Bosch ASL-APE3P-BASE, ASL-APE3P-BEXT, ASL-APE3P-CLI, ASL-APE3P-RDR, ASL-APE3P-VIDB Operation Manual

...
Access Professional Edition
3.0
en Configuration Manual
Access Professional Edition 3.0

Table of contents

Table of Contents | en 3
1.1 Restrictions and options 6
1.2 Installation on one computer 8
1.3 Installation on multiple computers 9
1.4 System Prerequisites 10
2.1 Introduction 12
2.2 User Login 15
2.3 Menu and Tool bar 18
2.4 General system settings 22
2.5 Layout of the main dialog 27
2.6 Menu and tool bar 28
2.7 Layout of the main dialog 32
2.8 Menu and Tool bars 33
2.9 Enrollment Configuration 35
2.9.1 Enrollment via AMC connected readers 37
3.1 Creating new configurations 42
3.2 Opening configurations 44
3.3 Activating a new configuration 45
3.4 Propagating configurations to the controllers 46
4.1 Defining and modifying new controllers 49
4.2 Controller Settings 54
5.1 Input signals 57
5.2 Output signals 60
5.3 Defining conditions for output signals 67
5.4 Creating Extension boards 73
6.1 Creating and modifying door models 76
6.2 Display and parameterization 82
6.3 Door models with special settings 91
Bosch Access Systems GmbH 2014-03 | 3.0 | Configuration Manual
System Overview 5
General 12
Configurations 42
Controllers 49
Signals 57
Entrances 76
4 en | Table of Contents
Access Professional
Edition 3.0
Areas 92 Personnel Groups 97 Access Authorizations 101
9.1 Create and assign 101
9.2 Special rights 105
10
Special days 110
10.1 Create and modify 110
11
Daymodels 113
11.1 Create and modify 113
12
Timemodels 115
12.1 Create and modify 118
13
Texts 120
13.1 Displaytexts 121
13.2 Event Log messages 122
14 15
Additional Personnel data 125 Map Viewer and Alarm Management 129
15.1 Configuring a map 130
15.2 Adding a device to a map 133
16 17
Card Definition 136 Appendix 140
17.1 Signals 140
17.2 Default Doormodels 142
17.3 Doormodel 01 143
17.4 Doormodel 03 145
17.5 Doormodel 06c 146
17.6 Doormodel 07 146
17.7 Doormodel 10 149
17.8 Doormodel 14 151
17.9 Examples of mantrap configurations 153
17.10 Configuring Entrance Model 07 156
17.11 Display Arming/Disarming 158
17.12 Procedures in Access Control 160
17.13 Access PE ports 164
18
PIN types 166
2014-03 | 3.0 | Configuration Manual Bosch Access Systems GmbH
Access Professional Edition 3.0
System Overview | en 5
1

System Overview

Access Professional Edition System (hereunder referred to as Access PE) consists of four modules – LAC Service: a process which is in constant communication
with the LACs (Local Access Controllers – hereafter referred to as Controllers). AMCs (Access Modular
Controllers) are used as Controllers. – Configurator – Personnel Management – Logviewer These four can be divided into server and client modules. The LAC service needs to remain in constant contact with the controllers because firstly it constantly receives messages from them regarding movements, presence and absence of cardholders, secondly because it transmits data modifications, e.g. assignment of new cards, to the controllers, but mainly because it carries out meta-level checks (access sequence checks, anti-passback checks, random screening). The Configurator should also run on the server; however it can be installed on client workstations and operated from there. The modules Personnel Management and Logviewer belong to the Client component and can be run on the Server in addition, or on a different PC with a network connection to the server. The following Controllers can be used. – AMC2 4W (with four Wiegand reader interfaces) - can be
extended with an AMC2 4W-EXT – AMC2 4R4 (with four RS485 reader interfaces)
Bosch Access Systems GmbH 2014-03 | 3.0 | Configuration Manual
6 en | System Overview
Access Professional
Edition 3.0
1.1

