V-Station 20Optical 20Sensor 20Operators 20Manual

8/13/2019 V-Station 20Optical 20Sensor 20Operators 20Manual

http://slidepdf.com/reader/full/v-station-20optical-20sensor-20operators-20manual 1/138

Operator's ManualV-Station ™



Part No. 430-00121-14 V-Station Operator's Manual

©Copyright 2007, Bioscrypt Inc. All rights reserved.

C OPYRIGHT INFORMATION

© 2007 Bioscrypt Inc.

All rights reserved. This product and related documentation are protected by copyright and distributed

under licenses restricting its use, copying, distribution, and de-compilation. No part of this product orrelated documentation may be reproduced in any form by any means without prior agreement andwritten permission from Bioscrypt Inc.

T RADEMARKS

V-Station™, MV1200™, MV1210™, MV1510™ and MV1610™ are trademarks of Bioscrypt Inc. Au-thenTec™ is a trademark of AuthenTec, Inc. MIFARE® is a registered trademark of NXP Semiconduc-tors. iCLASS® is a registered trademark of the HID Corporation. All other brands and products refer-enced herein are acknowledged to be trademarks or registered trademarks of their respective holdersor manufacturers.

THE PRODUCT AND PUBLICATION ARE PROVIDED “AS IS” WITHOUT WARRANTY OF ANY KIND,

EITHER EXPRESS OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OFMERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT.

THIS PUBLICATION COULD INCLUDE TECHNICAL INACCURACIES OR TYPOGRAPHICAL ERRORS.CHANGES ARE PERIODICALLY ADDED TO THE INFORMATION HEREIN; THESE CHANGES WILL BEINCORPORATED IN NEW EDITIONS OF THE PUBLICATION. BIOSCRYPT MAY MAKE IMPROVE-MENTS AND/OR CHANGES IN THE PRODUCT(S) AND/OR THE PROGRAM(S) DESCRIBED IN THISPUBLICATION AT ANY TIME.

C OPYRIGHT INFORMATION







TABLE OF C ONTENTS

3.4.3.6. Multi-User Verify ................................................................................. 30

3.4.3.7. PW Mode ............................................................................................ 31

3.4.4. Front Panel System Admin Menu ....................................................................... 31

3.4.4.1. Contrast Control ................................................................................. 31

3.4.4.2. Set Time/Date ..................................................................................... 31

3.4.4.3. Transaction Log .................................................................................. 32

3.4.4.4. Erase Verify Queue ............................................................................. 32

3.4.4.5. Set Factory Defaults ........................................................................... 32

3.4.4.6. Change CVE Mode ............................................................................. 32

3.4.5. Front Panel Menu Tree ....................................................................................... 33

3.4.5.1. Initial Administrative Menu .................................................................. 33

3.4.5.2. Template Admin Menu ....................................................................... 34

3.4.5.3. Template Settings Sequence ............................................................. 35

3.4.5.4. COMM. Admin Menu .......................................................................... 36

3.4.5.5. Security Admin Menu ......................................................................... 37

3.4.5.6. System Admin Menu .......................................................................... 38

3.4.5.7. Ethernet Options Menu ....................................................................... 39

3.4.5.8. Smart Card Sequence ........................................................................ 39

3.4.5.9. Verify Actions Menu ............................................................................ 39

4. Operating the V-Station from VeriAdmin Software ............................................................................. 40

4.1. Basic System Architecture ................................................................................................. 40

4.1.1. Enrollment ........................................................................................................... 41

4.1.2. Templates ........................................................................................................... 41

4.1.3. Multiple Readers ................................................................................................. 42

4.1.4. Template Backups .............................................................................................. 42

4.1.5. LEDs .................................................................................................................... 43

4.2. VeriAdmin Management Software ...................................................................................... 44

4.2.1. Transmit ID/Current Reader ................................................................................ 44

4.2.2. Host, Aux, and Ethernet Ports ............................................................................ 45

4.2.3. Serial Port Settings and Baud Rates .................................................................. 45

4.3. Sensor Test and Finger Detect Timeout ............................................................................. 46

4.4. Updating Firmware ............................................................................................................. 474.5. Reset Reader to Factory Defaults ....................................................................................... 51

4.6. Template Conversion Menu ................................................................................................ 52

4.7. Wiegand Utilities ................................................................................................................. 53





TABLE OF C ONTENTS

5. Network Configuration Manager ......................................................................................................... 54

5.1. Network Tree ...................................................................................................................... 55

5.1.1. Adding Readers to the Tree ................................................................................ 55

5.1.2. Moving Readers Between Ports ......................................................................... 55

5.1.3. Removing Readers from the Network ................................................................ 55

5.1.4. Adding or Removing Ports ................................................................................. 55

5.1.5. Checking Network Status of Readers ................................................................ 56

5.2. General Reader Settings ..................................................................................................... 56

5.3. Reader Status ..................................................................................................................... 56

5.4. Advanced Settings .............................................................................................................. 56

5.5. Other Options ..................................................................................................................... 57

5.6. Setting Up a Network ......................................................................................................... 57

6. Unit Parameters .................................................................................................................................. 59

6.1. General Tab ........................................................................................................................ 59

6.2. Communication Tab ........................................................................................................... 60

6.2.1. Network Identification Number ........................................................................... 60

6.2.2. Host Port and Aux Port Baud Rates ................................................................... 60

6.2.3. Aux Port Security ................................................................................................ 61

6.2.4. Test Communications ......................................................................................... 61

6.3. Wiegand Tab ....................................................................................................................... 62

6.3.1. Pre-Defined Wiegand Formats ........................................................................... 62

6.3.2. Uploading a Custom Format .............................................................................. 63

6.3.3. On Success: Alt Site Code ................................................................................. 63

6.3.4. On Failure: Fail ID Code ...................................................................................... 63

6.3.5. On Failure: Fail Site Code ................................................................................... 63

6.3.6. On Failure: Invert Parity Bits ............................................................................... 64

6.3.7. Enable Input ........................................................................................................ 64

6.3.8. Enable Output ..................................................................................................... 64

6.3.9. Pulse Width ......................................................................................................... 64

6.3.10. Pulse Interval .................................................................................................... 64

6.3.11. Wiegand Pass-Thru Formats .............................................................................65

6.3.12. Creating User Defined Pass-Thru Format Options .......................................... 656.4. Biometrics Tab .................................................................................................................... 66

6.4.1. Global Security Threshold .................................................................................. 67

6.4.2. Biometric Verification .......................................................................................... 67

6.4.3. Auto-Finger Detect (V-Station Base in Searching Mode Only) .......................... 67





TABLE OF C ONTENTS

6.4.4. Security Level None Options .............................................................................. 67

6.4.5. Security Level 6 Options ..................................................................................... 67

6.4.6. Multi-User Verification ........................................................................................ 68

6.4.7. Unit Mode ........................................................................................................... 68

6.4.8. Password Verification (V-Station Only) ............................................................... 68

6.4.9. Duress Finger Mode ........................................................................................... 68

6.5. General Purpose I/O Tab .................................................................................................... 69

6.5.1. General Purpose Input ........................................................................................ 69

6.5.2. General Purpose Output ..................................................................................... 70

6.6. LED Table Tab .................................................................................................................... 70

6.7. Misc. Tab ............................................................................................................................ 71

6.7.1. Send Verification Result ...................................................................................... 71

6.7.2. Verification Polling Mode .................................................................................... 72

6.7.3. Broadcast Parameters ........................................................................................ 72

7. Template Manager .............................................................................................................................. 73

7.1. Editing Templates ............................................................................................................... 73

7.2. Deleting Templates ............................................................................................................. 75

7.3. Exporting the List ................................................................................................................ 75

7.4. Verifying Template .............................................................................................................. 75

7.5. Transferring Templates ....................................................................................................... 76

7.5.1. Transferring Templates from a Unit to a Smart Card ......................................... 76

7.5.2. Transferring Templates from a PC to a Smart Card ........................................... 77

7.5.3. Transferring Templates from a Unit to a PC ....................................................... 77

7.5.4. Transferring Templates from a PC to a Unit ....................................................... 78

7.5.5. Transferring Templates from Unit to Unit ........................................................... 79

7.5.6. Broadcasting Templates from a PC ................................................................... 80

7.5.7. Editing Templates on a PC ................................................................................. 81

8. Command Card Manager ................................................................................................................... 82

8.1. Administering Command Cards ......................................................................................... 82

8.1.1. Creating Command Cards .................................................................................. 82

8.1.2. Removing Command Cards ............................................................................... 82

8.1.3. Using Command Cards ...................................................................................... 838.1.3.1. Enrolling a User with a Command Card ............................................. 83

8.1.3.2. Deleting a User with a Command Card .............................................. 83

9. Using the Smart Card Manager .......................................................................................................... 84

9.1. Deleting Templates ............................................................................................................. 85





TABLE OF C ONTENTS

9.2. Using Wiegand Strings ....................................................................................................... 85

9.3. Deleting Wiegand Strings ................................................................................................... 85

9.4. Securing Cards ................................................................................................................... 86

9.5. Resetting Card .................................................................................................................... 86

9.6. Max Templates Per Card .................................................................................................... 86

9.7. Read-Only Mode ................................................................................................................. 86

9.8. Auto-Updating Site Keys .................................................................................................... 87

9.9. Smart Card Security Settings ............................................................................................. 88

9.9.1. Software Hash .................................................................................................... 88

9.9.2. Using Site Key Encryption .................................................................................. 88

9.10. Smart Card Site Key Management ................................................................................... 89

9.10.1. Site Keys ........................................................................................................... 89

9.10.2. Why Site Keys are Used ................................................................................... 89

9.10.3. The "Default" Site Key ...................................................................................... 89

9.10.4. Site Key Storage ............................................................................................... 89

9.10.5. Primary and Secondary Site Keys .................................................................... 89

9.10.6. Initial Site Keys .................................................................................................. 90

9.10.7. Site Keys on Individual Smart Cards ................................................................ 91

9.10.8. Changing the Site Keys of Previously Created Smart Cards ........................... 92

9.10.9. Forgotten Site Keys .......................................................................................... 93

9.10.10. Compromised Site Keys ................................................................................. 93

9.10.11. One-Way Hashing Function for Site Keys ...................................................... 93

9.11. Card Type ......................................................................................................................... 94

9.12. Configure Card Layout ...................................................................................................... 94

9.12.1. MIFARE-Based V-Station Layout Manager ...................................................... 94

9.12.1.1. MIFARE Memory Structure ............................................................... 96

9.12.1.2. MIFARE New Layout ......................................................................... 96

9.12.1.3. Moving the Admin Block .................................................................. 97

9.12.1.4. Saving MIFARE Layouts to PC ......................................................... 97

9.12.1.5. Changing the Smart Card Layout ..................................................... 97

9.12.1.6. MIFARE Serial Number ..................................................................... 98

10. Using the V-Station Manager ........................................................................................................... 9910.1. Clock ................................................................................................................................. 99

10.1.1. Daylight Saving Time ...................................................................................... 100

10.1.1.1. How the Daylight Saving Time Feature Works ............................... 100

10.1.1.2. Using the Daylight Saving Time Feature ........................................ 101





TABLE OF C ONTENTS

10.2. Ethernet ........................................................................................................................... 102

10.3. Biometric Schedules ....................................................................................................... 103

10.4. Menus ............................................................................................................................. 105

10.4.1. Custom LCD Logos ........................................................................................ 106

10.5. Access Schedules .......................................................................................................... 107

10.6. Holiday Schedules .......................................................................................................... 108

10.7. Transaction Log .............................................................................................................. 109

11. Broadcast Parameters .................................................................................................................... 112

11.1. Broadcasting Host Port and Aux Port Baud Rates ........................................................ 113

11.2. Deleting a Template ID via Broadcast ............................................................................ 114

11.3. Broadcasting the Global Security Threshold .................................................................. 114

11.4. Broadcasting a Wiegand Format .................................................................................... 115

11.5. Deleting All Templates via Broadcast ............................................................................. 116

12. Enrollment ....................................................................................................................................... 117

12.1. Enrollment Basics ........................................................................................................... 117

12.1.1. Suggested Fingers .......................................................................................... 117

12.1.2. Consistent Finger Placement ......................................................................... 117

12.1.3. Proper Finger Orientation ............................................................................... 120

12.1.4. Centering the Core ......................................................................................... 121

12.2. Finger Placement Feedback ........................................................................................... 121

12.2.1. Example Enrollment Using FPF ...................................................................... 122

12.2.2. Troubleshooting Enrollment Using FPF .......................................................... 124

12.2.3. OEM FPF Implementation .............................................................................. 125

12.3. Quick Enroll ..................................................................................................................... 125

12.4. Advanced Enrollment ...................................................................................................... 127

12.5. Enrollment Using Keypad ............................................................................................... 130

12.6. Troubleshooting Enrollment ............................................................................................ 131

12.6.1. Quality ............................................................................................................. 131

12.6.2. Content ........................................................................................................... 132

12.6.3. Evaluating Enrollment ..................................................................................... 132

13. User Interface .................................................................................................................................. 135

13.1. Verification Using a Smart Card ..................................................................................... 135 Appendix A: Secure Logon System ...................................................................................................... 136

A.1. Changing an Account Password ...................................................................................... 137

Appendix B. Bioscrypt Contact Information ......................................................................................... 138

B.1. Technical Support Contact Information ........................................................................... 138

B.2. Bioscrypt Office Locations ............................................................................................... 138





LIST OF F IGURES

LIST OF F IGURES Figure 1 - V-Station Reader .....................................................................................................................15

Figure 2 - Prox Card ................................................................................................................................17

Figure 3 - Initial Administrative Menu ......................................................................................................33

Figure 4 - Template Admin Menu ........................................................................................................... 34

Figure 5 - Template Settings Sequence ................................................................................................. 35

Figure 6 - Comm. Admin Menu .............................................................................................................. 36

Figure 7 - Security Admin Menu ............................................................................................................. 37

Figure 8 - System Admin Menu .............................................................................................................. 38

Figure 9 - Ethernet Options Menu .......................................................................................................... 39

Figure 10 - Smart Card Sequence .......................................................................................................... 39

Figure 11 - Verify Actions Menu ............................................................................................................. 39

Figure 12 - Template ID Numbers .......................................................................................................... 41

Figure 13 - Saving Templates to PC - Save As Dialog Box ................................................................... 43Figure 14 - Transmit ID/Current Reader Drop-down List ....................................................................... 44

Figure 15 - Broadcast Transmit ID Drop-down List ............................................................................... 44

Figure 16 - No Response Message ........................................................................................................ 45

Figure 17 - Configure Menu - Sensor Configuration Menu Item ............................................................ 46

Figure 18 - Sensor Test Dialog Box ........................................................................................................ 46

Figure 19 - Configure Menu - Update Firmware .................................................................................... 47

Figure 20 - Firmware Wizard - Welcome ................................................................................................ 48

Figure 21 - Firmware Wizard - Current Unit Details ............................................................................... 48

Figure 22 - Firmware Wizard - Select Firmware/FPGA .......................................................................... 49

Figure 23 - Firmware Wizard - Select Template Backup Folder ............................................................ 50Figure 24 - Firmware Wizard - Firmware Details .................................................................................... 50

Figure 25 - Firmware Update Wizard – Verifying Successful Update .................................................... 51

Figure 26 - Reset Unit to Factory Defaults Menu Item ........................................................................... 51

Figure 27 - Reset Unit to Factory Defaults Dialog Box .......................................................................... 51

Figure 28 - Template Conversion Menu Item ......................................................................................... 52

Figure 29 - Template Conversion Dialog Box ......................................................................................... 52

Figure 30 - Wiegand Utilities Menu Item ................................................................................................ 53

Figure 31 - Wiegand Card Utilities Dialog Box ....................................................................................... 53

Figure 32 - Network Configuration Dialog Box ....................................................................................... 54

Figure 33 - Advanced Settings Dialog Box ............................................................................................ 56

Figure 34 - Test Communication Settings Dialog Box ........................................................................... 57

Figure 35 - Unit Parameters Dialog Box – General Tab ......................................................................... 59

Figure 36 - Unit Parameters Dialog Box – Communication Tab ............................................................ 60

Figure 37 - Unit Parameters Dialog Box – Wiegand Tab ........................................................................ 62

Figure 38 - Unit Parameters Dialog Box – Biometrics Tab ..................................................................... 65





LIST OF F IGURES

Figure 39 - Unit Parameters Dialog Box – General Purpose I/O Tab ..................................................... 69

Figure 40 - Unit Parameters Dialog Box – LED Table Tab ..................................................................... 70

Figure 41 - Unit Parameters Dialog Box – Misc. Tab ............................................................................. 71

Figure 42 - Broadcast Parameters Dialog Box ....................................................................................... 72

Figure 43 - Template Manager Dialog Box ............................................................................................. 73Figure 44 - Template Viewer Dialog Box ................................................................................................ 74

Figure 45 - Access Schedule Selection .................................................................................................. 75

Figure 46 - Enter Site Key ....................................................................................................................... 76

Figure 47 - Present Smart Card to Reader ............................................................................................. 77

Figure 48 - Template Successfully Written ............................................................................................. 77

Figure 49 - Download Templates to PC ................................................................................................. 78

Figure 50 - Upload Templates to PC ...................................................................................................... 78

Figure 51 - Transfer Templates Dialog Box ............................................................................................ 78

Figure 52 - Template Viewer Dialog Box ................................................................................................ 81

Figure 53 - Command Card Manager ..................................................................................................... 82

Figure 54 - Smart Card Manager ............................................................................................................ 84

Figure 55 - VeriAdmin Notification about Wiegand String ..................................................................... 85

Figure 56 - Smart Card Security Settings ............................................................................................... 88

Figure 57 - Smart Card Security Settings - Site Keys ............................................................................ 90

Figure 58 - VeriAdmin Warning on Site Key Change .............................................................................. 90

Figure 59 - Changing the Site Key .......................................................................................................... 92

Figure 60 - Smart Card Layout Manager (MIFARE) - 1st and 2nd Kilobyte ............................................ 95

Figure 61 - Smart Card Layout Manager (MIFARE) - 3rd and 4th Kilobyte ........................................... 95

Figure 62 - Warning Message for Less than 32-bit ID ............................................................................ 98

Figure 63 - V-Station Manager ............................................................................................................... 99

Figure 64 - V-Station Manager - Clock Tab ......................................................................................... 101

Figure 65 - V-Station Manager - Ethernet Tab ..................................................................................... 102

Figure 66 - V-Station Manager - Biometric Schedules Tab ................................................................. 103

Figure 67 - Biometric Scheduling Dialog Box ...................................................................................... 104

Figure 68 - V-Station Manager - Menus Tab ........................................................................................ 105

Figure 69 - V-Station Manager - Access Schedules Tab ..................................................................... 107

Figure 70 - V-Station Manager - Holiday Schedules Tab ..................................................................... 108

Figure 71 - Transaction Log .................................................................................................................. 110

Figure 72 - Broadcast Parameters Toolbar Icon ................................................................................... 112Figure 73 - Broadcast Parameters Dialog Box ......................................................................................113

Figure 74 - Host Port Baud Rate and Aux Port Baud Rate Drop-down Lists .......................................113

Figure 75 - Delete a Template ID Area ..................................................................................................114

Figure 76 - Global Security Threshold Area ..........................................................................................114

Figure 77 - Wiegand Settings Area ........................................................................................................115





LIST OF F IGURES

Figure 78 - Delete All Templates Area ...................................................................................................116

Figure 79 - Confirm Delete All Templates ..............................................................................................116

Figure 80 - Suggested Fingers ............................................................................................................. 117

Figure 81 - Amber LED ......................................................................................................................... 118

Figure 82 - Fingertip on Ridge-Lock ..................................................................................................... 118Figure 83 - Slide Finger Across Ridge-Lock ......................................................................................... 118

Figure 84 - Position Joint on Ridge-Lock ............................................................................................. 118

Figure 85 - Apply Correct Pressure ...................................................................................................... 119

Figure 86 - Wait for Green LED ............................................................................................................. 119

Figure 87 - Lift Finger Up and Off ......................................................................................................... 119

Figure 88 - Correct Placement ............................................................................................................ 120

Figure 89 - Incorrect Placement ........................................................................................................... 120

Figure 90 - Place Finger Close to Center ............................................................................................. 120

Figure 91 - Do Not Rotate Finger ......................................................................................................... 121

Figure 92 - Finger Cores ....................................................................................................................... 121

Figure 93 - Finger Placement Feedback Feature ................................................................................. 122

Figure 94 - Questionable Quality and the FPF Feature ........................................................................ 123

Figure 95 - Using the FPF Feature ........................................................................................................ 123

Figure 96 - Quick Enroll Dialog Box with and without FPF .................................................................. 125

Figure 97 - Advanced Enrollment Dialog Box ...................................................................................... 127

Figure 98 - Advanced Enrollment – Finger Selection ........................................................................... 128

Figure 99 - Advanced Enrollment – Choose Best Template ................................................................ 128

Figure 100 - Advanced Enrollment – Choose a Finger Dialog Box ...................................................... 129

Figure 101 - Advanced Enrollment – Override Recommended Choice ............................................... 129

Figure 102 - Low and High Quality Finger Scans ................................................................................. 131

Figure 103 - Low and High Content Finger Scans ............................................................................... 132

Figure 104 - Moist Finger ...................................................................................................................... 133

Figure 105 - Dry Finger ......................................................................................................................... 133

Figure 106 - Fuzzy Image ..................................................................................................................... 133

Figure 107 - Off Center ......................................................................................................................... 133

Figure 108 - Distorted Core .................................................................................................................. 134

Figure 109 - Good Enrollment (Example 1) .......................................................................................... 134

Figure 110 - Good Enrollment (Example 2) .......................................................................................... 134

Figure 111 - Create New Account Dialog Box ..................................................................................... 136Figure 112 - VeriAdmin Login Dialog Box ............................................................................................ 136

Figure 113 - Change Password Menu Item .......................................................................................... 137

Figure 114 - Change Password Dialog Box ......................................................................................... 137





LIST OF T ABLES

LIST OF T ABLES

Table 1 - V-Station Model Comparison .................................................................................................. 16Table 2 - VeriAdmin Program Icons and Command Paths .................................................................... 40Table 3 - Firmware/FPGA Compatibility List .......................................................................................... 49Table 4 - Wiegand Formats and Associated Valid Values ...................................................................... 62Table 5 - Acceptable Core Location Areas by Sensor Type ................................................................ 125Table 6 - VeriAdmin Management Application Map of Score Versus Category .................................. 131Table 7 - Read Smart Card LED Indicators .......................................................................................... 135Table 8 - Verification LED Indicators .................................................................................................... 135





LIST OF ACRONYMS

LIST OF A CRONYMS These acronyms and abbreviations are used in this document:

ABS Acrylonitrile Butadiene Styrene

CVE Custom Verification EntryDHCP Dynamic Host Configuration ProtocolDST Daylight Saving TimeDLL Dynamic Link LibraryESI External Serial InterfaceFPF Finger Placement FeedbackFPGA Field Programmable Gate ArrayGMT Greenwich Mean TimeGPI General Purpose InputGPIO General Purpose Input OutputGPO General Purpose OutputGUI Graphical User InterfaceID Identification

IP Internet ProtocolLAN Local Area NetworkLCD Liquid Crystal DisplayLED Light-Emitting DiodeMAC Media Access Controlms millisecondN/A Not ApplicablePC Personal ComputerTCP Transmission Control ProtocolTTL Transistor-Transistor LogicUDP User Datagram ProtocolUSB Universal Serial BusUT Universal Time







15

2. A BOUT THE V-S TATION R EADER

Conductive Finger Mask Finger Scan Sensor

Pass/Fail Indicator LED(Amber/Off/Green/Red)

Ridge-Lock™ Backlit LCD

IlluminatedKeypad

ABS PlasticBody/Housing

Aux. Port

Power IndicatorLED

Figure 1 - V-Station Reader

General notes about the V-Station:

• The V-Station does not require a PC except for certain advanced functions.

• To distribute templates to multiple readers, either place all readers on a network andadminister them via a PC or store the templates on the PC and transfer via the readers'Host, Aux, or Ethernet ports.

• Connecting to a V-Station via Ethernet (LAN) should be done only by persons experiencedwith TCP/IP operations. A static IP address that is appropriate and does not conflict withother devices or PCs on the network should be assigned to the reader.

ABOUT THE V-S TATION R EADER

Optional Internal SmartCard Reader





16

2.1. C ONCEPTS OF O PERATION

The V-Station Prox (A, P, R) model performs 1:1 verification. In this mode, one finger is com-pared to one template. A Template ID is required to determine which stored template is to becompared with the current live finger-scan image.

The V-Station Base (A, R) model uses either a "searching" algorithm (when configured asSearching) that compares the current live finger-scan image to all templates on the reader(this is known as "one-to-many" or "1:N") or a 1:1 "matching" algorithm (when configured as

Verify) that compares the current live finger-scan image with only the template that matchesthe entered ID. Both of these modes eliminate the need for prox cards.

