Johnson Controls CK721-A Installation And Operation Manual

Download

CK721-A

Network Controller

Installation and Operation

Manual

April, 2012

24-10349-8 Revision B

CK721-A

Network Controller

Installation and Operation

Manual

April, 2012

24-10349-8 Revision B

www.johnsoncontrols.com

Security Solutions

(805) 522-5555

Johnson Controls, Inc.

No part of this document may be reproduced without the prior permission of Johnson Controls, Inc.

Acknowledgement

Cardkey P2000, BadgeMaster, and Metasys are trademarks of names are trademarks or registered trademarks of their respective owners.

If this document is translated from the original English v will be used to ensure the accuracy of translation. Johnson Controls, Inc. shall not be liable for any translation errors contained herein or for incidental or consequential damages in connection with the furnishing or use of this translated material.

Due to continuous development of our products, the informatio notice. Johnson Controls, Inc. shall not be liable for errors contained herein, or for incidental or consequential damages in connection with the furnishing or use of this material. Contents of this publication may be preliminary and/or may be changed at any time without any obligation to notify anyone of such revision or change, and shall not be regarded as a warranty.

Federal Communications Comm

This equipment, CK721-A, has been tested and found to comply with the limits for a Class B digital device, pursuant

o Part 15 of the FCC rules. These limits are designed to provide reasonable protection against harmful interference

t in a residential installation. This equipment generates, uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one or more of the following measures:

 Reo

 In

rient or relocate the receiving antenna.

crease the separation between the equipment and receiver.

Johnson Controls, Inc. All other company and product

ersion by Johnson Controls, Inc., all reasonable endeavors

n in this document is subject to change without

issions Notice

 Connec

 Consult the dealer or a

The user is cautioned that changes and modifications made to t could void the user’s authority to operate this equipment.

This Class B digital apparatus, CK721-A, complies with Canadian ICES-003.

Cet appareil numerique de la classe B, CK721-A

This product complies with the requirements of the EMC Directive 2004/108/EC and the Low Voltage Directiv

This equipment must not be modified for any reason and i instruction.

If this shipment (or any part thereof) is supplied as second-hand equipment, equipment for sale outside the European

omic Area or as spare parts for either a single unit or system, it is not covered by the Directives.

Econ

t the equipment into an outlet on a circuit different from that to which the receiver is connected.

n experienced radio/TV technician for help.

he equipment without approval of the manufacturer

Canadian Notice

, est conforme à la norme NMB-003 du Canada.

Declaration of Conformity

e 2006/95/EEC.

t must be installed as stated in the Manufacturer’s

UNDERWRITERS LABORATORIES® COMPLIANCE VERIFICATION SHEET

CK721-A SERIES INSTALLATION MANUAL

This product is listed under Underwriters Laboratories UL™ 1076 for Proprietary Burglar Alarm Units and Systems and UL 294 for Access Control Systems Units. When installed at the site the following requirements must be met to comply with these standards.

1. Transient protection devices that are installed must not be removed or defeated.

2. The CK721-A shall be mounted in subassembly S300-DIN-L or S300-DIN-S.

3. The CK721-A in combination with the S300-DIN-L or S300-DIN-S must be connected to a UL Listed Uninterruptible Power Supply that provides a minimum of 24 hours of AC emergency power.

4. The tamper switch must be enabled at all times.

5. Systems requiring the use of network hubs, routers, bridges, network switches or the like shall guarantee these devices are UL Listed for fire and shock in the category control number (CCN) NWGQ and/or EMRT. These devices shall be installed in a temperature-controlled environment. The temperature-controlled envi ronment must be maintained between 13 - 35°C (55 - 95°F) and relative humidity of 85 ± 5% by the HVAC system. Twenty-four hour standby power shall be provided for the HVAC system.

6. The installer shall incorporate a supply line transient suppression device complying with the Standard for Transient Voltage Surge Suppressors, UL 1449, with a maximum rating of 330 V. Supply line transient sup pression device is to be used with the power supply to the network hub(s) routers, bridges and/or network switches.

7. External network hubs, routers, bridges or network switches must use signal line transient suppression devices complying with the Standard for Protectors for Data Communications and Fire Alarm Circuits, UL 497B, with a maximum marked rating of 50V.

8. In the CK721-A user-interface, the “Network Polling [LAN]” parameter must not exceed 90 seconds.

9. Modems shall not be used for primary connection to the host computer. Modems have only been investigated by UL for supplementary use.

10. The use of the MTI-STI-MUX-KIT and MTI-STI-MUX has not been investigated by Underwriters Laboratories.

11. The Otis elevator interface has not been investigated by Underwriters Laboratories.

12. Do not connect equipment to an AC power source that is controlled by a switch.

13. The Kone IP elevator interface has not been investigated by Underwriters Laboratories.

14. Do not connect equipment to an AC power source that is controlled by a switch.

15. For CK721-A, provided as part of an SPA, SPB, and SPC security control panel assembly, items 1 and 4 through 13 apply.

16. The CK721-A, provided as part of an SPA, SPB, and SPC security control panel assembly, must be connected to a UL Listed Uninterruptible Power Supply that provides a minimum of 24 hours of AC emergency power.

1: Introduction

Manual Conventions ............................................................................................................................... 1-1

Key Terms............................................................................................................................................... 1-2

Unpacking the Equipment....................................................................................................................... 1-3

General Description ................................................................................................................................ 1-4

CK721-A Module ............................................................................................................................. 1-4

Enclosures ...................................................................................................................................... 1-5

Modules .......................................................................................................................................... 1-6

Additional Equipment ...................................................................................................................... 1-7

Specifications (All Panels) ...................................................................................................................... 1-8

CK721-A Panel Configuration................................................................................................................. 1-9

Expanded Address S300 Bus Configuration ................................................................................... 1-9

Legacy Address S300 Bus Configuration ....................................................................................... 1-9

System Configuration Example ..................................................................................................... 1-10

Maximum Enclosure Distance ....................................................................................................... 1-10

10/100Base-T Networking Guidelines (specific to the CK721-A).......................................... 1-10

Network Communication....................................................................................................................... 1-11

TCP/IP .......................................................................................................................................... 1-12

Addressing ............................................................................................................................ 1-12

10/100Base-T Ethernet ................................................................................................................. 1-12

Communication Modes ................................................................................................................. 1-13

CK721-A/P2000 Server Encrypted Communications .................................................................... 1-13

2: CK721-A and S300-DIN Enclosures

CK721-A ................................................................................................................................................. 2-1

LEDs on the CK721-A ..................................................................................................................... 2-2

