Introduction

About This Guide

This guide is intended to be used as a standard guide for the Enterphone System. Enterphone Certification Training Knowledge is expected.

Initial Software Configuration

Administration Management

Starting the Enterphone Administration System

Launch a web browser (Edge, Firefox, or other browser that allows pop-ups).

Open

In the Address field, type http://<Enterphone ip address>/ and press Enter.  For convenience, this page should be bookmarked.

Login and Log Out

To login to Enterphone:

Open

1. Enter the Default Username and the Password.

2. Click on the LOGIN button.

To log off, click on the Log Out button.

As a security feature, after a certain period of inactivity, Enterphone web will automatically log you off. At that point, the login page will appear, and the user will have to log back in.

System Management

Set Date, Time, Time Zone Settings

Date and time settings for Enterphone servers can be set either manually or by using a network time protocol (NTP) server. An NTP server is the recommended method for keeping the date and time in sync with other systems.

Setup Network Time Protocol (NTP) Settings

An NTP server is the recommended method for keeping the date and time in sync with other systems. However, it does require either a local NTP server or an internet connection. NTP Server could be an internal company facing NTP server or an external public facing.

To set the system time and date using NTP Settings:

1. Click on the System navigation tab.

2. On the left, click the Utilities link.

3. Click the System Date/Time sub link. The following screen is displayed.

    

4. Select a Time Zone from the dropdown box.

5. Check the Enable NTP box.

6. Enter an IP address or a hostname for the NTP Server pool.ntp.org is a commonly used public NTP server. If no local NTP server is available this hostname can be used.

7. Click Save.

When changing the time or the date of a Enterphone System, the synchronizing of schedules and events are not done until the following day at midnight. For proper scheduling, please restart the Enterphone server using the reboot link from the Utilities section.

Change Date and Time Manually

If you are not using an NTP server, you can set the date and time manually.

1. Click on the System navigation tab.

2. On the left, click the Utilities link.

3. Click the System Date/Time sub link.

4. Select a Time Zone from the dropdown box

5. Select the date from Set Date.

6. Select the time from Set Time.

7. Click Save to save the date and time.

8. Once the date is set, click the Reboot link at the bottom of the Utilities list.

9. Click the Reboot button.

System Card Format Support

The Enterphone Server has a built-in set of Card Format Definitions that determine how Wiegand data is being translated (e.g. Wiegand 75 bit, FIP-201 200 bit).  Upon card swipe, Enterphone performs a sequential look-up of this list to find the best fitting definition.

To adjust this lookup behavior:

1. Click on the System navigation tab.

2. On the left, click the Manage Card Format link.

3. To speed up the card format search, put the most relevant definition at the top of the list. If the installation is using Indala 36-bit cards for example – put the Indala 36-bit definition above all other 36-bit formats to ensure correct Wiegand data translation. Use the up/down arrows beside each definition to adjust the order of format preferences.

In case no suitable definition is available, use the Default Card Format drop-down list to select a default format. To narrow down the search, type the card format, and it will list the results. You can click on the required card format directly. Please note that the card format definition in Enterphone is highly customizable. Please feel free to contact Identiv Technical Support (support@identiv.com ) should you require a custom format.

Customize Dealer and Installer Pages

The links for Dealer and Installer from the Enterphone Administration software can be configured to match the company that sold and installed the Enterphone system.

1. Click on the System navigation tab.

2. On the left, click the Administration link.

3. Click the System Parameters sub-link.

4. Edit the dealer.ini and installer.ini files using the in-browser editor or save and edit them locally and restore them.

For more information, please refer to the instructions in the Enterphone Parameter Files section.

Enterphone Panels

Enterphone panels provide visitors with a way to communicate with tenants.

Enterphone panels display a list of users that can be dialed. Visitors can call a tenant by entering the tenant’s suite code on the (EP). By default, tenants can then allow access to the building controlled by the Enterphone Relay 1 by pressing the “6” key or relay 2 by pressing the “8” key on their telephone keypad, which will release the door for the visitors to enter the building. Once the “6” or “8” is pressed, visitors will hear a confirmation message “please enter the door is unlocked” from the (EP) letting visitors know that they can enter the building. Tenants can also deny access by hanging up the phone. The “6” and “8” access keys are configurable from the Enterphone UI System/Enterphone/Panels. See Optional Enterphone Configuration in this guide for more information.

Install Enterphone Panel

For hardware installation please view the Enterphone Installation Guide.

Accessing the Enterphone Panel

The Default IP Address for Enterphone is 192.168.123.101

Instructions to change the default IP Address of the Enterphone Panel

1. Connect a regular Ethernet cable from the (desktop/laptop) directly to the Enterphone panel.

2. Change the IPv4 on your (desktop/laptop) to 192.168.123.100; subnet: 255.255.255.0; no gateway.

3. Open up any browser on the (desktop/laptop), and enter the default IP address: 192.168.123.101

4. Log in using the Default Username and the Password.

5. Go to System > Utilities > Change IP > Program New IP Address > Save > Reboot (See screenshot below).

6. Change the IPv4 on your (desktop/laptop) to the IP range configured.

7. Log in with the New IP Address.

Adding a New Administrator and Deleting the Default Account

The first Administrator account created should be given full permission to manage all aspects of a Enterphone installation.  Additional accounts can be given less control over the installation depending on the role that each user plays in managing or supporting the installation. Users with an Administrator Account for the installation cannot create, modify or delete other accounts that have more privileges than their own. The extent to which one can create, modify, or delete accounts is limited to users with fewer privileges than the account under which one is currently logged in.

To create an Administrator Account with full access and delete the default user:

1. Log in to Enterphone using the instructions in Login and Log Out above.

2. Click on the System navigation tab at the top of the screen.

3. On the left, click the Administration link.

4. Click the Admin Users sub-link.

5. In the Actions bar, click on Add Admin User. The following screen is displayed:

    

6. Enter the User ID, Last Name, and First Name.

7. Enter a Password that is different than the one provided.

8. Verify the Password.

9. Beside Business, select All.

10. Beside Sites, select ALL.

11. Select Full Access for all of the available licensed parameters from Suites to Active Directory.

12. For Mustering, select the required level.

13. Select the Language that this full administrator would like to use.

14. Select the View Suite/User Page Size 10, 25, or 50 to set the default number of suites/users per page this admin user sees when viewing the listing.

15. Click Save to save the full access admin user.

16. Click the [Log Out] button to log off and test the new user ID.

17. Log in with the user ID and password that was created in the previous steps.

18. Verify that you can log in successfully and that your new user has full privileges.

19. Log out once more and log in using the default user account name.

20. Click on the System tab, Administration, Admin Users and select the default “Enterphone” user account.

21. Change one of its privileges and click Save.

22. Log out and log in again as your newly created user.

23. Go to Admin Users again and select the default “Enterphone” user account.

24. Click on Delete and OK.

Once the admin user is saved, the user ID field cannot be edited.  This field specifies a unique admin user profile. You can change the other fields after an admin user profile has been saved.

Site Administrator Management

In addition to the full access administrator, there can be limited administrative users that have the capacity to add/modify/delete cardholder access. The privileges of these admin users can be fine-tuned to restrict or grant access to certain functions of the software. These restrictions include the modification of Controlled Areas, Access Groups, Devices, and Users. Admin users can also be assigned to certain sites within Enterphone, further restricting and partitioning data, thereby limiting their Admin access.

To add an Admin User:

Follow Steps 1 to 15 above to add new Admin Users. Each of the software’s tabs or links is listed with the following options:

• No Access: The tab or action will not appear in the toolbar or action menu for this admin user.

• Read Only: Only read permissions are given to selected tabs or actions.

• Full Access: The user can modify every aspect of the section.