The V-Station MIFARE (A, G, R) model uses a 1:1 verification algorithm that verifies the userby taking a live finger-scan and comparing it to the user’s pre-enrolled template that is storedon the card. This is done by presenting the card to the reader to gain access to the template.

The V-Station Optical model is available in three models; Base (S, R), Prox (S, P, R), andMIFARE S, G, R). The V-Station Optical has the same functionality as the other V-Stationmodels, but with these limitations:

• It supports only 1:1 .tem and 1:1 .vur finger formats• 1:N mode is not supported (1:500 and 1:200 searching)• There is no iClass support for V-Station Optical.

Refer to Table 1 for a comparison between the capabilities of the different V-Station products.


V-Station Model V-Station, A, R V-Station, S, R V-Station, A, P, RV-Station, S, P, R

V-Station, A, G, RV-Station, S, G, R

1:1 348 Template (.tem)

1:1 User Record (.vur)

1: 500 Template (.tms) N/A N/A N/A

1:200 Template (.mtm) N/A N/A N/A

Table 1 - V-Station Model Comparison

Administrators should be aware of the following points, especially if different products areused (mixed network):

• A V-Station reader accepts only the correct type of template for the model• Searching templates are different than one-to-one templates• Searching templates use the default extension of .mtm or .tms• A searching template can be converted to a one-to-one template• 1:1 template files use the default extension of .tem• A 1:1 template cannot be converted to a searching template•

The V-Station MIFARE model uses only 1:1 template files with .tem extensions. Administrators should use caution when using broadcast commands on a mixed network.For installations using a mixed network containing searching readers and non-searching





17

2.2. P ROXIMITY C ARDS

All V-Station readers that have embedded proximity card reading capability can be pro-grammed to use a given card ID number as a standard “User ID.” The majority of proximitycards are of the User Card type. Once a card has been designated as one type, it will remainthat type unless it is deleted and re-enrolled.

Prox Card

n-01234

Site/Facility Code

Card Number

Figure 2 - HID Prox Card

Note that not all proximity cards have card numbers printed on them. There are two basiccategories of proximity cards:

•

User Cards• Command Cards (Enroll or Delete).


2.2.1. C OMMAND C ARDS

Command cards allow users to be added or removed from a V-Station reader with-out requiring PC-based administrative software. These can be useful for creatingand removing temporary visitor’s badges or administering the system when the PCis malfunctioning or otherwise unavailable. There are two types of Command cards:

• Enroll command cards• Delete command cards.

Command cards must be created with the VeriAdmin Administration Software. Refer

to Chapter 8 for more details.

2.2.2. S MART C ARDS

The V-Station MIFARE incorporates a contact-less smart card reader based on NXPSemiconductor’s MIFARE® technology. The user’s template is written to a smartcard during enrollment and then later read from the smart card during verification,eliminating the need for network-based template management operations.

readers, Bioscrypt recommends using these guidelines to help manage templates:• Use the Bioscrypt VeriAdmin software for all template enrollments• All enrollments should be performed with a V-Station Base model in Searching mode• When a broadcast is performed, the reader takes the template best suited to it and

ignores the user's other template.





18

2.3. V-S TATION S ECURITY AN D A DMIN L EVELS

Templates can have either of two User Admin levels: V-Station Enroller or V-Station Admin.The V-Station Enroller level can only enroll new, non-Admin level users and shows a limited

Admin menu when entering the menu system on the reader. The V-Station Admin level has fullaccess to the V-Station menus and has the authority to delete any other user, enroll additionaladmin users, delete transaction logs, and configure V-Station system, communication, andsecurity options.

As shipped from the factory, no Admin users exist on V-Station read-ers, and anyone can enter the Admin menu system. Anyone accessing

VeriAdmin by default has the same privileges as a full Admin user. Bio-scrypt recommends immediately enrolling a user through VeriAdminand assigning him/her admin level privileges. This statement remainstrue for Bioscrypt's smart card-based systems






19

The keys are navigational keys. The other navigational keys,

and , are on either side of the key.

Within any menu, moving between entries is simply a matter of using the andkeys. The item that is currently selected is highlighted with a black bar and an

arrow is displayed at the beginning of the line. An icon that indicates which directionof navigation is valid is displayed in the upper right corner of the LCD. When the firstentry in a menu is highlighted, a down arrow is displayed. When the last entry in amenu is highlighted, an up arrow icon is displayed. For all other entries, an icon with

arrows pointing both up and down is displayed.

Note: The scrolling action does not "wrap around" at the beginning or end of amenu.

3. O PERATING THE V-S TATION FROM THE F RONT P ANEL

OPERATING THE V-S TATION FROM THE F RONT P ANEL

3.1. W HY U SE TH E F RONT P ANEL

The V-Station can be set up using the VeriAdmin software on a PC or by the use of the con-trols on the front panel. Occasionally there are situations when using a PC for system set up isnot desired nor possible, such as when enrolling a new user in a remote location. Most of thecommon functions can be performed from the front panel of the reader by using the keypad.This section describes how to navigate the menus and enter data. The keypad duplicatesmuch of the functionality found in VeriAdmin. A one-to-one mapping of options found in Ve-riAdmin and those found in the front panel menus on the V-Station has been maintainedwhere practical. The use of VeriAdmin is described in Chapter 4.

3.2. F RONT P ANEL S ECURITY

For security purposes, the V-Station has a global inactivity timeout period. If the menu systemis accessed and remains idle for 60 seconds, the reader reverts back to the splash screen(idle state). Before this happens, a blinking box with an "x" inside it appears for ten seconds in

the bottom right of the LCD.

3.3. K EYPAD

The V-Station reader has two main groups of keys on the keypad, numeric and navigational.

3.3.2. N AVIGATIONAL KEYS

The numeric keys are used only to enter information. When a screen that does notrequire user input is displayed, these keys have no effect. Several input screens re-quire the user to select one option out of two or three. Some of these do not requireyou to press the key. All other input screens require pressing after enter-ing data. If a screen does not change after you enter data, press the key.

3.3.1. N UMERIC KEYS





20


Use the and keys to navigate to the desired menu, then press the

key or the key to select it (these two keys serve the same function). At thatpoint, either a user entry screen or another set of menus is displayed. To back outof a menu selection, use the key, much as you would use the "Back" button ina web browser. When entering data at user entry menus, the key acts as abackspace key, allowing you to erase characters. When all characters of an input ata user entry menu have been erased, the key reverts back to acting like a"Back" button in a web browser.

3.4. A CCESSING A DMINISTRATOR M ODE VI A TH E F RONT P ANEL

This section explains how to access the administrative mode through the front panel of thereader. To enter administrative mode, a template with administrative privileges needs to beverified. If there is no Administrator template defined, all users are allowed into the administra-tive menus. The enrollment process is described in detail in Chapter 12 of this document.

To access the administrator menus:

1. When the reader is idle (i.e., a splash screen with the date and time across the bottom),press the key. An Enter Verify ID message is displayed and a zero is displayed asthe first digit of the ID.

2. Press the key twice more. The ID should read 000 .

3. Press the key. An Enter Admin ID message is displayed. (If an administrator tem-plate does not exist, a No AdminID message is displayed.)

4. Key in a valid Admin ID.

5. Press the key. A Place Finger message is displayed. (If the Admin ID that was en-

tered was not from an Administrative template, a Rejected message is displayed and thereader returns to the idle state.)

6. Place a finger on the sensor. The reader matches the finger scan to the Administrativetemplate and after a successful verification, displays a set of menus. For full Administra-tors, these menu items are displayed:

• Template Admin• Comm. Admin• Security Admin• System Admin.

For Administrators with enroller only privileges (Admin level 1), these menu items aredisplayed:

• Enroll (Add) User• Verify User.

Each of the menu items above is described in subsequent sections of this manual.





21

3.4.1.1. E NROLL A DD ) U SE R


The Template Admin menu has these nine options:

• Enroll (Add) User• Enroll (Add) Prox• Edit User• Delete User• Delete Prox Card• Delete Smart Card• Delete All Users• Verify User• Bypass Next Verify.

3.4.1. T EMPLATE A DMIN M ENU

To enroll a user using the Enroll (Add) User command:

1. Select the Enroll (Add) User menu item. An Enter Enroll ID messageis displayed.

2. Enter an ID between 1 and 4,294,967,294 (maximum), depending onthe Wiegand format you want to use.. If the ID is outside this range,the reader returns to the initial administrative menu. If the ID is alreadyin use, the LCD displays:

User ID In Use, Are You Sure?1) Acpt. 2) Rjct.

The default action is to accept and if no input is detected, the readeraccepts the input and continues. If rejected, a Rejected message isdisplayed and the reader returns to the Template Admin Menu.

If the reader is currently using extended IDs, an Enter Extended ID message is displayed after a valid ID is entered. For an Extended ID,any value that is valid for the Wiegand format in use can be entered.Extended IDs have the added restriction that each ID/Extended IDpair must be unique.

After a valid ID or ID/Extended ID pair is entered and accepted, aPlace Finger message is displayed.

3. The enrollee places a finger on the sensor and the reader performs afinger scan (refer to Chapter 12 for a complete discussion on how toenroll users). A Finger (0..9) message is displayed.

4. Enter a value between 0 and 9. The value should correspond to the

finger that was placed on the sensor. To determine the value, look atboth hands with palms down — the numbering is from left to right.For instance, the left pinkie finger is Finger 0, while the right middlefinger is Finger 7. This setting is optional — an Administrator can de-cide whether or not to make this association. If the choice is to notmake the association, do not enter a value and proceed to the nextstep.

5. Press the key.





22


6. The LCD shows Duress Template? (0), (0) No (1) Yes . Enter "1" tomake the template a duress template or enter "0" to make thetemplate a normal template. The default choice (if nothing is input) isto make the template a normal template. Successful verifications ofduress templates result in bit-reversed Wiegand output. The reader

must be set to duress mode or a normal Wiegand string will be sent. An explanation of duress mode and duress templates can be found inSection 6.4.9.

7. If the reader has access schedules enabled, an Access Sched (0)message is displayed. Key in a value between 1 and 63. Then pressthe key.

• Values from 0 to 63 are allowed.• Schedules 59 through 62 are reserved and should not be used.• Schedule 0 will deny access when schedules are enabled on

the reader. This is the default choice if nothing is input.• Schedule 63 will grant access when schedules are enabled on

the reader.• The user defines all other schedules (see Chapter 10).• The reader looks up all schedules.• Undefined schedules should not be used.• Unused schedules should be explicitly set to no access.

8. A Security (0..6) message is displayed on the LCD. Key in a valuebetween 0 and 6. Then press the key.

• A value of 0 means that any finger will pass verification on tem-plates with a 0 security setting. There is also an option thatdoes not require a finger for templates set to security level 0.

• Values 1 to 5 are related to the likelihood of a false acceptance• The default value is 3 (medium) and can be selected by press-

ing the key immediately upon entering this screen.• Unlike administration levels (see Admin section below), it is pos-

sible to assign different security levels to templates that havethe same ID.

• The Security Level option is not available on searching readers(A-S model).

9. An Admin (0..2) message is displayed on the LCD. Key in a valuebetween 0 and 2. Then press the key.

• Level 0 corresponds to ordinary users who can only verifythemselves.

• Level 1 corresponds to an enroller who can add level 0 users

and verify existing users.• Level 2 administrators have full access to the entire reader.• The administration level of all templates with the same ID must

be the same.• Enrolling with a different administration level causes an Admin

mismatch message to display and the reader to return to theEnroll (Add) User screen.





23


10. An Enter PW message is displayed. Key in a password. Then pressthe key.

• Any value between 0 and 4,294,967,295 can be used (0 is the de-fault password used if there is no input).

• A reader with password mode enabled will verify only after a validpassword is entered.

• A password of 0 does not require a password no matter how theunit is set.

• It is up to the administrator to ensure that templates have non-zero passwords.

• Password mode is available on searching readers for 1:1 verifica-tions.

• Successful searches in 1:N mode do not require a password toverify.

11. At the end of the enrollment process, the reader asks to enroll analternative finger. This is so that if one finger is injured, the user mayuse another finger to gain access. The procedure is identical exceptthat it starts at the Place Finger screen.

3.4.1.2. E NROLL A DD ) P RO X

To enroll (add) a prox card:

1. Select the Enroll (Add) Prox menu item. A Swipe Card message isdisplayed.

2. Place the card in front of the reader. If the prox card is detected, theLCD shows the card ID and a 1)Acc 2)Rej 3)Retry message. If theprox card is accepted, the Place Finger screen is displayed. If theprox card is rejected, the Template Admin menu screen is displayed.Retrying returns you to the Swipe Card screen.

3.4.1.3. E DI T U SE R

To edit a user's ID/index pair:

1. Select the Edit User menu item. An Enter Edit ID message is dis-played.

2. Key in an ID. The LCD shows an Enter Template Index message.

3. Key in a Template Index. The reader looks for a valid template with

that ID-Index pair. If one is found, the template can be edited. If theID-Index pair is not found, an Invalid ID message is displayed and thereader returns to the Template Admin menu.





24


3.4.1.4. D ELETE U SE R

To delete a user:

1. Select the Delete User menu item. A Delete Template ID message isdisplayed.

2. Key in a template ID. An Enter Template Index message is displayed.

• An index is not required here; if the key is pressed and theadministrator makes no selection, the template with the lowestindex value is selected automatically.

• If the ID-Index pair corresponds to a valid template, a Deletedmessage is displayed.

• If the ID-Index pair does not correspond to a valid template, aDeletion Failed message is displayed.

• In both cases, the screen will ask for another template to bedeleted.

•

The process can be repeated or you can press the key toback out to the Template Admin menu.

3.4.1.5. D ELETE P RO X C AR D

To delete a prox card:

1. Select the Delete Prox Card menu item. The Swipe Card screen isdisplayed.

2. Place the prox card to be deleted in front of the reader.

3. If the Wiegand string is read, the LCD shows Delete All Instances of ,

the ID of the string and 1)Acc 2)Rej 3)Retry . Key in a value between 1and 3.

• Accepting causes the reader to attempt to delete all templateswith the associated ID. If successful, the reader displays a De-leted message; otherwise, a Delete Failed message is displayed.

• Rejecting returns you to the Template Admin menu.• Retrying returns you to the Swipe Card screen.

3.4.1.6. D ELETE S MART C AR D

To delete a smart card:

1. Select the Delete Smart Card menu item. An Enter Key message isdisplayed.

2. Enter the smart card key. A Present Card message is displayed. If thekey entered does not match the one stored on the unit, an InvalidKey message is displayed.

3. Present the card to the reader. A Card Detected or a Card NotFound message is displayed, whichever is appropriate.





25


4. If a card was found, the next screen displays Del All Fingerscans followed by 1) Yes 2) No . Select either 1 or 2.

• If the card has no templates, a Card Empty message is displayedand you are returned to the Template Admin menu.

• If No is selected, you are returned to the Template Admin menu.• If Yes is selected, a Present Card message is displayed.• If the card is found, the reader attempts to delete all templates

and Wiegand strings from the card.

3.4.1.7. D ELETE A LL U SERS

To delete all users:

1. Select the Delete All Users menu item. The reader displays Are YouSure? 1) Yes 2) No .

2. Press 1 to accept or 2 to reject.

• If 1 is chosen, the reader deletes all templates and displays aDeleted message upon success or a Delete Failed messageupon failure.

• If 2 is chosen, the screen displays a Rejected message.• In either case, the reader returns to the Template Admin menu

after the action is performed.

3.4.1.8. V ERIFY U SE R

To verify a user:

1. Select the Verify User menu item. An Enter Verify ID message is dis-played.

2. Key in a valid ID. A Place Finger message is displayed.

3. Place a finger on the fingerprint sensor. The reader performs the veri-fication process. When verification completes, the result is shown onthe LCD.

• If the reader is in default mode, verification actions are initiated.• If an invalid ID is entered, an error message is displayed and

reader returns to the Enter Verify ID screen.• Two modes of operation enhance security for verifications; pass-

word and access schedules.•

If password mode is enabled, an Enter PW message is displayed.If the password matches what is entered, an Accepted messageis displayed and the reader returns to the Enter Verify ID screen.

• If access schedules are enabled, the reader checks the scheduleon the template. If the user is not allowed at that time, a User NotScheduled message is displayed and the reader returns to theEnter Verify ID screen.





26


3.4.1.9. B YPASS N EX T V ERIFY

To bypass the next verification:

Select the Bypass Next Verify menu item. A Next Ver BYPASSEDmessage is displayed immediately. This allows the very next verification(however it is initiated) to bypass access schedules, which need to becarefully distinguished from biometric schedules.

This menu has four options: Ethernet Options , Serial Comm , Wiegand Admin , andVerify Actions .

3.4.2. F RONT P ANEL C OMM . A DMIN M ENU

3.4.2.1. E THERNET O PTIONS

Within this menu are three submenus, IP,Netmask ,Gateway , Show IPAddress , and Drop TCP Connection .

After selecting the IP,Netmask ,Gateway menu item, the reader displaysthree sub-menus, IP Address , Subnet Netmask , and Default Gateway .

• After selecting the IP Address menu item, a Set IP Address mes-sage is displayed, followed by the current IP address in dotted deci-mal notation. Enter a new IP in the same notation. If a valid addressis entered, the screen displays a Stored message and returns to theIP Address screen, displaying the address just entered.

• After selecting the Subnet Netmask menu item, a Set Mask mes-sage is displayed, followed by the current subnet mask address indotted decimal notation. The default subnet mask address is255.255.255.0. Enter a new address in the same notation. If a validaddress is entered, the screen displays a Stored message and re-turns to the Subnet Netmask screen.

• After selecting the Default Gateway menu item, a a Set Gateway message is displayed, followed by the current gateway address indotted decimal notation. The default gateway address is 0.0.0.0.Enter a new gateway address in the same notation. If a valid ad-dress is entered, the screen displays a Stored message and returnsto the Default Gateway screen.

Selecting the Show IP Address menu item causes the reader to displayits current IP address. The advantage to using this selection rather thanthe IP Address menu item above is that this one displays the IP addressthat is currently assigned to the reader. After a few seconds of displayingthe IP address, the reader returns to the Ethernet Options menu.

After selecting the Drop TCP Connection menu item, the reader asks,Are You Sure? 1) Acpt. 2) Rjct . Choosing to reject causes the reader todisplay a Rejected message and to return to the Ethernet Options menu.Choosing to accept causes the reader to attempt to drop all open TCPconnections. The reader displays a TCP Conn. Dropped message uponsuccess and a TCP Drop Failed message upon failure. In either case, itthen returns to the Ethernet Options menu.





27

3.4.2.2. S ERIAL C OMM

Within the Serial Comm menu are three sub-menus, Host Port BaudRate , Host Port Protocol , and Change Net ID . Each of these menu itemsis described below. By default, the Aux and Host port baud rate is set to57,600.

After the Host Port Baud Rate menu item is selected, the reader displaysan Enter Baud Rate message, followed by the current baud rate. When abaud rate is entered, the reader checks to see if it is valid. If it is, the baudrate is changed and a confirmation message is displayed. These baudrates are supported: 115,200, 57,600, 38,400, 19,200, and 9,600.

After the Host Port Protocol menu item is selected, the reader displaysan Enter Protocol message and the current protocol. Select 1 for RS-232or 2 for RS-485. Unlike many menus that present Accept and Reject asoptions, the key must be pressed after making a selection in thismenu. After a selection is made, a Stored message is displayed, confirm-ing that the protocol was selected.

After the Change Net ID menu item is selected, the reader displays anEnter Net ID message, followed by the current net ID. Key in a Net ID.

Any number between 0 and 65,534 is a valid Net ID. After the Net ID isentered, the reader checks that the value entered is valid. If it is, it sets thereader’s ID, displays a Stored confirmation message, and returns to theEnter Net ID screen.


3.4.2.3. W IEGAND A DMIN

The Wiegand Admin menu item has three sub-menus: Defined Settings ,Other Settings , and Disp Wiegand Format .

Defined Settings Submenu

The Defined Settings submenu has two further submenus, Defined For-mats and Defined Options .

The Defined Formats sub-menu lists the seven defined formats that canbe found in the Reader Parameters dialog box of VeriAdmin. Selecting anyone of these menu items sets the Wiegand format to the one specified.These defined formats are currently supported: the industry standard 26-bit format, Apollo’s 44-bit format, Northern’s 34-bit format (with and with-out parity), Ademco’s 34-bit format, and HID’s Corporate 1000 format (35-bit) and their 37-bit format. If the format is successfully set, a confirmationmessage is displayed.

The Defined Options sub-menu has three options, Failstring , AlternateSitecode , and Invert Parity .

After the Failstring menu item is selected, a Set Fail Str (0:off) messageis displayed. The current setting is shown. A value of 0 corresponds toDisabled and a value of 1 corresponds to Enabled. Key in either 0 or 1 toenable or disable this feature. If enabled, the next screen asks the user toenter a numeric string to use as the Failstring value. The valid input rangeis between 0 and 4,294,967,295. The Failstring option is used when it isdesirable to output a Wiegand string even when verification fails. If this isinitiated, the string stored as the Failstring in memory is substituted for theID field in the Wiegand string.





28


After the Alternate Sitecode menu item is selected, a Set Alt Site (0:off) message is displayed. The current setting is shown. A value of 0 corre-sponds to "Disabled" and a value of 1 corresponds to "Enabled". Presseither 0 or 1 to enable or disable this feature. If enabled, the next screenasks the user to enter a numeric string to use as the Alternate Sitecode

value. The valid input range is between 0 and 65.535 (depending on theWiegand format). Alternate Sitecode is generally recommended only forsearching devices. If enabled, the output Wiegand string will contain thisstored site code.

For both the Failstring and Alternate Sitecode , numeric entries from thekeypad allow 32-bit numbers up to 65,535 (again, depending on the Wie-gand format). This differs from VeriAdmin. Be aware that using numbersthat exceed the limits of the current Wiegand format can result in unpre-dictable behavior.

The Invert Parity menu item is a simple toggle. After the Invert Parity menu item is selected, the next screen displays the current setting. Press1 to change it. Invert Parity is used only when verification fails. If chang-

ing the ID in the Wiegand string produces undesirable side effects, invert-ing the parity is another way to communicate a failed verification to a de-vice connected to the V-Station’s Wiegand output.

Other Settings SubmenuThe Other Settings menu item has two options: Wiegand Input and Wie-gand Output .

After the Wiegand Input menu item is selected, a Toggle Input Enable message is displayed. The current status of input (enabled or disabled) isalso displayed. Press 1 to toggle. Press the key to exit the menuwith no change.

After the Wiegand Output menu item is selected, a Toggle Output Enablemessage is displayed. The current status of input (enabled or disabled) isalso displayed. Press 1 to toggle. Press the key to exit the menuwith no change. Enabling Wiegand output from the V-Station menu sys-tem always causes the reader to send a Wiegand string upon successfulverification, regardless of how it was initiated. In VeriAdmin, there is anoption to send the Wiegand string only if the verification was initiated by aWiegand device. This option is not currently available in any LCD menu.

Disp Wiegand Format Submenu After the Disp Wiegand Format menu item is selected, the reader dis-plays the name associated with the current Wiegand format. If the formatis either the pass-through format or the auxiliary format, either PassThrough or Auxiliary Format is displayed, respectively. The format nameis displayed and the screen returns to the Wiegand Admin menu.

3.4.2.4. V ERIFY A CTIONS

The Verify Actions menu has three submenus: Set Host Port , Set AuxPort , and Set GPIO . After any one of these menu items is selected, thescreen displays 1) Enable 2) Disable and whether the particular outputport is enabled or disabled. For all three ports, an Accepted message isdisplayed if a valid value is selected, and a Rejected message is dis-played if an invalid value is entered. The lone exception is if GPIO isenabled.





29


In this case, the screen prompts the user to set the duration for the GPIOline with a Duration (s,1-30) message, followed by the current setting. Ifthe value entered by the user is in range, an Accepted message is dis-played. Otherwise, a Rejected message is displayed. For both acceptedand rejected settings in all three menus, the reader returns to the 1 ) En-

able 2) Disable screen, confirming the user’s choice.From the V-Station menu system, enabling the Host or Aux port sends theID in the outgoing packet. When using VeriAdmin, there is the option notto send the ID.

The option not to send the ID is not available in the LCD menus. Specificimplementation details can be found in the Serial Command Interface andDLL Manual documents that are included with the SDK.

VeriAdmin refers to GPO 0 as a Line Trigger in its Verification Action Re-sponse dialog. The menu system’s GPO 0 is the same thing as VeriAd-min’s Line Trigger and changes to one are reflected in the other.

3.4.3. F RONT P ANEL S ECURITY M ENU

This menu has seven options:

• Biometric• Aux Port Disable/Aux Port Enable• Set Global Security• Duress Mode• Access Schedule• Multi-User Verify• PW Mode.

