AXIS Camera Station Pro Secure Entry

Secure Entry is a component of AXIS Camera Station Pro. Use it to add devices and manage schedules. For more information, please see the AXIS Camera Station Pro User Manual.

If you add an Axis network door controller to your system, you can configure the access control hardware in AXIS Camera Station version 6.x or later.

For a complete workflow to set up Axis network door controller in AXIS Camera Station Pro Secure Entry, see Set up an Axis network door controller.

Workflow to configure access control

1. To edit the predefined identification profiles or create a new identification profile, see Identification profiles.

2. To use a custom setup for card formats and PIN length, see Card formats and PIN.

3. Add a door and apply an identification profile to the door. See Add a door.

4. Configure the door.

5. • Add a door monitor

   • Add emergency input

   • Add a reader

   • Add a REX device

6. Add a zone and add doors to the zone. See Add a zone.

The table below shows the minimum and recommended AXIS OS version for each AXIS Camera Station Pro version:

Go to Configuration > Access control > Doors and zones to get an overview and configure doors and zones.

• There are two zones: green zone and blue zone.

• There are three doors: green door, blue door, and brown door.

• The green door is an internal door in the green zone.

• The blue door is a perimeter door for the blue zone only.

• The brown door is a perimeter door for both the green zone and blue zone.

Create a new door configuration to add a door:

1. Go to Configuration > Access control > Doors and zones.

2. Click Add door and select a door type from the drop-down list.

3. Door types
   Door	A regular door with a door monitor that supports locks and readers. Requires a door controller.
   Wireless door	A door you can configure with ASSA ABLOY Aperio® wireless locks and communication hubs. For more information, see Add a wireless lock.
   Monitoring door	A door that can report whether it’s open or closed. For more information, see Add a monitoring door.
   Provisioned door	A door you can add as a placeholder in the system without the requirement of selecting the hardware for it.
   Floor	A door type for elevator control that authenticates access to elevator floors using card readers. For more information, see Add a floor for elevator control.

4. Enter a name for the door and select a door controller in the Device drop-down menu to associate with the door. The controller grays out when you can’t add another door, when it’s offline, or HTTPS isn’t active.

5. Click Next to go to the door configuration page.

6. In the Primary lock drop-down menu, select a relay port.

7. To configure two locks on the door, select a relay port from the Secondary lock drop-down menu.

8. Select an identification profile. See Identification profiles.

9. Configure the door settings. See Door settings.

10. Add a door monitor

11. Add emergency input

12. Add a reader

13. Add a REX device

14. Configure the security level. See Door security level.

15. Click Save.

Copy an existing door configuration to add a door:

1. Go to Configuration > Access control > Doors and zones.

2. Click Add door.

3. Enter a name for the door and select a door controller in the Device drop-down menu to associate with the door.

4. Click Next.

5. In the Copy configuration drop-down menu, select an existing door configuration. It shows the connected doors, and the controller grays out if it was configured with two doors or one door with two locks.

6. Change the settings if you want.

7. Click Save.

To edit a door:

1. Go to Configuration > Access control > Doors and zones > Doors.

2. Select a door in the list.

3. Click Edit.

4. Change the settings and click Save.

To remove a door:

1. Go to Configuration > Access control > Doors and zones > Doors.

2. Select a door in the list.

3. Click Remove.

4. Click Yes.

1. Go to Configuration > Access control > Door and Zones.

2. Select the door you want to edit.

3. Click Edit.

You can add the following security features to the door:

Two-person rule

The two-person rule requires two people to use a valid credential to gain access.

Double-swipe

The double-swipe allows a cardholder override the current state of a door. For example, they can use it to lock or unlock a door outside the regular schedule, which is more convenient than going into the system to unlock the door. Double-swipe does not affect an existing schedule. For example, if a door is scheduled to lock at closing time, and employee leaves for lunch break, the door will still lock according to the schedule.

You can configure the security level while you’re adding a new door, or you can do it on an existing door.

To add Two-person rule to an existing door:

1. Go to Configuration > Access control > Doors and zones.

2. Select the door you want to configure a security level for.

3. Click Edit.

4. Click Security level.

5. Turn on Two-person rule.

6. Click Apply.

To add Double-swipe to an existing door:

1. Go to Configuration > Access control > Doors and zones.

2. Select the door you want to configure a security level for.

3. Click Edit.

4. Click Security level.

5. Turn on Double-swipe.

6. Click Apply.

7. Apply Double-swipe to a cardholder.

8. 1. Open an Access Management tab.

