Zebra Technologies FX7500 Operators Guide

FX7500
Draft 2
RFID READER
INTEGRATOR GUIDE
Draft 2
FX7500 RFID READER
Draft 2
INTEGRATOR GUIDE
MN000026A04
July 2016
ii FX7500 RFID Reader Integrator Guide
Draft 2
No part of this publication may be reproduced or used in any form, or by any electrical or mechanical means, without permission in writing from Zebra. This includes electronic or mechanical means, such as photocopying, recording, or information storage and retrieval systems. The material in this manual is subject to change without notice.
The software is provided strictly on an “as is” basis. All software, including firmware, furnished to the user is on a licensed basis. Zebra grants to the user a non-transferable and non-exclusive license to use each software or firmware program delivered hereunder (licensed program). Except as noted below, such license may not be assigned, sublicensed, or otherwise transferred by the user without prior written consent of Zebra. No right to copy a licensed program in whole or in part is granted, except as permitted under copyright law. The user shall not modify, merge, or incorporate any form or portion of a licensed program with other program material, create a derivative work from a licensed program, or use a licensed program in a network without written permission from Zebra. The user agrees to maintain Zebra’s copyright notice on the licensed programs delivered hereunder, and to include the same on any authorized copies it makes, in whole or in part. The user agrees not to decompile, disassemble, decode, or reverse engineer any licensed program delivered to the user or any portion thereof.
Zebra reserves the right to make changes to any software or product to improve reliability, function, or design. Zebra does not assume any product liability arising out of, or in connection with, the application or use of any
product, circuit, or application described herein. No license is granted, either expressly or by implication, estoppel, or otherwise under any Zebra Technologies
Corporation, intellectual property rights. An implied license only exists for equipment, circuits, and subsystems contained in Zebra products.
Zebra and the Zebra head graphic are registered trademarks of ZIH Corp. The Symbol logo is a registered trademark of Symbol Technologies, Inc., a Zebra Technologies company.
Zebra Technologies Corporation Lincolnshire, IL U.S.A. http://www.zebra.com

Warranty

For the complete Zebra hardware product warranty statement, go to:
http://www.zebra.com/warranty.

Revision History

Draft 2
Changes to the original manual are listed below:
Change Date Description
-01 Rev A 1/2014 Initial release
-02 Rev 2/2015 Zebra Re-Branding
-03 Rev 4/2016 Updates for SNAP; updated screen shots.
-04 Rev 7/2016 Updates:
- Changed the installing antenna separation distance to 13.4 in (34 cm).
- Changed max antenna gain exceed to + 6.6dBiL.
- Changed
- Changed
Max Conducted RF Power at Antenna Input for US in table 3-1. Max Antenna Gain Allowed for US in table 3-1.
iii
iv FX7500 RFID Reader Integrator Guide
Draft 2
TABLE OF CONTENTS
Draft 2
Warranty ......................................................................................................................................... ii
Revision History.............................................................................................................................. iii
About This Guide
Introduction..................................................................................................................................... ix
Configurations........................................................................................................................... ix
Chapter Descriptions ...................................................................................................................... x
Notational Conventions................................................................................................................... xi
Related Documents and Software.................................................................................................. xi
Service Information......................................................................................................................... xii
Chapter 1: Quick Start
Introduction..................................................................................................................................... 1-1
Quick Start Demonstration.............................................................................................................. 1-1
Step 1, Setup ........................................................................................................................... 1-1
Step 2, Connecting to the Reader ............................................................................................ 1-2
Step 3, First Time / Start-Up Login .......................................................................................... 1-3
Step 4, Set Region ................................................................................................................... 1-4
Step 5, Read Tags ................................................................................................................... 1-6
Chapter 2: Getting Started
Introduction..................................................................................................................................... 2-1
RFID Technology Overview............................................................................................................ 2-1
RFID Components ................................................................................................................... 2-2
FX7500 RFID Readers .................................................................................................................. 2-3
Versions and Kits ..................................................................................................................... 2-4
FX7500 RFID Reader..................................................................................................................... 2-4
FX7500 RFID Reader Rear Panel ........................................................................................... 2-5
FX7500 RFID Readers LEDs ................................................................................................... 2-5
FX7500 RFID Reader Features ..................................................................................................... 2-7
Configuration and Upgrading ................................................................................................... 2-7
vi FX7500 RFID Reader Integrator Guide
Draft 2
Tag Management ..................................................................................................................... 2-7
Device Management ................................................................................................................ 2-7
Logging .................................................................................................................................... 2-7
Connection Options ................................................................................................................. 2-7
Chapter 3: Installation and Communication
Introduction..................................................................................................................................... 3-1
Unpacking the Reader.................................................................................................................... 3-1
Mounting and Removing the Reader.............................................................................................. 3-2
Mounting Tips .......................................................................................................................... 3-2
Mounting Using the Mounting Plate ......................................................................................... 3-2
Direct Mounting (Without the Mounting Plate) ......................................................................... 3-3
Connecting Antennas ..................................................................................................................... 3-4
Communications Connections ....................................................................................................... 3-5
Ethernet Connection ................................................................................................................ 3-5
USB Connection ...................................................................................................................... 3-6
GPIO Interface Connection ...................................................................................................... 3-9
Powering the Reader...................................................................................................................... 3-10
Powering the Reader via AC Power Supply ............................................................................ 3-10
Powering the Reader via Power-over-Ethernet (POE) ............................................................ 3-10
LED Sequences ............................................................................................................................. 3-11
System Start-up/Boot LED Sequence ...................................................................................... 3-11
PWR LED Sequence to Indicate IPv4 Status after Booting ..................................................... 3-11
Reset to Factory Defaults LED Sequence ............................................................................... 3-11
LED Sequence for Software Update Status ............................................................................. 3-11
Reading Tags ................................................................................................................................ 3-12
Chapter 4: Administrator Console
Introduction..................................................................................................................................... 4-1
Profiles ..................................................................................................................................... 4-2
Resetting the Reader ............................................................................................................... 4-2
Connecting to the Reader .............................................................................................................. 4-3
Connecting via Host Name ...................................................................................................... 4-3
Auto Discovery ......................................................................................................................... 4-4
Connecting via IP Address ....................................................................................................... 4-4
Using Zero-Configuration Networking when DHCP Server is Not Available ............................ 4-5
Obtaining the IP Address via Command Prompt ..................................................................... 4-5
Administrator Console Login .......................................................................................................... 4-6
First Time / Start-Up Login ....................................................................................................... 4-6
Setting the Region ................................................................................................................... 4-7
Reader Administrator Console ....................................................................................................... 4-9
Administrator Console Option Selections ................................................................................ 4-9
Status.............................................................................................................................................. 4-10
Reader Statistics............................................................................................................................. 4-11
Reader Gen2 Optional Operation Statistics ............................................................................. 4-12
NXP Custom Command Operation Statistics .......................................................................... 4-13
Event Statistics ........................................................................................................................ 4-14
Other Custom Command Operation Statistics ......................................................................... 4-15
Configure Reader .......................................................................................................................... 4-16
Table of Contents vii
Draft 2
Reader Parameters (General) ................................................................................................. 4-16
Read Points ............................................................................................................................. 4-17
Read Points - Advanced .......................................................................................................... 4-18
Configure Region ..................................................................................................................... 4-19
Certificates ............................................................................................................................... 4-20
Read Tags ..................................................................................................................................... 4-30
Communication Settings ................................................................................................................ 4-31
Configure Network Settings - Ethernet Tab ............................................................................. 4-31
Configure Network Settings - Wi-Fi Tab .................................................................................. 4-32
Configure Network Settings - Bluetooth Tab ............................................................................ 4-33
Configure LLRP Settings ......................................................................................................... 4-34
SNMP Settings ......................................................................................................................... 4-35
Wireless Settings ..................................................................................................................... 4-36
Network Services Settings ....................................................................................................... 4-37
System Time Management ............................................................................................................ 4-38
IPV6 IP Sec .................................................................................................................................... 4-39
Change Password .......................................................................................................................... 4-40
FX7500 User Accounts ............................................................................................................ 4-40
Managing User Login and Logout ............................................................................................ 4-41
GPIO............................................................................................................................................... 4-41
Applications .................................................................................................................................... 4-42
Reader Profiles ............................................................................................................................... 4-43
FIPS Support on FX7500 ......................................................................................................... 4-44
Firmware Version/Update............................................................................................................... 4-44
Firmware Update ..................................................................................................................... 4-45
Commit/Discard .............................................................................................................................. 4-45
System Log .................................................................................................................................... 4-46
Configure System Log ............................................................................................................. 4-47
Reader Diagnostics......................................................................................................................... 4-48
Shutdown........................................................................................................................................ 4-49
Chapter 5: Wi-Fi Configuration
Wireless Network Advanced Configuration..................................................................................... 5-1
Sample Configuration Files ...................................................................................................... 5-2
Preferred Configurations for Access Points ................................................................................... 5-4
AP: Zebra AP 5131 .................................................................................................................. 5-4
AP: Android Device .................................................................................................................. 5-7
iPhone ...................................................................................................................................... 5-9
Copying Files to the Reader ........................................................................................................... 5-9
Chapter 6: Application Development
Introduction..................................................................................................................................... 6-1
Reference Guides........................................................................................................................... 6-1
viii FX7500 RFID Reader Integrator Guide
Draft 2
Chapter 7: Firmware Upgrade
Introduction..................................................................................................................................... 7-1
Prerequisites................................................................................................................................... 7-1
Failsafe Update............................................................................................................................... 7-2
Update Phases ............................................................................................................................... 7-2
Updating FX7500 Reader Software ............................................................................................... 7-3
Verifying Firmware Version ...................................................................................................... 7-3
Updating Methods .................................................................................................................... 7-4
Verifying Firmware Version ...................................................................................................... 7-9
Chapter 8: Troubleshooting
Appendix A: Technical Specifications
FX7500 Kits .................................................................................................................................... A-1
KT-FX75004US-01 4-Port US Reader Kit ................................................................................ A-1
KT-FX75002US-01 2-Port US Reader Kit ................................................................................ A-1
KT-FX75004WR-01 4-Port Global Reader Kit ......................................................................... A-1
KT-FX75002WR-01 2-Port Global Reader Kit ......................................................................... A-2
Technical Specifications ................................................................................................................. A-2
Cable Pinouts ................................................................................................................................. A-4
10/100bT Ethernet / POE Connector ....................................................................................... A-4
USB Client Connector .............................................................................................................. A-5
USB Host Connector ................................................................................................................ A-5
GPIO Port Connections ........................................................................................................... A-6
Appendix B: Static IP Configuration
Introduction..................................................................................................................................... B-1
Reader IP Address or Host Name is Known -
Set the Static IP Using the Web Console................................................................................. B-1
Reader IP is Not Known (DHCP Network Not Available) -
Set the Static IP Using the Web Console ................................................................................. B-3
Appendix C: RF Air Link Configuration
Introduction..................................................................................................................................... C-1
Radio Modes................................................................................................................................... C-1
Appendix D: Connecting Wi-Fi and Bluetooth Dongles
Introduction..................................................................................................................................... D-1
Connecting to a Wireless Network Using a Wi-Fi Dongle............................................................... D-1
Connecting to a Peer Device over Bluetooth Using a Bluetooth Dongle ....................................... D-5
Table of Contents ix
Draft 2
Appendix E: Copying Files To and From the Reader
Introduction..................................................................................................................................... E-1
SCP................................................................................................................................................. E-1
FTP ................................................................................................................................................. E-1
FTPS............................................................................................................................................... E-2
Appendix F: Data Protection
Introduction..................................................................................................................................... F-1
Index
x FX7500 RFID Reader Integrator Guide
Draft 2

ABOUT THIS GUIDE

Draft 2

Introduction

This Integrator Guide provides information about installing, configuring, and using the FX7500 RFID readers and is intended for use by professional installers and system integrators. The FX7500 readers provide real time, seamless tag processing for EPC Class1 Gen2 compliant tags.
NOTE Screens and windows pictured in this guide are samples and may differ from actual screens.