3.4.3.1. B IOMETRIC

When the Biometric menu is selected, the screen displays (1)On (2)Off .The administrator simply selects whether biometrics are to be turned onor off. If turned off, the reader still checks incoming IDs to see if they cor-respond to valid templates. However, it does not require that a finger bepresented to initiate verification actions.

3.4.3.2. A UX P OR T D ISABLE /A UX P OR T E NABLE

Depending on the current state of the aux port, either Aux Port Disable orAux Port Enable is displayed in the Security Admin menu. If enabled, themenu shows the disable option. If disabled, the menu shows the enableoption.

If Aux Port Enable is shown, the reader displays Enter PW and waits foruser input. Upon receiving input, the reader checks the value enteredagainst the stored password. If the two match, the port is re-enabled.Otherwise, an error message is displayed.

If Aux Port Disable is shown, the reader displays Enter PW and waits foruser input. Any number between 1 and 4,294,967,294 is a valid password.If the value 0 is entered, the Aux port subsequently cannot be enabledwith a password as described above. The only way to enable it is througheither the host port or via Ethernet.





30


3.4.3.3. S ET G LOBAL S ECURITY

When this menu is selected, the screen displays Security (1..5) (3) . If theadministrator wishes to change the setting, it should be entered here.Otherwise, pressing the key leaves the setting at its current value.

As with the security setting for templates, the global security setting isdirectly related to the likelihood of false acceptance. When verifying atemplate, the reader takes the higher setting between the template andthe global security and adjusts the threshold for verification accordingly.This way, if many users are having problems verifying, the entire systemcan be set to a higher security setting (lower security level) without requir-ing each template to be edited individually. Pressing the key doesnot back the reader out of this screen.

3.4.3.4. D URESS M OD E

When Duress Mode is selected, the screen shows 1)On 2)Off . Entering 1or 2, then pressing the key turns duress mode on and off, respec-

tively. Entering any other value results in Rejected being displayed anddoes not affect duress mode on the reader. After duress mode has beenset, the reader returns to the Security Admin menu.

In duress mode, when a duress template has successfully verified, theWiegand output string is bit-reversed (other actions may be made possi-ble in the future). If the mode is turned on, but the verified template is nota duress template, verification actions proceed normally.

3.4.3.5. A CCESS S CHEDULE

When Access Schedule is selected, the screen displays Access SchedEn (1) . Key in 0 to turn off access schedules. Key in 1 to enable access

schedules. Turning access schedules on is the default. This selection is ahot key, so pressing the key is not required. Selecting a numberother than 0 or 1 has no effect. After the reader receives the choice, iteither displays Stored , if it was successful in setting the parameter, orStorage Failed , if it was not successful.

3.4.3.6. M ULTI -U SE R V ERIFY

The Multi-User Verify menu item has two options, Fingers and Timeout . After Fingers is selected, the screen displays Set Num Fingers and theuser can either require a single finger by entering 1 and pressing thekey, or require two fingers by entering 2 and pressing the key. AfterTimeout is selected, the screen shows Set Timeout(1-30) and the user

can set the timeout. Neither of these entry screens is a hot key and 0 isnot a valid value. If 0 is entered or anything larger than 2 for Fingers and30 for Timeout is entered, the reader shows Invalid Value and returns tothe Multi-User Verify submenu. If the settings could not be stored, Stor-age Failed is displayed. Otherwise, the reader saves the new settings andshows Stored .





31


3.4.3.7. PW M OD E

When PW Mode is selected, the screen shows Mode (0 Off, 1 On) . Themode can then be set by selecting 0 for disable or 1 for enable, followedby pressing . When password mode is on, the reader queries, uponsuccessful verification, the user for the value in the password field of thetemplate. Verification actions are only initiated after it is confirmed that thevalue entered matches that in the template. If the password stored in thetemplate is 0, the reader does not ask for a password regardless of thesetting.

When the number of fingers is set to 2, the reader require two successfulbiometric comparisons before verification actions are taken. After the firstsuccessful comparison, the green LED flashes quickly before the readerreturns to waiting for input. If the next successful comparison takes placewithin the specified timeout, verification actions are initiated. No two users

can have the same template ID. The only time an action is taken after asingle successful comparison is when it is initiated from either a serial portor Ethernet. In this case, a reply is sent on that port, but no other actionsare taken.

3.4.4. F RONT P ANEL S YSTEM ADMIN M ENU

The Front Panel System Admin menu item has six options:

• Contrast Control• Set Time/Date• Transaction Log• Erase Verify Queue• Set Factory Defaults• Change CVE Mode.

3.4.4.1. C ONTRAST C ONTROL

After Contrast Control is selected, the screen displays Enter Contrast onthe first line, and 25 <- Contrast <- 65 on the second line. It then waitsfor administrator input. After getting input from the administrator, thereader checks the value to make sure it is within range (25 to 65). If not,an error message is displayed. Otherwise, the contrast on the screen isadjusted and a confirmation message is displayed. The default value is40. Values near this default generally look best, though ambient lightingconditions should be taken into account.

3.4.4.2. S ET T IM E /D AT E

The Set Time/Date menu has two submenus, Set Time and Set Date .When Set Time is selected, the screen shows Time followed by the timeformat and the current time, then it waits for input. If the input is valid, thetime is set and a confirmation message is displayed. Otherwise, an errormessage is displayed. Setting the date with the Set Date menu is identi-cal except that it shows Date followed by the date format and currentdate. Invalid values are anything that is out of range (e.g., entering 15 forthe month or 98 for the hour). Entering values out-of-range results in thescreen showing Rejected .





32


The Transaction Log menu has two submenus: Erase Log (All) andErase Log (Read) . Both prompt the administrator with the message AreYou Sure? If the administrator rejects erasure, a message appears andthe screen returns to the Transaction Log menu. If the administrator ac-cepts erasure, the entries in the Transaction Log are erased. Erase Log(All)erases the entire transaction log completely. Erase Log (Read)erases only the entries of the transaction log that have been marked asread. The transaction log is stored in flash memory and contains muchmore information than the verification queue and holds many moreevents. Additional information includes, but is not limited to, timestamps,deletion events, and source ports.

3.4.4.4. E RASE V ERIFY Q UEUE

When Erase Verify Queue is selected, the reader erases all entries fromthe verification queue and displays Erased . The verification queue is an8-entry queue of the most recent events involving enrollment or verifica-tion. Due to its size and limited information, it is intended for polling appli-cations to discover what is in the queue quickly, before an overrun oc-curs. Developers wishing to use the verification queue should obtain theSDK and refer to the Serial Command Interface and DLL Manual docu-ments that are included with it.

3.4.4.3. T RANSACTION L OG

The Set Factory Defaults menu has three submenus, Reset Parameters ,Set RS-232 Defaults , and Set RS-485 Defaults . Selecting Reset Pa-rameters sets many of the reader parameters back to factory defaults. Inaddition to resetting the serial ports as described below, parameters such

as the Wiegand format and the net ID are returned to the values that wereset when the reader was shipped. Selecting Set RS-232 Defaults resetsthe RS-232 communications settings. Selecting Set RS-485 Defaults resets the RS-485 communications settings. After selecting any of these,the screen shows Factory Defaults Set and returns to the previous menu.

3.4.4.5. S ET F ACTORY D EFAULTS

The Change CVE Mode menu affects Custom Verification Entry (CVE)mode and has no submenus. When it is selected, the reader immediatelydisplays Mode On (1) Off (0) on the top line and displays the currentstatus of the mode (0 for disabled, 1 for enabled) on the second line. Theuser can then enter the desired value (0 to disable or 1 to enable), after

which the reader displays Stored . If any other value is selected, thereader displays Invalid Value . Verification is not affected when CVE modeis turned off. The normal set of menus is displayed and the verificationactions currently set on the device are triggered. When CVE mode isturned on, two things happen that are different from a normal verification.First, the line trigger and Wiegand outputs are suspended momentarily. Allother verification actions, however, proceed as normal. Second, thereader requests one additional piece of information from the user.

3.4.4.6. C HANGE CVE M OD E





33


Just before Accepted would be displayed in the normal verification proc-ess, the reader queries Enter Entry Code . Valid values for this code rangefrom 0 to 249. Values 250-255 are reserved for the reader to report vari-ous occurrences. When the code is entered, the line trigger fires. Thevalue entered by the user is written to the transaction log under the Code

column. If a timeout occurs while waiting for user input, the number 255 iswritten to the transaction log. At this point, the reader displays Accepted on the LCD, regardless of whether there was a timeout or not. The linetrigger and GPO 0 use the same hardware, CVE mode only affects actionsspecified to Line Trigger, found in the Misc. tab of the Reader Parametersdialog in VeriAdmin. Any actions specified in the General Purpose I/O tabof the Reader Parameters dialog box are not affected.

3.4.5. F RONT P ANEL M ENU T REE

Figures 3 through 11 show the entire menu structure in schematic form. Menus pro-gress from left to right. Where applicable, screens that jump back multiple screensare indicated. When menus are fully described, the text displayed is shown and an-gle brackets (< >) surround the title of the section that describes the menu that re-sults when that item is selected or valid data is entered.

Bioscrypt

Template Admin<Template Admin>

Comm. Admin<Comm. Admin>

Security Admin<Security Admin>

System Admin<System Admin>

Figure 3 - Initial Administrative Menu

3.4.5.1. I NITIAL A DMINISTRATIVE M EN U





34


3.4.5.2. T EMPLATE A DMIN M EN U

Acc

Template Admin

Enroll (Add) User Enter Enroll ID Place Finger Enroll (Add) UserQuality:Content:

1)Acc 2)Rej 3)Rtry<Temp Settings>

Edit User Enter Edit ID Enter Template Index<Temp Settings>

Delete User Delete Template ID Enter Template Index

Deletedor

Deletion Failed

Verify User Enter Verify ID Place Finger

Acceptedor

Rejected

Enroll (Add) Prox Swipe Prox CardExternal Reader

Prox Card ID is[Card ID]

1)Acc 2)Rej 3)Rtry

Delete Prox Card Swipe Prox CardExternal Reader

Prox Card ID is[Card ID]

1)Acc 2)Rej 3)Rtry

Deletedor

Deletion Failed

Delete Smart Card*<Smartcard Sequence>

Del All Fingerprints

1) Yes 2) No

Present Card Card Detectedor

Card Not Found

Deletedor

Deletion Failed

Bypass Next Verify Next Ver BYPASSED!

Delete All Users Del All Users Are You Sure?

1) Accept 2) Reject

Accepted or Rejected

Retry

Retry

Retry

Figure 4 - Template Admin Menu





35


3.4.5.3. T EMPLATE S ETTINGS S EQUENCE

* Menu shown only on V-Station (A, G, R) and (S, G, R) models

Security (0..5) (3)

Admin (0..2) (0)

Stored<Edit User>

Enroll Alt. Finger?(1) Yes, (2) No

Store Template to *1) Unit2) Smartcard

Back to “Place Finger”

<Smartcard Sequence>*

Duress Template? (0)(0) No (1) Yes

Access Sched(0)

Enter PW

Finger (0..9)

No

Yes

If Enrolling

UnitIf Editing

Figure 5 - Template Settings Sequence





36


3.4.5.4. C OMM . A DMIN M EN U

Other Settings

Wiegand Input

Wiegand OutputToggle In/Output Enable(state) (1:toggle)

Defined Settings

Defined Options

Failstring

Set Fail Str(0:off)<set fail string>

Alternate Sitecode

Set Alt Site(0:off)

<set alt sitecode>

Invert ParityInvert Parity(state) (1:toggle)

Defined Formats

Standard 26

Apollo 44

Northern 34

Northern 34 (NP)

Ademco 34

HID Corp 35

HID 37

Ethernet Options<Ethernet Options Menu>

Verify Actions<Verify Actions menu>

Comm. Admin

Host Port Protocol

Enter ProtocolCurrently :(current protocol)1) RS-232 2) RS-485

StoredorRejected

Enter Net ID(Current Net ID)

StoredorInvalid Value

Serial Comm

Wiegand Admin

StoredorRejectedEnter Baud Rate

(Current baud rate)

Host Port Baud Rate

Change Net ID

Disp Wiegand Format (Wiegand format name isdisplayed)

Figure 6 - Comm. Admin Menu





37


3.4.5.5. S ECURITY A DMIN M EN U

Security Admin

Set Global Security Security (1..5) (3)StoredorInvalid Value

Biometric Mode (1)On (2)Off

AcceptedorRejected

Aux Port Enableor

Aux Port DisableEnter Password0:Host access only

Aux Port Enabledor

Aux Port Disabled

Duress Mode (1)On (2)Off

AcceptedorRejected

Access Schedule Access Sched En (1)

StoredorStorage Failed

Multi-User Verify

Fingers

Timeout

Set Num Fingers

Set Timeout(1-30)


PW Mode Mode (0 Off, 1 On)


Figure 7 - Security Admin Menu





38


3.4.5.6. S YSTEM A DMIN M EN U

Enter Contrast25 <- Contrast <- 65

StoredorRejected

Set Time

Enter Time: (format)Cur. Time: (time)

Set Date

Enter Date: (format)

Cur. Date: (date)

Erase Verify Queue

Erase Log (All)

Erase Log (Read)

Factory Defaults Set

Set RS-485 Defaults

Set RS-232 Defaults

Reset Parameters

Set Factory Defaults

Transaction Log

Set Time/Date

Contrast Control

System Admin

Change CVE Mode Mode On (1) Off(0)

Figure 8 - System Admin Menu





39


3.4.5.7. E THERNET O PTIONS M EN U

Figure 9 - Ethernet Options Menu

Drop TCP Comm . Are You Sure?1) Acpt. 2) Rjct.

TCP Conn. DroppedorTCP Drop Failed

StoredSet IP Address(current *.*.*.*)

___.___.___.___

IP, Netmask Gateway

Show IP Address Show IP Address(current *.*.*.*)

Ethernet Options

3.4.5.8. S MART C AR D S EQUENCE

Present Cardor

Invalid Key

Card Detectedor

Card Not Found

Enter Key

Figure 10 - Smart Card Sequence

3.4.5.9. V ERIFY A CTIONS M EN U

Figure 11 - Verify Actions Menu

Verify Actions

Set Host Port 1)Enable 2)Disable(Current State)

AcceptedorRejected

Set Aux Port 1)Enable 2)Disable(Current State)

Accepted

orRejected

Set GPIO 1)Enable 2)Disable(Current State)

Duration (s, 1-30)(Current Setting)

AcceptedorRejected

IP Address

StoredSet Mask(current *.*.*.*)

___.___.___.___Subnet Netmask

StoredSet Gateway(current *.*.*.*)

___.___.___.___Default Gateway





40

4. O PERATING THE V-S TATION FROM VERIADMIN S OFTWARE

OPERATING THE V-S TATION FROM VERIADMIN S OFTWARE

The features mentioned in this manual are accessible either through the icons on the toolbaror through the command menus. Some features are disabled automatically (toolbar icons turngray) when communicating with a reader that does not support those features (such as the V-Station Manager for non-V-Station readers).

4.1. B ASIC S YSTEM A RCHITECTURE

Icon Name Command Path

Template Manager File > Template Manager

Command Card Manager File > Command Card Manager

Smart Card Manager File > Smart Card Manager

Network Setup Configure > Network Setup

Unit Parameters Configure > Unit Parameters

Broadcast Parameters Configure > Broadcast Parameters

Network Configuration Manager File > Network Configuration Manager

Advanced Enrollment Configure > Advanced Enrollment

Quick Enrollment Configure > Quick Enrollment

V-Station Manager File > V-Station Manager

Current Reader Toolbar Drop Down

Current Communication Settings Status Bar

Table 2 - VeriAdmin Program Icons and Command Paths

The current Transmit ID , COM port , baud rate , IP Address , Port (if Ethernet) and readertype are displayed in the status bar at the bottom of the application. These values updateautomatically while using the software as communication settings change.





41


New users are entered into the system through the process of "enrollment". Duringthis procedure, the user’s finger is scanned and a finger-scan template is generated.Please see Chapter 11 for a complete description of what constitutes a good enroll-ment. A quality enrollment ensures peak performance from the Bioscrypt V-Stationreader.

4.1.1. E NROLLMENT

A template is a collection of user information including the finger-scan data. Theinformation includes:

• ID Number• Extended ID Number (Optional)• Index Number (0 – 255)• User Name (optional)• User Type (User, Admin, etc.)• User Finger Identifier (optional)•

1:1 Template Security Threshold• Password (optional)• Access Schedule (optional)• Employee ID (0 – 4294967295) (optional)• Auxiliary Data (optional)• A mathematical model of the finger-scan ridge pattern.

Every template stored on a V-Station reader has a unique ID consisting of a Tem-plate ID and a Template Index. Each time a finger scan is enrolled, a new templateis generated using the number from the proximity card or one manually assigned asthe Template ID number. A unique Index value must be assigned to each templateusing a value from 0 to 255, up to a maximum of 16 index values per ID (for userrecords). Bioscrypt recommends using no more than 10 template indices.

4.1.2. T EMPLATES

Figure 12 - Template ID Numbers

The following template options are important. An administrator should understoodthem fully before using them.

• 1:1 Template Security Threshold – Each template can be assigned a specific

security threshold from "Very Low" to "Very High", "None", or "Password Only". A security level of "None" allows any finger to pass and is only recommended asa last resort for fingers that are difficult to enroll. A security level of "Password-Only" is a better option for users with troublesome finger scans.

Templates must have a non-zero password or they will always passverification without the V-Station asking for a password. This securitysetting is treated the same as "None" when used on a non-V-Stationreader because only the V-Station has a keypad.

NOTICENOTICE





42


• Password – When a V-Station reader has password mode enabled (see Chap-ter 6), each template can have an extra level of security by requiring a passwordin addition to (or instead of) a finger. The password field is actually a number(like a PIN) and must be non-zero. A zero password is treated as no password.

•

User Type – This indicates whether the user has special privileges, such as an Administrator, Enroller, etc. User Types "V-Station Admin ID" or "V-Station En-roll ID" are intended only for use on V-Stations, while "Prox Enroll ID" and "ProxDelete ID" types are intended for installations using proximity readers. Basicusers should be assigned to the "User ID" type.

• Finger/Duress Finger – The finger enrolled for the template should always bespecified. Designating the finger as a Duress Finger is a special case making thetemplate a "Duress Template". When Duress Mode is enabled and this particu-lar finger verifies, a duress condition is recognized by the device and specialaction is taken.

• Access Schedule/Observe Holidays – On V-Station readers, each template

can be assigned an access schedule which dictates when the user will begranted access as well as whether the user should be granted access duringholidays.

• Extended ID – Some Wiegand formats use IDs greater than 32 bits in length,which are stored in the "Extended ID" field (for a list of valid ID values, pleaserefer to Table 4 on page 62.) This field can not be used at the same time as thePassword and Employee ID fields.

4.1.3. M ULTIPLE R EADERS

If your installation includes multiple V-Station readers that are used by a commonpopulation of users, you will need to distribute the finger-scan template of each user

to all the readers. Bioscrypt recommends that you designate one reader as the"administration reader" and enroll all new users on it.

After a new user is enrolled on the administration reader, the template can be cop-ied to the other readers. If the readers are networked, you can broadcast the newtemplate to the other readers over RS-485 lines or an Ethernet network (for V-Stations) using the VeriAdmin Management Software. If the readers are not inter-connected, a laptop can be used to download the templates from the administrationreader and then upload them to each reader through its Aux port.

4.1.4. T EMPLATE B ACKUPS

Templates can be "backed-up" by downloading them to a PC. On the PC, template

files are either *.tem files for 1:1 verification records, *.vur files for 1:1 user records,or *.tms/*.mtm files for the larger searching records. The name of the file is derivedfrom the Template ID number and the Template Index number. For example, thefirst file (10_0.tem) in Figure 13 on the next page is of Template ID 10 and TemplateIndex 0 (referred to as Template 10-0).

V-Station units can hold a maximum of 3550 1:1 verification templates(.tem).NOTICENOTICE





43


4.1.5. LED S

The top-most LED on all V-Station readers can illuminate in various colors and pat-terns. Generally, a steady color indicates a normal state while a blinking LED usuallyindicates a special state, such as expecting action from the user. Green is generallyused to indicate a positive response, while red indicates a negative response. Allreaders ship from the factory with the default LED configuration described below.To configure alternative LED behavior, please see Section 6.6.

• Steady Amber: The reader is requesting that a finger be placed on the sen-sor. This may be for verification or for enrollment. The user may remove thefinger when the light goes out.

• Blinking Amber: The reader is requesting that a proximity card be presentedfor enrollment into the reader. The blinking amber light is seen when an EnrollCommand Card is used to add a new user to the reader.

• Steady Green: The reader is indicating the successful completion of a verifi-cation, enrollment, or template deletion. A steady green light is accompaniedby a beep.

• Blinking Green: The reader has multi-user mode enabled and is waiting for asecond finger to verify.

• Steady Red: The reader is indicating that the current operation has failed.• Blinking Red: The blinking red light is seen when a Delete command card is

used to remove an existing ID from the reader. The reader is requesting that aproximity card be presented. The card ID number will be deleted from thereader.

• Other: The reader may blink alternating colors when in the middle of a "Step"firmware update. Do not touch the reader during this time.

Figure 13 - Saving Templates to PC - Save As Dialog Box

When a template is uploaded from the PC to a V-Station reader, theTemplate ID number and Index number are taken from data within thefile, not from the file name. Therefore, even if you change the name of

the file on your PC, the Template ID and Index number remain thesame. Please use the VeriAdmin Management Software to modifyTemplate ID numbers.

NOTICENOTICE





44


4.2. V ER IADMIN M ANAGEMENT S OFTWARE

The VeriAdmin Management Software is for use on Windows XP™-based PC platforms. The VeriAdmin Management software can be used to perform these functions:

• Manage a network of V-Station readers• Enroll new user finger-scan templates• Edit user templates• Distribute user templates from the administration reader or PC to other Bioscrypt readers• Create "command card" proximity cards (for products which contain proximity card

readers)• Adjust the reader parameters of individual readers, or of all readers connected to a

network• Configure the layout and operation of smart cards (for products which contain smart

card readers)• Configure the operation of the reader and view, download, and delete the V-Station

transaction log• Perform firmware updates.

4.2.1. T RANSMIT ID/C URRENT R EADER

The Current Reader drop-down list indicates the transmit ID and the name of thereader with which the software is currently communicating (see Figure 14 below). Ifyou have networked more than one reader, you can use this drop-down list to ac-

cess different readers. Each reader must be assigned a Network ID, even if yourinstallation consists of a single reader (the default setting is 0). Assigning a name isoptional. Be aware that a reader’s Network ID is not the same as the Transmit ID in

VeriAdmin. The ID numbers and reader names shown in the drop-down list corre-spond to the items shown in the Network Tree in the Network Configuration Man-ager. Selecting a reader in that dialog and exiting selects the same reader from thedrop-down list, and vice-versa.

Figure 14 - Transmit ID/Current Reader Drop-down List

A special transmit ID number, -1, is assigned as a broadcast ID. All readers on the

current COMM Port or Ethernet network will respond to this broadcast ID. For func-tions labeled "broadcast", the software uses the broadcast ID and all readers on thenetwork will accept these commands. For each port that is defined, VeriAdmin listsa corresponding Broadcast option in the drop-down list (see Figure 15 below). Us-ing Broadcast commands is only recommended for advanced users

Figure 15 - Broadcast Transmit ID Drop-down List

VeriAdmin features an online help system. Press F1 within VeriAdminto launch the help file.NOTICENOTICE





45


If VeriAdmin has difficulty communicating with the currently selected device, anerror message is displayed (see Figure 16 below). There are several situations thatcan cause this. The most common are:

• Power has not been supplied or has been incorrectly applied to the reader• The reader is not connected to the PC via one of the ports• The Transmit ID does not match the reader’s Network ID• The VeriAdmin’s baud rate setting does not match the reader’s baud rate• Multiple readers on a network have been assigned the same Network ID• For Ethernet, the IP address may be incorrect, different from the IP address

on the reader, or may conflict with another device on the network.

Figure 16 - No Response Message

Bioscrypt readers "talk" to the VeriAdmin software through either the Host port, the Auxiliary (Aux) port, or the Ethernet port (V-Station only). All readers have two RS-232 ports (one accessible at the rear of the device and the other accessible throughthe bottom USB port). All readers also have one RS-485 port. The communicationparameter settings allow the user to designate one port as the host and the other as

an auxiliary port. Different wires are used for RS-485 and RS-232. Please refer tothe V-Station Installation Guide (included on the Installation CD) for details. TheEthernet port on a V-Station is accessed at the back of the reader with a standardEthernet cable.