   2. Click on the cardholder you want to edit and click Edit.

   3. Click More.

   4. Select Allow double-swipe.

   5. Click Apply.

AXIS Camera Station Pro Secure Entry supports the ASSA ABLOY Aperio® wireless locks and communication hubs. The wireless lock connects to the system via an Aperio communication hub connected to the door controller’s RS485 connector. You can connect 16 wireless locks to one door controller.

1. Access the door controller.

2. 1. Go to Configuration > Devices > Other devices.

   2. Open the web interface of the door controller connected to the Aperio communication hub.

3. Turn on AXIS Door Controller Extension.

4. 1. In the door controller web interface, go to Apps.

   2. Open AXIS Door Controller Extension context menu .

   3. Click Activate license with a key and select your license.

   4. Turn on AXIS Door Controller Extension.

5. Connect the wireless lock to the door controller through the communication hub.

6. 1. In the door controller web interface, go to Access control > Wireless locks.

   2. Click Connect communication hub.

   3. Enter a name for the hub and click Connect.

   4. Click Connect wireless lock.

   5. Select the lock address and capabilities for the lock you want to add and click Save.

7. Add and configure the door with the wireless lock.

8. 1. In AXIS Camera Station Pro Secure Entry, go to Configuration > Access control > Doors and zones.

   2. Click Add door.

   3. Select the door controller connected to the Aperio communication hub, select Wireless door as Door type.

   4. Click Next.

   5. Select your Wireless lock.

   6. Define the door sides A and B, and add sensors. For more information, see Doors and zones.

   7. Click Save.

Once you’ve connected the wireless lock you can see its battery level and status in the overview of doors.

A door monitor is a door position switch that monitors the physical state of a door. You can add a door monitor to your door and configure how to connect the door monitor.

1. Go to the door configuration page. See Add a door.

2. Under Sensors, click Add.

3. Select Door monitor sensor.

4. Select the I/O port you want to connect the door monitor to.

5. Under Door open if, select how the door monitor circuits are connected.

6. To ignore the state changes of the digital input before it enters a new stable state, set a Debounce time.

7. To trigger an event when an interruption in the connection between the door controller and the door monitor occurs, turn on Supervised input. See Supervised inputs.

A monitoring door is a door type that can show you if it’s open or closed. For example, you can use this on a fire safety door that doesn’t require a lock but where you need to know if the door is open.

A monitoring door is different from a regular door with a door monitor. A regular door with a door monitor supports locks and readers but requires a door controller. A monitoring door supports one door position sensor but only requires a network I/O relay module connected to a door controller. You can connect up to five door position sensors to one network I/O relay module.

To set up a monitoring door:

1. Install your AXIS A9210 and upgrade it with the latest version of AXIS OS.

2. Install the door position sensors.

3. In AXIS Camera Station Pro, go to Configuration > Access control > Doors and zones.

4. Click Add door.

5. Enter a name.

6. Under Type, select Monitoring door.

7. Under Device, select your network I/O relay module.

8. Click Next.

9. Under Sensors, click + Add and select Door position sensor.

10. Select the I/O that's connected to the door position sensor.

11. Click Add.

You can add and configure an emergency input to initiate an action that locks or unlocks the door. You can also configure how to connect the circuit.

1. Go to the door configuration page. See Add a door.

2. Under Sensors, click Add.

3. Select Emergency input.

4. Under Emergency state, select the circuit connection.

5. To ignore the state changes of the digital input before it enters a new stable state, set a Debounce time (ms).

6. Select what Emergency action to trigger when the door receives the emergency state signal.

You can configure a door controller to use two wired readers. Select to add a reader on one side or both sides of a door.

If you apply a custom setup of card formats or PIN length to a reader, you can see it in Card formats under Configuration > Access control > Doors and zones. See Doors and zones.

1. Go to the door configuration page. See Add a door.

2. Under one side of the door, click Add.

3. Select Card reader.

4. Select the Reader type.

5. To use a custom PIN length setup for this reader.

6. 1. Click Advanced.

   2. Turn on Custom PIN length.

   3. Set the Min PIN length, Max PIN length, and End of PIN character.

7. To use a custom card format for this reader.

8. 1. Click Advanced.