Configurations

This guide includes the following FX7500 RFID reader configurations:
FX7500-42320A50-US: 4-Port FCC
FX7500-22320A50-US: 2-Port FCC
FX7500-42325A50-WR: 4-Port Worldwide
FX7500-22325A50-WR: 2-Port Worldwide
x FX7500 RFID Reader Integrator Guide
Draft 2

Chapter Descriptions

Topics covered in this guide are as follows:
Chapter 1, Quick Start provides a Quick Start tag reading demonstration.
Chapter 2, Getting Started provides an overview of RFID technology/components and a description of
the FX7500 reader and features.
Chapter 3, Installation and Communication provides information on installing and setting up the FX7500
readers.
Chapter 4, Administrator Console describes how to connect to the reader and how to use the web-based
Administrator Console to configure and manage FX7500 readers.
Chapter 5, Wi-Fi Configuration details wireless network advanced configuration and preferred
configurations for access points.
Chapter 6, Application Development provides information on developing applications for the FX7500,
and includes references to the appropriate guides.
Chapter 7, Firmware Upgrade provides reader firmware upgrade information on using the web-based
Administrator Console and an FTP or FTPS server running a host computer.
Chapter 8, Troubleshooting describes FX7500 readers troubleshooting procedures.
Appendix A, Technical Specifications includes the technical specifications for the reader.
Appendix B, Static IP Configuration describes three methods of setting the static IP address on an
FX7500 RFID Reader.
Appendix C, RF Air Link Configuration describes how to select air link configuration from a set of
available air link profiles.
Appendix D, Connecting Wi-Fi and Bluetooth Dongles describes how to connect to a wireless network
using a USB Wi-Fi dongle on the FX7500, and how to connect to a peer device over Bluetooth using a USB Bluetooth dongle.
Appendix E, Copying Files To and From the Reader describes the SCP, FTP, and FTPS protocols for
copying files.
Appendix F, Data Protection describes how the FX7500 protects RFID data in transition.

Notational Conventions

Draft 2
The following conventions are used in this document:
“RFID reader” or “reader” refers to the Zebra FX7500 RFID readers.
Italics are used to highlight the following:
Chapters and sections in this and related documents
Dialog box, window, links, software names, and screen names
Drop-down list, columns and list box names
Check box and radio button names
Icons on a screen
Bold text is used to highlight the following:
Dialog box, window and screen names
Drop-down list and list box names
Check box and radio button names
Icons on a screen
Key names on a keypad
Button names on a screen
About This Guide xi
Bullets (•) indicate:
Action items
Lists of alternatives
Lists of required steps that are not necessarily sequential.
Sequential lists (e.g., those that describe step-by-step procedures) appear as numbered lists.

Related Documents and Software

The following documents provide more information about the reader.
FX7500 RFID Reader Quick Start Guide, p/n MN000070A01
FX Series Reader Software Interface Control Guide, p/n 72E-131718-xx. Describes Low Level Reader Protocol (LLRP) and Reader Management (RM) extensions for the FX7500 reader.
RFID Demo Applications User Guide, p/n 72E-160038-01. Provides instructions for using sample applications which demonstrate how to use Zebra RFID readers.
FX7500 Embedded SDK Installation Guide. Provides instructions for installing the embedded SDK for C and Java.
FX7500 Embedded SDK Sample Application Guide. Explains how to use the embedded sample application with an integrated development environment.
FX7500 Embedded SDK Programmers Guide. Provides instructions for creating new embedded applications.
RFID3 API
EPCglobal Low Level Reader Protocol (LLRP) Standard
For the latest version of these guides and software, visit: http://www.zebra.com/support.
xii FX7500 RFID Reader Integrator Guide
Draft 2

Service Information

If you have a problem using the equipment, contact your facility's technical or systems support. If there is a problem with the equipment, they will contact the Zebra Global Customer Support Center at:
http://www.zebra.com/support.
When contacting Zebra support, please have the following information available:
Serial number of the unit
Model number or product name
Software type and version number.
Zebra responds to calls by e-mail, telephone or fax within the time limits set forth in support agreements. If your problem cannot be solved by Zebra support, you may need to return your equipment for servicing and
will be given specific directions. Zebra is not responsible for any damages incurred during shipment if the approved shipping container is not used. Shipping the units improperly can possibly void the warranty.
If you purchased your business product from a Zebra business partner, contact that business partner for support.
CHAPTER 1 QUICK START
Draft 2

Introduction

This chapter provides a Quick Start setup demonstration.

Quick Start Demonstration

The Quick Start demonstration offers a simple, temporary way to quickly set up the reader and read tags. The
demonstration includes:
Step 1, Setup on page 1-1
Step 2, Connecting to the Reader on page 1-2
Step 3, First Time / Start-Up Login on page 1-3
Step 4, Set Region on page 1-4
Step 5, Read Tags on page 1-6

Step 1, Setup

For information on complete component kits available from Zebra, see Appendix A, Technical Specifications.
1. Unpack the reader. See Unpacking the Reader o n page 3-1.
2. Set up the reader and tags on a desktop.
3. Connect the antenna to antenna Port 1. See Figure 1-1.
4. Connect the Ethernet cable to the Ethernet port. See Figure 1-1.
Connecting the reader to a subnet that supports DHCP is recommended. This Quick Start procedure is not guaranteed to work if DHCP is disabled in the reader and if the reader is connected directly to a PC.
5. Connect the AC power supply to a power outlet and connect to the power port. See Figure 1-1.
NOTE This step is not required for networks supporting Power-over-Ethernet (POE).
1 - 2 FX7500 RFID Reader Integrator Guide
Antenna Ports (Four Ports, Reverse TNC)
USB-B
Client
Power
GPIO
10/100BaseT
Ethernet (with POE)
Reset
USB-A
Host
Draft 2
6. Wait for the green power LED to stay lit. See System Start-up/Boot LED Sequence on page 3-11 for
boot-up details.
Port 1 Port 2 Port 3 Port 4 GPIO 24 VDC
Figure 1-1
FX7500 RFID Reader Rear Panel Connections

Step 2, Connecting to the Reader

To connect via host name:
1. Open a browser. Recommended browsers are IE10 (disabling Compatibility View is recommended),
Chrome v29, and FireFox 24.
2. Enter the host name, printed on the host name label on the reader, in the browser
(e.g., http://fx7500cd3b0d) and press
NOTE Connect the reader to a network that supports host name registration and lookup to ensure the network
can access the reader using the host name. For instance, some networks can register hostnames through DHCP. When first connecting to the reader, it is recommended to keep DHCP enabled in both the PC and in the reader, although it is not guaranteed that hostname will work all the time. Use the host name printed on the reader label, or construct it using the reader MAC address on the bottom of the reader. The host name is a string with the prefix FX7500, followed by the last three MAC address octets. For example, for a MAC address of 00:15:70:CD:3B:0D, use the prefix FX7500, followed by CD, 3B, and 0D, to create the host name FX7500CD3B0D. Enter http://FX7500CD3B0D in the browser address bar to access the reader.
To connect using the USB port for network connection, see Wireless Intrusion Protection System. The default USB RNDIS IP address for the reader is 169.254.10.1
Enter. The User Login window appears and the reader is ready.
Quick Start 1 - 3
Draft 2

Step 3, First Time / Start-Up Login

When starting the reader for the first time:
1. In the User Login window, enter admin in the User Name: field and enter change in the Password: field.
Figure 1-2
2. Click Login. The Region Configuration window appears.
User Login Window
NOTE If you forget the user ID and/or password, see Reset to Factory Defaults LED Sequence on page 3-11 to
reset the reader to factory defaults, and then select admin for the user name and enter change in the password field to regain access.
NOTE The Region Configuration window does not appear for US reader configurations. For these models, the
Administrator Console main window appears.
See
Figure 4-1 on page 4-2
.
1 - 4 FX7500 RFID Reader Integrator Guide
Draft 2

Step 4, Set Region

Set the region of operation. Setting the unit to a different region is illegal.
NOTE Region configuration is not available for readers configured to operate in the United States region (under
FCC rules). In this case, skip this step.
1. In the Configure Region Settings window, select the region from the drop-down menu.
Figure 1-3
2. Select the Communication Standard, if applicable.
3. Select Frequency Wireless IPSy Hopping, if applicable.
4. Select the appropriate channel(s), if applicable.
5. Select the I understand check box.
Selecting the Region
Quick Start 1 - 5
Draft 2
6. Select Set Properties to complete the region selection. The Operation Successful window appears.
Figure 1-4
7. Select Commit/Discard.
Figure 1-5
8. Click Commit to save the new region configuration and apply these changes to the reader configuration
file, or click
Successful
Region Configuration, Operation Successful Window
Commit/Discard Window
Discard to discard the region configuration changes. When the commit completes, the Commit
window appears.
1 - 6 FX7500 RFID Reader Integrator Guide
Draft 2

Step 5, Read Tags

Select Read Tags to view the Reader Operation window.
NOTE Enable Java JRE support on the browser for this page to function properly.
NOTE For security reasons browsers may block the Read T ags page. Look for a pop window that can be hidden
behind the browser or at the bottom of the screen (the taskbar in Windows) and allow the applet to run.
NOTE With older browsers, when upgrading/downgrading the FX7500, close the browser and re-open it to clear
the old version of files cached. If the java cache for applets is on, clear the cached applet before starting the browser to use the Read Tags page.
Figure 1-6
The list of tags appears in a table with the following attributes for each tag:
Read Tags Window
Click Start Inventory to initiate an on-demand scan on the connected antennas that are enabled. Click Stop Inventory to stop the inventory operation. Select the Clear Tag List check box to clear the current tag list.
EPC Id: Unique tag EPC ID. TagSeen Count: Number of times the tag is identified on the specific antenna. RSSI: Received Signal Strength Indication. Antenna Id: Antenna ID on which the tag is seen. FirstSeen time stamp: UTC time (in microseconds) when the tag was first seen. LastSeen time stamp: UTC time (in microseconds) when the tag was last seen.
CHAPTER 2 GETTING STARTED
Reader and Antenna
Host Computer
Physical/Network
Connection
RF Wave and
Response
Ta gs
Draft 2

Introduction

This chapter provides an overview of RFID technology and components, and describes the FX7500 reader and
its features.

RFID Technology Overview

RFID (Radio Frequency Identification) is an advanced automatic identification (Auto ID) technology that uses
radio frequency signals to identify tagged items. An RFID tag contains a circuit that can store data. This data
may be pre-encoded or can be encoded in the field. The tags come in a variety of shapes and sizes.
A typical RFID system consists of transponders (called tags), readers, and antennas. To read a tag the reader
sends out radio frequency waves (using attached antennas). This RF field powers and charges the tags, which
are tuned to receive radio waves. The tags use this power to modulate the carrier signal. The reader interprets
the modulated signal and converts the data to a format for computer storage. The computer application
translates the data into an understandable format.
Figure 2-1
RFID System Elements
2 - 2 FX7500 RFID Reader Integrator Guide
Draft 2

RFID Components

Zebra RFID offer low cost, long read range, and a high read rate. These features provide real time, end-to-end visibility of products and assets in the factory, distribution center, retail outlet, or other facility. A typical Zebra RFID system consists of the following components:
Silicon based RFID tags that attach to retail products, vehicles, trailers, containers, pallets, boxes, etc.
Different antenna types to support applications such as dock door (area antennas) and conveyor.
Readers power and communicate with the tags for data capture and provide host connectivity for data migration.
Tags
Tags contain embedded chips that store unique information. Available in various shapes and sizes, tags, often
transponders, receive and respond to data requests. Tags require power to send data, and are available
called with two power options:
Active Tags: typically powered by light-weight batteries and have limited life.
Passive Tags: the RFID reader generates an RF field that powers the tag. Passive tags are much lighter, less expensive, and have a much longer life than active tags.
Antennas
Antennas transmit and receive radio frequency signals. A read point is the RF range of an antenna.
Readers
Readers communicate with the tags and can transfer the data to a host computer. Readers also provide features such as filtering and tag writing. FX7500 readers read Gen2 (dense reader mode) RFID tags.

FX7500 RFID Readers

Draft 2
The Zebra FX7500 RFID readers are intelligent, C1G2 UHF RFID readers with RFID read performance that
provides real-time, seamless EPC-compliant tags processing. FX7500 RFID readers are designed for indoor
inventory management and asset tracking applications in large scale deployments. The readers can host
third-party customer-driven embedded applications.
FX7500 RFID readers are based on Zebra's strategic FX7500 reader platform and are easy to use, deploy, and
manage. The readers offer a variety of options for connecting to corporate networks using Ethernet or USB
connections. Features include:
ISO 18000-6C standard (EPC Class 1 Gen 2)
Dense reader mode capability
Enterprise-class performance
Application-specific setup for ease of installation
Power over Ethernet (POE) to eliminate the need for a power drop
SSL/SSH based security for secure data transmission
Getting Started 2 - 3
Linux operating system
Support for custom or third-party applications
Feature set for event and tag management
Support for NXP custom commands over LLRP
Radio mode support via LLRP v1.0.1
Figure 2-2
The reader provides a wide range of features that enable implementation of complete, high-performance,
intelligent RFID solutions.
FX7500 RFID reader configurations include either two or four
are used only with monostatic antennas.
FX RFID Reader
monostatic
antenna ports. The monostatic ports
2 - 4 FX7500 RFID Reader Integrator Guide
PWR ACTV STAT
APP
Antenna Ports (Reverse TNC)
LEDs
Rear Panel
Port 1 Port 2 Port 3 Port 4 GPIO 24 VDC
Antenna Ports (Four Ports, Reverse TNC)
USB-B
Client
Power
GPIO
10/100BaseT
Ethernet (with POE)
Reset
USB-A
Host
Draft 2

Versions and Kits

FX7500 RFID readers are available in a 2-port or 4-port version, individually (reader and mounting bracket) or in a kit that includes the reader, mounting bracket, an antenna, and a power supply. For detailed kit information, see FX7500 Kits on page A-1.
WARNING! For Mounting in Environmental Air Handling Space (EAHS): Do not install the Mounting
Bracket, Antenna, Cables, PSU, and PoE (Power Injector) in the EAHS unless they are suitable for use in EAHS per UL 2043.