Restrictions and options

You can use Access PE for systems that do not exceed the following thresholds for connectable components and manageable data volume. – Max. 10,000 cards – Up to three cards per person – PIN length: 4 to 8 characters (configurable) – PIN types:
Verification PIN – Identification PIN – Arming PIN – Door PIN
Access variants:
Only with card – Only with PIN
PIN or card – Max. 255 time models – Max. 255 access authorizations – Max. 255 area-time authorizations – Max. 255 authorization groups – Max. 16 workstations – Max. 128 readers – Max. one I/O extension board (AMC2 8I-8O-EXT, AMC2
16I-16O-EXT or AMC2 16I-EXT) per Controller – The following restrictions apply to each controller type:
2014-03 | 3.0 | Configuration Manual Bosch Access Systems GmbH
Access Professional Edition 3.0
System Overview | en 7
Controller AMC2 4W AMC2 4W
Readers/entrances
Max. readers per
4 8 8
with AMC2 4W-EXT
AMC2 4R4
AMC
Max. readers per
1 1 8
interface/bus
Table 1.1: System limits — readers and entrances
Video system — restrictions and options
Max. 128 cameras – Up to 5 cameras per entrance
1 identification camera – 2 back surveillance cameras – 2 front surveillance cameras – You can configure one of these cameras as an alarm
and log book camera.
Offline Locking System (OLS) — restrictions and options
Max. 1024 doors – The number of entrances and authorization groups in the
authorizations depends on the dataset length that can be
written to the cards. – Max. 15 time models – Up to 4 periods per time model – Max. 10 special days/holidays (from the online system)
Bosch Access Systems GmbH 2014-03 | 3.0 | Configuration Manual
8 en | System Overview
Access Professional
Edition 3.0
1.2

Installation on one computer

The following figure shows a complete Access PE system installed on a single computer. Controllers can be connected via a serial interface. If a dialog reader is used then this is also connected via a serial interface.
Figure 1.1: System Overview – Single Computer Configuration
2014-03 | 3.0 | Configuration Manual Bosch Access Systems GmbH
Access Professional Edition 3.0
System Overview | en 9
1.3

Installation on multiple computers

The following figure shows an Access PE system distributed across 2 computers. This is particularly beneficial in cases where the Server to which the Controllers are connected is in a locked computer room, but the personnel data is maintained, for example, by the personnel department elsewhere. The Access PE Client can be installed on up to 16 computers, which access common data on the Server via the network. Client workstations can be configured to use two monitors. Window positions maintained by the operating system, ensure a familiar operators’ environment across login sessions.
Bosch Access Systems GmbH 2014-03 | 3.0 | Configuration Manual
10 en | System Overview
Access Professional
Edition 3.0
Figure 1.2: System overview – Distributed System
1.4
2014-03 | 3.0 | Configuration Manual Bosch Access Systems GmbH

System Prerequisites

The installation of Access PE requires: Operating Systems (one of): – Windows XP SP2 Professional – Windows XP SP3 Professional – Windows 2008 Server – Windows 7
Other software:
Access Professional Edition 3.0
To run the AmcIpConfig application supplied (and the
To create and display lists and reports, you must install
Separate setups are available on the installation CD.
Hardware Requirements
Both Server an Client require a Standard Windows PC with: – 4 GHz CPU – 4 GB RAM at least – 20 GB free disk space (Server) – 1 GB free disk space (Client) – 100 Mbit Ethernet Network Card (PCI) – Graphical adapter with 1024x768 resolution and 32k colors – Resolution support:
CD/DVD-ROM Drive – I/O Expansion Option – USB Keyboard and Mouse
System Overview | en 11
Bosch Video SDK), you need the .NET Framework 4.0
platform.
Crystal Reports applications.
1024 by 768
1280 by 1024
2048 by 768
2560 by 1024
Notice!
Microsoft Windows XP Professional is required for any video
integration.
Please consult the documentation of the chosen devices and
ensure that you can use an operating system supported by both
software and devices.
Bosch Access Systems GmbH 2014-03 | 3.0 | Configuration Manual
12 en | General
Access Professional
Edition 3.0
2
2.1