   2. Turn on Custom card formats.

   3. Select the card formats you want to use for the reader. If a card format with the same bit length is already in use, you must deactivate it first. A warning icon displays in the client when the card format setup is different from the configured system setup.

9. Click Add.

10. To add a reader to the other side of the door, do this procedure again.

For information on how to set up an AXIS Barcode Reader, see Set up AXIS Barcode Reader.

You can use the AXIS A4612 Network Bluetooth Reader to expand the wired door limits of Axis door controllers, which allow up to 16 of these readers to be assigned to their own door. Each reader can manage the door lock, Request-to-Exit (REX), and Door Position Switch (DPS).

Adding and using these readers does not require any additional licensing.

To add an AXIS A4612 Network Bluetooth Reader to a door:

1. Make sure you have paired the AXIS A4612 with the door controller. See Use AXIS Mobile Credential app as a Bluetooth credential.

2. Go to the door configuration page. See Add a door.

3. Under one side of the door, click Add, then Card reader.

4. Select IP reader and choose the paired AXIS A4612 from the drop-down menu. If this reader will be used for pairing credentials, mark it for pairing. Click Add.

5. In the Overview tab, change the identification profile. You can use the profiles Tap in app or Touch reader if you only have the AXIS A4612 attached to one side of the door and use a REX on the other.

It’s possible to use Axis network intercoms as IP reader in AXIS Camera Station Secure Entry.

Supported devices:

• AXIS A8207-VE Network Video Door Station with firmware 10.5.1 or later

• AXIS A8207-VE Mk II Network Video Door Station with firmware 10.5.1 or later

• AXIS I8116-E Network Video Intercom

You can select to add a request to exit (REX) device on one side or both sides of the door. A REX device can be a PIR sensor, REX button, or push bar.

1. Go to the door configuration page. See Add a door.

2. Under one side of the door, click Add.

3. Select REX device.

4. Select the I/O port that you want to connect the REX device to. If there is only one port available, it will be selected automatically.

5. Select what Action to trigger when the door receives the REX signal.

6. Under REX active, select the door monitor circuit connection.

7. To ignore the state changes of the digital input before it enters a new stable state, set a Debounce time (ms).

8. To trigger an event when an interruption in the connection between the door controller and the REX device occurs, turn on Supervised input. See Supervised inputs.

A zone is a specific physical area with a group of doors. You can create zones and add doors to the zones. There are two types of doors:

• Perimeter door: Cardholders enter or leave the zone through this door.

• Internal door: An internal door within the zone.

• Note

  A perimeter door can belong to two zones. An internal door can only belong to one zone.

1. Go to Configuration > Access control > Doors and zones > Zones.

2. Click Add zone.

3. Enter a zone name.

4. Click Add door.

5. Select the doors you want to add to the zone, and click Add.

6. The door is set as a perimeter door by default. To change it, select Internal door from the drop-down menu.

7. A perimeter door uses door side A as entrance to the zone by default. To change it, select Leave from the drop-down menu.

8. To remove a door from the zone, select it and click Remove.

9. Click Save.

To edit a zone:

1. Go to Configuration > Access control > Doors and zones > Zones.

2. Select a zone in the list.

3. Click Edit.

4. Change the settings and click Save.

To remove a zone:

1. Go to Configuration > Access control > Doors and zones > Zones.

2. Select a zone in the list.

3. Click Remove.

4. Click Yes.

You can add the following security feature to a zone:

Anti-passback

Prevents people from using the same credentials as someone who entered an area before them. It enforces that a person must first exit the area before they can use their credentials again.

You can configure the security level while you add a new zone, or you can do it on an existing zone. To add a security level to an existing zone:

1. Go to Configuration > Access control > Doors and zones.

2. Select the zone you want to configure a security level for.

3. Click Edit.

4. Click Security level.

5. Turn on the security features you want to add to the door.

6. Click Apply.

Supervised inputs can trigger an event when there is interruption in the connection to a door controller.

• Connection between the door controller and the door monitor. See Add a door monitor.

• Connection between the door controller and the reader that uses Wiegand protocols. See Add a reader.

• Connection between the door controller and the REX device. See Add a REX device.

To use supervised inputs:

1. Install end of line resistors as close to the peripheral device as possible according to the connection diagram.

2. Go to the configuration page of a reader, door monitor, or REX device, turn on Supervised input.

3. If you followed the parallel first connection diagram, select Parallel first connection with a 22 KΩ parallel resistor and a 4.7 KΩ serial resistor.