Binary Output .................................................................................................................................. 2-3

Setting the End-of-Line Switch ........................................................................................................ 2-3

Lithium Battery ................................................................................................................................ 2-4

Input Power ..................................................................................................................................... 2-5

RS485 ............................................................................................................................................. 2-5

Binary Input ..................................................................................................................................... 2-6

Connecting the Network .................................................................................................................. 2-7

Hub to CK721-A Wiring........................................................................................................... 2-7

RS232 ............................................................................................................................................. 2-7

RS232 Serial Null Modem Cable Wiring ................................................................................. 2-8

Large Enclosure (S300-DIN-L) ............................................................................................................... 2-9

Wiring CK721-A and Modules ....................................................................................................... 2-11

CK721-A Cable Requirements.............................................................................................. 2-11

Chain Module Wiring............................................................................................................. 2-12

Cable Routing ....................................................................................................................... 2-12

Chassis Grounding................................................................................................................ 2-13

24-10349-8 Rev. B v

Table of Contents CK721-A Installation and Operation

Small Enclosure (S300-DIN-S) ............................................................................................................. 2-13

Verifying DC and Chassis Ground ................................................................................................2-14

Installing CK721-A Module ............................................................................................................ 2-14

Cable Routing ....................................................................................................................... 2-15

Chassis Grounding................................................................................................................ 2-15

No Enclosure ........................................................................................................................................ 2-15

DIN Rail Mounting ......................................................................................................................... 2-15

+24 VDC Connector.............................................................................................................................. 2-16

Power Wiring ................................................................................................................................. 2-16

Ground Wiring ............................................................................................................................... 2-17

3: S300 Expansion Enclosures

S300 Expansion Enclosures ................................................................................................................... 3-1

Installing the Expansion Enclosures ............................................................................................... 3-1

Tools Required........................................................................................................................ 3-2

Sequence of Steps.................................................................................................................. 3-2

Planning the Installation.......................................................................................................... 3-2

S300-XL (S300 Expansion Enclosure, Large) ........................................................................ 3-3

S300-XS (S300 Expansion Enclosure, Small) ........................................................................ 3-4

S300-XXS (S300 Expansion Enclosure, Extra Small) ............................................................ 3-4

Removing the Knockouts ........................................................................................................ 3-5

Mounting the Enclosures ................................................................................................................. 3-6

Removing Boards from the Panels ......................................................................................... 3-6

Panel Location Suggestions.................................................................................................... 3-6

Installing the Power Supplies.................................................................................................. 3-7

Installing the First Level Modules .................................................................................................... 3-7

Installing the Second Level (Stacked) Modules ............................................................................ 3-10

Cabling .......................................................................................................................................... 3-12

Cabling Between Enclosures ................................................................................................ 3-13

Equipment Grounding ................................................................................................................... 3-16

Power.................................................................................................................................................... 3-16

S300-XFMR Transformer .............................................................................................................. 3-16

S300-PS Power Supply ................................................................................................................. 3-17

S300 Enclosure Power Consumption ........................................................................................... 3-19

Applying Power to the S300 Expansion Enclosure ....................................................................... 3-22

Legacy Reader Module......................................................................................................................... 3-23

Firmware Versions for Reader Modules ........................................................................................ 3-23

RS-485 Wiring ............................................................................................................................... 3-23

S300-RDR2 Module ...................................................................................................................... 3-25

Wiring Readers ............................................................................................................................. 3-28

Warm-up Resistor Removal.................................................................................................. 3-29

Wiring for Door Controls........................................................................................................ 3-35

Door Strike Wiring ................................................................................................................. 3-36

Door Open Detector Wiring................................................................................................... 3-37

Auxiliary Access Switch Wiring ............................................................................................. 3-37

Shunt Relay Driver Wiring..................................................................................................... 3-37

Legacy I/O Modules .............................................................................................................................. 3-38

Firmware Versions for Legacy I/O Modules .................................................................................. 3-38

RS-485 Wiring ............................................................................................................................... 3-38

S300-I16 Unsupervised Input Module ........................................................................................... 3-41

S300-IO8 Unsupervised Input/Output Module .............................................................................. 3-43

S300-SIO8 Supervised Input/Output Module ................................................................................ 3-45

vi 24-10349-8 Rev. B

This document contains confidential and proprietary information of Johnson Controls, Inc.

CK721-A Installation and Operation Table of Contents

S300-SI8 Supervised Alarm Input Module .................................................................................... 3-47

Wiring Input/Output Devices ......................................................................................................... 3-48

Expansion Enclosure Tamper Switch Wiring ........................................................................ 3-48

Unsupervised Alarm Inputs ........................................................................................................... 3-48

Supervised Alarm Inputs ............................................................................................................... 3-50

Calibrating Four-State Alarm Inputs...................................................................................... 3-51

Output Relay Wiring ...................................................................................................................... 3-52

Output Wiring ................................................................................................................................ 3-53

Backup Battery...................................................................................................................................... 3-54

S300-BAT Battery ......................................................................................................................... 3-54

S300-BRK2 Battery Bracket Kit .................................................................................................... 3-55

Installing the Backup Battery ......................................................................................................... 3-55

4: CK721-A User Interface

Important Notes ...................................................................................................................................... 4-1

Notes on Encryption................................................................................................................ 4-2

Principle of Operation ............................................................................................................................. 4-2

Communicating with the User Interface ..........................................................................................4-3

Using your Terminal Emulation ....................................................................................................... 4-3

Navigating Through the User Interface ........................................................................................... 4-4

Write Flash ...................................................................................................................................... 4-6

Clearing Database .......................................................................................................................... 4-6

Clearing the Flash Memory ............................................................................................................. 4-7

Router Configuration ....................................................................................................................... 4-7

Notes on Adding IP Addresses in Route Configuration Screen:............................................. 4-8

Troubleshooting ...................................................................................................................... 4-8

CK721-A Static Route Examples ............................................................................................ 4-9

Log Out ........................................................................................................................................... 4-9

Rebooting the Panel ....................................................................................................................... 4-9

Basic Panel Configuration..................................................................................................................... 4-10

Panel Menu ................................................................................................................................... 4-10

Legacy Panel Menu ...................................................................................................................... 4-10

Panel ............................................................................................................................................. 4-11

Direct Programming of the CK721-A .................................................................................................... 4-12

Panel Screen Description .............................................................................................................. 4-13

Terminal ........................................................................................................................................ 4-19

Offline Access Card Type Requirements.............................................................................. 4-33

RDR8S Input Point and Output Point Disassociation .................................................................... 4-33

