iCLASS SE CP1000 Desktop Encoder Quick Start Gudie · A variety of sample cards and credential...

8
QUICK START GUIDE hidglobal.com An ASSA ABLOY Group brand This Quick Start Guide is for informational purposes only. HID makes no warranties, expressed or implied, in this summary. Company, product names and data used in sample output are fictitious. Specifications are subject to change without notice. © 2014 - 2017 HID Global Corporation/ASSA ABLOY AB. All rights reserved. HID, the HID Brick Logo, ICLASS, ICLASS SE, OMNIKEY and SEOS are the trademarks or registered trademarks of HID Global in the U.S. and/or other countries. MIFARE, MIFARE DESFire, and MIFARE DESFire EV1 are registered trademarks of NXP B.V. and are used under license. All other trademarks, service marks, and product or service names are trademarks or registered trademarks of their respective owners. iCLASS SE® CP1000 Desktop Encoder PLT-01068 Rev B.2 Parts List 1 - CP1000 Desktop Encoder (Part No. OMNIKEY 5427UE). 1 - Installation Guide (OMNIKEY Smart Card Readers). 1 - HID USB Flash Drive. Asure ID CP1000 Edition Desktop Application. Supporting Technical Documents. Encoder Configuration Package (*.ise file) which includes the H10301 format, media key sets, and reader configuration key sets. A variety of sample cards and credential credits (see below). Included Sample Cards QTY P/N DESCRIPTION 1 0501500295-READER Reader Data Configuration Applet 1 0501500295-ELITE iCLASS Elite Prep Transport 1 2000PCCNN-LEGACY iCLASS Legacy Transport 2 2000CGGNN iCLASS 2K 2 2003CGGNN iCLASS 32K 2 3000VGGNN iCLASS SE 2K 2 3003VGGNN iCLASS SE 32K 3 5005VGGNN iCLASS Seos 16K 2 1430NGGNN MIFARE Classic 1K 2 1440NGGNN MIFARE Classic 4K 2 1450CNGGNN MIFARE DESFire EV1 8K 2 1386NGGNB HID Prox Included Credential Credits QTY P/N DESCRIPTION 100,000 CRDT-K0 HID Prox Credential - Access Control 100,000 CRDT-A0 iCLASS Credential - Access Control 100,000 CRDT-A3 iCLASS SE Credential - Access Control 500,000 CRDT-A5 iCLASS (SE) Credential - Custom Data 30 CRDT-D3 Seos Credential - Access Control 30 CRDT-D5 Seos Credential - Custom Data 100,000 CRDT-B0 HID MIFARE Classic Credential - Access Control 100,000 CRDT-B3 HID MIFARE Classic Credential - Access Control (SIO) 500,000 CRDT-B5 HID MIFARE Classic Credential - Custom Data 100,000 CRDT-F5 Third Party MIFARE Classic Credential - Custom Data 100,000 CRDT-C3 HID MIFARE DESFire Credential - Access Control (SIO) 500,000 CRDT-C5 HID MIFARE DESFire Credential - Custom Data 100,000 CRDT-G5 Third Party MIFARE DESFire Credential - Custom Data 30 CRDT-J0 Configuration Card Generation The iCLASS SE® CP1000 Desktop Encoder provides on-site access control and user data programming onto iCLASS®, iCLASS SE, iCLASS Seos®, MIFARE®, and MIFARE DESFire EV1® credentials for iCLASS SE readers. The CP1000 Desktop Encoder provides a unified solution for encoding credentials, regardless of the location of the credential data storage. Furthermore, the CP1000 Desktop Encoder provides the facility a means to configure readers with Secure Keys matching those in use on the programmed credentials. Perform configuration through the creation of configuration cards. Each CP1000 Desktop Encoder provides customers the ability to encode credentials locally without disclosing keys to a third party. Provided is a secure and user friendly environment for a customer to manage their custom keys and reader configuration. Users also interact with the Managed Service Portal to download and update applets for new credential formats. Provided with the CP1000 Desktop Encoder is everything you need to manage the system. Included in the CP1000 Desktop Encoder kit is the application software, desktop reader, sample credentials, and supporting documentation. The CP1000 Desktop Encoder software has a built-in configuration wizard that simplifies the complex task of managing keys and configuring readers. The iCLASS SE CP1000 Desktop Encoder provides a scalable solution supporting manual encoding for a few cards, expanding to mass production by utilizing printers and certificate managing systems from various suppliers. This Quick Start Guide provides all information required to install and setup the CP1000 Desktop Encoder.