FX7500 RFID Reader

Figure 2-3
Figure 2-4
FX7500 RFID Reader
FX7500 RFID Reader Rear Panel Connections
CAUTION Use only parts provided with the FX7500 RFID readers, or Zebra approved/recommended parts.
Substituting other cables or parts can degrade system performance, damage the reader, and/or void the warranty.

FX7500 RFID Reader Rear Panel

PWR ACT V STAT
APP
Draft 2
Getting Started 2 - 5
Table 2-1
Antenna Ports (Reverse TNC)
Reset To reset the reader insert a paper clip into the reset hole, press and hold the reset button for
GPIO See USB Client The USB client port supports (by default) a network mode of operation. This enables a
USB Host Use the USB host port to connect USB devices such as WiFi / Bluetooth over USB dongles
10/100BaseT Ethernet
Power DC connector connects to a Zebra approved power supply AC adapter (varies depending
Rear Panel Descriptions
Port Description
Two port version: Connect up to two antennas. Four port version: Connect up to four antennas.
T able A-1 on page A-2
See US/Canada and EU. See
not more than 2 seconds. This resets the reader, but retains the user ID and password.
GPIO Interface Connection on page 3-9
secondary network interface as a virtual adapter over USB. Advanced users can create a custom communication protocol on the USB port.
Connection on page 3-6
and flash memory drives. Insert a standard RJ45 Ethernet cable to connect to an Ethernet network with or without
POE capability, or to a local computer. See connection information.
on the country). Maximum power 24 VDC, 1.2 A. See for connection information.
for the maximum antenna gains and RF output powers for both
Connecting Antennas on page 3-4
for more information.
for connection information.
Ethernet Connection on page 3-5
for connection information.
See
USB
for
Powering the Reader on page 3-10

FX7500 RFID Readers LEDs

The reader LEDs indicate reader status as described in Table 2-2. For the LED boot up sequence see System
Start-up/Boot LED Sequence on page 3-11.
Figure 2-5
FX7500 RFID Readers LEDs
2 - 6 FX7500 RFID Reader Integrator Guide
Draft 2
Table 2-2
PWR Power Off
ACTV Activity Off
STAT Status Off
APP Application Green/Red/Amber Controlled through RM
LED Indications
LED Function Color/Status Description
Reader is powered off Amber Solid Red Flashing Amber Solid Green Solid
Amber Flashing Green Flashing
Red Solid Red Flashing Green Flashing
Booting
Firmware upgrade
Application initialization after booting
Reader is powered on and operational
No RF operations
On for 500 mSec indicates another tag operation
On for 500 mSec indicates a tag is inventoried or read
No errors or GPIO events
Firmware update failure
On for 500 mSec indicates an error in RF operation
On for 500 mSec indicates a GPI event

FX7500 RFID Reader Features

Draft 2

Configuration and Upgrading

Use the Administrator Console to reconfigure the reader. See Chapter 4, Administrator Console. The reader can also accept new firmware and configuration updates.

Tag Management

The Administrator Console provides the Read tags feature. See Read Tags on page 4-30. Use client applications based on Zebra EMDK (Enterprise Mobility Development Kit) such as Power Session, or LLRP (EPCGlobal Low Level Reader Protocol) for additional tag management operations such as
Filtering, Event Management and Kill.

Device Management

Quick Backup and Recovery
Use a web browser to back up and restore reader configuration by downloading the configuration XML file. Use
Administrator Console to download the file to the reader.
the
Getting Started 2 - 7
Write, Lock,
SNMP Integration
The reader can send real time notification of specific events and failures to an SNMP server.

Logging

The reader keeps a log of all system-related activities for security and troubleshooting. The log includes time-stamped system activities such as login attempts and hardware failures. Use the log to pinpoint problems, to facilitate quick resolution, and to identify administrators who may require additional training to prevent future problems. See System Log on page 4-46.

Connection Options

The FX7500 provides flexibility for connecting to networks through an Ethernet connection or the USB client port. The reader’s primary network interface is Ethernet. The Ethernet interface accesses each reader from anywhere on the network using the unique host name or IP address.
Additionally, the USB client port supports (by default) a network interface as a virtual adapter over USB. The interfaces co-exist and if the Ethernet connection fails, the application can switch to USB using a specific IP and can control the reader.
See Communications Connections on page 3-5. To use the USB port for network connection, see Wireless Intrusion Protection Systeml Wireless IPS.
Network mode of operation. This enables a secondary
2 - 8 FX7500 RFID Reader Integrator Guide
Draft 2
CHAPTER 3 INSTALLATION AND
Draft 2
COMMUNICATION

Introduction

This chapter includes the following FX7500 RFID reader installation and communication procedures:
Unpacking the Reader on page 3-1
Mounting and Removing the Reader on page 3-2
Mounting Tips on page 3-2
Mounting Using the Mounting Plate on page 3-2
Direct Mounting (Without the Mounting Plate) on page 3-3
Connecting Antennas on page 3-4
Communications Connections on page 3-5
Ethernet Connection on page 3-5
USB Connection on page 3-6
GPIO Interface Connection on page 3-9
Powering the Reader on page 3-10
Powering the Reader via AC Power Supply on page 3-10
Powering the Reader via Power-over-Ethernet (POE) on page 3-10
System Start-up/Boot LED Sequence on page 3-11
CAUTION FX7500 RFID readers must be professionally installed.
WARNING! For Mounting in Environmental Air Handling Space (EAHS): Any cables used to interconnect
to other equipment must be suitable for use in EAHS as per UL2043.

Unpacking the Reader

Remove the reader from the shipping container and inspect it for damage. Keep the shipping container, it is the approved shipping container and should be used if the reader needs to be returned for servicing.
3 - 2 FX7500 RFID Reader Integrator Guide
Draft 2

Mounting and Removing the Reader

WARNING! When installing the antenna ensure a minimum separation distance of 13.4 in (34 cm)
between the antennas and all persons.

Mounting Tips

Mount the reader in any orientation. Consider the following before selecting a location for the FX7500 reader:
Mount the reader indoors, in operating range and out of direct sunlight, high moisture, and/or extreme temperatures.
Mount the reader in an area free from electromagnetic interference. Sources of interference include generators, pumps, converters, non-interruptible power supplies, AC switching relays, light dimmers, and computer CRT terminals.
Mount the reader within 15 feet of the antennas.
Ensure that power can reach the reader.
The recommended minimum horizontal mounting surface width is 7 1/2 inches. However, the unit can mount on surfaces as narrow as 6 inches (in locations where unit overhang is not an issue). For vertical mounting the unit can mount on a surface as small as 6 inches by 6 inches.
Mount the reader onto a permanent fixture, such as a wall or a shelf, where it is not disturbed, bumped, or damaged. The recommended minimum clearance on all sides of the reader is five inches.
Use a level for precise vertical or horizontal mounting.

Mounting Using the Mounting Plate

WARNING! For Mounting in Environmental Air Handling Space (EAHS): Do not install the Mounting
Bracket in the EAHS.
1. Position the mounting plate on a flat surface (wall or shelf). Position the release tab on the top. See Figure
3-1.
2. Mark the hole locations using the mounting plate as a guide. See Figure 3-1. Remove the mounting plate
and drill holes (appropriate for the surface material) at the marked locations.
NOTE For wood surfaces, drill two 1/8" diameter by 7/8" deep holes. For drywall/masonry surfaces, drill two
3/16" diameter by 7/8" deep (min) holes and install using the provided anchors.
Installation and Communication 3 - 3
Screw Head Stops (4 typical)
Release Tab
Mounting Holes
Draft 2
Figure 3-1
3. Reposition the mounting plate over the mounting holes and secure using the supplied fasteners (as
appropriate for the surface material).
4. Position the reader by aligning the markers on the metal base plate and the wall bracket, with the key-slot
holes over the mounting screws. Gently slide the reader down to lock into place.
5. To remove the reader, press the release tab and slide the reader up while gently pulling out.

Direct Mounting (Without the Mounting Plate)

To mount the unit without using the mounting bracket:
1. Use the mounting bracket as a template to locate the holes, or locate and mark the holes on 4 3/16”
centers, +/- 1/32”.
Mounting Plate, Front
NOTE Mount the reader with the cable connections up or down, depending on the installation requirements.
CAUTION Use a hand screw driver to install the mounting plate (do not use a power driver). Do not use
excessive torque, and tighten the screws so that they are just snug on the screw head stops (see
Figure 3-1). If the reader does not engage the mounting plate, loosen the screw(s) 1/8 to 1/4 turn and
try again.
CAUTION Not using the mounting plate can affect read performance at elevated temperatures. Also, if not using
the mounting plate, secure the reader to prevent it from coming off of the mounting screws.
2. For wood surfaces, drill two 1/8" diameter by 7/8" deep holes on 4.192" centers. For drywall/masonry
surfaces, drill two 3/16" diameter by 7/8" deep (min) holes on 4.192" centers and install using the provided anchors.
3. Position the reader with the key-slot holes over the mounting screws and gently slide the reader down to
lock into place.
4. Adjust the screw head height to assure a snug fit. Or if the screws are accessible from the back, use
machine screws with a lock washer/nut and tighten the nut (from the back) to secure the reader.
3 - 4 FX7500 RFID Reader Integrator Guide
Antenna Ports (Reverse TNC)
Rear Panel
Draft 2

Connecting Antennas

WARNING! When installing the antenna ensure a minimum separation distance of 13.4 in (34 cm) between
the antenna and all persons.
CAUTION Power off the reader before connecting antennas. See Powering the Reader on page 3-10. Never
disconnect the antennas while the reader is powered on or reading tags. This can damage the reader.
Do not turn on the antenna ports from a host when the antennas are not connected. Maximum antenna gain (including any cable loss) cannot exceed + 6.6dBiL. See Table 3-1 for
corresponding maximum conducted RF power at antenna input.
When mounting the antennas outside the building, connect the screen of the coaxial cable to earth (ground) at the entrance to the building. Perform this in accordance with applicable national electrical installation codes. In the U.S., this is required by Section 820.93 of the National Electrical Code, ANSI/NFPA 70.
WARNING! For Mounting in Environmental Air Handling Space (EAHS): Do not install Antennas and
Antenna Cables in the EAHS unless they are suitable for use in EAHS as per UL 2043.
Table 3-1
Max Conducted RF Power at Antenna Input
Max Antenna Gain Allowed Max Radiated Power Allowed Antenna Type
To connect the antennas to the reader (see Figure 3-2):
1. For each antenna, attach the antenna reverse TNC connector to an antenna port.
2. Secure the cable using wire ties. Do not bend the cable.
Antenna Gain and Radiated Power
FX7500 US and Canada EU
+ 30.0dBm with + 6.0dBiL max gain antenna or + 29.36dBm with +
6.6dBiL max gain antenna
+ 6.6dBiL
4W EIRP
Circularly Polarized Plate
+29.2dBm
+ 5.5dBiL 2W ERP N/A
+ 29.79dBm with + 6.0dBiL max gain antenna or + 29.36dBm with + 6.6dBiL max gain antenna
+ 6.6dBiL 4W EIRP
Circularly Polarized Plate
Taiwan
Figure 3-2
FX7500 RFID Reader Ante nna Connection

Communications Connections

Draft 2
Use a standard Ethernet connection, a standard POE, or POE + Ethernet connection to connect the FX7500 reader to a host or network.

