER TAB .............................................................................................................................................................. 68
3.5.5 ACCESS CONTROL TAB ............................................................................................................................................ 69
3.5.5.1 CONFIGURING ACCESS CONTROL FOR 4G LITE DEVICE ............................................................................. 69
3.5.5.1.1 TO CONFIGURE ACCESS CONTROL ................................................................................................................ 70
3.5.5.1.2 TO CONFIGURE ACCESS RULE ........................................................................................................................ 71
3.5.5.1.3 TO CONFIGURE SMART CARD VERIFICATION ............................................................................................ 72
3.5.5.1.4 ACTIVATING TIME OVERRIDE MODE ............................................................................................................ 73
3.5.5.2 CONFIGURING ACCESS CONTROL FOR SECURE CONTROL DEVICE......................................................... 74
3.5.5.2.1 ACTIVATING TIME OVERRIDE MODE ............................................................................................................ 74
3.5.5.2.2 FIRE PANEL INPUT .............................................................................................................................................. 75
3.5.5.2.3 TO SYNCHRONIZE SECURE CONTROL........................................................................................................... 75
3.5.6 ACCESS SCHEDULES TAB ....................................................................................................................................... 75
3.5.6.1 TO ADD AN ACCESS SCHEDULE ........................................................................................................................ 78
3.5.6.2 TO SAVE AND UPLOAD ACCESS SCHEDULES................................................................................................. 78
3.5.7 HOLIDAY SCHEDULES TAB .................................................................................................................................... 78
3.5.7.1 TO ADD A HOLIDAY ACCESS SCHEDULE ........................................................................................................ 79
3.5.7.2 TO SAVE AND UPLOAD HOLIDAY ACCESS SCHEDULES ............................................................................. 81
3.5.8 MISCELLANEOUS TAB ............................................................................................................................................. 82
3.5.8.1 SEND VERIFICATION RESULT ............................................................................................................................. 82
3.5.8.1.1 TO ENABLE AND CONFIGURE THE SEND VERIFICATION RESULT FEATURE ...................................... 83
3.5.8.2 ACTIVATE REALTIME ACTIVITY ....................................................................................................................... 83
3.5.8.2.1 TO ACTIVATE REALTIME ACTIVITY LOGGING AND MONITORING ....................................................... 83
3.5.8.3 ACTIVATE CUSTOM VERIFICATION ENTRY MODE ....................................................................................... 83
3.5.8.3.1 TO ENABLE CUSTOM VERIFICATION ENTRY MODE .................................................................................. 83
3.5.9 AUDIO TAB ................................................................................................................................................................. 84
3.5.10 GENERAL PURPOSE OUTPUT TAB ....................................................................................................................... 86
3.5.10.1 GENERAL PURPOSE OUTPUT ............................................................................................................................ 88
3.5.10.1.1 TO CONFIGURE GPO SETTINGS ..................................................................................................................... 88
3.5.11 WIEGAND TAB ......................................................................................................................................................... 89
3.5.11.1 PRE-DEFINED WIEGAND FORMATS................................................................................................................. 90
3.5.11.1.1 TO SET THE WIEGAND FORMAT TO A PRE-DEFINED FORMAT ............................................................. 90
3.5.11.2 PASSTHRU WIEGAND FORMATS ...................................................................................................................... 91
3.5.11.2.1 TO SET THE WIEGAND FORMAT TO A PASS-THRU FORMAT ................................................................. 92
3.5.11.3 CUSTOM INPUT WIEGAND FORMAT ............................................................................................................... 92
3.5.11.4 PULSE WIDTH ....................................................................................................................................................... 92
3.5.11.4.1 TO SET THE PULSE WIDTH ............................................................................................................................. 92
3.5.11.5 PULSE INTERVAL ................................................................................................................................................. 92
3.5.11.5.1 TO SET THE PULSE INTERVAL ....................................................................................................................... 92
3.5.11.6 ACTIVATE WIEGAND INPUT ............................................................................................................................. 93
Part # 430-4G-060-00-005 4
Table of Content
3.5.11.7 ACTIVATE WIEGAND OUTPUT ......................................................................................................................... 93

3.5.11.7.1 TO ACTIVATE WIEGAND OUTPUT ................................................................................................................ 93
3.5.11.8 WIEGAND OUTPUT SETTINGS .......................................................................................................................... 93
3.5.11.8.1 TO SET WIEGAND OUTPUT SETTINGS ......................................................................................................... 94
3.5.11.9 CUSTOM WIEGAND SETTINGS.......................................................................................................................... 95
3.5.11.9.1 TO UPLOAD CUSTOM WIEGAND OUTPUT SETTINGS ............................................................................... 95
3.5.11.9.2 TO CREATE A CUSTOM WIEGAND FORMAT .............................................................................................. 95
3.5.12 BIOMETRICS TAB .................................................................................................................................................... 98
3.5.12.1 GLOBAL SECURITY THRESHOLD ..................................................................................................................... 98
3.5.12.1.1 TO CHANGE THE GLOBAL SECURITY THRESHOLD ................................................................................. 99
3.5.12.2 DEVICE MODE....................................................................................................................................................... 99
3.5.12.3 TEMPLATE ENCRYPTION ................................................................................................................................. 100
3.5.12.4 MULTI-USER VERIFICATION ........................................................................................................................... 100
3.5.12.4.1 TO SET MULTI-USER VERIFICATION SETTINGS ...................................................................................... 100
3.5.12.5 BIOMETRIC VERIFICATION ............................................................................................................................. 100
3.5.12.6 AUTO-FINGER DETECTION .............................................................................................................................. 101
3.5.12.7 PASSWORD VERIFICATION ............................................................................................................................. 101
3.5.12.8 FINGER PLACEMENT ......................................................................................................................................... 101
3.5.13 CLOCK TAB ............................................................................................................................................................. 101
3.5.13 .1 TO SET THE TIME ON THE DEVICE ............................................................................................................... 102
3.5.13 .2 TO SET THE TIME ZONE, CLOCK TYPE AND DISPLAY FORMAT ........................................................... 102
3.5.14 BIOMETRIC SCHEDULES TAB ............................................................................................................................. 103
3.5.14.1 BIOMETRIC SCHEDULES .................................................................................................................................. 103
3.5.14.1.1 TO ADD A BIOMETRIC SCHEDULE FOR THE SELECTED DEVICE ........................................................ 104
3.5.14.2 DOOR OPEN SCHEDULE ................................................................................................................................... 105
3.5.14.2.1 TO ACTIVATE DOOR OPEN SCHEDULE ..................................................................................................... 105
3.5.15 DOOR/DEVICE STATUS TAB................................................................................................................................ 105
3.5.16 DEVICE SECURITY ................................................................................................................................................ 107
3.5.17 LCD TAB .................................................................................................................................................................. 108
3.5.17.1 TO SET THE DEVICE WALLPAPER ................................................................................................................. 109
3.5.17.2 TO CHANGE THE DEVICE LANGUAGE .......................................................................................................... 110
3.5.17.3 TO ACTIVATE/DEACTIVATE LCD VERIFICATION ...................................................................................... 110
3.5.17.4 TO ACTIVATE/DEACTIVATE KEYPAD ADMINISTRATION ....................................................................... 110
3.5.18 TIME AND ATTENDANCE TAB ............................................................................................................................ 110
3.5.18.1 TO CONFIGURE T&A MODE ............................................................................................................................. 115
CHAPTER 4 - ENROLLING USERS .............................................................................................................................. 116

4.1 ENROLLING USERS .................................................................................................................................................... 116
4.2 QUICK ENROLLMENT ............................................................................................................................................... 117
4.2.1 TO PERFORM A QUICK ENROLLMENT ................................................................................................................ 117
4.3 ADVANCED ENROLLMENT...................................................................................................................................... 123
4.3.1 TO PERFORM A ADVANCED ENROLLMENT ...................................................................................................... 123
4.4 CARD ENROLLMENT ................................................................................................................................................. 130
4.4.1 TO PERFORM A CARD ENROLLMENT ................................................................................................................. 130
CHAPTER 5 - MANAGING SMART CARDS ............................................................................................................... 133

5.1 SMART CARD DEVICE MANAGER ......................................................................................................................... 135
5.1.1 SMART CARD SECURITY SETTINGS .................................................................................................................... 138
5.1.1.1 CHANGING THE SITE KEY ................................................................................................................................. 139
5.1.1.2 RESETTING A SITE KEY ...................................................................................................................................... 141
5.1.1.3 CHANGING MIFARE PLUS KEY ......................................................................................................................... 141
5.1.1.4 RESETTING A MIFARE PLUS KEY .................................................................................................................... 142
Part # 430-4G-060-00-005 5
Table of Content
5.1.2 CONFIGURE CARD LAYOUT ................................................................................................................................. 143

5.1.2.1 ICLASS CARDS ...................................................................................................................................................... 143
5.1.2.2 MIFARE CARDS ..................................................................................................................................................... 144
5.1.2.2.1 MiFARE BLOCK MEMORY STRUCTURE ....................................................................................................... 147
5.1.2.2.2 MiFARE NEW LAYOUT ..................................................................................................................................... 147
5.1.2.2.3 MOVING THE ADMIN BLOCK ......................................................................................................................... 148
5.1.2.2.4 SAVING MiFARE LAYOUTS TO THE PC ........................................................................................................ 148
5.1.2.2.5 PRECAUTIONS ON CHANGING MiFARE SMART CARD LAYOUTS ......................................................... 149
5.1.2.2.6 MiFARE SERIAL NUMBER ............................................................................................................................... 149
5.1.2.3 DESFire CARDS ...................................................................................................................................................... 150
5.2 SMART CARD MANAGER ......................................................................................................................................... 151
5.2.1 DELETING TEMPLATES.......................................................................................................................................... 152
5.2.2 DELETING WIEGAND STRINGS ............................................................................................................................ 152
5.2.3 SECURING CARDS ................................................................................................................................................... 152
5.2.4 RESETTING CARDS ................................................................................................................................................. 153
5.3 SMART CARD TEMPLATE SUPPORT ...................................................................................................................... 154
5.4 MANAGING SITE KEYS AND MIFARE PLUS KEY................................................................................................ 155
5.4.1 SITE KEY FILES ........................................................................................................................................................ 155
5.4.2 SITE KEYS ON INDIVIDUAL SMART CARDS ..................................................................................................... 155
5.4.3 CREATING A SITE KEY FILE ................................................................................................................................. 156
5.4.4 FORGOTTEN SITE KEYS ........................................................................................................................................ 157
5.4.5 COMPROMISED SITE KEYS ................................................................................................................................... 158
5.4.6 MIFARE PLUS KEY .................................................................................................................................................. 158
CHAPTER 6 - BROADCASTING SETTINGS ............................................................................................................... 160

6.1 BROADCASTING SETTINGS ..................................................................................................................................... 160
6.2 BROADCAST DEVICE PARAMETERS ..................................................................................................................... 162
6.2.1 SET PARAMETER FOR BROADCASTING ............................................................................................................. 162
6.2.2 TO MODIFY AND BROADCAST THE DEVICE SETTINGS.................................................................................. 164
6.3 TO BROADCAST FIRMWARE PACKAGE ............................................................................................................... 166
6.4 TO BROADCAST AUDIO FILE .................................................................................................................................. 169
6.5 TO BROADCAST SMART CARD LAYOUT FILE .................................................................................................... 171
6.6 BROADCAST IMAGE FILE ........................................................................................................................................ 171
CHAPTER 7 - MANAGING LOGS ................................................................................................................................. 173

7.1 MANAGING LOGS ...................................................................................................................................................... 173
7.2 APPLICATION EVENT LOG....................................................................................................................................... 174
7.2.1 FILTER APPLICATION EVENT LOG ...................................................................................................................... 175
7.2.2 EXPORT APPLICATION EVENT LOG ENTRIES ................................................................................................... 175
7.3 TRANSACTION LOG ................................................................................................................................................... 176
7.3.1 DOWNLOAD TRANSACTION LOG ........................................................................................................................ 177
7.3.1.1 DEFINED AUTO DOWNLOAD SCHEDULE ....................................................................................................... 177
7.3.1.2 MANUAL DOWNLOAD OF TRANSACTION LOG ENTRIES .......................................................................... 178
7.3.2 FILTER THE TRANSACTION LOG ......................................................................................................................... 178
7.3.3 EXPORT TRANSACTION LOG ENTRIES ............................................................................................................... 178
7.3.4 DELETE SELECTED TRANSACTION LOG ENTRIES .......................................................................................... 179
7.3.5 DELETE ALL TRANSACTION LOG ENTRIES....................................................................................................... 179
7.4 DEVICE EVENT LOG .................................................................................................................................................. 179
7.4.1EXPORT DEVICE EVENT LOG ................................................................................................................................ 180
CHAPTER 8 - MENU BAR COMMANDS ..................................................................................................................... 182

8.1 FILE MENU ................................................................................................................................................................... 182
Part # 430-4G-060-00-005 6
Table of Content
8.1.1 SIGN IN AS ................................................................................................................................................................. 183

8.1.2 CHANGE PASSWORD .............................................................................................................................................. 183
8.1.3 EXIT ............................................................................................................................................................................ 184
8.2 MANAGE MENU .......................................................................................................................................................... 184
8.3 TOOLS MENU .............................................................................................................................................................. 185
8.3.1 WIEGAND .................................................................................................................................................................. 185
8.3.1.1 TO IMPORT A PREDEFINED/CUSTOM WIEGAND FORMAT INTO THE DATABASE ............................... 186
8.3.1.2 TO EXPORT A PREDEFINED/ CUSTOM WIEGAND FORMAT ....................................................................... 186
8.3.1.3 TO ADD A CUSTOM WIEGAND FORMAT ........................................................................................................ 187
8.3.2 WEEK SETTING ........................................................................................................................................................ 188
8.3.3 FIRMWARE UPGRADE ............................................................................................................................................ 189
8.3.4 SENSOR TEST ........................................................................................................................................................... 191
8.3.5 SYNCHRONIZATION ............................................................................................................................................... 192
8.3.6 RESET TO FACTORY DEFAULTS .......................................................................................................................... 193
8.3.7 REALTIME ACTIVITY MONITOR .......................................................................................................................... 195
8.3.7.1 ENABLE REALTIME ACTIVITY LOGGING AND MONITORING .................................................................. 195
8.3.7.2 REALTIME ACTIVITY MONITORING ............................................................................................................... 196
8.3.7.3 FILTERING REALTIME ACTIVITIES ................................................................................................................. 197
8.3.8 OPTIONS .................................................................................................................................................................... 198
8.4 HELP MENU ................................................................................................................................................................. 200
8.4.1 HELP CONTENT ........................................................................................................................................................ 200
8.4.2 ABOUT PRODUCT REGISTRATION ...................................................................................................................... 200
8.4.3 ABOUT SECUREADMIN LITE ................................................................................................................................ 201
CHAPTER 9 - FRONT PANEL OPERATION ............................................................................................................... 202

9.1 OPERATING THE 4G LITE DEVICE FROM THE FRONT PANEL ......................................................................... 202
9.1.1 ACCESSING ADMINISTRATOR MODE ................................................................................................................ 204
9.1.1.1 ALL USERS WITH PASSWORD ........................................................................................................................... 207
9.1.1.2 ALL USER WITH PASSWORD AND BIOMETRIC .............................................................................................. 208
9.1.1.3 ADMIN USER WITH PASSWORD ....................................................................................................................... 210
9.1.1.4 ADMIN USER WITH PASSWORD AND BIOMETRIC ........................................................................................ 210
9.2 SYSTEM ........................................................................................................................................................................ 210
9.2.1 IO ................................................................................................................................................................................. 211
9.2.1.1 TCP/IP ...................................................................................................................................................................... 212
9.2.1.1.1 DHCP .................................................................................................................................................................... 212
9.2.1.1.1 Static ...................................................................................................................................................................... 213
9.2.1.2 RS-485 ...................................................................................................................................................................... 215
9.2.1.2.1 Baudrate ................................................................................................................................................................ 215
9.2.1.2.2 Net ID .................................................................................................................................................................... 216
9.2.1.3 Wiegand ................................................................................................................................................................... 216
9.2.1.3.1 Input Port ............................................................................................................................................................... 217
9.2.1.3.1 Output Port ............................................................................................................................................................ 217
9.2.1.4 Tamper ..................................................................................................................................................................... 218
9.2.1.4.1 State ....................................................................................................................................................................... 218
9.2.1.4.2 Biometric ............................................................................................................................................................... 219
9.2.1.4.3 Erase Template ...................................................................................................................................................... 219
9.2.1.4.4 Send Wiegand........................................................................................................................................................ 220
9.2.1.5 Door Control ............................................................................................................................................................ 220
9.2.1.5.1 SDC Settings ......................................................................................................................................................... 221
9.2.1.5.2 TOM ...................................................................................................................................................................... 225
9.2.2 USB ............................................................................................................................................................................. 226
9.2.2.1 File Transfer ............................................................................................................................................................. 227
Part # 430-4G-060-00-005 7
Table of Content
9.2.2.1.1 Firmware ............................................................................................................................................................... 228

9.2.2.1.2 Language ............................................................................................................................................................... 229
9.2.2.1.3 Audio ..................................................................................................................................................................... 230
9.2.2.1.4 Wallpaper .............................................................................................................................................................. 236
9.2.2.1.5 Event Log .............................................................................................................................................................. 238
9.2.2.2 Initialize USB ........................................................................................................................................................... 239
9.2.3 SETTINGS...................................................................................................................................................................... 241
9.2.3.1 Erase Transaction Log .............................................................................................................................................. 241
9.2.3.2 Template Type .......................................................................................................................................................... 242
9.2.3.3 Reset Settings ........................................................................................................................................................... 243
9.2.3.4 Time Attendance ...................................................................................................................................................... 243
9.2.3.5 Reboot Device .......................................................................................................................................................... 244
9.2.4 LCD/SOUND................................................................................................................................................................. 245
9.2.4.1 Backlight Timeout .................................................................................................................................................... 246
9.2.4.2 Key Press Sound ....................................................................................................................................................... 246
9.2.4.3 LCD Off Timeout ..................................................................................................................................................... 247
9.2.4.4 Date/Time ................................................................................................................................................................. 247
9.2.4.4.1 Time ...................................................................................................................................................................... 248
9.2.4.4.1 Date ....................................................................................................................................................................... 248
9.3 SECURITY .................................................................................................................................................................... 250
9.3.1 BIOMETRIC ................................................................................................................................................................... 250
9.3.2 COMMUNICATION ......................................................................................................................................................... 254
9.3.3 GLOBAL ....................................................................................................................................................................... 257
9.3.4 LOGIN OPTIONS ............................................................................................................................................................ 259
9.3 INFORMATION ............................................................................................................................................................ 261
9.3.1 DEVICE ...................................................................................................................................................................... 261
9.3.2 TEMPLATE ................................................................................................................................................................ 263
9.3.3 COMMUNICATION .................................................................................................................................................. 265
9.3.4 FIRMWARE................................................................................................................................................................ 267
9.4 TEMPLATE ................................................................................................................................................................... 268
9.4.1 ADD ............................................................................................................................................................................ 268
9.4.1.1 ENROLL .................................................................................................................................................................. 268
9.4.1.2 CARD ONLY ........................................................................................................................................................... 276
9.4.2 EDIT ............................................................................................................................................................................ 279
9.4.2.1 Edit Enrollment ........................................................................................................................................................ 279
9.4.2.1 Edit Card Only Enrollment ....................................................................................................................................... 283
9.4.3 DELETE ...................................................................................................................................................................... 285
9.4.3.1 DELETE TEMPLATE ............................................................................................................................................. 285
9.4.3.2 DELETE ALL TEMPLATES .................................................................................................................................. 288
9.4.4 VERIFY....................................................................................................................................................................... 289
9.5 KEYPAD VERIFICATION ........................................................................................................................................... 290
9.6 KEYPAD IDENTIFICATION ....................................................................................................................................... 291
9.7 KEYPAD VERIFICATION WITH T&A MODE ON .................................................................................................... 291
CHAPTER 10 - ENROLLMENT BEST PRACTICES .................................................................................................. 292

10.1 FINGERPRINT ENROLLMENTS .............................................................................................................................. 292
10.1.1 SUGGESTED FINGERS .......................................................................................................................................... 292
10.1.2 CONSISTENT FINGER PLACEMENT ................................................................................................................... 293
10.1.3 PROPER FINGER ORIENTATION ......................................................................................................................... 296
10.1.4 CENTERING THE CORE......................................................................................................................................... 297
10.2 FINGER PLACEMENT FEEDBACK ......................................................................................................................... 298
10.2.1 TROUBLESHOOTING ENROLLMENT PROBLEMS USING FPF....................................................................... 298
Part # 430-4G-060-00-005 8
Table of Content
CHAPTER 11 - BACKUP AND RESTORE DATABASE ............................................................................................. 300

11.1 BACKUP SETTINGS OF SECUREADMIN LITE DATABASE .............................................................................. 301
11.1.1 BACKUP SETTINGS ............................................................................................................................................... 301
11.1.2 SCHEDULER SETTINGS ........................................................................................................................................ 303
11.2 RESTORING SECUREADMIN LITE DATABASE .................................................................................................. 303
11.2.1 RESTORE SETTINGS .............................................................................................................................................. 303
CHAPTER 12 - CONTACT INFORMATION ................................................................................................................ 306

12.1 REGISTERING YOUR PRODUCT ............................................................................................................................ 306
APPENDIX ......................................................................................................................................................................... 307
GLOSSARY ........................................................................................................................................................................ 311
ACRONYMS AND ABBREVIATIONS .......................................................................................................................... 313
LIST OF FIGURES
Figure 1-1 HID Prox Card ...................................................................................................................................................... 20

Figure 1-2 SecureAdmin Lite – Login Screen ........................................................................................................................ 21
Figure 1-3 SecureAdmin Lite - Main Screen ......................................................................................................................... 22
Figure 2-1 Users Tab .............................................................................................................................................................. 24
Figure 2-2 Add User Dialog Box ........................................................................................................................................... 25
Figure 2-3 Templates on Device ............................................................................................................................................ 27
Figure 2-4 Templates in Database .......................................................................................................................................... 29
Figure 2-5 Edit Template Dialog Box .................................................................................................................................... 30
Figure 2-6 Edit Enrollment Dialog Box ................................................................................................................................. 30
Figure 2-7 Templates Screen .................................................................................................................................................. 31
Figure 2-8 Compare Templates Dialog Box ........................................................................................................................... 33
Figure 2-9 User Groups Tab ................................................................................................................................................... 38
Figure 2-10 Add User Group Dialog Box .............................................................................................................................. 39
Figure 2-11 Assigning Roles and Privileges .......................................................................................................................... 40
Figure 2-12 Companies Tab ................................................................................................................................................... 41
Figure 2-13 Add Company Dialog Box ................................................................................................................................. 42
Figure 2-14 Sites Tab ............................................................................................................................................................. 43
Figure 2-15 Add Site Dialog Box........................................................................................................................................... 44
Figure 2-16 Departments Tab................................................................................................................................................. 45
Figure 2-17 Add Department Dialog Box .............................................................................................................................. 46
Figure 3-1 Network ................................................................................................................................................................ 47
Figure 3-2 Network Tree ........................................................................................................................................................ 49
Figure 3-3 Register via Server Dialog Box ............................................................................................................................ 50
Figure 3-4 Register Device ..................................................................................................................................................... 51
Figure 3-5 Register Device Dialog Box ................................................................................................................................. 51
Figure 3-6 Device Summary Dialog Box ............................................................................................................................... 52
Figure 3-7 Step 1 Find Device Dialog Box ............................................................................................................................ 52
Figure 3-8 Device Information Dialog Box ........................................................................................................................... 54
Figure 3-9 Server Communication Parameter Dialog Box ..................................................................................................... 54
Figure 3-10 Register Device Dialog Box ............................................................................................................................... 55
Figure 3-11 Device Summary Dialog Box ............................................................................................................................. 55
Part # 430-4G-060-00-005 9
Table of Content
Figure 3-12 SecureAdmin Lite Network Tree ........................................................................................................................ 57

Figure 3-13 Unregister Device Warning ................................................................................................................................ 58
Figure 3-14 Device Network Tab ........................................................................................................................................... 60
Figure 3-15 General Tab – 4G Lite Device ............................................................................................................................ 61
Figure 3-16 General Tab – Secure Control Device ................................................................................................................ 62
Figure 3-17 Communication Tab – 4G Lite Device ............................................................................................................... 63
Figure 3-18 Communication Tab – Secure Control ............................................................................................................... 64
Figure 3-19 LED Table Tab ................................................................................................................................................... 67
Figure 3-20 Tamper Tab......................................................................................................................................................... 68
Figure 3-21 Access Control Tab – 4G Lite Device ................................................................................................................ 70
Figure 3-22 Access Control Tab – Secure Control Device .................................................................................................... 74
Figure 3-23 Access Schedules Tab......................................................................................................................................... 76
Figure 3-24 New Access Schedule ......................................................................................................................................... 77
Figure 3-25 Holiday Schedules Tab ....................................................................................................................................... 79
Figure 3-26 Holiday Schedules Tab - New Holiday Schedule ............................................................................................... 80
Figure 3-27 Miscellaneous Tab .............................................................................................................................................. 82
Figure 3-28 Audio Tab ........................................................................................................................................................... 84
Figure 3-29 Audio Tab - New Audio File .............................................................................................................................. 85
Figure 3-31 Wiegand Tab....................................................................................................................................................... 89
Figure 3-32 Wiegand Output Settings Dialog Box................................................................................................................. 94
Figure 3-33 Custom Wiegand Settings Dialog Box ............................................................................................................... 95
Figure 3-34 New Wiegand Format Dialog Box ..................................................................................................................... 96
Figure 3-35 New Wiegand Format Dialog Box - Add User ................................................................................................... 97
Figure 3-36 Biometrics Tab ................................................................................................................................................... 98
Figure 3-37 Clock Tab ......................................................................................................................................................... 102
Figure 3-38 Biometric Schedules Tab .................................................................................................................................. 104
Figure 3-39 Device/Door Status Tab .................................................................................................................................... 106
Figure 3-40 Device Security................................................................................................................................................. 107
Figure 3-41 LCD Tab ........................................................................................................................................................... 109
Figure 3-42 Time and Attendance Tab ................................................................................................................................. 111
Figure 3-43 Time and Attendance - Disabled Mode ............................................................................................................ 112
Figure 3-44 Time and Attendance – F-Key as Input Mode .................................................................................................. 113
Figure 4-1 Enrollment Tab ................................................................................................................................................... 117
Figure 4-2 Quick Enrollment Dialog Box ............................................................................................................................ 118
Figure 4-3 FPF cross hairs.................................................................................................................................................... 118
Figure 4-4 Quick Enrollment Dialog Box - Scan Results .................................................................................................... 119
Figure 4-5 Quick Enrollment Dialog Box - User Information ............................................................................................. 120
Figure 4-7 Quick Enrollment - Select Destination ............................................................................................................... 122
Figure 4-8 Save Template Result Dialog Box ...................................................................................................................... 122
Figure 4-9 Advanced Enrollment Dialog Box ...................................................................................................................... 123
Figure 4-10 Advanced Enrollment Dialog Box - Scan Results ............................................................................................ 124
Figure 4-11 Advanced Enrollment Dialog Box - Manual Selection..................................................................................... 125
Figure 4-12 Advanced Enrollment Dialog Box - All poor enrollments ............................................................................... 126
Figure 4-13 Advanced Enrollment Dialog Box - User Information ..................................................................................... 127
Figure 4-16 Save Template Result Dialog Box .................................................................................................................... 129
Figure 4-17 Card Enrollment Dialog Box ............................................................................................................................ 130
Figure 4-18 Card Enrollment - Select Destination ............................................................................................................... 131
Figure 4-19 Save Card Enrollment to Device Dialog Box ................................................................................................... 132
Figure 5-1 Smart Card Sidebar Tab Dialog Box .................................................................................................................. 134
Figure 5-2 Smart Card Device Manager............................................................................................................................... 135
Part # 430-4G-060-00-005 10
Table of Content
Figure 5-3 Smart Card Security Settings Dialog Box .......................................................................................................... 138
Figure 5-4 Change Site Key Dialog Box .............................................................................................................................. 139
Figure 5-5 Change Site Key Warning .................................................................................................................................. 140
Figure 5-6 Reset Site Key Dialog Box ................................................................................................................................. 141
Figure 5-7 Change MiFare Plus Key Dialog Box ................................................................................................................ 142
Figure 5-8 Reset MiFare Plus Key Dialog Box .................................................................................................................... 142
Figure 5-9 16K iCLASS Smart Card Layout Manager ........................................................................................................ 143
Figure 5-10 32K iCLASS Smart Card Layout Manager ...................................................................................................... 144
Figure 5-11 1 kilobyte MiFARE Smart Card Layout Manager ............................................................................................ 145
Figure 5-12 4 kilobyte MiFARE Smart Card Layout Manager ............................................................................................ 146
Figure 5-13 DESFire Card Layout Dialog Box .................................................................................................................... 150
Figure 5-14 Smart Card Manager ......................................................................................................................................... 151
Figure 5-15 Create Site Key Dialog Box.............................................................................................................................. 156
Figure 5-16 Create MiFare Plus Key Dialog Box ................................................................................................................ 159
Figure 6-1 Broadcast Screen ................................................................................................................................................ 161
Figure 6-2 Device Parameters - General Tab ....................................................................................................................... 162
Figure 6-3 Device Parameter - Tab Selection Menu ............................................................................................................ 163
Figure 6-4 Device Parameter - All Tabs Displayed.............................................................................................................. 164
Figure 6-6 Broadcast Status - Success.................................................................................................................................. 166
Figure 6-7 Select File Dialog Box - Firmware File .............................................................................................................. 167
Figure 6-8 Select File Dialog Box - Firmware File .............................................................................................................. 168
Figure 6-9 Broadcast Status - Success.................................................................................................................................. 169
Figure 6-10 Select File Dialog Box - Audio File ................................................................................................................. 170
Figure 6-11 Select File Dialog Box - Audio Directory Drop-down List .............................................................................. 170
Figure 6-12 Select File Dialog Box - Smart Card Layout File ............................................................................................. 171
Figure 6-13 Select File Dialog Box - Image File ................................................................................................................. 172
Figure 7-1 Log Tab .............................................................................................................................................................. 174
Figure 7-2 Application Event Log ........................................................................................................................................ 175
Figure 7-3 Transaction Log .................................................................................................................................................. 176
Figure 7-4 Download Transaction Log ................................................................................................................................ 177
Figure 7-5 Device Event Log ............................................................................................................................................... 180
Figure 8-1 File Menu ............................................................................................................................................................ 182
Figure 8-2 Login Dialog Box ............................................................................................................................................... 183
Figure 8-3 Change Password Dialog Box ............................................................................................................................ 183
Figure 8-4 Manage Menu ..................................................................................................................................................... 184
Figure 8-5 Tools Menu ......................................................................................................................................................... 185
Figure 8-6 Wiegand .............................................................................................................................................................. 186
Figure 8-7 Custom Wiegand Format - Add Button .............................................................................................................. 187
Figure 8-8 New Wiegand Format Dialog Box ..................................................................................................................... 188
Figure 8-9 Week Setting....................................................................................................................................................... 188
Figure 8-10 Firmware Upgrade - Step 1 ............................................................................................................................... 189
Figure 8-13 Final Confirmation ........................................................................................................................................... 191
Figure 8-14 Sensor Test Dialog Box .................................................................................................................................... 192
Figure 8-15 Synchronization Dialog Box ............................................................................................................................. 193
Figure 8-16 Synchronization Result Dialog Box.................................................................................................................. 193
Figure 8-17 Reset To Factory Defaults Dialog Box ............................................................................................................. 194
Figure 8-18 Miscellaneous Tab – Realtime Activity Logging ............................................................................................. 196
Figure 8-19 Realtime Activity Monitor ................................................................................................................................ 197
Figure 8-20 Realtime Activity Monitor – Filtered Activities ............................................................................................... 198
Figure 8-21 Options – Save Templates to Database ............................................................................................................. 199
Part # 430-4G-060-00-005 11
Table of Content
Figure 7-22 Help Menu ........................................................................................................................................................ 200