Transcript of iCLASS SE CP1000 Desktop Encoder Quick Start Gudie · A variety of sample cards and credential...

QUICK START GUIDE

hidglobal.com An ASSA ABLOY Group brand

This Quick Start Guide is for informational purposes only. HID makes no warranties, expressed or implied, in this summary. Company, product names and data used in sample output are fictitious. Specifications are subject to change without notice.

© 2014 - 2017 HID Global Corporation/ASSA ABLOY AB. All rights reserved. HID, the HID Brick Logo, ICLASS, ICLASS SE, OMNIKEY and SEOS are the trademarks or registered trademarks of HID Global in the U.S. and/or other countries. MIFARE, MIFARE DESFire, and MIFARE DESFire EV1 are registered trademarks of NXP B.V. and are used under license. All other trademarks, service marks, and product or service names are trademarks or registered trademarks of their respective owners.

iCLASS SE®CP1000 Desktop EncoderPLT-01068 Rev B.2

Parts List1 - CP1000 Desktop Encoder (Part No. OMNIKEY 5427UE).1 - Installation Guide (OMNIKEY Smart Card Readers).1 - HID USB Flash Drive.

• Asure ID CP1000 Edition Desktop Application.• Supporting Technical Documents.• Encoder Configuration Package (*.ise file) which

includes the H10301 format, media key sets, and reader configuration key sets.

A variety of sample cards and credential credits (see below).

Included Sample Cards

QTY P/N DESCRIPTION1 0501500295-READER Reader Data Configuration Applet1 0501500295-ELITE iCLASS Elite Prep Transport1 2000PCCNN-LEGACY iCLASS Legacy Transport2 2000CGGNN iCLASS 2K2 2003CGGNN iCLASS 32K2 3000VGGNN iCLASS SE 2K2 3003VGGNN iCLASS SE 32K3 5005VGGNN iCLASS Seos 16K2 1430NGGNN MIFARE Classic 1K2 1440NGGNN MIFARE Classic 4K2 1450CNGGNN MIFARE DESFire EV1 8K2 1386NGGNB HID Prox

Included Credential Credits

QTY P/N DESCRIPTION100,000 CRDT-K0 HID Prox Credential - Access Control100,000 CRDT-A0 iCLASS Credential - Access Control100,000 CRDT-A3 iCLASS SE Credential - Access Control500,000 CRDT-A5 iCLASS (SE) Credential - Custom Data

30 CRDT-D3 Seos Credential - Access Control30 CRDT-D5 Seos Credential - Custom Data

100,000 CRDT-B0 HID MIFARE Classic Credential - Access Control

100,000 CRDT-B3 HID MIFARE Classic Credential - Access Control (SIO)

500,000 CRDT-B5 HID MIFARE Classic Credential - Custom Data

100,000 CRDT-F5 Third Party MIFARE Classic Credential - Custom Data

100,000 CRDT-C3 HID MIFARE DESFire Credential - Access Control (SIO)

500,000 CRDT-C5 HID MIFARE DESFire Credential - Custom Data

100,000 CRDT-G5 Third Party MIFARE DESFire Credential - Custom Data

30 CRDT-J0 Configuration Card Generation

The iCLASS SE® CP1000 Desktop Encoder provides on-site access control and user data programming onto iCLASS®, iCLASS SE, iCLASS Seos®, MIFARE®, and MIFARE DESFire EV1® credentials for iCLASS SE readers. The CP1000 Desktop Encoder provides a unified solution for encoding credentials, regardless of the location of the credential data storage. Furthermore, the CP1000 Desktop Encoder provides the facility a means to configure readers with Secure Keys matching those in use on the programmed credentials. Perform configuration through the creation of configuration cards.

Each CP1000 Desktop Encoder provides customers the ability to encode credentials locally without disclosing keys to a third party. Provided is a secure and user friendly environment for a customer to manage their custom keys and reader configuration. Users also interact with the Managed Service Portal to download and update applets for new credential formats.