You will be able to assign Admin Users to the sites that they are allowed to administer (i.e. The user hoffjenn01 is limited to the control of the sites Distribution Centre, Huston Office, and Sales Office - Vancouver). Once the admin user logs in to the system, the sites that they have access to will appear in a dropdown list on the top-right corner of the screen. By selecting a Site from the dropdown list, the Admin User will only see data corresponding to that Site. Also, any data added (i.e. adding a controlled area) will be added to the Site that is currently selected.

Programming Suites and Users

Suites

Adding a Suite

Suite information is used to enable access to that suite. In the Enterphone panel directory listing, users are displayed under their suites.

1. Click on the Suites navigation tab.

2. In the Actions bar, click on Add Suite. The following screen is displayed:

3. Enter a Suite Name or the Number.

4. Enter a 4-digit Suite Code that is to be displayed in the directory of a panel.

5. Enter the Phone number for the Suite.
   • For an EPX relay number, enter the 3-digit relay number.

6. Enter an Alternate Phone number. If the first number is not accessible by a panel the alternate number will be dialed.

7. Select the Guest Access Group that applies.

8. Optional: Business - Refer Business Management section below.

9. Click on Save.

Users

Assigning Suites to Users:

1. Click on the Users navigation tab.

2. In the Actions bar, click on Add User.  The following screen is displayed.

3. Enter the user’s Last Name that may be displayed on the Enterphone panel directory.

4. Enter the user’s First Name that may be displayed on the Enterphone panel directory.

5. Select Yes or No to Display this user’s name in the Enterphone Panel Directory.

6. Select this user’s Suite from the drop-down.

7. Optional: Enter a PIN number. This is for setting up a keyless entry. By default, the PIN length is 6 digits, which can be changed.

   1. Activating PIN code on Touch Screen

      1. Touch (*) and enter PIN

   2. Activating PIN code on IQ

      1. Hit (*)(*) quickly and enter PIN

8. Optional: Email address. For information only.

9. Optional: Telephone number. For information only.

10. Click Save.

Optional Enterphone Configuration

Enterphone Panel Settings

Enterphone panel settings such as talk time, relay access digit, and activation time can be configured. To access these settings;

1. Click on the System navigation tab.

2. On the left, click on the Enterphone link.

3. By default, the local panel is created and shows up and can be modified if required.

Access Digit (1 or 2): This is the digit on the telephone that the tenant must press to activate the appropriate relay.

Activation Time (1 or 2)  (Seconds): This specifies how many seconds the relay will be activated once a tenant grants access.

Talk Time: This is the maximum duration the call can occur (in seconds) before automatically hanging up.

Enterphone Parameters Files

Enterphone parameter files are used to configure the software on both the server and the panel. These files are located in the System Parameters link under the System -> Administration tab.  These files can be edited using the in-browser text field provided by clicking on the file or backed up by clicking on Download and edited with a text editor locally then uploaded back to the Enterphone. Once the files are uploaded back to the Enterphone, the server must be restarted using the Reboot link at the bottom of the Utilities page or by checking the Reboot after save option on the Edit page.

The following parameter files are user-modifiable:

• dealer.ini

• installer.ini

• siteEngine.ini

• sitePanel.ini

To Edit a Parameter file

1. Click on the Administration link from the System navigation tab.

2. Click on the System Parameters sub-link.

3. Click on the file you would like to edit.

4. Make any changes necessary to the text presented in the text area.

5. If you would like a backup of the existing file, choose Write Backup.

6. Check the Reboot after save box if a reboot is required. Keep in mind that for the changes to take effect a full system reboot is required.

7. Click Save.

Main and Peer Configuration (Sync Enterphone Units)

This form of replication only copies the Suite and User data to a remote panel to be loaded on the display.  This does not allow for a remote system to be working as a backup unit for bridge communication.

Main and peer configuration creates a link between two or more Enterphone units. The Enterphone panel can also be peered to a Primis server or Enterphone cube server. The Main servers automatically start copying data once a peer establishes communication.

To Setup a Main and a Peer

Follow the instructions below on any unit that needs to be configured as a peer. No configuration is necessary on the main units.

1. Open the siteEngine.ini using the instructions from System Parameters.

2. Locate the line MainPeers=

3. Add the IP address of the main server. For example, MainPeers=192.168.123.101
   Note: If the Main unit is a Primis server or Enterphone cube server, please set MQPeer=yes. Otherwise, for Main/Peer network containing only Enterphone panels, set MQPeer=no

4. Save the siteEngine.ini

5. Restart the Enterphone peer system

Once the configuration is done, connect to the Main server and log in. At this point, there should be a button labeled with the names of Peer devices along the top of the Administration System’s interface. If there are any changes that need to be made to non-common data, these buttons can be used to connect to the Peer devices. If the button is absent from the Main Server or Panel, check over the configuration that was made up to this point then log out and log back in.

Copy Common Data

Once the connection is established between a peer and a main, there may be some data inconsistencies. To clear all the data on the peer and copy everything from the main a Copy Common Data needs to be done.

1. Click on the System navigation tab.

2. On the left, click on the Administration link.

3. Click on the Copy Common Data sub-link.
   
   

    

4. From the list of Available Servers, select the main server.

5. Click Copy.

Enterphone Panel File Configuration

On Enterphone Panels an additional configuration file exists that controls the configuration of Panel-specific options.

Use the steps described in Editing a Parameter file to edit the siteEngine.ini. The Panel will need to be restarted for any changes to this file to take effect.

Parameters in the sitePanel.ini file are:

Business Management

Enterphone Panels can be programmed to divide buildings into multiple businesses. Each business can control its own Controlled Area without affecting other businesses or areas. In order to divide buildings into businesses, controlled areas that will control a business’ physical access need to be created. When adding a new business to the Administration Software, areas that are controlled by that business can be selected. Then admin users can be added to be part of that business.

Business admin users are restricted on what they can add or view. Also, business admin users do not have access to the System tab and are therefore unable to manage the system or view any system-related information.  In addition, business admin users cannot add or delete suites, controlled areas, or schedules.  They can add user access groups and link them only to the controlled areas that are associated with that business. Any of the activity logs that are related to other businesses are not viewable by that business admin user.  A single business can have more than one controlled area. Also, a single business admin user can belong to more than one business.

Create Business Users

1. Add a Business using the instructions in the Businesses section of Chapter Suites.

2. Add a new admin user using the instructions in the section: Site Administrator Management.

3. From the Add Admin User screen, select the business name from the Business list.

Backup of Logs for Business Users

Because business admin users can’t access the System tab, the backup log instructions are different.

1. Click on the Events navigation tab.

2. Select a range of dates in the From and To Dates. Note that the maximum number of days is 31.

3. Click Search
   
   

    

4. Download the search result in CSV Format.

Changing Screen Saver Image File

When Enterphone Panels are idle for more than the time set for the default screensaver time out, the default screensaver graphic is displayed. This graphic can be changed from the media files. The resolution of the screen saver depends on the size of the monitor you are using, below are the resolution sizes:

To confirm the resolution settings in the MeshJpanel.ini file for your panel, Go to Systems > Administration > System Parameters > MeshJpanel.ini > and scan for the resolutionX, resolutionY

Use a graphic editor or Paint to create your own screensaver and name it to match the filename. Filename: screensaver_1280x1024.gif for Enterphone 19 and Kiosk, screensaver_800x1280.gif for Enterphone iQ. Go to Systems > Administration > Update Media Files, use the Choose File button to navigate to the file location, select the file and click UPDATE. The original file will be over-written.

Restart the Panel using the Reboot link at the bottom of the Utilities page.

Changing Screen Saver Timeout

By default, the screensaver activates after 60 seconds of inactivity. This number can be changed from the file sitePanel.ini.

1. Click on the System navigation tab.

2. On the left, click on the Administration link.

3. Click on the System Parameters sub link.

4. Click on the sitePanel.ini file.

    

5. Edit the line screensaverTimeOut=60; change the default value 60 to the desired number of seconds for the screen saver timeout.