Figure 8-23 Product Registration Dialog Box ...................................................................................................................... 201
Figure 8-24 About SecureAdmin Lite Dialog Box............................................................................................................... 201
Figure 9-1: V-Station Lite Device Front Panel .................................................................................................................... 203
Figure 9 - 2 SecureAdmin - Device Security Options .......................................................................................................... 205
Figure 9 - 3 SecureAdmin Lite - Device Security Options................................................................................................... 206
Figure 9 - 4: LCD Login Option........................................................................................................................................... 207
Figure 9 - 5: Enter Device Password .................................................................................................................................... 207
Figure 9 - 6: Main Menu ...................................................................................................................................................... 208
Figure 9 - 7 Enter ID Screen ................................................................................................................................................ 208
Figure 9 - 8 Enter Device Password ..................................................................................................................................... 209
Figure 9 - 9 Place Finger Screen .......................................................................................................................................... 209
Figure 9 - 10: Main Menu .................................................................................................................................................... 209
Figure 9 - 11 System Menu Icon .......................................................................................................................................... 211
Figure 9 - 12 IO Menu Icon.................................................................................................................................................. 211
Figure 9 - 13 IO - System ..................................................................................................................................................... 212
Figure 9 - 14 TCP/IP - IO..................................................................................................................................................... 212
Figure 9 - 15 DHCP Mode - TCP/IP .................................................................................................................................... 213
Figure 9 - 16 Static Mode - TCP/IP...................................................................................................................................... 213
Figure 9 - 17 IP Address - Static .......................................................................................................................................... 214
Figure 9 - 18 Subnet Mask - Static ....................................................................................................................................... 214
Figure 9 - 19 Gateway - Static .............................................................................................................................................. 215
Figure 9 - 20 RS-485 – IO .................................................................................................................................................... 215
Figure 9 - 21 Baudrate – RS-485 .......................................................................................................................................... 216
Figure 9 - 22 Net ID – RS-485 ............................................................................................................................................. 216
Figure 9 - 23 Wiegand – IO.................................................................................................................................................. 217
Figure 9 - 24 Input Port – Wiegand ...................................................................................................................................... 217
Figure 9 - 25 Output Port – Wiegand ................................................................................................................................... 218
Figure 9 - 26 Tamper – IO.................................................................................................................................................... 218
Figure 9 - 27 State – Tamper ................................................................................................................................................ 219
Figure 9 - 28 Biometric – Tamper ........................................................................................................................................ 219
Figure 9 - 29 Erase Template – Tamper ............................................................................................................................... 220
Figure 9 - 30 Send Wiegand – Tamper ................................................................................................................................ 220
Figure 9 - 31 Door Control – IO........................................................................................................................................... 221
Figure 9 - 32 SDC Settings – Door Control ......................................................................................................................... 221
Figure 9 - 33 Mode - SDC Settings ...................................................................................................................................... 222
Figure 9 - 34 Unlock Duration - SDC Settings .................................................................................................................... 222
Figure 9 - 35 Held Open Duration - SDC Settings ............................................................................................................... 223
Figure 9 - 36 Alarm Type – SDC Settings ........................................................................................................................... 223
Figure 9 - 37 Exit Mode – SDC Settings .............................................................................................................................. 224
Figure 9 - 38 Mode – Exit Mode .......................................................................................................................................... 224
Figure 9 - 39 Egress Timeout – Exit Mode .......................................................................................................................... 225
Figure 9 - 40 TOM – Door Control ...................................................................................................................................... 225
Figure 9 - 41 Mode – TOM .................................................................................................................................................. 226
Figure 9 - 42 Timeout – TOM .............................................................................................................................................. 226
Figure 9 - 43 USB Menu Icon .............................................................................................................................................. 227
Figure 9 - 44 USB – System ................................................................................................................................................. 227
Figure 9 - 45 File Transfer – USB ........................................................................................................................................ 228
Figure 9 - 46 Firmware – File Transfer ................................................................................................................................ 228
Figure 9 - 47 Copy to Device – Firmware ............................................................................................................................ 229
Figure 9 - 48 Language – File Transfer ................................................................................................................................ 230
Figure 9 - 49 Copy Language prompt– Firmware ................................................................................................................ 230
Part # 430-4G-060-00-005 12
Table of Content
Figure 9 - 50 Audio – File Transfer...................................................................................................................................... 231

Figure 9 - 51 Tamper – Audio .............................................................................................................................................. 231
Figure 9 - 52 On Device – Tamper ....................................................................................................................................... 232
Figure 9 - 53 On USB – Tamper .......................................................................................................................................... 232
Figure 9 - 54 Verify Success – Audio .................................................................................................................................. 233
Figure 9 - 55 On Device – Verify Success ........................................................................................................................... 233
Figure 9 - 56 On USB – Verify Success ............................................................................................................................... 234
Figure 9 - 57 Verify Failed – Audio ..................................................................................................................................... 235
Figure 9 - 58 On Device – Verify Failed .............................................................................................................................. 235
Figure 9 - 59 On USB – Verify Failed ................................................................................................................................. 236
Figure 9 - 60 Wallpaper – File Transfer ............................................................................................................................... 237
Figure 9 - 61 On Device – Wallpaper................................................................................................................................... 237
Figure 9 - 62 On USB – Wallpaper ...................................................................................................................................... 238
Figure 9 - 63 Event Log – File Transfer ............................................................................................................................... 239
Figure 9 - 64 Initialize USB – USB...................................................................................................................................... 240
Figure 9 - 65 Settings Menu Icon ......................................................................................................................................... 241
Figure 9 - 66 Settings – System ............................................................................................................................................ 241
Figure 9 - 67 Erase Tran. Log – Settings .............................................................................................................................. 242
Figure 9 - 68 Template Type – Settings ............................................................................................................................... 242
Figure 9 - 69 Reset Settings – Setting .................................................................................................................................. 243
Figure 9 - 70 Time Attendance – Settings ............................................................................................................................ 244
Figure 9 - 71 Reboot Device – Setting ................................................................................................................................. 244
Figure 9 - 72 Setting Menu................................................................................................................................................... 245
Figure 9 - 73 LCD/Sound – System ..................................................................................................................................... 245
Figure 9 - 74 Backlight Timeout – LCD/Sound ................................................................................................................... 246
Figure 9 - 75 Key Press Sound – LCD/Sound ...................................................................................................................... 246
Figure 9 - 76 LCD off Timeout – LCD/Sound ..................................................................................................................... 247
Figure 9 - 77 Date/Time – LCD/Sound ................................................................................................................................ 248
Figure 9 - 78 Time – Date/Time ........................................................................................................................................... 248
Figure 9 - 79 Date – Date/Time............................................................................................................................................ 249
Figure 9 - 80 Security Menu Icon......................................................................................................................................... 250
Figure 9 - 81 Security Menu................................................................................................................................................. 251
Figure 9 - 82 Biometric Menu – Security ............................................................................................................................. 251
Figure 9 - 83 Duress Mode – Biometric ............................................................................................................................... 252
Figure 9 - 84 Password – Biometric ..................................................................................................................................... 252
Figure 9 - 85 Biometric – Biometric .................................................................................................................................... 253
Figure 9 - 86 Access Schedule – Biometric ......................................................................................................................... 253
Figure 9 – 87 CVE Mode – Biometric ................................................................................................................................. 254
Figure 9 - 89 Communication Menu – Security ................................................................................................................... 255
Figure 9 - 90 Secure Connection – Communication ............................................................................................................ 255
Figure 9 - 91 Ethernet Security – Communication ............................................................................................................... 256
Figure 9 - 92 Aux Port State – Communication ................................................................................................................... 256
Figure 9 - 94 Global Security Menu – Security.................................................................................................................... 257
Figure 9 - 95 Verify Security – Global Security .................................................................................................................. 258
Figure 9 - 96 Identify Security – Global Security ................................................................................................................ 258
Figure 9 - 97 Security Menu - .............................................................................................................................................. 259
Figure 9 - 98 Login Option Menu – Security ....................................................................................................................... 259
Figure 9 - 99 Login Options – Login.................................................................................................................................... 260
Figure 9 - 100 Login Password – Login ............................................................................................................................... 260
Figure 9 -101 Information menu .......................................................................................................................................... 261
Part # 430-4G-060-00-005 13
Table of Content
Figure 9 -102 Information- Device Parameters .................................................................................................................... 261

Figure 9 -103 Information- Device Name ............................................................................................................................ 262
Figure 9 -104 Information Device name .............................................................................................................................. 262
Figure 9 -105 Information - Device Type ............................................................................................................................ 262
Figure 9 -106 Information - Device Serial Number ............................................................................................................. 263
Figure 9 -107 Information- Template Parameters ................................................................................................................ 263
Figure 9 -108 Information – Template Type ........................................................................................................................ 264
Figure 9 -109 Information – Template Type ........................................................................................................................ 264
Figure 9 -110 Information- Number of Templates Enrolled ................................................................................................ 264
Figure 9 -111 Information – Maximum Templates .............................................................................................................. 265
Figure 9 -112 Information- Communication Parameters ...................................................................................................... 265
Figure 9 -113 Information – Device IP ................................................................................................................................ 265
Figure 9 -114 Information – Device IP ................................................................................................................................ 266
Figure 9 -115 Information – Device MAC Address ............................................................................................................. 266
Figure 9 -116 Information – Serial Communication Baud Rate ........................................................................................... 266
Figure 9 -117 Device screen with Device ID displayed ....................................................................................................... 267
Figure 9 -118 Information- Firmware Parameters ................................................................................................................ 267
Figure 9 -119 Information – Firmware Version ................................................................................................................... 267
Figure 9 -120 Main menu screen with Template icon selected ............................................................................................ 268
Figure 9 -121 Template – Add Template ............................................................................................................................. 269
Figure 9 -122 Enroll Template ............................................................................................................................................. 269
Figure 9 -123 Enroll Template – Enter Id ............................................................................................................................ 269
Figure 9 -124 Enroll Template – Enroll Id with Prox .......................................................................................................... 270
Figure 9 -125 Enroll Template – Place Finger ..................................................................................................................... 270
Figure 9 -126 Enroll Template - Enrollment Quality ........................................................................................................... 271
Figure 9 -127 Enroll Template – Get Extended Id ............................................................................................................... 271
Figure 9 -128 Enroll Template – Enter Extended Id ............................................................................................................ 271
Figure 9 -129 Enroll Template –Enter User Id ..................................................................................................................... 272
Figure 9 -130 Enroll Template – Provide Index ................................................................................................................... 272
Figure 9 -131 Enroll Template – Provide Password ............................................................................................................. 273
Figure 9 -132 Enroll Template – Enter CSN ........................................................................................................................ 273
Figure 9 -133 Enroll Template – Enter CSN Manually ........................................................................................................ 274
Figure 9 -134 Enroll Template - Save To ............................................................................................................................. 274
Figure 9-135 Enroll Template – Enter Site Key ................................................................................................................... 275
Figure 9-136 Enroll Template – Place Smart Card .............................................................................................................. 275
Figure 9 -138 Enroll Card .................................................................................................................................................... 276
Figure 9 -139 Enroll Card .................................................................................................................................................... 277
Figure 9 -140 Enroll Card – Select Card Only ..................................................................................................................... 277
Figure 9 -141 Enroll Card - Enter Enroll ID ........................................................................................................................ 277
Figure 9 -142 Enroll Card –Provide CSN ............................................................................................................................ 278
Figure 9 -143 Enroll Card - Enter CSN ................................................................................................................................ 278
Figure 9 -144 Edit Enrollment .............................................................................................................................................. 279
Figure 9 -145 Edit Enrollment - Enter Enroll ID .................................................................................................................. 279
Figure 9 -146 Edit Enrollment – Provide Index ................................................................................................................... 280
Figure 9 -147 Edit Enrollment – Select Admin Level .......................................................................................................... 280
Figure 9 -148 Edit Enrollment - Provide Index .................................................................................................................... 280
Figure 9 -149 Edit Enrollment – Enter Password ................................................................................................................. 281
Figure 9 -150 Edit Enrollment – Get CSN ........................................................................................................................... 281
Figure 9 -151 Edit Enrollment - Provide CSN ..................................................................................................................... 282
Figure 9 -152 Edit Enrollment – Store Template ................................................................................................................. 282
Figure 9 -153 Edit Card Only Enrollment ............................................................................................................................ 283
Figure 9 -154 Edit Card Only Enrollment – Enter Edit Id ................................................................................................... 283
Part # 430-4G-060-00-005 14
Table of Content
Figure 9 -155 Edit Card Only Enrollment – Enter Index ..................................................................................................... 284
Figure 9 -156 Edit Card Only Enrollment – Get CSN.......................................................................................................... 284
Figure 9 -157 Edit Card Only Enrollment – Enter CSN ....................................................................................................... 284
Figure 9 -158 Delete Template ............................................................................................................................................. 285
Figure 9 -160 Delete Template – Enter Delete Id................................................................................................................. 286
Figure 9 -161 Delete Template – Provide Template Index .................................................................................................. 286
Figure 9 -162 Delete Template – Provide Delete Type ........................................................................................................ 287
Figure 9 -163 Delete Template – Confirm Deletion ............................................................................................................. 287
Figure 9 -165 Delete Template – Delete All Template ........................................................................................................ 288
Figure 9 -166 Delete Template – Confirm Deletion ............................................................................................................. 289
Figure 9 -167 Verify Template ............................................................................................................................................. 289
Figure 9 -168 Keypad Verification –Enter Verify Id ........................................................................................................... 290
Figure 9 -169 Keypad Verification –Place finger................................................................................................................. 290
Figure 10-1 Suggested Fingers ............................................................................................................................................. 293
Figure 10-2 Amber LED ...................................................................................................................................................... 293
Figure 10-3 Fingertip on Ridge-Lock................................................................................................................................... 293
Figure 10-4 Slide Finger Across Ridge-Lock....................................................................................................................... 294
Figure 10-5 Position Joint on Ridge-Lock ........................................................................................................................... 294
Figure 10-6 Apply Correct Pressure ..................................................................................................................................... 294
Figure 10-7 Wait for Green LED ......................................................................................................................................... 295
Figure 10-8 Lift Finger Up and Off ...................................................................................................................................... 295
Figure 10-9 Correct Placement ............................................................................................................................................. 296
Figure 10-10 Incorrect Placement ........................................................................................................................................ 296
Figure 10-11 Place Finger Close to Center .......................................................................................................................... 297
Figure 10-12 Do Not Rotate Finger ...................................................................................................................................... 297
Figure 10-13 Finger Cores ................................................................................................................................................... 297
Figure 10-14 FPF Function .................................................................................................................................................. 299
Figure 11-1 Backup Settings ................................................................................................................................................ 301
Figure 11-2 Backup path for SQL Server 2008 .................................................................................................................... 302
Figure 11-3 Backup path for SQL Server 2005 .................................................................................................................... 302
Figure 11-4 Restore Settings ................................................................................................................................................ 304
Figure 11-5 Restore operation to restart the SecureAdmin Lite service. .............................................................................. 305
LIST OF TABLES
Table 1-1 Template Support Comparison .............................................................................................................................. 19

Table 3-1 Wiegand Formats and Associated Valid Values .................................................................................................... 91
Table 5-1 Smart Card Template Support .............................................................................................................................. 154
Part # 430-4G-060-00-005 15
Introduction
CHAPTER 1 - INTRODUCTION
CHAPTER OVERVIEW
This chapter presents an introduction to the 4G Lite devices, together with a summary of the
template types used.
This manual provides step-by-step procedures for operating a 4G V-Flex Lite, 4G CR-Pass,
4G V-Station Lite and Secure Control devices. This manual should be used in conjunction
with the Quick Start Guide and the Installation Guide.
1.1 TEMPLATE SUPPORT

All biometric systems operate on the simple concept of comparing a stored record of a user‘s
biometric data (fingerprint, finger vein, face, etc.) with data being supplied in real time by the
user requesting access. The real time data is converted into a form that can be compared to
the record, and if the two data sets match with enough certainty, the user is authenticated.
The process of first capturing the biometric data is called enrolling, while the action of
authenticating the user is called verification. During the enrollment process, the original
biometric data is processed, highly compressed, and stored on the unit (or another storage
system like the PC) as a template. User data such as a unique ID number, name, and other
information is added to associate a person with the template.
The type of ―templates‖ used by L-1 Identity Solutions 4G Lite products is:
 1:1 Template (.tem)
 1:500 Searching Template (.tms)
 User Record (.vur)
 Biometric User Record (.bur)
1.1.1 1:1 TEMPLATE OR 348-BYTE TEMPLATES

A 348-byte template (*.tem) contains a unique ID, which is usually associated with a single
individual. If multiple enrollments for additional fingers of the same person are required, the
same ID is used but a unique index value (0-255) is assigned to each enrollment under that
ID.
Part # 430-4G-060-00-005 16
Introduction
A 348-byte template (*.tem) is a tag-based, variable length record which includes the following
elements:
 Global data-This is information relevant to the entire record, such as user ID,
name, password, etc. Some fields are “Required” while others are “Optional.”
The User ID field, for example, is required.
 Enrollment data-This is data pertaining only to a particular finger. It is a section

of data that contains biometric information along with specific information
relating to that enrollment, such as which sensor was used, which finger was
enrolled, the security level for the finger, and the index. A User Record can
contain more than one enrolled finger when stored on the device.
 User data-This is a user defined variable length block of data that can either be
global or enrollment specific. Data in this block is accessed all at once, rather
than being divided into separately named fields.
1.1.2 1:500 SEARCHING TEMPLATES

1:500 searching template (*.tms) contains the entire 1:1 template, which is 348 bytes, with
the addition of 2140 bytes of data needed for searching functionality, making the total length
of this searching template 2488 bytes. When the device mode is configured for 1:500 TMS,
the device will have a maximum capacity of 500 templates.
1.1.3 USER RECORDS

A User Record (*.vur) includes these elements:
 Global data-This is information relevant to the entire record, such as user
ID, name, password, etc. Some fields are ―Required‖ while others are
―Optional.‖ The User ID field, for example, is required.
 Enrollment data-This is data pertaining only to a particular finger. It is a

section of data that contains compressed fingerprint information along with
specific information relating to that enrollment, such as which sensor was
used, which finger was enrolled, the security level for the finger, and the
index. A User Record can contain more than one enrolled finger when
stored on the device.
Part # 430-4G-060-00-005 17
Introduction
 User data-This is a user defined variable length block of data that can either
be global or enrollment specific. Data in this block is accessed all at once,
rather than being divided into separately named fields.
There are two data storage options for User Records: Minimum (ID only) and Standard. The
amount of data stored in the 4G Lite devices data section depends on the option chosen.
1.1.4 BIOMETRIC USER RECORDS

The Biometric User Record can be utilized on the 4G products for the following authentication
purposes:
 1:1 Verification
 1:5K Identification
A Biometric User Record is a tag-based, variable length record which includes the following elements:
 Global data-This is information relevant to the entire record, such as user ID,
name, password, etc. Some fields are “Required” while others are “Optional.”
The User ID field, for example, is required.
 Enrollment data-This is data pertaining only to a particular finger. It is a section

of data that contains biometric information along with specific information
relating to that enrollment, such as which sensor was used, which finger was
enrolled, the security level for the finger, and the index. A User Record can
contain more than one enrolled finger when stored on the device.
 User data-This is a user defined variable length block of data that can either be
global or enrollment specific. Data in this block is accessed all at once, rather
than being divided into separately named fields.
1.1.5 CARD ONLY RECORD

A Card Only Record is consists of Card and User Access Data. As the name suggest, Card
Only Record does not include any biometric data. Authentication is based on the Card Serial
Number.
Part # 430-4G-060-00-005 18
Introduction
1.1.6 TEMPLATE SUPPORT SUMMARY

The table below summarizes the supported template capabilities of the different L-1 Identity
Solutions products.
Table 1-1 Template Support Comparison
Maximum
Default Template Type Supported
Templates
4G Lite Model Name Template
Type 1:1 1:1 1:1 1:500 1:5K
1:1 1:N
TEM VUR BUR TMS BUR
Fingerprint Devices
4G V-Flex Lite (S) 25K 5K 1:5K BUR Yes Yes Yes Yes Yes
4G V-Flex Lite (S, P) 25K 5K 1:1 BUR Yes Yes Yes Yes Yes
4G V-Flex Lite (S, NW) 25K 5K 1:5K BUR Yes Yes Yes Yes Yes
4G V-Flex Lite (S, P, NW) 25K 5K 1:1 BUR Yes Yes Yes Yes Yes
4G V-Flex Lite (S, O) 25K 5K 1:1 BUR Yes Yes Yes Yes Yes
4G V-Flex Lite (S, O, NW) 25K 5K 1:1 BUR Yes Yes Yes Yes Yes
4G V-Station Lite (S) 25K 5K 1:1 BUR Yes Yes Yes Yes Yes
4G V-Station Lite (S, P) 25K 5K 1:1 BUR Yes Yes Yes Yes Yes
4G V-Station Lite (S, NW) 25K 5K 1:1 BUR Yes Yes Yes Yes Yes
4G V-Station Lite (S, P, NW) 25K 5K 1:1 BUR Yes Yes Yes Yes Yes
4G V-Station Lite (S, O) 25K 5K 1:1 BUR Yes Yes Yes Yes Yes
4G V-Station Lite (S, O, NW) 25K 5K 1:1 BUR Yes Yes Yes Yes Yes
Card Only Devices
4G CR-Pass (P) 25K N/A Card Info N/A N/A N/A N/A N/A
4G CR-Pass (P, NW) 25K N/A Card Info N/A N/A N/A N/A N/A
4G CR-Pass (O) 25K N/A Card Info N/A N/A N/A N/A N/A
4G CR-Pass (O, NW) 25K N/A Card Info N/A N/A N/A N/A N/A
Part # 430-4G-060-00-005 19
Introduction
1.2 PROXIMITY CARDS

All 4G Lite devices that have embedded proximity card reading capability can be
programmed to use a given card ID number as a standard ―User ID.‖ The majority of
proximity cards are of the User Card type. Once a card has been designated as one type, it
will remain that type unless it is deleted and enrolled again.
Figure 1-1 HID Prox Card
Note that not all proximity cards have card numbers printed on them. There are two basic
categories of proximity cards:
 User Cards
 Command Cards (Enroll or Delete).
1.2.1 COMMAND CARDS

Command cards allow users to be added or removed from a 4G Lite device without requiring
PC-based administrative software. These can be useful for creating and removing temporary
visitor‘s badges or administering the system when the PC is malfunctioning or otherwise
unavailable. There are two types of Command cards:
 Enroll command cards
 Delete command cards.
Command cards must be created with the SecureAdmin Lite software.
Part # 430-4G-060-00-005 20
Introduction
1.3 SMART CARDS

Some models of the 4G Lite devices incorporate a contactless smart card reader. The user‘s
template is written to a smart card during enrollment and then later read from the smart card
during verification, eliminating the need for network-based template management operations.
1.4 SECUREADMIN LITE APPLICATION

SecureAdmin Lite is a client-server based application used to administer 4G Lite devices. It
allows you to carry out various operations on devices including registration of device,
enrollment, setting parameters etc. An administrator must login to the application to use these
features.
1.4.1 LOGIN
An administrator can login to the SecureAdmin Lite Client by using the credentials provided
during the installation of SecureAdmin Lite Server. SecureAdmin Lite will remember the last
Login ID and Server details.
Figure 1-2 SecureAdmin Lite – Login Screen
1.4.1.1 TO LOGIN
1. Enter the Login ID and Password details into the appropriate fields.
2. Enter Server as IP Address \ Name of the machine where SecureAdmin Lite server is
installed.
3. Click Login.
Part # 430-4G-060-00-005 21
Introduction
1.4.2 SECUREADMIN LITE MAIN SCREEN

After successful login, the SecureAdmin Lite main screen will be displayed. The main screen
consists of the Quick Access Panel and Menu Bar for easy access to various features.
Figure 1-3 SecureAdmin Lite - Main Screen
1.3.2.1 QUICK ACCESS PANEL

Using the Quick Access Panel, users can access\navigate to all the features quickly. Options
would be listed on clicking on any of the features in the Quick Access Panels.
 Users - Create Users/Groups/Companies/Sites/Departments, Monitor
Templates Stored in the Database or Device
Part # 430-4G-060-00-005 22
Introduction
 Network - Register Devices, Access Device Settings

 Enrollment - Enroll Fingerprint or Card templates
 Smart Card - Manage Card settings and Card data. Create Site/Mifare Plus
key.
 Broadcast - Broadcast Device Parameters, Firmware Packages, Smart
Card Layout or Audio Files
 Log - Monitor and Download Transaction, Application and Device
Event Logs
1.3.2.2 MENU BAR

The Menu Bar has four menus where various features of SecureAdmin can be accessed
along with the sub-menus within.
 File - Change login profile and login password
 Manage - Quick Access menus options
 Tools - Perform Sensor Test, Firmware Upgrade, Synchronization,
Reset to Factory Defaults, Realtime Activity Monitoring
commands, Wiegand, Week Setting, Template Options
 Help - View Product Registration link and Copyright declaration
Part # 430-4G-060-00-005 23
Managing Users
CHAPTER 2 - MANAGING USERS

CHAPTER OVERVIEW
From this chapter onwards in the document, the focus is on using SecureAdmin Lite.
This chapter explains how to manage users, user groups, sites, companies, departments,
templates on device and database using the Users tab in SecureAdmin Lite.
2.1 MANAGING USERS

To manage Users, Templates, User Groups, Companies, Sites and Departments, click the
Users tab from the Quick Access Panel on the left pane of SecureAdmin Lite.
Figure 2-1 Users Tab
Part # 430-4G-060-00-005 24
Managing Users
2.2 USERS TAB

Users tab displays the users in the currently selected database.
Use the various controls at the bottom of the window to navigate quickly through the result
pages. If you are searching for a specific user, you can use the filter function to find them
quickly.
2.2.1 TO FILTER BY USER

1. Enter the user‘s details into the appropriate NAME fields.
2. Click the Filter button. Any results matching your filter terms are displayed.
2.2.2 TO ADD A USER

1. Click the Add User button. The Add User dialog box is displayed.
2. Provide the new user‘s details in the various fields and drop-down lists. The button to the
right of any drop-down list allows you to add a new category to that drop-down list without
having to close the dialog box and switch to a different tab.
Figure 2-2 Add User Dialog Box
3. You can create Secure Admin Lite Login credentials for the newly added user by checking
the checkbox ―Create SecureAdmin Lite Login Credentials for User‖. Provide Login ID, New
password and confirm password.
Part # 430-4G-060-00-005 25
Managing Users
4. Click Save & Close. The new users details are saved, the dialog box closes, and the new
user is displayed in the Users list. User can login with newly added user.
To close the dialog box without saving the user, click the Close button.
NOTICE
It is recommended that users are added before enrollment.
2.3 MANAGING TEMPLATES

The Users tab allows you to manage templates on a device and in a database. The controls
on this tab allow filtering and deleing selected/all templates of Device and Database.
Part # 430-4G-060-00-005 26
Managing Users
Figure 2-3 Templates on Device
2.3.1 VIEWING TEMPLATES ON A DEVICE

1. Double-click the Device Network item in the network tree. The network tree expands and
shows all device groups in the device network.
2. Double-click the device group item you are interested in (―Default Group‖ in the example).
Devices in the group are shown in the network tree.
3. Double-click the device you want to see the templates of (―Device0‖ in the example). The
templates on that device are displayed in the list.
Use the various controls at the bottom of the tab to navigate quickly through multiple pages of
results.
If you are searching for a specific template, you can use the filter function to find it quickly. To
filter by template details:
Part # 430-4G-060-00-005 27
Managing Users
2.3.1.1 FILTER BY TEMPLATE DETAILS

1. Enter the search terms into the appropriate fields.
2.3.2 VIEWING TEMPLATES IN A DATABASE

To view the templates in a database, double-click the Database item in the network tree and
select the Templates tab. The templates on the database are displayed in the list.
If you are searching for a specific template in the database, you can use the filter function to
help you find it.
2.3.2.1 FILTER BY TEMPLATE DETAILS

1. Enter the search terms into the appropriate fields.
2. Click the Filter button. Any templates matching your filter terms are displayed.
Part # 430-4G-060-00-005 28
Managing Users
Figure 2-4 Templates in Database
Use the various controls at the bottom of the tab to navigate quickly through multiple pages of
results.
2.3.3 EDITING TEMPLATES IN DATABASE

1. Click the template you want to edit. The template is highlighted and the check box in the
leftmost column is populated.
2. For the selected template, click the pencil icon to the right of the check box. An Edit
Template dialog box is displayed.
Part # 430-4G-060-00-005 29
Managing Users
Figure 2-5 Edit Template Dialog Box
3. Select a device in the Current Device drop-down list.

4. Click Edit. An Edit Enrollment dialog box is displayed.
Figure 2-6 Edit Enrollment Dialog Box
Part # 430-4G-060-00-005 30
Managing Users
Edit Enrollment screen displays the edit options as per the product type of the selected
device
(i) Card + Biometric products: Here, user is allowed to edit both Card and Biometric
data.
(ii) Card Only products: Here, user is allowed to edit only Card data.
(iii) Biometric Only products: Here, user is allowed to edit only Biometric data.
5. Perform the necessary edits to the template.
6. Click Finish.
2.3.4 VERIFYING TEMPLATES

Figure 2-7 Templates Screen
Part # 430-4G-060-00-005 31
Managing Users
2.3.4.1 TO VERIFY TEMPLATES ON A DEVICE

1. Open the Users tab in Quick Access Panel.
2. Select a device in the network tree
3. Select the template you want to verify. The template is highlighted and the check box in
the left-most column is populated.
4. For the selected template, click the yellow check mark icon to the left of the Content Type
column.
5. Place a finger on the device‘s sensor and remove as directed by the prompts.
6. SecureAdmin Lite displays a Verification Pass or a Verification Fail message.
NOTICE
Yellow check mark icon for Verification will be enabled in Device and
Database only when template has biometric data
2.3.4.2 TO VERIFY TEMPLATES FROM DATABASE

1. Open the Users tab in Quick Access Panel.
2. Select database in the network tree
3. Select the template you want to verify in the Templates tab. The template is highlighted
and the check box in the left-most column is populated.
4. For the selected template, click the yellow check mark icon to the left of the Content Type
column.
5. A Verify Template dialog box is displayed.
6. Select a device from the Current Device drop-down list.
7. Click Verify.
8. Place a finger on the device‘s sensor and remove as directed by the prompts.
9. SecureAdmin Lite displays a Verification Pass or a Verification Fail message.
2.3.5 COMPARING TEMPLATES

TO COMPARE A TEMPLATE ON A DEVICE TO A TEMPLATE IN THE DATABASE
Part # 430-4G-060-00-005 32
Managing Users
1. Double-click a device in the network tree.