4.2.2. H OST , A UX, AND E THERNET P ORTS

4.2.3. S ERIAL P ORT S ETTINGS AND B AUD R ATES

Once the readers have been connected to the PC, the next step is to configure Ve-riAdmin to recognize which readers are connected to which ports on the PC. Theserial ports on the host PC are designated as COM1, COM2, etc. You can connectup to 31 V-Station readers to each COMM line (using RS-485). You must indicatewhich COM or Ethernet ports you want to use. Additionally, your Bioscrypt networkmust be defined using the Network Configuration Manager. The baud rate may beset on each reader. The baud rate that is selected must match the baud rate settingon the reader and all readers on the network must be set to the same baud rate.These are the factory default settings for a V-Station:

• Network ID: 0• Port Mode: N/A (defaults to RS-232 for Host)• Host Port protocol: RS-232• Host Port baud rate: 57600 baud• Aux Port baud rate: 57600 baud• IP Address: 0.0.0.0.





46


The Sensor Configuration menu item (see Figure 17) in the Configure drop-down menu al-lows you to test the reader’s sensor and configure certain sensor settings (see Figure 18).

Figure 17 - Configure Menu - Sensor Configuration Menu Item

Figure 18 - Sensor Test Dialog Box Before and After Image Test

4.3. S ENSOR T ES T AN D F INGER D ETECT T IMEOUT

The Finger Detect Timeout drop-down list controls the finger detection timeout period for theunit. To adjust this setting, select a value in the list and click the Set button. The default time-out is 12 seconds. Click the Reset button to set the timeout period back to this default value.This timeout setting remains effective after the Sensor Options dialog box is closed.

To test the sensor, click the Test Image button. Message boxes are displayed, one directingyou to place a finger, and another informing you that the test is in process. After the image iscaptured, the finger scan is displayed (see Figure 18, image on right). Click the Exit button toclose the Sensor Options dialog box.





47


4.4. U PDATING F IRMWARE

Choosing the Update Firmware menu item allows the firmware on all of the reader’s DSPs tobe field-updated. It is recommended that only advanced users attempt to perform this opera-tion. Please call Bioscrypt Technical Support with any questions or if attempting to update areader.

The Update ESI Firmware menu option should not be used on prod-ucts with firmware version 7.30 or greater. It is provided only for back-wards compatibility with older readers. The firmware package file con-tains the proper ESI firmware for the reader, ensuring that the ESI andreader have compatible versions.

Verification Polling Mode must be disabled prior to attempting a firm-ware/FPGA upgrade due to the potential for the polling mechanism tocause errors during upgrade. To disable this mode, click the Misc. tabin the Unit Parameters window and deselect the Verification PollingMode radio button.

Before attempting this operation, make sure the current communica-tion settings are correct and that the PC and reader are communicat-ing properly.

During firmware updates on a V-Station, the LCD indicates the statusof the upgrade. Do not access the keypad or menus while the V-Station is being updated.

If you are using a custom menu, also upload the corresponding menuprompt file after the firmware update to avoid menus displaying incor-rectly on the LCD.

NOTICENOTICE

To update firmware:

1. In the VeriAdmin menu bar, select the Configure > Update Firmware > Update Veri-

Series Firmware menu item, as shown below in Figure 19. The Welcome screen of theFirmware Wizard is displayed (see Figure 20 on next page).

Figure 19 - Configure Menu - Update Firmware

2. Click Next . The Firmware Wizard displays Step 1 (see Figure 21 on next page).





48


Figure 20 - Firmware Wizard - Welcome

Figure 21 - Firmware Wizard - Current Unit Details

3. The first step of the Firmware Wizard indicates the reader that is to be updated. Select theVerify Successful Update check box if you want VeriAdmin to verify the update automati-

cally when it is finished. VeriAdmin must be allowed to perform this task if the wizard de-termines that a "step" firmware update is necessary.

4. Click Next . The Firmware Wizard displays the next step (see Figure 22 on next page).

5. Click the Browse button. An Open dialog box is displayed. Navigate to and select the newBioscrypt firmware file. Then click the Open button. Firmware update files are available onthe Installation CD that came with this software and at the Bioscrypt web site. Be awarethat there are several different types of firmware files. All V-Station products use the same"package" firmware file with a .V12 file extension.

• .V12 – The firmware package files used by all V-Station products.• .STP – Special Step firmware file, used as a "bridge" to update readers from v6.x and

below to v7.x and above.

If the Firmware Wizard determines that a special "Stepper" firmware file is needed to bringthe reader up-to-date before the actual firmware update can take place, browse to andselect the .STP file, which can be found on the Installation CD or at Bioscrypt’s web site.

The Upgrade FPGA check box will become available for selection if VeriAdmin deter-mines that an FPGA update is available.





49

Table 3 outlines the correct versions of firmware and FPGA (if required) for unit upgrading.Please ensure that the proper versions are used as updating to the wrong version cancause the readers to no longer function correctly.

Ensure that the most current version of VeriAdmin is used for unit upgrading as some of therequired updating features are not available in older versions of VeriAdmin.


Figure 22 - Firmware Wizard - Select Firmware/FPGA

After a reader has been updated to the intermediate "Stepper" firm-ware version, it is not usable until the final version update is complete.The reader indicates this abnormal state by flashing the LED on top ofthe reader in alternating colors. Allow the Firmware Wizard to completethe update process before using the reader.

6. Click Next . The Firmware Wizard asks you if you want to backup templates (see Figure 23on next page).

*Please contact Bioscrypt Technical Support for the proper FPGA .v12 file to downgrade fromfirmware 9.60.

Current Firmware Version Updating to New Firmware Version Proper FPGA Version

11.00 11.00 N/A

9.60 9.60 N/A

9.50 9.60 2.79.40, 9.40.1 9.60 2.79.30, 9.31 9.60 3.79.20 9.60 3.79.60 9.50 2.4.1*9.60 9.40, 9.40.1 2.3*9.60 9.30, 9.31 3.6*9.60 9.20 3.2*7.xx 7.xx N/A6.xx 6.xx N/A

Table 3 - Firmware/FPGA Compatibility List





50


Figure 23 - Firmware Wizard - Select Template Backup Folder

Figure 24 - Firmware Wizard - Firmware Details

7. In the Step 3 dialog box, you have the option to backup all templates to the PC.• This option is not available if updating multiple readers via a broadcast update, and it

can only be used when updating a single reader.• By default, templates are copied to the "Files" sub-directory of the directory where

VeriAdmin was installed. A different directory can be specified and VeriAdmin willprompt to create it if it does not exist.

• Bioscrypt recommends backing up templates even though this step can be lengthy onslower networks.

• VeriAdmin overwrites any templates that already exist in this directory.

8. Click Next . The Firmware Wizard displays details about the firmware file (see Figure 24).

9. To start the update, click Start Update . VeriAdmin backs up the templates (if that optionwas chosen), performs the Stepper update (if needed), performs the firmware update, andfinally confirms that the update was successful. The firmware update process can takeseveral minutes to complete if updating a single reader and up to ten minutes if broad-casting the update. During this time, readers should not be disturbed, and power mustremain on. Units will be unable to respond or perform verifications. Bioscrypt recom-mends updating readers only when users will not be accessing the readers, such as afternormal business hours. When completed, VeriAdmin verifies the update (see Figure 25 onthe next page).





51


4.5. R ESET R EADER TO F ACTORY D EFAULTS

Choosing the Reset Reader to Factory Defaults menu item (see Figure 26) resets the unitback to default factory settings. Bioscrypt recommends that only advanced users use this fea-ture; call Bioscrypt Technical Support for assistance.

In the Reset Unit to Factory Defaults dialog box (see Figure 27), selected reader parametersare reset when the Reset button is clicked. Proper communication must be established withthe reader before this operation can be successfully performed. Resetting serial communica-tion can affect VeriAdmin’s ability to communicate with the reader. This command should notbe used unless you are directed to do so by Bioscrypt Technical Support (see Chapter 13).

Figure 26 - Reset Unit to Factory Defaults Menu Item

Figure 27 - Reset Unit to Factory Defaults Dialog Box

Figure 25 - Firmware Update Wizard – Verifying Successful Update





52


4.6. T EMPLATE C ONVERSION M EN U

Select the Template Conversion menu item (see Figure 28) to convert the larger searchingtemplate formats (used with the V-Station Base 1:N) to the smaller 1:1 verification templates(used with the V-Station Prox, V-Station MIFARE, and V-Station Base 1:1).

Figure 28 - Template Conversion Menu Item

Figure 29 - Template Conversion Dialog Box

To convert template formats:

1. Click the Browse button (see Figure 29). Navigate to and select the folder containing thetemplates to be converted and the destination directory where the converted records areto be stored.

2. Select the templates to convert from the list or press the Select All button.

3. Select the options for conversion. The original files can be deleted or renamed.

4. Click the Convert button to have VeriAdmin convert the templates. VeriAdmin displays theconversion progress with a progress bar and displays an alert when the process is done.

For VeriAdmin v7.50 and above, 1-to-1 Template -> 1-to-1 UserRecords conversion is no longer available.NOTICENOTICE





53


4.7. W IEGAND U TILITIES

The Wiegand Utilities menu item allows installers to create Enroll and Delete Admin com-mand cards for specific card IDs, without a PC, if the reader has been properly pre-configured.

This defines specific Administrator IDs that do not require a finger scan to initiate the Enrolland Delete actions. Under normal operations, Enroll and Delete command cards require a fin-ger-scan verification to be performed that ensures the correct person is using the Admin card.

Figure 30 - Wiegand Utilities Menu Item

Figure 31 - Wiegand Card Utilities Dialog Box

The Wiegand Utilities dialog box (see Figure 31) allows Administrators to create specific IDsthat can initiate these operations:• Create an Enrollment Administrator Command Card (Enroll User/Card)• Create a Delete Administrator Command Card (Delete User/Card).

By entering a Card ID in the appropriate box and clicking Save , that ID is stored in the V-Station reader's memory. When a card that contains that ID is presented to the V-Station, theappropriate Add/Delete action is initiated. Once these initial cards have been created, Bio-scrypt recommends deleting the pre-configured IDs with the Clear ALL button.





54

NETWORK C ONFIGURATION M ANAGER

5. N ETWORK C ONFIGURATION M ANAGER After selecting which serial ports to use, the Network Configuration dialog box is displayed (seeFigure 32). This menu is normally accessed via the network icon on the toolbar.

The Network Configuration dialog box is the primary tool to configure your Bioscrypt reader net-work. The left portion of the dialog shows your network in a tree hierarchy, with each reader hang-ing on the channel to which it is attached. This is a logical representation of your network anddoes not reflect how your network is actually physically wired. The right side of the dialog showsinformation on the currently selected item in the tree. At the bottom are buttons that allow you tologically add or remove readers from this tree, check the status of all readers, test communica-tions, broadcast, and perform automatic network discovery. All of these functions are described inthis chapter.

Figure 32 - Network Configuration Dialog Box





55


5.1. N ETWORK T RE E

The nodes of the tree can be collapsed and expanded by clicking the – and + symbols. If thetree does not show any nodes, you must first set up the COM ports. Each COM port shows itscurrent baud rate setting (an icon means that VeriAdmin is using auto-baud rate negotia-

tion). Directly below each and icon is a broadcast icon , which is added to eachchannel automatically. Once you add readers to the network, they show up below the broad-cast icon with icons. Click the icons to show their information in the right-hand side panel.

To add readers to the tree:

1. Click the COM port/Ethernet icon under which the new reader is to be added.

2. Click the Add Reader button.

3. If adding under Ethernet, enter the reader’s IP address.

4. Enter the Transmit ID to use for this reader or click Auto .

5. Enter a name (optional).

6. Click Refresh to update.

5.1.1. A DDING R EADERS TO THE T REE

To move readers from one port to another:

1. Select the reader that you want to move.

2. Drag the reader over another port.

3. Drop the reader onto the port.

5.1.2. M OVING R EADERS B ETWEEN P ORTS

Be aware that this only removes the reader from VeriAdmin’s configuration, not fromthe actual physical network.

To remove a reader from the network:

1. In the network tree, select the reader to be removed.

2. Click Remove Reader or press the Delete key.

3. Confirm removal of the reader.

5.1.3. R EMOVING R EADERS FROM THE N ETWORK

To add additional ports or remove ports:

1. Click the Network Setup button.

2. Add or remove ports in the Network Setup dialog.

5.1.4. A DDING OR R EMOVING P ORTS

Removing ports with readers configured under them does not perma-nently delete them, but only disables them (i.e., they will not appear inthe network tree).NOTICENOTICE





56


To perform a network status check for all readers:

1. Click the Network Status button. A new dialog box opens.

2. Click the Status button to show the status of each reader in the tree.3. Click Update again to check the status of all readers.

5.1.5. C HECKING N ETWORK S TATUS OF R EADERS

5.2. G ENERAL R EADER S ETTINGS

The General Unit Settings section in the Network Configuration Manager presents generalinformation about the reader. In the upper-right corner, an icon is displayed that representsthe type of reader that is selected. The Reader Type combo box displays the product typename. If VeriAdmin cannot communicate with the device, an "unknown" icon might be dis-played. The product’s serial number is also displayed.

The Transmit ID field indicates the Network ID in which to transmit. Click the Auto button toattempt to find the ID of the current reader automatically. This only works if one reader is con-nected. You can also assign a Name to each reader on your network to assist in distinguish-ing the readers on your network. This information is stored on the PC and does not get storedon the actual reader.

5.3. R EADER S TATUS

The Reader Status field indicates ONLINE if it is able to establish communication with thedevice that is selected currently. It indicates NOT RESPONDING if VeriAdmin cannot commu-nicate or if the reader is busy. If the current port on the device is locked, it indicates PORTLOCKED . Click the Refresh button to retry communication.

5.4. A DVANCED S ETTINGS

Click the Advanced button to reveal more information and options (see Figure 33 below). For

readers placed on an Ethernet network, the IP Address and TCP Port can be specified here. Also listed is the Template Type used by the current reader, either one-to-one or searching.To go straight to the Reader Parameters dialog, click the Basic button or double-click thereader in the network tree. Click the V-Station button to open the V-Station Manager dialog.

Figure 33 - Advanced Settings Dialog Box





57


5.5. O THER O PTIONS

When a Broadcast icon is selected in the Network Tree, the Broadcast button becomes en-abled. Double-clicking it opens the Broadcast Parameters dialog. This broadcasts to all read-ers on that particular port. Click the Test Communications button to open the Test Communi-cation Settings dialog box (shown below in Figure 34).

5.6. S ETTING UP A N ETWORK

The purpose of this dialog box is quick communications testing. It cannot be used to actuallyestablish communication to a reader or to modify the current communications settings. TheNetwork Configuration and Network Setup dialog boxes provide that functionality. The Net-work Discovery button is currently disabled. This button will be enabled in the future to helpyou discover readers on an Ethernet network automatically.

Figure 34 - Test Communication Settings Dialog Box

When setting up a network, you need to assign unique ID numbers (and IP addresses if usingEthernet) to each V-Station reader. The easiest way to do this is to connect to each reader viathe AUX port and set the parameters. After each reader is configured you can connect it to yourRS-485 or Ethernet network.

To set up a network:

1. Supply power to the proper wires in the bullet connector or Weidmuller connectors on therear of the V-Station reader (consult the Installation Guide for a wiring diagram). When poweris applied, the front LED glows blue, and the top LED blinks amber, then turns off for readersin 1:1 Template mode or remains on for readers in 1:N Template mode.

2. Connect the reader’s USB bottom port to your PC’s USB port with the USB cable.

3. Access the Network Configuration Manager dialog box by clicking the network icon or byusing the menu commands.

4. Click the Add Reader button and establish communication.

5. Set the Network ID on the reader by double-clicking the icon for that reader in the NetworkTree, which brings up the Unit Parameters dialog box.

6. In the Communication tab, type the desired ID number in the Assign Reader Network ID field.





58


7. Press the Apply button to make the change.

This changes the ID in the reader's flash memory and modifies thetransmit ID that is being used by the PC so that you can continue tocommunicate.NOTICENOTICE

• Select the appropriate baud rate from the Host Port Baud Rate drop-down list (9600is recommended).

• Be aware that you are currently talking over the AUX (USB) port, and what you areactually changing is the Host Port settings that will be used when you connect to thereader through the Host Port wires on the back of the reader.

• If you are using a networked environment, set the Host Port Protocol to RS-485 (notrequired for Ethernet networks). If you are not networking the reader, set the Host PortProtocol to RS-232.

• Remember that the RS-232 and RS-485 connections are made through different wireson the pigtail for non-V-Station readers and through the different RJ-11/RJ-45 jacks atthe rear of V-Station readers (consult the V-Station Installation Guide for more details).

To set up an Ethernet network:

1. Connect the unit you want to set up for Ethernet to the computer running VeriAdmin viathe Aux port.

2. Select the unit in the Current Unit drop-down list.3. Click File in the menu bar and select V-Station Manager in the drop-down menu, or click

the V-Station Manager icon in the toolbar. The V-Station manager dialog box is displayed.4. Click the Ethernet tab. The V-Station Manager switches to the Ethernet tab.5. In the Assigned IP Address area, enter an IP in the IP Address field.6. Enter a subnet mask in the Subnet Mask field.7. Enter a default gateway address in the Default Gateway field.8. Click the Apply button. The new settings are applied.9. Verify the new settings in the Current IP Address and Assigned IP Address areas.10. Click the OK button. The V-Station Manager dialog box closes.11. Click File in the menu bar and select Network Configuration Manager from the drop-

down menu, or click the Network Configuration Manager icon in the toolbar. The NetworkConfiguration Manager dialog box is displayed.

12. Click the Network Setup button. The Network Setup dialog box is displayed.13. Select the Use Ethernet check box.14. Enter a subnet mask in the Subnet Mask field. Use the same value as you used in Step 6.15. Select the No TCP Delay check box (optional).16. Select a value in the TCP Timeout drop-down list (optional).17. Click the OK button. The Network Setup dialog box closes. An "Ethernet" icon is added to

the network tree in the Network Configuration Manager dialog box.18. Select the "Ethernet" icon in the network tree.19. Click the Add Unit button. A "New Bioscrypt Unit" item is added as a child to the Ethernet

item in the network tree.20. Enter the Transmit ID for the unit, or click the Auto button.21. Select the type of unit in the Unit Type drop-down list (optional).22. Enter a Name (optional).23. Enter an IP in the IP Address field. Use the same IP as you used in Step 5.24. Select a port in the TCP Port drop-down list (by default, this is set to "10001").25. Repeat Steps 19 through 24 for every reader you need to add to the Ethernet network.26. Click the OK button.





59

UNIT P ARAMETERS

6. U NIT P ARAMETERS The Unit Parameters dialog box aids an Administrator in these tasks:

• Assigning a Network Identification Number to a reader• Setting a Global Security Threshold for a reader• Enabling/Disabling Wiegand formats, Out Failure code, and Site code• Modifying the Host and Aux port baud rates• Changing the Host protocol• Viewing the current status and settings of the various ports• Performing a communications test that flashes the top LED and beeps the current reader• Password protecting the AUX port• Setting Wiegand Pass-Thru formats• Turning off biometrics (not recommended)• Setting other biometric options• Changing General Purpose Input/Output Options (GPIO)• Changing LED settings•

Changing miscellaneous options.The operation of this dialog is simple. Select the changes desired and press the Apply button totransmit the changes to the current reader. You can also press the Refresh button to update thescreen.

Figure 35 - Unit Parameters Dialog Box – General Tab

6.1. G ENERAL T AB

The General Tab (see Figure 35, below), displays general unit parameters for the currentreader. Basic product information is displayed in the upper left, including the type and serialnumber. All relevant firmware versions are displayed in the lower left. Current communicationsettings, shown in the upper right, include the reader’s network ID number and the port, pro-tocol, and the baud rate being used to communicate with VeriAdmin. Finally, miscellaneous

information is shown in the lower right.





60

UNIT P ARAMETERS

Figure 36 - Unit Parameters Dialog Box – Communication Tab

6.2. C OMMUNICATION T AB

The Communication tab allows the current communication parameters to be configured (seeFigure 36, below). V-Station Ethernet communication settings can be found in the V-StationManager dialog.

Changes made to the Reader ID and the baud rate also change theCurrent Transmit ID and Current PC baud rate so that communicationis not lost with the reader. This happens as long as the Auto optionhas been set for the port being used. Otherwise, return to the NetworkSetup dialog box and change the baud rate for that port.

NOTICENOTICE

In a networked environment, a unique number must be assigned to each reader be-fore adding that reader to the network (the default setting from the factory is "0").Two readers on the same network cannot have the same network ID because bothreaders would respond to commands sent to that ID. This causes information pack-ets to become jumbled, resulting in communication errors. This applies only to aRS-485 network and not to an Ethernet network.

To assign a network ID:

1. In the Assign Reader Network ID field, type the new Network ID number.

2. Click the Apply button.

6.2.1. N ETWORK IDENTIFICATION N UMBER

The baud rates of both the Host and Aux ports can be changed to match your PCand/or other networked devices. If you change the baud rate on the port you areusing, VeriAdmin’s Network Setup baud rate updates automatically (if the auto-baudoption is selected in the Network Setup dialog) to maintain communication with thereader.

6.2.2. H OST P ORT AND AUX P ORT B AUD R ATES





61

UNIT P ARAMETERS

This allows an administrator to set a password for the Aux port to disable unauthor-ized use of the Aux port. The purpose is to prevent unauthorized users from access-ing the Aux port unless the password is supplied to re-enable the port. In the dialog,the current state is shown. Select Disable and supply a numeric password, and

then click the Apply button. The supplied numeric password should be rememberedas it is required to re-enable the Aux port while communicating on the Aux port.Once the Aux port is disabled, no communications are accepted over the Aux portunless the Enable Port option is chosen by either of the following methods.

• If communicating over the HOST port: The Enable Port command enables Aux port communications and a password is not required. This allows thereader to be reset over the HOST port if the Aux password is forgotten.

VeriAdmin allows this since the network is considered secure.• If communicating over the Aux port: The ENABLE PORT command enables

Aux port communications only if the correct password is supplied. All othercommands return an error indicating a ‘locked port’ until the port is enabledproperly. Many fields in VeriAdmin are blank when the port is locked.

•

The USB Aux port uses a virtual COM port driver.

6.2.3. A UX P ORT S ECURITY

To set the host port and aux port baud rates:

1. Choose the appropriate section (Host Port or Aux Port).

2. Select the appropriate baud rate from the drop-down list (Not all baud rates areavailable).


Clicking the Test Communications button performs a quick communications testwith the current device. The test flashes the top LED each color, then sounds thebuzzer.

6.2.4. T EST C OMMUNICATIONS

Bioscrypt recommends that the Aux port be disabled and protectedwith a password.NOTICENOTICE

To communicate with the device using the Aux Port:

1. Connect to the Aux port.

2. In VeriAdmin, select the Communication tab in the Unit Parameters dialog box.

3. Select Enable Port .

4. Enter the correct password.

5. Click the Apply button. All communications are now allowed. Once all admini-stration is completed, Bioscrypt recommends disabling the Aux port again,thereby protecting it from unauthorized use.

When broadcasting parameters over an RS-485 network, ensure thatall units on the network are set to the same baud rate. If the baud ratesettings differ from unit to unit, some units might not receive thebroadcasted parameters.

NOTICENOTICE





62

UNIT P ARAMETERS

6.3. W IEGAND T AB

The Wiegand tab displays all settings associated with Wiegand input and output to the reader(see Figure 37). Both pre-defined and custom Wiegand formats can be set, along with severalother Wiegand options. The selected format is used for both input and output.

Figure 37 - Unit Parameters Dialog Box – Wiegand Tab

Several Wiegand formats come pre-loaded on the V-Station reader and are desig-nated as a Standard Type in Table 4, below. They contain an ID of 32 bits or less. All

V-Stations support these formats. This section allows you to select the desired Wie-gand format for both input and output. Standard 26-bit is the default format. Otherformats are available and can be selected using the drop-down list. The format forboth input and output is the same.

6.3.1. P RE -D EFINED W IEGAND F ORMATS

Format TypeAlt Site Codeand Fail SiteCode Range

Template IDNumber Range

Extended ID NumberRange

Standard 26-bit Standard 0 - 255 1 - 65535 N/A

Apollo 44-bit Standard 0 - 16383 1 - 65535 N/A

Northern 34-bit Standard 0 - 65535 1 - 65535 N/A

Northern 34-bit [no parity] Standard 0 - 65535 1 - 65535 N/A

HID Corporate 1000 [35-bit] Standard 0 - 4095 1 - 1048575 N/A

Ademco 34-bit Standard 0 - 4095 1 - 1048575 N/A

HID 37-bit Standard 0 - 2047 1 - 16777215 N/A

Generic 34-bit Uploadable N/A 1 - 4294967295 N/A

Generic 64-bit Extended IDUploadable N/A 1 - 4294967295 1 - 4611686018427380000

Wiegand 4002 40-bit Extended IDUploadable N/A 1 - 4294967295 1 - 274877906943

DSX 33-bit Uploadable 0 - 127 1 - 16777215 N/A

Table 4 - Wiegand Formats and Associated Valid Values





63

UNIT P ARAMETERS

The Custom Uploadable format is a separate format file that can be uploaded ontothe V-Station reader. It is also considered to be a pre-defined format, but it does notcome standard on the device. Instead, the file must be obtained through Bioscrypt.The regular uploadable format contains 32 bits or less of ID information.