General

Introduction

Access PE is an Access Control System which has been designed to offer the highest standards of security and flexibility to small and medium sized installations. Access PE owes its stability and upgradeability to a 3-tier design: The top tier is the administration level with its controlling services. All administrative tasks are carried out here, e.g. the registration of new cards and the assignment of access rights. The second tier is formed by the Local Access Controllers (LACs) which govern each group of doors or entrances. Even when the system is offline a LAC is able independently to make access control decisions. LACs are responsible for controlling the entrances, governing door opening times or requesting PIN­codes at critical access points. The third tier consists of card readers which, like the Controllers, are identical across all BOSCH access controls. They provide not only a consistently high degree of security, but also a simple upgrade and expansion path for the system, protecting previous investments. Access PE multi-user version allows multiple workstations to control the system. Customizable user rights levels regulate access and guarantee security. In this way it is possible, for example, to maintain card data from one workstation whilst using another to verify whether an employee is present in the building. Access PE offers exceptionally flexible configuration of access rights, time models and entrance parameters. The following list gives an overview of the most important features:
Quick & Easy card Assignment
2014-03 | 3.0 | Configuration Manual Bosch Access Systems GmbH
Access Professional Edition 3.0
Cards (up to three) can be assigned to persons either manually or using a dialog reader connected to a PC via a serial connection. Only one card can be active per person at any one time. When upgrading cards the old card is automatically overwritten and becomes invalid, thus preventing old cards from gaining access even if those responsible forgot or were unable to cancel them.
Access Rights (including Group Privileges)
Each person can inherit group privileges as well as having individual rights assigned to him. Privileges can be restricted by area and time to an accuracy of one minute. Group privileges can be used to grant and limit access rights for any or all cardholders simultaneously. Group privileges can be made dependent on time models which restrict their access to certain times of day.
Access tracking
By defining Areas it is possible to track and enforce a correct sequence of accesses. Even without monitoring, this configuration makes it possible to display a cardholder's location.
Anti-Passback
When a card has been read it can be blocked for a defined period from entering at the same access point. Hence it is possible to prevent "passback", where a user hands his card back across a barrier to provide access for an unauthorized person.
Automatic Cancelation of cards upon Expiration
Visitors and temporary staff frequently require access for a limited period only. cards can be registered for a specific time period, so that they automatically lose their validity when that period expires.
Time Models and Day Models
General | en 13
Bosch Access Systems GmbH 2014-03 | 3.0 | Configuration Manual
14
en | General
Access Professional
A cardholder can be assigned to specific time models which regulate the hours in which that person has access. Time models can be defined flexibly using day models which determine how specific weekdays, weekends, holidays and special days deviate from normal working days.
Identification via PIN-Code
Instead of a card a person can use a special PIN-Code to enter.
Verification via PIN-Code
Particularly sensitive areas can be programmed to require additional PIN-Codes. This protection can in turn be made dependent on time models, so that, for instance, a PIN-Code is only required for access during holiday times or outside of defined working hours.
Flexible Door Management
Flexible parameterization of individual door models allows an optimum balance between security and comfort. The "shunt" or alarm suppression period can be individually specified to regulate for how long a door may remain open. In cooperation with an alarm system the access point can then optionally be locked.
Periodic Door Release
In order to facilitate access, door alarms can be shunted to release doors for specific periods. Door release periods can be defined manually or automatically via a time model.
Time and Attendance
Access points can be parameterized to record ingress and egress for time & attendance purposes.
Card Design
The graphical add-in module Card Personalization (CP) is fully integrated into the Access Control system to allow the operator to create cards without switching applications.
Assignment of Photos
If the add-in module Card Personalization (CP) is not activated photographic identification can nevertheless be imported and associated with cardholders.
Edition 3.0
2014-03 | 3.0 | Configuration Manual Bosch Access Systems GmbH
Access Professional Edition 3.0
Offline locking system
Areas which are not covered, for whatever reason, by the high­availability online access control system can nevertheless be locked offline.
Administration of video devices
Entrances can be equipped additionally with cameras to identify and track the movements of persons using them.
General | en 15
2.2