4. If you followed the serial first connection diagram, select Serial first connection, and select a resistor value from the Resistor values drop-down menu.

Connection diagrams

Parallel first connection

The resistor values must be 4.7 kΩ and 22 kΩ.

Serial first connection

The resistor values must be the same and within range 1-10 kΩ.

You can perform the following manual actions on doors and zones:

Reset

Returns to the configured system rules.

Grant access

Unlocks a door or zone for 7 seconds and then locks it again.

Unlock

Keeps the door unlocked until you Reset.

Lock

Keeps the door locked until the system grants a cardholder access.

Lockdown

No one gets in or out until you reset or unlock.

To perform a manual action:

1. Go to Configuration > Access control > Doors and zones.

2. Select the door or zone you want to perform a manual action on.

3. Click any of the manual actions.

An identification profile is a combination of identification types and schedules. You can apply an identification profile to one, or more, doors to set how and when a cardholder can access a door.

Identification types are carriers of the credential information necessary to access a door. Common identification types are tokens, personal identification numbers (PINs), fingerprints, facial maps, and REX devices. An identification type can carry one or more types of information.

Supported identification types: Card, PIN, REX, static QR, and dynamic QR.

Go to Configuration > Access control > Identification profiles to create, edit, or remove identification profiles.

There are five default identification profiles available for you to use as they are or edit as required.

Card

Cardholders must swipe the card to access the door.

Card and PIN

Cardholders must swipe the card and enter the PIN to access the door.

PIN

Cardholders must enter the PIN to access the door.

Card or PIN

Cardholders must swipe the card or enter the PIN to access the door.

QR

Cardholders must show the QR Code® to camera to access the door. You can use the QR identification profile for both static and dynamic QR.

License plate

Cardholders must drive towards the camera in a vehicle with an approved license plate.

Tap in app

Cardholders must tap the credential in the AXIS Camera Station Mobile App while standing in range of the Bluetooth reader.

Touch reader

Cardholders must touch the Bluetooth reader while carrying a mobile phone with a mobile credential.

QR Code is a registered trademark of Denso Wave Incorporated in Japan and other countries.

To create an identification profile:

1. Go to Configuration > Access control > Identification profiles.

2. Click Create identification profile.

3. Enter an identification profile name.

4. Select Include facility code for card validation to use facility code as one of the credential validation fields. This field is only available if you turn on Facility code under Access management > Settings.

5. Configure the identification profile for one side of the door.

6. On the other side of the door, do the previous steps again.

7. Click OK.

To edit an identification profile:

1. Go to Configuration > Access control > Identification profiles.

2. Select an identification profile and click .

3. To change the identification profile name, enter a new name.

4. Do your edits to the side of the door.

5. To edit the identification profile on the other side of the door, do the previous steps again.

6. Click OK.

To remove an identification profile:

1. Go to Configuration > Access control > Identification profiles.

2. Select an identification profile and click .

3. If the identification profile is used on a door, select another identification profile for the door.

4. Click OK.

A card format defines how a card stores data. It’s a translation table between the incoming data and the validated data in the system. Each card format has a different set of rules for how to organize the stored information. By defining a card format, you tell the system how to interpret the information that the controller gets from the card reader.

There are predefined commonly used card formats available for you to use as they are or edit as required. You can also create custom card formats.

Go to Configuration > Access Control > Card formats and PIN to create, edit, or activate card formats. You can also configure PIN.

The custom card formats can contain the following data fields used for credential validation.

Card number

A subset of the credential binary data encoded as decimal or hexadecimal numbers. Use the card number to identify a specific card or cardholder.

Facility code

A subset of the credential binary data encoded as decimal or hexadecimal numbers. Use the facility code to identify a specific end customer or site.

To create a card format:

1. Go to Configuration > Access Control > Card formats and PIN.

2. Click Add card format.

3. Enter a card format name.

4. In the Bit length field, type a bit length between 1 and 256.

5. Select Invert bit order if you want to invert the bit order of the data received from the card reader.

6. Select Invert byte order if you want to invert the byte order of the data received from the card reader. This option is only available when you specify a bit length that you can divide by eight.

7. Select and configure the data fields to be active in the card format. Either Card number or Facility code must be active in the card format.