2. On the Device tab, select the template you want to compare.
3. For the selected template, click the eye icon. A Compare Templates dialog box is
displayed with three categories i.e. Biometric Data, User Access Data and Card Data
Figure 2-8 Compare Templates Dialog Box
4. Compare the templates’ information. Differences between two templates would be

highlighted in the colour red.
Part # 430-4G-060-00-005 33
Managing Users
5. Click Close when you are finished.
2.4 MANAGING TEMPLATE SETTINGS

The Template Settings feature lets an administrator set following access rules for individual
users or for all users. Template Settings will be applied to all the templates having same User
ID regardless of their indices.
For example, there exist two templates with User ID 1 and Index 0, User ID 1 and Index 1,
applying any rule to Template 1:0 will result in having same rules for template 1:1.
2.4.1 PROX USER MODE

Prox User Mode is applicable only to devices equipped with proximity card readers. The
administrator can assign different authentication rules on user-by-user basis or same
authentication rules for all users available on the selected device. Such setting can be
specified in the Network Settings → Device → Access Control tab. The authentication
rules are described in detail as follows which can be set from the second screen of
enrollment:
NOTICE
The Prox Card User Mode will not be applicable when template is
verified from SecureAdmin Lite (Database tab or Device tab and LCD
GUI (Template →Verify).
A. No Rule: If the device is configured such that Device Mode is set to Verify, then the user
can use any verify authentication method as follows: i) provide an ID using a prox card and
place finger on sensor or ii) provide an ID by using the LCD keypad and place finger on
sensor. If the device is configured such that the Device Mode is set to Identify, then the user
can also use the identify authentication method as well as verify authentication method.
B. Card + Biometric: User can gain access to premise only when authentication is initiated
by showing the card followed by successful biometric verification. Authentication initiated by
any other means will result in failure.
C. Biometric Only: User can gain access to premise only when authentication is initiated by
directly placing finger on sensor. Authentication initiated by any other means will result in
failure.
Part # 430-4G-060-00-005 34
Managing Users
D. Card Only: User can gain access to premise only when authentication is initiated by
presenting a card to the device. The proximity card must have been previously used to
complete an enrolment and that enrolment must exist on the device. The user will not be
prompted to place a finger. Authentication initiated by any other means will result in failure.
E. Keypad Only: User can gain access to premise only when authentication is initiated by
entering the template ID using the LCD Keypad. The user will not be prompted to place a
finger. Authentication initiated by any other means will result in failure.
F. Keypad + Biometric: User can gain access to premise only when authentication is
initiated by entering the template ID using the LCD Keypad followed by successful biometric
verification. Authentication initiated by any other means will result in failure.
NOTICE
Rules will not be applicable if it authentication is initiated through

SecureAdmin Lite.
2.4.2 SMART CARD USER MODE

Smart Card User Mode is applicable only to devices equipped with OmniKey readers. The
administrator can assign different authentication rules on user-by-user basis or same
authentication rules for all users available on the selected device. Such setting can be
specified in the Network Settings → Device → Access Control tab. The authentication
rules are described in detail as follows which can be set from the second screen of
enrollment:
NOTICE
The Smart Card User Mode will not be applicable when template is
verified from SecureAdmin (Database tab or Device tab) and LCD GUI
(Template →Verify).
Part # 430-4G-060-00-005 35
Managing Users
A. No Rule: If the device is configured such that Device Mode is set to Verify, then the user
can use any verify authentication method as follows: i) provide an ID using a smart card and
place finger on sensor or ii) provide an ID by using the LCD keypad and place finger on
sensor..If the device is configured such that the Device Mode is set to Identify, then the user
can also use the identify authentication method as well as verify authentication method.
B. Card + Biometric on Card: User can gain access to premise only when authentication is
initiated by showing the card followed by successful biometric verification. The smart card
must have been previously used to enrol the user such that the user‘s template was saved to
the smart card. Authentication initiated by any other means will result in failure.
C. Card + Biometric on Device: User can gain access to premise only when authentication
is initiated by showing the card followed by successful biometric verification. The smart card
must have been previously used to complete an enrolment and that enrolment must exist on
the device. Authentication initiated by any other means will result in failure.
NOTICE
The Smart Card User Mode, Card + Biometric on Device will use
template data from device rather than from Smart Card.
D. Biometric Only: User can gain access to premise only when authentication is initiated by
directly placing finger on sensor. Authentication initiated by any other means will result in
failure.
E. Card Only: User can gain access to premise only when authentication is initiated by
presenting the enrolled card to the device. The smart card must have been previously used to
complete an enrolment and that enrolment must exist on the device. The user will not be
prompted to place a finger. Authentication initiated by any other means will result in failure.
F. Keypad Only: User can gain access to premise only when authentication is initiated by
entering the template ID using the LCD Keypad. The user will not be prompted to place a
finger. Authentication initiated by any other means will result in failure.
G. Keypad + Biometric: User can gain access to premise only when authentication is
initiated by entering the template ID using the LCD Keypad followed by successful biometric
verification. Authentication initiated by any other means will result in failure.
Part # 430-4G-060-00-005 36
Managing Users
NOTICE

SecureAdmin Lite.
2.4.3 DOOR TIMEOUT

Door Timeout parameter indicates the duration for which the door will be kept unlocked after
a successful verification: If Door Timeout is set for a template; the door will be kept unlocked
for the duration given for Door Timeout in User access data while enrolling or editing a
template. If 0 is set for the door timeout in the Template Settings, the door will be kept open
for the Door Unlock Duration specified in the Network Settings → Device → Access
Control tab.
2.4.4 TEMPLATE EXPIRY

Template Expiry allows user to specify a date when the template will expire and result in
failed verification after the expiry date given in template settings. By default this feature is
disabled. User can enable and change the Expiry Date of a template by editing a template.
2.4.5 CONFIGURE TEMPLATE SETTINGS

1. Template Settings can be configured while enrolling a template or editing a template.
2. On the second screen of Enrollment, Select required Prox User Mode Prox User Mode
drop-down list.
3. Enter required value in Door Timeout field. Give 0 if you want to use the settings given
in Network Settings → Device → Access Control tab.
4. Enter Door ID.
5. Select Activate Template Expiry Date. The Expiry Date field will be enabled.
6 Click the Calendar button. And modify the template expiry date.
7. Click Apply button.
Part # 430-4G-060-00-005 37
Managing Users
2.5 USER GROUPS TAB

The User Groups tab displays the user groups in the currently selected database.
Use the various controls at the bottom of the tab to navigate quickly through pages of results.
If you are searching for a specific user group, you can use the filter function to find it quickly.
2.5.1 TO FILTER BY A USER GROUP

To filter by user group:
1. Enter the user group’s name into the User Group Name field.
Figure 2-9 User Groups Tab
Part # 430-4G-060-00-005 38
Managing Users
2.5.2 TO ADD A USER GROUP

1. Click the Add User Group button. The Add User Group dialog box is displayed.
Figure 2-10 Add User Group Dialog Box
2. Enter a description of the user group into the Description text box.
3. In the left-hand side of the Available Roles and Privileges area, click the wand next to
the action or permission you wish to assign to the new user group. The selected permissions
move to the right-hand pane of the Available Roles and Privileges area. You can also drag
and drop entire groups of privileges or individual privileges.
Part # 430-4G-060-00-005 39
Managing Users
Figure 2-11 Assigning Roles and Privileges
4. Click Save & Close. The new user group details and privileges are saved, the dialog box
closes, and the new user group is displayed in the User Groups list.
To close the dialog box without saving the user group, click the Close button.
Part # 430-4G-060-00-005 40
Managing Users
2.6 COMPANIES TAB

The Companies tab displays the companies in the currently selected database.
Figure 2-12 Companies Tab
If you are searching for a specific company, you can use the filter function to find them more
easily.
2.6.1 TO FILTER BY COMPANY

1. Enter the company name into the Company Name field.
Part # 430-4G-060-00-005 41
Managing Users
2.6.2 TO ADD A COMPANY

1. Click the Add Company button. The Add Company dialog box is displayed.
2. Provide the new company’s details in the various fields and text boxes.
Figure 2-13 Add Company Dialog Box
3. Click Save & Close. The new company‘s details are saved, the dialog box closes, and the
new company is displayed in the Companies list.
To close the dialog box without saving the company, click the Close button.
Part # 430-4G-060-00-005 42
Managing Users
2.7 SITES TAB

The Sites tab displays the sites in the currently selected database.
Figure 2-14 Sites Tab
2.7.1 TO FILTER BY SITE

If you are searching for a specific site, you can use the filter function to find it more easily. To
filter by site:
1. Enter a name into the Site Name field.
Part # 430-4G-060-00-005 43
Managing Users
2.7.2 TO ADD A SITE

1. Click the Add Site button. The Add Site dialog box is displayed.
2. Provide the new site’s details in the various fields and text boxes.
Figure 2-15 Add Site Dialog Box
3. Click Save & Close. The new site‘s details are saved, the dialog box closes, and the new
site is displayed in the Sites list.
To close the dialog box without saving the site, click the Close button.
2.8 DEPARTMENTS TAB

The Departments tab displays the department names in the currently selected database.
Part # 430-4G-060-00-005 44
Managing Users
Figure 2-16 Departments Tab
If you are searching for a specific department, you can use the filter function to find it more
easily.
2.8.1 TO FILTER BY DEPARTMENT

1. Enter a name into the Department Name field.
2.8.2 TO ADD A DEPARTMENT

1. Click the Add Department button. The Add Department dialog box is displayed.
Part # 430-4G-060-00-005 45
Managing Users
2. Provide the new department’s details in the various fields, text boxes, and drop-down
lists. The button to the right of any drop-down list allows you to add a new category to that
drop-down list without having to close the dialog box and switch to a different tab.
Figure 2-17 Add Department Dialog Box
3. Click Save & Close. The new department‘s details are saved, the dialog box closes, and
the new department is displayed in the Departments list.
To close the dialog box without saving the department, click the Close button.
Part # 430-4G-060-00-005 46
Managing Network Settings
CHAPTER 3 - MANAGING NETWORK

SETTINGS
CHAPTER OVERVIEW
This chapter details how to view devices in the network and how to configure the various
device settings accessible by means of the Device Settings tab and how to register devices
connected to a server or connected to a computer. The Network tab allows you to see what
devices are connected to the network and allows you to change device settings parameters
of online devices and allows you to register new devices on the network.
Figure 3-1 Network
Part # 430-4G-060-00-005 47
On the Network tab, three buttons are displayed:

 Network Tree - This button allows you to see what devices are connected
to the network and allows you to configure device settings parameters of
online devices
 Register via server - This button allows you to register 4G Lite and Secure
Control devices that are connected through a SecureAdmin Lite server (this
is the recommended method).
 Register via client - This button allows you to register a 4G Lite and Secure
Control device that is connected directly to the SecureAdmin Lite Client PC.
3.1 VIEW DEVICES IN NETWORK

1. Click the Network Tree button.
2. Double-click the Device Network item in the network tree. The network tree expands to
show all groups in the network.
3. Double-click a group in the network tree. In the example below, the group item is named
―DefaultGroup‖. Any devices in the group are displayed in the network tree under the group
they belong to. There is also one device item, named ―Device0‖, in the group.
Part # 430-4G-060-00-005 48
Figure 3-2 Network Tree
3.2 REGISTER DEVICE VIA SERVER

1. Click the Register via server button. A Register via Server dialog box is displayed.
Part # 430-4G-060-00-005 49
Figure 3-3 Register via Server Dialog Box
Note: Depending on the communication type used, the administrator/installer must select
Serial Communication, Ethernet Communication as appropriate.
2. Select the Search Automatically check box.
3. Click the Scan button. SecureAdmin Lite scans the network for connected devices and
lists the results.
4. In the list, click the Registration Status icon of the device you want to register. A plus sign
icon means that the device is available to be added. A check mark icon means the device
has already been added. A Server Communication Parameter dialog box is displayed.
5. Select the radio button that corresponds to the way the server will connect to the device
(either by Serial Port or Ethernet).
6. If you are connecting via USB, RS-485, enter the appropriate Port, Baud Rate, Device ID
and Protocol.
If you are connecting via Ethernet, enter the respective network IP Address, Subnet Mask
and Gateway of the device. Select the Obtain IP address from DHCP check box if dynamic
IP addressing is used.
7. Click on Next to move to the next step.
Part # 430-4G-060-00-005 50
Figure 3-4 Register Device
Figure 3-5 Register Device Dialog Box
8. Enter a name for the device in the Device Name field.

9. Select the group the device will belong to in the Group drop-down list.
10. Click Register. A Device Summary dialog box is displayed. The dialog box lists
information about the registered device.
Part # 430-4G-060-00-005 51
Figure 3-6 Device Summary Dialog Box
11. Click OK. The device is now registered.
3.3 REGISTER DEVICE VIA CLIENT

1. Click the Register via client button. The Device Registration Wizard dialog box is
displayed.
Figure 3-7 Step 1 Find Device Dialog Box
2. Select either Serial Port - this machine or Ethernet radio button.

3. Enter the appropriate connection details.
Part # 430-4G-060-00-005 52
If you are connecting via USB/RS-485, enter the appropriate Port, Baud Rate, and Device
ID. Check Auto check box if Device ID is not known.
If you are connecting via Ethernet, Enter the network IP Address of the device you want to
connect to.
NOTICE
To determine the correct port number while device connected on
USB, look in the Windows Device Manager for a “Gadget Serial”
entry under the Ports (COM & LPT) heading.
NOTICE
When the device is connected to a PC workstation for the first time, a
Found New Hardware message will be displayed. The Hardware
Installation Wizard prompts you to connect to the internet to search
for a driver. Select Not at this time > Next. Then choose Install
the driver automatically.
4. Click Next to move to the next step.
Part # 430-4G-060-00-005 53
Figure 3-8 Device Information Dialog Box

Figure 3-9 Server Communication Parameter Dialog Box
Part # 430-4G-060-00-005 54
6. Select the radio button that corresponds how the server will connect to the device, either
by Serial Port, Ethernet or Dialup.
7. If connecting via USB or RS-485, enter the appropriate Port, Baud Rate, Device ID and
Protocol.
If connecting via Ethernet, enter the respective network IP Address, Subnet Mask and
Gateway of the device. Select the Obtain IP address from DHCP check box if dynamic IP
addressing is used.
Figure 3-10 Register Device Dialog Box
9. Enter a Device Name.

10. Select the Group the device will belong to from the drop-down menu.
11. Click Register. The Step 5 of 5 Device Summary dialog box is displayed.
Figure 3-11 Device Summary Dialog Box
12. Click OK. The device is now registered.

Part # 430-4G-060-00-005 55
13. Click Register Another Device. The device registration wizard would start again for
another device registration.
NOTICE
If the device is registered with RS485, then during massive data
transfer, Secure Admin will get slower response from device due to
communication interface limitation.
3.4 UNREGISTERING THE DEVICE

1. Click the Network Tree button.
2. Double-click the Device Network item in the network tree. The network tree expands to
show all groups in the network.
3. Double-click a group in the network tree to expand
Part # 430-4G-060-00-005 56
Figure 3-12 SecureAdmin Lite Network Tree
4. Right click on the device you want to unregister. Select the Un-register Device option.
5. Click Yes. The device will now get unregistered. Optionally, you can select Delete all
templates from device check box to delete all templates from device.
Part # 430-4G-060-00-005 57
Figure 3-13 Unregister Device Warning
NOTICE
Unregistering the device will disable the Ethernet security settings on
the device. If the administrator re-registers the device back to the
network, administrator needs to re-enable the Ethernet security on
the device if this option is desired.
NOTICE
Registering and Unregistering procedure for Secure Control and 4G

Lite devices same.
Part # 430-4G-060-00-005 58
NOTICE
Unregistering the device will remove it from the database and break
the connection between the templates stored in the device and the
database.
If the administrator re-registers the device back to the network, the
link will not be restored and the SecureAdmin Lite database will not
have records indicating that the templates are located on the device.
Therefore, the administrator needs to delete all the templates on the
device and if the templates need to be stored on the device, transfer
them from the database. The transfer will create new links between
the templates stored in the database and the device.
3.5 VIEW DEVICE SETTINGS IN NETWORK

1. Double-click the Device Network item in the network tree.
2. Double-click a group in the network tree. In the example below, the group item is named
―DefaultGroup‖.
3. Double-click the device for which you want to adjust the settings. Various tabs are
displayed for the device. (By default General tab is selected).
Part # 430-4G-060-00-005 59
Figure 3-14 Device Network Tab
3.5.1 GENERAL TAB

This tab displays basic information about the currently selected 4G Lite or Secure Control
devices. No settings can actually be changed from this tab.
Part # 430-4G-060-00-005 60
Figure 3-15 General Tab – 4G Lite Device
Part # 430-4G-060-00-005 61
Figure 3-16 General Tab – Secure Control Device
3.5.2 COMMUNICATION TAB

The Communication tab allows you to adjust various communication settings of the selected
4G Lite or Secure Control Devices.
Part # 430-4G-060-00-005 62
Figure 3-17 Communication Tab – 4G Lite Device
Part # 430-4G-060-00-005 63
Figure 3-18 Communication Tab – Secure Control
Using the various fields and drop-down lists in the Serial area, adjust these settings:
 Device ID
 Host Port Protocol
 Host Port Baud Rate
 Aux Port Password (optional)
Using the various fields in the TCP/IP area, the following can be configured.
If you are using a wired connection, adjust these settings:
Ethernet
 DHCP or Static IP
Part # 430-4G-060-00-005 64
 IP Address of current device (if using Static IP)
 Subnet Mask (if using Static IP)
 Gateway (if using Static IP).
If you are using a wireless connection, configure these settings:

WLAN
 DHCP or Static IP
 IP Address of current device (if using Static IP)
 Subnet Mask (if using Static IP)
 Gateway (if using Static IP)
Encryption
 Encryption Type
 Encryption Key
 Current Node or ESSID
Network Type
 Managed
 Ad-hoc
NOTICE
WLAN Settings are supported for Secure Control device Only.
Using the various controls in the Ethernet Security area, adjust these settings:
 Ethernet Security (enable or disable)
 Allowed IP Addresses
 Allowed IP Address Ranges
Part # 430-4G-060-00-005 65
Click the Apply button after making any changes on this tab. Click Refresh to see the most
recent settings.
Ethernet Security
Ethernet Security is a feature that allows you to specify which IP addresses are allowed to
communicate with the device. To activate Ethernet Security, you need to select the
Ethernet Security check box. You can then enter up to 100 individual IP addresses and 100
IP ranges. During a device registration via server, the IP of the server machine is logged as
an allowed IP into the device.
Aux Port Security
The Aux port can be configured with a password to disable unauthorized use. Once the Aux
port is locked with a password, the device cannot be accessed using any application unless
the password is supplied to re-enable it. To disable it, enter a numeric password (the
password can only be digits, with a maximum of ten digits), and then click Apply. Once the
Aux port is disabled, it accepts no communications until it is re-enabled by one of these
methods:
 If communicating over the Host or Ethernet ports: The Enable Port command
enables Aux port communications and a password is not required. This allows
the device to be reset over the Host and Ethernet ports if the Aux password is
forgotten. SecureAdmin allows this since the network is considered secure.
 If communicating over the Aux port: The Enable Port command enables Aux
port communications only if the correct password is supplied. All other
commands return an error indicating a ‗locked port‘ until the port is enabled
properly. Many fields in SecureAdmin are blank when the port is locked.
SSL
Secure Socket Layer is a feature that allows you to ensure that communication between the
device and SecureAdmin is secured. Enabling SSL will ensure that Device communicates to
only trusted software i.e. SecureAdmin.
NOTICE
Aux Port, Ethernet Security and Aux Port Security Settings are
supported for 4G Lite device Only.
Part # 430-4G-060-00-005 66
3.5.3 LED TABLE TAB

The LED Table tab provides controls that allow you to modify the LED behaviour of the
selected device.
Figure 3-19 LED Table Tab
To modify the LED behaviour:

1. Select an action from the LED Action Selection drop-down list.
2. Click the appropriate icons under the Red, Green or Amber columns corresponding to
the LED colors you want to illuminate for the selected action.
3. If you want the buzzer to sound for the selected action, select the appropriate check box
under the Sound column.
4. Enter the number of milliseconds (maximum 16383) in the Duration and Interval fields.
Part # 430-4G-060-00-005 67
5. Click Apply.
3.5.4 TAMPER TAB

The Tamper tab provides controls that allow you to enable, disable, modify, and reset the
tamper detection feature on the selected device.
Figure 3-20 Tamper Tab
To enable the Tamper detection:

1. Select the Activate Tamper Detection check box.
2. Set Disable Biometric and Erase Device Database option as required.
Part # 430-4G-060-00-005 68
3. Click Apply.
To stop (disarm) the tamper detection buzzer and audio feedback, click the Reset button. To
re-arm the tamper detection, click the Clear & ReEnable button.
3.5.5 ACCESS CONTROL TAB

The Access Control tab provides controls that allow you to configure the selected 4G Lite
device‘s built-in door controller settings and access rule.
3.5.5.1 CONFIGURING ACCESS CONTROL FOR 4G LITE DEVICE

If you are using Secure Control device to control doors, it must be activated. To activate the
Secure Control feature, select the Use Secure Control check box.
Part # 430-4G-060-00-005 69
Figure 3-21 Access Control Tab – 4G Lite Device
3.5.5.1.1 TO CONFIGURE ACCESS CONTROL
1. Enter number of seconds the door will be unlocked in the Door Unlock Duration field.
2. Enter number of seconds the door will be held open in the Door Held Open field.
3. Select the desired Request to Exit Mode.
There are 3 options available as below.
i. None
ii. Push Button
iii. Motion Detector
Part # 430-4G-060-00-005 70
4. Enter number of seconds in Egress Timeout field when Request to Exit Mode is selected
as Motion Detector or Push Button.
5. Select the desired Alarm Condition.
There are 3 options available as below.
i. Audio Feedback
ii. LED Blinking
iii. LED Blinking and Audio feedback
6. Click the Apply button to save the configuration settings to the device.
3.5.5.1.2 TO CONFIGURE ACCESS RULE
Access Rule is a feature that allows you to set a rule to grant access permission for user on
selected device.
By selecting Use Device Settings for all users, rules attached with individual templates will
be overridden during verification/identification. In this case, template rules will be overridden.
If user selects Template Settings of each user then device settings will be overridden.
1. Select access rule as desired, by selecting Use Device Settings for all users or User
Template Settings of each user radio button.
There are 7 options available for Use Device Settings for all users as below.
i. No Rule: During verification/identification device will not follow any rule. Any
authentication method remains valid in this mode.
ii. Biometric Only: Device will authenticate finger in case of identification only (i.e. with 1:
N template type user should place finger directly on sensor).
iii. Card Only: User needs not to place finger on sensor after waving card. Authentication
will be successful on placing card over device card reader.
iv. Keypad Only: Authentication will be successful only if it has been started with device
keypad.
v. Biometric + Card: User needs to place finger on sensor after waving card over device
card reader.
vi. Biometric + Pin (Password): If template is with PIN then user always needs to enter pin
after identification is completed.
Part # 430-4G-060-00-005 71
vii. Biometric + Card + Pin (Password): User needs to place finger on sensor after waving
card over device card reader. In addition, if template avails PIN then user must enter
PIN for successful verification.
2. Click the Apply button.
NOTICE

SecureAdmin Lite.
3.5.5.1.3 TO CONFIGURE SMART CARD VERIFICATION
Configuring Smart Card Verification allows you to configure the Card Serial Number with
either of the options.
1. Manufacturer‘s Serial Number
2. Printed number
During Card only Enrollment for Smart Card products, when user checks checkbox "Read
Card Serial Number" and flashes Smart Card, it would read the CSN as per the option
selected.
NOTICE
Configure Smart Card Verification feature is only supported for iCLASS

Cards.
CAUTION
Only advanced user is recommeded changing configuration for
reading Smart Card Serial Number. Device may not autheticate
templates on previously enrolled Smart Cards after changing this
confuguration.
Part # 430-4G-060-00-005 72
3.5.5.1.4 ACTIVATING TIME OVERRIDE MODE
Time Override Mode (TOM) allows an Administrator to temporarily suspend the need for
verifications for a specified time period on a device.
TO ENABLE AND CONFIGURE TOM FOR THE SELECTED DEVICE

1. Select the Enable Time Override Mode check box.
2. Enter the number of minutes TOM will be active into the Time Override Duration field.
The maximum is 1440 minutes equal to 24 hours.
3. Click the Apply button to activate TOM on the device.
Thirty seconds before TOM is set to expire, the device beeps. After TOM expires, the device
returns to using the existing Access Control settings.
NOTICE
TOM feature is not supported when Use Secure Control feature is

enabled.
Part # 430-4G-060-00-005 73
3.5.5.2 CONFIGURING ACCESS CONTROL FOR SECURE CONTROL DEVICE

Figure 3-22 Access Control Tab – Secure Control Device
3.5.5.2.1 ACTIVATING TIME OVERRIDE MODE
Time Override Mode (TOM) allows an Administrator to temporarily suspend the need for
verifications for a specified time period on a device.
TO ENABLE AND CONFIGURE TOM FOR THE SELECTED DEVICE
1. Select the Enable Time Override Mode check box for Door-1, Door-2 as required.
2. Enter the number of minutes TOM will be active into the Time Override Duration field.
The maximum is 1440 minutes equal to 24 hours.
3. Click the Apply button to activate TOM on the device for selected Door.
Part # 430-4G-060-00-005 74
Thirty seconds before TOM is set to expire, the device beeps. After TOM expires, the device
returns to using the existing SDAC settings.
3.5.5.2.2 FIRE PANEL INPUT
Fire Panel Input allows administrator to configure Alarm line to receive fire alarm. When
signal is received on this line, door is opened electrically and alarm is generated by Secure
Control. If TOM is already running and device receives fire alarm, TOM operation will be
cancelled and door will be kept open until fire alarm is cleared.
 To enable Fire Panel Input on Alarm line, select the Enable Fire Panel
Alarm Mode check box.
 Fire alarm can be cleared when Disable or Clear & Re-enable command
is received by Secure Control from SecureAdmin.
3.5.5.2.3 TO SYNCHRONIZE SECURE CONTROL
Soft Sync allows you to synchronize all connected 4G Lite devices with Secure Control.
Secure Control communicates with those devices which are synchronized. If device is
already synchronized and Device ID gets change, device will be unsynchronized and requires
synchronizing again.
 To synchronize devices with secure control, click the Soft Sync button.
 Devices can be synchronized when Sync command is received by Secure

Control from SecureAdmin or Sync line.
NOTICE
Maximum FOUR devices can be connected with Secure Control and

devices must have unique Device ID.
3.5.6 ACCESS SCHEDULES TAB

The Access Schedule tab provides controls that allow you manage access schedules on the
selected device.
Part # 430-4G-060-00-005 75
Figure 3-23 Access Schedules Tab
NOTICE
4G V-Flex Lite (S,NW), 4G V-Flex Lite (S,P,NW), 4G CR-Pass (P, NW),
4G V-Flex Lite(S, O, NW), 4G CR Pass (O, NW), 4G V-Station Lite
(S,NW), 4G V-Station Lite (S,P,NW) and 4G V-Station Lite(S, O, NW)
devices do not have Wiegand Output functionality hence Duress
Finger options are not available for these products.
 To view an existing access schedule, select the check box next to the
access schedule you want to review. The item is highlighted in the list and
the vertical bars show the schedule. The area in green represents the time
period when access is allowed.
Part # 430-4G-060-00-005 76
In the example above, the selected access schedule is ―All Access‖ and as the name
suggests, access is allowed at all times, signified by the full-height green bars.
 To enable the use of access schedules, select the Activate User Access
Schedule check box.
NOTICE
There are 64 total Access Schedules available on 4G Lite devices. Of

these, 58 are available for modification by the user.
Figure 3-24 New Access Schedule
Part # 430-4G-060-00-005 77
3.5.6.1 TO ADD AN ACCESS SCHEDULE

1. Click the Add button. A new entry is displayed in the list.
2. Modify Access Schedule Name if required.
3. In the Allowed Access Time area, click inside one of the bars on the desired day of the
week and drag up or down to define a time interval. Move the time interval by clicking on it
and dragging it to where you want it. Remember that the area in green represents when
access is allowed.
4. Apply the new access schedule, as desired, by selecting Entire Week or Weekdays radio
button and clicking the Apply Schedule button.
5. Set Schedule Tolerance and Ignore Schedule for Duress Finger (for devices with
Wiegand Output functionality) in Options area.
6. Click Apply to apply the schedule.
3.5.6.2 TO SAVE AND UPLOAD ACCESS SCHEDULES

Using the Save and Upload option, you can save the defined access schedule in file format
and upload it to other devices or on the same device.
 Saving schedules in Access Schedules (*.vsf) file format will only save
the access schedule allowed time.
 Saving schedules in Access Schedules (*.evsf) file format will save the
access schedule allowed time and the custom name given to the access
schedule.
 Using Upload, you can upload any of the Access Schedules file.
3.5.7 HOLIDAY SCHEDULES TAB

The Holiday Schedule tab provides controls that allow you to manage holiday schedules on
the selected device.
Part # 430-4G-060-00-005 78
Figure 3-25 Holiday Schedules Tab
 To view an existing holiday schedule, select the check box next to the
access schedule you want to review. The item is highlighted in the list and
the vertical bars show the schedule. The area in red represents the time
period when access is not permitted.
In the example above, the selected holiday schedule is set to not allow any access on July 4,
2011
3.5.7.1 TO ADD A HOLIDAY ACCESS SCHEDULE

1. Click the Add button. A new entry is displayed in the list.
Part # 430-4G-060-00-005 79
Figure 3-26 Holiday Schedules Tab - New Holiday Schedule
2. In the Holiday Information area, select the month using the arrow controls and select the
day of the holiday schedule by clicking on it.
3. If required, also rename the default holiday name with a custom name.
4. Click inside the bar next to the calendar control and drag up or down to define a time
interval. Move the time interval by clicking on it and dragging it to where you want it.
Remember that the area in red represents when access is not allowed.
5. Click Apply to apply the holiday schedule.
6. To remove holiday schedules that have already occurred, click the Remove Expired.
Part # 430-4G-060-00-005 80
3.5.7.2 TO SAVE AND UPLOAD HOLIDAY ACCESS SCHEDULES

Using the Save and Upload option, you can save the defined holiday access schedule in file
format and upload it to other devices or on the same device.
 Saving defined holidays in Holiday File (*.vhf) file format will only save the
holiday access schedule.
 Saving defined holidays in Holiday File (*.evhf) file format will save the
defined holidays and the custom name given to the holiday schedule.
 Using Upload, you can upload any of the Holiday Schedule file.
Part # 430-4G-060-00-005 81
3.5.8 MISCELLANEOUS TAB

The controls on this tab allow you to activate Send Verification Results, Custom
Verification Entry Mode and Realtime Activity Logging and Monitoring settings for the
currently selected device.
Figure 3-27 Miscellaneous Tab
3.5.8.1 SEND VERIFICATION RESULT

The Send Verification Result feature allows other verification responses to be sent in
addition to the normal response. Under normal operation, the 4G Lite device responds based
on how a Verification Action was initiated. When a Wiegand input initiates the action, a
Wiegand output responds to it. When a Verification Action is initiated over a
communications port, then the response packet is returned on the same communication port
(either Host or Aux).
Part # 430-4G-060-00-005 82
3.5.8.1.1 TO ENABLE AND CONFIGURE THE SEND VERIFICATION RESULT FEATURE
1. Decide which Channel the response is to be sent on.

2. Select the Always or Always (with ID) check box next to the appropriate channel.
If you select Always, a response is sent every time. If you select Always (with ID), a
response is also sent out every time, but the first data word returned is the Template
ID.
3. Click Apply.
NOTICE
L-1 Identity Solutions recommends that only advanced users who are
working with the SecureSDK and writing their own custom software
attempt to enable the Host or Aux Always operations.
3.5.8.2 ACTIVATE REALTIME ACTIVITY

With Realtime Activity Logging and Monitoring, all the activities happening on the device
can be monitored real time.
3.5.8.2.1 TO ACTIVATE REALTIME ACTIVITY LOGGING AND MONITORING
1. Select the Activate Realtime Activity Logging and Monitoring checkbox.

2. Click Apply.
3.5.8.3 ACTIVATE CUSTOM VERIFICATION ENTRY MODE

When Custom Verification Entry Mode is enabled, users must enter code through device
keypad after verification. The code is logged in the device transaction log.
3.5.8.3.1 TO ENABLE CUSTOM VERIFICATION ENTRY MODE
1. Select the Activate Custom Verification Entry Mode check box.