User Login

Start the user applications using the desctop icons:
Personnel Management
Configurator
Logviewer
Map and Alarm Management
Video Verification
or choose the tools via : Start > Programs > Access Professional Edition
Start the : Map & Alarm Management application using the
desctop icon
Professional Edition > Map & Alarm Management. – Start the : Video Verification application using the desctop
or via : Start > Programs > Access Professional
icon
Edition > Video Verification.
Start the : Configurator application using the desctop icon
or via : Start > Programs > Access Professional Edition >
Configurator.
or via : Start > Programs > Access
Bosch Access Systems GmbH 2014-03 | 3.0 | Configuration Manual
16
en | General
Access Professional
Start the : Logviewer application using the desctop icon
or via : Start > Programs > Access Professional Edition > Logviewer.
Start the : Personnel Management application using the
desctop icon
or via : Start > Programs > Access
Professional Edition > Personnel Management.
The system's applications are protected from unauthorized use. A login with a valid username and password is required in order to invoke the dialog-based subsystems.
Edition 3.0
The upper drop-down list can be used to select the desired interaction language. The default is that language which was used to install the application. If there is a change of user without restarting the application then the previous language is retained. For this reason it is possible for a dialog box to appear in an undesired language. In order to avoid this, please log in to Access PE again. Access PE applications can be run in the following languages: – English – German – Russian – Polish – Chinese (PRC) – Dutch – Spanish
2014-03 | 3.0 | Configuration Manual Bosch Access Systems GmbH
Access Professional Edition 3.0
Portuguese (Brazil)
Notice!
All facilities such as device names, labels, models and user-
rights schemes are displayed in the language in which they
were entered.Similarly buttons and labels controlled by the
operating system may appear in the language of the operating
system.
If a valid username/password pair are entered then the button : Change Password appears. This can be used to start a new dialog to change the password.
The button Start the application checks the user's privileges and, based on these, starts the application. If the system is unable to authenticate the login then the following error message appears: : Wrong username or password!
General | en 17
Login via Personnel Management
If the user is already logged into the Access PE Personnel Management application, and if the user's rights include the other tools, he can start the : LogViewer, : Configurator, : Alarm Management and : Video Verification using the toolbar buttons.
If the user is already logged into the Access PE Personnel
Management application, and if the user's rights include : LogViewer, then : LogViewer may be invoked directly using the
button in the tools list, without requiring a separate login to
the LogViewer application.
Bosch Access Systems GmbH 2014-03 | 3.0 | Configuration Manual
18 en | General
If the user is already logged into the Access PE Personnel
Management application, and if the user's rights include : Configurator, then : Configurator may be invoked directly using
the button in the tools list, without requiring a separate login to the Configurator application.
If the user is already logged into the Access PE Personnel
Management application, and if the user's rights include : Video Verification, then : Video Verification may be invoked directly
using the login to the Configurator application.
If the user is already logged into the Access PE Personnel
Management application, and if the user's rights include : Alarm Management, then : Alarm Management may be invoked
Access Professional
Edition 3.0
button in the tools list, without requiring a separate
directly using the separate login to the Configurator application.
2.3
2014-03 | 3.0 | Configuration Manual Bosch Access Systems GmbH