6. Check the Reboot after save box. This will do a full restart of the panel after you save the file.

7. Click Save.

Enterphone Encryption Bridges

Enterphone Encryption Bridges allow door hardware to be connected to Enterphone servers. Bridges for card readers communicate with Enterphone’s software. Data is received from card readers, encrypted, and sent via IP to a Enterphone server for processing. Relays on the Enterphone Bridge are activated by commands from a Enterphone server to lock or unlock doors.

Discovering Enterphone Encryption Bridges on a Network

Enterphone Bridges can be discovered using one of two methods. Either using the Bridge Discovery Tool located in the Enterphone Administration Software or using the standalone Windows tool called Bridge Configuration Utility (BridgeUtil). For most systems, the built-in web-based discovery tool will be sufficient. If a Enterphone bridge is not located on the same LAN as the Enterphone server or is behind a switch/router where UDP MultiCast traffic is being blocked, the bridge utility application should be used on a PC located on the network where UDP traffic is not being blocked.

Finding a Enterphone Bridge on the Network

Once a Enterphone Bridge is connected to the network, you can scan the network for the added device and add it to the Enterphone Administration Software using the Enterphone Bridge Utility.

You can also find the Enterphone Bridge Utility at the bottom of the Devices - Main page, and click on the Enterphone Bridge Discovery Tool check box.

Using the Web-Based Enterphone Bridge Utility

1. Click on the System navigation tab.

2. On the left, click the Utilities link.

3. Click the Bridge Utility sub link.

4. Click the [Scan Devices] button. This process might take a minute or two.

5. Click on the MAC address of the device you wish to provision.

    

6. Assign the appropriate IP information to the device or choose DHCP. You may need to contact your system admin for this information. If the DHCP checkbox is checked, the IP, Netmask and Gateway fields are automatically populated once the bridge receives the DHCP information.

7. To update Bridge Configuration only, click on Save. Note that it might take up to two minutes to save.

8. To update and add the Bridge to Enterphone, check Save & Add Device To Enterphone checkbox and click Save.

    

9. Enter the name by which you’d like to refer to the device and click the Save button.

Lock Configuration

This is an option in Enterphone bridge configuration to lock the system configuration of the bridge. Once you choose to lock the configuration, no changes to the configuration can be made remotely. 

In order to remove the lock, it requires a manual reset of the bridge that will reset the IP address and require the IP’s be reset.

Windows Based Bridge Discovery Utility

The Enterphone Bridge settings can be changed by using Identiv’s Bridge Utility. This program (BridgeUtil.exe) is self-contained, does not require a special install program and should run on Windows XP, 7, 8.1 and 10.

Download BridgeUtil.exe from Enterphone Application

1. Click on the System navigation tab.

2. On the left, click on the Utilities link.

3. Click the Download sub link.

4. Click on the BridgeUtil link and save the executable on the PC.

5. Locate the BridgeUtil.exe from where it was downloaded. Right click on the executable and select “Run as administrator”

6. Once the utility starts, click on the [Scan Devices] button and all the bridges on the local network will be displayed by MAC and IP addresses.

7. Double-click on the MAC address of the bridge that needs to be configured.

The settings may be changed and updated as needed. When done hit the Save button

Device Properties

Each Enterphone Bridge model displays a different properties section. For example, a single port Enterphone Bridge will only have one reader, input and output properties section; two ports will have two, and so on.

The following tables describe the properties of Enterphone bridges.

Reader Properties

Input Properties

LED Properties

Description: Identifies the LED when adding to Port Trigger Actions or viewing in Activity Logs.

Buzzer Properties

Description: Identifies the Buzzer output when adding to Port Trigger Actions or viewing in Activity Logs.

Relay Properties

Schedules

Schedule Management

A Schedule is a given period of time that is applied to different aspects of the software. If a Schedule is added to a Controlled Area, then that schedule activates the devices and outputs in that Controlled Area. If a schedule is linked to a Controlled Area, under User or Guest Access Groups, then the schedule enables or disables access to that controlled area only to the users that are contained in that User Access Group.

A single schedule can contain more than one Period. For example, a schedule named Business Hours can contain a period Monday through Friday, 9 AM ON TIME and 6 PM OFF TIME. If needed, multiple periods can be added to a single schedule.

In addition, Special Days can be added to enable or disable access for certain days only. For example, if a special day is set to January first then that schedule can be turned off on every January first or it can be set to be active only on January first.

The current state (on or off) of all the schedules can be seen on the Schedule tab.

Adding a Schedule

1. Click on the Schedules navigation tab.

2. In the Actions bar, click on Add Schedule. The following screen is displayed:

3. Enter a Name and Description.

4. Select Weekdays OR Special Days.

   1. If you select Weekdays, check the box for each Week Day this schedule applies to and check the box for each Type of Special Day you would like to exclude from this schedule. To add a Special Day, see the instructions in the previous section.

   2. If you select Special Days then you wish to apply this schedule ONLY to the Type of special day that you select in the dropdown box.

5. Enter an ON Time for this schedule.

6. Enter an OFF Time for this schedule.

7. Under Effective Dates, check the Always On box if this schedule is to remain in effect at all times or, if not, enter a Start Date and an Expire Date for this schedule.

8. Click Save.

Special Days (Holidays)

Special days are an optional addition to a schedule. They can be used for holidays or any other day where a schedule needs an explicit or relative period. Special days are added to schedules as a period so they may need to be configured before adding a schedule.

Adding a Special Day

1. Click on the Schedules navigation tab.

2. On the left, click the Special Days link.

3. In the Actions bar, click Add Special Day. The following screen is displayed.

    

4. Enter the Name of the Special Day.

5. Choose a number for this Type of special day, the number between 1 and 12. Special day types allow the grouping of different special days. For example, a Type 1 special day labeled First of Every Month could contain the first day of every month. In this case, there will need to be 12 special days added, all of them belonging to the Type 1 group.

6. Select Explicit or Relative. An explicit day is a particular day of the year while a Relative day is a day that will occur every month i.e. the first Monday of every month.

7. Enter the Month and Day of the special day if Explicit was selected; select the Day of the Week if Relative was selected.

8. Click Save.

Assigning a Special Day to a Schedule

Once a special day is added, it can be programmed to be a part of a schedule.

Controlled Areas

In general, Enterphone has two different types of Controlled Areas - Door and Floor Areas.

Door Areas are areas that have readers, in this case, the Door Area represents the in-cab reader. Floor Areas contain relay outputs that activate elevator access (e.g. button in the cab).

The administrator needs to first "link" a Door Area to its associated Floor Area(s). That means all floors that are accessible by the elevator need to be linked to the Door; in this particular case, the Door is simply the in-cab reader.

Floor Controlled Area is an Access Control Object that represents a floor. It contains the Enterphone Bridge output ports that are typically connecting to elevator control modules in the building. Floor areas can be linked to door areas in such a way that when Enterphone server grants access to a door, its associated floor area outputs can be activated. The cardholder’s floor access rights then determine which floor area should be activated.

How to set up

First, the administrator needs to create Door Areas to hold the elevator readers. Then for each controlled area, “link” the corresponding Floor Areas to it. In the above example, a Door Area called Elevator A is created that hosts “Cab A Reader”. This door needs to have linked Floor Areas “Cab A - FL 1”, “Cab A – FL 2” and “Cab A - FL3” that contain relays to elevator A’s control:

Elevator B would follow the same idea except that it is using Elevator B reader, Floor Area Cab B – FL 1 through to FL 3.

Enterphone offers two ways to handle Floor Access

Use separate Floor Access Groups

The user will need to be assigned to a User Access Group that allows access to the various elevators. Floor Access Groups are then assigned to the user to give access to his floor.

This is how the User Access Group would look like for the above example:

This is what the Floor Access Group looks like for 1st Floor:

For the cardholder that has access to the 1st Floor, this is how his User and Floor Access Groups look like:

No separate Floor Access Group

To switch to this mode, in siteEngine.ini, set property “UseFloorAccessGroups” to “no”. Restart the server after the update (please note that once this mode is chosen, returning to the old method may require some database cleanup).