RDR2S-A Input Point and Output Point Disassociation ................................................................ 4-35

Configuring PIN Codes ................................................................................................................. 4-36

PIN Only................................................................................................................................ 4-36

PIN + Card ID........................................................................................................................ 4-36

PIN ........................................................................................................................................ 4-37

Four-Digit PINs...................................................................................................................... 4-37

PIN Duress............................................................................................................................ 4-37

PIN Plus 1 Duress................................................................................................................. 4-38

PIN Retry Alarm .................................................................................................................... 4-38

Assisted Access ............................................................................................................................ 4-38

ADA Relay............................................................................................................................. 4-39

Panel Entry/Exit ............................................................................................................................. 4-39

Badge Entry/Exit Options ...................................................................................................... 4-39

24-10349-8 Rev. B vii

Table of Contents CK721-A Installation and Operation

Elevator Access Control ................................................................................................................ 4-41

General Overview ................................................................................................................. 4-41

Standard Low Level Interface ............................................................................................... 4-41

D620-ECG Low Level Interface ............................................................................................ 4-42

KONE HLI/KONE ELINK High Level Interface...................................................................... 4-43

KONE IP High Level Interface............................................................................................... 4-44

KONE IP Elevator Support.................................................................................................... 4-44

OTIS E.M.S. - Security / B.M.S. Protocol High Level Interface............................................. 4-47

OTIS Compass High Level Interface..................................................................................... 4-50

Basic Definitions.................................................................................................................... 4-52

Performance Considerations................................................................................................. 4-53

Cabinet Access Control ................................................................................................................. 4-53

Elevator or Cabinet Terminal ........................................................................................................ 4-54

Output ........................................................................................................................................... 4-58

Holiday .......................................................................................................................................... 4-60

Access Group ................................................................................................................................ 4-61

Elevator Access Group ................................................................................................................. 4-62

Control Door .................................................................................................................................. 4-63

Panel Soft Alarm ........................................................................................................................... 4-64

Password Change ......................................................................................................................... 4-66

Reboot .......................................................................................................................................... 4-66

Badge ............................................................................................................................................ 4-67

Input .............................................................................................................................................. 4-71

Time Zone ..................................................................................................................................... 4-75

Card Events .................................................................................................................................. 4-76

System Information ....................................................................................................................... 4-81

Control Output ............................................................................................................................... 4-84

Change Date ................................................................................................................................. 4-85

5: Maintenance

Routine Maintenance.............................................................................................................................. 5-1

Impaired Performance Conditions .......................................................................................................... 5-1

Testing Procedure................................................................................................................................... 5-2

Check Backup Battery Operation .................................................................................................... 5-2

Lithium Battery Replacement .......................................................................................................... 5-2

Field Servicing ........................................................................................................................................ 5-3

Troubleshooting ...................................................................................................................................... 5-3

Appendix A: Expanded Address S300 Bus

Appendix B: Performance Analysis

Appendix C: Grounding and Connectors

Cable Grounding..................................................................................................................................... C-1

“D-Type” Connectors .......................................................................................................................C-2

Non “D-Type” Grounding Connections ............................................................................................C-3

Installations in the USA ...................................................................................................................C-3

Installations in Europe .....................................................................................................................C-4

Card Reader Unit Grounding .................................................................................................................. C-4

viii 24-10349-8 Rev. B

This document contains confidential and proprietary information of Johnson Controls, Inc.

CK721-A Installation and Operation Table of Contents

Appendix D: Door Open/Aux Access Supervision

Purpose of Supervised Inputs................................................................................................................. D-1

Configuring the S300-SIO8..................................................................................................................... D-2

Wiring to the Reader Module .................................................................................................................. D-2

Appendix E: Database Flash Backup from the Host

Appendix F: Using a Keypad Reader on a Panel

Invoking Access Requests from a Keypad ............................................................................................. F-1

Invoking Air Crew Access Requests from a Keypad............................................................................... F-2

Invoking Timed Overrides from a Keypad............................................................................................... F-2

Invoking Panel Card Events from a Keypad ........................................................................................... F-5

Quick Guide to Using Keypad Readers .................................................................................................. F-8

Appendix G: Configuring SSH and SFTP Clients

PuTTY Client.......................................................................................................................................... G-1

WinSCP Client ....................................................................................................................................... G-5

24-10349-8 Rev. B ix

Table of Contents CK721-A Installation and Operation

x 24-10349-8 Rev. B

This document contains confidential and proprietary information of Johnson Controls, Inc.

LIST OF FIGURES

Sample CK721-A System Configuration .......................................................................................................... 1-10

10/100Base-T 4x5 Rule ................................................................................................................................... 1-11

CK721-A/P2000 Server Encrypted Communications ...................................................................................... 1-14

Wiring Between RS485B and RDR2S Module .................................................................................................. 2-6

Wiring Between RS485B and S300 I/O Module ................................................................................................ 2-6

Wiring Between Binary Input 1 and Trouble Pin ................................................................................................ 2-6

Hub to CK721-A Wiring ...................................................................................................................................... 2-7

Large Enclosure With Installed Components ................................................................................................... 2-10

One CK721-A Module Mounted in a Large Enclosure ..................................................................................... 2-10

One CK721-A Module and Two RDR2S Modules Mounted in a Large Enclosure .......................................... 2-10

Daisy Chain Module Wiring for S300-DIN-L .................................................................................................... 2-12

Small Enclosure With Installed Components ................................................................................................... 2-13

One CK721-A Module Mounted in a Small Enclosure ..................................................................................... 2-14

CK721-A Module Mounted on a DIN Rail. ....................................................................................................... 2-16

+24 VDC Connector (Part of the DC Power Harness) ..................................................................................... 2-16

Wiring Multiple Modules - Overview ................................................................................................................. 2-17

S300-L ............................................................................................................................................................... 3-3

S300-XS ............................................................................................................................................................. 3-4

S300-XXS .......................................................................................................................................................... 3-4

S300 Expansion Enclosure Knockouts .............................................................................................................. 3-5

Mounting the Panels: S300-XL .......................................................................................................................... 3-6

Mounting the Panels: S300-XS .......................................................................................................................... 3-7

Mounting the Panels: S300-XXS ....................................................................................................................... 3-7

First Level Module Locations in S300-XL .......................................................................................................... 3-8

First Level Module Locations in S300-XS .......................................................................................................... 3-9

First Level Module Location in S300-XXS ......................................................................................................... 3-9

Stacked Module Locations in S300-XL ............................................................................................................ 3-10

Stacked module Locations in S300-XS ............................................................................................................ 3-11