Provided with the CP1000 Desktop Encoder is everything you need to manage the system. Included in the CP1000 Desktop Encoder kit is the application software, desktop reader, sample credentials, and supporting documentation. The CP1000 Desktop Encoder software has a built-in configuration wizard that simplifies the complex task of managing keys and configuring readers.

The iCLASS SE CP1000 Desktop Encoder provides a scalable solution supporting manual encoding for a few cards, expanding to mass production by utilizing printers and certificate managing systems from various suppliers.

This Quick Start Guide provides all information required to install and setup the CP1000 Desktop Encoder.

QUICK START GUIDE

hidglobal.com An ASSA ABLOY Group brand

iCLASS SE CP1000 Desktop Encoder

System RequirementsType Microsoft Windows 7 (32-bit and 64-bit)

Microsoft Windows 8 (32-bit & 64-bit)Microsoft Windows 8.1Microsoft Windows 10 (32-bit & 64-bit)

Computer/Processor 300 MHz or higher Pentium-compatible CPUUSB ports

Memory 64-bit systems: 2 GB of RAM 32-bit systems: 1 GB of RAM or higher

Hard Disk 500 MB free space

Display VGA or higher resolution monitor

Software Environment Latest Operating System service pack

User Permissions Local machine administrative rights for installation and secure database administrationInternet access for license activation (or phone for phone activation)

1 Getting StartedAdministrative PrivilegesYou must have Administrator privileges to complete the Installation and Startup procedures. To verify you are an Administrator on the system:

1. Go to Control Panel > User Accounts > Manage User Accounts.

2. Under Users for this computer, locate your User Name and verify the associated Group column displays Administrators.

Initial Setup1. Plug in the CP1000 Desktop Encoder to a USB port on your PC.

2. Plug in the HID USB Flash Drive to a 2nd USB port on your PC.

3. From the USB flash drive, install the Asure_ID_Setup application file located in the Install folder. Follow the Installation Wizard to install the application. If prompted, allow the application to make changes to the computer.

4. Launch the Asure ID application and perform the configuration tasks.

Note: Log on credentials: Username: admin Password: admin.

Note: A Windows error may appear indicating that not all of the all drivers were installed correctly. This is expected as the encoder has a chip that appears as a smart card and if Smart Card PnP is enabled, Windows will try to locate a driver for this chip which cannot be located.

2 Initial ConfigurationChange Default Administrative KeysIt is important to change the default Administrative Keys during initial setup for security reasons.

1. During the initial installation, the Unsecured Encoder! window will appear, click Yes to change the keys.

QUICK START GUIDE

hidglobal.com An ASSA ABLOY Group brand

iCLASS SE CP1000 Desktop Encoder

2. The Provide New Admin Keys for Encoder window is displayed. This window gives three different options for changing the default Admin Keys:

• Manual Entry – this option allows you to move information from a previous encoder, or enter customer created keys. Manually enter your Admin Keys in the Auth Key, Privacy Key and Secure Channel Key fields and click OK to confirm.Note: Admin Keys must contain 32 characters.

• Randomly Generated Keys – this option will generate random keys. Click Generate Random Keys to have the software randomly generate keys. Click OK to confirm.

• Passphrase Generated Keys – this option allows you to enter a memorable passphrase (minimum of five characters). The software will then generate keys based on the passphrase. Enter your passphrase in the Passphrase field and click Generate Keys From Passphrase. Click OK to confirm.

3. A message is displayed prompting you to make a backup copy of your new Admin Keys. Click Yes to copy the new Admin Keys to the clipboard. IMPORTANT: Safely store the value of the admin keys for future reference as HID is unable to recover these keys if lost. If the admin keys are lost, the encoder will need to be sent to HID to be reset.

QUICK START GUIDE

hidglobal.com An ASSA ABLOY Group brand

iCLASS SE CP1000 Desktop Encoder

Enter the Asure ID CP1000 Edition License KeyThe Asure ID CP1000 Edition License Key is AV352-YNRV6E6G. The Admin password should be modified from the default values for security reasons.

1. Select Work Order Manager > File tab > Options.

2. Select the Licensing option.

3. Enter the License Key AV352-YNRV6E6G and click your activation option.

4. When the License Key is activated, the CP1000 Edition will display as shown below.

Change Default Admin PasswordThe Admin password should be modified from the default values for security reasons.