Ethernet Connection

The reader communicates with the host using an Ethernet connection (10/100Base-T Ethernet cable). This connection allows access to the With a wired Ethernet connection (10/100Base-T cable), power the FX7500 reader using either the reader Zebra AC power supply, or by Power-Over-Ethernet through the Ethernet cable.
Ethernet: Power through AC Outlet
The FX7500 reader communicates to the host through a 10/100Base-T Ethernet cable and receives power through a Zebra AC power supply.
1. Route the Ethernet cable.
2. Route the power cable.
Administrator Console, used to change reader settings and control the reader.
Installation and Communication 3 - 5
3. Terminate the Ethernet cable according to Table A-2 on page A-4.
4. Connect the Ethernet cable to the LAN port on the FX7500 reader. See Figure 2-4 on page 2-4.
5. Connect the other end of the Ethernet cable to the host system LAN port.
6. Connect the Zebra AC power supply to a wall outlet.
7. Insert the power supply barrel connector into the FX7500 reader power port. See Figure 2-4 on page 2-4.
8. Verify that the unit booted properly and is operational. See System Start-up/Boot LED Sequence on page
3-11.
9. On a networked computer, open an internet browser and connect to the reader. See Connecting to the
Reader on page 4-3.
10. Log in to the Administrator Console. See Administrator Console Login on page 4-6.
Ethernet: Power through Standard POE or POE+
The POE installation option allows the FX7500 reader to communicate and receive power on the same 10/100Base-T Ethernet cable.
1. Insert the POE Ethernet connector on the RJ45 Ethernet cable into the reader 10/100BaseT Ethernet port.
See Figure 2-4 on page 2-4.
2. Connect the other end of the cable to an Ethernet network with POE capability.
3. Verify that the reader booted properly and is operational. See System Start-up/Boot LED Sequence on
page 3-11.
4. On a networked computer, open an internet browser and connect to the reader. See Connecting to the
Reader on page 4-3.
5. Log in to the Administrator Console. See Administrator Console Login on page 4-6.
CAUTION Do not connect to PoE networks outside the building.
3 - 6 FX7500 RFID Reader Integrator Guide
Draft 2
To connect to a network that is not POE capable:
1. Terminate the Ethernet cable according to Table A-2 on page A-4.
2. Connect the Ethernet cable to the FX7500 reader 10/100BaseT Ethernet port. See Figure 2-4 on page 2-4.
3. Connect the other end of the Ethernet cable to a POE power injector.
4. Connect a patch cable from the POE power injector to the host system LAN port.
5. Verify that the unit booted properly and is operational. See System Start-up/Boot LED Sequence on page
3-11.
6. On a networked computer, open an internet browser and connect to the reader. See Connecting to the
Reader on page 4-3.
7. Log in to the Administrator Console. See Administrator Console Login on page 4-6.

USB Connection

The USB client port supports (by default) a Network mode of operation. This enables a secondary network interface as a virtual adapter over USB. The interfaces co-exist and if the Ethernet connection fails, the application can switch to USB using a specific IP and can control the reader. To use the USB port for network connection, install the USB RNDIS Driver on the Windows XP PC or follow the instructions to install the Microsoft RNDIS driver for Windows 7 below.
To connect the FX7500 to the host PC, insert a USB cable into the USB client port on the reader. See Figure
2-4 on page 2-4. Connect the other end of the cable to a USB port on the host PC.
Zebra USB RNDIS Driver
To use the USB port for network connection, install the Zebra USB Remote Network Device (RNDIS) driver and enable the driver on the FX7500. The Zebra RNDIS driver supports 32-bit version operating systems Windows XP, Windows Vista, Windows 7, and Windows Server 2008. For Windows 7 32-bit and 64-bit systems, it is recommend to use Microsoft RNDIS driver (see Microsoft RNDIS Driver for Windows 7 on page
3-7).
To install the RNDIS driver on the host.
1. Download the installer file Zebra RNDIS.msi from http://www.zebra.com/support to the host PC.
2. Select this file on the host PC to install the host side drivers for using the USB Remote Network Device
Interface on the FX7500.
3. Connect a USB cable between the host and the reader. The Welcome to the Found New Hardware Wizard
screen appears.
4. Select the No, not this time radio button and click Next.
5. Select the default option Install Software Automatically (Recommended).
6. In the Hardware Installation pop-up window, select Continue Anyway.
7. Select Finish to complete the installation. This assigns the host an auto-configured IP address. The
network is now ready to use and the reader’s IP address is fixed to 169.254.10.1.
Installation and Communication 3 - 7
Draft 2
Microsoft RNDIS Driver for Windows 7
If using Windows 7:
1. After connecting a USB cable between the PC and reader, the RNDIS driver automatically installs. If it
does not, right-click on Computer and select Manage. From System Tools, select Device Manager. Under Other Devices, look for an entry for RNDIS with an exclamation icon indicating that the driver was not installed.
Figure 3-3
2. Right-click the icon and select Update Driver Software. Search for the device driver software by clicking
on Browse my computer for driver software.
3. Select Let me pick from a list of device drivers on my computer.
Computer Management Window
3 - 8 FX7500 RFID Reader Integrator Guide
Draft 2
4. Select Network adapters.
Figure 3-4
5. Select Microsoft Corporation from the manufacturer list.
6. Under Network Adapter, select Remote NDIS Compatible Device, and click Next.
After installation, the PC recognizes the reader as an RNDIS device. The PC obtains the IP address
169.254.10.102, and the reader is reachable at the IP address 169.254.10.1.
Sample Implementation
This implementation assumes that only one FX7500 reader is connected to a host PC via USB. This feature does not function with multiple readers connected to the host. Zebra recommends disabling any other network interface on the PC.
Use an application that uses RFID3 APIs such as Power Session, or use an LLRP application to connect to the reader to read tags.
1. The primary RFID server connects to the FX7500 via the Ethernet interface.
2. The host PC connects to the FX7500 via the USB port. An application on the host PC monitors
communication between the primary RFID server and FX7500 reader.
3. When the application on the host PC detects a communication failure between the primary RFID server
and the reader, it connects to and controls the reader using the USB virtual interface.
Selecting Device Type
Installation and Communication 3 - 9
Draft 2
4. The FX7500 listens on the USB virtual interface on a fixed port (49152) as well as on the standard LLRP
port (5084). To enable this, select the
Settings
console window.
Allow LLRP Connection Override check box in Configure LLRP
Figure 3-5
Only one LLRP session can be active on the reader, either through the primary Ethernet interface or through the virtual network over USB interface.
If a connection is active on one interface, a subsequent connection attempt on a second interface disconnects the first. The second connection attempt always prevails and creates a new session.

GPIO Interface Connection

This pluggable terminal block type allows connecting individual wires independently. A single connector accommodates both inputs and outputs. See Table A-5 on page A-6 for pinout information.
GPIO signals allow some flexibility. Inputs are pulled up within the reader to +5 VDC and can be shorted to ground to pull them low. This allows driving them directly via simple relay or switch contacts. Alternatively, 5V logic can drive inputs. In the logic low state, the current sourced from the reader is approximately 3 mA, so standard gates in most logic families can drive them. Current flow in the high state is negligible. When the equipment uses an external +24 VDC power supply, a +24 VDC connection is provided. This output is not available when an external 24 VDC supply is not present.
The general purpose outputs are open-drain drivers, pulled up to 5V. Each output can withstand voltages up to +30 VDC but should not be driven negative. For best results use the +24 VDC supply as a source of external current and use the outputs directly to drive 24V relays, indicator lamps, etc., wired between the 24V supply and individual general purpose outputs. Although each output can sink up to 1A, the maximum current that can be drawn from the internal 24V supply is 1A, so use an external power supply if the current requirement exceeds this. Note that the state of the general purpose outputs is inverted, e.g., driving a GPO line high at the processor pulls the corresponding output low.
Communication / Configure LLRP Settings Window
NOTE Do not connect the +24 VDC output directly to either general purpose input that tolerates voltages in
excess of 5V but is designed to operate optimally within the range of 0 to +5 VDC.
3 - 10 FX7500 RFID Reader Integrator Guide
Draft 2

Powering the Reader

CAUTION Connect the antennas before supplying power to the reader.
WARNING! For Mounting in Environmental Air Handling Space (EAHS): Do not install Power Supplies and
PoE (Power Injector) in the EAHS unless they are suitable for use in EAHS as per UL 2043.

Powering the Reader via AC Power Supply

The approved AC power supply connects to the power port on the FX7500 reader using a locking connector (see Figure 2-4 on page 2-4). The power supply is compatible with:
120V 60 Hz (North America)
230V 50 Hz (International excluding Japan)
100V 50/60 Hz (Japan).
1. Insert the power supply barrel connector into the reader power port (see Figure 2-4 on page 2-4). Rotate
the connector to lock it in place.
2. Apply power to the power supply. The green Power LED stays on to indicate the reader is powered and
ready. See System Start-up/Boot LED Sequence on page 3-11.
To power down the reader, unplug the power supply from its power source. The green Power LED turns off to indicate that the device is off and the system is not operational. Remove the connector from the reader power port.

Powering the Reader via Power-over-Ethernet (POE)

Connect the reader to either a standard POE or POE+ injectors.
1. Insert the POE Ethernet connector on the RJ45 Ethernet cable into the reader 10/100BaseT Ethernet port.
See Figure 2-4 on page 2-4.
2. Connect the other end of the cable to an Ethernet network with POE capability. See System Start-up/Boot
LED Sequence on page 3-11.
To power down the reader, remove the Ethernet cable from the network. The green Power LED turns off to indicate that the device is off and the system is not operational. Remove the connector from the 10/100BaseT Ethernet port.

LED Sequences

Draft 2

System Start-up/Boot LED Sequence

See Figure 2-5 on page 2-5 for LED locations. During system start-up:
1. All LEDs turn on for a few seconds when power is applied to the reader.
2. All LEDs turn off and the PWR LED turns amber.
3. The PWR LED turns green to indicate successful RFID application initialization.
4. When the sequence completes, the green PWR LED remains on and all other LEDs are off.

PWR LED Sequence to Indicate IPv4 Status after Booting

After the RFID application initializes:
1. The PWR LED turns green for 5 seconds to indicate success (following the sequence from System
Start-up/Boot LED Sequence).
2. The reader checks the eth0 IPv4 address and indicates the IPv4 status using the LEDs:
Installation and Communication 3 - 11
If the reader has a DHCP address, the PWR LED blinks green for 3 seconds.
If the reader has static IP address, the PWR LED blinks amber 3 seconds.
If the reader has an IP address from zero-configuration networking algorithm, the PWR LED blinks red for 3 seconds.
If the reader doesn't have valid IP, the PWR LED blinks amber and green using a 90-second timeout to indicate that it is waiting to acquire an IP address.
If it obtains a valid IP within the timeout period, the reader indicates the status as described above.
If the timeout expires before the reader obtains an IP, the PWR LED stops blinking.
3. The PWR LED again turns solid green.

Reset to Factory Defaults LED Sequence

Holding the reset button for 8 seconds resets the reader to the factory default configuration.
1. All LEDs turn on as usual when you press and hold the reset button.
2. The PWR LED blinks amber when the reset button is held.
3. The PWR LED blinks green fast 5 times to indicate that the reader detects a reset operation.
4. Release the reset button to reset the reader to factory defaults.

LED Sequence for Software Update Status

1. The PWR LED blinks red during the software update process.
2. After reset, the STAT LED blinks red if the radio module requires a firmware update.
3 - 12 FX7500 RFID Reader Integrator Guide
Draft 2

Reading Tags

After the reader powers up, test the reader. See System Start-up/Boot LED Sequence on page 3-11.
1. Enable tag reading using the web-based Administrator Console (see Read Tags on page 4-30) or control
the reader through a real-time application such as Power Session.
2. Present a tag so it is facing the antenna and slowly approach the antenna until the activity LED turns
green, indicating that the reader read the tag. See Figure 2-5 on page 2- 5. The distance between the tag and the antenna is the approximate read range.
NOTE For optimal read results, do not hold the tag at an angle or wave the tag, as this can cause the read
distance to vary.
CHAPTER 4 ADMINISTRATOR CONSOLE
Draft 2

Introduction

NOTE The screens and windows in this chapter may differ from actual screens and windows. The applications
described may not be available on (or applicable to) all devices. Procedures are not device-specific and are intended to provide a functional overview.
This chapter describes the FX7500 Reader Administrator Console functions and procedures. Access the

Administrator Console using a web browser from a host computer, and use this to manage and configure the

readers. The unique information about the reader.
Selection Menu - selects the function for the primary information window.
Primary Information Window - provides the primary function information.
Product Identification Header - identifies the product.
USB Port Status - provides details on the USB device connected to the USB host port. Hover the mouse
pointer over the blue link, available only when a device is detected.
Administrator Console main window and support windows have four areas, each containing
Help Information Window:
provides detailed information to support the primary information window
includes a scroll bar to scroll through information
includes a toggle button to turn on/off the help information window
4 - 2 FX7500 RFID Reader Integrator Guide
Selection
Menu
Primary Information Window
Product Identification Header
Help
Information
Window
Toggle On/Off Button
Help
Information
Window
Draft 2
Figure 4-1

Profiles

Use profiles for multiple reader deployments to save configuration time, as only a few APIs are needed to completely configure a reader. See Reader Profiles on page 4-43.