Stacked Module Locations in S300-XXS ......................................................................................................... 3-11

Cable Assembly for Enclosure to Enclosure Connection ................................................................................. 3-14

Cable Assembly for Enclosure to Enclosure Connection - Details ................................................................... 3-15

Power Supply ................................................................................................................................................... 3-17

Wiring Diagram for Cable Connectors ............................................................................................................. 3-19

S300-RDR2 Module ......................................................................................................................................... 3-25

Maximum Distance Between Readers and S300 Expansion Enclosures ........................................................ 3-28

Wiring Diagram, Cardkey Keypad Reader ....................................................................................................... 3-30

Wiring Diagram, Single Data Wire Cardkey Readers ...................................................................................... 3-31

Wiring Diagram, Sensor Two Data Wire Wiegand Readers ............................................................................ 3-32

Wiring Diagram, Two Data Wire Proximity Readers ........................................................................................ 3-33

Wiring Diagram, Data Wire High Current or +24 Volt Proximity Readers ........................................................ 3-34

Example of a Typical CK721-A System ........................................................................................................... 3-35

24-10349-8 Rev. B xi

List of Figures CK721-A Installation and Operation

Field Installed Metal Oxide Varistor ................................................................................................................. 3-36

S300-I16 Module .............................................................................................................................................. 3-41

S300-IO8 Module ............................................................................................................................................. 3-43

S300-SIO8 Module .......................................................................................................................................... 3-45

S300-SI8 Module ............................................................................................................................................. 3-47

Wiring Input Points (two and four-state alarms) ............................................................................................... 3-49

Circuit for two-state Inputs (normally closed) ................................................................................................... 3-49

Four-state Alarm Inputs ................................................................................................................................... 3-50

Four-State Alarm Conditions ............................................................................................................................ 3-51

Configuration of Outputs .................................................................................................................................. 3-52

Field Installed Metal Oxide Varistor ................................................................................................................. 3-53

Battery Backup for Expansion Enclosures ....................................................................................................... 3-54

S300-BAT and S300-BRK2 Assembly ............................................................................................................. 3-55

Battery Mounting for S300-XL and S300-XXS ................................................................................................. 3-56

Battery Mounting for S300-XS ......................................................................................................................... 3-56

Battery Installation Location in S300-XL .......................................................................................................... 3-57

Battery Installation Location in S300-XS .......................................................................................................... 3-57

Battery Installation Location in S300-XXS ....................................................................................................... 3-58

CK721-A Controller/P2000 Host Connection Methods ...................................................................................... 4-3

Static Route Examples ....................................................................................................................................... 4-9

Assisted Access Timing Diagram .................................................................................................................... 4-39

KONE KIC Controller with Multiple Elevator Groups ....................................................................................... 4-45

KONE KIC Controller with Multiple Elevator Groups

and Multiple CK721-A Controllers .................................................................................................................... 4-46

Primary and Backup KONE IP Controllers ....................................................................................................... 4-46

Master-Slave Elevator Configuration Layout ................................................................................................... 4-47

Using Multiple Time Blocks .............................................................................................................................. 4-75

CK721-A Access Time Performance Graph ......................................................................................................B-2

Example of D-Type Connector Grounding .........................................................................................................C-2

Example of Grounding Shielded Cable at Both Ends ........................................................................................C-3

Example of Grounding Shielded Cable at Only One End ..................................................................................C-4

Input/Output Contact Wiring ...............................................................................................................................D-3

CK705/CK720 Write DB to Flash Dialog Box ....................................................................................................E-1

xii 24-10349-8 Rev. B

This document contains confidential and proprietary information of Johnson Controls, Inc.

LIST OF TABLES

CK721-A ............................................................................................................................................................ 1-4

S300 and S300-DIN Enclosures ........................................................................................................................ 1-5

Hardware Modules ............................................................................................................................................. 1-6

Additional Equipment ......................................................................................................................................... 1-7

CK721-A System Specifications ........................................................................................................................ 1-8

CK721-A LED Functions .................................................................................................................................... 2-2

Input Power ........................................................................................................................................................ 2-5

RS232 Connectors ............................................................................................................................................. 2-7

RS232 Ports Pinout ........................................................................................................................................... 2-8

Connectors Pinout ............................................................................................................................................. 2-9

RS232A to DB9 Connection .............................................................................................................................. 2-9

Cable Requirements ........................................................................................................................................ 2-11

Cable Types ..................................................................................................................................................... 3-12

S300 Expansion Enclosure AC Power Specifications ..................................................................................... 3-16

Power Supply Components ............................................................................................................................. 3-18

LEDs On Power Supply ................................................................................................................................... 3-18

Fuse Functions and Ratings ............................................................................................................................ 3-19

S300-RDR2 Power Consumption .................................................................................................................... 3-20

S300-I16 Power Consumption ......................................................................................................................... 3-20

S300-IO8 Power Consumption ........................................................................................................................3-21

S300-SIO8 Power Consumption ...................................................................................................................... 3-21

Legacy Reader Module Firmware Versions ..................................................................................................... 3-23

RS-485 Connector Positions ............................................................................................................................ 3-24

S300-RDR2 Components ................................................................................................................................ 3-26

Reader Module Address Settings .................................................................................................................... 3-27

Reader Module Connector Callouts ................................................................................................................. 3-28

S300-RDR2 Locations of Warm-up Resistors ................................................................................................. 3-29

Legacy I/O Module Firmware Versions ............................................................................................................ 3-38

RS-485 Connector Positions ............................................................................................................................ 3-39

Input/Output Module Terminal Address Settings ............................................................................................. 3-40

S300-I16 Components ..................................................................................................................................... 3-42

S300-IO8 Components .................................................................................................................................... 3-44

S300-SIO8 Components .................................................................................................................................. 3-46

S300-SI8 Components ..................................................................................................................................... 3-47

Cabling Requirements ..................................................................................................................................... 3-48

Factory Default IP Addresses and Network Mask ............................................................................................. 4-2

Required Settings - Panel Menu ...................................................................................................................... 4-10

Panel Screen, Page 1 ...................................................................................................................................... 4-13

Panel Screen, Page 2 ...................................................................................................................................... 4-15

Panel Screen, Page 3 ...................................................................................................................................... 4-18

24-10349-8 Rev. B xiii

List of Tables CK721-A Installation and Operation

Terminal Screen, Page 1 ................................................................................................................................. 4-20

Terminal Screen, Page 2 ................................................................................................................................. 4-23

Terminal Screen, Page 3 ................................................................................................................................. 4-25