Menu and Tool bar

The following functions can be invoked via the menus, the icons in the toolbar or specific keyed shortcuts.
Function Icon/
Menu File
New
button in the tools list, without requiring a
Description
Shortcut
Clears all configuration dialog
Crtl + N
boxes (except for default settings) in order to define a new configuration.
Access Professional Edition 3.0
General | en 19
Function Icon/
Description
Shortcut
Open...
Crtl + O
Opens a dialog box to select a different configuration for loading.
Save
Saves changes into the current configuration file.
Crtl + S
Save as... Saves the current configuration
into a new file.
Activate Configuration
Activates a loaded configuration and saves the hitherto active configuration.
Send Configuration to
Propagates saved configuration changes to the LAC-Service.
LAC
List recently active configurations
Opens configurations directly,
circumventing the Open function's selection dialog.
Exit Shuts down Access PE
Configurator.
Function Icon/
Description
Shortcut
Menu View
Tool bar Toggles display of the tool bar
(default = on).
Status bar Toggles display of the status bar
at the bottom edge of the window (default = on).
Bosch Access Systems GmbH 2014-03 | 3.0 | Configuration Manual
20 en | General
Access Professional
Edition 3.0
Function Icon/
Description
Shortcut
Menu Configuration
General Opens the General Settings
dialog for setting up Controllers and general system parameters.
Input signals Opens the dialog box for
parametrizing input signals.
Output signals Opens the dialog box for
parametrizing output signals.
Entrances Opens the Entrances dialog for
parametrizing doors and card readers.
Areas Opens the Area Configuration
dialog for dividing the protected installation into virtual areas.
Holidays Opens the Holidays dialog box
for defining holidays and special days.
Day Models Opens the Day Models dialog
box for defining time periods within a day for the activation of access functions.
Time Models Opens the dialog Time Models
for defining timezones dependent on days of the week or calendar.
2014-03 | 3.0 | Configuration Manual Bosch Access Systems GmbH
Access Professional Edition 3.0
General | en 21
Function Icon/
Description
Shortcut
Personnel Groups
Opens the dialog box Personnel Groups for dividing personnel into logical groups.
Access Authorization Groups
Opens the dialog box Access Authorization Groups for defining groupings of authorizations to entrances.
Offline locking system
Opens the Offline locking system dialog for configuring special elements of the installation (Entrances, Time models, Authorization groups).
Display Texts Opens the dialog box Display
texts for editing the texts to be displayed at the card readers.
Log Messages Opens the dialog box Log
Messages for editing and categorizing log messages.
Additional personnel fields
Opens the dialog box Additional personnel fields for defining data fields for personnel.
Wiegand - cards Opens the dialog box Wiegand-
cards for defining the structures of card data.
Administering video devices
Opens the Video devices dialog for configuring cameras to be used in video verification.
Bosch Access Systems GmbH 2014-03 | 3.0 | Configuration Manual
22 en | General
Access Professional
Edition 3.0
2.4
Function Icon/
Shortcut
Map Viewer and Alarm management
Menu ? (Help)
Help topics Opens this help text.
About Access Professional Edition ­Configurator
Displays general information
Description
Opens the Map Viewer for an areal view of maps and control devices and the alarm list for alarm handling.
about Access Professional Edition - Configurator

General system settings

General system settings are displayed below the list of controller settings. These are valid for all installations.
Parameter
Country Code 00 Some card data are appended
Customer Code 056720
2014-03 | 3.0 | Configuration Manual Bosch Access Systems GmbH
Default value
Description
to the manually entered card number.
Access Professional Edition 3.0
General | en 23
Parameter Default
Description
value
Poll interval on serial connected LAC in ms
Read-Timeout on serial connected LAC in ms
200 The time interval in milliseconds
between pollings by the LAC­Service to verify intact connections to a controller.
500
Range of values for poll interval: 1 to 500 Possible values for read­timeout: 1 to 3000
Create TA dataat00:01 Specification of the time at
which the Time & Attendance data file should be created.
Export personnel and TA data
deactivated When activated this option
causes time & attendance data to written continuously to the export file. When not activated the data file is created at the time specified by the parameter Create TA data at.
The file containing attendance time-stamps is created in the following directory: C:\Program Files\Bosch\Access Professional Edition\PE\Data \Export Under the name TA_<Current date YYYYMMDD>.dat
Bosch Access Systems GmbH 2014-03 | 3.0 | Configuration Manual
24 en | General
Access Professional
Edition 3.0
Parameter Default
value
Show welcome/
activated Given appropriate reader type leaving message
Show
aktiviert Readers with display will show cardholder name in display
Number of
4 Determines the number of digits
Description
and settings (Arriving, Leaving or Check ok in the Entrances dialog) the reader will display those welcome and leaving texts which are stored for the cardholder in the Personnel Data dialog of the Personnel Management application. Does not apply to Wiegand readers.
the Display Name as stored in the cardholder's Personnel Data. Does not apply to Wiegand readers.
digits a verification or arming PIN requires. This setting applies also to the door PIN which can be set during the configuration of entrances. Possible values: 4 to 8
2014-03 | 3.0 | Configuration Manual Bosch Access Systems GmbH
Access Professional Edition 3.0
General | en 25
Parameter Default
value
use separate
If no separate IDS PIN is set,
IDS PIN
Description
then a verification PIN can be used to arm the IDS. Only if the check box is selected do the input fields for the arming-PIN become active in the Personnel dialog screen. In this case the verification PIN can no longer be used to arm the IDS.
Bosch Access Systems GmbH 2014-03 | 3.0 | Configuration Manual
26 en | General
Access Professional
Edition 3.0
Parameter Default
value
Count of retries
3 Number of failed attempts to before blocking
Directory paths to: Database Log file Import files Export files DLL files Image data Test-Logging
C:\Program
Files
\BOSCH
\Access
Professiona
l Edition\PE
\Data...
\Db
\MsgLog
\Import
\Export
\Dll
\Pictures
\Log
Description
enter the PIN. If the cardholder mistypes the PIN this many times then s/he will incur a system-wide block which can only be removed by an authorized system user (Personnel Management). Possible values: 1 to 9
These are the default paths. The directories for import, export and image files can be changed.
Notice!
When using Wiegand controllers and readers, in order to use
Identification-, arming- or door-PINs the Wiegand card definition PIN or Card (Nr. 6) needs to be activated.
2014-03 | 3.0 | Configuration Manual Bosch Access Systems GmbH
Access Professional Edition 3.0
General | en 27
2.5