The Extended ID Uploadable format is also a separate file, but one that containsmore than 32-bits of ID; thus, the Extended ID field must be used. The Extended IDshould be considered the true ID number for this user and it is what is communi-cated to the access control system. The Template ID is simply a placeholder. Ex-tended ID format files may be obtained through Bioscrypt Technical Support.

If you have received a custom Wiegand Format file from Bioscrypt (*.WGF), you canupload it to the reader by clicking the Upload Custom Format button and then se-lecting the file. This adds the new format to the drop-down box, where you can thenselect it. You will still need to press the Apply button to confirm the change.

6.3.2. U PLOADING A C USTOM F ORMAT

Only one custom format can be stored on the reader at a time.NOTICENOTICE

This option, when enabled, causes the reader upon a successful verification to re-place the site code normally output as part of the Wiegand string with the alternativesite code specified in the edit box. This option applies only to Pre-Defined and Cus-tom formats and does not work with Pass-Thru formats. The string is numeric andthe range depends on the selected Wiegand format. For a list of valid values, seeTable 4 on the previous page. If the check box is not selected, the site code readfrom the proximity card is passed through in the Wiegand output string.

6.3.3. O N S UCCESS : ALT S ITE C ODE

Enabling this option causes the ID number entered in the corresponding edit box tobe sent to the Wiegand device when a failed verification occurs. The string is nu-meric, and the range depends on the selected Wiegand format. For a list of validvalues, see Table 4 on the previous page. If the check box is not selected, no stringis sent for biometric failures. This option applies only to Pre-Defined and Customformats and does not work with Pass-Thru formats.

6.3.5. O N F AILURE: F AIL S ITE C ODE Similar to the On Success: Alt Site Code option, the On Failure: Fail Site Code op-tion causes the reader to replace the Site Code normally output with the Fail SiteCode value specified in this option. The string is numeric, and the range depends onthe selected Wiegand format. For a list of valid values, see Table 4 on the previouspage. If the check box is not selected, no string is sent for biometric failures. Thisoption applies only to Pre-Defined and Custom formats and does not work withPass-Thru formats.

6.3.4. O N F AILURE: F AIL ID C ODE

For readers with firmware version 7.30 or lower, if the On Success AltSite Code check box is selected and has a value, the string is alwayssent out, after both successful and failed verifications.NOTICENOTICE





64

UNIT P ARAMETERS

Selecting this option causes a Wiegand string with inverted parity bits to be sent onthe Wiegand output lines upon a failed verification. This option applies only to Pre-Defined and Custom formats and does not work with Pass-Thru formats.

6.3.6. O N F AILURE: INVERT P ARITY B ITS

This option enables Wiegand input when selected. This allows all Wiegand inputcommunications to the reader. If this option is deselected, all Wiegand input datathat the reader receives is ignored.

6.3.7. E NABLE INPUT

This option enables Wiegand output when selected. If this option is deselected, allWiegand output data is ignored and not output. There are two options when enablingoutput, which are selected from the drop-down list to the right of the check box:

• Always Output : This enables Wiegand output on all Verifications regardless ofwhether they were initiated by a Wiegand input, a PC, or any other device. Thisis the default setting.

• Selective Output : This causes the Wiegand output string to be sent whenevera Wiegand input is received (see Section 6.3.11 for more details).

6.3.9. P ULSE W IDTH

Deselecting the Use Default option allows the user to enter a custom pulse widthduration for the Wiegand output. This is not recommended, however, unless theuser is very familiar with the device connected to the reader.

6.3.8. E NABLE O UTPUT

Deselecting the Use Default option allows the user to enter a custom pulse interval

duration for the Wiegand output. This is not recommended, however, unless theuser is very familiar with the device connected to the reader.

6.3.11. W IEGAND P ASS -T HRU FORMATS

The VeriAdmin software allows expanded Wiegand compatibility by allowing defini-tion of a Pass-Thru format. To use this ability, this information is required:

• Total number of Wiegand bits in the Wiegand string (maximum = 64 bits)• Start Bit of the ID Field (where the first bit is Bit 0)• Number of bits in the ID Field (must be contiguous bits).

Using these three pieces of information, when a card is presented to the reader, itattempts to decode the ID Field and uses that information as the Template ID num-

ber. All Site codes, Parity, and any other data are ignored. Using this ID, the readerattempts to verify the template corresponding to the decoded ID. If the ID is notfound or if the verification attempt fails, no Wiegand output is sent. To the controller,it appears as if nothing was presented. If the ID is valid and a successful verificationis performed, the original Wiegand input string (with Site code, Parity, etc.) will"Pass-Thru" to the Wiegand output unchanged.

Although this Pass-Thru option does not allow Fail Strings, changing the Site Code,or checking parity, it does provide a mechanism for using a wide variety of Wiegandformats.

6.3.10. P ULSE INTERVAL





65

UNIT P ARAMETERS

The user has the ability to add custom-defined Pass-Thru formats to the VeriAdminsoftware. These are added to the drop-down list in the Reader Parameters dialogbox. In the installation directory, there is a file called wformat.dat which contains alldisplayed Wiegand formats.The wformat.dat file contains both pre-defined formats and Pass-Thru formats. Seebelow for example contents of that file. All lines that begin with "//" are ignored. Pre-defined formats follow this example:

WIEGAND <MV1100_Code> <#bits> <text_string(no spaces)>

6.3.12. C REATING U SER -D EFINED P ASS -T HRU F ORMAT O PTIONS

These should NOT be changed or added to unless directed by Bio-scrypt Technical Support. Any modifications to this section couldcause unreliable Wiegand communications using pre-defined formats.

WARNING

The Pass-Thru format follows this example:

WIEGAND_PASS <label> <TOTAL_BITS> <ID_START_BIT> <ID_NUM_BITS>where:

• WIEGAND_PASS is the identification that this is a PASS_THRU format• <label> is the Description shown in the dropdown list (no spaces)• <TOTAL_BITs> is the total number of bits in the entire Wiegand String (the

maximum is 64)• <ID_START_BIT> is the starting bit of the ID Field (where the first bit is 0)• <ID_NUM_BITS> is number of bits in the ID Field (must be contiguous).

Example:

Standard 26-bit Wiegand is -- PSSSSSSSSDDDDDDDDDDDDDDDDP(1 Parity bit, 8 SITE CODE bits, 16 ID bits, 1 Parity)26 total bitsID Start Bit is 9 - (where first bit is 0)ID Number of Bits is 16This would be represented as:

WIEGAND_PASS 26-Bit-Pass_Thru 26 9 16

And the text, "26-Bit-Pass_Thru" would be added to the drop-down list. Selection ofthis option would show the data in the associated fields. As seen on the next page,one special format (CUSTOM –1 –1 –1 ) is also added. When this is selected, theuser can enter the TOTAL_BITS, ID_START_BITS, and ID_NUM_BITS directly intothe VeriAdmin user interface. These values can then be sent to the reader. The val-

ues are not saved to the wformat.dat file, however.

To edit or add items directly to the wformat.dat file, open it with any standard texteditor, as it is simply a text file.





66

UNIT P ARAMETERS

Example:

//// format is: IDENTIFIER MV1100_Code #bits text_string(nospaces)//

WIEGAND 0 26 StandardWIEGAND 1 44 ApolloWIEGAND 2 34 NorthernWIEGAND 3 34 Northern(no_parity)WIEGAND 4 34 AdemcoWIEGAND 5 35 HID_CorporateWIEGAND 6 37 HID//// format is: IDENTIFIER text_string(no spaces) TOTAL_BITSID_START_BIT ID_NUM_BITS// (* note: ID_START_BIT is zero-based *)//WIEGAND_PASS 26-Bit-Pass_Thru 26 9 16WIEGAND_PASS Kantech-XSF 39 22 16WIEGAND_PASS CUSTOM -1 -1 –1

6.4. B IOMETRICS T AB

The Biometrics tab in the Unit Parameters dialog box (see Figure 38, below) allows variousbiometrics parameters to be configured. Use extreme caution when making any changes inthis tab because they will affect the operation of the reader’s biometrics, and thus affect over-all security. For example, disabling biometric verification causes the reader as a whole not torequire a finger for verification at any time!

Figure 38 - Unit Parameters Dialog Box – Biometrics Tab





67

UNIT P ARAMETERS

There are two types of security settings: the local security level associated with theindividual template, and the global security level associated with the individual V-Station reader. The system will always authorize using the lower of the two.

Example: If the template is set to "Very High" and the reader is set to "Medium", theauthorization is performed at the "Medium" setting.

Because of the reader’s high accuracy rate, which practically negates the possibilityof a false acceptance, the above affords the reader a high rate of true authorization.This option is disabled for V-Station Base readers.

To change the global security threshold:

1. Select the Security Threshold from the available radio buttons.


6.4.1. G LOBAL S ECURITY THRESHOLD

This option allows biometric verification to be turned on and off. Select or deselectthis option and click the Apply button. Deselecting the check box causes the readerto bypass the core finger-scan authentication (i.e., no finger is required) and allowsfor Wiegand pass-thru authentication alone. Turning off biometrics results in a lesssecure system and is not recommended! The user assumes all risk associated withdisabling biometrics.

6.4.2. B IOMETRIC VERIFICATION

This section shows the current setting of the Auto-Finger Detect function forsearching-type readers. Select the desired options and click the Apply button tomodify the setting on the current reader. This section is disabled if the current

reader does not have the searching ability.

6.4.3. A UTO -F INGER D ETECT (V-S TATION B ASE IN S EARCHING M ODE ONLY )

This option dictates how the reader should behave when the template securitythreshold is set to a value of "None" (numerically mapped to 0). In this case, theuser always passes the verification (biometrics are ignored); however, the user muststill place a finger on the sensor and have it detected to proceed. Because somefingers have difficulty being detected by the sensor, an administrator can opt to turnoff the requirement that a finger be placed. If turned off, the authorized ID is passedimmediately without requiring a finger.

6.4.4. S ECURITY LEVEL N ONE O PTIONS

This option dictates how the reader should behave when the template securitythreshold is set to a value of "Password Only" (numerically mapped to 6). If the op-tion is selected, templates with this security level are asked for a biometric compari-son. The threshold used for deciding whether a comparison matches or not is thendetermined by the Global Security Threshold . If this option is not selected, tem-plates with a "Password Only" security threshold are not required to pass a biomet-ric comparison. On V-Station readers, a password is required to pass. On otherproducts, a pass is indicated immediately without a biometric comparison.

6.4.5. S ECURITY LEVEL 6 O PTIONS









70

UNIT P ARAMETERS

All V-Station and OEM readers (with firmware v7.30 or above) have GPO TTL capa-bility. V-Stations and OEM readers have both GPO 0 and 1 available, while other V-Station products only have GPO 0 available. When configured, certain GPO actionscan activate GPO lines 0, 1, or both. The possible actions are:

• Enroll Completed – When a user has completed an enrollment• Enroll Initiated – When a user has initiated an enrollment• Verify Passed – After a successful verification, initiated from any source• Verify Failed – After a failed verification, initiated from any source• Finger not Detected – Whenever a finger is expected by the reader but not

detected• V-Station Admin Mode – When a user enters admin mode from the keypad

on a V-Station (with full administrative privileges)• V-Station Enroll Mode – When a user enters admin mode from the keypad as

a V-Station Enroller• Delete Attempted – When a template delete is initiated, from any source (this

applies to templates stored on the device only)• Reader Boot-up – When a reader is booted up, either from a power cycle or

from a soft restart.

Any of these actions, if configured, can trigger the line active for the Duration that isspecified (default 600 ms). All GPO parameters can be reset to defaults be clickingon the Reset GPO Parameters button. By default, the readers ship with both GPIand GPO actions set to "No Action".

6.5.2. G ENERAL P URPOSE O UTPUT

6.6. LED T ABLE T AB

The LED Table tab in the Unit Parameters dialog box (see Figure 40) allows you to define howthe reader’s multi-colored LED and buzzer function under specific operations. For example,the LED can be set to turn amber to indicate that a finger should be placed for verificationafter waving a card or the buzzer can be activated for a half-second after a failed verification.

Figure 40 - Unit Parameters Dialog Box – LED Table Tab

Be aware that the LED table cannot be reset for MV1200 V-Station units running firmware ver-sion 7.50.





71

UNIT P ARAMETERS

Select the function (enroll, verify, idle, etc.) to modify from the drop-down list. On the right iseach possible state for the selected operation. Line 1 represents a green LED, Line 2 repre-sents a red LED, and Line 3 represents the buzzer. To obtain an amber LED, select both Lines1 and 2.

In Figure 40 (on the previous page), the Idle function is selected. Some states are disabledbecause they have no meaning for the Idle function. In Figure 40, the waiting state has noLEDs or buzzer activated; however, the Error state will activate the red LED for 600 ms. Toindicate a flashing LED, choose the duration and set the interval time to a reasonable value(1350 ms is normal).

The Use Table check box (shown only for certain functions and not present in Figure 40) indi-cates whether to use these settings for non-Wiegand initiated commands (like commandscoming from the PC). Repeat the process for other functions then click Apply or OK.

6.7. M IS C . T AB

The Misc. tab in the Unit Parameters dialog box (see Figure 41) contains options formerly inthe Verification Action Response dialog box (which was separate from the Unit Parametersdialog box) as well as new options for template enrollments.

Figure 41 - Unit Parameters Dialog Box – Misc. Tab

The actions to be taken after a successful verification can be specified here. Undernormal operation, the V-Station reader responds based on how a Verification Actionwas initiated. When a Wiegand input initiates the action, a Wiegand output respondsto it. When a Verification Action is initiated over a communications port by using theBioscrypt DLL or low-level commands (described in the SDK), then the responsepacket is returned on the same communication port (either Host or Aux). This taballows other verification responses to be selected in addition to the normal re-sponse.

The Line Trigger is a signal line that triggers for a defined number of seconds on asuccessful verification. The Line Trigger is the gray wire on the V-Station pigtail(check the label on the pigtail to be sure).

6.7.1. S END VERIFICATION R ESULT





72

UNIT P ARAMETERS

Bioscrypt recommends that only advanced users who are working with the SDK andwriting their own custom software attempt to enable the Host or Aux Always opera-tions. The Always (with ID) option is basically the same thing except that the firstdata word returned is the template ID.

Do not set a verification action for the Aux port on V-Station products;this causes problems with V-Station’s menu system because it uses thesame port.

WARNING

This option drastically changes the behavior of the reader for verifications initiatedeither by the keypad (V-Station) or by a Wiegand source. When enabled, these ac-tions do not initiate a verification (the default behavior of the reader). Instead, the IDnumber is placed into a queue that is available for polling from an outside devicesuch as a door controller. This outside device determines if the ID is valid and takesappropriate steps such as sending the reader the appropriate template (perhapsfrom a central database) and independently initiating the Verification process on thereader. Customers wishing to implement this behavior should consult the DLL Man- ual or the Serial Interface documents provided with the Bioscrypt SDK and contactBioscrypt Technical Support for further assistance.

6.7.2. V ERIFICATION P OLLING M ODE

The Broadcast dialog box allows you to modify settings on all readers in a net-worked environment at the same time. Under most circumstances, this window isused when communicating over the Host Port (recall that the Aux port is used pri-marily for communicating with a single reader). Note that the window has similarparameters to the Unit Parameters dialog box. For more details, see Section 11.

6.7.3. B ROADCAST P ARAMETERS

Figure 42 - Broadcast Parameters Dialog Box

Bioscrypt recommends changing one setting at a time and clicking the Broadcastbutton after each change.





73

7. T EMPLATE M ANAGER The Template Manager (see Figure 43, below) allows you to:

• Edit templates• Enroll templates• Delete templates• Verify templates• Transfer templates to and from a PC and from one reader to another• Edit templates stored on the PC• Verify templates stored on the PC• Broadcast a template from the PC to all readers on a port• Export the list of templates to a file on the PC.

TEMPLATE M ANAGER

Figure 43 - Template Manager Dialog Box

7.1. E DITING T EMPLATES

To edit a template, select the appropriate ID numbers in the Templates on Device pane andclick the Edit button. Alternatively, double-click the ID number in the Templates on Device pane.

The SHIFT and CTRL keys can be used to select multiple templates,but be aware that a separate window opens for each template that isselected.NOTICENOTICE





74

TEMPLATE M ANAGER

A dialog box like the one shown below in Figure 44 opens for each selected template.

Figure 44 - Template Viewer Dialog Box

In this dialog box, you can:

• View and edit template attributes, such as the Employee ID and the Security threshold• Save the template back to the current reader, to the PC, or to a smart card (if applicable).

When saving to the reader, any changes made overwrite the old template.

You cannot save a template with a different User Type as another tem-plate on the device with the same ID.

Saving to the reader is not allowed if the template storage space is al-

ready full. The edited template should be saved to the PC first and theold template on the reader should be deleted manually. The edited tem-plate can then be downloaded back to the reader.

NOTICENOTICE

V-Stations support User Access Scheduling on a per-template basis. Schedules and holidaysfor the current template can be selected in the Template Viewer dialog box. By default, a newtemplate is assigned to the built-in access Schedule 0 (No Access), but may be assigned toany of the 64 schedules. Be aware that the reader ignores the assigned schedule if AccessScheduling is disabled. If the user’s schedule should Observe Holidays , select this check box.

To view the schedule graphically, click the Access Schedule button. The Access ScheduleSelection dialog box is displayed (see Figure 45 on next page).

To change the User Type of two templates stored on a unit that have

the same ID but different indices:1. Transfer the templates to the PC.

2. Erase the templates from the unit.3. Using the Edit PC Templates button in VeriAdmin, change the

user type for both templates, one by one (the new user typesshould be the same).

4. Transfer both templates from the PC back to the unit.

NOTICENOTICE





75

TEMPLATE M ANAGER

Figure 45 - Access Schedule Selection

In this dialog box, you can view and select an appropriate schedule for the template. Today’sday of the week (according to the reader) is highlighted in blue. To check whether the tem-plate currently has access on this reader, click the Check Current Access button (this takesdefined holidays into consideration if holidays are being observed). Click OK or double-click aschedule in the list to choose the schedule. You cannot edit the schedule here — this shouldbe done in the Access Schedules tab of the V-Station Manager.

7.2. D ELETING T EMPLATES

Use the Delete Templates option to delete one or more templates from a single reader (if youare in a networked environment, see the Broadcast Parameters Section). Select the appropri-ate ID numbers in the Templates on Device window and click the Delete button. You will notreceive a warning when you are deleting templates unless you are deleting all of them. There-fore, be sure to confirm that you have selected the correct templates before deleting.

7.3. E XPORTING TH E L IS T

Clicking the Export List button allows the currently displayed template list to be saved to acomma-separated values file (.CSV). Enter the name of the file to save in the Save As dialogbox and click Save .

7.4. V ERIFYING T EMPLATES

Use this option to initiate a 1:1 verify function on the current reader (indicated on the drop-down list). Only one template can be selected for this operation. Be aware that this verificationis subject to settings such as Biometrics Scheduling, Access Scheduling, Multi-User options,etc. For example, the template might match the finger but the user might still fail verificationbecause the user is not scheduled at that time.





76

TEMPLATE M ANAGER

There are six primary methods to transfer templates:

• From a unit to a smart card• From a PC to a smart card• From a unit to a PC• From a PC to a unit• From unit to unit• From a PC to all units defined in the network.

7.5. T RANSFERRING T EMPLATES

To transfer templates from a unit to a smart card:

1. In the Template Manager window, select the templates you want to transfer.

2. Click the From Reader > Smart Card button.

3. When asked for the site key (see Figure 46), enter it and click OK.

7.5.1. T RANSFERRING TEMPLATES F ROM A U NIT TO A S MART C ARD

• Only present the smart card to the reader when requested by VeriAdmin.

• Present the smart card to the reader until VeriAdmin requests itremoved.

• Only present the smart card to the unit for as long as requested.• The site key must match both the one on the ESI and on the smart

card.• This feature is only available on units with smart card readers.

NOTICENOTICE

Figure 46 - Enter Site Key

4. Present the smart card to the unit (see Figure 47 on next page) when the PleasePlace Smart Card Close to Reader dialog box is displayed.

5. The Please Hold Smart Card dialog box is displayed.

6. Hold the card steady near the reader until the Please Remove Smart Card dialog box is displayed.

7. If successful, the Template Successfully Written message (see Figure 48 onnext page) is displayed.





77

TEMPLATE M ANAGER

Figure 47 - Present Smart Card to Reader

Figure 48 - Template Successfully Written

The operation is similar to uploading from the unit and requires the current site keyafter selecting the desired templates) from the PC. This feature is only available onunits with smart card readers.

7.5.2. T RANSFERRING TEMPLATES F ROM A PC TO A S MART C ARD

This transfers, or downloads, templates from the unit to a PC. If you are in a net-

worked environment, you only need to download from one reader because the tem-plate should be the same on all networked readers.

To download templates from a unit to a PC:

1. In the Template Manager dialog box, select the templates) to transfer.

2. Click the From Unit > PC button.

3. When the screen in Figure 49 (on next page) is displayed, confirm the downloadpath and directory; make any applicable changes.

4. Click the Save button. When completed, the files are saved to the designated

directory on the PC.

7.5.3. T RANSFERRING TEMPLATES F ROM A U NIT TO A PC





78

TEMPLATE M ANAGER

You can transfer templates from your PC to any selected compatible unit.

To transfer templates from a PC to a unit:

1. Click the From PC > Unit button. An Open dialog box is displayed (see Figure50).

2. Navigate to the folder where the templates are stored.

3. Select the appropriate templates.

4. Click the Open button.

7.5.4. T RANSFERRING TEMPLATES F ROM A PC TO A U NIT

Figure 49 - Download Templates to PC

Figure 50 - Upload Templates to PC





79

TEMPLATE M ANAGER

When a template is uploaded, the Template ID number and TemplateIndex number are taken from data within the file, not from the filename. Even if the name of the file is changed on the PC, the templatenumbers remain the same. To change a template’s ID or index, alwaysuse the Template Edit feature within the application.

The Template ID number and Template Index number determine thefilename. If these are not changed, clicking the Save To PC buttonreplaces the previous file. If either value is changed, a new file iscreated.

It is not possible to transfer more than 2000 templates at a time from afile selection dialog box due to a limitation in the Windows® operatingsystem. If you need to transfer more than this amount, please selectsmaller numbers of templates and broadcast them in separate ses-sions. Bioscrypt recommends transferring templates in smalleramounts to reduce the chance of errors occurring during a templatetransfer.

NOTICENOTICE

7.5.5. T RANSFERRING TEMPLATES FROM U NIT TO U NIT Use this option when you are in a networked environment and want to transfer tem-plates from one unit directly to another.

To transfer templates from unit to unit:

1. In the Template Manager window, select the templates) you want to transfer.

2. Click the Unit to Unit button. The Transfer Templates dialog box is displayed(see Figure 51).

3. Select the units you want to transfer the templates to.

4. Click the Start Transfer button. A progress bar indicates the progress.

Within this window, all template data can be modified and saved back to the PC byclicking the PC button within the Save To selection group. Alternatively, you cansave to the unit.

Figure 51 - Transfer Templates Dialog Box





80

TEMPLATE M ANAGER

It is not possible to transfer more than 2000 templates at a time from afile selection dialog box due to a limitation in the Windows® operatingsystem. If you need to transfer more than this amount, please selectsmaller numbers of templates and broadcast them in separate ses-sions. Bioscrypt recommends transferring templates in smalleramounts to reduce the chance of errors occurring during a template

transfer.When broadcasting on Ethernet, readers are programmed not to re-spond to UDP broadcast packets, even if a response is requested.This is because VeriAdmin is designed to allow each reader to haveunique settings as required by mixed networks. The ability to enter theReader Parameters dialog box is disabled when the - 1 BroadcastEthernet option is selected in the drop-down list.

When broadcasting parameters over an RS-485 network, ensure thatall units on the network are set to the same baud rate. If the baud ratesettings differ from unit to unit, some units might not receive thebroadcasted parameters.

NOTICENOTICE

7.5.6. B ROADCASTING T EMPLATES FROM A PC

This option allows templates stored on the PC to be broadcast to units in the net-work. All active ports are checked for units and broadcast to regardless of whetherunits are present.

• The templates are read one by one from the PC.

• If the Overwrite check box is selected, any existing templates on the unitswith the same ID and Index are overwritten. To keep the original templateson each unit, deselect this check box.

• Each specific template is erased from all readers on the network (if the Over-write check box is selected). Each reader is polled to determine if each tem-plate was removed correctly. If the template was not removed, another de-lete attempt is made.