Terminal Screen, Page 4 ................................................................................................................................. 4-31

Terminal Screen, Page 5 ................................................................................................................................. 4-32

Offline Access Card Type Requirements ......................................................................................................... 4-33

Elevator or Cabinet Terminal Screen, Page 5 ................................................................................................. 4-54

Setting Flags for Generating Floor Tracking Messages ................................................................................... 4-56

Elevator or Cabinet Terminal Screen, Pages 6 and 7 ...................................................................................... 4-57

Output Screen, 1 Page Only ............................................................................................................................ 4-59

Holiday Screen, 1 Page Only ........................................................................................................................... 4-61

Access Group Screen, 1 Page Only ................................................................................................................ 4-62

Elevator Access Group Screen, 1 Page Only .................................................................................................. 4-62

Control Door Screen, 1 Page Only .................................................................................................................. 4-64

Panel Soft Alarm, 1 Page Only ........................................................................................................................ 4-65

Password Change, 1 Page Only ...................................................................................................................... 4-66

Badge Screen, Page 1 ..................................................................................................................................... 4-69

Badge Screen, Page 2 ..................................................................................................................................... 4-70

Badge Screen, Page 3 ..................................................................................................................................... 4-71

Input Screen, 1 Page Only ............................................................................................................................... 4-73

Time Zone Screen, 1 Page Only ...................................................................................................................... 4-76

Card Event Overview ....................................................................................................................................... 4-77

Card Event Screen, Page 1 ............................................................................................................................. 4-78

Card Event Screen, Page 2 ............................................................................................................................. 4-79

System Information Screen, Page 1 ................................................................................................................4-81

System Information Screen, Page 2 ................................................................................................................4-83

System Information Screen, Page 3 ................................................................................................................4-83

Control Output Screen, 1 Page Only ............................................................................................................... 4-84

Results of Command Override on a Selection ................................................................................................. 4-85

Impaired Performance Conditions ..................................................................................................................... 5-1

Troubleshooting Guidelines ............................................................................................................................... 5-3

CK721-A Using Legacy Addressing Mode .........................................................................................................B-1

CK721-A Using Physical Addressing Mode .......................................................................................................B-1

Input/Output Linking, S300-SIO8, SW1 position 4 set ON .................................................................................D-2

xiv 24-10349-8 Rev. B

This document contains confidential and proprietary information of Johnson Controls, Inc.

Chapter

INTRODUCTION

This chapter provides a general description of the CK721-A panel and related equipment. The conventions used throughout this manual are also described.

The manual is divided into the following chapters:

 Chapter 1: Introduction, defines the key terms and conventions used throughout the

manual. In addition, it describes the standard and optional equipment available for the CK721-A and the equipment’s specifications. This chapter also includes information on planning a CK721-A installation.

 Chapter 2: CK721-A and S300-DIN Enclosures, describes S300-DIN enclosures

and the components located on the CK721-A.

 Chapter 3: S300 Expansion Enclosures, provides information on the expansion

enclosures, principles to consider when installing the panels, and also contains a section on preparing the panels for operation.

 Chapter 4: CK721-A User Interface, explains how to configure the panel for

operation and how to use the interface to commission or troubleshoot the system.

 Chapter 5: Maintenance, provides information on CK721-A routine maintenance

and the basic troubleshooting steps that will assist you in keeping the CK721-A system running at peak performance.

 Appendices provide reference information regarding cabling and grounding and a

guide to using a keypad reader. They also contain information on the expanded address S300 bus configuration with related performance analysis. The SSH and SFTP client configuration is explained as well.

NOTE

Some features described in this manual are available depending on the firmware version of your controller. For details, refer to the CK721-A Software Release Notes.

MANUAL CONVENTIONS

The following items are used throughout this installation manual to indicate special circumstances, exceptions, important points regarding the equipment or personal safety, or to emphasize a particular point.

24-10349-8 Rev. B 1-1

Introduction CK721-A Installation and Operation

CAUTION

Caution messages indicate a potentially hazardous situation which, if not avoided, may result in minor or moderate personal injury and/or damage to equipment or property other than only the device itself.

NOTE

Notes indicate important points or exceptions to the information provided in the main text.

IMPORTANT

Important messages remind you that certain actions, if not performed exactly as stated, may cause damage to equipment or make your system non-operational.

KEY TERMS

NOTE

Throughout this manual, the S300-DIN modules and the S300 modules are also referred to by their short name version. Refer to Table 1-3 for details.

The following terms are used throughout this manual:

Advanced Encryption Standard (AES) – Encry in 2002; it supersedes DES. AES uses a symmetrical key algorithm.

CK721-A System – This is a general term that refers to a and expansion enclosures that communicate with the P2000 system.

CK721-A – The CK721-A contains:

 A 10/100Base-T Network Interface

 A Hitachi SH-4 processor

 System memory for storing cardholder records, system parameters, and history

 A serial connection for communication with the user interface

ption standard adopted by the U.S. government

combination of CK721-A terminals

 An RS-485 connector for communication to the modules

Encryption – The process of changing data into a form receiver. To decrypt the message, the receiver of the encrypted data must have the proper decryption key (generally protected by a strong password).

1-2 24-10349-8 Rev. B

This document contains confidential and proprietary information of Johnson Controls, Inc.

that can be read only by the intended

CK721-A Installation and Operation Introduction

Expansion Enclosure – An expansion enclosure contains only a power supply, a tamper switch and a power indicator. The indicator can be seen when the cabinet door is closed.

External Device – This general term applies to any device that is wired to the CK721-A system, such as a reader or input device. A motion sensor is one type of input device.

File Transfer Protocol (FTP) – A standard network protocol used to transfer files from one host to another over a TCP-based network.

Modules – The modules provide additional reader interfaces, input points, or output relays to the CK721-A system. Modules can be installed in the S300 expansion enclosures; RDR2S, RDR2S-A, I8O4, RDR8S, and I32O16 modules can be installed in the S300-DIN enclosures.

Panel – This generic term refers to an enclosure with the CK721-A and power supply installed. The panel contains a tamper switch, a power indicator light, and an optional battery backup.

Secure FTP (SFTP) – A program that uses SSH to transfer files. Unlike standard FTP, it encrypts both commands and data, preventing passwords and sensitive information from being transmitted in the clear over the network. It is functionally similar to FTP, but because it uses a different protocol, you can't use a standard FTP client to talk to an SFTP server, nor can you connect to an FTP server with a client that supports only SFTP.

Secure Shell (SSH) – A network protocol that allows data to be exchanged using a secure channel between two networked devices.