Once this mode is set, the “Floor Access Group” menu item will disappear from the Access tab:

In the above example instead of having one Resident User Access Group and 3 Floor Access Groups; we need 3 Resident user groups, each one covers elevator door access and one floor

Each Residents group would have access to Elevator A and Elevator B controlled area:

Floor Access is immersed into the User Access Group in the second tab labeled “Floor Access and Schedules”. In the “Resident FL 1” User Access Group, it includes access to the first floor for both elevators:

When assigning Access Group, the administrator will select a group that will give the cardholder access to both elevators and his corresponding floor. Note that in this mode, the Floor Access Group select box is not present.

Controlled Area Configuration

Configure a Door Controlled Area

Controlled Areas are areas in a facility that are controlled by one or more devices such as Card Readers. Any area within a facility that requires controlled entry or exit must be set as a Controlled Area. An area can also be set to change from Secure to Unsecure based upon schedules or manual control. 

Adding a Door Controlled Area

1. Click on the Controlled Areas navigation tab.

2. In the Actions bar, click Add Controlled Area. The following screen is displayed:

    

3. Enter a Name that describes the controlled area.

4. Enter an optional Description.

5. Select Door Area as the Area Type.

6. Select a Reader for the controlled area.

7. By default, Enterphone assigns input 1 as Door Contact and input 2 as Request to Exit. To choose a custom setting, check Custom and select the desired input mapping.

8. Click Save.

Once the controlled area is saved, different aspects of it can be modified.

Config Tab

The Config tab allows the configuration of the reader that is assigned to the controlled area.

For a Door area:

1. Select a Card Format for the Reader; set it to Auto to default to the system settings.

2. For the Door Contact, check the Suprv Ready box to indicate that the bridge input has supervised resistors set.

3. Set the Door Contact Switch to Normally Open or Normally Closed.

4. For Request to Exit, check the Suprv Ready box to indicate that the bridge input has supervised resistors set.

5. Set the Request to Exit Switch to Normally Open or Normally Closed.

6. Check the Activate Relay to set the lock to trigger when the REX is fired and select a Relay and enter the number of seconds for it to remain active.

7. For each of the Outputs, enter a Delay time (the number of minutes/seconds the relay will fire) and an Activation Time (the number of minutes/seconds the relay stays open).

8. Select an Output for this door.

9. Enter an optional Description.

10. For each output, enter a Delay time (the number of minutes/seconds until the relay will fire) and an Activation Time (the number of minutes/seconds the relay stays open). Click the Show Accessibility box to enter an Accessibility Delay time and an Accessibility Activation time: this is a separate set of delays and activation times for users with special needs (e.g. wheelchair, crutches) that are used if the Accessibility check box is selected in that user’s setup page. See Chapter Users for more information on setting up a User.

11. Check the Latch Allowed box to allow the corresponding output to remain open(latched) when it is set to Open state either by the Administrator or through Unlock Schedule.

12. To add another Output line, click the + button beside the first output line.

     

13. Click Save when all outputs are configured.

Unlock Schedule Tab

A Schedule is a given period of time that is applied to Controlled Areas and Access Groups and is used to schedule device activation and alarms. If a schedule is added to a Controlled Area, then that schedule activates the devices and outputs in that Controlled Area. If a schedule is linked to a Controlled Area, under User or Guest Access Groups, then the schedule enables or disables access to that Controlled Area only to the users that are contained in that User Access Group.

For more information about schedules, please refer to Schedules.

In the Unlock Schedule tab on the View/Edit Controlled Area screen:

1. Select a Schedule for this controlled area.

2. Select an ON action.

3. Select an OFF action.

4. Select the box below each Alert Level that corresponds to the users in this controlled area: Low, Guarded, Elevated, High, or Severe.
   
   

    

5. To add another Schedule line, click the button beside the first schedule line.

6. Click Save.

Door Monitor Tab

There are two Door Monitor Alarms for a controlled Door area: a Door Held Open Alarm that indicates a door being held open for a given period of time and a Door Forced Open Alarm that indicates that a door is being forced open without the use of a reader or an entry/exit device.

Enterphone tracks the status of a monitoring device and tracks the state of an entry and an exit device.  Once an event is triggered, two output actions can be activated for generating a buzzer or an alarm.

In the Door Monitor tab on the View/Edit Controlled Area screen:

Door Held Open Alarm

1. Under Door Held Open Alarm, check the Enable box.

2. Enter the number of seconds in the Held Open Time box before the alarm will sound.

3. Select output in the Output 1 dropdown box; in the Action box, select Activate or Deactivate; in the Duration box, select the number of seconds the alarm will sound.

4. Repeat Step 3 for Output 2 if necessary.

5. Select the Schedule from the dropdown box that you would like applied to the action, or select Always On if you need the action to be enabled 24/7; check the Effective Except for this Schedule box to have the alarm sound during all schedules except this one.

6. Check the General Alarm box if you need this action to generate an alarm in the Events tab.

7. Check the Ack. Required box to require an acknowledgment from the AMS Server.

8. Select a Severity level from the dropdown box: Warning, Error, Alert, Critical, or Emergency.

9. If needed, a customized message can be added in the Instruction field that will be displayed in the log when the Alarm is triggered. The Instruction dropdown menu passes the selected instructions to the AMS Server. To create a new alarm instruction, click the Alarm Instructions link and click Add Alarm Instruction in the Actions bar.

10. Once done, click save at the bottom of the window

Door Forced Open Alarm

1. Under Door Forced Open Alarm, check the Enable box.

2. Select output in the Output 1 dropdown box; in the Action box, select Activate or Deactivate; in the Duration box, select the number of seconds the alarm will sound.

3. Repeat Step 2 for Output 2 if necessary.

4. In the Racing box, enter the number of seconds when the door contact state change is reported before the push button bar signal reaches the system.  If Racing is set to 1, then the DFO will not fire if a REX is detected within one second of the door contact change state.

5. In the Shunt Window box, enter the number of seconds. This option shunts the alarm when the REX opens the door (no card scan releases the door).

6. Select the Schedule from the dropdown box that you would like applied to the action or select Always On if you need the action to be enabled 24/7; check the Effective Except for this Schedule box to have the alarm sound during all schedules except this one.

7. Check the Generate Alarm box if you need this action to generate an alarm in the Events tab.

8. Check the Ack. Required box to require an acknowledgment from the AMS Server.

9. Select a Severity level from the dropdown box: Warning, Error, Alert, Critical, or Emergency.

10. If needed, a customized message can be added in the Instruction field that will be displayed in the log when the Alarm is triggered. The Instruction dropdown menu passes the selected instructions to the AMS Server. To create a new alarm instruction, click the Alarm Instructions link and click Add Alarm Instruction in the Actions bar.

11. Click Save.

Advanced Tab

The Advanced tab on the Controlled Areas screen contains additional configuration flags:

Multi Card Swipe Tab

The multiple swipe action is intended to place multiple actions to change the state of a single Controlled Area, or an entire zone group on a pre-set number of card scans, in a defined window of seconds.

It is a recommended best practice to have the least secure action as the lower number and the higher secure action as the higher number.

Assigning a Multi Swipe Action by Group

In the Multiple Swipe tab on the View/Edit Controlled Area screen:

1. Select the Card Swipe Interval: the number of seconds that you count the multiple swipes for this controlled area.

2. Select a specific User Group if only the identified user group will have access to take action on this reader; select ANY to allow all user groups to have access.

3. Select a Controlled Area or a Zone Group to activate.

4. Select Open, Close or LOCKDOWN in the Action dropdown box.

5. Select a Schedule or select Always On.

6. Click Save.

Floors Tab

The Floors tab allows you to link one Controlled area to floors. Typically the controlled area is an elevator reader area and the linked Floor Controlled Areas are the floors that the reader would provide access to.