• The templates) are transferred to each unit connected to one of the portsdefined in the Network Setup dialog box. Each unit is polled to confirm thatthe template now exists on the each unit. If the template does not exist on aparticular unit, the transfer function is tried again.

• If Verify Broadcast is selected, VeriAdmin attempts to verify that the tem-plates were erased and transferred successfully.





81

TEMPLATE M ANAGER

7.5.7. E DITING T EMPLATES ON A PC

To edit a template that is stored on the PC:

1. Click the Edit PC Template button. A Windows File Selection dialog box opens.

2. Select the template file to edit. Click Open .

3. Select a template type in the Type drop-down list.

4. Click Open . The Template Viewer dialog box is displayed (see Figure 52).

5. Modify the template data as needed.

Figure 52 - Template Viewer Dialog Box





82

C OMMAND C ARD M ANAGER

8. C OMMAND C ARD M ANAGER Command cards allow administrators to add and remove users directly from a reader without hav-ing to use VeriAdmin.

• Command cards can be useful for creating and removing temporary visitor’s badges or ad-ministering the system when your PC is not available.

• To view a list of all command card IDs for the current reader, click the Command Card iconon the toolbar or select the option from the menu.

Figure 53 - Command Card Manager

8.1. A DMINISTERING C OMMAND C ARDS

To create command cards during enrollment or while editing a template, select ProxEnroll ID or Prox Delete ID from the User Type drop-down list in the Template

Viewer.

8.1.1. C REATING C OMMAND C ARDS

To remove a command card, select the ID number in either the Enroll IDs or theDelete IDs window and click the Delete Entry button directly beneath the window.The template is deleted from all associated indices.

8.1.2. R EMOVING C OMMAND C ARDS

No warning is displayed when you click the Delete Entry button.Ensure that you have selected the correct ID prior to deleting it.NOTICENOTICE





83

C OMMAND C ARD M ANAGER

Once you have created Enroll and Delete command cards, they can be used to en-roll or delete users.

8.1.3. U SING C OMMAND C ARDS

8.1.3.1. E NROLLING U SERS WITH A C OMMAND C AR D

To enroll a user using an Enroll command card:

1. Present the Enroll command card to the reader. The LED glows am-ber, directing the administrator to place a finger on the reader.

2. If the administrator is authorized to use the Enroll command card, theLED glows green and the reader beeps. If the administrator is not au-thorized, the LED glows red and the reader returns to the idle state.

3. The LED flashes amber, indicating that the system is ready to enrollthe new card. Present the user card to be enrolled to the reader. TheLED stops flashing and glows amber.

4. Place a finger on the reader. If the finger scan is accepted, the LEDglows green and the reader beeps, indicating that the card wasenrolled successfully.

To delete a user using an Delete command card:

1. Present the Delete command card to the reader. The LED glows am-ber, directing the administrator to place a finger on the reader.

2. If the administrator is authorized to use the Delete command card, theLED glows green and the reader beeps. If the administrator is not au-thorized, the LED glows red and the reader returns to the idle state.

3. The LED flashes red, indicating that the system is ready to delete thecard. Present the user card be deleted to the reader.

4. The LED glows green and the reader beeps, indicating that the cardwas deleted successfully.

8.1.3.2. D ELETING U SERS WITH A C OMMAND C AR D





84

USING THE S MART C ARD M ANAGER

9. U SING THE S MART C ARD M ANAGER VeriAdmin has a toolbar option for accessing the Smart Card Manager dialog. Clicking the Smart button opens the Smart Card Manager dialog box (see Figure 54). Templates are not shown untilthe Read Smart Card button is clicked. The Reader Information area provides information aboutthe ESI (if applicable), as well as the reader type, mode, card type (1K or 4K), and the card's writestatus. For newer products, ESI is not applicable.

Figure 54 - Smart Card Manager

• This dialog box initially shows the smart card settings and a blank card.

• Clicking the Read Smart Card button commands the V-Station to read the template listfrom the card and to display a list of the stored templates.

• A symbol is displayed in the upper right-hand corner of the card if it is secured.

• VeriAdmin indicates which type of smart card was read (MIFARE or iCLASS, 2- or 16-application area).

• The card’s serial number is provided for reference.

• Clicking either template button (primary or secondary) commands the V-Station to read thefull finger-scan data from the smart card.

• VeriAdmin prompts the user for the site key (depending on security settings), and if the sitekey entered matches the site key stored on both the V-Station and the smart card, the tem-plate is read and the normal Template Editor dialog box is displayed.

It is not possible to edit a template on the card and change either theID or the Index, then save the template back to the card.NOTICENOTICE





85


9.1. D ELETING T EMPLATES

Clicking the Delete Template (1) button commands the V-Station to erase the primary tem-plate stored on the smart card. VeriAdmin performs a site key verification before allowing theerase to take place. Clicking the Delete Template (2) button commands the V-Station toerase the secondary template stored on the smart card.

9.2. U SING W IEGAND S TRINGS

The Use Wiegand String setting controls whether the V-Station reader attempts to read aWiegand string from the smart card during verification and if successful, if it sends the Wie-gand string through the Wiegand Out lines. If this check box is selected, VeriAdmin attemptsto save the Wiegand string onto the smart card when enrolling.

Only one Wiegand string can be stored on a smart card, even if there isroom for two. The second Wiegand string would be a duplicate of thefirst.NOTICENOTICE

Saving a Wiegand string onto a Smart Card requires a Wiegand string to be read from anexternal Wiegand input device (click the From Reader button during a Quick or AdvancedEnroll). Once the Wiegand string has been read, the Wiegand String Read check box will be-come selected. If VeriAdmin did not receive the Wiegand string during the enrollment, the dia-log box shown in Figure 55 is displayed.

Figure 55 - VeriAdmin Notification about Wiegand String

Also, when you have this setting selected, VeriAdmin reminds you that it is saving the Wie-gand string when saving to a smart card. The Write Wiegand String check box below theSave button will become selected if the Wiegand string was read successfully.

9.3. D ELETING W IEGAND S TRINGS

VeriAdmin has the ability to delete Wiegand strings that are associated with a template. Click-

ing the Delete Wiegand String (1) button prompts the user for a Site Key and then deletes theWiegand string associated with the Primary template. Clicking the Delete Wiegand String (2)button performs the same task with the Secondary template. It is possible to use this functioneven if a Wiegand string has not been associated with a template, as long as a “User Data”block has been placed in the smart card layout.





86


9.4. S ECURING C ARDS

VeriAdmin can secure and un-secure (reset) smart cards. The Secure Card button secures anew smart card that has not been updated with the proper site key (i.e., it still has the manu-facturer’s default keys). You do not need to enter the current site key to perform this function.Simply click the Secure Card button and present the card to the reader.

9.5. R ESETTING C ARDS

The Reset Card button allows the user to un-secure (reset) a smart card after providing theproper site key. This erases all V-Station data on the card, including templates, Wiegandstrings, and other user data, as defined in the smart card layout, and sets the site key back tothe manufacturer’s default. This essentially transforms the card back into a fresh, unusedcard, with the exception of the sectors not defined in the layout (sectors used by another ap-plication, for example). Currently, three manufacturer settings are supported for MIFARE-compatible cards: Gem+ Flow A, Gem+ Flow B, and HID Flow B. Please refer to the docu-mentation provided by the smart card manufacturer for more information.

Only the sectors of the smart card being used by the V-Station are se-cured; all other sectors remain untouched.

Performing this function on a smart card that has already been securedhas no effect.

NOTICENOTICE

9.6. M AX T EMPLATES PE R C AR D

At the top of the Smart Card Manager dialog box, the Max Templates per Card drop-downlist allows you to specify how many templates can be stored on a card. Currently, this can beset to either one or two templates, although future cards with more memory might supportadditional templates. If the maximum is set to two templates, the smart card layout must havetwo templates defined (this applies only to MIFARE-compatible cards). Otherwise, when at-tempting to save a second template to the card, an Invalid Smart Card Layout error messageis displayed. If the maximum is set to only one template, attempting to save a second tem-plate to a card results in an ESI – Storage Space is FULL error message.

9.7. R EA D -O NL Y M OD E The Read-Only Mode check box allows the unit to be put into read-only mode, where it willnot be allowed to write any data to a smart card. This mode should not be used under normalcircumstances because it does not allow the V-Station to function normally with respect toenrollment, key management, etc. It is intended only for use with a pre-enrolled population ofusers who are only accessing the V-Station for verification. Although the likelihood of corrup-tion is extremely low, this mode ensures that smart cards cannot become corrupted by pre-senting of the card at the edge of the reader’s detection field.

The verification process differs between Template mode and User Re-cord mode when a smart card is presented that contains both a pri-mary and a secondary template.

In Template mode, a smart card verification is performed at the primarytemplate's security level, then at the secondary template's securitylevel.

In User Record mode, a smart card verification is performed at thelesser of the two template's security levels.

NOTICENOTICE





87


9.8. A UT O -U PDATING S IT E K EY S

The Auto-Update Site Keys check box enables or disables automatic site key updating ofsmart cards. If a site key is compromised, or if your installation's security requirements de-mand the site key to be changed regularly, an administrator can designate a new site key towhich all smart cards will be updated. The V-Station reader has two site keys: a primary and asecondary.

• The primary site key matches all smart cards that are allowed to use the reader.

• The secondary site key is only assigned when the primary site key needs to be updated(set to "-1" when the Auto-Update Site Keys check box is deselected).

• If the primary site key needs to be changed, the administrator assigns the "new" site key(not "-1") as the secondary site key on the V-Station reader.

• The next time a card is presented, the reader performs the extra step of updating thesmart card with the new site key.

• In time, an entire population of smart cards are migrated to the new site key.

• By setting the secondary site key to "-1", or by deselecting the Auto-Update Site Keys check box, this function is disabled, smart cards with the old site key are rejected, andwhat was the secondary site key now becomes the primary site key.

If the Auto-Update Site Keys check box is deselected, the site key

written to the secondary site key field is automatically changed to "-1".Selecting the Auto-Update Site Keys check box does not cause thesecondary site key field to be restored – the administrator must re-enter the secondary site key.

The Auto-Update Site Keys feature is enabled for a specific period oftime as defined by the security protocols of the installation. There is noautomatic timeout for this feature – the administrator must turn it offmanually. After the administrator has disabled this feature, smart cardsthat have not been presented for verification during this update win-dow (and so continue to bear the old site key) will be rejected. Thesecard holders will have to present themselves to the administrator to beassigned a new smart card.

NOTICENOTICE

When this option is checked, it has a side effect of setting the secon-dary site key to a value of "-1". You must re-enter the secondary sitekey when setting the unit back to read/write mode if you want to usethe auto-update feature.

NOTICENOTICE





88


9.9. S MART C AR D S ECURITY S ETTINGS

Clicking the Smart Card Security Settings button opens the Smart Card Security Settingsdialog box (see Figure 56).

Figure 56 - Smart Card Security Settings

The Smart Card Security Settings dialog box contains controls that adjust how often the sitekey verification is performed. The default is Enter Everytime (VeriAdmin resets to this defaultsetting every time the application is started). To change, select an option and click the SaveSettings button. A site key verification is performed before the change is accepted.

The two Use Software HASH check boxes enable or disable the use of a one-wayhashing function on the site key prior to sending it to the V-Station. This is an extrasecurity step that converts a simple text password to a 120-bit encrypted stringevery time it is transmitted to the V-Station. Clicking the Change Site Key buttonalways performs a site key verification before changing the current primary and sec-ondary keys, regardless of the time-out settings.

9.9.1. S OFTWARE H ASH

The Use Site Key Encryption check box is used in conjunction with the drop-downlist (for MIFARE-based V-Stations) to manage site keys on the smart card itself.Three settings are available for MIFARE-based V-Stations. The default setting usessite key encryption. The other two (or one) available options do not use site key en-cryption, and are provided for compatibility with other applications that want to readand/or write data to the smart card. The check box must be deselected to enablethese options. For MIFARE V-Stations, Key A and Key B do not correspond to pri-mary and secondary site keys; please read the manufacturer’s documentation formore information.

9.9.2. U SING S ITE KEY E NCRYPTION

Only advanced users should change this setting.

When configuring a V-Station MIFARE and performing enrollments di-rectly from the V-Station keypad, the chosen site key must be numeric ,as the keypad can only enter numbers.

The software hash function must be turned off , as the site key enteredvia the keypad is not hashed.

NOTICENOTICE





89


9.10. S MART C AR D S IT E K EY M ANAGEMENT

The administrator must understand the site keys used by Bioscrypt smart-card based prod-ucts and handle them appropriately. Site keys are the mechanism used by the Bioscrypt smartcard reader and the smart cards to ensure that only authorized smart cards are used.

A site key is a "code" used by VeriAdmin, the reader, and the smart cards. Each ofthese three must use the same "code" to communicate and transfer information. Ifthe site key stored in the V-Station does not match the site key used by the smartcard, then that V-Station will not be able to read or write to that smart card. Bychecking the site key each time, the V-Station ensures that only authorized smartcards are used at a specific installation. Similar to a computer's logon password, if asmart card’s site key does not match the V-Station’s site key, the card is not al-lowed to be used by that reader. The V-Station uses a maximum of 120-bits (15characters) for the site key. Up to 32 characters may be used for site keys if soft-ware hashing is used. Typically, the administrator sets all V-Stations at a single in-stallation to the same site key.

9.10.1. S ITE KEYS

Each installation must have its own site key to distinguish its V-Station smart cardsfrom other V-Station installations. If site keys are not used, then any V-Station wouldaccept smart cards created by any other V-Station and a site’s installation could becompromised easily. Using a unique site key at each installation ensures that a siteaccepts only smart cards created at that site. It also ensures that data on the smartcards created at one site cannot be read without the chosen site key.

9.10.2. W HY S ITE KEYS ARE U SED

All V-Stations are shipped from Bioscrypt with the site key set to an empty string(120 bits, or 15 characters, of all zeros). This allows administrators to use the V-Station in a non-secure mode until they are ready to set their personal site key andsecure the system. When using the default site key in non-secure mode and VeriAd-min performs a site key validation, do not simply enter any key and click the OK button. After the V-Station verifies it is using the default site key and the smart cardis also using the default site key, the operation is performed.

9.10.3. T HE "D EFAULT " S ITE KEY

The site key is stored within the internal memory of the V-Station and is encryptedand stored on the smart card itself. The site key is not stored within VeriAdmin, it isnot stored on the PC, and it cannot be retrieved from the V-Station.

9.10.4. S ITE KEY S TORAGE

It is the responsibility of the Administrator to remember the site key

and to take measures to prevent it from being forgotten, as it cannotbe found or reclaimed from anywhere within the system.NOTICENOTICE

The V-Station can store two site keys. The primary site key is used in normal opera-tions and is the site key the administrator uses when performing a site key verifica-tion operation within VeriAdmin. The secondary site key is used only to update oldercards when a new primary site key has been set.

9.10.5. P RIMARY AND S ECONDARY S ITE KEYS





90


Prior to creating secure user smart cards, your installation’s initial site key must beset. Once you become familiar with V-Station operations and are comfortable enroll-ing users, you can then choose your own site key.

9.10.6. I NITIAL S ITE KEYS

1. Enter the new site key in the New PRIMARY field (see Figure 57).

2. Enter "-1" in the New Secondary field to turn off the auto-site key updatefeature.

3. Confirm the primary and secondary keys by typing them again in the second setof fields on the right.

4. Click the Change Site Key button. A Warning dialog box is displayed (seeFigure 58).

Figure 57 - Smart Card Security Settings - Site Keys

Figure 58 - VeriAdmin Warning on Site Key Change





91


5. Read the information carefully and click YES if you accept.

6. Enter the current primary site key (this will be the default site key if this is thefirst time you are changing the site key).

7. If the current site key entered is correct, a dialog box indicates that the changeswere made. All newly created smart cards from this specific V-Station will usethe NEW PRIMARY site key and all older smart cards that use the defined NEW SECONDARY site key will be updated to the NEW PRIMARY site key the nexttime they are used by the V-Station.

The same primary site key must be set on all V-Stations in your installation forthe smart cards to work at each V-Station.

DO NOT leave the NEW SECONDARY box blank unless you reallywant to update all default site key smart cards to the NEW PRIMARY site key. This could compromise security since any smart card createdby any V-Station using the default site key would automatically be up-

dated to the NEW PRIMARY site key.If you have already created a user base of smart cards with the previ-ous site key and want to update those cards to the NEW PRIMARYsite key, enter the previous site key as the NEW SECONDARY .

NOTICENOTICE

The V-Station attempts to set the site key on the smart card during the enrollmentprocess. The V-Station checks the key currently used by the smart card. If the

V-Station primary site key matches the key on the smart card, the template iswritten. If the V-Station primary site key does not match the key on the smart card,the V-Station checks if its secondary site key matches the key on the smart card. Ifthe secondary site key matches, the key on the smart card is updated to the V-Station’s primary site key and the template is written (this adds about half a secondto the process).

If both primary and secondary site keys fail, the V-Station compares the smart cardkey with the standard default (MIFARE) smart card key. If they match, the key on thesmart card is updated to the V-Station’s primary site key and the template is written.

If all of the above checks fail, the V-Station does not read or write to the smart card.

9.10.7. S ITE KEYS ON INDIVIDUAL S MART C ARDS





92


Consider this scenario: During an installation, the site key was set to "####" and thesecondary site key was set to "-1", because there were no previous site keys to up-date. The site key on the smart cards would be "####".

To change the site key on a previously created smart card (using the above scenarioas an example):

1. In the Smart Card Security Settings window, enter "New####" as the New PRI-MARY and enter "####" as the New Secondary and confirm the keys by enter-ing them again in the Confirm key here fields.

9.10.8. C HANGING THE S ITE KEY OF P REVIOUSLY C REATED S MART C ARDS

Figure 59 - Changing the Site Key

2. Click the Change Site Key button. A warning to always remember the site keyis displayed.

3. Click the Accept button. You are prompted for the current primary site key.Enter "####", since that is the currently stored site key on the V-Station.

4. A dialog box indicating the site key was changed is displayed. This processneeds to be repeated on all installed V-Stations.

5. Ensure that the Auto Update Site Keys check box is selected.

6. All previously created smart cards still contain the previous key of "####". Whena smart card is presented to the V-Station, it follows these steps:

• The smart card is presented.• The V-Station reads the data from the card and checks the current key.• The key on the card is "####" and the V-Station primary key is now "New

####", so the card fails.• The V-Station checks the secondary site key for a match with the smart

card. If they match, the key on the smart card is changed (updated) to the V-Station’s primary site key.

• If neither the primary nor the secondary site key matches, the card fails.





93


7. When the entire user base of cards has been updated, perform the process ofchanging the site key again.

• This time keep the primary site key the same, but enter a "-1" for thesecondary site key.

• This disables the "Auto Update" feature and any remaining smart cards

with "####" on them will no longer work.• This can also simply be done by deselecting the Auto-Update Site Keys

check box.

Do not forget site keys. If the primary site key is forgotten, all previously createdsmart cards will continue to work, but the following will happen:

• They can no longer create new smart cards• They will not be able to read templates from current smart cards• They will not be able to change the site key on V-Stations• The V-Stations will have to be returned to Bioscrypt for reprogramming and

once reprogrammed, any previously enrolled smart cards will no longer beusable.

9.10.9. F ORGOTTEN S ITE KEYS

Site keys need to be protected just like computer passwords and should not be di-vulged to unauthorized personnel. In the event that a site key is compromised,change the site key and automatically update all smart cards in the user base.

9.10.10. C OMPROMISED S ITE KEYS

VeriAdmin allows administrators to add additional security by performing a one-wayHash function on entered site keys. This is different from the ESI Site Key Encryp-tion option. This function takes the user-entered password and creates an en-crypted 120-bit site key from that password. This encrypted version is then used asthe site key for the V-Station and smart cards in place of the user-defined pass-word. In extreme cases, this can make it more difficult for criminals to "sniff" internalnetworks and capture passwords during serial communications.

To the administrator, this all happens behind the scenes and you never have to re-member anything other then the simple password. You just have to make sure thatif you set a new site key with the Hash check box selected, then afterwards youneed to also select Hash the Current Site Key so that each time the Site Key Verifi-cation process happens, a hashed current site key is compared to the storedhashed primary site key.

The Hash function check box is ignored if the site key text box is not selected (fornon-secure V-Station default key use), or if "-1" is entered in the Secondary SiteKey text box (for turning the Auto Update feature off).

9.10.11. O NE -W AY H ASHING F UNCTION FOR S ITE KEYS

Do not use this option if you intend to share smart card data with otherapplications.

Each time the site key is entered, the check box determines whether tohash the current key.

NOTICENOTICE





94


Bioscrypt recommends that only advanced users attempt to configurethe smart card layout. Improper changes made to the layout may ren-der the reader unusable with some smart cards.

This section should be read completely before attempting to changethe default layout provided by Bioscrypt (as shown in the left-mostpanel).

NOTICENOTICE

9.12. C ONFIGURE C AR D L AYOUT

Click the Configure Card Layout button to open the Smart Card Layout Manager dialog box.

The Smart Card Layout Manager dialog box (see Figure 60) allows you to define acustom layout for all MIFARE-compatible smart cards.

In the Active Kilobyte Selection drop-down list, you can select which kilobyte (1st,2nd, 3rd or 4th) of the card is to be used for template storage (the default setting isthe first kilobyte). The layout for each kilobyte is configurable from the Smart CardManager dialog box.

The design of the Smart Card Layout Manager dialog box changes, depending onwhich active kilobyte is selected in the Active Kilobyte Selection drop-down list.The design for the 1st and 2nd kilobyte is similar to standard layout dialog box,shown in Figure 60 on the next page. If the 3rd or 4th kilobyte is selected as active,the Smart Card Layout Manager dialog box resembles Figure 61, also on the nextpage.

The Smart Card Layout used by the V-Station consists of the following components: A layout block (brown), an Admin block (red), a Primary template (blue), a Secondarytemplate (purple, optional), and User Data (green, optional). The Smart Card LayoutManager does not allow a user to configure a layout that is missing the Admin block,the Layout Block, or a Primary template. These are the minimum layout componentsrequired to enable normal operation.

9.12.1. MIFARE-B ASED V-S TATION LAYOUT M ANAGER

9.11. C AR D T YP E

The Card Type combo box allows you to select either 1K Smart Cards or 4K Smart Cards .4K MIFARE smart cards provide more storage space on the card and allow data from othertechnologies to be stored on the card in addition to two Bioscrypt templates. 1K MIFAREsmart cards do not have enough room to store any data other than the Bioscrypt templates;the 4K MIFARE smart cards provide more flexibility.

All MV1610 MIFARE products (V-Smart and V-Stations) will continue to support 1K cards.Readers running v9.60 firmware will have the ability to determine if a 1K or 4K card is pre-sented to the reader.





95


Figure 60 - Smart Card Layout Manager (MIFARE) - 1st and 2nd Kilobyte

Figure 61 - Smart Card Layout Manager (MIFARE) - 3rd and 4th Kilobyte





96


9.12.1.1. MIFARE M EMORY S TRUCTURE

The memory structure for MIFARE-compatible smart cards differs betweenthe 1K and 4K card types. The similarities and differences are outlinedbelow.

For the 1K MIFARE card, the memory structure consists of 16 sectors(numbered 0 through 15) of four blocks each (numbered 0 through 3). Eachblock contains 16 bytes. The first block, at Sector 0, Block 0, containsmanufacturer information and is not available. The last block of each sectorcontains site key and access information, which secures that sector andmakes it unavailable for application data. Unavailable blocks are shown in

VeriAdmin in black. Layout components cannot be placed on unavailableblocks. This leaves 47 available blocks of 16 bytes each, for a total of 752available bytes. The default Bioscrypt layout contains space for two tem-plates and Wiegand information (stored in the green User Block) and usesall available space. If space for non-Bioscrypt data is desired, include onlythe Primary template (Template (1) or do not include a User Block.

For the 4K MIFARE card, the memory structure also differs between the1st/2nd kilobyte versus the 3rd/4th kilobyte. The 1st and 2nd kilobyte of the4K MIFARE card follows the memory structure of the 1K card as describedabove, however, the memory structure of the 3rd and 4th kilobyte is differ-ent and consists of 4 sectors (numbered 0 through 3) of 16 blocks each(numbered 0 through 15). Refer to Figures 60 and 61 for visual reference.Each block contains 16 bytes. The first block at Sector 0, Block 0 of the 1stkilobyte contains manufacturer information and is not available. In addition,the last block of each sector for every kilobyte of the 4K MIFARE card con-tains Site key and access information, which secures that sector and is thusunavailable for application data. Unavailable blocks are shown in VeriAdminin black and grey, they do not allow layout components to be placed there.This leaves 47 available blocks of 16 bytes each, for a total of 752 availablebytes per kilobyte of the 4K MIFARE card. The default Bioscrypt layout foreach kilobyte (1st, 2nd, 3rd, or 4th) contains space for two templates andWiegand information (stored in the green User Block) and will use all avail-able space. Please note that templates can only be written to a single activekilobyte of the 4K MIFARE card (i.e., templates can only be stored contigu-ously in either the 1st, 2nd, 3rd or 4th kilobyte). If space for non-Bioscryptdata is desired, include only the Primary template (Template (1) or do notinclude a User Block.