8. Click OK.

9. To activate the card format, select the checkbox in front of the card format name.

To edit a card format:

1. Go to Configuration > Access Control > Card formats and PIN.

2. Select a card format and click .

3. If you edit a predefined card format, you can only edit Invert bit order and Invert byte order.

4. Click OK.

You can only remove the custom card formats. To remove a custom card format:

1. Go to Configuration > Access Control > Card formats and PIN.

2. Select a custom card format, click and Yes.

To reset a predefined card format:

1. Go to Configuration > Access Control > Card formats and PIN.

2. Click to reset a card format to the default field map.

To configure PIN length:

1. Go to Configuration > Access Control > Card formats and PIN.

2. Under PIN configuration, click .

3. Specify Min PIN length, Max PIN length, and End of PIN character.

4. Click OK.

Overview

• The card number in decimal is 64332.

• One reader transfers the card number to hexadecimal number FB4C. The other reader transfers it to hexadecimal number 4CFB.

• AXIS A1601 Network Door Controller receives FB4C and transfers it to decimal number 64332 according to the card format settings on the reader.

• AXIS A1601 Network Door Controller receives 4CFB, changes it to FB4C by inverting byte order, and transfers it to decimal number 64332 according to the card format settings on the reader.

Invert bit order

After inverting bit order, the card data received from the reader is read from right to left bit by bit.

Invert byte order

A group of eight bits is a byte. After inverting byte order, the card data received from the reader is read from right to left byte by byte.

26-bit standard Wiegand card format

AXIS Camera Station Secure Entry supports OSDP (Open Supervised Device Protocol) Secure Channel to active line encryption between controller and Axis readers.

To turn on OSDP Secure Channel for an entire system:

1. Go to Configuration > Access control > Encrypted communication.

2. Enter your main encryption key and click OK.

3. Turn on OSDP Secure Channel. This option is only available after you enter the main encryption key.

4. By default, the main encryption key generates a OSDP Secure Channel key. To manually set the OSDP Secure Channel key:

5. 1. Under OSDP Secure Channel, click .

   2. Clear Use main encryption key to generate OSDP Secure Channel key.

   3. Enter the OSDP Secure Channel key and click OK.

To turn on or turn off OSDP Secure Channel for a specific reader, see Doors and zones.

AXIS Barcode Reader is an application that can be installed on Axis cameras. Axis door controller uses the authentication key to grant access and authenticate AXIS Barcode Reader. For a complete workflow on how to set up AXIS Barcode Reader, see Set up AXIS Barcode Reader.

To create a connection between a door controller and AXIS Barcode Reader:

1. In AXIS Camera Station Pro Secure Entry:

2. 1. Go to Configuration > Access control > Encrypted communication.

   2. Under External Peripheral Authentication Key, click Show authentication key and Copy key.

3. In the device web interface where AXIS Barcode Reader runs:

4. 1. Open AXIS Barcode Reader application.

   2. If the server certificate wasn’t configured in AXIS Camera Station Pro Secure Entry, turn on Ignore server certificate validation. See Certificates for more information.

   3. If the server certificate wasn’t configured in AXIS Camera Station Pro Secure Entry, turn on Ignore server certificate validation. See Certificates for more information.

   4. Turn on AXIS Camera Station Secure Entry.

   5. Click Add and enter the IP address of the door controller and paste the authentication key.

   6. Select the reader that reads barcodes from the door drop-down menu.

1. In AXIS Camera Station Pro Secure Entry:

2. 1. Go to Configuration > Access control > Encrypted communication.

   2. Under External Peripheral Authentication Key, click Show authentication key and Copy key.

3. In the device web interface where AXIS Barcode Reader runs:

4. 1. Open AXIS Barcode Reader application.

   2. If the server certificate wasn’t configured in AXIS Camera Station Pro Secure Entry, turn on Ignore server certificate validation. See Certificates for more information.

   3. If the server certificate wasn’t configured in AXIS Camera Station Pro Secure Entry, turn on Ignore server certificate validation. See Certificates for more information.

   4. Turn on AXIS Camera Station Secure Entry.

   5. Click Add and enter the IP address of the door controller and paste the authentication key.

   6. Select the reader that reads barcodes from the door drop-down menu.

The connected sub servers can, with multi-server, use the global cardholders and cardholder groups from the main server.

1. Configure a server as a sub server and generate the configuration file. See Generate the configuration file from the sub server.

2. Configure a server as a main server and import the configuration file of the sub servers. See Import the configuration file to the main server.