In the Floors tab on the View/Edit Controlled Area screen:

1. Select a Floor Controlled Area from the Linked Floor Area dropdown box to link to this controlled area.
   NOTE: More details on Floor Controlled Areas can be found in Chapter Elevator Configuration.

2. Enter a Delay time (a pause before the relay fires, default is 0 seconds) and an Activation Time (the duration that the relay activates, default is 5 seconds).

3. Click the Show Accessibility box to enter an Accessibility Delay time and an Accessibility Activation time. This is a separate set of delays and activation times for users with special needs (e.g. wheelchair, crutches) that are used if the Accessibility check box is selected on that user’s setup page. See Chapter Users for more information on setting up a User.

    

4. To link another floor to this controlled area, click the add button +

5. Click Save.

Assign a Device to a Controlled Area

The following steps allow the user to associate a device to a Door Controlled Area that has not been assigned a device previously.

1. Click on the Controlled Areas navigation tab and select the Controlled Area that was just created.

2. In the Actions bar, click Assign Device.

    

3. In the Assign/Replace Door Reader screen, select a Reader for this controlled area.

4. Select Default or Custom

Default: will assign Input 1 to Door Contact, and Input 2 to REX.

Custom: Allows you to determine which input is the door contact, and which is the request-to-exit.

5. Click Save. The screen expands with more options. The administrator will be able to adjust Controlled Area parameters as described in the above sections.

Alarm Instructions

A customized message can be configured that will be passed to the AMS Server and displayed in the log when an Alarm is triggered.  Alarm instructions can be used by Controlled Area’s Door Monitors or Port Triggered Actions in the next chapter.

To create an alarm instruction:

1. In the Controlled Areas navigation tab, click the Alarm Instructions link.

2. In the Actions bar, click Add Alarm Instruction. The following screen is displayed:

    

3. Enter a Description of the alarm instruction.

4. Enter any Details that pertain to this instruction.

5. Click Save.

Alarm Resolutions

Alarm resolutions are for the clear step of the alarm response process.

To create an alarm resolution:

1. In the Controlled Areas tab, click the Alarm Resolutions link.

2. In the Actions bar, click Add Alarm Resolution. The following screen is displayed:

    

3. Enter a Description of the alarm instruction.

4. Enter any Details that pertain to the instruction.

5. Click Save.

Port Triggered Actions

Port-triggered actions are output actions, such as alarms, triggered by a conditional input or output event from a device. Port triggered actions are useful for alarm monitoring and requests to exit.

If a port is triggered and either of two conditions is true, the Output Action is triggered. This output action can have a delay and an activation duration.

E.g. If Input 1 from a Enterphone Bridge is closed and the Front Door Reader’s Output is Not-Active then Front Door Reader’s Output should be Activated.

Adding a Port Triggered Action

1. Click on the Controlled Areas navigation tab.

2. On the left, click the Port Triggered Actions link.

3. In the Actions bar, click Add Port Trigger. The following screen is displayed:

    

4. Enter a Name for this action.

5. Select a Port Event from the dropdown list and select the state of the event: For inputs, choose Reset, Set, Error Break, or Error Short.

   For outputs, choose Activate or Non Active.

6. Choose up to two Condition States for an output port and the condition of that device’s output port.

7. Combine two conditions with AND or OR from the dropdown list. For example, if Front Reader’s Output Port is Not-Active AND Front Door Trip Input 1 is Active then the Output Action is triggered.

8. Select an Output Action and select Deactivate, Activate, Buzzer On, Buzzer Off, Latch Active, Unlatch Active or No Action.

9. Enter the Delay before activation for the output action.

10. Enter the Activation Time for the output action.

11. Select a Controlled Area and its associated action: Open, Close, Enable panel, Disable panel, LOCKDOWN, or Toggle.

12. Select a Schedule that defines the time that the Port Triggered Action is going to be used or leave it as Always On.

13. Generate an Alarm enables or disables logging of this Port Triggered Action in the alarm logs, desktop alarm client, and AMS servers.

14. Choose the Severity of the alarm level: Info, Warning, Error, Critical, Alert, or Emergency, when set to Alarm this will log the action to the Alarm Log. 

15. If needed, a customized message can be added in the Instruction field that will be displayed in the log when the Alarm is triggered. The Instruction dropdown menu passes the selected instructions to the AMS Server.

16. Select an Alarm Area.

17. To lag an NVR camera clip to the Port triggered event, select the camera from the NetCam drop-down list. Before Event and After Event specify the time window (in seconds) of the clip relative to the event.

18. Click Save.

Zone Groups

Zone Group Management and Anti-Passback

Zone Groups allow users to group various Controlled Areas to form a Perimeter Security Zone where Anti-password rules can be applied.

Adding Zone Groups

1. Click on the Controlled Areas navigation tab.

2. On the left, click the Zone Groups link.

3. In the Actions bar, click on Add Zone Group.

4. Enter a Name for the zone group.

5. Enter an optional Description of the group.

6. Check the Anti Passback Enabled box to enforce anti-passback for this zone group.

7. In the Anti Passback Forgiveness dropdown box select from the following options:

8. Check the APB Enforced on Exit Readers box to enable this feature; anti-passback is imposed on exit readers also. You must set EnforceExitAccessRight to Yes in siteEngine.ini – go to the System tab, Administration, System Parameters page to edit this file.

9. Select a group of users in the Exempt Access Groups if you want them to be exempt from anti-pass back rules.

10. Click Save.

Assigning Controlled Areas to Zone Groups

Once Zone Groups are created, controlled areas can be assigned to the zone groups.  A Zone Group is a security perimeter that contains multiple controlled areas.  Each zone group can exercise anti-passback rules in its controlled areas. For example, a building with two entrances can be seen as a zone group with two controlled areas (doors).  If the anti passback rule is enforced in this building, a person cannot enter through one door and re-enter to either door without first exiting the building.

To assign a Controlled Area to a Zone Group:

1. Click on the Controlled Areas navigation tab.

2. On the left, click on the Zone Groups link.

3. Click on the Zone Group to edit.

    

4. In the Controlled Areas drop-down box, select all the Areas that are to be included.

5. Click Save.

Resetting Anti-Passback Manually

Enterphone Administrators can manually reset Anti-passback locks by editing the zone group record:

1. Click on the Controlled Areas navigation tab.

2. On the left, click on the Zone Groups link.

3. Click on the Zone Group to edit.

4. In the Edit Zone Group page, click the [Forgive All] button.

5. Click Save.

Manually Reset a User’s, Anti-Passback Lock

Enterphone Administrators can manually reset a user’s anti-passback lock via the Users page:

1. Click on the Muster navigation tab.

2. Check the box in the Reset column next to the user and click the [Reset] button above it.
   
   

    

Mustering

The Muster tab has two sub-links: Muster/Anti Passback and Emer. Mustering. This functionality must be turned on in licensing.

Muster/Anti-Passback

This page shows a live view of the number of users who have entered into or exited from a Controlled Area. You can also go here to identify who is in what areas for anti-passback.

Emergency Mustering Report

The Emergency Mustering Report tab allows you to create custom area reports by Access Group and Controlled Area to support operations. This report is useful when security staffs want to find out who are in the designated safety area (e.g. a zone group) during an emergency.

To create a custom Mustering Report:

1. Click on the Muster navigation tab.

2. On the left, click on the Emer. Mustering link. The following screen appears:

    

3. Select the Zone Group which represents the designated safety zone.

4. Select Access Groups to report on.

5. Select User Categories to report on.

6. Enter an Alarm Message Token to identify when a tagged event is enabled; it will grab the last event date and time as an anchor point to help highlight users who have entered the safety zone before the alarm took place. If there is no alarm required, leave this input blank.

7. Select the Zone Groups to be excluded in Report and select In, Out, or Both from the State dropdown box for each Controlled Area selected. This feature helps to filter areas from the report that are not relevance to the alarm event.

8. Click the Add button to add this report to your list of Mustering Reports. These reports will list at the top of the screen and as sub-links on the left once they are created.