Resetting the Reader

To reset the reader, press and hold the reset button for not more than 2 seconds. See Figure 2-4 on page 2-4 for the reset button location. The reader reboots but retains the user ID and password. See System
Start-up/Boot LED Sequence on page 3-11.
Reader Administrator Console Main Menu
NOTE Hard rebooting the reader (disconnecting power) is not recommended as this discards all the tag events
and system log information.

Connecting to the Reader

Draft 2
NOTE This section describes procedures in a Windows environment.
To use the Administrator Console to manage the reader, first power up the reader and connect it to an accessible network. See Powering the Reader on page 3-10 and Ethernet Connection on page 3-5. The green power LED indicates that the reader is ready. If the green power LED is not lit, reset the reader. See Resetting
the Reader on page 4-2.
Connect to the reader in one of two ways:
1. Connecting via Host Name on page 4-3
2. Connecting via IP Address on page 4-4
There are three ways to assign an IP address to the reader:
1. Using DHCP on the network
2. Using Zero-Configuration Networking when DHCP Server is Not Available on page 4-5
Administrator Console 4 - 3
3. Statically assigning an IP
Any method of assigning the IP supports connection using host name or IP address. Alternatively, connect the reader directly to a local computer using zero-configuration networking. See Using Zero-Configuration
Networking when DHCP Server is Not Available on page 4-5.
NOTE When using zero-configuration networking, the FX7500 reader cannot communicate with computers on
different subnets, or with computers that do not use automatic private IP addressing.

Connecting via Host Name

To connect to the reader using the host name:
CAUTION Reader host name is not guaranteed to work at all times. Its recommended use is only in networks
where the probability for IP collisions is low, such as a network in which a DNS server is configured to work together with DHCP to register host names. Host name usage is not recommended in a network where there is no strict control to prevent IP collisions, such as informal networks that use IP static configuration without strict control.
1. Open a browser. Recommended browsers are IE10 (disabling Compatibility View is recommended),
Chrome v29, and FireFox 24.
2. Enter the host name provided on the reader label in the browser (e.g., http://fx7500cd3b0d) and press
Enter. The Console Login window appears and the reader is ready.
4 - 4 FX7500 RFID Reader Integrator Guide
Draft 2
3. Proceed to Administrator Console Login on page 4-6 to log in to the reader.
NOTE Connect the reader to a network that supports host name registration and lookup to ensure the network
can access the reader using the host name. For instance, some networks can register host names through DHCP. When first connecting to the reader, it is recommended to keep DHCP enabled in both the PC and the reader, although it is not guaranteed that the host name will work all the time. Use the host name printed on the reader label, or construct it using the reader MAC address on the reader back label. The host name is a string with prefix FX7500, followed by the last three MAC address octets. For example, for a MAC address of 00:15:70:CD:3B:0D, use the prefix FX7500, followed by the last three MAC address octets (CD, 3B, and 0D), for the host name FX7500CD3B0D. Type http://FX7500CD3B0D in the browser address bar to access the reader.
For a network that does not support host name registration and lookup, use the Power Session auto discovery feature to obtain the IP address, and use the IP address connect method.

Auto Discovery

The FX7500 can automatically belong to a network. The reader implements WS-Discovery conforming to RFID Reader Management Profile (RDMP) specification in ISO 24791-3. RDMP is based on an extension for Device Profile for Web Services (DPWS). The discovery mechanism is limited to subnets and does not work across subnets. The Power Session application supports this feature, and it lists the discovered reader using reader hostnames. Because this feature is based on WS-Discovery, the readers can also be discovered in Windows Vista and Windows 7 computers by clicking on the Network icon in a file browser.

Connecting via IP Address

To use the IP address to connect to the reader:
1. Open a browser. Recommended browsers are IE10 (disabling Compatibility View is recommended),
Chrome v29, and FireFox 24.
2. Enter the IP address in the browser (e.g., http://157.235.88.99) and press Enter. The Console Login
window appears and the reader is ready.
3. Proceed to Administrator Console Login on page 4-6 to login to the reader.
Administrator Console 4 - 5
Draft 2

Using Zero-Configuration Networking when DHCP Server is Not Available

If a DHCP server is not available, the FX7500 reader can use zero-configuration networking to automatically provide a unique network IP address. The reader can then use TCP/IP to communicate with other computers also using a zero-configuration networking-generated IP address.
NOTE When using zero-configuration networking, the FX7500 reader cannot communicate with computers on
different subnets, or that do not use automatic private IP addressing. Automatic private IP addressing is enabled by default.
The zero-configuration networking procedure is recommended when the reader is connected directly to a PC. It reduces the overhead needed to configure the reader to a static IP address.
When zero-configuration networking executes after failing to detect a DHCP server, the reader automatically assigns an IPv4 IP address to the Ethernet interface in the form 169.254.xxx.xxx. This IP address is predictable because it uses the last 2 bytes of the MAC address, usually represented as HEX values, to complete the IPv4 address. These values are converted to decimal format (e.g., if the MAC address ends with 55:9A, the IPv4 address assigned by the zero-configuration algorithm is 169.254.85.148.
Windows-based computers support APIPA/zero-configuration networking by default when DHCP fails. To enable APIPA for a Windows PC, visit http://support.microsoft.com/ and search for APIPA.

Obtaining the IP Address via Command Prompt

The Administrator Console provides the reader IP address. See Figure 4-1 on page 4-2. To obtain the reader IP address without logging into the reader, open a command window and ping the reader host name. See
Connecting via Host Name on page 4-3.
Figure 4-2
IP Ping Window
4 - 6 FX7500 RFID Reader Integrator Guide
Draft 2

Administrator Console Login

The reader has a unique first time startup sequence that requires setting a unique user ID and password and as well as the region (regulatory requirement).
NOTE The recommended browsers are IE10 (disabling Compatibility View is recommended), Chrome v29, and
FireFox 24. These browsers were tested and validated to work properly. Other browsers may or may not work properly.

First Time / Start-Up Login

When starting the reader for the first time, set a unique user ID and password and set the region of reader operation. Setting the reader to a different region is illegal.
Logging In with Default User ID and Password
1. Upon connecting to the reader with a web browser, the User Login window appears.
Figure 4-3
2. Enter admin in the User Name: field and change in the Password: field and click Login.
For global reader configurations, the
Administrator Console main window appears.
User Login Window
Region Configuration window appears. For US reader configurations, the
Administrator Console 4 - 7
Draft 2

Setting the Region

For global reader configurations, set the region of operation. Set ting the unit to a different region is illegal.
NOTE Region configuration is not available for readers configured to operate in the United States region (under
FCC rules). In this case, skip this step.
1. In the Configure Region Settings window, select the region from the drop-down menu.
Figure 4-4
2. Select the Communication Standard if applicable.
3. Select Frequency Hopping, if applicable.
4. Select the appropriate channel(s), if applicable.
5. Click the I understand check box.
6. Click Set Properties to complete the region selection. The Operation Successful window appears.
7. Select Commit/Discard from the selection menu.
Selecting the Region
NOTE Most changes to the reader require a commit to save them.
4 - 8 FX7500 RFID Reader Integrator Guide
Draft 2
Figure 4-5
8. Click Commit to apply the changes to the reader configuration file, or Discard to discard the new region
configuration changes.
When the commit completes, the the reader.
Commit/Discard Window
Commit Successful window appears. The region is now set and stored in

Reader Administrator Console

Draft 2
The Reader Administrator Console main window appears after successfully logging into the reader.
Administrator Console 4 - 9
Figure 4-6

Administrator Console Option Selections

Click an item from the selection menu on the left to select:
Reader Administrator Console Main Window
Status - see Status on page 4-10 Operation Statistics - see Reader Statistics on page 4-11
Gen2 Optional - see Reader Gen2 Optional Operation Statistics on page 4-12
NXP - see NXP Custom Command Operation Statistics on page 4-13
•Events
Other Custom - see Other Custom Command Operation Statistics on page 4-15
Configure Reader - see Configure Reader on page 4-16
Read Points - see Read Points on page 4-17
Region - see Configure Region on page 4-19
Certificates - see Certificates on page 4-20
Read Tags - see Read Tags on page 4-30
- see Event Statistics on page 4-14
Advanced - see Read Points - Advanced on page 4-18
4 - 10 FX7500 RFID Reader Integrator Guide
Draft 2
Communication - see Communication Settings on page 4-31
LLRP - see Configure LLRP Settings on page 4-34
SNMP - see SNMP Settings on page 4-35
Wireless - see Wireless Settings on page 4-36
Services - see Network Services Settings on page 4-37
Date/Time - see System Time Management on page 4-38
IP Sec - see IPV6 IP Sec on page 4-39
Change Password - see Change Password on page 4-40
GPIO - see GPIO on page 4-41
Applications - see Applications on page 4-42
Profiles - see Reader Profiles on page 4-43
Firmware - see Firmware Version/Update on page 4-44
Update - see Firmware Update on page 4-45
Commit/Discard - see Commit/Discard on page 4-45

Status

System Log - see System Log on page 4-46
Configure - see Configure System Log on page 4-47
Diagnostics - see Reader Diagnostics on page 4-48
Shutdown - see Shutdown on page 4-49
Logout - click Logout to immediately log out of the Administrator Console.
Click Status on the selection menu to view the Reader Status window. This window displays information about the reader and read points (antennas).
Figure 4-7
Reader Status Window
The Reader Status window provides consolidated reader status information:
Draft 2
System Clock: The current system clock value, in the format of [Year] [Month] [Day] [Hour: Minute:
Second] [Time Difference with UTC]. Click the link to adjust the reader date and time settings.
Up Time - Displays how long the reader has been running, in the format [Number of Days] [Number of
Hours] [Number of Minutes] [Number of Seconds].
CPU Usage: Displays the CPU usage for the system and reader applications, including customer
applications.
RAM Usage: Displays the total allocated RAM for the reader application and customer applications (if
any), the memory used, and the free memory.
Flash Usage: Displays the flash memory usage by partition.
Refresh Interval - Sets the refresh interval (in seconds) for the window. The status information refreshes
N seconds (where N is the user configured value for the refresh interval). The minimum refresh
every interval value is 10 seconds; the maximum allowed is 86,400 seconds.

Reader Statistics

Administrator Console 4 - 11
Select Operation Statistics to view the Reader Operation Statistics window. This window provides options to view the statistics of individual read points or combined statistics for all read points, including the success and failure values of statistics for each read point. The statistic count is cumulative once the reader starts or the
Reset Statistics button is selected.
Figure 4-8
Reader Operation Statistics Window
Choose ReadPoint - Select a specific read point or select All from the drop-down list to display the
statistics.
IdentificationCount - Displays the number of successful (and failed) tag inventories.
ReadCount - Displays the number of successful (and failed) tag reads.
WriteCount - Displays the number of successful (and failed) tag writes.
Lockcount - Displays the number of successful (and failed) lock operations on tags.
4 - 12 FX7500 RFID Reader Integrator Guide
Draft 2
KillCount - Displays the number of successful (and failed) kill operations on tags.
Reset Statistics - Resets all success and failure counts (including the optional Gen2 and Custom
statistics) for all read points.
Refresh Interval - Sets the refresh interval (in seconds) for this window. The statistics information for the
chosen read point is refreshed every is 10 seconds and the maximum value allowed is 86,400 seconds. Input a new value and click set a new interval.