2. Click Apply.
Part # 430-4G-060-00-005 83
NOTICE
The Custom Verification Entry Mode feature is supported on 4G V-

Station Lite devices only.
3.5.9 AUDIO TAB

The controls on this tab allow you to manage the audio feedback settings of various actions
for the currently selected audio-enabled device.
Figure 3-28 Audio Tab
Part # 430-4G-060-00-005 84
To change the audio feedback of an action:

1. Select an action from the Audio Directory drop-down list.
2. Click the Upload button. An Open File dialog box is displayed.
3. Navigate to and select the audio file you want to play when the selected action occurs.
4. Click OK. The file is uploaded to the device and is displayed in the list of available audio
files.
5. Preview the audio file by selecting it and clicking Play.
Figure 3-29 Audio Tab - New Audio File
Part # 430-4G-060-00-005 85
6. Set the volume of the selected audio feedback file using the Set File Volume slider.
7. Click Apply to save your changes to the device.
Set the master volume of the selected device using the Device Volume slider.
Remove unwanted audio files by selecting them in the list and clicking the Remove button.
NOTICE
Audio feature is not supported on 4G CR-Pass products.
3.5.10 GENERAL PURPOSE OUTPUT TAB

The General Purpose Output Tab allows the user to set what actions are triggered when
the General Purpose Output line (commonly referred to as GPO) is activated.
This tab allows you to control which actions cause the device to set GPO (output line) active
and for how long.
Figure 3-30 General Purpose Output Tab
Part # 430-4G-060-00-005 86
NOTICE
4G V-Flex Lite (S, NW), 4G V-Flex Lite (S, P, NW), 4G V-Flex Lite (S, O,
NW), 4G CR-Pass (P, NW), 4G CR-Pass (O, NW), 4G V-Station Lite
(S,NW), 4G V-Station Lite (S,P,NW) and 4G V-Station Lite(S, O, NW)
Part # 430-4G-060-00-005 87
3.5.10.1 GENERAL PURPOSE OUTPUT

All 4G Lite devices have General Purpose Output GPO TTL capability. When configured,
certain GPO actions can activate GPO line 0. The possible actions are:
 Enroll Completed - When a user has completed an enrollment
 Enroll Initiated - When a user has initiated an enrollment
 Verify/Identify Passed - After a successful verification, initiated from any

source
 Verify/Identify Failed - After a failed verification, initiated from any source
 Finger not Detected - Whenever a finger is expected by the device but

not detected
 V-Station Admin Mode - When a user enters admin mode from the
keypad on a V- Station 4G device (with full administrative privileges)
 V-Station Enroll Mode - When a user enters with a V-Station Enroll ID

from the keypad on a V- Station 4G device (with Enrollment privileges
only)Delete Attempted - When a template delete is initiated, from any
source (this applies to templates stored on the device only)
 Device Bootup - When a device is booted up, either from a power cycle or
from a soft reboot.
 File Transfer Complete - When a large file transfer is complete. Used

when transferring audio and firmware files.
 Tamper Occurred - When Tamper Mode is enabled, physical movement

of the device housing triggers a reed switch which in turn activates user
specified ―Tamper‖ options on the device.
 Duress Finger Detected - When Duress Mode is enabled and a duress

finger is detected.
Any of these actions, if configured, can trigger the line active for the Duration that is specified
(default 600 ms). All GPO parameters can be reset to defaults be clicking on the Reset GPO
Parameters button. By default, the device has GPO action set to ―No Action‖.
3.5.10.1.1 TO CONFIGURE GPO SETTINGS
1. Select required checkboxes of GPO triggering action for GPO0 line.
Part # 430-4G-060-00-005 88
3. Enter a value into the Duration field.

4. Click Apply.
3.5.11 WIEGAND TAB

The controls on the Wiegand tab allow you to set the Wiegand Input Format, set Wiegand
Output for an events, and upload custom Wiegand formats to a device.
Figure 3-31 Wiegand Tab
Part # 430-4G-060-00-005 89
NOTICE
4G V-Flex Lite (S, NW), 4G V-Flex Lite (S, O, NW), 4G V-Station Lite (S,
NW), 4G V-Station Lite(S, O, NW) and 4G CR-Pass (O, NW) devices
does not support Wiegand functionality. 4G V-Flex Lite (S, P, NW), 4G
V-Station Lite (S,P,NW) and 4G CR-Pass (P, NW) devices supports
ONLY Wiegand Input functionality.
3.5.11.1 PRE-DEFINED WIEGAND FORMATS

Several Wiegand formats are preloaded on 4G Lite devices and are designated as a
Standard type in the table below. They contain an ID of 32 bits or less. All 4G Lite devices
support these formats. This tab allows you to select the desired Wiegand format for both
input and output. ―Standard 26-bits‖ is the default format.
3.5.11.1.1 TO SET THE WIEGAND FORMAT TO A PRE-DEFINED FORMAT
1. Select the Predefined radio button.

2. Select a Wiegand format in the drop-down list.
3. Click Apply
Part # 430-4G-060-00-005 90
Table 3-1 Wiegand Formats and Associated Valid Values
Alt Site Code and

Template ID Extended ID
Format Type Fail Site Code
Number Range Number Range
Range
Standard 26-bit Standard 0 - 255 1 - 65535 N/A
Apollo 44-bit Standard 0 - 16383 1 - 65535 N/A
Northern 34-bit Standard 0 - 65535 1 - 65535 N/A

Northern 34-bit [no
Standard 0 - 65535 1 - 65535 N/A
parity]
HID Corporate [35-bit] Standard 0 - 4095 1 - 1048575 N/A
Ademco 34-bit Standard 0 - 4095 1 - 1048575 N/A
HID 37-bit Standard 0 - 2047 1 - 16777215 N/A

Extended ID 1-
Generic 64 bit N/A 1 - 4294967294
Uploadable 4611686018427387903
Extended ID
Wiegand 4002 40 bit N/A 1 - 4294967294 1 - 274877906943
Uploadable
3.5.11.2 PASSTHRU WIEGAND FORMATS

SecureAdmin provides expanded Wiegand compatibility by allowing you to define a Passthru
format. To use this ability, this information is required:
 Total bits - The number of Wiegand bits in the Wiegand string (maximum
= 64 bits)
 ID start bit - the start bit of the ID Field (where the first bit is Bit 0)
 Total ID bits - the number of bits in the ID Field (must be contiguous bits).
Using these three pieces of information, when a card is presented to the device, it attempts to
decode the ID Field and uses that information as the Template ID number. All Site codes,
Parity, and any other data are ignored. Using this ID, the device attempts to verify the
template corresponding to the decoded ID. If the ID is not found or if the verification attempt
fails, no Wiegand output is sent. To the controller, it appears as if nothing was presented. If
the ID is valid and a successful verification is performed, the original Wiegand input string
(with Site code, Parity, etc.) will ―Pass-Thru‖ to the Wiegand output unchanged.
Part # 430-4G-060-00-005 91
Although the Passthru option does not allow Fail Strings, changing the Site Code, or
checking parity, it does provide a mechanism for using a wide variety of Wiegand formats.
3.5.11.2.1 TO SET THE WIEGAND FORMAT TO A PASS-THRU FORMAT
1. Select the Passthru radio button.

2. Enter a value in the Total bits field.
3. Enter a value in the ID start bit field.
4. Enter a value in the Total ID bits field.
5. Click Apply.
3.5.11.3 CUSTOM INPUT WIEGAND FORMAT

The Custom Wiegand Input option allows setting a custom Wiegand format as Wiegand
input format. Any existing custom wiegand format available on device can be set.
1. Select the Custom radio button.
2. Select the Wiegand format.
3. Click Apply.
3.5.11.4 PULSE WIDTH

The Set pulse width to option allows you to enter custom pulse width duration (in
microseconds) for the Wiegand output. This is not recommended unless you are very familiar
with the equipment connected to the V-Series 4G device.
3.5.11.4.1 TO SET THE PULSE WIDTH
1. Enter a value into the Set pulse width to field (from 20 to 100 microseconds).
2. Click Apply.
3.5.11.5 PULSE INTERVAL

The Set pulse interval to option allows you to enter custom pulse interval duration for the
Wiegand output. This is not recommended unless you are very familiar with the equipment
connected to the V-Series 4G device.
3.5.11.5.1 TO SET THE PULSE INTERVAL
1. Enter a value into the Set pulse interval to field (from 20 to 100 microseconds).
2. Click Apply.
Part # 430-4G-060-00-005 92
3.5.11.6 ACTIVATE WIEGAND INPUT

The Activate Wiegand Input option enables Wiegand input when selected. This allows all
Wiegand input communication to the device. If this option is deselected, all Wiegand input
data that the device receives is ignored.
To activate Wiegand input, select the Activate Wiegand input check box then click Apply.
3.5.11.7 ACTIVATE WIEGAND OUTPUT

The Activate Wiegand Output enables Wiegand output when selected. If this option is
deselected, all Wiegand output data is output in the same format as the Wiegand Input data.
There are two options when enabling output, which are selected from the drop-down list to
the right of the check box:
 Always Output: This enables Wiegand output on all Verifications
regardless of whether they were initiated by a Wiegand input, a PC, or any
other device. This is the default setting.
 Selective Output: This causes the Wiegand output string to be sent

whenever a Wiegand input is received.
3.5.11.7.1 TO ACTIVATE WIEGAND OUTPUT
1. Select the Activate Wiegand output check box.

2. Select the desired option in the drop-down list.
3. Click Apply.
3.5.11.8 WIEGAND OUTPUT SETTINGS

The Wiegand Output Settings option allows you to associate Wiegand formats with device
events. If you want to use a custom Wiegand format, you must create the custom Wiegand
format first.
 Duress Finger Mode: The Duress drop down in Wiegand output setting,
when selected, offers users a way to indicate an ―under duress‖ situation
(such as being forced to open a door) by verifying with a specially
designated duress finger. When a successful verification occurs with such
a template, the device performs the special action specified, sending the
Wiegand output in specified format to alert the door controller of the duress
situation. The controller can then respond by alerting security personnel,
sounding alarms, etc. Of course, the controller must support such an
option.
Part # 430-4G-060-00-005 93
NOTICE
A template that is specified as a duress template is still subject to
access scheduling, holidays, multi-user mode, and any other
biometric option specified. For this reason, L-1 Identity Solutions
recommends setting any duress template to use Access Schedule #63
(All Access) and not observe holidays.
 Tamper: When Tamper mode is enabled, the Tamper drop down in

Wiegand output setting, offers users a way to send the Device Serial
Number in specified Wiegand output format to alert the door controller of
the tamper situation.
 Configure Wiegand ID: When a Pass/Fail verification and identification

occurs with a template, the device sends the Wiegand output in specified
format containing either User ID or Extended ID or Card Serial Number.
3.5.11.8.1 TO SET WIEGAND OUTPUT SETTINGS
Click the Wiegand Output Settings button. The Wiegand Output Settings dialog box is
displayed.
Figure 3-32 Wiegand Output Settings Dialog Box
Part # 430-4G-060-00-005 94
1. Select a Wiegand format from the drop-down list next to a Verification Pass. Repeat for
other desired events.
2. Select Wiegand value from Configure Wiegand ID drop-down list.
3. Click Apply. The dialog box closes.
3.5.11.9 CUSTOM WIEGAND SETTINGS

The Custom Wiegand Settings option allows you to manage Wiegand formats. You can
upload, edit, and delete Wiegand formats with this option.
3.5.11.9.1 TO UPLOAD CUSTOM WIEGAND OUTPUT SETTINGS
1. Click the Custom Wiegand Settings button. The Custom Wiegand Settings dialog box
is displayed.
2. Click on a slot.
3. Select where you want to upload from in the Upload drop-down menu. A dialog box is
displayed.
4. Provide the appropriate details in the dialog box for the upload origin you selected.
5. Click Close. The Custom Wiegand Settings dialog box closes.
Figure 3-33 Custom Wiegand Settings Dialog Box
3.5.11.9.2 TO CREATE A CUSTOM WIEGAND FORMAT
1. Click the Custom Wiegand Settings button. The Custom Wiegand Settings dialog box
is displayed.
Part # 430-4G-060-00-005 95
2. Click on a Slot.
3. Select New in the Upload drop-down menu. A Wiegand Format dialog box is displayed.
Figure 3-34 New Wiegand Format Dialog Box
4. Enter a name into the Name field.

5. Enter a value in the Length field.
6. Enter the Wiegand ID Start Position, Length and Heart Beat Value.
7. Click the Add User Field button (the top-most red arrow that‘s pointing left) in the User
Fields area. A slot is displayed in the User Fields area.
Part # 430-4G-060-00-005 96
Figure 3-35 New Wiegand Format Dialog Box - Add User
8. For the new User Field entry, enter Name, Start Position, Length, Success Value and
Failure values.
9. Click the Add Parity Field button (the top-most red arrow that‘s pointing left) in the Parity
bits area. A slot is displayed in the Parity bits area.
10. Select a Parity Type from the drop-down list.
11. Click the Parity Mask button. In the dialog box that appears, calculate and apply a parity
value.
12. A parity bit can be calculated for the whole Wiegand string or for part of it. To set which
bit to calculate for parity, click the ―. . .‖ button and use the controls in the Parity Calculation
dialog box.
13. Click Apply.
 To edit a Wiegand format, select a Wiegand format in the Custom
Wiegand Settings dialog box and click the Edit button. The dialog box is
displayed, where you can edit the Wiegand format‘s details.
 To delete a Wiegand format, select a Wiegand format in the Custom

Wiegand Settings dialog box and click the Delete button.
Part # 430-4G-060-00-005 97
3.5.12 BIOMETRICS TAB

The Biometrics tab allows various biometrics parameters to be configured for the selected
device. Use caution when making any changes in this tab because they will affect the
operation of the device‘s biometric functions, and thus affect over-all security.
Figure 3-36 Biometrics Tab
3.5.12.1 GLOBAL SECURITY THRESHOLD

There are two global security levels Verify and Identify. Both security levels are applicable in
Verify and Identify mode respectively. There also exists a template level security. In case of
Verify mode, the lower security is used between the global verification security level and the
template security level.
Part # 430-4G-060-00-005 98
3.5.12.1.1 TO CHANGE THE GLOBAL SECURITY THRESHOLD
1. Adjust the Verify and Identify sliders to the desired security levels.
2. Click Apply.
3.5.12.2 DEVICE MODE

The Device Mode area contains controls to set the mode of the device and the type of
templates the device uses. The Verify and Identify radio buttons are used to specify the
mode of device (1:1 mode or 1: N mode respectively). The Template Type drop-down list
allows you select the type of templates that can be used depending on the device‘s mode.
To switch the device to Verify mode, select the Verify radio button, select 1:1 templates
from the Template Type drop-down list, and then click Apply.
NOTICE
Changing the template type will erase all existing templates on the
device and will reboot the device.
Finger Required for Templates with security NONE

This option is only available when the Device Mode is set to Verify. This option dictates how
the device should behave when the template security threshold is set to a value of ―None‖
(numerically mapped to 0). In this case, the user always passes the verification (biometrics
are ignored); however, the user must still place a finger on the sensor and have it detected to
proceed. Because some fingers have difficulty being detected by the sensor, an administrator
can opt to turn off the requirement that a finger be placed. If this setting is not selected, the
authorized ID is passed immediately without requiring a finger.
Require biometric for Templates with security Password Only
This option dictates how the device should behave when the template security threshold is
set to a value of ―Password Only‖ (numerically mapped to 5). If this option is selected,
templates with this security level are asked for a biometric comparison. The threshold used
for deciding whether a comparison matches or not is then determined by the Global Security
Threshold. If this setting is not selected, templates with a ―Password Only‖ security threshold
are not required to pass a biometric comparison. On V-Station 4G Lite devices, a password is
required to pass. On other products, a pass is indicated immediately without a biometric
comparison. This setting is disabled in Searching mode.
Part # 430-4G-060-00-005 99
3.5.12.3 TEMPLATE ENCRYPTION

The Activate Template Encryption check box, when selected, encrypts the templates
before storing the templates on device. If template encryption is enabled, all the templates
stored into the device will be encrypted using 128Bit encryption key using AES algorithm.
3.5.12.4 MULTI-USER VERIFICATION

4G Lite devices can be set to a higher security mode by requiring multiple fingers for all
verifications (except to enter Admin mode). The fingers can be either from the same
individual or one finger each from different individuals, as long as different template IDs are
used. This option can be set to use either one finger (the default) or two. The Inter-Finger
Timeout setting specifies the time allowed between separate finger verifications, and may be
any value between 1 and 30 seconds.
3.5.12.4.1 TO SET MULTI-USER VERIFICATION SETTINGS
1. Select a value in the Number of Users drop-down list.

2. Enter a value in the Inter-Finger Timeout field.
3. Click Apply.
3.5.12.5 BIOMETRIC VERIFICATION

The Activate Biometric Verification check box allows biometric verification to be turned on
and off. Select or deselect the check box and click the Apply button. Deselecting the check
box causes the device to bypass the finger-scan authentication (i.e., no finger is required)
and allows for Wiegand pass-thru authentication alone. Turning off biometrics results in a
less secure system and is not recommended. The user assumes all risk associated with
disabling biometrics.
Part # 430-4G-060-00-005 100

3.5.12.6 AUTO-FINGER DETECTION

The Activate Auto-Finger Detection check box shows the current setting of the function
when device is in Identify mode. Select or deselect the option and click the Apply button to
modify the setting on the current device. This section is disabled if the device is in Verify
mode.
3.5.12.7 PASSWORD VERIFICATION

The Activate Password Verification check box, when selected, causes a user to be
prompted to enter a numeric password on the keypad after finger verification, if that particular
template contains a password. This offers an additional level of security. Passwords are
stored within the template and must have value between 1 and 4294967295.
NOTICE
Password Verification is available on 4G V-Station Lite devices
only.
A password of zero entered for a template means the template
has no valid password and the user will not be asked to enter it,
even if this feature is enabled.
The password option is disabled when using Extended Wiegand
with TEM \ MTM \ TMS template type.
3.5.12.8 FINGER PLACEMENT

The Finger Placement Timeout option allows user to control the finger detection timeout
period. For 4G Lite devices, enter any value between 2 to 60 seconds and click Apply.
3.5.13 CLOCK TAB

The controls on this tab allow you to adjust the time, date, and time zone of the selected 4G
Lite device and Secure Control.
Part # 430-4G-060-00-005 101

Figure 3-37 Clock Tab
3.5.13 .1 TO SET THE TIME ON THE DEVICE

1. Ensure that the time and date are correct on the PC.
2. Click Synchronize.
3. Click Apply.
3.5.13 .2 TO SET THE TIME ZONE, CLOCK TYPE AND DISPLAY FORMAT
1. Select the appropriate time zone for your location in the drop-down list. The highlighted
time zone in the world map changes to the zone you selected.
2. Select automatically adjustment of clock for Daylight Saving changes if required.
Part # 430-4G-060-00-005 102

3. Set Clock Type and Display Format settings using the drop-down lists.
4. Click Apply.
NOTICE
Clock Type and Display Format are available for 4G V-Station Lite
products Only.
NOTICE
4G Lite and Secure Control devices have same Clock settings,
therefore same steps are applicable.
3.5.14 BIOMETRIC SCHEDULES TAB

3.5.14.1 BIOMETRIC SCHEDULES
The Biometric Schedules tab allows you to configure scheduling for biometric verification
(i.e., when a finger is required). For example, if a site only requires security at night; the
administrator might want biometric verification enabled only between the hours of 5 p.m. and
5 a.m.
Part # 430-4G-060-00-005 103

Figure 3-38 Biometric Schedules Tab
Schedules can be set on any 15-minute interval and can be configured differently for each
day of the week.
The red bars represent periods when biometrics are not required.
The current day‘s radio button is selected (In the example, ―Wednesday‖ is the current day).
3.5.14.1.1 TO ADD A BIOMETRIC SCHEDULE FOR THE SELECTED DEVICE
1. In the Recurring Weekly Schedule area, click inside one of the bars on the desired day of
the week and drag up or down to define a time interval. Move the time interval by clicking on
it and dragging it to where you want it. Remember that the area in green represents when
biometric verifications are not required.
Part # 430-4G-060-00-005 104

2. If desired, apply the new biometric schedule to all days of the week or just to Monday
through Friday by selecting the appropriate radio button and clicking the Apply Schedule
button.
NOTICE
To finalize a schedule, you must click the Apply button in the
Biometric Schedules dialog box. Resetting a schedule, however, does
not require clicking the Apply button. To reset the entire week's
schedule (remove all Off periods), click the Clear All button.
3.5.14.2 DOOR OPEN SCHEDULE

The Door Open Schedule option allows device to keep the Door Unlocked for a period of
time. When you activate, Door Open Schedule option, device will keep the door unlock as
per defined Biometric Schedule (i.e. when biometrics are not required)
3.5.14.2.1 TO ACTIVATE DOOR OPEN SCHEDULE
1. Select the Activate Door Open Schedule check box

NOTICE
While the Time Override Mode is running on the device and Door
Open Schedule commences, Time Override Mode will be disabled
and Door will be unlocked with Door Open Schedule.
3.5.15 DOOR/DEVICE STATUS TAB

This tab provides controls that allow you to change doors name and displays current status
information of doors and devices which are synchronized with Secure Control.
Part # 430-4G-060-00-005 105

Figure 3-39 Device/Door Status Tab
To change the Door Name:

1. Change Door Name as required.
2. Click Apply button to apply door name.
Part # 430-4G-060-00-005 106

NOTICE
Device/Door Status feature is supported on Secure Control devices

only.
3.5.16 DEVICE SECURITY

The Device Security settings tab allows the Administrator to change the 4G V-Station Lite
Admin Mode login and password.
Figure 3-40 Device Security
There are four modes for 4G V-Station Lite admin login:
Part # 430-4G-060-00-005 107

1. All Users + Password.

2. All Users with Password + Biometric.
3. Admin User with Password Only.
4. Admin User with Password + Biometric.
All Users + Password

In this mode, all users who know the device password are allowed to access the Admin
menu.
All Users with Password + Biometric

In this mode, all users who have a biometric template saved in the device and know the
device password are allowed to access the Admin menu.
Admin User with Password Only

In this mode, all users who know the device password and have been enrolled as ―V-Station
Admin‖ or ―V-Station Enroll‖ are allowed to access the Admin menu.
Admin User with Password + Biometric

In this mode, only the users who have a biometric template saved in the device, know the
device password, and have been enrolled as ―V-Station Admin‖ or ―V-station Enroll‖ are
allowed to access the Admin menu.
NOTICE
The Device Security feature is available for 4G V-Station Lite,

products ONLY.
3.5.17 LCD TAB

The controls on this tab allow you to manage the device logo, wallpaper, slideshow, and
language file of the selected device.
Part # 430-4G-060-00-005 108

Figure 3-41 LCD Tab
3.5.17.1 TO SET THE DEVICE WALLPAPER

1. Click the Upload button. A File Open dialog box is displayed.
2. Navigate to the folder containing the image file (*.jpg, *.jpeg, *.bmp, *.png) you want to
display as wallpaper and select it.
3. Click OK. The file is uploaded and overwrites with current file.
4. A thumbnail of the image is displayed.
Part # 430-4G-060-00-005 109

NOTICE
4G Lite V-Station devices accepts image with maximum 320 x 240

pixels
3.5.17.2 TO CHANGE THE DEVICE LANGUAGE

1. Click the Browse button. A File Open dialog box is displayed.
2. Navigate to the folder containing the language file (*.qm) and select it.
3. Click OK. The file is uploaded and its name is displayed in the Language File box.
4. Click Apply to apply the language file to the selected device.
3.5.17.3 TO ACTIVATE/DEACTIVATE LCD VERIFICATION

1. Select the Activate LCD Verification checkbox to activate verification from LCD.
User will not be able to verify templates from device when LCD Verification is deactivated.
3.5.17.4 TO ACTIVATE/DEACTIVATE KEYPAD ADMINISTRATION

1. Select the Activate Keypad Administration checkbox to activate keypad administration.
User will not be able to login to LCD GUI when Keypad Administration is deactivated.
NOTICE
LCD feature is supported on 4G V-Station Lite products ONLY.
3.5.18 TIME AND ATTENDANCE TAB

This tab contains controls to activate and configure Time and Attendance (T&A) mode.
Part # 430-4G-060-00-005 110

The Time and Attendance (T&A) mode is a mode that requires users to, in addition to
verifying themselves with a finger scan, press a Function Key on the device that
corresponds to a time or attendance action, such as ―sign in‖, ―sign out‖, etc.
Figure 3-42 Time and Attendance Tab
Part # 430-4G-060-00-005 111

NOTICE
Time and Attendance feature is supported on 4G V-Station Lite

products ONLY.
There are four modes for 4G V-Station Lite admin login:

1. Disabled
2. F-Key as Input
3. Fixed
4. Manual
Disabled
In this mode, Time and Attendance feature is disabled.
Figure 3-43 Time and Attendance - Disabled Mode
F-Key as Input
In this mode, Time and Attendance feature can be either mandatory or optional. If Function
Keys is mandatory then has to press any Function Key on the device during authentication
process. The Function Key selected will be displayed on the LCD and captured in the
Transaction Log.
Function Key options screen appears in LCD by pressing left arrow key and can navigate in
option by left & right arrow key.
Part # 430-4G-060-00-005 112
Figure 3-44 Time and Attendance – F-Key as Input Mode
Fixed
Time and Attendance feature is enabled by selecting any one Active Function Key. In this
mode, device will not prompt to press any F-key during authentication process. However, for
any authentication, system will attach enabled Active Function Key with it. Following a
successful verification/identification, only Active Function Key will be displayed on the LCD
and captured in the Transaction Log. With this mode, user doesn‘t have options entering any
other key than Active Function Key even by pressing Right or Left navigation keys.
For example, if administrator need all the authentications to be carried with F1 function key
then:
1. Set Time and Attendance Mode to Fixed
2. Set Active Function Key to F1
Part # 430-4G-060-00-005 113

Manual
Time and Attendance feature is enabled by selecting any one Active Function Key which
would be a default F-Key for any authentication. This selection is displayed at the top of the
LCD idle screen. Afterwards, the Function Key can be changed on the device via the
navigation arrow keys. Following a successful authentication, the selected Function Key will
be displayed on the LCD and captured in the Transaction Log.
For example, if administrator needs all the authentications to be done with F1 F-Key by
default, but user should be given options if they would prefer to use any other F-Key then.
1. Set Time and Attendance Mode to Manual
2. Set Active Function Key to F1
Part # 430-4G-060-00-005 114

3.5.18.1 TO CONFIGURE T&A MODE

1. Select the Time and Attendance Mode.
2. Select the Mandatory Use of Function Keys check box for F-Key as Input mode
OR
2. Select the Active Function Key for Fixed/Manual mode
3. Enter appropriate Display Text for the function keys into the fields.
4. Enter the number of seconds you want the messages to be displayed in the Message
Timer field.
5. Click the Apply button.
NOTICE
Time and Attendance authentication processes are illustrated in

Appendix
Part # 430-4G-060-00-005 115

Enrolling Users
CHAPTER 4 - ENROLLING USERS

CHAPTER OVERVIEW
This chapter details how to enroll new users using the Quick Enrollment, Advanced
Enrollment and Card Enrollment functions.
4.1 ENROLLING USERS

When first opened, the Enrollment Tab displays Quick Enrollment, Advanced Enrollment
and Card Enrollment options. New users are entered into the system through the process of
―enrollment‖. During this procedure, the user‘s finger is scanned and a finger scan template is
generated. A quality enrollment ensures peak performance from the 4G Lite devices. The
Quick Enrollment, Advanced Enrollment and Card Enrollment buttons are used to start
the enrollment process.
Quick Enrollment and Advanced Enrollment features are used for enrollment on
Fingerprint devices, i.e. Devices equipped with fingerprint sensors. The Card Enrollment
feature is used for enrollment of card only records on devices equipped with Prox card and
Smart Card readers.
The Quick Enrollment method is useful when you need to add a new user quickly without
having to go through multiple enrollments.
The Advanced Enrollment is the recommended method for enrolling templates. It allows
multiple fingers to be scanned and the corresponding template to be created. Users can scan
different fingers or multiple enrollments of the same finger. Each time an enrollment is done,
the ―best‖ template is identified among the current three scans. Users then have the choice of
accepting best template or the enrollment of their choice.
Part # 430-4G-060-00-005 116

Enrolling Users
Figure 4-1 Enrollment Tab
4.2 QUICK ENROLLMENT

4.2.1 TO PERFORM A QUICK ENROLLMENT
1. Click Quick Enrollment. The Quick Enrollment dialog box is displayed.
3. In the Finger Data area, select the appropriate finger to be used for enrollment.
Part # 430-4G-060-00-005 117

Enrolling Users
Figure 4-2 Quick Enrollment Dialog Box
4. Click Enroll.
5. Place and remove the enrollee‘s finger on the sensor as directed by the prompts. The scan
results are displayed in the Finger Image and Enrollment Feedback areas. Note that if the
FPF was enabled during the installation process, only red and green cross hairs would be
displayed in the Finger Image area, instead of the actual fingerprint data. See Chapter 13 for
more information on the FPF feature.
Figure 4-3 FPF cross hairs
6. If the enrollment is not recommended because of poor quality, you can either choose to
accept it, reject the enrollment, or retry the finger scan process. If the enrollment is
recommended, click Next to move to the next step.
Part # 430-4G-060-00-005 118

Enrolling Users
Figure 4-4 Quick Enrollment Dialog Box - Scan Results
7. Enter the enrollee‘s User ID, First Name, Middle Name, and Last Name into the
appropriate fields in the User area (Figure 3-4). Alternatively, Admin may select already
created User by typing in the First Name & selecting required user. Upon User selection,
SecureAdmin Lite will populate information in User Access Data if user is already enrolled.
8. Select the User Group, Company, Site, and Department the enrollee belongs to from the
drop-down lists.
9. Click Save.
10. Enter a Template Index and Employee ID into the appropriate fields in the User Access
Data area.
Part # 430-4G-060-00-005 119

Enrolling Users
Figure 4-5 Quick Enrollment Dialog Box - User Information
NOTICE
4G V-Flex Lite (S, NW), 4G V-Flex Lite (S, P, NW), 4G CR-Pass (P, NW),
4G V-Flex Lite (S, O, NW), 4G CR-Pass (O, NW), 4G V-Station Lite (S,
NW), 4G V-Station Lite (S, P, NW) and 4G V-Station Lite (S, O, NW)
Finger option will not be applicable for these products.
11. Select appropriate User Type and Access Schedule.

12. If the enrollee is going to observe holidays, select the Observe Holidays check box.
13. If using a password, enter it into the Password field.
Part # 430-4G-060-00-005 120

Enrolling Users
14. Select appropriate Prox User Mode, Smart Card User Mode and Expiry Date as per
individual user‘s settings.
15. Enter Door ID and Door Timeout value in appropriate field as per individual user‘s
settings.
16. In the Fingerprint Data area of the Biometrics tab, the finger selection made in the
previous step is shown and cannot be edited. There is an additional Card tab in the dialog. If
required, provide the Card # and Card Type values in this tab.
Figure 4-6 Quick Enrollment – Card Tab
17. If the finger is to be designated a ―duress finger‖, select the Activate Duress Finger
Mode check box.
18. Select the desired 1:1 Security and 1:N Security levels from the drop-down lists.
20. Select whether to Save to Device(s) or Save to Smart Card by selecting the appropriate
check box. Save to Smart Card checkbox is selected by default but can be edited by un-
checking the box.
Note: Templates will be saved by default to the database. To disable this feature, proceed to
Tools → Options, Save to Database and un-check the option. The Save to Smart Card
check box will be available for selection only for smart card based products.
21. Select the device or devices in the network tree.
Part # 430-4G-060-00-005 121

Enrolling Users
Figure 4-7 Quick Enrollment - Select Destination
22. Click Save and the following save options will be available:
 Save & Finish Enrollment to save the template to the selected device(s) and return
to Enrollment Main Screen
 Save & Enroll Another Finger to save the template to the selected device(s) and to
initiate another enrollment for the same user on the same device (User information will
be automatically populated)
 Save & Enroll Another User to save the template to the selected device(s) and
initiate another enrollment for a new user on the same device (Some enrolment
settings will be automatically populated)
For all options above, a Save Template Result dialog box is displayed. The dialog box
states whether the template was stored or saved to the devices successfully.
Figure 4-8 Save Template Result Dialog Box
20. Click OK to finish.

Note: If you cancel a template transfer to a device, it is executed after a short delay.
Part # 430-4G-060-00-005 122

Enrolling Users
4.3 ADVANCED ENROLLMENT

4.3.1 TO PERFORM A ADVANCED ENROLLMENT
1. Click Advanced Enrollment. The Advanced Enrollment dialog box is displayed.
3. In the Finger Data area, click the appropriate to be used for enrollment.
Figure 4-9 Advanced Enrollment Dialog Box
4. Click the Enrollment 1 button.

5. Place and remove the enrollee‘s finger on the sensor as directed by the prompts. The first
scan‘s results are displayed in the Enrollment 1 feedback areas. Note that if the FPF was
enabled during the installation process, only red and green cross- hairs would be displayed in
the Finger Image area, instead of the actual fingerprint data.
Part # 430-4G-060-00-005 123

Enrolling Users
6. Repeat Steps 4 and 5 twice more for Enrollments 2 and 3.