9.12.1.2. MIFARE N EW L AYOUT

Place components on the layout on the right (under the “New Layout” sec-tion) by clicking one of the buttons under the “Set Starting Block” section.Flashing text instructs you to select one of the white, unused blocks above.Since the one-to-one templates used by the V-Station are 348 bytes, theyrequire 22 blocks of space (348 bytes / 16 bytes-per-block = 22 blocks). Allother layout components require a single block of space. When placing atemplate on the layout, note that the blocks wrap around whatever blocksare in the way, consuming blocks from top to bottom. Templates do not wrap around from bottom to top, and if there is insufficient space for a tem-plate, a warning is displayed and you will not be able to place the template.If you want to move a layout component or take if off of the layout, youmust remove it by first clicking the Remove Item button and then selectingthe item that is to be removed.







98


Although you can write both Bioscrypt data and non-Bioscrypt data to asmart card, each sector has its own site key, which unlocks data in thatsector. Data may only be read from or written to a particular block if theproper site key for that sector is provided. The ESI will use the same SiteKey for all sectors being used by the V-Station, including sectors where

only one or two blocks are actually being used. It is recommended thatany non-Bioscrypt data be placed on different sectors so that differentkeys may be used for that data.

If a third-party application is used to read or write any of the V-Stationdata or the same site key is to be used for the entire card, the ESI SiteKey Encryption must use one of the un-hashed modes for compatibility.Please refer to the documentation from the smart card manufacturer formore information.

9.12.1.6. MIFARE S ERIAL N UMBER

The serial number that is stored on the card is 32 bits in length, therefore,to use this as an ID, it is recommended that a Wiegand format be chosenthat allows 32 bits of ID data. This can be selected under the Wiegand tabin the Unit Parameters dialog box. The uploadable Generic 34-bit formatis a format that contains 32 ID bits. This format contains an odd parity bitand an even parity bit, both of which are calculated in the same manneras the standard 26 bit format. Alternatively, a custom Wiegand format canbe created by selecting the Pass-thru radio button and selecting Custom from the drop-down list. These numbers can be used for custom formats:

• Total bits: 32• ID Start bit: 0• No. of ID bits: 32.

When the user is at the enrollment window in Quick or Advanced mode,the Extended ID field is grayed out.

Selecting a Wiegand format that contains less than 32 ID bits, such asthe Standard 26-bit format, results in a truncated Wiegand ID. If theStandard 26-bit format is selected, upon clicking the Smart Card SN button, a warning message is displayed that suggests selecting a Wie-gand format that contains 32 ID bits (refer to Figure 62).

NOTICENOTICE

Figure 62 - Warning Message for Less than 32-bit ID

In this case, when the template is saved to the smart card, it remainsas a 32-bit number. However, when it is sent out as a Wiegand string,it is truncated to the least significant 16 bits, because the 26-bit formatonly allocates 16 bits to ID data.





99

USING THE V-S TATION M ANAGER

10. U SING THE V-S TATION M ANAGER The distinguishing feature of the V-Station reader is its built-in LCD and keypad, which allows foradministration and template enrollment right at the reader. A PC running VeriAdmin is not strictlyrequired, but VeriAdmin has been designed to make the process of configuring readers as easy aspossible. Everything that is possible from the keypad is possible through VeriAdmin, but the re-verse is not necessarily true. Most common features, such as setting the date and time, enrollingand deleting templates, and configuring Wiegand settings can be done from the keypad. However,some functions, such as the Transaction Log are better suited for administration via the PC due tothe limited LCD and numeric keypad. For all V-Station-specific administration, use the V-StationManager.

The V-Station Manager screen (see Figure 63 below) is used to configure V-Station specific op-tions. This screen is not available while talking with non-V-Station readers. Use this screen to con-figure the V-Station’s date, time, display options, Ethernet options, scheduling, and menu options.

Additionally, the V-Station Transaction Log can be viewed and downloaded. This screen is dividedinto tabs for ease of use.

Figure 63 - V-Station Manager

10.1. C LOCK

The Clock tab (see Figure 63 above) allows the user to adjust the V-Station date, time, andformatting settings. Displayed on the left is the PC’s date and time, which updates in real-time(this can be turned off by deselecting the Real-Time Update check box). On the right is the V-Station date and time. By default, the time does not update in real-time unless the check boxfor that is checked. The time displayed is the time when the V-Station Manager was firstopened. To update the display to show the current time, click the Refresh button. You canuse the calendar control to update the V-Station’s date by clicking on a day, scrolling themonth (the left and right arrows), or by clicking the month or year at the top of the calendar.To set the time, click on the Time field and enter a new hour, minute, or second, or use the Up and Down arrows.





100


Turning on the real-time update removes your changes. The easiest way to synchronize the V-Station’s time with the PC is to click the Synchronize arrow in the middle of the dialog box.To apply the changes immediately, click the Apply button at the bottom of the dialog box.Other formatting and time options can be set in this screen, including 24-hour time, daylightsaving observance, and the display format for the date and time. V-Stations ship defaulted to

12-hour time, no daylight savings observance, and the date/time format set to MM/DD/YYYYHH:MM:SS. These settings affect the date and time shown on the V-Station LCD.

This section describes the process for using the configurable Daylight Saving Time(DST) feature supported in V-Station firmware versions 9.40 (7.xx and 8.xx readersuse US/Canada rules).

10.1.1. D AYLIGHT S AVING T IME

10.1.1.1. H OW TH E D AYLIGHT S AVING T IM E F EATURE W ORKS

The Daylight Saving Time feature, available via the V-Station ManagerGUI, automatically updates the time on a specified day. When the StartDate and an End Date are set, the time updates all DST-configured read-ers that are online at the time of the change automatically. At the StartDate, the time shifts one hour ahead and at the End Date the time shiftsone hour back. For countries using Universal Time, the UT box should beselected to allow the time to change at the proper moment.

• Configurable DST is supported in V-Station firmware versions 9.40onwards only.

• The DST functionality on 7.xx and 8.xx readers has not beenchanged from its current US/Canada rules. For these readers, theadded configuration feature is visible but grayed out.

• The DST feature is applied on a reader-by-reader basis, not to theentire network at once.

• This feature is available for all countries that use one-hour timeshifts. This feature does not support shifts in excess of one hour.

• This feature supports changing the time on a pre-defined variableday (i.e., first Sunday of April). This feature does not currently sup-port fixed-date changes (i.e., April 2nd). For these countries, thefixed date must be entered manually to the correct day each year.

• V-Station firmware does not know if DST is in force or not. There-fore, the time change occurs only if the V-Station is powered at thetime the change happens. If it is not, it must be reset to the correcttime with VeriAdmin.

• Universal Time (UT) is used throughout Europe to ensure that allzones change at the exact same moment. UT does not work incountries where the time difference is GMT-3 or more.

NOTICENOTICE





101


10.1.1.2. U SING TH E D AYLIGHT S AVING T IM E F EATURE

The DST function is controlled from the V-Station Manager screen (seeFigure 64 below).

To set the DST feature:

1. From VeriAdmin, click on the V-Station Manager.

2. Click the Clock tab.

3. To enable DST, select the Observe Daylight Saving check box.

4. Set a Start Date and an End Date . At the Start Date , the time shiftsone hour ahead. At the End Date , the time shifts one hour back.

5. Select either Local time or Universal Time ( UT ).

6. If you chose Local time, enter a local time at which the change shouldoccur. If you chose UT, select the Time Zone that you are currently infrom the drop-down list.

7. Enter the Time at which DST is to take effect. This applies to bothStart and End Dates .

Figure 64 - V-Station Manager - Clock Tab





102


Figure 65 - V-Station Manager - Ethernet Tab

10.2. E THERNET

The Ethernet tab (see Figure 65) allows the user to adjust the V-Station’s Ethernet settings,including the IP Address , TCP Port , Subnet Mask , and DHCP settings.

The MAC address that was assigned to the V-Station is also displayed in this tab. This unique6-byte sequence is assigned at the factory and is not changeable.

VeriAdmin allows an administrator to change the V-Station’s assigned IP Address . Although VeriAdmin does not allow invalid IP addresses, administrators should be careful not to assignthe V-Station’s IP address to one that has already been assigned.

The Default Gateway feature allows administrators or connect to the V-Station outside of theLAN environment. IP detection for the Default Gateway address feature happens automati-cally when the V-Station is turned on. As in all network systems, enabling Default Gateway functionality causes the V-Station reader to be susceptible to high-volume traffic errors.

The Subnet Mask feature allows an administrator to partition the visible network to the V-Station by limiting the range of logical addresses within an address space.

The default setting for IP Address , Default Gateway , and Subnet Mask is "0.0.0.0". Beaware that the default address "0.0.0.0" and the "255.255.255.255" address are not valid andcannot be used. Any address between "0.0.0.0" and the "255.255.255.255" is usable, how-ever.





103


10.3. B IOMETRIC S CHEDULES

The Biometric Schedules tab (see Figure 66) allows you to configure scheduling for biometricverification (i.e., when a finger is required). Schedules can be set on any 15-minute interval.For example, a certain site may only require a high level of security at night; the administratormight only want biometric verification between the hours of 6 p.m. to 6 a.m.

Schedules can be configured differently for each day of the week. Each V-Station, by default,has biometric verification turned on. The red bars represent times when biometrics are not required. To edit the schedule for a particular day of the week, click the Edit button directlybelow that day’s schedule. To reset the entire week’s schedule (remove all Off periods), clickthe Reset Biometric Schedules button. The current day is shown in blue (in Figure 65,"Friday" is the current day).

Figure 66 - V-Station Manager - Biometric Schedules Tab

To edit biometric scheduling for a particular day:

1. Click the Edit button directly below that day’s schedule. The Biometric Scheduling dialogbox (see Figure 67 on next page) is displayed. This dialog box allows an administrator todefine one or two time intervals when biometric verification is not required for that particu-lar day of the week.





104


Figure 67 - Biometric Scheduling Dialog Box

2. Click the right side of the dialog and drag the mouse up or down to add intervals.

3. Move the interval by clicking anywhere on the red bar and dragging the entire interval up

or down.4. Set the start or stop time for an interval by positioning the mouse at the top or bottom

edge of the interval and dragging it up or down.

5. To delete an interval, select it by clicking on it and then press the DELETE key. All inter-vals can be removed by clicking the Clear Intervals button at the bottom.

6. If a schedule is to be repeated throughout the entire week or just during the weekdays, itcan be applied automatically to other days of the week by selecting the appropriate optionunder the Apply Schedule box.

7. After the schedule has been set up, click the OK button to return to the Biometric Sched-ules tab.

To finalize a schedule, you must click the Apply button in the BiometricSchedules dialog box. Resetting a schedule, however, does not requireclicking the Apply button.NOTICENOTICE





105


Figure 68 - V-Station Manager - Menus Tab

10.4. M ENUS

The V-Station has the ability to change its menu prompts (the text that is displayed on theLCD). The text it displays can be in another language or it can be simply a modified menu.Menus can be uploaded to the reader via files with a .PMT file extension. The CD containingthis document may include such files. Currently, Bioscrypt does not recommend editing thesefiles.

To upload new menu prompts to the V-Station, click the Upload New Menu button, select aprompt file, and confirm that you want to upload it. Uploading and configuration of the newmenu might take 30 seconds or more. A confirmation is displayed upon completion of a suc-cessful upload.

The V-Station supports one built-in menu and one custom menu. When a menu is uploaded tothe reader, it fills the custom menu slot, overwriting whatever was there before. You can thenselect a menu from the Current Menu Name drop-down list.

As shipped from the factory, the V-Station built-in menu systems are inEnglish. Other menu languages, such as Spanish, are available. Cur-rently, VeriAdmin is English-only.NOTICENOTICE





106


Menu prompt files are version dependent because the menus can change from one version tothe next. Therefore, when upgrading the reader’s firmware it is important to also upload thecorresponding menu file, if you are not using the built-in English menus. Otherwise, some ofthe new menus may not display on the V-Station LCD correctly.

The LCD contrast can be set from this tab. As you move the Contrast slider left or right andrelease the mouse, the contrast of the LCD of the current V-Station reader changes. Click theReset button to set the reader back to the factory default contrast level. Click the Apply but-ton to apply the LCD contrast changes.

The Custom Verification Entry Mode , when enabled, causes the V-Station to ask the user fora custom entry code when verifying. This code must be between 0 and 254 (255 indicates auser timeout) and it is logged in the transaction log. The number has no significance to the V-Station, but it is user-defined.

The logo that is displayed on the reader LCD in the Idle/Wait state can be custom-

ized. A custom logo can be created and uploaded to the reader. Please contact Bio-scrypt Technical Support if a custom logo is desired.

To set a custom LCD logo:

1. Select the Custom Logo radio button.

2. Click the Browse button. An Open File dialog box is displayed.

3. Navigate to and select the ".byt" logo file (obtainable from Bioscrypt).

4. Click Open .

5. Click Upload to upload the new logo.


10.4.1. C USTOM LCD L OGOS





107


Figure 69 - V-Station Manager - Access Schedules Tab

10.5. A CCESS S CHEDULES

V-Stations with firmware v7.30 or later support individual user access schedules. Up to 64unique weekly schedules can be set (except for schedules 0 and 59 – 63, which are reserved).When enrolling a new user, the template can be assigned one of these schedules, either via

VeriAdmin or from the V-Station menu (see Figure 69).

All V-Stations have two built-in schedules that cannot be changed: Schedule 0 (the "No Ac-cess" schedule) and Schedule 63 (the "All Access" schedule). By default, new templates areassigned Schedule 0. However, the template will not have its access restricted until User Ac-cess Scheduling is enabled for the whole reader, via the radio button in this dialog. Readersshipped from the factory have access scheduling disabled.

To begin using access schedules, select the Enabled radio button and click Apply . The

reader will now consider the assigned schedule of templates when users are verified. The V-Station can also use a Schedule Tolerance time, which allows for a few minutes grace periodfor the beginning and end times of an access period. This value must be between 1 and 14minutes and it applies to all access schedules. For example, a five-minute schedule tolerancefor an 8 a.m. to 6 p.m. schedule would allow users with this schedule to enter beginning at7:55 a.m. and continue to have access up until 6:05 p.m. The schedule tolerance does notapply to holiday schedules.

To design a specific weekly user access schedule, click the Add button. The Allowed AccessTimes area, shown on the right side of the tab, does not initially indicate any access periods.Click on one of the Edit buttons below a particular day of the week to assign an access periodfor that day. A larger time interval selector is displayed (as shown before with the Biometric

Access Schedules), allowing the user to specify one or two intervals for that day, aligned on

fifteen-minute intervals. This schedule can be duplicated for the whole week or for Mondaythrough Friday if desired. Continue creating the weekly schedule in this fashion until the de-sired schedule is achieved. Click the Apply button to finalize the settings.

Schedules may also be removed from the V-Station schedule list, either one at a time by se-lecting a schedule and clicking the Remove button, or all at once or by clicking the RemoveALL Schedules button. You cannot remove the built-in Schedules 0 and 63. Entire schedulelists can also be saved to the PC, uploaded from the PC to the reader, or broadcast to otherreaders. To broadcast all current schedules on the V-Station to all other V-Stations on the





108


All three of these options operate on all schedules. It is not possible to broadcast, save, orload individual schedules. This would not be desirable from an operations perspective, be-cause in most cases, an installation's schedules should be synchronized between readers. Forexample, if a user (in actuality, his template) is assigned Schedule 4 (say 12 p.m. until 4 p.m.),the V-Station located at the main entrance should generally have the same set of schedulesas the back entrance so that the user can gain access at consistent times.

When broadcasting schedules over an RS-485 network, ensure that all

units on the network are set to the same baud rate. If the baud ratesettings differ from unit to unit, some units might not receive thebroadcasted schedules.

Holidays are a subset of Access Scheduling and work in conjunctionwith schedules.

To ensure that under a duress situation, the user is not restricted by aschedule, the option to Ignore Schedule for Duress Finger option canbe enabled. This option is of course not needed if User AccessSchedules are not enabled.

NOTICENOTICE

10.6. H OLIDAY S CHEDULES

Although displayed on a separate tab of the V-Station Manager (see Figure 70), holidayschedules are actually a component of access schedules. Where access schedules grant theuser access during specified times, holidays schedules define "exceptions" to these sched-ules where a user would be denied access. Holiday schedules are enabled only when AccessScheduling is enabled.

Figure 70 - V-Station Manager - Holiday Schedules Tab

network, click the Broadcast button and confirm the broadcast. This broadcasts the scheduleon all defined channels, both serial ports and Ethernet. To save all schedules to the PC, clickSave Schedules and supply the dialog box with a name. Alternatively, to upload a completeschedule list from the PC to the V-Station, click Upload Schedules .

A highlighted Access Schedule in the User Access Schedules areadoes not signify that that access schedule is the current active sched-ule. The highlighting signifies only that that schedule is the one beingcurrently edited .

NOTICENOTICE





109


Holiday schedules apply to all schedules. They cannot be applied tospecific schedules. A template may either observe holidays or not, butSchedule X and Schedule Y will both be affected by holidays.

Remember that holidays take precedence over access schedules.

Up to 50 user-defined holidays can be specified (less four reservedholidays). A holiday schedule consists of a specific year, month, andday (such as January 1, 2003 for New Years Day, 2003) and a time in-terval for that day.

By default, a holiday is assigned as the entire day (from midnight tomidnight), but alternate intervals can be defined.

NOTICENOTICE

To add a holiday:

1. Click the Add Holiday button.

2. Specify a particular day on the calendar control (dates must be after the year 2000 and

before 2038).3. Define a time interval by clicking on the Edit button.

4. Click Apply to save the schedule to the reader.

To remove a holiday from the list, select the holiday to be removed and click the RemoveHoliday button. Click the Remove Expired holidays button to remove automatically any holi-days that have already occurred. To remove all holidays in the list, click Remove All and con-firm your intentions. After any of these actions, you must click the OK or Apply buttons tofinalize the settings.

As with the Access Schedules tab, you can Broadcast all holiday schedules to all other V-Stations on the network, Save all holidays to the PC, and Upload all holidays from the PC to

the V-Station by clicking on the respective buttons. Again, holiday schedules cannot bebroadcast, saved, or uploaded one at a time and it is recommended that all readers on a net-work be synchronized to the same sets of access schedules and holiday schedules.

10.7. T RANSACTION L OG

The Transaction Log is a feature found only on V-Station products, due to the internal RealTime Clock. This allows the V-Station to track all actions and events that occur on the reader,time-stamping each action and recording the following information:

• Template ID, Index, and Name - (if the event involves a template)• Action – The event being logged• Cmd Status – Result of the associated command (Success or Failure)• Data – Data associated with the command (for enrolls, data1=quality, data2=content; for

verifies, data1=pass/fail, data2=score, data3=quality)• Port – Which port was used for the command• Code – the CVE Code value entered by the user, if this mode is enabled• Read – Whether this transaction has been read before.

The transaction log (see Figure 71 on next page) is accessed by clicking the Transaction Log button at the lower-left corner of the V-Station Manager.







111


• Mark as Read – Each entry read will be marked as such (read entries show up with a "*"under the Read column)

• 24 Hour Time – All entries in the log are time-stamped in 24 hour time but can optionallybe shown in 12 hour time.

Other Transaction Log options include the ability to Erase All entries, Erase Read entries, andSave the data shown in the window to a file. The format for this file is comma delimited (.CSV),and it can be imported into nearly all spreadsheet and database applications. If you have spe-cific entries highlighted, you can optionally save only those entries to the file. The data savedto the file is exactly what you see in the screen, except that the column names are not abbre-viated.

In the bottom right of the Transaction Log dialog box, the total number of transactions readout of the total number on the reader is displayed.

When retrieving transaction logs via the Ethernet port, the reader mighthave difficulty with more than 1,000 entries at a time. This can beavoided by retrieving in groups of smaller quantities.NOTICENOTICE





112

BROADCAST P ARAMETERS

11. B ROADCAST P ARAMETERS

The Broadcast Parameters dialog box allows you to modify settings on all readers in a networkedenvironment at the same time. Under most circumstances, this window is used when communi-cating over the Host Port (recall that the Aux port is used primarily for communicating with a singlereader). Note that the window has similar parameters to the Unit Parameters dialog box.

Bioscrypt recommends always changing one setting at a time and clicking the Broadcast buttonafter each change.

Broadcasting is a convenient feature, but it has some inherent issues that the user should beaware of. Bioscrypt recommends that only advanced users attempt to use the Broadcast feature.

No Replies: When in Broadcast mode, no replies are sent out from the receiving unit. Because allunits receive a broadcast command at the same time, all units would normally reply at the sametime. On an RS-485 network, if more then one unit is communicating at the same time, the com-munications electrically collide and cannot be understood. This is an inherent shortcoming of theRS-485 protocol. This network collision also happens if two or more units are assigned the sameNetwork ID; they both respond at the same time, causing the same problem. When in Broadcastmode, Bioscrypt readers are instructed not to reply.

No Error Checking: The Bioscrypt communication protocol has various error checking methodsbuilt into the interface. This error checking requires two-way communication between the PC andthe Bioscrypt reader to ensure that command packets where received and all data was contained.Because no replies are possible, the error checking is disabled in Broadcast mode. This can be-come an issue when using a network of Bioscrypt readers, because the reader cannot process acommunication packet during verification. Although this time is very short, if a command is re-ceived during portions of a verification action, the unit normally responds with a BUSY error code.However, if it is in Broadcast mode, no response can be given and VeriAdmin will not know thatthe command was ignored by that particular unit (even though it would have been accepted by allother units). Manual verification is often required to ensure all units successfully received a Broad-

cast command.

Figure 72 - Broadcast Parameters Toolbar Icon

To open the Broadcast Parameters dialog box:

1. Select the broadcast mode for the current reader in the Transmit ID/Current Reader drop-down list ("-1 Broadcast COMM 3" is selected in the Figure 72). Note the broadcast symbol.

2. Click the Broadcast icon in the toolbar. The Broadcast Parameters dialog box is displayed(see Figure 73 on next page).





113

The Host port and Aux port baud rates can be broadcast to all readers in a network.

11.1. B ROADCASTING H OST P ORT AN D A UX P OR T B AU D R ATES


Figure 73 - Broadcast Parameters Dialog Box

To set and broadcast a Host port baud rate:

1. Select a baud rate from the Host Port Baud Rate drop-down list (see Figure 74).

2. Click the Broadcast button.

To set and broadcast an Aux port baud rate:

1. Select a baud rate from the Aux Port Baud Rate drop-down list.


Figure 74 - Host Port Baud Rate and Aux Port Baud Rate Drop-down Lists





114

A template can be deleted from multiple readers simultaneously via a broadcast command.

11.2. D ELETING A T EMPLATE I D VI A B ROADCAST


To delete a template from networked readers via a broadcast:

1. Enter the template's ID number (see Figure 75).2. Enter the template's Index .3. If there is more than one index for the ID, select the Delete all Indices for this ID check

box.


Figure 75 - Delete a Template ID Area

This feature is used to broadcast a Global Security Threshold level to all units in the network.

11.3. B ROADCASTING TH E G LOBAL S ECURITY T HRESHOLD

Figure 76 - Global Security Threshold Area

To broadcast a Global Security Threshold:1. Select the radio button corresponding to the global security level you want to use. The

default level is "Medium" (see Figure 76).






115

This feature is used to broadcast a Wiegand string to all readers in a network.

11.4. B ROADCASTING A W IEGAND F ORMAT


To broadcast a Wiegand string to all readers in the network:

1. Select either the Pre-Defined or Pass-Thru radio buttons.

2. Select a Wiegand string format in the active FORMAT drop-down list.3. If you selected the Pass-Thru radio button in Step 1, skip to Step 7. If you selected the

Pre-Defined radio button in Step 1, proceed to Step 4.

4. Select the Fail ID Code check box (optional) and enter a value in the text box.

5. Select the Alt Site ID Code check box (optional) and enter a value in the text box.6. Select the On Fail Send Inverse Parity check box (optional) and enter a value in the text

box. Skip to Step 8.

7. Enter values in the Total Bits , ID Start Bit , and Num ID Bits text fields.8. Select the Use Default check boxes for Pulse Width and Pulse Interval (or deselect them

and enter custom values in their text boxes).

9. Click the Broadcast ALL Wiegand Strings button.

Figure 77 - Wiegand Settings Area





116


Use this feature to broadcast a command to delete all templates on all readers in the network.