Reader Gen2 Optional Operation Statistics

Select Gen2 Optional to view the Reader Gen2 Operation Statistics window. This window provides options to view the statistics of read points for the optional Gen2 operations the reader supports.
N seconds (where N is the set refresh interval). The minimum value
Change to
Figure 4-9
Reader Gen2 Operation Statistics Window
Choose ReadPoint - Select a specific read point from the drop-down list to display the statistics, or select All to view the combined statistics for all read points.
BlockErase - Displays the number of successful (and failed) block erase operations. BlockWrite - Displays the number of successful (and failed) block write operations. BlockPermalock - Displays the number of successful (and failed) block permalock operations. Reset Statistics - Resets all success and failure counts (including the standard Gen2 and custom
statistics) for all read points.
Refresh Interval - Sets the refresh interval (in seconds) for this window. The statistics information for the
chosen read point is refreshed every is 10 seconds and the maximum value allowed is 86,400 seconds. Input a new value and click set a new interval.
N seconds (where N is the set refresh interval). The minimum value
Change to
Administrator Console 4 - 13
Draft 2

NXP Custom Command Operation Statistics

Select NXP to view the NXP Custom Command Operation Statistics window. This window provides options to view the statistics of read points for the custom NXP operations the reader supports.
Figure 4-10
NXP Custom Command Operation Statistics Window
Choose ReadPoint - Select a specific read point from the drop-down list to display the statistics, or select All to view the combined statistics for all read points.
ChangeEAS - Displays the number of successful (and failed) change EAS operations performed on NXP
tags.
EASAlarm - Displays the number of successful (and failed) EAS alarms received from tags. SetQuiet - Displays the number of successful (and failed) set quiet operations performed on NXP tags. ResetQuiet - Displays the number of successful (and failed) reset quiet operations performed on NXP
tags. ChangeConfig - Displays the number of successful (and failed) change configuration operations
performed on NXP tags.
Reset Statistics - Resets all the success and failure counts (including the standard and optional Gen2
operation statistics) for all the read points.
Refresh Interval - Sets the refresh interval (in seconds) for this window. The statistics information for the
chosen read point is refreshed every is 10 seconds and the maximum value allowed is 86,400 seconds. Input a new value and click set a new interval.
N seconds (where N is the set refresh interval). The minimum value
Change to
4 - 14 FX7500 RFID Reader Integrator Guide
Draft 2

Event Statistics

Select Events to view the Events Statistics window. This window provides options to view the statistics of events.
Figure 4-11
Event Statistics Window
AmbientTemperatureHighAlarm - Displays the number of events raised for ambient temperature high alarm.
AmbientTemperatureCriticalAlarm - Displays the number of events raised for ambient temperature critical alarm.
PATemperatureHighAlarm - Displays the number of events raised for PA temperature high alarm. PATemperatureCriticalAlarm - Displays the number of events raised for PA temperature critical alarm. ForwardPowerHighAlarm - Displays the number of events raised for forward power high alarm. ForwardPowerLowAlarm - Displays the number of events raised for forward power low alarm. ReversePowerHighAlarm - Displays the number of events raised for reverse power high alarm. EchoThresholdAlarm - Displays the number of events raised for echo threshold alarm. DatabaseWarning - Displays the number of warning events raised whenever the radio tag list buffer is
almost full.
DatabaseError - Displays the number of events raised when the radio tag list buffer is full. GPIInformation - Displays the number of events raised for radio GPI events.
Reset Statistics - Resets all the success and failure counts for all the read points. Refresh Interval - Sets the refresh interval (in seconds) for this window. The statistics information for the
chosen read point is refreshed every is 10 seconds and the maximum value allowed is 86,400 seconds. Input a new value and click set a new interval.
N seconds (where N is the set refresh interval). The minimum value
Change to
Administrator Console 4 - 15
Draft 2

Other Custom Command Operation Statistics

Select Other Custom to view the Other Custom Command Operation Statistics window. This window provides options to view the statistics of read points for the custom operations the reader supports.
Figure 4-12
NXP Custom Command Operation Statistics Window
Choose ReadPoint - Select a specific read point from the drop-down list to display the statistics, or select All to view the combined statistics for all read points.
QTOperation - Displays the number of successful (and failed) QT operations performed on Monza4 QT
tags.
Reset Statistics - Resets all the success and failure counts for all the read points. Refresh Interval - Sets the refresh interval (in seconds) for this window. The statistics information for the
chosen read point is refreshed every is 10 seconds and the maximum value allowed is 86,400 seconds. Input a new value and click set a new interval.
N seconds (where N is the set refresh interval). The minimum value
Change to
4 - 16 FX7500 RFID Reader Integrator Guide
Draft 2

Configure Reader

Use the Configure Reader submenus to access the following functions.

Reader Parameters (General)

Select Configure Reader in the selection menu to configure reader settings using this window.
Figure 4-13
Reader Parameters
Name - Sets the user-configured reader name. Accepts up to 32 alphanumeric characters. Description - Sets a user-configured reader description. Accepts up to 32 alphanumeric characters. Location - Enter information on the reader location. Accepts up to 32 alphanumeric characters. Contact - Enter the name of the reader manager contact. Accepts up to 32 alphanumeric characters. GPI Debounce Time - Delays input events up to this time, and delivers these events only if the PIN
states remains on the same level.
Operation Status - Displays the current operation status of the reader (Enabled, Disabled, or Unknown).
Antenna Check - Controls the antenna sensing feature on the reader. Disabled indicates that the
reader does not attempt to check if an antenna is connected on the ports. When Enabled, the reader monitors the presence of an antenna on the port and only transmits RF if an antenna is connected.
Idle Mode Timeout (secs) - Turns off the radio when the reader is idle for the specified time interval. A value of 0 disables this feature. Enabling this also turns off the antenna check feature when idle mode is entered after time out.
Radio Power State - Displays the current state (On or Off) of the radio. The radio can be turned off if the Idle Mode Timeout is set to a non-zero value and the radio is not performing RF operations for a time
period greater than the time specified by this timeout. The radio turns on automatically when RF operation starts.
Administrator Console 4 - 17
Draft 2
Power Negotiation - When the Power Negotiation option is set as enabled, and committed, the FX7500
reader starts power negotiation. Power negotiation occurs only if the reader is powered from a switch that is capable of LLDP based power negotiation. If the reader is powered from a source that does not support LLDP, power negotiation can still be enabled and disabled, but the reader does not carry out any power negotiation.
The moment the power source is switched to an LLDP enabled switch, power negotiation occurs at startup if it was enabled from the UI previously.
After power negotiation is enabled, and committed, it takes approximately 2 to 5 minutes to reach the PoE+ level. This is the time taken for LLDP packet exchange between the reader and the switch for power negotiation.
These settings only affect the display. Use Commit/Discard on page 4-45 to save the changes.

Read Points

Click Read points in the selection menu to configure the read point settings and view the current read points state.
Figure 4-14
Antenna Status
Click a read point’s status button to view and/or change the selected antenna configuration.
Configure Read Points
Status buttons - indicate the status of the reader read points:
Green: Connected - Read point is enabled and an antenna is connected to the port.
Red: Not connected - Read point is enabled, but no antenna is connected to the port.
Yellow: User disabled - The user disabled the read point.
Refresh Interval - Sets the refresh interval (in seconds) to update the readpoint status. The minimum
value is 10 seconds and the maximum value allowed is 86,400 seconds. Input a new value and click
Change to set a new interval.
Maintenance mode - Places the reader in maintenance mode which intermittently drives PWR, ACT,
and STAT LEDs to easily locate the reader. Also enables quick reporting of antenna status by setting the refresh interval to 2 seconds. Note that you can not modify the refresh interval in this mode.
4 - 18 FX7500 RFID Reader Integrator Guide
Draft 2
Antenna Configuration
Choose Read Point - Select a read point to display the configuration.
Description - Enter a read point description of up to 32 alphanumeric characters.
User Configuration - Enable or disable the read point. Disabling a read point blocks RF operation using
the port/antenna.
Air Protocol - Displays the air protocols the read point supports. The reader currently supports only EPC
Class1 GEN2 air protocol.
Cable loss (dB/100 ft) - Specifies the cable loss in terms of dB per 100 feet length for the antenna cable
that is used to connect this read point port to the antenna. Refer to the specification of the antenna cable for this information. The default value is 0. Setting this and the cable length to non-zero values allows the compensating for the RF signal loss in the cable due to attenuation by specifying an appropriate increase in the transmit power for this read point. The reader uses this and the cable length value to internally calculate the cable loss. The calculated cable loss is internally added to the power level configured on the read point.
Cable length (ft) - Sets the cable length in feet of the physical cable that connects the read point port to
the antenna.
Set Properties - Select Set Properties to apply the changes. Select Commit/Discard on page 4-45 to save
the changes to the reader.

Read Points - Advanced

Click Advanced under Read points in the selection menu to view the Advanced Antenna Configuration window. Use this window to modify the transmission power and frequency configuration elements of the antenna.
Figure 4-15
Advanced Antenna Configuration
NOTE This page is not supported when LLRP is configured in secure mode.
Retrieve the current configuration of an antenna before applying the advanced configuration settings.
Draft 2
Get Configuration - Select an antenna to get the current configuration for that antenna. After login, you must get the antenna configuration for an antenna before settings can be applied. The antenna configuration page retains the retrieved settings after login if you do not refresh the page using browser refresh.
Transmit Power - Displays the current transmit power setting after selecting Get Configuration, and
allows changing the transmit power for that antenna. This transmit power level does not include cable loss compensation.
Transmit Frequency - Displays the active frequency configuration on the reader, and allows changing
the frequency for non-frequency hopping enabled regulatory regions. If hopping is enabled, the combo box displays the hop table ID.
Save Settings Permanently - Check this to save the settings permanently and persist them across
reboots.
Apply - Click to apply the settings for the selected antennas. This applies the selected transmit power
and frequency/hop table configuration to all selected antennas. The settings are applied immediately and have immediate effect on Inventory/Access operations. Also check Save Setting Permanently to persist these settings across reboots unless modified by another client.

Configure Region

Administrator Console 4 - 19
Different countries have different RF regulatory requirements. To assure regulatory compliance, select Region to set the reader for specific regulatory requirements in the country of reader operation using the
Region Settings
Because of the differing frequency requirements, there are several versions of the hardware. The list of choices on this page is limited by the software to those selections compatible with the hardware in use. Note that if only one option is compatible with the hardware, that option is selected automatically.
window.
NOTE Region configuration is not required for readers configured to operate in the United States region (under
FCC rules).
Configure
Figure 4-16
Configure Region Settings Window
Region of Operation - Select the region for the country of operation from the drop-down list. This list
includes regions which have regulatory approval to use with the current board.
4 - 20 FX7500 RFID Reader Integrator Guide
Draft 2
Communication Standard - Select the communication standard from the list of standards that the chosen
region supports. If a region supports only one standard, it is automatically selected.
Frequency Hopping - Check to select frequency hopping. This option appears only if the chosen region of
operation supports this.
Selected Channels - Select a subset of channels on which to operate (from the list of supported
channels). This option appears only if the chosen region of operation supports this.
Please confirm - Check the I understand check box to confirm your understanding that the choices are in
compliance with local regulatory requirements.
Set Properties - Click to apply the changes. Select Commit/Discard on page 4-45 to save the changes to
the reader.