Figure 4-10 Advanced Enrollment Dialog Box - Scan Results
7. To let SecureAdmin Lite decide which enrollment scan provides the highest quality, click
the Recommended Selection button. To make this choice manually, click the Manual
Selection button. Accept buttons are displayed on the Advanced Enrollment dialog box;
click the Accept button next to the enrollment you want to use. The Advanced Enrollment
dialog box displays the next screen.
Part # 430-4G-060-00-005 124

Enrolling Users
Figure 4-11 Advanced Enrollment Dialog Box - Manual Selection
8. If all three enrollments are of poor quality and you select ―Recommended Selection‖ option,
SecureAdmin Lite will display a warning message and recommend starting new enrollment.
Part # 430-4G-060-00-005 125

Enrolling Users
Figure 4-12 Advanced Enrollment Dialog Box - All poor enrollments
appropriate fields in the User area. Alternatively, Admin may select already created User by
typing in the First Name & selecting required user. Upon User selection, SecureAdmin Lite
will populate information in User Access Data if user is already enrolled.
10. Select the User Group, Company, Site, and Department the enrollee belongs to from
the drop-down lists.
11. Click Save.
12. Enter a Template Index and Employee ID into the appropriate fields in the User Access
Data area.
Part # 430-4G-060-00-005 126

Enrolling Users
Figure 4-13 Advanced Enrollment Dialog Box - User Information
NOTICE
4G V-Flex Lite (S,NW), 4G V-Flex Lite (S,P,NW), 4G CR-Pass (P, NW),
4G V-Flex Lite (S,O,NW), 4G CR-Pass (O,NW) ), 4G V-Station Lite (S,
NW), 4G V-Station Lite (S, P, NW) and 4G V-Station Lite (S, O, NW)
13. Select appropriate User Type and Access Schedule.

15. If using a password, enter it into the Password field.
Part # 430-4G-060-00-005 127

Enrolling Users
16. Select appropriate Prox User Mode, Smart Card User Mode and Expiry Date as per
individual user‘s settings.
settings.
18. In the Finger Data area of the Biometrics tab, the finger selection made in the previous
step is shown and cannot be edited. There is an additional Card tab in the dialog. If required,
provide the Card # and Card Type values in this tab.
Figure 4-14 Advance Enrollment – Card Tab
19. If the finger is to be designated a ―duress finger‖, select the Activate Duress Finger
Mode check box in the Biometrics tab.
20. Select the desired 1:1 Security and 1:N Security levels from the drop-down lists.
22. Select whether to The Save to Device(s) or Save to Smart Card by selecting the
appropriate check box. The Save to Device(s) checkbox is selected by default but can be
edited by un-checking the box.
Note: Templates will be saved by default to the database. To disable this feature, proceed to
Tools → Options, Save to Database and un-check the option. The Save to Smart Card
check box will be available for selection only for smart card based products
Note: The Database check box is selected by default -- all templates are saved to the
database. No status dialog box is displayed after a template is saved in the database. A
status dialog box is displayed if the enrolled template is saved to the device.
Part # 430-4G-060-00-005 128

Enrolling Users
Figure 4-15 Advanced Enrollment - Select Destination
 Save & Finish Enrollment to save the template to the selected device(s) and return
to Enrollment Main Screen
 Save & Enroll Another Finger to save the template to the selected device(s) and to
initiate another enrollment for the same user on the same device (User information will
be automatically populated)
 Save & Enroll Another User to save the template to the selected device(s) and
initiate another enrollment for a new user on the same device (Some enrolment
states whether the template was stored or saved to the device(s) successfully.
Figure 4-16 Save Template Result Dialog Box
Part # 430-4G-060-00-005 129

Enrolling Users
4.4 CARD ENROLLMENT

4.4.1 TO PERFORM A CARD ENROLLMENT
1. Click Card Enrollment. The Card Enrollment dialog box is displayed.
Figure 4-17 Card Enrollment Dialog Box
appropriate fields in the User area. Alternatively, Admin may select already created User by
typing in the First Name & selecting required user. Upon User selection, SecureAdmin Lite
will populate information in Card area if user is already enrolled.
4. Select the User Group, Company, Site and Department the enrollee belongs to from the
drop-down lists.
5. Click Save.
6. Click the Read Card Serial # check box to read value in Card # field in the Card area.
7. Select appropriate Card Type, Prox User Mode, Smart Card User Mode and Expiry
Date as per individual user‘s settings.
Part # 430-4G-060-00-005 130

Enrolling Users
settings.
9. Select appropriate Access Schedule.
Figure 4-18 Card Enrollment - Select Destination
12. The Save to Device(s) checkbox is selected by default but can be edited by un-checking
the box. Note: Card enrollments will be saved by default to the database. To disable this
feature, proceed to Tools → Options, Save to Database and un-check the option.
 Save & Finish Enrollment to save the card enrollment to the selected device(s) and
return to Enrollment Main Screen
 Save & Enroll Another Card to save the card enrollment to the selected device(s)
and to initiate another enrollment of a new user on the same device (Some enrolment
Part # 430-4G-060-00-005 131

Enrolling Users
states whether the card enrollment was stored or saved to the device(s) successfully.
Note: The Database check box is selected by default -- all templates and card enrollments
are saved to the database. No status dialog box is displayed after a template is saved in the
database. A status dialog box is displayed if the enrolled template or card is saved to the
device.
Figure 4-19 Save Card Enrollment to Device Dialog Box

Note: If you cancel a transfer to a device, it is executed after a short delay.
Part # 430-4G-060-00-005 132

Managing Smart Cards
CHAPTER 5 - MANAGING SMART CARDS

CHAPTER OVERVIEW
The 4G Lite devices can work with iCLASS, MiFARE, MiFARE Plus and DESFire smart
cards. This chapter presents procedures for managing the smart cards used at your facility
and the smart card related settings of the devices in your network. It also explains how to
create and reset site key files and presents useful advice on forgotten and compromised site
keys.
The Smart Card sidebar tab contains controls that allow for management of smart card
settings. The two specific dialog boxes used for smart card configuration are the Smart Card
Device Manager and the Smart Card Manager. Two supporting dialog boxes are Create
Site Key and Create MiFare Plus Key.
The Smart Card Device Manager allows you to configure smart card security settings and
smart card layout. The Smart Card Manager allows you to modify data on the cards and to
secure or reset cards.
The Create Site Key allows you to create the site key file required for various smart card
operations. The Create MiFare Plus Key allows you to create a key file to work with MiFare
Plus cards.
Part # 430-4G-060-00-005 133

Figure 5-1 Smart Card Sidebar Tab Dialog Box
The Smart Card Device Manager configures a device so that it knows which areas of the
smart card to read from and write to. This is done by configuring the card layout.
The Smart Card Manager sets up the smart card so that it works with the settings that were
configured in the Card Device Manager.
Part # 430-4G-060-00-005 134

5.1 SMART CARD DEVICE MANAGER

Click the Card Device Manager link in the Smart Card sidebar tab to launch the Smart Card
Device Manager.
Figure 5-2 Smart Card Device Manager
Select the device for which you want to configure the smart card settings in the Current
Device drop-down list. Information about the selected device is displayed.
Part # 430-4G-060-00-005 135

Reader Type
This area displays the type of reader: iCLASS, MiFARE, MiFare Plus and DESFire.
Write Status
This area displays the read and writes privileges of the selected device.
Max Templates per Card
At the top of the Smart Card Manager dialog box, the Max Templates per Card drop-down
list allows you to specify how many templates can be stored on a card.
Currently, this can be set to either one or two templates, although future cards with more
memory might support additional templates. If the maximum is set to two templates, the
smart card layout must have two templates defined (this applies only to MiFARE-compatible
cards).
Otherwise, when attempting to save a second template to the card, an Invalid Smart Card
Layout error message is displayed. If the maximum is set to only one template, attempting to
save a second template to a card results in an ESI - Storage Space is FULL error message.
NOTICE
The verification process differs between Template (TEM) mode and
User Record (VUR) mode when a smart card is presented that
contains both a primary and a secondary template.
In TEM mode, a smart card verification is performed at the primary
template's security level, then at the secondary template's security
level.
In VUR mode, a smart card verification is performed at the lesser of
the two template's security levels.
Rx Template Timeout
This setting controls for how long the device will wait in milliseconds (ms) to receive smart
card data before timing out. The minimum value is 500 ms and the maximum value is 5000
ms.
Auto-Update Site Keys
This check box enables or disables automatic site key updating of smart cards. If a site key is
compromised, or if your installation‘s security requirements demand the site key to be
changed regularly, an administrator can designate a new site key to which all smart cards will
be updated. The 4G Lite device has two site keys: a primary and a secondary site key.
Part # 430-4G-060-00-005 136

 The primary site key matches all smart cards that are allowed to use the device.
 The secondary site key is only assigned when the primary site key needs to be
updated.
 If the primary site key needs to be changed, the administrator creates a new site
key.
 The next time a card is presented, the device performs the extra step of updating
the smart card with the new site key.
 In time, an entire population of smart cards is migrated to the new site key.
 By unselecting the Auto-Update Site Keys check box, smart cards with the old
site key are rejected.
Use Wiegand String

This setting controls whether the device attempts to read a Wiegand string from the smart
card during verification and if successful, whether it sends the Wiegand string through the
Wiegand Out lines. If this check box is selected, SecureAdmin Lite attempts to save the
Wiegand string onto the smart card when enrolling.
Saving a Wiegand string onto a smart card requires a Wiegand string to be read from an
external Wiegand input device (select the From Wiegand String check box during a Quick
or Advanced Enroll). Once the Wiegand string has been read, the Use Wiegand String
check box will become selected.
Overwrite Card Wiegand String

This setting controls whether the device should attempt to overwrite the Wiegand string read
from the Smart Card with the Verification Pass \ Fail User Fields defined in the Custom
Wiegand format. If this check box is selected, Device will overwrite the Wiegand string on
card with the user fields defined in custom Wiegand format of verification pass \ fail or duress
event.
NOTICE
Overwrite Card Wiegand String option is available only when Use

Wiegand String option is enabled on the device.
Overwrite Card Wiegand String option will work only when used with Custom Wiegand format
as Wiegand Output format for any of Verification Pass \ Fail or Duress Event.
Part # 430-4G-060-00-005 137

Read Only Mode

This setting allows the device to be put into read-only mode, where it will not be allowed to
write any data to a smart card. This mode should not be used under normal circumstances
because it does not allow the 4G Lite device to function normally with respect to enrollment,
key management, etc. It is intended only for use with a pre-enrolled population of users who
are only accessing the 4G Lite device for verification. Although the likelihood of corruption is
extremely low, this mode ensures that smart cards will not be corrupted by presenting the
card at the edge of the device‘s detection field.
NOTICE
When Read Only Mode is enabled, it has a side effect of setting the
secondary site key to a value of -1. You must re-enter the secondary
site key when setting the device back to read/write mode if you want
to use the auto-update feature.
5.1.1 SMART CARD SECURITY SETTINGS

Clicking the Security Settings button opens the Smart Card Security Settings dialog box.
Figure 5-3 Smart Card Security Settings Dialog Box
Part # 430-4G-060-00-005 138

The Smart Card Security Settings dialog box contains controls that adjust how often the
site key verification is performed. The default is Enter Everytime (SecureAdmin Lite resets to
this default setting every time the application is started).
Use ESI Site Key Encryption
The Use ESI Site Key Encryption check box is used in conjunction with the drop-down list
directly below it (not shown in the example) to manage site keys on the smart card itself (for
MiFare Card only). Two settings are available. The default setting uses site key encryption.
The other options do not use site key encryption, and are provided for compatibility with other
applications that want to read and/or write data to the smart card. The check box must be
unselected to enable these options. For MiFare card, Key A and Key B do not correspond to
primary and secondary site keys; please read the manufacturer‘s documentation for more
information. For iCLASS card, (such as is shown in the example), this option can only be
enabled or disabled.
5.1.1.1 CHANGING THE SITE KEY

To change the site key on a device:
1. Ensure that the Auto Update Site Keys check box is selected in the Smart Card Device
Manager Dialog box.
2. Select the Site Key radio button in the Smart Card Security Settings dialog box.
3. Click the Change Site Key button. A Change Site Key dialog box is displayed.
Figure 5-4 Change Site Key Dialog Box
4. Click the button to the right of the Site Key File field. An Open dialog box is displayed.
5. Navigate to and select the site key file (*.bin).
6. Click Open.
7. Click OK. A Warning message is displayed.
Part # 430-4G-060-00-005 139

Figure 5-5 Change Site Key Warning
8. Read the information carefully and Click Yes if you accept. The site key is changed and a
confirmation is displayed.
9. Click OK.
Consider this scenario: During an installation, the site key was set to ―####‖ and the
secondary site key was set to ―-1‖, because there were no previous site keys to update. The
site key on the smart cards would be ―####‖.
Now if the primary site key on a device is changed to ―++++‖ and the secondary site key is
also changed to the old primary value ―####‖ (ensure that the Auto-Update checkbox is
selected):
All previously created smart cards still contain the previous key of ―####‖. When a smart card
is presented to a 4G Lite device, it follows these steps:
 The smart card is presented.
 The device reads the data from the card and checks the current key.
 The key on the card is ―####‖ and the device‘s primary key is now ―++++‖, so
the card fails.
 The device checks the secondary site key for a match with the smart card. If
they match, the key on the smart card is changed (updated) to the device‘s
primary site key, ―++++‖ in this example.
 If neither the primary nor the secondary site key matches, the card fails.
Part # 430-4G-060-00-005 140

When the entire user base of cards has been updated, perform the process of changing the
site key again.
 This time keep the primary site key the same ―++++‖, but enter a -1 for the
secondary site key.
 This disables the Auto-Update feature and any remaining smart cards with
―####‖ on them will no longer works.
 This can also be done by unselecting the Auto-Update Site Keys check box.
5.1.1.2 RESETTING A SITE KEY

1. Select the Site Key radio button in the Smart Card Security Settings dialog box.
Figure 5-6 Reset Site Key Dialog Box
2. Click the Reset Site Key button. A Warning message is displayed.

3. Read the information carefully and Click Yes if you accept. The site key is reset to default
value and a confirmation is displayed.
5.1.1.3 CHANGING MIFARE PLUS KEY

1. Select the MiFare Plus Key radio button in the Smart Card Security Settings dialog box.
2. Click the Change MiFare Plus Key button.
Part # 430-4G-060-00-005 141

Figure 5-7 Change MiFare Plus Key Dialog Box
3. Click the button to the right of the MiFare Plus Key File field. An Open dialog box is
displayed.
4. Navigate to and select the MiFare Plus Key file (*.bin).
5. Click Open.
6. Click OK. A Warning message is displayed.
7. Read the information carefully and Click Yes if you accept. The MiFare Plus Key is
changed and a confirmation is displayed.
5.1.1.4 RESETTING A MIFARE PLUS KEY

1. Select the MiFare Plus Key radio button in the Smart Card Security Settings dialog box.
2. Click the Reset MiFare Plus Key button. A Warning message is displayed.
Figure 5-8 Reset MiFare Plus Key Dialog Box
3. Read the information carefully and Click Yes if you accept. The MiFare Plus Key is reset to
default value and a confirmation is displayed.
For instructions of how to create a site key, refer to section 5.4.
Part # 430-4G-060-00-005 142

5.1.2 CONFIGURE CARD LAYOUT

CAUTION
L-1 Identity Solutions recommends that only advanced users attempt
to configure the smart card layout. Improper changes made to the
layout may render the reader unusable with some smart cards.
This section should be read completely before attempting to change the default layout
provided by L-1 Identity Solutions (as shown in the left-most panel).
5.1.2.1 ICLASS CARDS

To configure an iCLASS smart card layout
Select the type of smart card in the Card Type drop-down list. The drop-down list contains
these items:
 16K iCLASS
 32K masked as 16K iCLASS
 32K iCLASS.
1. Click the Configure Card Layout button. The Layout Manager dialog for that type of card
is displayed. See examples below.
Figure 5-9 16K iCLASS Smart Card Layout Manager
Part # 430-4G-060-00-005 143

For the 32K iCLASS Smart Card, note the addition of an iCLASS Active Book drop-down list
at the top of the dialog box. This drop-down list allows you to select which of the two books
available on 32K cards you want to change the layout of.
Figure 5-10 32K iCLASS Smart Card Layout Manager
1. Select Book 0 or Book 1 from the iCLASS Active Book drop-down list.
2. Click the Card Discovery button. A confirmation message box is displayed.
3. Click Yes.
4. Place the smart card against the device, hold, and remove as directed by the onscreen
prompts. Depending on the type of smart card, the controls in either the HID iCLASS 2
Application Area or the HID iCLASS 16 Application Area become available.
5. Select a value in the L-1 EAD Data Starting Offset drop-down list if it is available (2-
application cards only).
6. Click Reset. A confirmation message is displayed.
7. Click Yes. A status message is displayed.
8. Click OK.
9. Click Set Layout.
5.1.2.2 MiFARE CARDS

Before attempting to configure a MiFARE card layout, it is strongly recommended that the
user read the detailed information provided in section 5.1.2.2.1.
1. Select the type of smart card in the Card Type drop-down list:
Part # 430-4G-060-00-005 144

 1 kilobyte MiFARE
 4 kilobyte MiFARE
2. Click the Configure Card Layout button. The Layout Manager for the card type is
displayed. See examples below.
Figure 5-11 1 kilobyte MiFARE Smart Card Layout Manager
For the 4 kilobyte MiFARE smart card, note the addition of an Active Kilobyte Selection
drop-down list at the top of the dialog box. This drop-down list allows you to select which of
the four kilobytes available you want to use for template storage (the default setting is the first
kilobyte). The layout for each kilobyte is configurable.
Part # 430-4G-060-00-005 145

Figure 5-12 4 kilobyte MiFARE Smart Card Layout Manager
3. If you are using a 4 kilobyte card, select which kilobyte is to be active with the Active
Kilobyte Selection drop-down list.
The smart card layout used by the 4G Lite devices consists of these components: A Layout
block (brown), an Admin block (red), a Primary template (blue), a Secondary template
(purple, optional), and User Data (green, optional). The Smart Card Layout Manager does
not allow a user to configure a layout that is missing the Admin block, the Layout block, or a
Primary template. These are the minimum layout components required to enable normal
operation.
4. Click the blue Template 1 button.
5. Click on the block in the New Layout pane where you want the Template 1 data to start.
6. Click the purple Template 2 button (Note: Secondary template fields are purple when
template mode of the device is VUR and blue when template mode of the device is TEM).
7. Click on the block in the New Layout pane where you want the Template 2 data to start.
8. Click the green User Data button.
9. Click the block in the New Layout pane where you want to User data to be stored.
10. Click the brown Layout block button.
11. Click the block in the New Layout pane where you want to Layout data to be stored.
Part # 430-4G-060-00-005 146

12. Click the Set Layout button.
5.1.2.2.1 MIFARE BLOCK MEMORY STRUCTURE

The memory structure for MiFARE-compatible smart cards differs between the 1 Kilobyte and
4 Kilobyte card types. The similarities and differences are outlined below.
For the 1 Kilobyte MiFARE card, the memory structure consists of 16 sectors (numbered 0
through 15) of four blocks each (numbered 0 through 3). Each block contains 16 bytes. The
first block, at Sector 0, Block 0, contains manufacturer information and is not available. The
last block of each sector contains site key and access information, which secures that sector
and makes it unavailable for application data. Unavailable blocks are shown in SecureAdmin
Lite in black. Layout components cannot be placed on unavailable blocks. This leaves 47
available blocks of 16 bytes each, for a total of 752 available bytes. The default L-1 Identity
Solutions layout contains space for two templates and Wiegand information (stored in the
green User Block) and uses all available space. If space for non-L-1 Identity Solutions data is
desired, include only the Primary template (Template (1) or do not include a User Block.
For the 4 Kilobyte MiFARE card, the memory structure also differs between the 1st/2nd
kilobyte versus the 3rd/4th kilobyte. The 1st and 2nd kilobyte of the 4 Kilobyte MiFARE card
follows the memory structure of the 1 Kilobyte card as described above, however, the
memory structure of the 3rd and 4th kilobyte is different and consists of 4 sectors (numbered
0 through 3) of 16 blocks each (numbered 0 through 15). Each block contains 16 bytes. The
first block at Sector 0, Block 0 of the 1st kilobyte contains manufacturer information and is not
available. In addition, the last block of each sector for every kilobyte of the 4 Kilobyte MiFARE
card contains Site key and access information, which secures that sector and is thus
unavailable for application data. Unavailable blocks are shown in SecureAdmin Lite in black
and grey, they do not allow layout components to be placed there. This leaves 47 available
blocks of 16 bytes each, for a total of 752 available bytes per kilobyte of the 4 Kilobyte
MiFARE card. The default L-1 Identity Solutions layout for each kilobyte (1st, 2nd, 3rd, or 4th)
contains space for two templates and Wiegand information (stored in the green User Block)
and will use all available space. Please note that templates can only be written to a single
active kilobyte of the 4 Kilobyte MiFARE card (i.e., templates can only be stored contiguously
in either the 1st, 2nd, 3rd or 4th kilobyte). If space for non-L-1 Identity Solutions data is
desired, include only the Primary template (Template 1) or do not include a User Block.
5.1.2.2.2 MIFARE NEW LAYOUT

Place components on the layout on the right (under the New Layout section) by clicking one
of the buttons under the Set Starting Block section. Flashing text instructs you to select one
of the white, unused blocks above. Since the 1:1 verification templates used by the 4G Lite
device are 348 bytes, they require 22 blocks of space (348 bytes / 16 bytes-per-block = 22
blocks). All other layout components require a single block of space. When placing a
template on the layout, note that the blocks wrap around whatever blocks are in the way,
consuming blocks from top to bottom. Templates do not wrap around from bottom to top, and
if there is insufficient space for a template, a warning is displayed and you will not be able to
Part # 430-4G-060-00-005 147

place the template. If you want to move a layout component or take if off of the layout, you
must remove it by first clicking the Remove Item button and then selecting the item that is to
be removed.
5.1.2.2.3 MOVING THE ADMIN BLOCK

Note that when the Smart Card Layout Manager is opened, the Admin Block has already
been placed for you in Sector 7, Block 1. It can be removed and placed elsewhere, but L-1
Identity Solutions recommends leaving the Admin block in this sector. The reason for this is
that the reader will be able to read cards with a different layout than the one that is defined
here, provided that the Admin Block is in this location. This allows for flexibility with different
card layouts. L-1 Identity Solutions recommends that each site or facility use the same layout
for each card. L-1 Identity Solutions also recommends first placing the Layout Block, and then
the Primary template, and finally a User Data block to hold the Wiegand strings associated
with each template.
NOTICE
If you do not place at least one User Data block, SecureAdmin Lite
cannot read or write Wiegand string data, and you will receive an
error during enrollment.
Only two User Data blocks can be placed on the layout. If two are
placed, the first is used for Wiegand data (if used) and the second is
available for user data. These two blocks can be written to or read
using the L-1 Identity Solutions SecureSDK, but not using
SecureAdmin Lite. When all other blocks have been placed and if
there is sufficient space, place the Secondary template. You will not
be able to place Template (2) if you have placed two User blocks
because there will be insufficient space. There is a convenient way
to make the layout wrap around sectors where non-L-1 Identity
Solutions data is located (or is planned to go). Click the Unavailable
Block button, then hold down the SHIFT key to place multiple blocks.
Do this before placing the other layout items so that when they are
placed, they wrap around those blocks automatically.
Click Set Layout to finalize the layout. You will need to provide the
current Site Key. After setting the layout successfully, the Smart
Card Layout Manager closes, returning you to the Smart Card
Manager.
If at any time you want to reset the layout back to L-1 Identity
Solutions defaults, click the Reset Layout button and provide the
current site key.
5.1.2.2.4 SAVING MIFARE LAYOUTS TO THE PC

SecureAdmin Lite has the ability to load and save MiFARE-based smart card layouts to and
from the PC. Files are saved by default with a ―.sl1‖ extension. This can be used to backup
Part # 430-4G-060-00-005 148

the 4G Lite devices card layout should a non-default layout be used and it can also facilitate
programming multiple 4G Lite devices.
5.1.2.2.5 PRECAUTIONS ON CHANGING MIFARE SMART CARD LAYOUTS

When changing the smart card layout, be aware that the number of templates defined on the
layout should be greater than or equal to the Max Templates per Card option. In other
words, you should not define only one template and set the maximum templates per card to
two. This will result in an ―ESI Storage Full‖ error upon enrollment of a second template.
If the layout is changed, smart cards that were created with a different layout might not work
properly with the 4G Lite devices. If this occurs, you will see a flashing or steady red LED on
the device when trying to verify, or you will receive an error in SecureAdmin Lite.
Although you can write both L-1 Identity Solutions data and non-L-1 Identity Solutions data to
a smart card, each sector has its own site key, which unlocks data in that sector. Data may
only be read from or written to a particular block if the proper site key for that sector is
provided. The ESI will use the same Site Key for all sectors being used by the 4G Lite
devices, including sectors where only one or two blocks are actually being used. It is
recommended that any non-L-1 Identity Solutions data be placed on different sectors so that
different keys may be used for that data.
If a third-party application is used to read or write any of the 4G Lite device data or the same
site key is to be used for the entire card, the ESI Site Key Encryption must use one of the
unhashed modes for compatibility. Please refer to the documentation from the smart card
manufacturer for more information.
5.1.2.2.6 MIFARE SERIAL NUMBER

The serial number that is stored on the card is 32 bits in length, therefore, to use this as an
ID, it is recommended that a Wiegand format be chosen that allows 32 bits of ID data. This
can be selected under the Wiegand tab in the Device Settings dialog box. The uploadable
Generic 34-bit format is a format that contains 32 ID bits. This format contains an odd parity
bit and an even parity bit, both of which are calculated in the same manner as the standard
26 bit format. Alternatively, a custom Wiegand format can be created by selecting the Pass-
thru radio button and selecting Custom from the drop-down list.
These numbers can be used for custom formats:
 Total bits: 32
 ID Start bit: 0
 No. of ID bits: 32.
When the user is at the enrollment window under Fingerprint Quick or Fingerprint
Advanced, the Extended ID field is greyed out.
Part # 430-4G-060-00-005 149

Selecting a Wiegand format that contains less than 32 ID bits, such as the Standard 26-bit
format, results in a truncated Wiegand ID. If the Standard 26-bit format is selected, upon
clicking the Smart Card SN button, a warning message is displayed that suggests selecting a
Wiegand format that contains 32 ID bits. In this case, when the template is saved to the smart
card, it remains as a 32-bit number. However, when it is sent out as a Wiegand string, it is
truncated to the least significant 16 bits, because the 26-bit format only allocates 16 bits to ID
data.
5.1.2.3 DESFIRE CARDS

To configure a DESFire smart card layout:
1. Select DESFire in the in the Card Type drop-down list.
2. Click the Configure Card Layout button. The DESFire Card Layout dialog box is
displayed.
Figure 5-13 DESFire Card Layout Dialog Box
3. Enter a value in the Application ID drop-down list.

4. Select a value in the File ID drop-down list.
5. Enter a value in the 4K/8K Card File Size field.
6. Enter a value in the 2K Card File Size field.
7. Click OK.
Part # 430-4G-060-00-005 150

5.2 SMART CARD MANAGER

Click the Card Manager link in the Smart Card sidebar tab to launch the Smart Card
Manager.
The Smart Card Manager sets up the smart card so that it works with the settings that were
configured in the Smart Card Device Manager.
Figure 5-14 Smart Card Manager
Select the device for which you want to modify data on the smart card in the Current Device
drop-down list. Information about the selected device is displayed.
 This dialog box initially shows the smart card settings and a blank card.
 Clicking the Read Smart Card button commands the 4G Lite device to read
the template list from the card and to display a list of the stored templates.
 A padlock symbol is displayed in the upper right-hand corner of the card if

it is secured.
Part # 430-4G-060-00-005 151

 SecureAdmin Lite indicates which type of smart card was read (MiFARE or
iCLASS, 2- or 16- application area).
 The card‘s serial number is provided for reference.
 Clicking either template button (Primary or Secondary) commands the 4G

Lite device to read the full finger-scan data from the smart card.
 SecureAdmin Lite prompts the user for the site key (depending on security
settings), and if the site key entered matches the site key stored on both the
4G Lite device and the smart card, the template is read and the Template
Editor dialog box is displayed.
NOTICE
It is not possible to edit a template on a smart card.
5.2.1 DELETING TEMPLATES

To delete a template on the smart card, select the check box in the Template column next to
the primary template or secondary template and click the Delete button. The 4G Lite device
erases the selected template stored on the smart card. SecureAdmin Lite performs a site key
verification before allowing the erase to take place.
5.2.2 DELETING WIEGAND STRINGS

To delete a Wiegand string on the smart card, select the check box in the Wiegand column
next to the primary template or secondary template and click the Delete button. The 4G Lite
device erases the selected Wiegand string stored on the smart card. SecureAdmin Lite
performs a site key verification before allowing the erase to take place.
It is possible to use this function even if a Wiegand string has not been associated with a
template, as long as a User Data block has been placed in the smart card layout.
5.2.3 SECURING CARDS

SecureAdmin Lite can secure and unsecure (reset) smart cards. The Secure Smart Card
button secures a new smart card that has not been updated with the proper site key (i.e., it
still has the manufacturer‘s default keys). You do not need to enter the current site key to
Part # 430-4G-060-00-005 152

perform this function. Simply click the Secure Smart Card button and present the card to the
device.
NOTICE
Only the sectors of the smart card being used by the 4G Lite device
are secured; all other sectors remain untouched. Performing this
function on a smart card that has already been secured has no effect.
5.2.4 RESETTING CARDS

The Reset Smart Card button allows the user to unsecure (reset) a smart card after
providing the proper site key. This erases all data on the card, including templates, Wiegand
strings, and other user data, as defined in the smart card layout, and sets the site key back to
the manufacturer‘s default. This essentially transforms the card back into a fresh, unused
card, with the exception of the sectors not defined in the layout (sectors used by another
application, for example). Currently, three manufacturer settings are supported for MiFARE-
compatible cards: Gem+ Flow A, Gem+ Flow B, and HID Flow B. Please refer to the
documentation provided by the smart card manufacturer for more information.
Part # 430-4G-060-00-005 153

5.3 SMART CARD TEMPLATE SUPPORT

Please refer to the table below for a chart of template supported for 4G Lite Smart Card
reader equipped devices.
Table 5-1 Smart Card Template Support
1:1
1:1 1:1 1:1
Product name Template type on the unit Small 1:5K 1:500
TEM VUR BUR
VUR BUR TMS
Template type
Small BUR TEM
that will be written on smart TEM VUR BUR
VUR
card
MiFARE 1K YES YES YES NO NO YES
MiFARE 4K (1K) YES YES YES NO NO YES
MiFARE 4K (Full) YES YES YES YES YES YES
MiFARE Plus 2K (7 Byte UID) YES YES YES NO NO YES
MiFARE Plus 4K (7 Byte UID) YES YES YES YES YES YES
MiFARE 1K (7 Byte UID) YES YES YES NO NO YES
4G V-Flex Lite (S, O), MiFARE 4K (7 Byte UID) YES YES YES YES YES YES
4G V-Flex Lite (S, O, NW), DESFire (2K, 4K and 8K) YES YES YES YES YES YES
4G V-Station Lite (S, O), iCLASS 2 APP
4G V-Station Lite (S, O, NW) Use with 16K and 32K masked as YES YES YES NO NO YES
16K "1*XXXX"
iCLASS 16 APP
Use with 16K and 32K masked as YES YES YES NO NO YES
16K "2*XXXX"
iCLASS 32 Kb (2app/1 app)
YES YES YES YES YES YES
Use with 32K "3*XXXX"
iCLASS 32 Kb (1 6app/1 app)
YES YES YES YES YES YES
Use with 32K "4*XXXX"
NOTICE
4G Lite Smart Card devices, smart card with any template format
can be verifyied regardless to template type set on device.
Part # 430-4G-060-00-005 154

5.4 MANAGING SITE KEYS AND MIFARE PLUS KEY

A ―site key‖ is a security mechanism used by 4G Lite smart card devices, SecureAdmin Lite,
and smart cards to ensure that only authorized smart cards are used at a facility. The ―site
key‖ protects the read and write access of the data on the smart card.
4G Lite smart card devices and smart cards in use at a facility must have the same site key to
be able to communicate and transfer information. Every time a smart card is presented to a
4G Lite device, it checks whether the site key it is storing matches the site key on the smart
card. Only if the two site keys match will the reader be able to read information from the card.
If the site key stored in the 4G Lite device does not match the site key used on the card, the
device will not be able to read or write to the card.
Each facility must have its own site key to distinguish its smart cards from those of other
facilities. Using a unique site key at each facility ensures that smart card devices at that
facility accept only smart cards created for that particular facility.
All 4G Lite devices are shipped with the site key set to an empty string (120 bits, or 15
characters, of all zeros). This allows administrators to use the 4G Lite device in a non-secure
mode until they are ready to set their personal site key and secure the system.
The 4G Lite device can store two site keys. The primary site key is used in normal operations
and is the site key the administrator uses when performing a site key verification operation
within SecureAdmin Lite. The secondary site key is used only to update older cards when a
new primary site key has been set.
5.4.1 SITE KEY FILES

A site key file provides an administrator with a means of changing the site keys of a device
securely, without having to share sensitive site key information with enrollers. This is done by
encrypting the site keys into a site key file (*.bin). An administrator can then distribute the
encrypted site key file to the enroller. The site key file cannot be decrypted.
The enroller changes the site keys of the readers by using SecureAdmin Lite and the
encrypted site key file. Thus, the site keys are known only by the Administrator, and not by
the enroller.
A site key file can be used to update the site keys of multiple units from a single computer,
but it cannot be used on different computers, as it is MAC address-dependent.
5.4.2 SITE KEYS ON INDIVIDUAL SMART CARDS

The 4G Lite device attempts to set the site key on the smart card during the enrollment
process. The device checks the key currently used by the smart card. If the device primary
site key matches the key on the smart card, the template is written. If the device primary site
key does not match the key on the smart card, the device checks if it‘s secondary site key
Part # 430-4G-060-00-005 155

matches the key on the smart card. If the secondary site key matches, the key on the smart
card is updated to the device‘s primary site key and the template is written (this adds about
half a second to the process).
If both primary and secondary site keys fail, the device compares the smart card key with the
standard default smart card key. If they match, the key on the smart card is updated to the
devices primary site key and the template is written.
If all of the above checks fail, the device does not read or write to the smart card.
5.4.3 CREATING A SITE KEY FILE

1. Click the Create Site Key link in Smart Card tab in Quick Access Panel.
2. Either Enter the MAC address of a computer that will be used to perform enrollments into
the MAC Address field or Select one of the MAC address listed in the drop down.
Figure 5-15 Create Site Key Dialog Box
3. Click the Browse button. A Save As dialog box is displayed.