Access Groups

Access Group Management

An Access Group is an organizational unit in which users can be placed.  This lets the administrator apply access rights to groups instead of people, for ease of administration.  This also lets the administrator make changes to a group of people as opposed to having to change the rights individually.  An access group can have 1 or thousands of people (user accounts) assigned to it. There are also Floor Access Groups that allow access to specific floors and Guest Access Groups that work in conjunction with MESH panels. The instructions for adding each type of group are the same.

Adding a User, Floor or Guest Access Group          

1. Click on the Access navigation tab.

2. Click on the User Access Groups, Floor Access Groups or Guest Access Groups link.

3. In the Actions bar, click on Add Access Group. The following screen is displayed:

    

4. Enter a Name and a Description.

    

5. Select the Risk Levels during which this group will have access: Low, Guarded, Elevated, High or Severe (the current risk level is always displayed at the top of the Enterphone screen)
   For more information on Risk Levels see the Alert Level Management section.

6. Select a Controlled Area for this group.

7. Select a Schedule for the Controlled Area. If that controlled area is not going to be accessed by that User Access Group, leave the schedule as Always Off.

8. If you need an additional line for extra Controlled Areas and/or Schedules, click the + button beside the current line. To delete a line, click the x button.

9. Click Save.

Global User Access Groups

In Enterphone version 10.3, User Access Groups can be global to all sites. This makes Access administration more efficient for large enterprise systems. For example, all employees within an enterprise are assigned a general Access Group “Employees”. This group can be associated with any controlled area/schedule pairs in any sites.

To create a Global User Access Group:

1. Click on the Access navigation tab.

2. Click on the User Access Groups.

3. Enter a Name and a Description.

4. Click Global Group check box.

    

5. Click Save to create the Access Group.

Once a Global Group is added, it will be visible to all sites. Administrators can associate it with any controlled area-schedule pairs that are local to the selected site.
Notice the Icon that highlights the Global Access Group “Employees”.

Users

Configuring a User’s Access

A User’s right to access through a door or to a floor is set up by entering a person into an Access Group. This Access Group is set to have the right to gain access to certain areas (controlled areas) of a facility at certain times (schedules).  The following chart is a guide to setting up a person’s access rights.

Typically schedules are configured and then controlled areas are configured.  Once done these are attached to an Access Group.  The final step is to assign a User to an Access Group

Adding a User Account

In order to assign cards or key fobs to people, User Accounts must be set-up.  During this process, a User is assigned to an Access Group (or multiple Access Groups) which in turn defines their Access Rights.  To set up a User Account do the following:

1. Click on the Users navigation tab.

2. In the Actions bar, click on Add User.  The following screen is displayed. 

    

3. Enter the user’s Last Name.

4. Enter the user’s First Name.

5. Select Yes or No to Display this user’s name in the Directory if there is an intercom on the panel.

6. Select this user’s Suite. This is also for Intercom functionality

7. Enter the MESH Card Number.

8. Enter the Wiegand Card Number that is assigned to the user or click on the [Read Card] button and present the card to the reader - the Wiegand number will automatically fill in the field. If the number is unknown, a card reader can be set up as an enrolment reader. To set up an enrolment reader, click on Select Enrolment Reader from the left menu and select the appropriate card reader.

9. Enter a PIN number for the card. This is for Intercom functionality.

10. Enter the user’s Email address.

11. Enter the user’s Telephone number.

12. Select the User Access Groups in the Available box that should be assigned to this user and click the right arrow button to move the group to the Selected box.

13. Select the Floor Access Groups for this user.

14. Enter the Date that the user’s access rights will Start.

15. Select Never, or enter the Date that the access rights of this user will Expire.

16. Click the Accessibility box if this is a user with special needs (i.e. wheelchair or crutches) that requires the longer Accessibility Delay and Activation times configured in Controlled Areas.

17. Select Yes to Enable Admin Functions if this user is an administrator – the View/Edit Admin User options will become available.

18. Click Save.

User Categories

You now have the ability to filter a global database of users by user category. Admin Users can be configured to see specific user categories.

1. Click on the Users navigation tab.

2. On the left, click on the User Categories link.

3. To add a new user category enter a Category ID number and a Category Name and click the add button.

4. To remove a User Category click the delete button.

    

Once you have created all of your User Categories you can assign them to your Admin Users in order to filter the users they have access to. Please refer to the Admin Users section to assign the categories.

Elevator Configuration

Elevator Management

In Enterphone each reader can only be assigned to one Door Area only. In order for Enterphone to activate floor relays upon a card swipe, it now has a new Floor Controlled Area type that can link to a Door Area where the elevator reader resides. Each Floor Area contains outputs that would activate its corresponding elevator controls. In order for users to obtain access to floors, they would need to have both User Access Groups (for card access) and Floor Access Groups (for elevator/floor access).

Installing Hardware

• Install a Wiegand reader in the cab, and connect its Wiegand wires to an FB9 adaptor.

• On the FB9 adaptor board, change the address to 1 using the dip switch.

• Run an RS485 cable long enough to connect the FB9 adaptor to the FB5 board which is located in the elevator/engine room of the building. This cable will likely run along the elevator shaft. Relays on the FB5 would be used to interface with the Elevator Control System in the Elevator/Engine Room.

Device Setup

In the Enterphone Software, make sure that the FB5 (Digital IO) device has been added in the System – Devices tab. See Enterphone Bridge Configuration for more information.

Create a Controlled Area - Type Floor

1. Click on the Controlled Areas navigation tab.

2. In the Actions bar, click Add Controlled Area.

3. Enter a Name and Description for the Controlled Area.

4. Select Floor Area in the Area Type dropdown box.

    

5. Click Save.

Add All Outputs that Belong to that Floor

This is intended to trigger all of the outputs that a user has access to.  If a user has access to multiple floors, you would select all of the outputs that complete the circuit.

1. Once the Controlled Area is saved, the Outputs and Unlock Schedule tabs appear.

2. Select a device Output for this Floor controlled area. You may select and add multiple Floor Areas. Click the plus sign button to add the selected Output(s).

3. To create an unlock schedule, click on the Unlock Schedule tab. Please see the Unlock Schedules section of the Controlled Areas chapter earlier in this document for more information.

    

4. Click Save.

Link Floor Areas to the Elevator Reader’s Door Area

Create a Door Area and assign it to the elevator reader. Link all the Floor Areas that the reader can provide access to.

1. Create a new Controlled Area with the elevator reader.

2. In the new Controlled Area’s Floor tab, select all the associated Floor Areas; specify the desired activation time, and click +.

Create a Floor Access Group

Create a floor access group to link the controlled area to a floor.  You can have multiple floor access groups added to a single controlled access group.

1. Click on the Access navigation tab.

2. On the left, click on the Floor Access Group sub link.

3. In the Actions bar, click Add Floor Access Group.

4. Enter a Name and a Description and click Save.

5. Check the box(es) beside the Risk Level allowed for this floor.

6. Selected the Controlled Area to link to this floor access group. If you need additional controlled area click the + button to add another line.

7. Click Save.

Assign Groups to the User

Add permissions to a floor access group in the User account.  This grants access to the floor access group relays defined under the floor group created.

1. Click on the Users navigation tab.

2. Click on a User.

3. Scroll down to the Floor Access Group boxes and click on the Available Floor Access Group to move it to Selected. Select all floor access groups for this user.

4. Click Save.

Example Scenario

The builder has 3 floors with one elevator cab. A reader is installed inside the elevator cab. As the tenant enters the elevator, he/she needs to present a card to access the floor(s) that he/she has rights to.

Controlled Area Configuration

1. Click on the Controlled Areas navigation tab.

2. In the Actions bar, click Add Controlled Area.

3. First, we want to create a Door Controlled Area for the Elevator Reader. In this example select FB5’s Reader 1 and this will be the cab reader.

4. Since there are 3 floors, you will create 3 Floor Controlled Areas. Name the first one Floor 1 Elevator Control and enter an extra Description line if necessary.