Certificates

You can protect network services on the reader using SSL/TLS to secure the communication channel against eavesdropping or tampering, and optionally authenticate peer networked nodes involved in the communication. SSL/TLS protocol uses Public Key Infrastructure digital certificates. The following services on the reader support SSL/TLS:
Web Administrator Console service (HTTPS). See Network Services Settings on page 4-37.
File Transfer Service (FTPS - explicit SSL/TLS over FTP). See Network Services Settings on page 4-37.
Shell Service (SSH - by default always in secure mode).
Secure LLRP Service (refer to the EPC Global LLRP Standard, Security in TCP Transport). See the Enable Secure Mode option in Configure LLRP Settings on page 4-34.
NOTE The supported version of SSL/TLS varies between services. Different services support SSL v3 and TLS
1.0 and above.
NOTE The Validate Peer option in Secure LLRP Service configuration enables authentication of reader and/or
clients using digital certificates. You must import a custom certificate (instead of the default self-signed certificate) to the reader to enable this option. See Configure LLRP Settings on page 4-34 for details. Services other than Secure LLRP rely on password-based authentication.
NOTE The SNMP service on the reader supports SNMP v2c and does not support security.
Administrator Console 4 - 21
Draft 2
Certificate Configuration
The Certificate Configuration page is available under the Co nfigure Rea der menu when the Administrator Console is in HTTPS mode only. To enable HTTPS mode, select Communication > Services, and on the Reader Communication Parameters page select HTTPS from the Web Server drop-down menu.
Figure 4-17
Select Configure Reader > Certificates. The Certificate Configu ration page provides the current certificate details and an option to update to a custom certificate.
Figure 4-18
Setting HTTPS Mode
Certificate Configuration Page
The Current certific ate details section displays the installed certificate's details such as issuer, serial number, and validity information.
By default, the reader uses self-signed certificates (characterized by Subject name and Issuer in Current certificate details) for all secure interfaces using SSL/TLS.
4 - 22 FX7500 RFID Reader Integrator Guide
Draft 2
Self-signed certificates have restrictions, such as by default clients do not trust them because they are not issued by a trusted Certification Authority (CA). Custom trusted certificates may be beneficial in certain use cases, for example:
LLRP by default does not authenticate the client or reader. Security extensions to the standard allow client or reader authentication using digital certificates. The entities involved validate digital certificates by confirming the certificates were issued from a trusted source. Therefore a custom certificate is required to authenticate the client or reader. See the Validate Peer option in Configure LLRP Settings on
page 4-34.
By default web browsers display a warning or prevent connection to the Administrator Console when the console service is in HTTPS mode. See Network Services Settings on page 4-37. This can be an inconvenience for certain environments, particularly when browsers are configured to reject connection to servers that do not publish a trusted certificate.
FX7500 reader does not allow automatic certificate request and updating. The reader certificate must be issued externally and imported to the reader.
The Update Certificate section allows importing a custom certificate to the reader. You must use one of the digital certificate generation mechanisms to create the certificate (see Creating a Custom Certificate). The reader only supports certificates in PKCS#12 format (typically with a .pfx extension). This format uses a signed certificate, with a private key (optionally encrypted) bundled into a single file. The certificate must be hosted on a secure FTP server (running in Explicit SSL/TLS over FTP mode). The following options are used to perform the update:
FTPS URL: Full path to server, including ftps:// prefix, where the .pfx file is hosted.
FTPS User ID: User login ID to secure FTP server.
FTPS Password: Password for specified user.
PFX Password: Password for encrypted key in the .pfx file, if the key is encrypted.
NOTE The FX7500 supports only a single digital certificate. If a custom certificate is installed, the issuer of the
certificate is trusted by the reader, so any client attempting to connect to the reader over secure LLRP mode is trusted if the certificate issued to the client is from the same issuer.
NOTE The FX7500 only supports certificates using the RSA public key algorithm. When obtaining a certificate
issued from the reader or clients, ensure that RSA is the selected key algorithm.
NOTE A manual reboot of the reader is required after updating the certificate for the services using SSL/TLS.
Creating a Custom Certificate
FX7500 reader requires that custom certificates are created externally and imported to the reader using a secure FTP, as described previously. The certificate and key used by the reader must be in PKCS#12 format (a single .pfx file), while the certificate and keys used by clients interfacing to the LLRP service on the reader must be in PEM format. If you obtain a certificate in a different format it must be converted to the appropriate format using a tools such as OpenSSL (www.openssl.org).
Digital certificates are typically requested and issued from a certification authority hosted internally in an enterprise environment or by a trusted third party certification authority. The process of requesting and creating certificates varies between platforms. For example, a Windows Server environment typically uses Microsoft Certification Server to process certificate requests and issue certificates. Unix-based systems typically use
Administrator Console 4 - 23
Draft 2
OpenSSL. This guide can not document all options. The following example illustrates one method of creating custom certificates.
Custom Certificate Creation Example
The following example illustrates how to set up an OpenSSL-based certification authority to issue reader and client certificates. These scripts can be executed in a Unix operating system or on Windows with a Unix shell scripting environment such as Cygwin:
Create the following text files in a suitable folder:
caconfig.cnf - OpenSSL configuration file for Certification Authority certificate creation and signing
samplereader.cnf - OpenSSL configuration file for reader certificate creation
samplehost.cnf - OpenSSL configuration file for reader certificate creation
InitRootCA.sh - Script for initializing a new Root Certification Authority
CreateReaderCert.sh - Script for creating reader certificate
CreateClientCert.sh - Script for creating client certificate
File contents are as follows. Refer to OpenSSL (www.openssl.org) documentation for details on configuration options. Edit configuration options to accommodate the deployment environment.
4 - 24 FX7500 RFID Reader Integrator Guide
Draft 2
caconfig.cnf
# Sample caconfig.cnf file for XYZ certification authority # # Default configuration to use when one is not provided on the command line. # [ ca ] default_ca = local_ca # # # Default location of directories and files needed to generate certificates. # [ local_ca ] dir = . certificate = $dir/cacert.pem database = $dir/index.txt new_certs_dir = $dir/signedcerts private_key = $dir/private/cakey.pem serial = $dir/serial # # # Default expiration and encryption policies for certificates. # default_crl_days = 365 default_days = 1825 default_md = sha1 # policy = local_ca_policy
# # # Default policy to use when generating server certificates. The following # fields must be defined in the server certificate. # [ local_ca_policy ] commonName = supplied stateOrProvinceName = supplied countryName = supplied emailAddress = supplied organizationName = supplied organizationalUnitName = supplied
Administrator Console 4 - 25
Draft 2
# # # The default root certificate generation policy. # [ req ] default_bits = 2048 default_keyfile = ./private/cakey.pem default_md = sha1 # prompt = no distinguished_name = root_ca_distinguished_name x509_extensions = v3_ca # # # Root Certificate Authority distinguished name. Change these fields to match # your local environment! # [ root_ca_distinguished_name ] commonName = XYZ Root Certification Authority stateOrProvinceName = IL countryName = US emailAddress = ca@xyz.com organizationName = XYZ organizationalUnitName = ABC Dept # [ root_ca_extensions ] basicConstraints = CA:true
[ v3_req ] basicConstraints = CA:FALSE keyUsage = nonRepudiation, digitalSignature, keyEncipherment
[ v3_ca ] basicConstraints = critical, CA:true, pathlen:0 nsCertType = sslCA keyUsage = cRLSign, keyCertSign extendedKeyUsage = serverAuth, clientAuth nsComment = "CA Certificate"
[ ssl_client_server ] basicConstraints = CA:FALSE nsCertType = server, client
4 - 26 FX7500 RFID Reader Integrator Guide
Draft 2
keyUsage = digitalSignature, keyEncipherment extendedKeyUsage = serverAuth, clientAuth, nsSGC, msSGC nsComment = "SSL/TLS Certificate"
samplereader.cnf
# # samplehost.cnf - customized for a reader. Edit last 4 octets after FX7500 to suit hostname of reader to
which certificate is issued #
[ req ] prompt = no distinguished_name = FX7500123456.ds
[ FX75000657E5.ds ] commonName = FX7500123456 stateOrProvinceName = IL countryName = US emailAddress = root@FX7500123456 organizationName = Company Name organizationalUnitName = Department Name
samplehost.cnf
# # samplehost.cnf - customized for a client that will connect to the reader's LLRP port. Edit hostname to
match FQDN of client. #
[ req ] prompt = no distinguished_name = clienthostname.mycompany.com
[clienthostname.mycompany.com ] commonName = CLIENTHOSTNAME stateOrProvinceName = IL countryName = US emailAddress = root@clienthostname.mycompany.com organizationName = Company Name organizationalUnitName = Department Name
Administrator Console 4 - 27
Draft 2
InitRootCA.sh
#Initialize from current directory #Enable definition for environment variable OPENSSL_FIPS to execute in FIPS mode on system with
FIPS compliant OpenSSL build #export OPENSSL_FIPS=1 export WORKSPACE_DIR=$( cd "$( dirname "$0" )" && pwd ) #Make sure CA key password is unique and secret export CA_KEY_PASSWORD=CA-abcd12345 #Cleanup Certificate Store folder rm -rf $WORKSPACE_DIR/CA-Certs #Change directory to CA-Certs and create folders for certificate and key storage in myCA mkdir -p $WORKSPACE_DIR/CA-Certs cd $WORKSPACE_DIR/CA-Certs mkdir -p myCA/signedcerts mkdir -p myCA/private cd myCA #Initialize serial number echo '01' > serial && touch index.txt #Create CA private key and certificate export OPENSSL_CONF=$WORKSPACE_DIR/caconfig.cnf
echo 'Creating CA key and certificate....'
openssl req -x509 -newkey rsa:2048 -out cacert.pem -outform PEM -days 1825 -passout pass:$CA_KEY_PASSWORD
openssl x509 -in cacert.pem -out cacert.crt echo 'Test Certificate Authority Initialized. CA certificate saved in cacert.crt. Install it to trusted CA
certificate store'
4 - 28 FX7500 RFID Reader Integrator Guide
Draft 2
CreateReaderCert.sh
#Initialize from current directory #Enable definition for environment variable OPENSSL_FIPS to execute in FIPS mode on system with
FIPS compliant OpenSSL build #export OPENSSL_FIPS=1 export WORKSPACE_DIR=$( cd "$( dirname "$0" )" && pwd ) #Make sure passwords are unique and secret export CA_KEY_PASSWORD=CA-abcd12345 export GENERATED_CERT_KEY_PASSWORD=abcd12345 cd $WORKSPACE_DIR/CA-Certs/myCA #Create sample reader key and certificate export OPENSSL_CONF=$WORKSPACE_DIR/samplereader.cnf
echo 'Creating reader key and certificate with its signing request ....'
openssl req -newkey rsa:1024 -keyout reader_key.pem -keyform PEM -out tempreq.pem -outform PEM
-passout pass:$GENERATED_CERT_KEY_PASSWORD #CA now signs client certificate by processing its certificate sigining request
echo 'CA Signing reader certificate....'
export OPENSSL_CONF=$WORKSPACE_DIR/caconfig.cnf openssl ca -extensions ssl_client_server -in tempreq.pem -out reader_crt.pem -passin
pass:$CA_KEY_PASSWORD -batch rm -f tempreq.pem
echo 'Exporting reader certificate and key to PKCS#12 format....'
openssl pkcs12 -export -out reader.pfx -inkey reader_key.pem -in reader_crt.pem -certfile cacert.crt
-passin pass:$GENERATED_CERT_KEY_PASSWORD -passout pass:$GENERATED_CERT_KEY_PASSWORD
echo 'Reader certificate, key and export to PKCS#12 format (.pfx) completed.' echo 'Note: PFX protected with password: '$GENERATED_CERT_KEY_PASSWORD
Administrator Console 4 - 29
Draft 2
CreateClientCert.sh
#Initialize from current directory #Enable definition for environment variable OPENSSL_FIPS to execute in FIPS mode on system with
FIPS compliant OpenSSL build #export OPENSSL_FIPS=1 export WORKSPACE_DIR=$( cd "$( dirname "$0" )" && pwd ) #Make sure passwords are unique and secret export CA_KEY_PASSWORD=CA-abcd12345 export GENERATED_CERT_KEY_PASSWORD=abcd12345 cd $WORKSPACE_DIR/CA-Certs/myCA echo 'Current dir:'$( cd "$( dirname "$0" )" && pwd ) #Create sample client key and certificate export OPENSSL_CONF=$WORKSPACE_DIR/samplehost.cnf
echo 'Creating client key and certificate with its signing request ....'
openssl req -newkey rsa:1024 -keyout client_key.pem -keyform PEM -out tempreq.pem -outform PEM
-passout pass:$GENERATED_CERT_KEY_PASSWORD #CA now signs client certificate by processing its certificate sigining request
echo 'CA Signing client certificate....'
export OPENSSL_CONF=$WORKSPACE_DIR/caconfig.cnf openssl ca -in tempreq.pem -out client_crt.pem -extensions ssl_client_server -passin
pass:$CA_KEY_PASSWORD -batch rm -f tempreq.pem echo 'Client key, certificate creation and signing completed. Use files client_key.pem and client_crt.pem'
Script Usage
The following section illustrates how to use the previous scripts.
Certification Authority Initialization
Edit caconfig.cnf to change the configuration for CA if necessary.
Execute CA initialization command sequence by invoking ./InitRootCA.sh.
Issue Reader certificate:
Edit samplereader.cnf to update any configuration such as hostname if necessary.
Execute CreateReaderCert.sh by invoking ./CreateReaderCert.sh.
Issue Client certificate:
Certificate and key issued using this method can be directly used with the LLRP client.
Edit samplehost.cnf to update any configuration such as hostname for the client, if necessary.
Execute CreateClientCert.sh by invoking ./CreateClientCert.sh.
4 - 30 FX7500 RFID Reader Integrator Guide
Draft 2

Read Tags

Select Read T ags to view the Reader Operation window. Use this window to perform inventory on the connected antennas and view the list of inventoried tags.
NOTE Enable Java JRE support on the browser in order for this window to function properly.
NOTE This page is not supported when LLRP is configured in secure mode.
Figure 4-19
The list of tags appears in a table with the following attributes for each tag:
Read Tags Window
Start Inventory - Click to starts inventory operation on the connected antennas. If the there are no
connected antennas, no tags in the field of view, or all the antennas are user-disabled, the Read Tags window indicates that inventory successfully started but no tags display.
Stop Inventory - Stops the ongoing inventory operation. Clear Tag List - Clears the current tag list. T otal Uniq ue Tags - Indicates the number of unique tags read.
EPC Id - Unique tag EPC ID. TagSeen Count - Number of times the tag was identified on the specific antenna. RSSI - Received Signal Strength Indication. Antenna Id - Antenna ID on which the tag is seen. FirstSeen time stamp - UTC time (in microseconds) when the tag was first seen. LastSeen time stamp - UTC time (in microseconds) when the tag was last seen.

Communication Settings

Draft 2
Select Communication to view the Configure Network Settings window. This window has tabs for Ethernet, WiFi, and Bluetooth. Each tab has options for IPV4 and IPV6.