Telnet – A network protocol used on the Internet or local area networks to provide a bidirectional interactive text-oriented communications facility using a virtual terminal connection

User Interface – The CK721-A User Interface provides access to the CK721-A panel configuration graphical user interface (GUI) via a serial connection to a laptop (or other computer) running common terminal emulation software or via Telnet/SSH/SFTP network connection.

UNPACKING THE EQUIPMENT

Carefully inspect the shipping containers as soon as you receive them (with the delivery agent present). Some shipping companies want to have an agent present when a damaged container is opened. If a container is damaged, open it immediately, inspect the contents, and have the agent make note on the shipping document. Check the purchase order against the packing slips to ensure the order is complete. If the contents of a container are damaged in

any way, notify the carrier and your Johnson Controls any discrepancies to your Johnson Controls representative. Save the packing materials for possible return shipments.

representative immediately. Report

24-10349-8 Rev. B 1-3

Introduction CK721-A Installation and Operation

GENERAL DESCRIPTION

All CK721-A panels are connected via a 10/100Base-T Ethernet network to the P2000 system. The CK721-A is intended to be mounted in an S300-DIN enclosure (large or small). Each model has a total capacity 200,000 cards and a 8000 off-line transaction base memory.

NOTE

When the number of badges exceeds 120,000, the number of access groups should be limited to 50,000.

CK721-A panels are connected via standard 10/100Base-T cabling and 10/100Base-T hubs. The CK721-A is programmed and monitored via the P2000. The CK721-A provides its own user interface through the serial connection located on the CK721-A. This interface facilitates the initial setup, as well as commissioning and troubleshooting.

The CK721-A is an advanced, intel

ligent controller. You can add modules to connect readers, monitor 2 or 4-state input points, and add output relays to perform manual or automatic control functions. In addition, input points can be linked to output relays. Communication between the CK721-A and the modules is accomplished via RS-485 per Cardkey implementation. The CK721-A uses the following modules:

 Legacy S300 modules (RDR2S, S300-RDR2, S300-I16, S300-IO8, S300-SIO8,

S300-SI8)

 RDR2SA

 I8O4

 RDR8S

 I32O16

CK721-A does not support the Dial-Up feature.

NOTE

CK721-A version 3.0 and higher does not support MTI-STI-MUX with STI and STI-E.

CK721-A Module

Table 1-1: CK721-A

Model Number Description

CK721-A A CK721-A module. Total storage capacity: 200,000 cards

d 8000 off-line transactions.

Note: Whe the number of access groups should be limited to 50,000.

1-4 24-10349-8 Rev. B

n the number of badges exceeds 120,000,

This document contains confidential and proprietary information of Johnson Controls, Inc.

CK721-A Installation and Operation Introduction

Enclosures

See Table 1-2 for a description of S300-DIN enclosures and expansion enclosures.

Table 1-2: S300 and S300-DIN Enclosures

Model Number Description

S300-DIN-S A small enclosure containing a DIN rail, a tamper switch and a

power supply S300-DIN-RDR2S, or S300-DIN-RDR2SA) and for a battery back-up unit.

S300-DIN-L A large enclosure containing DIN rails, a tamper switch and a

power supply RDR2S, RDR2S-A, or a combination thereof), and for a battery back-up unit.

. It has room for one controller (CK721-A,

. It has room for up to three modules (CK721-A,

S300-XL A large expansion enclosure co

ntaining a tamper switch, a power indicator light, and a power supply. It has room for nine additional terminals and for a battery back-up unit.

S300-XS A small expansion enclosure contain

ing a tamper switch, a power indicator light, and a power supply. It has room for five additional terminals and for a battery back-up unit.

S300-XXS An extra small enclosure containing a tamper switch, a power

icator light, and a power supply. It has room for two addi-

ind tional terminals and for a battery backup unit.

24-10349-8 Rev. B 1-5

Introduction CK721-A Installation and Operation

Modules

See the table below for a description of reader and I/O modules.

Table 1-3: Hardware Modules

Model Number Description

S300-DIN Modules

S300-DIN-RDR8S Stand-alone unit with removable connectors which can be

nted on a DIN rail or on a flat surface. The unit

mou supports up to eight readers.

This module is also refe

S300-DIN-I32O16 Stand-alone unit with removable connectors which can be

nted on a DIN rail or on a flat surface. The unit

mou supports up to 32 4-state inputs and 16 outputs.

This module is also referred to as the I32O16.

S300-DIN-RDR2SA Stand-alone unit with removable connectors which can be

ounted on a DIN rail or on a flat surface.The unit

m supports up to two readers.

This module is also referr

rred to as the RDR8S.

ed to as the RDR2S-A.

S300-DIN-I8O4 Stand-alone unit with removable connectors which can be

nted on a DIN rail or on a flat surface. The unit

mou supports up to 8 4-state inputs and 4 outputs.

This module is also referred to as the I8O4.

S300-DIN-RDR2S Stand-alone RDR2S unit which can be mounted on a DIN

ail or on a flat surface.

This module is also refe

rred to as the RDR2S.

S300 Modules

S300-RDR2 Two reader interfaces per module.

This module is also refe

rred to as the RDR2.

S300-I16 Sixteen 2-state inputs.

This module is also referred to as the I16.

S300-IO8 Eight 2-state inputs a

nd eight outputs.

This module is also referred to as the IO8.

S300-SIO8 Eight 4-state inputs a

nd eight outputs.

This module is also referred to as the SIO8.

S300-SI8 Eight 4-state inputs.

This module is also referred to as the SI8.

1-6 24-10349-8 Rev. B

This document contains confidential and proprietary information of Johnson Controls, Inc.

CK721-A Installation and Operation Introduction

Additional Equipment

See Table 1-4 for a description of batteries and their corresponding bracket kits, power supplies, transformer, and parts accesso

Table 1-4: Additional Equipment

Model Number Description

S300-BAT Battery for uninterruptible power operation, 12 volts, 7Ah.

r use in expansion enclosures and S300-DIN-L (two

Fo backup batteries are used per enclosure).

ry kit.

S300-DIN-BRK Battery bracket kit for either S3

S300-BAT-2.8AH 12V, 2.8Ah battery for S300-DIN-S (two backup batteries are

sed per enclosure).

S300-BRK2 Battery bracket kit, b

interconnecting cable for installing S300-BAT to inside of door of expansion enclosures.

S300-XFMR 120 VAC to 24 VAC plug-in transformer. Required for

0-DIN-S and expansion enclosures.

S30

S300-DIN-L-PS Power supply, 24VDC out, 110/220VAC 50/60Hz in.