5. Select Floor Area in the Area Type dropdown box.

6. Select the FB5’s Reader 1 as its (Entrance) Reader. This Reader 1 will be the cab reader. 

7. Click Save.

8. The Outputs and Unlock Schedule grid will appear. In the Outputs tab, select the FB5 Relay that activates Elevator Control Access to Floor 1 (e.g. Relay 1).

9. Click on the Unlock Schedule tab to assign a schedule for this elevator if desired. For more information, please refer to the Unlock Schedule section of Chapter Controlled Areas.

10. Click Save.

11. Repeat Steps 2 to 9 to create a Floor 2 Elevator Controlled Area and add the same FB5 Reader in it as its entrance reader. In the Outputs tab, add the FB5 Relay that activates Elevator Control Access to Floor 2 (e.g. Relay 2).

12. Repeat Steps 2 to 9 to create Floor 3 Elevator Controlled Area and add the same entrance reader and Floor 3 relay (e.g. Relay 3).

13. Return to the Door Controlled Area created in Step 3, go to the Floors tab, and add the three Floor Controlled Areas to it.

Create a Floor Access Group

Create a floor access group to link the controlled area to a floor.  You can have multiple floor access groups added to a single controlled access group.

1. Click on the Access navigation tab.

2. On the left, click on the Floor Access Group sub link.

3. In the Actions bar, click Add Floor Access Group.

4. Enter a Name and a Description and click Save.

5. Check the box(es) beside the Risk Level allowed for this floor.

6. Selected the Controlled Area to link to this floor access group. If you need additional controlled area click the + button to add another line.

7. Click Save.

Assign Groups to Users

You can assign a User Access Group to give general access to your users or a Floor Access Group to give them access to specific floors.

1. Click on the Users navigation tab.

2. Select a Floor 1 user from the list of users.

3. Scroll down to User Access Group or Floor Access Group. Click on the “Floor 1” Access Group in the Available box to move it to the Selected box.

4. Repeat Step 3 for all Floor 1 users.

5. Repeat Step 3 to add the “Floor 2” Access Group to all Floor 2 users and “Floor 3” Access Group to all Floor 3 users.

6. Click Save.

Operation

As a Floor 1 User presents the access card to the cab reader, the reader LED should light up (access granted) and allow elevator access to Floor 1 (e.g. Floor 1 button lights up).

Similarly, a Floor 2 User’s card would allow the user to access Floor 2 inside the cab.

Events

Event Management

The Events tab displays information such as the access attempts to the building and whether they are granted or not. Calls placed, answered and wrong numbers dialed from the panels are logged.  If an Enterphone Panel has the optional camera installed, a snapshot of the user is taken once access is granted or denied.

Viewing Events

The Events page refreshes automatically depending on login settings and is divided into a grid. The grid sections contain information about the event that took place. Multiple devices whose states are changed as a result of one event are grouped together to help with readability. Expanding an event will show all the resultant device changes.

1. Click on the Events navigation tab. The following screen is displayed:
   
   

    

2. Check the boxes above the grid to display the following options:
   Live Update: Check this box to update the table when there is live data or pause it for discussion and/or troubleshooting.
   Local Time: The local monitoring time of the system.
   Category: The final category of what is occurring.
   Event Code: The events that are supposed to occur.
   Current Site Only: The current site; leave unchecked to show data for all sites.
   Access Events Only: Only show access-related events.  To see all I/O and logic leave this box unchecked.

3. From the Display dropdown box, select Today, Last 3 days, This Week, or This Month.

4. Select the number of entries to Show on one page.

5. You can filter the view by entering Search criteria and/or selecting the Type of event you’d like to view from the dropdown box. Type in the search text and hit Enter.
   
   

    

6. If an Enterphone Panel has the optional camera installed, a snapshot of the user is taken once access is granted or denied by a suite. Click the + to view the snapshot.

As user is entering search content, Enterphone will provide type-ahead hints for the user. If the user prefers using a wildcard search, type ‘*’ to suspend type-ahead and continue to enter search text.

Event Groups & Categories

All events fall into one of the following groups and categories. In addition, every event in the system has an event id associated for searching.

Searching Events

You can search events to track access or errors over several days. When searching events, it is possible to filter results by particular devices or events and it is also possible to generate a PDF or a CSV document from your search results.

1. Click on the Events navigation tab.

2. On the left, click on the Search Events link. The following screen is displayed: 
   
   

    

3. Enter a From and To Date and Times for the data you wish to search.

4. Enter Search Criteria in the Filters input box.

5. Click the [Search] button to retrieve result set records.

6. Result set will be shown in the area below the search criteria. The user may choose to download a copy of the result set in either CSV or PDF format by clicking the corresponding buttons.

Set Audit Data Search Criteria

1. Click on the System navigation tab.

2. On the left, click on the Utilities link.

3. Click on the Audit Data sub link.  The following screen is displayed:
   
   

    

4. Enter a From and To Date and Times for the data you wish to search.

5. Enter a User ID.

6. In the Change box, enter a specified string from the audit logs to search through the data that has changed.

7. Select an Action.

8. In the Original Data box, enter a specified string from the audit logs to search through the original data. For example, you could search for a card number in the original field to find out who previously had this card.

9. Select a Function.

10. Click the [Search] button.

Export to a CSV File

You can export Event and User search data to a CSV file by clicking the CSV button.

Export to a PDF File

Data on the Device tab can be exported to a PDF file by using the PDF button.

Enhanced Access Denied Diagnostics

Enterphone now has the ability to display why a user was denied in the system with all of the possible complex options.  This data will also display in the activity details.

Reports

Reporting Management

In most sections of the Administration Software, it is possible to generate a report (or several types of reports) for that section. Reports are generally used for auditing purposes and to view the data for a section in one place making at-a-glance viewing and printing easier. Generated report files are in PDF file format. Adobe’s Acrobat Reader might be required to view these files.

Because generating reports requires accessing data that may be privileged, it is important that the user you are logged in as and under which you would like to generate a report has adequate permissions to access the report-generating functionality of Enterphone.

Creating PDF Report Files

PDF files can be generated from most pages by clicking on the [PDF] button beside the Search box. This will generate a PDF file and the user will be asked to save the PDF file in a local folder or the file will saved to a default location, depending on browser settings.

PDF reports can be generated for the following pages: System, Suites and Businesses, Users, User and Guest Access Groups, Controlled Areas and Port Triggered Actions, Schedules, and Special Days.

Reports Available By Page

Time and Attendance Reports

The Enterphone System is capable of generating reports of who has entered a particular Controlled Area in a given time frame, and who is currently in a particular area. This controlled area needs to have an Entrance and an Exit reader programmed. A report can also be generated in PDF format or CSV to be imported into a spreadsheet or database application.

1. Click on the Events navigation tab.

2. On the left, click on the Reports link.

3. Click on the Attendance sub link.

4. Enter a From/To date and time.

5. Select the Zone Group(s) of interest.

6. Optionally select User Category of interest.

7. Optionally provide a Suite number, Card number, First or a Last name.

8. Select either CSV or PDF report type. The two additional types – CSV summary and PDF Summary reports would show daily card holder attendance summaries. All access transaction details are omitted.

9. Click the Search button.

Backup & Restore

Manual Backup and Restore Configuration (Data)

It is recommended that regular backups of the database are made. Backup files should be stored on digital media such as flash drives or CDs and preferably kept in a secure place.  Because the backup files can contain sensitive information they should be protected from unauthorized access.

Manually Backup Data

1. Click on the System navigation tab.

2. On the left, click on the Administration link.

3. Click on the Backup Data sub link.

4. Find the location to store the file on the local computer.

5. Click Save

Manually Restore Data

1. Click on the System navigation tab.

2. On the left, click on the Administration link.

3. Click on the Restore Data sub link.

4. Click the Choose File button. This will display the contents of the local computer.

5. Find and open the backup file.

6. Select the type of Restore:

7. Click the RESTORE button.

8. Reboot the system using the reboot link in the Utilities section.

Local Automatic Backup and Recovery Management

Mesh systems do an automatic backup every day. These backup files can be used to bring the system back to a previous state before a file corruption may have occurred. These are done locally, and are part of the standard internal operation of all Mesh and Mesh systems.