3. Configure global cardholders and cardholder groups on the main server. See Add a cardholder and Add a group.

4. View and monitor global cardholders and cardholder groups from the sub server. See .

1. From the sub server, go to Configuration > Access control > Multi server.

2. Click Sub server.

3. Click Generate. It generates a configuration file in .json format.

4. Click Download and choose a location to save the file.

1. From the main server, go to Configuration > Access control > Multi server.

2. Click Main server.

3. Click Add and go to the configuration file generated from the sub server.

4. Enter the server name, IP address, and port number of the sub server.

5. Click Import to add the sub server.

6. The status of the sub server shows Connected.

You can only revoke a sub server before you import its configuration file to a main server.

1. From the main server, go to Configuration > Access control > Multi server.

2. Click Sub server and click Revoke server.

   Now you can configure this server as a main server or sub server.

After you import the configuration file of a sub server, it connects the sub server to the main server.

To remove a sub server:

1. From the main server:

2. 1. Go to Access management > Dashboard.

   2. Change the global cardholders and groups to local cardholders and groups.

   3. Go to Configuration > Access control > Multi server.

   4. Click Main server to show the sub server list.

   5. Select the sub server and click Delete.

3. From the sub server:

4. • Go to Configuration > Access control > Multi server.

   • Click Sub server and Revoke server.

The first time you open the Active Directory settings page you can import Microsoft Active Directory users to cardholders in AXIS Camera Station Pro Secure Entry. See Import active directory users.

After the initial configuration, the following options appear on the Active directory settings page.

• Create and manage cardholder groups based on groups in Active Directory.

• Set up scheduled synchronization between Active Directory and the access management system.

• Manually synchronize to update all cardholders imported from Active Directory.

• Manage data mapping between user data from Active Directory and cardholder properties.

To import Active Directory users to cardholders in AXIS Camera Station Pro Secure Entry:

1. Go to Configuration > Access control > Active directory settings^BETA.

2. Click Set up import.

3. Follow the on-screen instructions to complete these three main steps:

4. 1. Select a user from Active Directory to use as a template for data mapping.

   2. Map user data from the Active Directory database to cardholder properties.

   3. Create a new cardholder group in the access management system and select which Active Directory groups to import.

You can’t change any of the imported user data, but you can add credentials to an imported cardholder, see Add credentials.

The access management structure is flexible, which allows you to develop a workflow that suits your needs. The following is a workflow example:

1. Add groups. See Add a group.

2. Add cardholders. See Add a cardholder.

3. Add cardholders to groups.

4. Add access rules. See Add an access rule.

5. Apply groups to access rules.

6. Apply zones to access rules.

7. Apply doors to access rules.

A cardholder is a person with a unique ID registered in the system. Configure a cardholder with credentials that identifies the person and when and how to grant the person access to doors.

You can also choose to map users in an Active Directory database as cardholders, see Active directory settings^BETA.

1. Open an Access management tab.

2. Go to Cardholder management > Cardholders and click + Add.

3. Enter the first and last name of the cardholder and click Next.

4. Optionally, click Advanced and select any options.

5. Add a credential to the cardholder. See Add credentials

6. Click Save.

7. Add the cardholder to a group.

8. 1. Under Groups, select the group you want to add the cardholder to and click Edit.

   2. Click + Add and select the cardholder you want to add to the group. You can select multiple cardholders.

   3. Click Add.

   4. Click Save.

You can add the following types of credentials to a cardholder:

• PIN

• Card

• License plate

• QR Code

• Mobile phone

To add a mobile credential to a cardholder:

1. Under Credentials, click + Add and select Mobile credential.

2. Enter a name for the credential.

3. Set the start and end date for the credential.

4. Select Send the mobile credential to the cardholder after saving. The cardholder receives an email with instructions for pairing.

5. Click Add.

See example in Use AXIS Mobile Credential app as a Bluetooth credential.

To add a license plate credential to a cardholder:

1. Under Credentials, click + Add and select License plate.

2. Enter a credential name that describes the vehicle.

3. Enter the license plate number for the vehicle.

4. Set the start and end date for the credential.

5. Click Add.

See example in Use license plate number as a credential.

To add a PIN credential to a cardholder:

1. Under Credentials, click + Add and select PIN.

2. Enter a PIN.

3. To use a duress PIN to trigger a silent alarm, turn on Duress PIN and enter a duress PIN.

4. Click Add.

A PIN credential is always valid. You can also configure a duress PIN that opens the door and triggers a silent alarm in the system.