S300-DIN-S-PS Power supply, 24VDC out, 24VAC in.

S300-PS Power supply, 5VDC/12VDC out, 24VAC in.

S300-DIN-PA1 Parts Accessory Kit. Contains a DC power harness, a lock, a

mper switch, and two spare connectors (3-position and

ta 4-position).

racket with mounting hardware, and

00-DIN-L or S300-DIN-S.

24-10349-8 Rev. B 1-7

Introduction CK721-A Installation and Operation

SPECIFICATIONS (ALL PANELS)

The following table lists specifications for the CK721-A systems:

Table 1-5: CK721-A System Specifications

Item Specification

Ambient Temperature 32 to 122 °F (0 to 50° C)

Humidity 20% to 80% non-condensing

Ventilation Cabinets require free movement of air over all

xposed surfaces

S300-DIN-L 16x20x6.6 in (41x51x17 cm)

Approximate weight: fully loaded 45lb (20 kg)

S300-DIN-S 12x12x6 in (30x30x15 cm)

Approximate weight: fully loaded 24lb (11 kg)

S300-XL 21x16x5.5 in (53x41x14 cm)

Approximate weight: fully loaded 33lb (15 kg)

S300-XS 16x13.5x5.5 in (41x34x14 cm)

Approximate weight: fully loaded 22lb (10 kg)

S300-XXS 13x9x5.5 in (39x27x14 cm)

Approximate weight: fully loaded 10lb (4.5 kg)

Cabling Described in Chapter 2 and Chapter 3.

Backup Battery S300-BAT in expansion enclosures: minimum three

urs sustained operation at full load.

S300-BAT in S300-DIN-L: minimum one hour sustained operation at full load.

S300-BAT-2.8AH in S300-DIN-S: minimum one and a ha

lf hours sustained operation at full load.

1-8 24-10349-8 Rev. B

This document contains confidential and proprietary information of Johnson Controls, Inc.

CK721-A Installation and Operation Introduction

CK721-A PANEL CONFIGURATION

Expanded Address S300 Bus Configuration

Each CK721-A can support up to 64 logical terminal numbers assigned to reader modules and I/O modules. The expanded address S300 bus configuration requires the use of the following hardware module types:

 RDR2S-A

 I8O4

 RDR8S

 I32O16

For optimum 64 terminal access grant response time, only (RDR2S-A, I8O4, RDR8S, I32O16) hardware module types should be used. Legacy Reader and Legacy I/O hardware module types, RDR2, IO8, I16, SI08, SI8, and RDR2S, have a significant impact on access grant times, and should not be used under the expanded address S300 bus configuration.

See Appendix A: Expanded Address S300 Bus for further details on the expanded address S300 bus configuration and programming.

NOTE

For fastest response times, the terminals should be defined on as few S300 modules as possible, and all S300 modules should be operating in physical addressing mode. The typical response time to an access request in an idle CK721-A with 64 terminals on 8 RDR8S modules is less than 500 ms. The typical response time to an access request in an idle CK721-A with 64 terminals on 32 RDR2SA modules is less than 1s. See Appendix B: Performance Analysis for details.

Legacy Address S300 Bus Configuration

Each CK721-A can support up to 16 logical terminal numbers assigned to reader modules, and up to 16 logical terminal numbers assigned to I/O modules. Therefore, a CK721-A supports up to 24 hardware modules within the following parameters:

 A maximum of eight RDR2 or RDR2S reader modules can be connected to a

single CK721-A for a maximum of 16 readers per CK721-A.

 All 16 logical terminal numbers apply only to IO8 and I16 hardware modules.

If you are using SIO8 or SI8 hardware modules (supervised, 4-state alarms), you can only use logical terminal numbers 1 through 8; logical terminal numbers 9 through 16 will be invalid.

24-10349-8 Rev. B 1-9

Introduction CK721-A Installation and Operation

P2000 Server

10/100Base-T Hub

RS-485

S300-XS

S300-XL

S300-DIN-S

RS-485

S300-DIN-L (Note that while S300-DIN-L

10/100Base-T Hub

To additional CK721-As

or hubs

Last terminal in S300-XL connected to the terminal in S300-XS.

CK721-A or last terminal in S300-DIN-L connected to the first terminal in the expansion enclosure.

expansion enclosures are shown, S300-DIN-S could also be used.)

CK721-A CK721-A CK721-A

System Configuration Example

Figure 1-1 illustrates a simple CK721-A system configuration. For more information on panel installation and network connectivity, see Chapter 3: S300

Expansion Enclosures and Chapter 4: CK721-A User Interface.

Figure 1-1: Sample CK721-A System Configuration

Maximum Enclosure Distance

CK721-A communicates with the P2000 server via a 10/100Base-T Ethernet and TCP/IP protocol, therefore cabling of the system needs to comply with the industry-standard network guidelines.

10/100Base-T Networking Guidelines (specific to the CK721-A)

As a network device, the CK721-A can be installed in a variety of configurations based on the needs of your sites. The CK721-A communicates with the P2000 server through one or more 10/100Base-T hubs.

1-10 24-10349-8 Rev. B

This document contains confidential and proprietary information of Johnson Controls, Inc.

CK721-A Installation and Operation Introduction

Segment 2

Segment 1

Segment 3

Segment 4

Segment 5

Hub 2

(external)

Hub 3

(external)

Hub 1

(external)

Hub 4

(external)

Last CK721-A

(network device)

Segments between hubs and CK721-A panels are not calculated in the 4x5 rule, unless the CK721-A is the last device on the network.

The term last means connected to the fourth hub in the network.

Last CK721-A

(network device)

Segment 5

Note that all devices connected to Hub 4 are considered Segment 5.

Maximum distance for any segment is 354 ft (100 m).

P2000 Server

The CK721-A must be installed using the standard 10/100Base-T four by five (annotated 4x5) rule. The rule states that:

 The 10/100Base-T network may contain a maximum of four hubs and five

segments. Another explanation: a maximum of four hubs can be installed between the P2000 server and the last CK721-A panel in the network.

 The maximum segment length is 328 ft (100 m). This is the distance between

two hubs, or the distance between a hub and a network device such as the CK721-A.

 Wiring from a CK721-A to a hub is straight through. Specifically: CAT-5, 8

conductor cable, RJ45 connectors.

The following diagram illustrates the 4x5 rule.

Figure 1-2: 10/100Base-T 4x5 Rule

NETWORK COMMUNICATION

The CK721-A panels communicate with the P2000 server via 10/100Base-T Ethernet network. The communication protocol used is TCP/IP. The following subsections provide basic information regarding TCP/IP and 10/100Base-T networks and explain how the communication is accomplished. Because this type of network is very popular (TCP/IP is the principal protocol used on the Internet), reference materials are available in your local library or bookstore if you need more information.