Restore Database from Local Automatic Backup

1. Click on the System navigation tab.

2. On the left, click on the Administration link.

3. Click on the Backup Data sub link.

4. Click the plus (+) sign beside Restore from a system backup. This will display a list of previously saved back up files. These files are sorted by date.

5. Click the Restore button beside the correct backup file.

6. Reboot the system using the Reboot link from the Utilities section.

Manual Backup of History (Event Logs)

All activities a system performs such as dialing a suite from the panel, allowing PIN access, and allowing (or denying) access control activities. Anyone whose user profile grants them access to the log can view and search the logs, and if the optional camera is installed, view photographs of people who use a system to access a building. Once a date is specified for backup a compressed ZIP file is created.

This file can be uncompressed using standard compression utilities built into Windows. After uncompressing the logs a program like Open Office or Microsoft Excel is needed to view the uncompressed comma-separated value (CSV) file. The log backup file cannot be restored back. It is only for auditing purposes.

Backup Local Business Admin Users

Because business admin users can’t access the System tab, the backup log instructions are different. Please refer to the Backup of Logs for Business Users section for more information.

Open Log Files  

1. Decompress the Log file that was saved in the previous sections.

2. Use either Microsoft Excel or a CSV-compatible application to view the CSV file.

Setting Up Remote Automatic Backups

1. Click on the System navigation tab.

2. On the left, click on the Utilities link.

3. Click on the Remote Backup sub link.
   
   

    

4. Select the Backup Method:

• CIFS/SMB  (Linux System Backup)

• FTP   

• SFTP

5. In the Server field, enter the IP address with the corresponding protocol.

6. Enter the Remote file system Path.

7. Enter the User name and Password that have permission to write to the server and path.

8. Select the Frequency of backups to be sent to the file:

• Now – Sends when you select save. Recommended to be used for the initial backup testing.

• Hourly

• Daily

• Weekly

• Monthly

9. Click Save

Importing Data

To import data to the database, import a template from the Import Data screen under the System 🡪 Administration 🡪 Utilities tab. When importing data to the database it will be added to existing data. Existing data will not be replaced by this function. Suite, Suite Code, and Business Name have to be unique in the imported data and existing data. User field does not need to be unique, but it will create duplicates if identical names are imported.

Obtain a Data Template

1. Click on the System navigation tab.

2. On the left, click on the Utilities link.

3. Click on the Import Data sub link.

4. At the bottom of the page under To obtain a Data File Template, right-click on the template and select “Save Target As...”, ”Save Link As...”, or equivalent option from the pop-up menu that appears.

5. Select a directory to save the Mesh data backup file in the ”Save as” dialog box.

6. Name the template with the .xls extension. For example, user-template.xls.

7. If the “Download complete” dialog box persists after the copy completes, click Close. Follow these steps carefully to append data to the database.

Setting up a database file to import:

1. Open the template file using MS Excel, or a compatible spreadsheet application. Fill in the data.

2. Do not delete or change the header cells in the template or the import will fail.

3. Save the file to the comma-separated values (*.csv) format.

4. Always import the Business file first, followed by the Suites file, then the Users file.

5. The result page displays the imported lines that generated errors. To correct the errors, create a new data file with the corrected data of those lines only and import the new data file.

6. In the Users template, leave the User ID column blank.  This field is reserved for the Mesh system.

Importing Data

1. Select the type of data that is being imported from the Target Data table dropdown menu.

2. Click Browse.

3. Find the data file that is being imported; make sure it is in CSV format.

4. Click the Import button to add the data to the database, if no errors are displayed the importing is complete.

Alert Levels

Alert Level Management

Alert Levels allow the Enterphone server to adjust its access control behaviour globally. Controlled Area Schedules and Access Groups can be restricted by alert levels. As a security level escalates, the Enterphone server can restrict access accordingly. For example, a front entrance of a building is open during office hours. However, when the alert level is escalated to HIGH, the system can automatically lockdown the front entrance by overriding the open schedule.

Alerts Levels

When enabled in the license file Enterphone Admin, the current alert level is always shown at the top of the page.

In this example, Access Groups Standard Employees have no access when the alert level is “High” or “Severe”.

Controlled Area Configuration of Alert Levels

In this example, the Controlled Area is set to open during office hours only when the alert level is Low or Guarded. To configure alert levels for controlled areas, go to the Unlock Schedule tab on the View/Edit Controlled Area page.

Change of Alert Level

Enterphone Administrators can set the current Alert Level by going to the System tab under Administration and clicking Risk Level.

When replacing a Motherboard Assembly

Verify all Default (ini) Settings are correct for the panel’s application.

a. Select System > Administration > System Parameters, verify and change the following as necessary:

b. Reboot the server.

Primis/Enterphone V12 updates

Enterphone Mobile App Enhancements

V12 Enterphone can make SIP (Session Initiation Protocol) calls to Identiv’s Enterphone Mobile App. Once enabled in the license, the enterphone panel will be assigned a unique SIP user account.

To verify the SIP account registration status

1. Go to System->Enterphone->SIP 

2. The SIP account name is shown under “User”

3. Look for “Registration Status”

4. If the status is “Not Registered”, click “Register” to register the SIP account.
   
   

    

5. Once registration is done; statuses such as Registration, Ping Response and Query Response should show “Ok”. Should any one of the three statuses fail, please contact Identiv support.
   
   

Differences in SIP-Enabled Panels

1. Each tenant is entitled to a SIP account. 

2. Once a suite is assigned to a tenant/user that owns a SIP account, that suite cannot be shared by other tenants. However, suites can be shared among non-SIP users.

3. The tenant can register his/her Enterphone Mobile App with the SIP account’s QR code which is available from Primis Web Admin.

4. For SIP/Enterphone Mobile equipped tenants, SIP accounts will be the primary number to calls. The regular suite phone number will be the alternate number;  that is, when SIP calls would not go through, the Enterphone panel will dial the regular number. The regular alternate number under suites will be ignored in this case.

5. Note that “snapshots” will not be available once SIP is enabled. This is because WebCam is occupied by the SIP client on the Panel.

To create a SIP account for Enterphone Mobile

1. Go to Users

2. Either create or edit an existing user

3. Click “Create SIP Account”
   
   

4. Once a SIP account is created, the account name will appear along with a delete account button, a QR code button and an email button:
   
   

5. To remove the SIP account, click the “[ X ]” button.

6. To show SIP account’s QR code, click the blue button to the right.

Enrolling Enterphone Mobile App to Identiv’s SIP network

1. Mobile App users can sign up to Identiv’s SIP network with the QR code provided by Enterphone Web Admin.

2. To enroll, start the Mobile App and click “Sign Up”
   
   

3. Click the “Scan QR Code” icon in the center and present the QR code from Enterphone Admin:
   
   

4. Once successfully enrolled, all Enterphone panels under the same customer account will be listed:

5. Alternatively, administrators can send SIP account registration emails to end users by clicking the “Email QR Code” button:

Once this email is received by the end user’s mobile device; clicking the link in the email can register the device to the Identiv SIP network. If the Enterphone App has not been installed, this link will automatically download it from the internet.

Primis Server V12 SIP Support

Primis V12 server can work with SIP capable Enterphone panels in a main/peer network.

To verify that the server is connected to Identiv’s SIP service.

1. In System->Enterphone->SIP, verify that both Ping and Query Responses are of “Ok” status.

2. Note that the “Register” button is only necessary when API or SIP domains have changed. 

3. All other administrative functions remain the same as that in Enterphone V12 Panels (e.g. add/edit users/suites, SIP account creation/enrollment).