To add a card credential to a cardholder:

1. Under Credentials, click + Add and select Card.

2. To manually enter the card data, enter a card name, card number, and bit length.

3. Note

   Bit length is configurable only when you create a card format with a specific bit length that’s not in the system.

4. To automatically get the card data of the last swiped card:

5. 1. Select a door from the Select reader drop-down menu.

   2. Swipe the card on the reader connected to that door.

   3. Click Get last swiped card data from the door’s reader(s).

6. Note

   You can use 2N desktop USB card reader to get the card data. For more information, see Set up 2N desktop USB card reader.

7. Enter a facility code. This field is only available If you have enabled Facility code under Access management > Settings.

8. Set the start and end date for the credential.

9. Click Add.

To add a QR credential to a cardholder:

1. Under Credentials, click + Add and select QR-code.

2. Enter a name for the credential.

3. Dynamic QR is on by default. You must use dynamic QR with PIN credential.

4. Set the start and end date for the credential.

5. To email QR code automatically after you save the cardholder, select Send QR code to cardholder when credential is saved.

6. Click Add.

This example shows you how to use a door controller, a camera with AXIS License Plate Verifier, and a vehicle’s license plate number as credentials to grant access.

1. Add the door controller and the camera to AXIS Camera Station Pro Secure Entry. See

2. Set date and time for the new devices with Synchronize with server computer time. See .

3. Upgrade the firmware on the new devices to the latest available version. See .

4. Add a new door connected to your door controller. See Add a door.

5. 1. Add a reader on Side A. See Add a reader.

   2. Under Door settings, select AXIS License Plate Verifier as Reader type and enter a name for the reader.

   3. Optionally, add a reader or REX device on Side B.

   4. Click Ok.

6. Install and activate AXIS License Plate Verifier on your camera. See the AXIS License Plate Verifier user manual.

7. Start AXIS License Plate Verifier.

8. Configure AXIS License Plate Verifier.

9. 1. Go to Configuration > Access control > Encrypted communication.

   2. Under External Peripheral Authentication Key, click Show authentication key and Copy key.

   3. Open AXIS License Plate Verifier from the camera’s web interface.

   4. Don’t do the setup.

   5. Go to Settings.

   6. Under Access control, select Secure Entry as Type.

   7. In IP address, enter the IP address for the door controller.

   8. In Authentication key, paste the Authentication key that you copied earlier.

   9. Click Connect.

   10. Under Door controller name, select your door controller.

   11. Under Reader name, select the reader you added earlier.

   12. Turn on integration.

10. Add the cardholder that you want to give access to. See Add a cardholder

11. Add license plate credentials to the new cardholder. See Add credentials

12. Add an access rule. See Add an access rule.

13. 1. Add a schedule.

    2. Add the cardholder that you want to give license plate access to.

    3. Add the door with the AXIS License Plate Verifier reader.

This example shows how to add an AXIS A4612 Bluetooth Reader to your system to allow cardholders to unlock doors using the AXIS Mobile Credential app.

1. Install the Bluetooth reader and connect it to a door controller.

2. Add the Bluetooth reader in the door controller's web interface.

3. 1. Access the door controller and go to Peripherals > Readers.

   2. Click Add reader.

   3. Enter the required information in the Add Bluetooth reader dialog.

   4. Click Add.

4. Add the Bluetooth reader to a door in AXIS Camera Station Pro.

5. 1. Go to Configuration > Access control > Doors and zones.

   2. Select the door you want to add the Bluetooth reader to and click Edit.

   3. Click + Add on the side of the door where the Bluetooth reader is located.

   4. Select Card reader.

   5. Under Add IP reader, select IP reader.

   6. Under Select IP reader, select your Bluetooth reader.

   7. Click Add.

6. Select a Bluetooth reader for pairing. You must do this for at least one Bluetooth reader in your system.

7. 1. Select the Bluetooth reader you just added.

   2. Click Edit.

   3. Under Edit bluetooth reader, select Use this reader for pairing.

   4. Click Apply.

8. Choose the Tap in app or Touch reader identification profile. See Identification profiles for more information.

9. Add the mobile credential to the cardholder. See Add credentials.

10. Pair the mobile credential with the pairing reader.

11. 1. Bring the cardholder's mobile phone to the pairing enabled Bluetooth reader.