4. Select the folder where you want the site key file (.bin) to be created.
Part # 430-4G-060-00-005 156

5. Enter a name for the site key file in the File name field. The file name that is entered is
appended with a ―.bin‖ extension automatically.
6. Click the Save button. The file name and output file‘s save path are displayed in the
Output File field.
7. In the Primary Site Key area, select the appropriate Input Mode for Primary Site Key
radio button.
NOTICE
ASCII mode is the default mode. In this mode, the maximum length
of a site key is 15 characters.
All alphabetical characters and space character can be used but the
symbols "*, -, @, &,etc" are not allowed. In Hexadecimal mode, the
maximum length of a site key is 30 characters and only the
characters 0 through 8 and A through F are allowed. The value
"0xFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF" (30 "F" characters)
cannot be used.
8. Enter a site key value in the Primary Site Key field.

9. Re-enter the site key value in the Confirm Primary Site Key field.
10. Select the Use software HASH for Primary Site Key check box if you want
SecureAdmin Lite to enable one-way software hashing on the Primary site key. One-way
software hashing adds additional security to entered site keys. This function takes the user-
entered password and creates an encrypted 120-bit site key from the password. This
encrypted version is then used as the site key for the 4G Lite device and smart cards in place
of the user defined password. In extreme cases, this can make it more difficult for criminals to
―sniff‖ internal networks and capture passwords during serial communications.
11. Repeat Steps 7 through 10 for the Secondary Site Key and the Current Site Key.
12. Click the Create Site Key File button. The site key file is created and saved in the folder
you selected in Step 4.
5.4.4 FORGOTTEN SITE KEYS

Do not forget site keys. If the primary site key is forgotten, all previously created smart cards
will continue to work, but the following will happen:
 They can no longer create new smart cards
 They will not be able to read templates from current smart cards
Part # 430-4G-060-00-005 157

 They will not be able to change the site key on 4G Lite devices
 The 4G Lite devices will have to be returned to L-1 Security Solutions for
reprogramming and once reprogrammed; any previously enrolled smart
cards will no longer be usable.
5.4.5 COMPROMISED SITE KEYS

Site keys need to be protected just like computer passwords and should not be divulged to
unauthorized personnel. In the event that a site key is compromised, change the site key and
automatically update all smart cards in the user base.
5.4.6 MIFARE PLUS KEY

1. Click the Create MiFare Plus Key link in Smart Card tab in Quick Access Panel.
2. Either Enter the MAC address of a computer that will be used to perform enrollments into
the MAC Address field or Select one of the MAC address listed in the drop down.
3. Click the Browse button. A Save As dialog box is displayed.
4. Select the folder where you want the site key file (.bin) to be created.
5. Enter a name for the site key file in the File name field. The file name that is entered is
appended with a ―.bin‖ extension automatically.
6. Click the Save button. The file name and output file‘s save path are displayed in the
Output File field.
7. In the Card Master Key area, select the appropriate Input Mode for Card Master Key
radio button.
8. Enter a value in the Card Master Key field.
9. Re-enter the value in the Confirm Card Master Key field.
Part # 430-4G-060-00-005 158

Figure 5-16 Create MiFare Plus Key Dialog Box
10. Select the Use software HASH for Card Master Key check box if you want
SecureAdmin Lite to enable one-way software hashing on the Card Master Key. One-way
software hashing adds additional security to entered keys. This function takes the user-
entered password and creates an encrypted 120-bit site key from the password. This
encrypted version is then used as the site key for the 4G Lite device and smart cards in place
of the user defined password. In extreme cases, this can make it more difficult for criminals to
―sniff‖ internal networks and capture passwords during serial communications.
11. Repeat Steps 7 through 10 for the Card Configuration Key, Level 2 Switch Key, Level
3 Switch Key and Level 1 AES Key.
12. Click the Create MiFare Plus Key File button. The MiFare Plus key file is created and
saved in the folder you selected in Step 4.
Part # 430-4G-060-00-005 159

Broadcasting Settings
CHAPTER 6 - BROADCASTING SETTINGS

CHAPTER OVERVIEW
This chapter details how to broadcast device settings, audio files, device firmware, smart card
layout files and Image files to devices in the network.
6.1 BROADCASTING SETTINGS

The Broadcast sidebar tab allows you to modify settings on multiple devices in the network
at the same time.
The Broadcast screen contains four buttons. Their usage is explained in subsequent
sections in this chapter.
Part # 430-4G-060-00-005 160

Figure 6-1 Broadcast Screen
Device Parameter - this button is used to broadcast device settings to devices in the network
Firmware Package - this button is used to broadcast a firmware file to devices in the network
Audio File - this button is used to broadcast an audio file (device feedback) to devices in the
network
Smart Card Layout - this button is used to broadcast a smart card layout file to devices in
the network
Image File - this button is used to broadcast an image file to devices in the network
Part # 430-4G-060-00-005 161

6.2 BROADCAST DEVICE PARAMETERS

Before you can broadcast device parameters, you need to select the device.
6.2.1 SET PARAMETER FOR BROADCASTING

1. Double-click the Device Network item in the network tree. The network tree expands and
shows all device groups in the device network.
Figure 6-2 Device Parameters - General Tab
2. Double-click the device group item you are interested in (in the example, the group item is
named ―DefaultGroup‖). Devices in the group are shown in the network tree.
Part # 430-4G-060-00-005 162

3. Double-click the device you want to broadcast settings to (in the example, the device item
is named ―Device0‖). The Device Settings area displays the General tab for that device. The
General tab displays information about the selected device. No settings are changeable on
this tab.
4. Other Device Settings tabs are available; click the Selection button. A drop-down menu
is displayed.
Figure 6-3 Device Parameter - Tab Selection Menu
5. Select the check boxes next to the tabs you want displayed. The Device Settings area
displays the selected tabs (in the example, all available tabs were selected).
Part # 430-4G-060-00-005 163

Figure 6-4 Device Parameter - All Tabs Displayed
6.2.2 TO MODIFY AND BROADCAST THE DEVICE SETTINGS

1. Select the tab you want broadcast from Device Settings area.
2. To modify the tab settings, refer to respective section in Chapter 3.
3. Click Broadcast. The Broadcast dialog box is displayed.
Part # 430-4G-060-00-005 164

Figure 6-5 Select Device Dialog Box - Device Parameter
4. Select the device, group, or entire network check boxes as broadcast recipients.
5. Click Broadcast. Device settings are broadcasted to the selected devices and the
Broadcast dialog box displays a broadcast status message.
Part # 430-4G-060-00-005 165

Figure 6-6 Broadcast Status - Success
6. Click Close.
6.3 TO BROADCAST FIRMWARE PACKAGE

The Firmware Package button is used to broadcast a firmware file to devices in the network.
1. Click the Firmware Package button. A Select File dialog box is displayed.
Part # 430-4G-060-00-005 166

Figure 6-7 Select File Dialog Box - Firmware File
2. Click the button to the right of the Select File field. A File Selection dialog box is
displayed.
3. Navigate to the folder where the firmware file is located and select it.
4. Click Open.
5. Click Next. The Broadcast dialog box is displayed.
Part # 430-4G-060-00-005 167

Figure 6-8 Select File Dialog Box - Firmware File
7. Click Broadcast. Firmware file is broadcasted to the selected devices and the Broadcast
dialog box displays a broadcast status message.
Part # 430-4G-060-00-005 168

Figure 6-9 Broadcast Status - Success
8. Click Close.
6.4 TO BROADCAST AUDIO FILE

The Audio File button is used to broadcast an audio file to devices in the network.
1. Click the Audio File button. A Select File dialog box is displayed.
Part # 430-4G-060-00-005 169

Figure 6-10 Select File Dialog Box - Audio File
displayed.
3. Navigate to the folder where the audio file (*.wav) is located and select it.
4. Click Open.
5. Select the intended application for the audio file in the Audio Directory drop-down list.
Figure 6-11 Select File Dialog Box - Audio Directory Drop-down List

8. Click Broadcast. Audio file is broadcasted to the selected devices and the Broadcast
9. Click Close.
Part # 430-4G-060-00-005 170

6.5 TO BROADCAST SMART CARD LAYOUT FILE

The Smart Card Layout button is used to broadcast a smart card layout file to devices in the
network.
1. Click the Smart Card Layout button. A Select File dialog box is displayed.
Figure 6-12 Select File Dialog Box - Smart Card Layout File
displayed.
3. Navigate to the folder where the smart card layout card file (*.sl1, *.sl2, *.sl3) is located
and select it.
4. Click Open.
7. Click Broadcast. The smart card layout file is broadcast to the selected devices and the
Broadcast dialog box displays a broadcast status message.
8. Click Close.
6.6 BROADCAST IMAGE FILE

The Image File button is used to broadcast an image file to devices in the network.
1. Click the Image File button. Select File dialog box is displayed.
Part # 430-4G-060-00-005 171

Figure 6-13 Select File Dialog Box - Image File
displayed.
3. Navigate to the folder where the image file (*.jpg, *.jpeg, *.bmp, *.png) is located and select
it.
4. Click Open.
5. Select the Wallpaper for the image in the Image Directory drop-down list.
8. Click Broadcast. The image file is broadcasted to the selected devices and the Broadcast
9. Click Close.
NOTICE
4G Lite V-Station devices accepts image with maximum 320 x 240

pixels
NOTICE
Image file broadcasting functionality is applicable for 4G Lite V-

Station devices only.
Part # 430-4G-060-00-005 172

Managing Logs
CHAPTER 7 - MANAGING LOGS

CHAPTER OVERVIEW
This chapter details how to manage the Application event log, Transaction log, and Device
Event log.
7.1 MANAGING LOGS

The Log sidebar tab allows you to manage log files settings in the database and on devices
in the network.
The Log screen contains three buttons:
 Application Event Log
 Transaction Log
 Device Event Log
Part # 430-4G-060-00-005 173

Managing Logs
Figure 7-1 Log Tab
7.2 APPLICATION EVENT LOG

The Application Event Log viewer allows you to view and filter the Application event log.
Part # 430-4G-060-00-005 174

Managing Logs
Figure 7-2 Application Event Log
If you are searching for a specific log entry, you can use the filter function to find it quickly.
7.2.1 FILTER APPLICATION EVENT LOG

1. Enter or select the filter criteria by means of the various fields and drop-down lists.
2. Click the View Log button. Any log entries matching your filter criteria are displayed.
The event log or items in the event log can be exported.
7.2.2 EXPORT APPLICATION EVENT LOG ENTRIES

1. Select the check boxes next to the event log entries you want to export (to the left of the
Description column) or Use Select All check box to select all the entries.
Part # 430-4G-060-00-005 175

Managing Logs
2. Click the Export button. A File Save As dialog box is displayed.

3. Navigate to the save folder and enter a file name.
4. Click Save. The selected log entries are exported and saved to the specified file and
location.
7.3 TRANSACTION LOG

The Transaction Log viewer allows you to download log entries from devices, view and filter
the device transaction log. The transaction log records are all transactions that occur on the
device.
Figure 7-3 Transaction Log
To view the transaction log, click the View Log button.

To refresh the transaction log, click the Refresh button.
Part # 430-4G-060-00-005 176

Managing Logs
If you are searching for a specific transaction entry, you can use the filter function to find it
quickly.
7.3.1 DOWNLOAD TRANSACTION LOG

Download Transaction log screen allows to download the log entries from the selected
devices. An automatic download schedule can be specified where by user can configure the
timings for the SecureAdmin Lite server to download the transactions automatically.
Figure 7-4 Download Transaction Log
For e.g. in the example above, SecureAdmin Lite Server is configured to download log
entries every One week on Sunday at 10:30 AM from Device0, Device1 & Device2.
7.3.1.1 DEFINED AUTO DOWNLOAD SCHEDULE

1. Click the Download button on the Transaction Log screen.
2. Check the Activate Auto Download check box.
3. Specify the Download Time at which the download of log entries from Device(s) will take
place.
4. Select Recurrence Pattern as Daily, Weekly or Monthly.
5. Select other parameters as per the recurrence pattern.
Part # 430-4G-060-00-005 177

Managing Logs
6. Define Range of Recurrence as No End Date, End After X Recurrence and End After
specified Date.
7. From the Device Network tree, select the Devices from which the Transaction log entries
are to be downloaded.
8. Click Save. The Auto Download Schedule parameter will be saved & SecureAdmin Lite
server will download the log as per schedule.
7.3.1.2 MANUAL DOWNLOAD OF TRANSACTION LOG ENTRIES

1. Click the Download button on the Transaction Log screen.
2. From the Device Network tree, select the Devices from which the Transaction log entries
are to be downloaded
3. Click Download button.
NOTICE
Transaction Log entries once downloaded from SecureAdmin Lite

Server, can not be re-downloaded.
7.3.2 FILTER THE TRANSACTION LOG

1. Enter or select the filter criteria by means of the various fields and drop-down lists.
2. Click the View Log button. Any transaction entries matching your filter criteria are
displayed.
The transaction log or items in the transaction log can be exported.
7.3.3 EXPORT TRANSACTION LOG ENTRIES

1. Select the check boxes next to the transaction log entries you want to export (to the left of
the Description column) or Use Select All check box to select all entries.
location.
Part # 430-4G-060-00-005 178

Managing Logs
7.3.4 DELETE SELECTED TRANSACTION LOG ENTRIES

1. Select the check boxes next to the transaction log entries you want to delete (to the left of
the Description column).
2. Click the Delete button. The selected entries are deleted from SecureAdmin Lite
Database.
7.3.5 DELETE ALL TRANSACTION LOG ENTRIES

1. Use Select All check box to select all transaction log entries 2. Click the Delete button. All
the entries are deleted.
NOTICE
Transaction Log entries once deleted from SecureAdmin Lite, can not
be reverted back.
Note: The Identification score is logged as 0 for both success as well as failure. No score is
logged in the Transaction log for Identification.
7.4 DEVICE EVENT LOG

The Device Event Log viewer allows you to view and filter the device event log. The device
event log records every event that happens to the device.
This feature is only needed for troubleshooting purposes and should not be enabled during
normal usage because it records a large amount of data and can grow to a large file size very
quickly.
Use the device event log only when directed to do so by L-1 Identity Solutions Technical
Support.
Before the device log can start collecting device data, it must be activated. To activate the
device event log, select the Activate Device Event Log check box.
Part # 430-4G-060-00-005 179

Managing Logs
Figure 7-5 Device Event Log
7.4.1EXPORT DEVICE EVENT LOG

1. Select the check boxes next to the device event log entries you want to export.
location.
To delete device event log entries, select the check boxes next to the entries you want to
delete and then click the Delete button.
Part # 430-4G-060-00-005 180

Managing Logs
NOTICE
Deactivate the device event log when you are finished
troubleshooting.
Part # 430-4G-060-00-005 181

Menu Bar Commands
CHAPTER 8 - MENU BAR COMMANDS

CHAPTER OVERVIEW
This chapter explains the commands that are available in the SecureAdmin Lite menu bar.
The menu bar provides an assortment of controls. Many controls in SecureAdmin Lite are
accessible from both the menu bar and the tabs in Quick Access Panel of the SecureAdmin
Lite main interface; the use and function of these controls are explained in other chapters of
this document. Other controls in the menu bar, however, are unique to this location; this
chapter explains those commands.
8.1 FILE MENU

Figure 8-1 File Menu
Part # 430-4G-060-00-005 182

Menu Bar Commands
The File menu provides controls that allow you to sign in as another user and to change your
login password.
8.1.1 SIGN IN AS
To sign in as another user:
1. Click the Sign In As item in the File drop-down menu. SecureAdmin Lite closes and the
Login dialog box is displayed.
Figure 8-2 Login Dialog Box
2. Enter the appropriate information into the Login ID, Password, and Server fields.
3. Click Login. SecureAdmin Lite re-launches as the new user.
8.1.2 CHANGE PASSWORD

To change your password:
1. Click the Change Password item in the File drop-down menu. The Change Password
dialog box is displayed.
Figure 8-3 Change Password Dialog Box
Part # 430-4G-060-00-005 183

Menu Bar Commands
2. Enter the appropriate password information into the Current Password, New Password,
and Confirm Password fields.
3. Click Save. The new password is set and the dialog box closes.
8.1.3 EXIT
Clicking the Exit item in the File drop-down menu closes the SecureAdmin Lite application.
8.2 MANAGE MENU

Figure 8-4 Manage Menu
Clicking any item in the Manage drop-down menu simply duplicates the action produced by
clicking the like-named tabs in Quick Access Panel of the SecureAdmin Lite main screen. For
details on these commands, please refer to the appropriate chapter in this document.
Part # 430-4G-060-00-005 184

Menu Bar Commands
8.3 TOOLS MENU

The menu items unique to the Tools menu are explained below.
Figure 8-5 Tools Menu
8.3.1 WIEGAND
The Wiegand item in the Tools menu allows you to manage the Wiegand formats in the
database.
Part # 430-4G-060-00-005 185

Menu Bar Commands
Figure 8-6 Wiegand
To see which predefined Wiegand formats exist in the database, select Predefined Wiegand
Format in the Select Wiegand Format Type drop-down list.
To see which custom Wiegand formats exist in the database, select Custom Wiegand Format
in the Select Wiegand Format Type drop-down list
8.3.1.1 TO IMPORT A PREDEFINED/CUSTOM WIEGAND FORMAT INTO THE DATABASE

1. Click the Import button. A File Open dialog box is displayed.
2. Navigate to the folder containing the Wiegand format file (*.wgf for predefined or *.cwf for
custom) and select it.
3. Click OK. The file is imported and its name is displayed in the list of Wiegand formats.
8.3.1.2 TO EXPORT A PREDEFINED/ CUSTOM WIEGAND FORMAT

1. Select the Wiegand format you want to export in the list.
2. Click the Export button. A Browse for Folder dialog box is displayed.
3. Navigate to the folder containing the Wiegand format file (*.wgf for predefined/PIV/TWIC
or *.cwf for custom) and select it.
4. Click OK. The Wiegand Format file (*.wgf for predefined/PIV/TWIC or *.cwf for custom) is
exported to the specified location
Part # 430-4G-060-00-005 186

Menu Bar Commands
8.3.1.3 TO ADD A CUSTOM WIEGAND FORMAT

1. Select Custom Wiegand Format in the Select Wiegand Format Type drop-down list.
2. Click the Add button. Note that this button is not available on the Predefined Wiegand
Format screen. The Wiegand Format dialog box is displayed.
Figure 8-7 Custom Wiegand Format - Add Button
3. Enter a name into the Name field.

4. Enter a Length value.
5. Enter the Wiegand ID Start Position, Length and Heart Beat Value.
6. Click the Add User Field button (the top-most red arrow that‘s pointing left) in the User
Fields area. A slot is displayed in the User fields area.
7. For the new User Field entry, enter Name, Start Position, Length, Success Value and
Failure values.
8. Click the Add Parity Field button (the top-most red arrow that‘s pointing left) in the Parity
bits area. A slot is displayed in the Parity bits area.
Part # 430-4G-060-00-005 187

Menu Bar Commands
Figure 8-8 New Wiegand Format Dialog Box
9. Select a Parity Type from the drop-down list.

10. Click the Parity Mask button. In the dialog box that appears, calculate and apply a parity
value.
11. Click Apply. The new Wiegand format is displayed in the list.
8.3.2 WEEK SETTING

Figure 8-9 Week Setting
Part # 430-4G-060-00-005 188

Menu Bar Commands
SecureAdmin Lite provides the facility to configure the week start and working days of a
week.
 First day of week: Select required day from Week Starts on drop-down to set
the first working day of week.
 Working days: Select required days from the list of Week day(s) and click
button with >> to move them to the list of Week off(s). Similarly, select required
days from the list of Week off(s) and click button with << to move them to the list
of Week day(s). Week start and week off/week days setting will have effect on
Access / Biometric schedule and download schedule of logs.
 Click Apply button to save the changes.
8.3.3 FIRMWARE UPGRADE

The firmware of 4G Lite devices can be field-updated. L-1 Identity Solutions recommends that
only advanced users should attempt to perform this operation. Please contact L-1 Identity
Solutions Technical Support with any questions before attempting to update device firmware.
To upgrade device firmware:
1. Click the Firmware Upgrade item in the Tools drop-down menu. The Firmware Upgrade
Wizard is displayed.
Figure 8-10 Firmware Upgrade - Step 1
Part # 430-4G-060-00-005 189

Menu Bar Commands
2. Select the device you are upgrading in the Current Device drop-down list. The device‘s
information is displayed.
4. Click Browse. A SecureAdmin Lite File Selection dialog box is displayed.

5. Navigate to the folder containing the device firmware file and select it.
6. Click Open.
8. Click Upgrade. A final confirmation box is displayed.
Part # 430-4G-060-00-005 190

Menu Bar Commands
Figure 8-13 Final Confirmation
9. Click Yes. The upgrade process starts and a progress meter is displayed. Do not touch the
device.
10. Click Close.
WARNING
Touching the device keypad, attempting to access any of the
administrative menus, or trying to perform a verification whilst
performing a firmware upgrade can damage the device!
8.3.4 SENSOR TEST

To test a device sensor:
1. Click the Sensor Test item in the Tools drop-down menu. The Sensor Test dialog box is
displayed.
2. Select the device you want to test in the Current Device drop-down list. Properties of the
device‘s sensor are displayed in the Sensor Information area.
Part # 430-4G-060-00-005 191

Menu Bar Commands
Figure 8-14 Sensor Test Dialog Box
3. Click Test Sensor.

4. Place a finger on the sensor, and remove finger as directed by the prompts. The test scan
results are displayed.
5. Click Close.
8.3.5 SYNCHRONIZATION
This feature allows creating synchronization between 4GLite devices and SecureAdmin Lite
Database whereby, the actions performed on the device related to user/template data can be
synchronized with SecureAdmin Lite DB. Any user/templates that were added to the device
through Command Card Enrollment or Wiegand are added to the database after successful
synchronization.
To synchronize device and database user/template data:
1. Select Synchronization in the Tools drop-down menu. The Synchronization dialog box
is displayed.
Part # 430-4G-060-00-005 192

Menu Bar Commands
Figure 8-15 Synchronization Dialog Box
2. Select the check boxes next to the groups and devices you want to synchronize.
3. Click the Synchronize button. A Synchronization Result dialog box is displayed.
Figure 8-16 Synchronization Result Dialog Box
4. Click OK.
8.3.6 RESET TO FACTORY DEFAULTS

The Reset to Factory Default item in the Tools drop-down menu allows you to reset a
device back to default factory settings.
To reset a device to factory default:
Part # 430-4G-060-00-005 193

Menu Bar Commands
1. Select Reset to Factory Default in the Tools drop-down menu. The Reset to Factory
Default dialog box is displayed.
Figure 8-17 Reset To Factory Defaults Dialog Box
2. Select the device you want to reset to factory defaults in the Current Device drop-down
list.
3. Select the check boxes next to the specific parameters you want to reset.
4. Click Reset. The selected settings are reset to factory default on the current device.
NOTICE
L-1 Identity Solutions recommends that only advanced users use this
feature. Please call L-1 Identity Solutions Technical Support for
assistance before attempting to use this feature.
Part # 430-4G-060-00-005 194

Menu Bar Commands
8.3.7 REALTIME ACTIVITY MONITOR

Realtime Activity Monitor allows an administrator to monitor all the activity/transactions of
the devices which are registered through Ethernet Communication. Activity Monitor will show
the realtime transaction being performed on the selected devices.
If Realtime Activity Logging and Monitoring has been activated on a device, SecureAdmin
Lite will automatically download all the transaction log entries to the database continuously.
Downloaded transaction log entries can be searched \ filtered from the Transaction Log
screen without explicit download of log entries.
8.3.7.1 ENABLE REALTIME ACTIVITY LOGGING AND MONITORING

To allow device to send real time activity details to SecureAdmin Lite server, Realtime activity
logging and monitoring should be enabled on the device.
1. Navigate to Miscellaneous tab of Network Tree.

2. Check the Activate Realtime Activity Logging and Monitoring check box
3. Click Apply.
Part # 430-4G-060-00-005 195

Menu Bar Commands
Figure 8-18 Miscellaneous Tab – Realtime Activity Logging
8.3.7.2 REALTIME ACTIVITY MONITORING

To see the real time activity details of various devices, administrator can open Tools →
Realtime Activity Monitor.
1. Open Realtime Activity Monitor from Tools menu.

2. Select the devices for which you wish to monitor realtime activities.
Part # 430-4G-060-00-005 196

Menu Bar Commands
Figure 8-19 Realtime Activity Monitor
8.3.7.3 FILTERING REALTIME ACTIVITIES

To filter the realtime activity monitor for the selected devices.
1. Open Realtime Activity Monitor from the Tools menu.
2. Select the devices for which you wish to monitor realtime activities.
3. Specify the filter criteria like Device Name, Action etc
4. Check the Show Offline Activities Only check box if you want to monitor activities which
took place while device was not communicating to SecureAdmin Lite server.
5. Select the Full Screen check box to see the Activity Monitor in full screen mode.
Part # 430-4G-060-00-005 197

Menu Bar Commands
Figure 8-20 Realtime Activity Monitor – Filtered Activities
8.3.8 OPTIONS
The Template Settings frame on Options screen provides a feature to configure the storage
of template to Database after Enrollment. When the Save Templates to Database option is
not checked, card/template enrolled via SecureAdmin Lite will NOT be stored in the
database.
Part # 430-4G-060-00-005 198

Menu Bar Commands
Figure 8-21 Options – Save Templates to Database
1. Open Options from Tools menu.

2. Check \ Un-check the Save templates to database check-box as required.
3. Click OK
WARNING
While Save templates To database is unchecked, Database

Template related features like, Template Transfer from database to
Device, Template Editing, , Synchronization, will NOT be available.
Part # 430-4G-060-00-005 199

Menu Bar Commands
8.4 HELP MENU

Figure 7-22 Help Menu
8.4.1 HELP CONTENT

Click the Help Content item in the Help drop-down menu to launch the SecureAdmin Lite
Help file.
8.4.2 ABOUT PRODUCT REGISTRATION

Click the Product Registration item in the Help drop-down menu to display the Product
Registration dialog box. This dialog box shows registration information for the software.
Click OK to close the dialog box.
Part # 430-4G-060-00-005 200

Menu Bar Commands
Figure 8-23 Product Registration Dialog Box
8.4.3 ABOUT SECUREADMIN LITE

Click the Help Content item in the Help drop-down menu to display the About SecureAdmin
Lite dialog box. This dialog box shows the version of the software. Click OK to close the
dialog box.
Figure 8-24 About SecureAdmin Lite Dialog Box
Part # 430-4G-060-00-005 201

Front Panel Operation
CHAPTER 9 - FRONT PANEL OPERATION

CHAPTER OVERVIEW
For 4G-Lite devices that are equipped with a front panel, there are situations when it is more
convenient to use the front panel for system set-up, such as when enrolling a new user in a
remote location. Most of the common set-up functions can be performed from the front panel
using the keypad. This chapter shows how to operate the device from the front panel. It
provides detailed procedures for using the menu systems and for performing commonly used
operations.
9.1 OPERATING THE 4G LITE DEVICE FROM THE FRONT PANEL

The 4G Lite device can be set up using the Secure Admin Lite software on a PC or by using
the controls on the front panel.
Occasionally, there are situations when using a PC for system set up is not desired or
possible, such as when enrolling a new user in a remote location. Most of the common
functions can be performed from the front panel of the reader by using the keypad.
This chapter describes how to navigate the menu systems and enter data. The keypad
duplicates much of the functionality found in Secure Admin Lite. A one-to-one mapping of
options found in Secure Admin Lite and those found in the front panel menus on the 4G Lite
devices has been maintained. The 4G Lite device‘s illuminated buttons are arranged in two
groups; numeric keypad, navigation keys.
Part # 430-4G-060-00-005 202

Figure 9-1: V-Station Lite Device Front Panel
Numeric Keys
This group of keys is used to enter numbers or letters. This group of keys also includes the
Enter and Esc (Escape) keys, which are located in the bottom row.
Navigation Keypad
This group of keys is used to move Left, Right, up, and down through the device‘s various
menu systems. The central OK button is used to enter or confirm a selection or entered data.
Part # 430-4G-060-00-005 203

9.1.1 ACCESSING ADMINISTRATOR MODE

The 4G system menu is accessible only in Administrator mode. There are four Admin System
access modes:
1. All Users + Password

2. All Users with Password + Biometric
3. Admin with Password Only
4. Admin with Password + Biometric
The Admin login mode can be changed through either SecureAdmin Lite or the LCD menu.
To change the Admin login method in SecureAdmin Lite:

Click Device Settings  Device Security. The Device Security tab is displayed. Select the
appropriate option on the Device Security Options screen.
Part # 430-4G-060-00-005 204

Figure 9 - 2 SecureAdmin - Device Security Options
Part # 430-4G-060-00-005 205

Figure 9 - 3 SecureAdmin Lite - Device Security Options
To change the Admin login method using the LCD menu:

1. Select Security → Login Options. The LCD‘s Login Options screen is displayed.
2. Scroll Left or Right until the desired option is displayed. Press OK to complete the
selection.
Part # 430-4G-060-00-005 206

Figure 9 - 4: LCD Login Option
9.1.1.1 ALL USERS WITH PASSWORD

The All Users + Password access method allows all users who know the device password ac-
cess to the Admin menu.
To access the Admin menu in this mode:
1. Press the Enter and Left arrow keys simultaneously. The Enter Device Password
screen is displayed.
Figure 9 - 5: Enter Device Password
2. Using the keypad, enter ―0000‖. This is the default Admin password for the device, as
shipped from the factory.
3. Press OK. The main menu is displayed with the System icon (in the top left corner of
the screen) highlighted. This is the currently selected icon.
Part # 430-4G-060-00-005 207

Figure 9 - 6: Main Menu
Using the navigation keys to select any of these four icons, all of the menu systems available on the
4G Lite device can be accessed.
9.1.1.2 ALL USER WITH PASSWORD AND BIOMETRIC

In this mode, all users who have a biometric template saved in the device and know the
device password are allowed Admin System access.
To access the Admin menu in this mode:
1. On the device keypad, press the Enter and Left arrow keys simultaneously. The Enter
ID screen is displayed.
Figure 9 - 7 Enter ID Screen
2. Enter your Template ID and press OK. The Enter Device Password screen is
displayed.
Part # 430-4G-060-00-005 208

Figure 9 - 8 Enter Device Password
3. Enter the device password and press OK. The Place Finger message will be
displayed to prompt you to verify your identity.
Figure 9 - 9 Place Finger Screen
4. Verify your identity by placing your finger on the finger scan sensor. The main Admin
Menu screen is displayed with the System icon (in the top left corner of the screen)
highlighted. This is the currently selected icon.
Figure 9 - 10: Main Menu
Part # 430-4G-060-00-005 209

Using the navigation keys on the device keypad, any of the four icons displayed on the Admin
Menu screen can be selected by highlighting the desired icon and pressing OK.
9.1.1.3 ADMIN USER WITH PASSWORD

In this mode, all users who know the device password and have been enrolled as either ―V-
Station Admin ID‖, ―V-Station Enroll ID‖ or ―Limited V-Station Enroll ID‖ are allowed Admin
System access.
The process for accessing the Admin menu is the same as in section 9.1.1.2 except biometric
verification is not required.
9.1.1.4 ADMIN USER WITH PASSWORD AND BIOMETRIC

In this mode, only users who have a biometric template saved in the device, know the device
password, and have been enrolled as either ―V-Station Admin ID‖, ―V-Station Enroll ID‖ or
―Limited V-Station Enroll ID‖ is allowed Admin System access.
To access the Admin menu in this mode refer to section 9.1.1.2.
9.2 SYSTEM
The System option allow user to set up different settings for IO, USB, LCD Display and
Device‘s general setting.
To access the System menu:

1. Using the navigation keys, select the System icon.
2. Press OK. The System menu screen is displayed.
Part # 430-4G-060-00-005 210

Figure 9 - 11 System Menu Icon
9.2.1 IO
The IO option allows you to set different IO operation such as communication, wiegand,
Tamper and Door control options.
To access IO menu
1. Using the navigation keys, select the System Icon.
2. Press OK. The System menu screen is displayed
Figure 9 - 12 IO Menu Icon
3. Now select IO icon using navigation keys.