1. Select User Config > Home tab > Change Password.

2. Enter new and confirm password. Click OK.

QUICK START GUIDE

hidglobal.com An ASSA ABLOY Group brand

iCLASS SE CP1000 Desktop Encoder

Upload Encoder Configuration PackageThe following steps will load the required files (on the USB flash drive) on the CP1000 Desktop Encoder.

1. Go to Work Order Manager > File tab > Upload Encoder Configuration Package.

2. Locate the Credits and Keys folder, on the USB Flash drive. Load the .ise file included on the USB Flash drive.

3 Create Custom Keys1. To Create and Manage Keys go to Key Management > Custom Keys group.

2. Select Create Custom Key. Follow the instructions to create custom keys.For more information on managing keys, see the iCLASS SE CP1000 Desktop Encoder User Guide (PLT-01067).

4 Work Order ConfigurationManage Work Orders from Work Order Manager Application. Create and execute Work Orders to create, manage and encode user credentials for building access. See the iCLASS SE CP1000 Desktop Encoder User Guide (PLT-01067) or visit the HID Academy (https://www.hidglobal.com/training) for details and examples of this process.

QUICK START GUIDE

hidglobal.com An ASSA ABLOY Group brand

iCLASS SE CP1000 Desktop Encoder

5 Manage UsersManage Users from User Config > Home tab > Asure ID Users group. Create new users, remove users and save user profiles. See the iCLASS SE CP1000 Desktop Encoder User Guide for additional details.

To Add a User1. Click Add User.

2. In the New User window, select the User ID and Name fields and enter the user information.

3. Set the access level required for the user (Data Entry, iCLASS SE fields are drop-down lists).

6 Data BackupBackup the Asure ID database regularly to protect data. This local database contains Work Order data.

Note: HID recommends that you also export any custom keys that you have defined as these are not stored in the Asure ID database.

1. On your computer, locate the database files C:\ProgramData\HID Global\Asure ID folder.

2. Copy the database file to removable media (iCLASS_SE_Work_Order_Data.db).

3. Store the removable media in a safe location.

4. To restore, copy the database files to the original location above and restart the CP1000 Desktop application.

For additional reader configuration adjustments, contact Technical Support www.hidglobal.com/support.

QUICK START GUIDE

hidglobal.com An ASSA ABLOY Group brand

iCLASS SE CP1000 Desktop Encoder

7 Ordering InformationConfiguration CardsUse an Elite Prep Transport configuration card to place the master key onto readers in your system.

Use the other configuration cards to transfer media keys for all technology types, as well as reader configuration settings.

Part Number Model Description

CP1000D CP1000 iCLASS SE CP1000 Desktop Encoder

8 ReferencesReference Description

PLT-01067 iCLASS SE CP1000 Desktop Encoder User Guide

www.hidglobal.com/drivers/14993 OMNIKEY Workbench X86 (Windows 8, 7, x86)

https://www.hidglobal.com/training HID Academy training module: SE Encoder Self Paced Training Modules (available free of charge)

hidglobal.com An ASSA ABLOY Group brand

QUICK START GUIDE iCLASS SE CP1000 Desktop Encoder

This Quick Start Guide is for informational purposes only. HID makes no warranties, expressed or implied, in this summary. Company, product names and data used in sample output are fictitious. Specifications are subject to change without notice.

© 2014 - 2017 HID Global Corporation/ASSA ABLOY AB. All rights reserved. HID, the HID Brick Logo, ICLASS, ICLASS SE, OMNIKEY and SEOS are the trademarks or registered trademarks of HID Global in the U.S. and/or other countries. MIFARE, MIFARE DESFire, and MIFARE DESFire EV1 are registered trademarks of NXP B.V. and are used under license. All other trademarks, service marks, and product or service names are trademarks or registered trademarks of their respective owners.

HID Global

Americas & Corporate611 Center Ridge DriveAustin, TX 78758USASupport: 866-607-7339Fax: 949-732-2120

Asia Pacific19/F 625 King's RoadNorth Point, Island EastHong KongSupport: 852-3160-9833Fax: 852-3160-4809

Europe, Middle East & AfricaPhoenix RoadHaverhill, Suffolk CB9 7AEEnglandSupport: 44 (0) 1440 711 822Fax: 44 (0) 1440 714 840

For additional offices around the world, see www.hidglobal.com/contact/corporate-officesHID Global Technical Support: www.hidglobal.com/support