    2. Follow the instructions provided in the email sent to the cardholder.

Groups allow you to manage cardholders and their access rules collectively and efficiently.

1. Open an Access management tab.

2. Go to Cardholder management > Groups and click + Add.

3. Enter a name and optionally initials for the group.

4. Select Global group to make it possible to view and monitor the cardholder on the sub servers. This option is only available for cardholders created on the main server. See Multi server ^BETA.

5. Add cardholders to the group:

6. 1. Click + Add.

   2. Select the cardholders you want to add and click Add.

7. Click Save.

An access rule defines the conditions that must be met to grant access.

An access rule consists of:

Cardholders and cardholder groups

who to grant access.

Doors and zones

where the access applies.

Schedules

when to grant access.

To add an access rule:

1. Open an Access management tab.

2. Go to Cardholder management.

3. Under Access rules, click + Add.

4. Enter a name for the access rule and click Next.

5. Configure the cardholders and groups:

6. 1. Under Cardholders or Groups, click + Add.

   2. Select the cardholders or groups and click Add.

7. Configure the doors and zones:

8. 1. Under Doors or Zones, click + Add.

   2. Select the doors or zones and click Add.

9. Configure the schedules:

10. 1. Under Schedules, click + Add.

    2. Select one or more schedules and click Add.

11. Click Save.

An access rule that’s missing one or more of the components described above is incomplete. You can view all incomplete access rules in the Incomplete tab.

You can export reports that contain different types of information about the system. AXIS Camera Station Pro Secure Entry exports the report as a comma-separated value (CSV) file and saves it in the default download folder. To export a report:

1. Open an Access management tab.

2. Go to Reports > System configuration.

3. Select the reports you want to export and click Download.

A roll call report lists cardholders within a specified zone, helping identify who's present at a given moment.

A mustering report lists cardholders within a specified zone, helping identify who's safe and missing during emergencies. It assists building managers in locating staff and visitors after evacuations. A muster point is a designated reader where personnel report during emergencies, generating a report of people on and off-site. The system marks cardholders as missing until they check in at a muster point or until someone manually marks them as safe.

Both roll call and mustering reports require zones to track cardholders.

To create and run a roll call or mustering report:

1. Open an Access management tab.

2. Go to Reports > Cardholder activity.

3. Click + Add and select Roll call / Mustering.

4. Enter a name for the report.

5. Select which zones to include in the report.

6. Select any groups you want to include in the report.

7. If you want a mustering report, select Mustering point and a reader for the mustering point.

8. Select a time frame for the report.

9. Click Save.

10. Select the report and click Run.

To customize the cardholder fields used in the access management dashboard:

1. On the Access management tab, click Settings > Custom cardholder fields.

2. Click + Add and enter a name. You can add up to 6 custom fields.

3. Click Add.

To use facility code to verify your access control system:

1. On the Access management tab, click Settings > Facility code.

2. Select Facility code on.

3. Note

   You must also select Include facility code for card validation when you configure identification profiles. See Identification profiles.

To edit an email template for sending a QR or mobile credential:

1. On the Access management tab, click Settings > Email templates.

2. Edit your template and click Update.

This option imports cardholders, cardholder groups, credentials, and cardholder photos from a CSV file. To import cardholder photos, make sure that the server has access to the photos.

When you import cardholders the access management system automatically saves the system configuration, including all hardware configuration, and deletes any previously saved one.

You can also choose to map users in an Active Directory database as cardholders, see Active directory settings^BETA.

1. On the Access management tab, click Import and export.

2. Click Import cardholders.

3. Select New, Update, or Add .

4. Click Next.

5. Click Choose a file and go to the CSV file. Click Open.

6. Enter a column delimiter and select a unique identifier and click Next.

7. Assign a heading to each column.

8. Click Import.

This option exports the cardholder data in the system to a CSV file.

1. On the Access management tab, click Import and export.

2. Click Export cardholders.

3. Choose a download location and click Save.

AXIS Camera Station Pro Secure Entry updates cardholder photos in C:\ProgramData\Axis Communications\AXIS Camera Station\Components\AXIS Secure Entry\Cardholder photos whenever the configuration changes.

The system automatically saves its configuration when you import cardholders. The Undo import option resets the cardholder data and all hardware configuration to the state before the last cardholder import.

1. On the Access management tab, click Import and export.

2. Click Undo import.

3. Click Yes.