4. Press OK. The IO menu screen is displayed
Part # 430-4G-060-00-005 211

Figure 9 - 13 IO - System
9.2.1.1 TCP/IP
The TCP/IP menu allow user to set Ethernet setting. To access TCP/IP menu:
1. Select TCP/IP item in IO Menu

Figure 9 - 14 TCP/IP - IO
9.2.1.1.1 DHCP
The DHCP options allow user to select TCP/IP mode as DHCP where user need not to setup
IP, Subnet Mask or Gateway. To enable DHCP mode:
1. Select DHCP item in TCP/IP menu

2. Press OK or Enter. Afterwards, TCP/IP mode of device is set to DHCP.
Part # 430-4G-060-00-005 212

Figure 9 - 15 DHCP Mode - TCP/IP
9.2.1.1.1 Static
The Static options allow user to set IP, Subnet Mask and Gateway with user defined values.
To enable and access Static mode
1. Select Static item in TCP/IP menu

2. Press OK or Enter.
3. Now the sub menu opens to set static detail.
Figure 9 - 16 Static Mode - TCP/IP
4. Now as you have selected Static mode, press OK and enter an address in the IP
Address field using the numeric keypad. The Left arrow key clears characters (like a
Backspace key) and the Right arrow key places periods.
Part # 430-4G-060-00-005 213

Figure 9 - 17 IP Address - Static
5. Press OK. A status message is displayed for IP Address

6. Select Subnet Mask and press OK. Enter a subnet mask in the Subnet Mask field
using the numeric keypad. The Left arrow key clears characters (like a Backspace
key) and the Right arrow key places periods
Figure 9 - 18 Subnet Mask - Static
7. Press OK. A status message is displayed for Subnet Mask

8. Select Gateway, press OK and enter a gateway address in the Gateway Address
field using the numeric keypad. The Left arrow key clears characters (like a
Backspace key) and the Right arrow key places periods.
Part # 430-4G-060-00-005 214

Figure 9 - 19 Gateway - Static
9. Press OK. A status message is displayed for Subnet Mask
9.2.1.2 RS-485
The RS-485 menu allows user to set serial communication parameter with RS-485. To
access RS-485 settings menu:
1. Select the RS-485 item in the IO menu.
2. Press OK. The RS-485 Options menu is displayed.
Figure 9 - 20 RS-485 – IO
9.2.1.2.1 Baudrate
1. Select Baudrate item in RS-485 Menu, press OK and select value of Baudrate with
navigation keys.
Part # 430-4G-060-00-005 215

Figure 9 - 21 Baudrate – RS-485
2. Press OK. A status message is displayed.
9.2.1.2.2 Net ID
1. Select Net ID item in RS-485 Menu, press OK and select value of Net ID (Device ID)
with navigation keys.
Figure 9 - 22 Net ID – RS-485
9.2.1.3 WIEGAND
The Wiegand menu allows you to enable/disable wiegand input/output. To access Wiegand
settings menu:
1. Select the Wiegand item in the IO menu.
2. Press OK. The Wiegand menu is displayed.
Part # 430-4G-060-00-005 216

Figure 9 - 23 Wiegand – IO
9.2.1.3.1 Input Port
1. Select Input Port item in Wiegand menu, press OK.

2. Use the Left and Right key to enable or disable Input Port
Figure 9 - 24 Input Port – Wiegand
9.2.1.3.1 Output Port
1. Select Output Port item in Wiegand menu, press OK.

2. Use the Left and Right key to enable or disable Output Port
Part # 430-4G-060-00-005 217

Figure 9 - 25 Output Port – Wiegand
9.2.1.4 TAMPER
The Tamper menu allows you to configure Tamper settings. To access Tamper settings
menu:
1. Select the Tamper item in the IO menu.
2. Press OK. The Tamper menu is displayed.
Figure 9 - 26 Tamper – IO
9.2.1.4.1 State
1. Select State item in Tamper menu, press OK.

2. Use the Left and Right key to enable or disable Tamper
Part # 430-4G-060-00-005 218

Figure 9 - 27 State – Tamper

4. You can use third option Clear-ReEnable for Tamper state, only if Tamper is
triggered.
9.2.1.4.2 Biometric
1. Select Biometric item in Tamper menu, press OK.

2. Use the Left and Right key to set the Biometric enabled or disabled, while the
Tamper is triggered.
Figure 9 - 28 Biometric – Tamper
9.2.1.4.3 Erase Template
1. Select Erase Template item in Tamper menu, press OK.
Part # 430-4G-060-00-005 219

2. Use the Left and Right key to set Erase Template enabled or disabled, while the
Tamper is triggered
Figure 9 - 29 Erase Template – Tamper
9.2.1.4.4 Send Wiegand
1. Select Send Wiegand item in Tamper menu, press OK.

2. Use the Left and Right key to enable or disable Send Wiegand, while the Tamper is
triggered
Figure 9 - 30 Send Wiegand – Tamper
9.2.1.5 DOOR CONTROL

The Door Control menu allows you to configure Door Control settings. To access Door
Control settings menu:
1. Select the Door Control item in the IO menu.
2. Press OK. The Door Control menu is displayed.
Part # 430-4G-060-00-005 220

Figure 9 - 31 Door Control – IO
9.2.1.5.1 SDC Settings
The SDC Setting menu allows you to configure SDC Settings. To access SDC Settings
menu:
1. Select SDC Settings item in Door Control menu.
2. Press OK. The SDC Settings menu is displayed.
Figure 9 - 32 SDC Settings – Door Control
3. Navigate to Mode item in SDC Settings menu, press OK.

4. Use the Left and Right key to select mode from options SDC or Secure Control or
OFF
Part # 430-4G-060-00-005 221

Figure 9 - 33 Mode - SDC Settings

6. Navigate to Unlock Duration item in SDC Settings menu, press OK.
7. Use the numeric keypad to select unlock duration in range 1 to 60 Seconds.
Figure 9 - 34 Unlock Duration - SDC Settings

9. Navigate to Held Open Duration item in SDC Settings menu, press OK.
10. Use the numeric keypad to select unlock duration in range 1 to 3600 Seconds.
Part # 430-4G-060-00-005 222

Figure 9 - 35 Held Open Duration - SDC Settings

12. Navigate to Alarm Type item in SDC Settings menu, press OK.
13. Use the Left and Right key to select Alarm Type from options Audio + LED /Audio/
LED
Figure 9 - 36 Alarm Type – SDC Settings

15. Navigate to Exit Mode item in SDC Settings menu, press OK.
Part # 430-4G-060-00-005 223

Figure 9 - 37 Exit Mode – SDC Settings
16. Navigate to Mode item in Exit Mode menu, press OK.

17. Use the Left and Right key to select Exit Mode from option Push Button-Manual /
Push Button-Electric / Motion detector / None
Figure 9 - 38 Mode – Exit Mode

19. For Exit Mode ―Motion Detector‖ and ―Push Button Manual‖ navigate to Egress
Timeout item in Exit Mode menu, press OK
20. Use the numeric keypad to select Egress Timeout in range 1 to 300 Seconds.
Part # 430-4G-060-00-005 224

Figure 9 - 39 Egress Timeout – Exit Mode
9.2.1.5.2 TOM
The TOM menu allows you to configure TOM. To access TOM menu:
1. Select TOM item in Door Control menu.

2. Press OK. The TOM menu is displayed.
Figure 9 - 40 TOM – Door Control
3. Navigate to Mode and Press OK.

4. Use Left and Right key to enable/disable TOM
Part # 430-4G-060-00-005 225

Figure 9 - 41 Mode – TOM

6. Navigate to Timeout once the TOM is enabled
7. Use the numeric keypad to select Timeout in range 1 – 1440 Minutes
Figure 9 - 42 Timeout – TOM
9.2.2 USB
The options under USB menu, allows you to initialize USB and transfer files through USB. To
access USB menu

2. Press OK. The System Menu screen is displayed
Part # 430-4G-060-00-005 226

Figure 9 - 43 USB Menu Icon
3. Now select USB icon using navigation keys.

4. Press OK. The USB Menu screen is displayed
Figure 9 - 44 USB – System
9.2.2.1 FILE TRANSFER

The File Transfer menu allows user to transfer the file from and to USB drive. To access File
Transfer menu:
1. Select File Transfer item in USB Menu
Part # 430-4G-060-00-005 227

Figure 9 - 45 File Transfer – USB
9.2.2.1.1 Firmware
The Firmware options allow user to transfer firmware file to device and use that to upgrade
firmware on device. To access Firmware:
1. Select Firmware item in File Transfer menu. Press OK.
Figure 9 - 46 Firmware – File Transfer
2. Connect the USB drive which is initialized by device and contains firmware file located
in firmware folder.
3. Use Left and Right key to select option Copy to Device.
Part # 430-4G-060-00-005 228

Figure 9 - 47 Copy to Device – Firmware
4. Press OK. File transfer process starts and on completion A status message is
displayed as ―File Copied‖
5. If USB is not attached then you will get message ―USB key is not connected‖.
6. If USB key is attached but directory structure is not initialized, then you will get
message ―Directory does not exist on device‖
7. If USB key is attached with directory structure, but no firmware file exist in firmware
folder, then you will get message ―File does not exist or corrupt file‖
8. Use Left and Right key to select option Upgrade Firmware
9. If device does not have firmware file, then you will get message ―Firmware file not
found on device‖
10. Press OK. Firmware upgrade will start with message ―Firmware Upgrade in Process‖
and beep sound.
11. On completion, device will reboot and firmware file will be deleted from device
memory.
9.2.2.1.2 Language
The Language options allows user to transfer language file to device and use that to change
device language. To access Language:
1. Select Language item in File Transfer menu. Press OK.
Part # 430-4G-060-00-005 229

Figure 9 - 48 Language – File Transfer
2. Connect the USB drive which is initialized by device and contains language file as
―NGVLanguageFile.qm‖ at language folder.
3. Press OK with the option Copy to Device
4. Device will ask ―Do you want to change current device language?‖. Press OK to
continue.
Figure 9 - 49 Copy Language prompt– Firmware
5. On reboot device, the language of LCD will be changed as per the language file
uploaded on device with above steps.
9.2.2.1.3 Audio
The Audio options allows user to manage audio file of device for event Tamper, Verify
Success & Verify Failed. To access Audio Files:
Part # 430-4G-060-00-005 230

1. Select Audio item in File Transfer menu. Press OK.
Figure 9 - 50 Audio – File Transfer
2. Connect the USB drive which is initialized by device and contains audio files in all 3
folders.
3. Using navigation key to select Tamper item in Audio menu. Press OK.
Figure 9 - 51 Tamper – Audio
4. Using navigation key to select On Device item in Tamper menu. Press OK.
Part # 430-4G-060-00-005 231

Figure 9 - 52 On Device – Tamper
5. Device will show the audio file associated for Tamper.

6. Pressing OK will show audio image. Pressing OK further will show option for the audio
file as Play, Copy & Delete.
7. Using navigation key, select Play. Pressing OK will play the audio file.
8. Using navigation key, select Copy. Pressing OK will prompt a message ―Please
confirm Copy file to USB?‖ with OK and ESC option.
9. Pressing OK, will copy the file to ‗Tamper‘ folder of USB, and status message will be
displayed.
10. Using navigation key select Delete. Pressing OK will prompt a message ―Please
confirm Delete current file?‖ with OK and ESC option.
11. Pressing OK, will delete the file and status message displayed. User will reach to
Tamper menu.
12. Using navigation key select On USB item in Tamper menu. Press OK.
Figure 9 - 53 On USB – Tamper
13. Device will show all the audio files available in Tamper folder of USB.
Part # 430-4G-060-00-005 232

14. Using navigation key, select audio file. Pressing OK will show audio image.
15. Pressing OK, will show option for the audio file as Play, Copy & Delete.
16. Using navigation key, select Play. Pressing OK will play the audio file.
17. Using navigation key select Copy. Pressing OK will prompt a message ―Please
confirm Copy file to Device?‖ with OK and ESC option.
18. Pressing OK, will copy and attach the file for the action Tamper, and status message
displayed.
19. Using navigation key select Delete. Press OK will prompt a message ―Please confirm
Delete current file?‖ with OK and ESC option.
20. Press OK, will delete the file and status message displayed. User will reach to Tamper
menu.
21. Using navigation key select Verify Success item in Audio menu. Press OK
Figure 9 - 54 Verify Success – Audio
22. Using navigation key select On Device item in Verify Success menu. Press OK.
Figure 9 - 55 On Device – Verify Success
Part # 430-4G-060-00-005 233

23. Device will show the audio file associated for Verify Success.
24. Press OK will show audio image. Press OK will show option for the audio file as Play,
Copy & Delete.
25. Using navigation key select Play. Press OK will play the audio file.
26. Using navigation key select Copy. Press OK will prompt a message ―Please confirm
Copy file to USB?‖ with OK and ESC option.
27. Press OK, will copy the file to ‗Verify Success‘ folder of USB, and status message
displayed.
29. Press OK, will delete the file and status message displayed. User will reach to Verify
Success menu.
30. Using navigation key select On USB item in Verify Success menu. Press OK.
Figure 9 - 56 On USB – Verify Success
31. Device will show all the audio files available in Verify Success folder of USB.
32. Using navigation key select audio file. Press OK will show audio image.
33. Press OK, will show option for the audio file as Play, Copy & Delete.
Copy file to Device?‖ with OK and ESC option.
36. Press OK, will copy and attach the file for the action Verify Success, and status
message displayed.
Part # 430-4G-060-00-005 234
Success menu.
39. Using navigation key select Verify Failed item in Audio menu. Press OK.
Figure 9 - 57 Verify Failed – Audio
40. Using navigation key select On Device item in Verify Failed menu. Press OK.
Figure 9 - 58 On Device – Verify Failed
41. Device will show the audio file associated for Verify Failed.
42. Press OK will show audio image. Press OK will show option for the audio file as Play,
Copy & Delete.
45. Press OK, will copy the file to ‗Verify Failed‘ folder of USB, and status message
displayed.
Part # 430-4G-060-00-005 235

Failed menu.
48. Using navigation key select On USB item in Verify Failed menu. Press OK.
Figure 9 - 59 On USB – Verify Failed
49. Device will show all the audio files available on Verify Failed folder of USB.
50. Using navigation key select audio file. Press OK will show audio image.
51. Press OK, will show option for the audio file as Play, Copy & Delete.
Copy file to Device?‖ with OK and ESC option.
54. Press OK, will copy and attach the file for the action Verify Failed, and status message
displayed.
Failed menu.
9.2.2.1.4 Wallpaper
The Wallpaper options allow user to manage wallpaper for device. To access Wallpaper
Files:
1. Select Wallpaper item in File Transfer menu. Press OK.

Part # 430-4G-060-00-005 236
Figure 9 - 60 Wallpaper – File Transfer
2. Connect the USB drive which is initialized by device and contain image files in
wallpaper folder.
3. Using navigation key select On Device item in Wallpaper menu. Press OK.
Figure 9 - 61 On Device – Wallpaper
4. Device will list the wallpaper image file of Device.

5. Press OK will show the image. Press OK will show option for the file as Copy &
Delete.
7. Press OK, will copy the file to Wallpaper folder of USB, and status message displayed.
9. Press OK, will delete the file from Device.
Part # 430-4G-060-00-005 237
10. Using navigation key select On USB item in Wallpaper menu. Press OK.
Figure 9 - 62 On USB – Wallpaper
11. Device will list all the image files of USB

12. Press OK will show the supported image and for rest will show ―Invalid File‖.
13. Press OK will show option for the file as Copy & Delete.
15. Press OK, will copy the file to Wallpaper folder of USB and set as wallpaper, and
status message displayed.
17. Press OK, will delete the file from USB.
NOTICE
4G V-Station Lite devices accepts image with maximum 320 x 240

pixels
9.2.2.1.5 Event Log
The Event Log options allow user to copy event log of device to USB. To access Event Log:
Part # 430-4G-060-00-005 238

1. Select Event Log item in File Transfer menu. Press OK.
Figure 9 - 63 Event Log – File Transfer
2. Connect the USB drive which is initialized by device and contain ‗EventLog‘ folder.
3. Using navigation key select Month and press OK. With navigation key select month
and press OK.
4. Using navigation key select Date and press OK. With numeric keypad enter date and
press OK.
5. Using navigation key select Month and press OK. With navigation key select year.
6. Press OK, will prompt message ―Copy event log to USB?‖
7. Press OK, will copy the file to EventLog folder of USB and status message displayed.
9.2.2.2 INITIALIZE USB

The Initialize USB option allows user to create directory structure on attached USB drive. To
access Initialize USB menu:
1. Select Initialize USB item in USB Menu
Part # 430-4G-060-00-005 239

Figure 9 - 64 Initialize USB – USB
2. Press OK, will prompt a message ―Please confirm Create new directory structure on
USB?
3. Press OK, will create directory structure on USB, i.e. will create folder with below
structure
Part # 430-4G-060-00-005 240

9.2.3 SETTINGS
The options under Setting menu allow you to manage Device Settings e.g. Template, Time &
Attendance Mode, Reset Setting etc. To access Settings menu

Figure 9 - 65 Settings Menu Icon
3. Now select Settings icon using navigation keys.

4. Press OK. The Settings Menu screen is displayed
Figure 9 - 66 Settings – System
9.2.3.1 ERASE TRANSACTION LOG

The Erase Transaction Log option allows user to erase transaction log available on device.
To access Erase Transaction Log:
Part # 430-4G-060-00-005 241

1. Select Erase Tran. Log item in Settings Menu
Figure 9 - 67 Erase Tran. Log – Settings
2. Using navigation key select Yes. Press OK, will prompt a message ―Confirm Erase
Logs.
3. Press OK, will delete all the transaction logs of device.
9.2.3.2 TEMPLATE TYPE

The Template Type menu allows user to set template type on device. To access Template
Type:
1. Select Template Type item in Settings Menu
Figure 9 - 68 Template Type – Settings
2. Using navigation key select template type from the available template types.
3. Press OK, will prompt message ―Confirm Change Template Type‖.
Part # 430-4G-060-00-005 242
4. Press OK, will change template type of device and device will be rebooted with
deletion of all existing templates.
9.2.3.3 RESET SETTINGS

The Reset Settings option allows user to reset all the parameters to factory defaults. To
access Reset Settings:
1. Select Reset Settings item in Setting Menu
Figure 9 - 69 Reset Settings – Setting
2. Using navigation key select Yes. Press OK, will prompt a message ―Confirm Reset
Parameters‖.
3. Press OK, will reset all the parameters to factory defaults and reboot the device.
9.2.3.4 TIME ATTENDANCE

The Time Attendance menu allows user to set mode of Time and Attendance. To access
Time Attendance:
1. Select Time Attendance item in Settings Menu
Part # 430-4G-060-00-005 243

Figure 9 - 70 Time Attendance – Settings
2. Using navigation key select mode of Time Attendance from

Disable/Fixed/Manual/FKey as Input.
3. Press OK, will set the T&A Mode and status message displayed.
9.2.3.5 REBOOT DEVICE

The Reboot Device option allows user to soft reboot the device. To access Reset Settings:
1. Select Reboot Device item in Settings Menu
Figure 9 - 71 Reboot Device – Setting
2. Press OK, will prompt a message ―Perform Soft Reboot‖.

3. Press OK, will reboot the device.
Part # 430-4G-060-00-005 244

9.2.4 LCD/SOUND
The options under LCD/Sound menu allow you to manage Device LCD Settings e.g. Buzzer,
Backlight etc. To access LCD/Sound menu

Figure 9 - 72 Setting Menu
3. Now select LCD/Sound icon using navigation keys.

4. Press OK. The LCD/Sound Menu screen is displayed
Figure 9 - 73 LCD/Sound – System
Part # 430-4G-060-00-005 245

9.2.4.1 BACKLIGHT TIMEOUT

The Backlight Timeout option allows user to set backlight timeout value between 5 to 15
seconds. To access Backlight Timeout:
1. Select Backlight Timeout item in LCD/Sound Menu
Figure 9 - 74 Backlight Timeout – LCD/Sound
2. Using either navigation key or numeric keys select backlight timeout seconds.
3. Press OK, will set the value and status message displayed.
9.2.4.2 KEY PRESS SOUND

The Key Press Sound option allows user to enable/disable buzzer on key press. To access
Key Press Sound:
1. Select Key Press Sound item in LCD/Sound Menu
Figure 9 - 75 Key Press Sound – LCD/Sound
Part # 430-4G-060-00-005 246

2. Using navigation key select enable or disable.

3. Press OK, will enable/disable the key press buzzer and status message displayed.
9.2.4.3 LCD OFF TIMEOUT

The LCD Off Timeout option allows user to set LCD off timeout value as disable or 1 to 30
Minutes. To access LCD Off Timeout:
1. Select LCD off Timeout item in LCD/Sound Menu
Figure 9 - 76 LCD off Timeout – LCD/Sound
2. Using either navigation key or numeric keys select LCD off timeout minutes.
3. Press OK, will set the value and status message displayed as ―Power saver timeout
set‖
9.2.4.4 DATE/TIME
The Date/Time menu allows user to set Date & Time of device. To access Date/Time:
1. Select Date/Time item in LCD/Sound Menu
Part # 430-4G-060-00-005 247

Figure 9 - 77 Date/Time – LCD/Sound
2. Press OK, will navigate user to Date/Time Menu.
9.2.4.4.1 Time
The Time options allow user to set time of device in format HH:MM: SS. To access Time:
1. Select Time item in Date/Time menu. Press OK.
Figure 9 - 78 Time – Date/Time
2. Using numeric keys set value for hour, minute and seconds.
3. Press OK, will set the device time and status message displayed.
9.2.4.4.1 Date
The Date options allow user to set date of device in format DD/MM/YYYY. To access Date:
Part # 430-4G-060-00-005 248
1. Select Date item in Date/Time menu. Press OK.
Figure 9 - 79 Date – Date/Time
2. Using numeric keys set value for date, month and year.
3. Press OK, will set the device date and status message displayed.
Part # 430-4G-060-00-005 249

9.3 SECURITY
The Security option allows user to set up different security settings for biometric,
communication, global and login.
To access the Security menu:

1. Using the navigation keys, select the Security icon.
2. Press OK. The Security screen is displayed.
Figure 9 - 80 Security Menu Icon
9.3.1 BIOMETRIC
The Biometric option allows you to set different Biometric security settings.
To access Biometric menu

Part # 430-4G-060-00-005 250

Figure 9 - 81 Security Menu
3. Using the navigation keys, select the Biometric Icon.

4. Press OK. The Biometric screen is displayed
Figure 9 - 82 Biometric Menu – Security
5. Duress Mode option allow you to set wiegand output setting for the Duress finger
detection while verification and identification.
6. Using navigation keys select Duress Mode in Biometric Menu, press OK.
Part # 430-4G-060-00-005 251

Figure 9 - 83 Duress Mode – Biometric
7. Using navigation keys select Enable/Disable

8. Press OK, will enable/disable the wiegand output setting of Duress and status
message displayed.
9. Password option allows you to enable/disable password verification on device.

10. Using navigation keys select Password in Biometric Menu, press OK.
Figure 9 - 84 Password – Biometric

12. Press OK, will enable/disable the Password verification and status message
displayed.
13. Biometric option allows you to enable/disable biometric verification on device.

14. Using navigation keys select Biometric in Biometric Menu, press OK.
Part # 430-4G-060-00-005 252

Figure 9 - 85 Biometric – Biometric

16. Press OK, will enable/disable the Biometric verification and status message
displayed.
17. Access Schedule option allows you to enable/disable access schedule on device.
18. Using navigation keys select Access Schedule in Biometric Menu, press OK.
Figure 9 - 86 Access Schedule – Biometric

20. Press OK, will enable/disable the Access Schedule and status message displayed.
21. CVE Mode option allows you to enable/disable custom verification entry mode on
device.
22. Using navigation keys select CVE Mode in Biometric Menu, press OK.
Part # 430-4G-060-00-005 253

Figure 9 – 87 CVE Mode – Biometric

24. Press OK, will enable/disable the CVE Mode and status message displayed.
9.3.2 COMMUNICATION
The Communication option allows you to set different communication security settings.
To access Communication menu

3. Using the navigation keys, select the Communication Icon.

4. Press OK. The Communication screen is displayed
Part # 430-4G-060-00-005 254

Figure 9 - 89 Communication Menu – Security
5. Security Connection option allows you to enable/disable SSL mode of

communication.
6. Using navigation keys select Secure Connection in Communication Menu, press
OK.
Figure 9 - 90 Secure Connection – Communication

8. Press OK, will enable/disable the SSL Mode and status message will be displayed.
9. Ethernet Security option allows you to enable/disable Ethernet security of device.

10. Using navigation keys select Ethernet Security in Communication Menu, press OK.
Part # 430-4G-060-00-005 255

Figure 9 - 91 Ethernet Security – Communication

12. Press OK, will enable/disable the Ethernet Security and status message will be
displayed.
13. Aux Port State option allows you to enable/disable communication over auxiliary port.
14. Using navigation keys select Aux Port State in Communication Menu, press OK.
Figure 9 - 92 Aux Port State – Communication

16. To disable the Aux Port State, device will ask the password.
17. To enable the Aux Port State, device will ask the password(It should be same
password which is used to disable AUX port)
18. Press OK, will enable/disable the Aux Port State and status message will be
displayed.
Part # 430-4G-060-00-005 256

9.3.3 GLOBAL
The Global option allows you to set security level for the device. For the device mode Verify,
you will be allowed to set Verify Security only. And for device mode Identify, you will be
allowed to set Identify Security too along with verify security. Security level for verify are Very
High, High, Medium, Low and Very Low. And the security levels for identify are Maximum,
Very High, High, Medium and Low
To access Global menu

3. Using the navigation keys, select the Global Icon.

4. Press OK. The Global Security screen is displayed
Figure 9 - 94 Global Security Menu – Security
Part # 430-4G-060-00-005 257

5. Verify Security option allows you to set different security level for action verify.
6. Using navigation keys, select Verify Security in Global Security Menu, press OK.
Figure 9 - 95 Verify Security – Global Security
7. Using navigation keys select security level from Very High, High, Medium, Low and
Very Low
8. Press OK, will set the Verify Security level and status message displayed.
9. Identify Security option enables when device mode is ‗Identify‘ and allows you to set
different security level for action identify.
10. Using navigation keys select Identify Security in Global Security Menu, press OK.
Figure 9 - 96 Identify Security – Global Security
11. Using navigation keys select security level from Maximum, Very High, High, Medium
and Low.
12. Press OK, will set the Identify Security level and status message displayed.
Part # 430-4G-060-00-005 258

9.3.4 LOGIN OPTIONS

The Login option allows you to set Device Security Option and Device Password. Login
options are ‗Users + Password‘, ‗Users + Password + Bio‘, ‗Admin + Password‘ and ‗Admin +
Password + Bio‘.
To access Login Options

Figure 9 - 97 Security Menu -
3. Using the navigation keys, select the Login Icon.

4. Press OK. The Login screen is displayed
Figure 9 - 98 Login Option Menu – Security
Part # 430-4G-060-00-005 259

5. Login Options allows you to set different login options for LCD.
6. Using navigation keys select Login Options in Login Menu, press OK.
Figure 9 - 99 Login Options – Login
7. Using navigation keys select login option from ‗Users + Password‘, ‗Users + Password
+ Bio‘, ‗Admin + Password‘ and ‗Admin + Password + Bio‘.
8. Press OK, will set device LCD login option and status message displayed.
9. Login Password allows you to set LCD login password.

10. Using navigation keys select Login Password in Login Menu, press OK.
Figure 9 - 100 Login Password – Login
11. Using numeric keys enter the password.

12. Press OK, will set/change device LCD password and status message displayed.
Part # 430-4G-060-00-005 260

9.3 INFORMATION
The Information menu allows you to view detailed information about the device settings. To
access the Information menu:
1. Using the navigation keys, select the Info icon.
Figure 9 -101 Information menu
2. Press OK. The Information menu is displayed.
9.3.1 DEVICE
To view basic device information:
1. Select the Device item in the Information menu.
Figure 9 -102 Information- Device Parameters
2. Press OK. The Device menu is displayed with Device Name selected item.
Part # 430-4G-060-00-005 261

Figure 9 -103 Information- Device Name
3. Press OK. It will show name of device.

Figure 9 -104 Information Device name
4. Press Esc to return to Device Name information menu item.

5. Use the Left and Right arrow keys to scroll through the menu. By pressing OK for
each line selected, it shows the pertinent device information. By pressing Esc you will
be returned to selected device information menu item.
Figure 9 -105 Information - Device Type
Part # 430-4G-060-00-005 262

Figure 9 -106 Information - Device Serial Number
6. Press Esc to return to the Information menu
9.3.2 TEMPLATE
To view template-related information:
1. Select the Template item in the Information menu.
Figure 9 -107 Information- Template Parameters
2. Press OK. The Template menu screen is displayed with Template Type item
selected.
Part # 430-4G-060-00-005 263

Figure 9 -108 Information – Template Type
3. Press OK. It will show Template Type.

Figure 9 -109 Information – Template Type
4. Press Esc to return to Template Type information menu item.

each line selected, it shows the pertinent template information. By pressing Esc you
will be returned to selected template information menu item.
Figure 9 -110 Information- Number of Templates Enrolled
Part # 430-4G-060-00-005 264

Figure 9 -111 Information – Maximum Templates
6. Press Esc to return to the Information menu.
9.3.3 COMMUNICATION
To view information about the device communication settings:
1. Select the Comm item in the Information menu.
Figure 9 -112 Information- Communication Parameters
2. Press OK. The Communication menu screen is displayed with IP item selected.
Figure 9 -113 Information – Device IP
Part # 430-4G-060-00-005 265

3. Press OK. It will show IP address of device.

Figure 9 -114 Information – Device IP
4. Press Esc to return to IP information menu item.

each line selected, it shows the pertinent template information. By pressing Esc you
will be returned to selected communication information menu item.
Figure 9 -115 Information – Device MAC Address
Figure 9 -116 Information – Serial Communication Baud Rate
Part # 430-4G-060-00-005 266

Figure 9 -117 Device screen with Device ID displayed
9.3.4 FIRMWARE
To view information about the device firmware:
1. Select the FW item in the Information menu.
Figure 9 -118 Information- Firmware Parameters
2. Press OK. The Firmware information screen is displayed with Version item selected.
Figure 9 -119 Information – Firmware Version
Part # 430-4G-060-00-005 267

3. Press OK. It will show version of device firmware.

4. Press Esc to return to Version information menu item.
9.4 TEMPLATE
The Template menu allows you to enrol (add), delete, verify, and edit user templates on the
device.
To access the Template menu:
1. Using navigation keys, select the Template icon.
Figure 9 -120 Main menu screen with Template icon selected
2. Press OK. Template menu screen is displayed.
9.4.1 ADD
User can enrol Finger Image or Card only enrollment can be performed through this
operation
9.4.1.1 ENROLL
To enroll (or add) a new user:
1. Select the Add item in the Template menu screen.
Part # 430-4G-060-00-005 268

Figure 9 -121 Template – Add Template
2. Press OK. The Enroll menu screen is displayed.