Layout of the main dialog

The dialog consists of the following parts:
1 = Menu bar — contains dialog functions displayed
according to the menu order.
2 = Toolbar — contains shortcut keys for the most
important dialog functions.
3 = Title bar — conforms to Windows standard and
contains buttons for minimizing or closing the dialog window. The name of the registered user appears in square brackets.
4 = Personnel table — lists all people known in the system
along with their attendance status (authorization and location).
Bosch Access Systems GmbH 2014-03 | 3.0 | Configuration Manual
28 en | General
5 = Dialog field — the first time this field is opened or
6 = Online swipe — lists the last five people (with
7 = Device status — lists the configured devices and
8 = Event display — faults are indicated by a flashing red
9 = Status bar — displays information on buttons and
When you enable the Video Verification component, additional facilities will be added to this dialog; see Personnel Management.
When you enable the Video Verification component, additional facilities will be added to this dialog.
Access Professional
Edition 3.0
when no user is logged in, it shows a neutral image (map of the world). When an entry is selected from the Personnel list, this person's data is displayed.
database image) that have swiped their cards at the entrance selected.
entrances along with their connection status. Enables door control functions.
bar (flashes three times) with details on the cause.
menu entries that are controlled with the cursor. Status display on card personalization program (CP), dialog readers and LAC service.
2.6
2014-03 | 3.0 | Configuration Manual Bosch Access Systems GmbH

Menu and tool bar

The following functions are available via the menus or the icon buttons.
Function Icon Description
Menu Options
Refresh Refreshes the Personnel list
Access Professional Edition 3.0
Function Icon Description
Exit Exits the Access PE Personnel
Menu Persons
New person Opens a blank personnel and
Modify person Opens the personnel and card
Delete person Deletes the selected person
General | en 29
Management application
card data dialog
data dialog with the data of the selected person.
(after confirming a safety check dialog).
Transmit selected person to the LAC service
Transmit all persons to the LAC service
Set all persons absent
Transmits the selected person's
data to the LAC service and reports success.
Transmits all persons' data to
the LAC service and reports success.
Sets all persons absent (after
confirming a safety check dialog).
Set location of all persons present to unknown
Sets the location of all persons
to unknown and deactivates access tracing for the next booking of each person.
View/print reports Calls the dialog for creating
report lists.
Bosch Access Systems GmbH 2014-03 | 3.0 | Configuration Manual
30 en | General
Function Icon Description
Access Professional
Edition 3.0
List
control
Restricts the persons shown to those of the selected group.
Menu View
Symbol bar Toggles display of the tool bar.
Default = on.
Status bar Toggles display of the status
bar. Default = on.
Personnel data: State Card No. Personnel-No. Company Personnel Group
Choice of columns displayed in
the personnel overview in addition to symbol and name columns. Default = State - Company -
Location Phone Location
Menu Door management
open door These
functio ns are
The entrance selected in the
device list is displayed and can
be opened (one-off).
also availabl e via
2014-03 | 3.0 | Configuration Manual Bosch Access Systems GmbH
Loading...
+ 140 hidden pages