24-10349-8 Rev. B 1-11

Introduction CK721-A Installation and Operation

TCP/IP

TCP/IP (Transmission Control Protocol/Internet Protocol) is a standard protocol allowing different devices, both hardware and software, to communicate over a network. For example, a network device can be a PC running an accounting application from a central server. Specific to Cardkey systems, network devices are the servers (running the P2000 software), networked remote Workstations, hubs, and the CK721-A panel.

While TCP/IP contains what may be thought of as a suite of network protocols, these two are the most important. TCP/IP is the primary network protocol used in UNIX systems. The phrase used here, UNIX systems, may seem confusing when one

sees that computer network access is primarily accomplished through Microsoft Windows-based operating systems, not UNIX systems. However, the servers (Web servers, for example) have generally been UNIX-based. Windows NT and Windows 2000, which have become popular as a network server operating systems in recent years, also use TCP/IP as a communication protocol. This is because the purpose of network protocols is to connect different devices.

Addressing

From an installation and operation standpoint, the only aspect of the TCP/IP protocol most users are concerned with is the IP address. Each networked device on a TCP/IP, 10/100Base-T Ethernet, must be assigned a unique IP address. The CK721-A is no exception. In basic terms, network communication is accomplished through the transmission and receipt of packets. Packets contain a variable length of data, along with the IP address of the device to which the packet is addressed. A network device knows its own IP address and accepts (or rejects) packets based on the match of that address. This is a very basic description, and as stated earlier, more information is available from a variety of other sources.

The network device must have a unique IP address. The performance of an entire network can be compromised if two devices share the same address.

10/100Base-T Ethernet

10/100Base-T Ethernet (also referred to simply as 10/100Base-T) is the physical network connecting the P2000 server to the CK721-A panels. 10/100Base-T provides reliable connections using a series of hubs to lengthen a network’s distance at a local level. Bridges, routers, and network switches increase a network’s size to greater distances across states or over continents.

The basic unit of 10/100Base-T networks (and others as well) is the LAN (Local Area Network). Johnson Controls recommends the P2000 system be on its own LAN, meaning a single self-contained network not connected to any other network. This will allow you to maintain security and implement a simple IP addressing scheme.

1-12 24-10349-8 Rev. B

This document contains confidential and proprietary information of Johnson Controls, Inc.

CK721-A Installation and Operation Introduction

Communication Modes

The P2000 communicates with terminals that provide reader interfaces, input points, or output relays. Communication is bi-directional. Some messages are sent from the P2000 server to the field panels, and others are sent from the panels to the server, and then forwarded to P2000 workstations. The volume of messages across the communication link depends on the operating mode of the system.

System performance where communication is concerned can be defined as the speed at which access decisions are made after a card is used. While several factors affect overall system performance, the most significant factor is the operation mode, which you can define when programming the system. The P2000 software provides three operating modes:

 Local. In this mode, all access decisions are made by the field panels. This

eliminates the need for panels to communicate with the server every time an access request is presented at a reader. Local mode provides the best overall system performance.

 Central. This mode is useful when you want to assign access restrictions on a

global scale (throughout the entire system). All access requests are forwarded to the server for an access grant or deny decision.

 Shared. With this mode, access decisions can be made at the panel level or

by the server. Field panels will first search for a card in their memory, as in Local Mode. If a card’s record is not found at the panel level, the access request is then forwarded to the Server, as in Central mode. Shared mode is useful when a panel’s card capacity is exceeded.

More information on the P2000 operating modes is provided in the P2000 Software User Manual.

CK721-A/P2000 Server Encrypted Communications

This feature provides encrypted network communications between the CK721-A controller and the P2000 Server, using the Advanced Encryption Standard (AES256).

The CK721-A Encryption is implemented using the Federal Information Processing Standards (FIPS) 140-2, validated (Certificate #1051), cryptographic module (version 1.2.3) from the Open Source Software Institute (http://www.oss-institute.org).

The following network communications channels are encrypted:

 Priority

 Upload

 Download

24-10349-8 Rev. B 1-13

P2000 ServerCK721-A Controller

Priority Channel

Upload Channel

Download Channel

Priority Service

Upload Service

Download Service

Introduction CK721-A Installation and Operation

Figure 1-3: CK721-A/P2000 Server Encrypted Communications

 To enab

le encryption between the CK721-A controller and the P2000

Server:

1. At the P2000 Server (see the P2000 Softwa

 In the Edit Panel dialog box, under the Encryption tab, enter a value for

re User Manual for details):

the encryption key. The value must be unique for each CK721-A controller.

 After entering the key, enable the encryption.

2. At the CK721-A controller:

 Log in with user name CK720 and password master.

 In page 3 of the Panel dialog, enter a unique encryption key value.

 After entering the key, enable the encryption.

 Perform the “write to flash” operation.

NOTES

The FIPS encryption package validation process requires a reboot of the controller after turning the encryption on or off. The FIPS Encryption validation process takes about 10-20 additional minutes to complete the controller reboot. All controller functions are disabled during that time.



For the CK721-A controller to come on-line with the P2000 Server, the encryption key values at the CK721-A controller and at the P2000 server must match, and the encryption must be enabled at both sides.



When encryption is enabled, Telnet and FTP network connections are rejected by the CK721-A controller.



Administrator should change the CK721-A controller login password for CK721-A controllers that have Encryption enabled.



1-14 24-10349-8 Rev. B

This document contains confidential and proprietary information of Johnson Controls, Inc.

+ 204 hidden pages

Johnson Controls CK721-A Installation And Operation Manual

Specifications and Main Features

Frequently Asked Questions

User Manual

TABLE OF CONTENTS

LIST OF FIGURES

LIST OF TABLES

INTRODUCTION

MANUAL CONVENTIONS

KEY TERMS

UNPACKING THE EQUIPMENT

GENERAL DESCRIPTION

CK721-A Module

Enclosures

Modules

Additional Equipment

SPECIFICATIONS (ALL PANELS)

CK721-A PANEL CONFIGURATION

Expanded Address S300 Bus Configuration

Legacy Address S300 Bus Configuration

System Configuration Example

Maximum Enclosure Distance

10/100Base-T Networking Guidelines (specific to the CK721-A)

NETWORK COMMUNICATION

TCP/IP

Addressing

10/100Base-T Ethernet

Communication Modes

CK721-A/P2000 Server Encrypted Communications