Figure 9 -122 Enroll Template
3. Select the Enroll item in the Enroll menu.

4. Press OK. The Enter Enroll ID screen is displayed.
Figure 9 -123 Enroll Template – Enter Id
Part # 430-4G-060-00-005 269

Figure 9 -124 Enroll Template – Enroll Id with Prox
5. Enter an Enroll ID for the new user. User can alternatively get Enroll Id through
external prox card reader. To use this functionality
I. Click Right arrow key
II. Device will ask to Swipe card
III. Pass wiegand through external prox card reader
NOTICE
Option for receiving Enroll Id through external prox card reader is
available only on 4G V-Station Lite(S) devices only.
6. Press OK. The new user is prompted to place a finger on the sensor and remove.
Figure 9 -125 Enroll Template – Place Finger
7. Quality and Content result of enrollment is displayed. If the quality is good, select
Accept and press OK.
Part # 430-4G-060-00-005 270

Figure 9 -126 Enroll Template - Enrollment Quality
If the enrollment quality is unacceptable, select Reject. Another attempt for finger scan
will be carried out.
8. If device is in Extended ID mode then it will allow entering Extended ID through Card
or Manually. In case of product types other than with Prox Cards, user will be allowed
to enter Extended Id Manually only.
Figure 9 -127 Enroll Template – Get Extended Id
Selecting Enter Manual will lead to the screen where user can enter Extended Id through
keypad
Figure 9 -128 Enroll Template – Enter Extended Id
Part # 430-4G-060-00-005 271

Selecting From Card option will ask user to swipe the card. Swiping the card will receive
Extended ID from the card.
9. Press the OK key. The Enroll User Data menu is displayed with Admin Level item
selected.
Figure 9 -129 Enroll Template –Enter User Id
10. Press the OK key and then use Left or Right keys to select Admin Level of User.
11. Press Enter key to return to Admin Level menu item. Press Right key to select Index
menu item. Press Enter key to enter index of the enrollment.
Figure 9 -130 Enroll Template – Provide Index
12. After selecting Index press Enter key to return to Index menu item. Press Right key to
select Password menu item. Press Enter key to enter password for the enrollment.
Part # 430-4G-060-00-005 272

Figure 9 -131 Enroll Template – Provide Password
13. After entering password press Enter key to return to Index menu item. Press Right
key to select CSN menu item, if device is with Prox Card or Smart Card functionality.
By pressing Enter key device will show current CSN for the template. Again pressing
Enter key will show the options to enter new CSN. User can enter new CSN through
Card or Manually.
Figure 9 -132 Enroll Template – Enter CSN
CSN from the card.
Selecting Enter Manual will lead to the screen where user can enter CSN through
keypad
Part # 430-4G-060-00-005 273

Figure 9 -133 Enroll Template – Enter CSN Manually
14. After entering CSN, by pressing Enter key device will ask for selecting Card type for
given CSN. Five options are available as below.
I. Prox
II. MiFare
III. MiFare +
IV. iCLASS
V. DESFire
15. After entering Card Type press Enter key to return to CSN menu item. Press Right
key to select Save to menu item. There are 3 options available as below.
VI. Device
VII. Smart Card
VIII. Device + Smart Card
Smart Card options are available on Smart Card product only.
Figure 9 -134 Enroll Template - Save To
Part # 430-4G-060-00-005 274

16. Press OK button to store enrollment on device and smart card. Enter Site Key is
displayed.
Figure 9-135 Enroll Template – Enter Site Key
17. Enter valid site key and press OK button.
NOTICE
From LCD keypad, reader is allowed to enter numeric site key only
with maximum length of 15 numeric characters.
Figure 9-136 Enroll Template – Place Smart Card
If entered site key is valid, reader is displayed Place Smart Card and Hold Smart Card and
then Remove Smart Card.
Figure 14-137 Enroll Template – Status Message
Part # 430-4G-060-00-005 275

18. . A status message is displayed.
NOTICE
During enrollment or editing the enrollment, CSN will be asked in 4G
V-Station Lite(S,P), 4G V-Station Lite(S,P,NW), 4G V-Station Lite(S,O),
4G V-Station Lite(S,O,NW) products only.
9.4.1.2 CARD ONLY

To enroll prox or smart card with prox or smart card based devices
1. Select the Add item in the Template menu screen.
Figure 9 -138 Enroll Card
2. Press OK. The Enroll menu screen is displayed.
Part # 430-4G-060-00-005 276

Figure 9 -139 Enroll Card
3. Select the Card Only item in the Enroll menu

Figure 9 -140 Enroll Card – Select Card Only
4. Select the Card Only item in the Enroll menu. Press OK. The Enter Enroll ID screen
is displayed.
Figure 9 -141 Enroll Card - Enter Enroll ID
5. Enter an Enroll ID for the new user.

6. Press OK. Device will show Get CSN screen with the options to enter new CSN. User
can enter new CSN through card or manually.
Part # 430-4G-060-00-005 277

Figure 9 -142 Enroll Card –Provide CSN
CSN from the card.
keypad
Figure 9 -143 Enroll Card - Enter CSN
7. Press OK. After entering CSN, by press Enter key device will ask for selecting Card
type for given CSN. Five options are available as below.
I. Prox
II. MiFare
III. MiFare +
IV. iCLASS
V. DESFire
8. After entering Card Type press Enter key to store card record on the device. Status
message will be displayed on screen.
Part # 430-4G-060-00-005 278
NOTICE
This option is only available on prox or smart card based products
only.
9.4.2 EDIT
Template and Card only enrollment can be edited
9.4.2.1 EDIT ENROLLMENT

1. Select the Edit item in the Template menu screen.
Figure 9 -144 Edit Enrollment

Figure 9 -145 Edit Enrollment - Enter Enroll ID
3. Enter Id of enrolled user. Press OK. The Enter Template Index screen is displayed.
Part # 430-4G-060-00-005 279

Figure 9 -146 Edit Enrollment – Provide Index
4. Enter index of Id of enrolled user. Press OK. The Edit User Data screen is displayed
with Admin Level option selected.
Figure 9 -147 Edit Enrollment – Select Admin Level
5. Press the OK key and then use Left or Right keys to select Admin Level of User.
6. Press Enter key to return to Admin Level menu item. Press Right key to select Index
menu item. Press Enter key to enter index of the enrollment.
Figure 9 -148 Edit Enrollment - Provide Index
7. After selecting Index press Enter key to return to Index menu item. Press Right key to
select Password menu item. Press Enter key to enter password for the enrollment.
Part # 430-4G-060-00-005 280

Figure 9 -149 Edit Enrollment – Enter Password
8. After entering password press Enter key to return to Index menu item. Press Right
key to select CSN menu item, if device is with Prox Card or Smart Card functionality.
By pressing Enter key device will show current CSN for the template. Again pressing
Enter key will show the options to enter new CSN. User can enter new CSN through
Card or Manually.
Figure 9 -150 Edit Enrollment – Get CSN
CSN from the card.
keypad
Part # 430-4G-060-00-005 281

Figure 9 -151 Edit Enrollment - Provide CSN
9. After entering CSN, by pressing Enter key device will ask for selecting Card type for
given CSN. Five options are available as below.
I. Prox
II. MiFare
III. MiFare +
IV. iCLASS
V. DESFire
10. After entering Card Type press Enter key to return to CSN menu item. Press Right key
to select Save to menu item. There are 3 options available as below.
I. Device
II. Smart Card
III. Device + Smart Card
Smart Card options are available on Smart Card product only.
Figure 9 -152 Edit Enrollment – Store Template
Part # 430-4G-060-00-005 282

11. Press OK button to store edited enrollment on device. Status message will be
displayed on screen.
9.4.2.1 EDIT CARD ONLY ENROLLMENT

For editing card only enrollment:
1. Select the Edit item in the Template menu screen.
Figure 9 -153 Edit Card Only Enrollment

Figure 9 -154 Edit Card Only Enrollment – Enter Edit Id
Part # 430-4G-060-00-005 283

Figure 9 -155 Edit Card Only Enrollment – Enter Index
4. Enter index of Id of enrolled user. Press OK. Device will show Get CSN screen with
the options to enter new CSN. User can enter new CSN through card or manually.
Figure 9 -156 Edit Card Only Enrollment – Get CSN
CSN from the card.
keypad
Figure 9 -157 Edit Card Only Enrollment – Enter CSN
Part # 430-4G-060-00-005 284

5. Press OK. After entering CSN, by press Enter key device will ask for selecting Card
type for given CSN. Five options are available as below.
I. Prox
II. MiFare
III. MiFare +
IV. iCLASS
V. DESFire
6. After entering Card Type press Enter key to store edited card record on the device.
Device will show status message.
9.4.3 DELETE
9.4.3.1 DELETE TEMPLATE
To delete a template:
1. Select the Delete item in the Template menu screen.
Figure 9 -158 Delete Template
2. Press OK. Delete Menu screen is displayed. With option Delete Template option
selected.
Part # 430-4G-060-00-005 285


Figure 9 -160 Delete Template – Enter Delete Id
Figure 9 -161 Delete Template – Provide Template Index
5. Enter index of Id of enrolled user. Press OK. The Enter Delete Type screen is
displayed.
Part # 430-4G-060-00-005 286

Figure 9 -162 Delete Template – Provide Delete Type
NOTICE
User will be prompted select Delete Type only if, card record is
attached with biometric template. This option is available for 4G V-
Station Lite (S,P), 4G V-Station Lite (S,O), 4G V-Station Lite (S,P, NW),
4G V-Station Lite (S,O,NW)
Select Delete Type from the option ―Bio+Card‖, ―Bio Only‖ and ―Card Only‖.
i. Bio+Card: Device will delete biometric template along with card record.
ii. Bio Only : Device will delete only biometric template
iii. Card Only : Device will delete only card data
6. Press OK. The confirmation message is displayed.
Figure 9 -163 Delete Template – Confirm Deletion
7. Press OK. User template gets deleted as per selection of Delete Type and a status
message is displayed.
Part # 430-4G-060-00-005 287

9.4.3.2 DELETE ALL TEMPLATES

To delete all user/enrollments
1. Select the Delete item in the Template menu screen.
2. Press OK. Delete Menu screen is displayed. Select option Delete All Templates
option.
Figure 9 -165 Delete Template – Delete All Template
3. Press OK. The confirmation message is displayed.
Part # 430-4G-060-00-005 288

Figure 9 -166 Delete Template – Confirm Deletion
4. Press OK. All user templates get deleted and a status message is displayed on
screen.
9.4.4 VERIFY
To verify user/enrollment
1. Select the Verify item in the Template menu screen.
Figure 9 -167 Verify Template
2. Press OK. The Enter Verify ID screen is displayed.

3. Enter the Verify ID.
4. Press OK. The Enter Template Index screen is displayed.
5. Enter the Template Index.
6. Press OK.
7. Follow the prompts to place and remove a finger.
8. A status message is displayed, either granting or denying access.
Part # 430-4G-060-00-005 289

9.5 KEYPAD VERIFICATION

Verifications can be performed on the 4G Lite device by users without entering the Admin
menu.
To perform a keypad-initiated verification:
1. With the 4G Lite device in Idle state, enter the first number of the Template ID on the
V-Station keypad. The device displays a Verify ID message.
Figure 9 -168 Keypad Verification –Enter Verify Id
2. Enter the Template ID

3. Press OK.
4. Follow the prompts to place a finger and remove it. The device verifies the finger.
Figure 9 -169 Keypad Verification –Place finger
5. The device displays either an Accepted or a Rejected message.

6. The device returns to the Idle state.
Part # 430-4G-060-00-005 290

9.6 KEYPAD IDENTIFICATION

Identifications can be performed on the 4G device by users without entering the Admin
menu.
To perform a finger-initiated identification:
1. With the 4G Lite device in Idle state, place a finger on the device sensor. Once the
finger is detected, the device displays a Remove Finger message.
2. The device performs the identification process.
3. An Accepted or a Rejected message is displayed.
4. The device returns to the Idle state.
9.7 KEYPAD VERIFICATION WITH T&A MODE ON

In case T&A mode is enabled then user will be prompted for pressing F-Key. This
functionality is applied for verification as well as identification flows. Here sample verification
flow is illustrated.
1. With the 4G Lite device in Idle state, enter the first number of the Template ID on the
V-Station keypad. The device displays a Verify ID message.
2. Enter Template ID. Press OK.
3. Device will ask to press any F-key
4. Press any F-Key
5. Device will ask to place finger on sensor
6. Given a correct finger device will show successful verification message.
NOTICE
All the T & A flows are illustrated in Appendix
Part # 430-4G-060-00-005 291

Enrollment Best Practices
CHAPTER 10 - ENROLLMENT BEST

PRACTICES
CHAPTER OVERVIEW
This chapter outlines the recommended procedures to follow when enrolling users to assure
trouble-free biometric recognition. It also presents information on troubleshooting enrollment
problems.
L-1 Identity Solutions devices can perform enrollments from the front panel or through
SecureAdmin Lite. This section details specifics on enrollments in general, using the
SecureAdmin Lite workflow as a guide
10.1 FINGERPRINT ENROLLMENTS

Operating L-1 Identity Solutions devices is simple; a few basic guidelines should be followed
consistently to ensure trouble-free operation. The following sections describe recommended
best practices.
NOTICE
L-1 Identity Solutions recommends wiping the sensor surface with a

dry soft cloth between enrollments to avoid dirt build-up and to
ensure the best possible image quality. For devices with feature
optical sensors, L-1 Identity Solutions recommends performing
enrollments under normal indoor lighting conditions and not in the
vicinity of strong light sources such as direct sunshine or high-power
lamps.
This section gives general information about preferred fingers for enrollment and guidance for
finger placement.
10.1.1 SUGGESTED FINGERS

Use the index, middle or ring fingers as first preference. Avoid using thumb and little finger
since they are typically awkward to position on the sensor consistently.
Part # 430-4G-060-00-005 292

Figure 10-1 Suggested Fingers
10.1.2 CONSISTENT FINGER PLACEMENT

Consistent finger placement contributes heavily to trouble-free finger-scan recognition. The L-
1 Identity Solutions Ridge-Lock system help promote consistent finger positioning.
The following sequence of pictures shows the recommended finger placement procedure:
1. Wait for the amber LED to illuminate.
Figure 10-2 Amber LED
2. With the fingertip raised, rest the fingertip on the Ridge-Lock.

Figure 10-3 Fingertip on Ridge-Lock
Part # 430-4G-060-00-005 293

3. Slide the finger forwards across the Ridge-Lock, while keeping the fingertip raised so as
to not touch the sensor.
Figure 10-4 Slide Finger Across Ridge-Lock
4. Position the finger so that the Ridge-Lock sits in the indentation between the first and
second segments (distal and middle phalanges).
Figure 10-5 Position Joint on Ridge-Lock
5. Lower the finger onto the sensor and apply moderate pressure, as if pressing a computer
key. Too much pressure might cause the fingerprint to smudge. If too little pressure is
applied, the sensor might not recognize the presence of a finger.
Figure 10-6 Apply Correct Pressure
6. Keep the finger on the sensor until the top LED turns green.
Part # 430-4G-060-00-005 294

Figure 10-7 Wait for Green LED
7. Lift the finger up and off the sensor.

Figure 10-8 Lift Finger Up and Off
8. Have users practise this procedure a few times before enrollment so that they can have a
feel for how they should use the device on a daily basis. The goal is to have consistent
placement so the device sees approximately the same information each time.
Part # 430-4G-060-00-005 295

10.1.3 PROPER FINGER ORIENTATION

Always try to cover the entire area of the sensor with the fingertip so as to provide the most
information (refer to Figures 10-9 through 10-12).
Figure 10-9 Correct Placement
Figure 10-10 Incorrect Placement
Place the finger as close to the center position of the sensor as possible to increase the
acceptance rate.
Part # 430-4G-060-00-005 296

Figure 10-11 Place Finger Close to Center
Finger rotation should always be kept to a minimum during enrollment, verification, and
identification.
Figure 10-12 Do Not Rotate Finger
10.1.4 CENTERING THE CORE

A finger core is the area located within the innermost recurving ridge. Normally, it is located in
the middle of the finger. When enrolling, place the finger on the sensor so that the entire core
can clearly be seen by the sensor. In the example, the red dots represent the centers of the
cores. Every attempt should be made to ensure that the core is positioned in the center of the
captured image.
Figure 10-13 Finger Cores
Part # 430-4G-060-00-005 297

10.2 FINGER PLACEMENT FEEDBACK

The Finger Placement Feedback (FPF) feature allows the administrator to direct users in
correct finger placement during enrollment and helps the user to learn the correct placement
for everyday use. The FPF feature helps an administrator know when an enrolling user has
positioned the core on the scanning surface optimally.
Without this feature, an administrator has to try to recognize the core visually and then make
a judgement call as to whether the placement was optimal. FPF also allows the fingerprint
image to remain hidden to add to personal biometric privacy.
Users are provided the opportunity to enable FPF only at the time of installation. Users can
revert back to the conventional finger image display aspect only by re-installing SecureAdmin
Lite and deselecting the FPF option.
When FPF is enabled, anywhere a scan result is displayed in SecureAdmin Lite, a cross-hair
is displayed instead of actual fingerprint data. The cross-hair represents the core of the
fingerprint scan.
10.2.1 TROUBLESHOOTING ENROLLMENT PROBLEMS USING FPF

The FPF function is shown as a square within a square. The outer red square represents the
boundaries of the scanning device. The inner green square represents the optimal region in
which the core should appear.
The coordinates of the core are shown as two intersecting lines drawn on the FPF screen. If
the lines are displayed in green, the intersection lies within the optimal area. If one or both
lines are displayed in red, the optimal point has not been found.
The administrator can use the FPF to determine if the finger needs to be repositioned to
improve the scan.
While the Quality and Content scores indicate a passable finger scan but with FPF, the
administrator has the information to try to improve (in this case, the Quality score) without
depending on trial and error.
The administrator should consider the Quality and Content scores and the FPF when
deciding whether to accept a finger scan for enrollment.
If either the Quality or the Content scores are low, FPF lines are displayed in red, to show
that there is an issue, even if one or both are within the target inner square.
How can the FPF help to improve the Quality and Content scores? It is possible that poor
Quality or Content might be a result of insufficient information to make an accurate
determination of core location. Using all three scores, the administrator can decide how best
to improve the finger scan. Here are several things an administrator can check:
 Is the finger is centered on the scanning surface (and the FPF is accurate)?
Part # 430-4G-060-00-005 298

 Is the user is pressing down firmly enough to make good contact?
 Does the finger meet the guidelines for correct placement?
 Is the finger positioned on the Ridge-Lock correctly?
 Is the finger rotated?
 Is the finger placed flat?
 Is the finger centered?
 Does the finger have dry skin?
 Is the sensor window clean?
 Should an alternative finger be used?
Figure 10-14 FPF Function
Part # 430-4G-060-00-005 299

Backup and Restore Database
CHAPTER 11 - BACKUP AND RESTORE

DATABASE
CHAPTER OVERVIEW
This chapter details how to create backup of any SecureAdmin Lite database using various
scheduler settings. Also the utility allows to restore the previously backed up database .This
utility is installed along with SecureAdmin Lite Server installation.
Part # 430-4G-060-00-005 300

11.1 BACKUP SETTINGS OF SECUREADMIN LITE DATABASE

11.1.1 BACKUP SETTINGS
1. Navigate to Start Menu >> Bioscrypt >> SecureAdmin Lite Server >> Click on
DBBackupRestore or double click on DBBackupRestore on desktop.
Figure 11-1 Backup Settings
2. On the Backup tab, in the backup settings pane, enter the information for the following
fields
Part # 430-4G-060-00-005 301

 Server Name - Click on the dropdown box. It will be populated with the list of all
the available SQL Servers at Local path and across network. Select any SQL
Server for which backup is to be taken.
 Windows Authentication - User can check the checkbox for Windows
Authentication if the backup is to be taken for the DB Server which is available at
the local path.
 User Name - Provide the correct username to connect to SQL Server selected in
Server Name.
 Password – Provide the correct password to connect to SQL Server selected in
Server Name.
 Backup Database Name - After providing correct credentials, clicking on Refresh
button will list all the available db instances for the selected Server name. Select
the DB Instance for which backup is to be taken.
 Backup Folder Name – User can browse the path for storing the backup (.bak)
file, by clicking on Browse button. Please note that browse button will be enabled
only if the backup is to be taken for the DB Server which is available at the local
path.
3. Click on Back Up. Utility will start taking backup of the database and store the backup
file at <SQL Server Installation directory>\MSSQL\Backup. The backup file will be
named as <DB Instance name>_<Date>_<Time>.bak
Figure 11-2 Backup path for SQL Server 2008
Figure 11-3 Backup path for SQL Server 2005
Part # 430-4G-060-00-005 302

11.1.2 SCHEDULER SETTINGS

 Scheduler Task - Database backup can be performed by Scheduler on daily and
weekly basis. User can select either of the 2 options.
 Start Time - User can provide start time for the utility to start taking the backup of the
specified SA Lite DB through backup settings.
 Week Day – If user selects Scheduler task as ―Weekly‖, he\she can select any day in a
week to perform backup of the specified database.
 User name – Provide the correct User name to connect to SQL Server.
 Password – Provide the correct Password to connect to SQL Server.
After providing Scheduler Settings, user can click on ―Save Settings‖ button. Once the
settings are saved, scheduler will automatically perform back up operation as per the defined
schedule on daily\weekly basis.
Clicking on Close button or ―X‖ button on the top right corner will close the utility.
Please Note, in order to successfully perform backup operations, respective SQL Server
services should be running.
11.2 RESTORING SECUREADMIN LITE DATABASE

11.2.1 RESTORE SETTINGS
1. Navigate to Start Menu >> Bioscrypt >> SecureAdmin Lite Server >> Click on
DBBackupRestore or double click on DBBackupRestore on desktop.
Part # 430-4G-060-00-005 303

Figure 11-4 Restore Settings
2. On the Restore tab, in the restore settings pane, enter the information for the following
fields
 Server Name - Click on the dropdown box. It will be populated with the list of all
the available SQL Servers at Local path and across network. Select the SQL
Server for which restore operation is to be performed.
 Windows Authentication - User can check the checkbox for Windows
Authentication if the restore is to be done for the DB Server which is available at
the local path.
 User Name - Provide the correct username to connect to SQL Server selected in
Server Name.
Part # 430-4G-060-00-005 304

 Password – Provide the correct password to connect to SQL Server selected in

Server Name.
 Backup Database Name - After providing correct credentials, clicking on Refresh
button will list all the available database instances for the selected Server name.
Select the DB Instance which is to be restored.
 Backup File Path – Click on the Browse button. It will directly open the default
backup directory for the selected Server. Select the .bak file which you want to
restore. Click on Restore button.
3. Click Restore. In order to perform restore operation, the utility will restart the
SecureAdmin Lite server service (if the service is running). It will ask for confirmation
from user. Clicking on Yes will restart the SecureAdmin Lite service and complete the
restore operation.
Figure 11-5 Restore operation to restart the SecureAdmin Lite service.
Part # 430-4G-060-00-005 305

Contact Information
CHAPTER 12 - CONTACT INFORMATION

The L-1 Identity Solutions team endeavours to resolve all inquiries from clients with
supported products in a timely fashion. Please visit our webpage for the most up to date
information, hours, contacts, and resources available for resolving your technical needs.
Please note that some services are provided un-der a support contract or warranty only.
Website: http://www.l1id.com/enterpriseaccess/support
North America: Support-EnterpriseAccess@L1ID.com
International: Support-Intl-EnterpriseAccess@L1ID.com
12.1 REGISTERING YOUR PRODUCT

Registering your L-1 products is quick and easy and entitles you to a wide range of benefits
such as notifications of product updates, newsletters, special offers, and invitations to L-1
Enter-prise Access Division events and training seminars.
Please use the following address to register: http://www.L1ID.com/register4G
Part # 430-4G-060-00-005 306

Appendix
APPENDIX
TIME AND ATTENDANCE WORKFLOW FOR 4G V-STATION LITE
PRODUCTS – T&A Mode “F-Key as Input” – Mandatory
Part # 430-4G-060-00-005 307

Appendix

PRODUCTS – T&A Mode “F-Key as Input” - Not Mandatory
Part # 430-4G-060-00-005 308

Appendix

PRODUCTS – T&A Mode “Fixed”
Part # 430-4G-060-00-005 309

Appendix

PRODUCTS – T&A Mode “Manual”
Part # 430-4G-060-00-005 310

Glossary and Acronyms
GLOSSARY
1:1 Mode - In 1:1 mode, a user enters his or her User ID first. Then the user is requested to
place a finger or enter a PIN. In 1:1 Mode, the user‘s scanned finger is matched against the
one specified by the user ID.
1:N Mode - In 1:N mode, a user places his or her finger on the device without entering an ID.
The device compares the user‘s scanned finger with the many enrolled fingers in its internal
database.
Admin/Administrator - A user who is authorized to manage the settings and user
information of a fingerprint \ finger vein reader. Administrators can enroll or delete users and
change device settings.
Core - A term used to describe an area of the finger-scan characterized by ridgelines with the
tightest curvature and most unique content. Although the entire finger-scan has significant
data, the "core" is the most data-intensive area and thus is extremely important to the
algorithm. Normally, the core is located in the middle of the fingerprint.
Duress Mode - A mode that offers users a way of indicating a duress situation (such as
being forced to open a door). The user verifies with a specially designated finger resulting in
an inverted Wiegand output that is detectable on certain Access Control Panels.
Finger Placement Feedback (FPF) - FPF is a feature that allows an administrator to direct
users in correct finger placement during enrollment and helps users learn correct placement.
The FPF feature helps an administrator to know when an enrolling user has positioned their
fingerprint core optimally on the scanning surface. Without this feature, the administrator has
to try to recognize the core visually and then make a judgment call as to whether the
placement was optimal. The FPF also allows the fingerprint image to remain hidden to add to
personal biometric privacy.
Finger Print Enrollment - The process of extracting features of a fingerprint image obtained
from a fingerprint sensor and saving them into the internal memory of a device. The
fingerprint data is called a fingerprint template.
Finger Scan - The image of a finger print that is captured by the sensor on finger print
devices.
Firmware - The set of programs contained permanently in a hardware device (as read-only
memory) that controls the unit.
Host Mode - The normal mode of operation when the device is waiting for a card to be
presented to the device.
Identification (Searching or 1:N) - The operation of Identifying a user by comparing a live
finger scan against all stored finger-scan records in a database to determine a match.
Part # 430-4G-060-00-005 311

Identification uses the finger scan only -- no cards or PINs. Identification is only available on
devices that are in 1:N mode.
Optical Sensor - A device that detects that detects the intensity or brightness of light.
Secugen sensors are used to create graphical representations of fingerprints.
Ridge Lock - Used to center the user‘s finger core for optimal scanning.
Single Door Access Control - The capability of controlling/monitoring all functions related to
a single entry/exit point.
Software - The set of programs associated with a computer system.
Template - A term used to describe the data that is stored during the enrollment process.
The data is a mathematical representation of the ridge pattern of the enrolled finger scan.
Users - The individuals that use a hardware system.
User Groups - The sets of users grouped together in a system (usually by the similarity of
the functions they perform).
Verification (Authentication or 1:1) - The operation of confirming a user is who he claims to
be by com-paring a live finger scan image against a stored fingerprint template. The result
(pass or fail) that is re-turned is based on whether the score is above a pre-defined threshold
value. Some type of credential (PIN, prox card, smart card, etc.) is necessary to initiate the
biometric verification.
Part # 430-4G-060-00-005 312

Acronyms and Abbreviations

These acronyms and abbreviations are used in this document:
FPF Finger Placement Feedback

IP Internet Protocol
TFT Thin Film Transistor
LED Light Emitting Diode
TCP Transmission Control Protocol
USB Universal Serial Bus
Part # 430-4G-060-00-005 313


4G Lite Operator Manual

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

4G Lite Operator Manual

Uploaded by

Copyright:

Available Formats

Copyright

THIS PUBLICATION COULD INCLUDE TECHNICAL INACCURACIES OR

CHAPTER 1 - INTRODUCTION ...................................................................................................................................... 16

CHAPTER 2 - MANAGING USERS ................................................................................................................................. 24

2.8 DEPARTMENTS TAB .................................................................................................................................................... 44

CHAPTER 3 - MANAGING NETWORK SETTINGS .................................................................................................... 47

3.5.11.7 ACTIVATE WIEGAND OUTPUT ......................................................................................................................... 93

CHAPTER 4 - ENROLLING USERS .............................................................................................................................. 116

CHAPTER 5 - MANAGING SMART CARDS ............................................................................................................... 133

5.1.2 CONFIGURE CARD LAYOUT ................................................................................................................................. 143

CHAPTER 6 - BROADCASTING SETTINGS ............................................................................................................... 160

CHAPTER 7 - MANAGING LOGS ................................................................................................................................. 173

CHAPTER 8 - MENU BAR COMMANDS ..................................................................................................................... 182

8.1.1 SIGN IN AS ................................................................................................................................................................. 183

CHAPTER 9 - FRONT PANEL OPERATION ............................................................................................................... 202

9.2.2.1.1 Firmware ............................................................................................................................................................... 228

CHAPTER 10 - ENROLLMENT BEST PRACTICES .................................................................................................. 292

CHAPTER 11 - BACKUP AND RESTORE DATABASE ............................................................................................. 300

CHAPTER 12 - CONTACT INFORMATION ................................................................................................................ 306

APPENDIX ......................................................................................................................................................................... 307

GLOSSARY ........................................................................................................................................................................ 311

ACRONYMS AND ABBREVIATIONS .......................................................................................................................... 313

Figure 1-1 HID Prox Card ...................................................................................................................................................... 20

Figure 3-12 SecureAdmin Lite Network Tree ........................................................................................................................ 57

Figure 7-22 Help Menu ........................................................................................................................................................ 200

Figure 9 - 50 Audio – File Transfer...................................................................................................................................... 231

Figure 9 -102 Information- Device Parameters .................................................................................................................... 261

Table 1-1 Template Support Comparison .............................................................................................................................. 19

1.1 TEMPLATE SUPPORT

 1:500 Searching Template (.tms)

 User Record (.vur)

 Biometric User Record (.bur)

1.1.1 1:1 TEMPLATE OR 348-BYTE TEMPLATES

 Enrollment data-This is data pertaining only to a particular finger. It is a section

1.1.2 1:500 SEARCHING TEMPLATES

1.1.3 USER RECORDS

 Enrollment data-This is data pertaining only to a particular finger. It is a

1.1.4 BIOMETRIC USER RECORDS

 Enrollment data-This is data pertaining only to a particular finger. It is a section

1.1.5 CARD ONLY RECORD

1.1.6 TEMPLATE SUPPORT SUMMARY

Card Only Devices

1.2 PROXIMITY CARDS

 Command Cards (Enroll or Delete).

1.2.1 COMMAND CARDS

 Delete command cards.

Command cards must be created with the SecureAdmin Lite software.

1.3 SMART CARDS

1.4 SECUREADMIN LITE APPLICATION

1.4.2 SECUREADMIN LITE MAIN SCREEN

1.3.2.1 QUICK ACCESS PANEL

 Network - Register Devices, Access Device Settings

1.3.2.2 MENU BAR

CHAPTER 2 - MANAGING USERS

2.1 MANAGING USERS

2.2 USERS TAB

2.2.1 TO FILTER BY USER

2.2.2 TO ADD A USER

It is recommended that users are added before enrollment.

2.3 MANAGING TEMPLATES

Figure 2-3 Templates on Device

2.3.1 VIEWING TEMPLATES ON A DEVICE

2.3.1.1 FILTER BY TEMPLATE DETAILS