11.5. D ELETING AL L T EMPLATES VI A B ROADCAST

Figure 78 - Delete All Templates Area

To delete all templates on all readers in the network via a broadcast command:

1. Click the Broadcast button in the Delete All Templates area (see Figure 78). A confirma-tion dialog box is displayed (see Figure 79).

2. Click the Continue button. All templates on all readers in the network are deleted.

Figure 79 - Confirm Delete All Templates





117

ENROLLMENT

12. E NROLLMENT The V-Station can perform enrollments from the front panel or VeriAdmin. This section details spe-cifics on enrollments in general, using the quick enrollment as a guide.

Operating the V-Station Readers is very simple if a few basic guidelines are followed consis-tently. Use the following procedure to ensure trouble-free finger-scan recognitions.

Use the index, middle, or ring fingers as first preference (see Figure 80). Avoid usingthumb and pinky fingers since they are typically awkward to position on the sensorconsistently.

12.1.1. S UGGESTED F INGERS

Figure 80 - Suggested Fingers

One factor that contributes heavily to trouble-free finger-scan recognition is consis-tent finger placement.

To help promote consistent finger positioning, Bioscrypt designed the Ridge-Locksystem. This section shows how to use the Ridge-Lock system correctly.

Although the following sequence of pictures shows the V-Prox FX model and notthe V-Station model, the procedure is identical.

Recommended finger placement procedure (refer to Figures 81 through 87):

1. Wait for the amber LED to illuminate.

12.1.2. C ONSISTENT F INGER P LACEMENT

12.1. E NROLLMENT B ASICS

Bioscrypt recommends wiping the sensor surface with a dry soft clothbetween enrollments to avoid dirt build-up and to ensure the best pos-sible image quality. For readers that feature optical sensors, Bioscryptrecommends performing enrollments under normal indoor lighting con-ditions and not in the vicinity of strong light sources such as directsunshine or high-power lamps.

NOTICENOTICE





118

ENROLLMENT

Figure 81 - Amber LED

2. With the fingertip raised, rest the fingertip on the Ridge-Lock.

Figure 82 - Fingertip on Ridge-Lock

3. Slide the finger forwards across the Ridge-Lock, while keeping the fingertipraised so as to not touch the sensor.

Figure 83 - Slide Finger Across Ridge-Lock

4. Position the finger so that the Ridge-Lock sits in the indentation between thefirst and second segments (distal and middle phalanges).

Figure 84 - Position Joint on Ridge-Lock





119

ENROLLMENT

5. Lower the finger onto the sensor and apply moderate pressure, as if pressing acomputer key. Too much pressure might cause the fingerprint to smudge. If toolittle pressure is applied, the sensor might not recognize the presence of afinger.

Figure 85 - Apply Correct Pressure

6. Keep the finger on the sensor until the top LED turns green.

Figure 86 - Wait for Green LED

7. Lift the finger up and off the sensor.

Figure 87 - Lift Finger Up and Off

8. Have the user practice this procedure a few times before enrollment so thatthey can have a feel for how they should use the reader on a daily basis. Thegoal is to have consistent placement so the V-Station reader sees approxi-mately the same information each time.





120

ENROLLMENT

12.1.3. P ROPER F INGER O RIENTATION

Always try to cover the entire area of the sensor with the fingertip so as to providethe most information (refer to Figures 80 through 91).

Figure 88 - Correct Placement

Figure 89 - Incorrect Placement

Place the finger as close to the center position of the sensor to increase the accep-tance rate.

Figure 90 - Place Finger Close to Center





121

ENROLLMENT

12.1.4. C ENTERING THE C ORE

Finger rotation should always be kept to a minimum during enrollment, verification,and identification.

Figure 91 - Do Not Rotate Finger

A finger core is the area located within the inner most re-curving ridge. Normally, itis located in the middle of the finger. When enrolling, place the finger on the sensorwhere the entire core can clearly be seen in the Fingerprint Image window. In Figure84, the green dots represent the center of the core. Every attempt should be madeto ensure that the core is positioned in the center of the captured image.

Arches (plain and tented) Loops (singular and twinned) Whorls and Central Pocket Loops

Figure 92 - Finger Cores

The Finger Placement Feedback (FPF) feature (see Figure 93 on next page) allows the admin-istrator to direct users in correct finger placement during enrollment and helps the user tolearn the correct placement for everyday use. The FPF feature helps an administrator knowwhen an enrolling user has positioned the core on the scanning surface optimally.

Without this feature, an administrator has to try to recognize the core visually and then make a judgment call as to whether the placement was optimal. FPF also allows the fingerprint imageto remain hidden to add to personal biometric privacy.

Users are provided the opportunity to enable FPF only at the time of installation. Users canrevert back to the conventional finger image display aspect only by re-installing VeriAdmin and

deselecting the FPF option.

12.2. F INGER P LACEMENT F EEDBACK





122

ENROLLMENT

Figure 93 - Finger Placement Feedback Feature

1. The user chooses a finger to use and places it on the reader.

2. An attempt is made to enroll the finger.

3. The reader returns a placement summary.

4. The administrator shows the user how to reposition the finger as needed.

5. If the intersection of the lines is low and to the right, as shown in Figure 86 (onthe next page), the user needs to move their finger up and to the left. If the inter-section of the lines is close to the center, as shown in Figure 87 (on the nextpage), the finger is positioned optimally. The FPF image window is updatedwhenever the Enroll button is clicked and a finger is presented to the sensor.

6. Once the finger is in the optimal position, the enrollment can be completed.

12.2.1. E XAMPLE E NROLLMENT USING FPF





123

ENROLLMENT

Figure 94 - Questionable Quality and the FPF Feature

Figure 95 - Using the FPF Feature





124

ENROLLMENT

The FPF function is shown as a square within a square as seen previously in Figures93, 94, and 95. The outer square represents the boundaries of the scanning device.The inner square represents the optimal region in which the core should appear.

The coordinates of the core are shown as two intersecting lines drawn on the FPFscreen. If the lines are displayed in green, the intersection lies within the optimalarea. If one or both lines are displayed in red, the optimal point has not been found.

The administrator can use the FPF to determine if the finger needs to be reposi-tioned to improve the scan.

In the example shown in Figure 94 (previous page), the Quality and Content scoresindicate a passable finger scan but with FPF, the administrator has the informationto try to improve (in this case, the Quality score) without depending on trial and er-ror.

The administrator should consider the Quality and Content scores and the FPFwhen deciding whether to accept a finger scan for enrollment.

If either the Quality or the Content scores are below three stars, FPF lines are dis-played in red, to show that there is an issue, even if one or both are within the targetinner square.

How can the FPF help to improve the Quality and Content scores? It is possible thatpoor Quality or Content might be a result of insufficient information to make an ac-curate determination of core location. Using all three scores, the administrator candecide how to best improve the finger scan.

In the example shown in Figure 94 on the previous page, there are several things forthe administrator could check:

• Is the finger is centered on the scanning surface (and the FPF is accurate)?• Is the user is pressing down firmly enough to make good contact?• Does the finger meet the guidelines for correct placement?• Is the finger positioned on the Ridge-Lock correctly?• Is the finger rotated?• Is the finger placed flat?• Is the finger centered?• Does the finger have dry skin?• Is the sensor window clean?• Should an alternate finger be used?

12.2.2. T ROUBLESHOOTING E NROLLMENT U SING FPF





125

ENROLLMENT

12.2.3. OEM FPF I MPLEMENTATION

To implement the FPF in a custom application, the X and Y coordinates of the fin-gerprint core are required. These coordinates are stored as unsigned bytes in thetemplate structure, and are located at the following offsets:

• X = *(TemplatePTR+53)• Y = *(TemplatePTR+54).

The Y and Y values are relative to the normalized image of 96 columns by 96 rows,with the origin in the lower left of the sensor field.

Each sensor has a different recommended size for defining the acceptable core lo-cation area and these are listed in Table 5 below.

Note: The normalized image in a V-Station Optical is 96 columns by 128 rows.

Sensor Columns Rows

AuthenTec AF-S2 (V-Station) 68 60

AuthenTec AFS8500 44 36

Table 5 - Acceptable Core Location Areas by Sensor Type

1. Click Configure on the menu bar.

2. Select Quick Enroll from the drop-down list. The Quick Enroll dialog box is displayed, asshown in Figure 96. In Figure 88, the image on the left is for readers with FPF turned onand the one on the right is with the FPF turned off.

12.3. Q UICK E NROLL

Figure 96 - Quick Enroll Dialog Box with and without FPF

3. Enter the desired ID in the Template ID Number field or click on the appropriate buttonunder the Get Template ID From area.

• For Wiegand sources, such as proximity cards, click the Wiegand String button.• For smart card users, click the Smart Card SN button.

With FPF Without FPF





126

ENROLLMENT

4. Click the Enroll button. The LED on the reader glows amber requesting the enrollee toplace a finger on the sensor.

5. The user places a finger on the sensor. (If a finger is not placed within twelve seconds orthe finger-scan was not completed, the LED glows red and the reader times out of the

enrollment process.)6. The LED glows green and the reader beeps once to acknowledge that the finger-scan was

captured. The finger can be lifted off the sensor when VeriAdmin instructs you to removethe finger.

7. A sample of the image is displayed on the left side of the screen or if the FPF is beingused, green crosshairs show the location of the core.

8. The Quality and Content fields each display from one to five yellow stars indicating howwell the scan was read. A rating of at least three stars in each field is recommended.Searching readers work best with four to five stars. With FPF, the crosshairs should becentered.

9. If you are unsatisfied with the finger scan, repeat Steps 1 to 8 and possibly try anotherfinger.

10. When satisfied with the finger scan, click the Accept button to continue with the enroll-ment.

11. The Template Viewer dialog box opens.

12. Complete the Enrollee Name field; identify the finger that was scanned.

13. Change the Index if you are enrolling more than one finger under the same ID, otherwise itshould be set to zero.

14. For 1:1 verification readers, select a 1:1 Template Security Threshold and User Type .

15. The User Type can be "User ID", "Enroll ID", or "Delete ID", depending on what privilegesyou want to assign to the person you are enrolling. The default type is "User ID".

If the card number has already been designated as one of the threetypes, then any subsequent templates assigned to the card must be ofthe same User Type .

If more than one reader is networked together, Bioscrypt recommendsthat you distribute the new enrollment to the other readers at this time.

To view a helpful presentation on how to perform a quality enrollment,press F1 within the Quick Enroll dialog. This launches a separate slideshow (the presentation and viewer must be installed correctly) detailinginstructions on how to best enroll a user and get the best results fromyour reader.

If Access schedules are being used, the template must be editedmanually using the Advanced Enrollment tools.

NOTICENOTICE





127

ENROLLMENT

The Advanced Template Enrollment is the recommended tool for enrolling all templates. Thisallows multiple templates to be sampled and the corresponding template to be created. Userscan sample different fingers or multiple enrollments of the same finger. Each time an enroll-ment is sampled, the "best" template is identified between the current three samples. Usersthen have the option of accepting the enrollment of their choice.

12.4. A DVANCED E NROLLMENT

No enrollment is saved until one of the three Accept buttons is clicked.

This is an effective tool for training users because it demonstrates howproper finger placement is a critical aspect in obtaining a good enroll-ment. This tool can also show how different fingers on the same per-son can have very different Quality and Content ratings.

NOTICENOTICE

Figure 97 - Advanced Enrollment Dialog Box

The Advanced Enrollment process is:

1. Enter the desired ID In the template ID number field (see Figure 97) or click the appropri-ate button under the Get Wiegand ID From area.

• For Wiegand sources (such as proximity cards or an external keypad), click theWiegand String button.

• To use a smart card serial number as the template ID, click the Smart Card SN button.

If you are using a smart card-based reader and have selected UseWiegand String within the Smart Card Manager, VeriAdmin expects toreceive a Wiegand string from an external reader and will warn you ifnone was provided.

NOTICENOTICE

2. Enter the index of the template in the Index field.

3. Click any Enroll button.





128

ENROLLMENT

Figure 98 - Advanced Enrollment – Finger Selection

4. A Please Choose a Finger dialog box is displayed (see Figure 98). Choose a finger andselect the corresponding radio button. Click OK.

5. The LED on the current reader glows amber, indicating that a finger should be placed onthe sensor.

6. The enrollee positions a finger on the sensor. The finger is scanned and both the imageand corresponding template are displayed.

7. Remove the finger when the amber LED goes out. The Advanced Enrollment featurechooses the best template of the three and indicates which enrollment should be ac-cepted (see Figure 99). In the example, the middle enrollment is indicated as best.

Users can indicate which finger by selecting the corresponding checkbox in the Please Choose a Finger dialog box (see Figure 98). Theradio buttons represent the fingers as if both hands were placed palmsdown.

NOTICENOTICE

8. Repeat Steps 1 to 7 to enroll additional sample templates. A current template can be re-placed by choosing the finger to be enrolled and clicking the Enroll button.

Figure 99 - Advanced Enrollment – Choose Best Template





129

ENROLLMENT

Figure 100 - Advanced Enrollment – Choose a Finger Dialog Box

Although it is not recommended by Bioscrypt, users have the option of choosing a differentEnrollment other than the one recommended. Simply press the Accept button even though it

is hidden behind the red “NO” symbol. A warning message is displayed to confirm this un-recommended action (see Figure 101).

Figure 101 - Advanced Enrollment – Override Recommended Choice

Once an enrollment has been selected, the normal Edit Template dialog box is displayed sothat fields can be verified and additional data can be added. Here is where the User Type andSecurity Threshold can be set. See Section 7.1 "Editing Templates" for more details on savingthe template to either the current reader or to the PC hard drive.





130

To enroll a new fingerprint using the keypad (V-Station only):

1. At an idle LCD screen (i.e., with it showing "Bioscrypt" with the date and time), press

"000" (three zeroes), then the key. The V-Station menu system is displayed. Traversethe menu system using the and keys, the key to enter a menu, and thekey to back out to a previous menu.

2. Enter the Template Admin menu, then the Enroll (Add) User menu. Enter an Enroll IDbetween 1 and 4294967294.

3. Place your finger on the sensor when the amber LED illuminates, making sure to use theRidge-Lock system.

4. After retrieving the finger-scan image, the content and quality is displayed in the form ofyellow stars (5 is the best). Bioscrypt recommends at least three stars for quality and two

for content.

5. To accept the enrollment, press . To reject it, press . To re-try the enrollment,press .

6. Choose the finger that was enrolled and press the corresponding numbered key, from 0through 9. Press for the left Pinky. Press for the right Pinky. Press if youdon’t want to specify a finger.

7. Choose whether the finger is to be a Duress finger or not. Press or for "No", orpress for "Yes".

8. Choose the security level, from 0 to 6, and press the corresponding numbered key.

= "None" = "Low"

= "Very High" = "Very Low"

= "High" = "Password Only"

= "Medium". = "Default" (Medium).

9. Choose the admin level, from 0 to 2, and press the corresponding numbered key.

= "User" = "Full Admin"

= "Enroller". = "Default" (User).

10. Enter a password for the template, if desired, or press for none.

11. The next menu asks if you would like to save the template to the reader. Press for"Yes" or for "No".

12. To enroll an alternate finger with the same ID, press for "Yes" or for "No".

ENROLLMENT

12.5. E NROLLMENT U SING K EYPAD





131

ENROLLMENT

When the reader captures a finger scan properly, it looks for image quality and content in thecore. When the rating of the image falls below acceptable quality, the star rating reflects this.

12.6. T ROUBLESHOOTING E NROLLMENT

Finger-scan images are only available if the Finger Placement Feed-back feature is turned off during VeriAdmin installation. Otherwise,Quality and Content are noted only by the number of stars.NOTICENOTICE

Score Quality/Content Category

Very Poor

Poor

Fair

High

Very High

Table 6 - VeriAdmin Management Application Map of Score Versus Category

The quality score is based on how well the ridge pattern is defined within the image.Poor quality enrollments can result in an elevated rate of false rejection, making itdifficult for the user to verify reliably. See Figure 102 for examples of low and high-quality finger scans

As a general rule of thumb, quality scores less than three stars require interventionon the part of the enroller or administrative software. Sources of low scores includedry fingers and dirty sensors.

12.6.1. Q UALITY

Low Quality High Quality

Figure 102 - Low and High Quality Finger Scans

If the quality score falls below three stars, Bioscrypt recommends performing thefollowing actions in the order listed. Proceed to the next action only if the previousaction fails to improve the quality score:

• Ensure that the sensor and finger are clean.• If a dry finger is suspected, try breathing on the finger.• Finger-scan quality can vary among individual fingers for the same person. Try

enrolling an alternate finger to see if the score improves.• Decrease the security level by one level for that particular user. If the quality

score does not improve adequately, consider decreasing the security levelfurther. Be aware that decreasing a template’s security increases the risk of afalse acceptance for that template.





132

ENROLLMENT

The Content score is based upon the amount of non-ambiguous data in the core.Templates that are characterized by low content scores can result in elevated ratesof false acceptance. Content scores less than three stars require intervention on thepart of the Enroller or administrative software. Sources of poor content include im-proper finger positioning and bland finger-scans. See Figure 103 for examples oflow and high-content finger scans.

12.6.2. C ONTENT

Figure 103 - Low and High Content Finger Scans

If the content score falls below three stars, Bioscrypt recommends these followingactions:

• If finger positioning seems to be the issue, ensure that the user can comforta-bly place the finger on the sensor while maintaining the core region in theimage.

• Try enrolling an alternate finger to see if the score improves.• Decrease the security level by one level for that particular user. If the content

score does not improve adequately, consider decreasing the security levelfurther. Be aware that decreasing a template’s security increases the risk of afalse acceptance for that template.

High Content Low Content

Good enrollments typically meet these criteria:• The fingerprint image is properly centered where the core is entirely in the

field of view.• The fingerprint image nearly covers the entire sensor surface.• The ridges and valleys are clearly defined.

The fingerprint image is the raw image of your captured fingerprint, before it is con-verted to a template. It should be evaluated to determine if the proper content hasbeen captured. Refer to Figures 104 through 110 on the next two pages to see whatis and what is not desirable in a fingerprint image.

12.6.3. E VALUATING E NROLLMENT





133

ENROLLMENT

Evaluation: The finger was very moist; moisture causes distortion of ridge patterns.Suggestion: Dry the finger with a cloth or paper towel to remove excess moistureand re-attempt the enrollment.

Figure 104 - Moist Finger

Evaluation: The finger was very dry or insufficient pressure was applied to the sen-sor; the fingerprint core is not fully imaged.Suggestion: Re-attempt the enrollment with slightly more pressure applied to thesensor. If additional pressure does not improve the enrollment, moisten the fingerslightly by breathing on it, or try enrolling a different finger.

Figure 105 - Dry Finger

Figure 106 - Fuzzy Image

Evaluation: The core is centered properly, but the image is a fuzzy around theedges, possibly due to insufficient pressure.Suggestion: Re-attempt the enrollment with slightly more pressure applied to thesensor. If the unclear edges remain, it may be due to the user having small fingers.

Accept the enrollment if multiple attempts yield similar results.

Figure 107 - Off Center

Evaluation: The core is not centered properly.Suggestion: User should reposition the finger and use the Ridge-Lock to try to cap-ture more of the core. The finger needs to be shifted upwards to capture additionalcore information. Help the user to locate the ideal position on the Ridge-Lock.





134

ENROLLMENT

Evaluation: Core is properly centered but the core is distorted (the ridges and val-leys are not uniform or well defined). The user might have dry fingers or they mightnot have applied enough pressure to the sensor.Suggestion: Re-attempt the enrollment with slightly more pressure applied to thesensor. If additional pressure does not improve the enrollment, moisten the fingerslightly by breathing on it.

Figure 108 - Distorted Core

Evaluation: This is an example of a good enrollment. The core is properly centered,the image area is fully covered, and the ridge pattern is well-defined.Suggestion: Review the Template Data image to ensure that it is also considered agood enrollment. If so, accept this enrollment.

Figure 109 - Good Enrollment (Example 1)

Figure 110 - Good Enrollment (Example 2)

Evaluation: This is an example of a good enrollment. The core is properly centered,the image area is fully covered, and the ridge pattern is well-defined.Suggestion: Accept this enrollment.





135

USER INTERFACE

13. U SER INTERFACE Once users are enrolled in the system, using the V-Station is a simple procedure.

1. On the Searching model, users simply place their finger on the sensor (top LED glows amber).• After detecting a finger, the reader displays "Remove finger, Searching database".

2. Users can also enter their PIN (Template ID) or initiate the proper Wiegand input first (if set up).• When the LCD shows "Place Finger" (the top LED glows amber) they may then place

their finger.

3. V-Station Prox models can initiate verifications by presenting the appropriate card to thereader.

• When the LCD shows "Place Finger" (the top LED glows amber) they may then placetheir finger.

• The system can be set up so that no finger is required.

4. The LCD then shows either "Accepted" (top LED glows green) or "Rejected" (the top LEDglows red).

• If accepted, the verification actions specified by the administrator are executed.• If rejected, the reader returns to its idle state.

5. When the reader returns to the idle state, the top LED turns off. (Except for Searching readers,where the LED glows amber at the idle state, indicating it is waiting for Step 1.)

13.1. V ERIFICATION U SING A S MART C AR D

After enrolling a template on a smart card, you can then use the card to perform verification.

1. Exit the Smart Card Manager dialog so the V-Station is placed back into Host mode.

2. Place the smart card near the reader. The top LED indicates a response (see Table 7).

Indicator Description

Amber Template READ; Place Finger on SensorRed No Template on smart cardFlashing Red Invalid Site Key, cannot read card data

Table 7 - Read Smart Card LED Indicators

If the template was read successfully, the top LED glows amber, indicating "Place Finger".

3. Remove the card, place the finger, and hold until the LED goes blank.

4. Once the LED goes blank, remove the finger.

5. The LED then glows either red or green, indicating a Fail or a Pass (see Table 8).

Indicator Description

Green Verified Passed/Enrollment Accepted

Red Verify Failed

Table 8 - Verification LED Indicators

Presenting a Prox card too quickly can cause the V-Station to attemptto verify a non-existent ID, resulting in a failed verification.NOTICENOTICE





136

S ECURE LOGON S YSTEM

APPENDIX A: S ECURE LOGON S YSTEM

Figure 111 - Create New Account Dialog Box

VeriAdmin can be configured to require a user to log in every time the application is launched. Di-rectly after installing the VeriAdmin application, an account must be set up.

To set up a new VeriAdmin account:

1. At the end of the VeriAdmin installation process, a Create New Account dialog box isdisplayed (see Figure 111). Enter a user name and a password. The user name and passwordmust be between 6 and 20 characters long.

2. Re-enter the password to confirm your choice.

3. Click the OK button.

Subsequently, every time the VeriAdmin application is launched, the user is prompted by aVeriAdmin Login dialog box (see Figure 112) for these credentials. If incorrect credentials areentered, VeriAdmin does not start.

Figure 112 - VeriAdmin Login Dialog Box

The credentials are stored in a 3DES-encrypted format on the computer on which VeriAdmin isinstalled.

If the login credentials are forgotten, VeriAdmin cannot be launched. The application must be un-installed, then re-installed.





137

S ECURE LOGON S YSTEM

A.1. C HANGING AN A CCOUNT P ASSWORD

An administrator can change the login password from within VeriAdmin, as long as they canlog in to the program initially.

To change the login password:

1. Select Change Password in the Configure drop-down menu (see Figure 113). A ChangePassword dialog box is displayed (see Figure 114).

Figure 113 - Change Password Menu Item

Figure 114 - Change Password Dialog Box

2. Enter the existing user name and password.

3. Re-enter the existing password to confirm it.

4. Enter a new password. The password must be between 6 and 20 characters long.

5. Re-enter the new password to confirm your choice.

6. Click the OK button. The new password is saved.



B IOSCRYPT C ONTACT INFORMATION

APPENDIX B: B IOSCRYPT C ONTACT INFORMATION Bioscrypt is available to provide information and assistance. Before contacting Technical Support,please have ready the following information about your product:

• Product name and model number• Software version• DLL• Algorithm• Kernel• ESI (if applicable)• Communication Manager (if applicable)• Kit (if applicable).

B.1. T ECHNICAL S UPPORT C ONTACT I NFORMATION

Phone: 905.940.7477

Toll Free: 888.940.7477

Fax: 905.940.7484

Business Hours: Monday to Friday, 8:00 a.m. to 8:00 p.m. (-5 GMT)

E-mail: [email protected]

Web: http://www.bioscrypt.com

B.2. B IOSCRYPT O FFICE L OCATIONS

Corporate Headquarters

505 Cochrane Drive, Markham, T +1 905.940.7750Ontario, Canada F +1 905.940.7642

Date post:	04-Jun-2018
Category:	Documents
Upload:	david-del-angel-rodriguez
View:	302 times
Download:	2 times

V-Station 20Optical 20Sensor 20Operators 20Manual

Documents