Configure Network Settings - Ethernet Tab

Administrator Console 4 - 31
Figure 4-20
IPV4
Configure Network Settings - Ethernet Tab
Obtain IPV4 Address via DHCP - The reader supports both automatic TCP/IP configuration via DHCP and manual configuration. The DHCP button turns DHCP on and off.
If DHCP is turned on, this window displays actual current values of the reader's IP address, subnet mask, default gateway, and DNS server. Because these are obtained from the DHCP server, they cannot be changed manually.
If DHCP is turned off, you can set the following values for these fields.
Current IPV4 Address - IP address (in dotted notation) at which the reader is assigned. IPV4 Subnet Mask - Subnet mask (in dotted notation) appropriate for the network in which the reader
resides. IPV4 Default Gateway - Default gateway (in dotted notation) appropriate for the network in which the
reader resides. IPV4 DNS Server - DNS server (in dotted notation) appropriate for the network in which the reader
resides. MAC Address - The MAC address of the reader.
NOTE You must click Commit to update the network configuration (see Save Changes.) If the Commit is not
successful, the system indicates the problem and allows correcting it by repeating the operation. DHCP and IP address updates do apply until the reader is rebooted.
4 - 32 FX7500 RFID Reader Integrator Guide
Draft 2
IPV6
Obtain IPV6 Address via DHCP - The reader supports both automatic TCP/IPV6 configuration via
DHCP and manual configuration. The DHCP button turns DHCP on and off.
If DHCP is turned on, this window displays actual current values of the reader's IPV6 address, prefix length, default gateway, and DNS server. Because these are obtained from the DHCP server, they cannot be changed manually.
If DHCP is turned off, you can set the following values for these fields.
Current IPV6 Address - IP address (in dotted notation) at which the reader is assigned.
Prefix Length - Prefix length appropriate for the network in which the reader resides.
IPV6 Default Gateway - Default gateway (in dotted notation) appropriate for the network in which the
reader resides.
IPV6 DNS Server - DNS server (in dotted notation) appropriate for the network in which the reader
resides.
MAC Address - The MAC address of the reader.
NOTE You must click Commit to update the network configuration (see Save Changes.) If the Commit is not
successful, the system indicates the problem and allows correcting it by repeating the operation. DHCP and IP address updates do apply until the reader is rebooted.
NOTE Also enable automatic configuration for IPV6 through RA packets configuration. To enable or disable RA
packet configuration go to the Services window (see Services).

Configure Network Settings - Wi-Fi Tab

Figure 4-21
Configure Network Settings - Wi-Fi Tab
IPV4
The reader supports only DHCP-based configuration for WIFI. This window displays the current values of the reader's IP address, subnet mask, default gateway, and DNS server. Since these are obtained from the DHCP server, they cannot be changed manually.
Administrator Console 4 - 33
Draft 2
IPV6
The reader supports only DHCP based configuration for WIFI. This window displays the current values of the reader's IPV6 address, prefix length, default gateway, and DNS server. Since these are obtained from the DHCP server, they cannot be changed manually.

Configure Network Settings - Bluetooth Tab

Figure 4-22
The reader supports only automatic IP configuration of the Bluetooth interface. If a Bluetooth client is connected to the reader, this window displays the current values of the reader's IPV4
address, Subnet mask, IPV6 address, and prefix length in the appropriate tabs. Because these are automatically configured for a reader, they cannot be changed manually.
If a Bluetooth USB dongle is connected to the reader, you can set the following Bluetooth properties in this window:
Configure Network Settings - Bluetooth Tab
Discoverable - Select whether the reader is seen by other Bluetooth-enabled devices on discovery. Pairable - Select whether any Bluetooth-enabled device can pair with reader. Use Passkey - Enable this option to mandate the connecting device to supply a pre-determined passkey
to use for authentication while pairing.
Passkey - The passkey to use for authentication. DHCP start address - The starting address of the DHCP IP range out of which an IP is assigned to the
connecting device. DHCP end address - The end address of the DHCP IP range out of which an IP is assigned to the
connecting device.
NOTE The DHCP IP range specified using the DHCP start address and DHCP end address options also
determine the IP of the Bluetooth interface of the reader. The first two octets of the IP address of the reader Bluetooth interface are taken from the IP range specified and the last two octets use the reader BD address.
4 - 34 FX7500 RFID Reader Integrator Guide
Draft 2

Configure LLRP Settings

Select LLRP to view and set the LLRP settings. By default, LLRP activates in server mode, where LLRP clients can connect to the reader using the port number specified in the reader in LLRP client mode. In this case, configure the LLRP server address in this web page as well. LLRP cannot be disabled since it is the primary native protocol for RFID for the reader.
Client port field. You can also configure the
Figure 4-23
This window offers the following fields:
LLRP configuration options when the reader is in Server mode:
LLRP configuration options when the reader is in Client mode:
Configure LLRP Settings Window
LLRP Status - Displays the current state of the LLRP server on the reader. Indicates whether LLRP is running.
Operation Mode - Sets the LLPR mode in the reader to either Server or Client.
Client IP - Displays the currently connected LLRP client's IP address. If there is no LLRP client
connection, this is 0.0.0.0.
Client Port - Configures the LLRP listening port on the reader. The default is 5084.
Connect Status - Indicates whether the client is connected. This button is grayed out if there is no client
connected. If an LLRP client is connected to the reader, this button is enabled; click this button to disconnect the client.
Server IP - Configures the IP address of the server to connect to. Client Port - Configures the LLRP host port to connect to. The default is 5084. Allow LLRP Connection Override (Fr om USB IF) - This allows the reader to listen on an alternate port
(49152) on the virtual network (over USB) interface. When an LLRP client is connected over the primary interface (Ethernet and primary LLRP port), a different client can override this connection on the alternate interface (Virtual Network and alternate port 49152) if this option is enabled. This also permits overriding a connection from a primary interface over an existing connection on an alternate interface. This option is off by default. Changing this option restarts the LLRP service on the reader.
Draft 2
Connect Status - Indicates whether the reader is connected to the LLRP host. This button toggles between ConnectLLRP and DisconnectLLRP. Clicking ConnectLLRP initiates an LLRP connection to the host server.
LLRP configuration options when the reader is in Secure mode:
Security Mode - Specifies whether LLRP communicates in secure or unsecure mode. Checking Enable Secure Mode switches the LLRP port to 5085 by default. You can override the port value. LLRP in
secure mode supports ciphers that are compliant with TLS1.2.
Validate Peer - Specifies whether the validation of peer against the same certification authority issued
certificate is required. If you select the validate peer option, the secure LLRP service on the reader allows connection for valid secure peer entities only if the certificate of the peer is issued from the same certification authority that issued the certificate for the reader. By default the reader uses self-signed certificates, and peer certificate based validation is disabled.

SNMP Settings

Select SNMP to view the Configure SNMP Settings window.
Administrator Console 4 - 35
Figure 4-24
Use this window to configure the SNMP host settings to allow sending network status events and receiving network status event notifications:
Configure SNMP Settings Window
Send SNMP T rap To - Configures the host IP address to which the SNMP trap is sent. Leave this blank to
send no traps to any host.
SNMP Community String - SNMP community string to use for SNMP set and get. SNMP Version - SNMP version to use in the reader. Supported versions are V1 and V2c. Send Server Heartbeat - Sends a heartbeat message periodically to the configured SNMP host.
NOTE Send SNMP Trap To and Send Server Heartbeat take effect immediately after clicking Set Properties.
However, perform a Commit to persist the changes. The modified SNMP Community String and SNMP Version are not affected until the reader reboots.
4 - 36 FX7500 RFID Reader Integrator Guide
Draft 2

Wireless Settings

Select Wireless to view the Reader Wireless Settings Parameters window.
Figure 4-25
Use this window to set the wireless configuration on the reader. Zebra provides native support for USB WiFi adapters with the Realtek chipset RTL 8187, and tested the following adapters:
The Wireless Settings window offers the following options:
Wireless Settings Window
Alfa AWUS036H CCrane Versa Wifi USB Adapter II
Get Details - Click to get details of the connected network, including the ESSID, signal strength, and connection status.
Disconnect - Click to disconnect from a connected network. Scan and Choose Network - Scan the available networks. Clicking this lists the ESSID in the
drop-down menu. If the ESSID is hidden (not broadcasted), enter the ESSID in the text box provided.
Passkey - Pre-shared key for the WPA/WPA2 network. Connect Automatically - Persist network setting across reboots and automatically retain association
with the configured AP.
NOTE The scan function can take several seconds. All buttons on the page are disabled while the scan is in
progress, and re-enabled when the scan completes.

Network Services Settings

Draft 2
Select Services to view the Configure Network Service Settings window.
Administrator Console 4 - 37
Figure 4-26
The reader supports the following network services.
Configure Network Service Settings Window
Web Server - Configures the web server in either HTTP (unsecure) or HTTPS (secure) mode. Shell - Sets the shell to SSH (secure) mode or a disabled state. File Server - Sets the file server to either FTP (unsecure) or FTPS (secure) mode. Disable IPV6 Stack - Select this to disable the reader's IPV6 stack. Receive RA packets - This option is only valid when the IPV6 stack is enabled. Enable this to allow IPV6
IP configuration through RA packets; otherwise obtain the IP via DHCP in the Communication window or assign statically.
NOTE You must click Commit to update the service configuration (see Save Changes.) If the Commit is not
successful, the system indicates the problem and allows correcting it by repeating the operation.
4 - 38 FX7500 RFID Reader Integrator Guide
Draft 2

System Time Management

Select Date Time to view the System Time Ma nagement window. Use this window to set the date and time value of the reader, or to specify an NTP server for the reader to synchronize with.
Figure 4-27
To specify an SNTP server, enter the SNTP server's IP address or name in the SNTP Server Name or IP Address box, and then click Set SNTP Parameters. You must select Commit for the change to take effect.
To adjust the time manually, select the appropriate value for the user's local time, and click the Set Date and Time button. This adjusts the reader's clock to the value provided if the operation is successful. Otherwise, an
appropriate message indicates the reason for the failure. You can also set the Time Zone (including use of Daylight Savings) using the drop-down menu.
System Time Management Window
NOTE The date/time and time zone changes take effect immediately, and do not require a Commit.

IPV6 IP Sec

Draft 2
Select IP Sec to view the IPV6 IP Sec window. IP Sec settings allow adding IPSec pairing of the reader with a partner with a pre-shared key.
Administrator Console 4 - 39
Figure 4-28
To add an IP Sec entry:
1. Click the Add IP Sec Entry radio button.
2. In the IP Address field, specify the IP address of the partner with whom the IP SEC communication is
intended.
3. In the Passkey field, enter the pre-shared passkey (from 6 to 15 characters) to use with the partner IP
address.
4. In the Access Level drop-down list, select the IPSec access level. Options are Transport and Tunnel
mode. Currently the reader only supports Transport mode.
5. Click the Add IP Sec Entry button.
To delete an IP Sec entry:
1. Click Delete IP Sec Entry radio button.
2. In the IP Address field, specify the IP address of the partner with whom the IP SEC communication is
configured and is to be deleted.
3. Click the Delete IP Sec Entry button.
IPV6 IP Sec Window
4 - 40 FX7500 RFID Reader Integrator Guide
Draft 2

Change Password

To ensure the controlled and secured access to reader Administrator Console functions, designate which users and computers are authorized to have system access by setting up authorized user accounts. Only users logging in with a registered user name and password can successfully access

FX7500 User Accounts

The FX7500 supports the different user accounts:
admin - This user has web access but no shell access, with full privileges to make changes on the
reader using the Administrator Console interface and to access to the reader using the FTP interface.
guest - This user has web access but no shell access, with read-only privileges in the Administrator
Console and can not make configuration changes. The guest user does not need a password to log in to the Administrator Console.
NOTE The Change Password function is not supported for the user guest.
rfidadm - This is the reader administrator, with shell access but no Administrator Console access. rfidadm has full access to the /apps directory and read-only access to most of the other directories,
including the /platform, /usr, /lib, /etc, and /bin directories. The rfidadm user can use this account to install and uninstall RFID programs and upload user applications.
Administrator Console functions.
Select
Figure 4-29
To set a user password:
Change Password to view the Change Password window.
Change Password Window
1. In the User Name drop-down list, select the user for whom to change the password.
2. In the Old Password field, enter the existing password for that user.
3. In the New Password field, enter the new password, and again in the Re-Enter Password field.
4. Click Change Password. The password changes immediately and does not require a Commit operation.

Managing User Login and Logout

Draft 2
Users must log in and log out of the system to ensure that system access is granted only to authorized users, and that only one user is logged in at a time to ensure that multiple users do not make conflicting changes to the system.
If the user performs no action for a period of time, the system automatically logs him or her out. The user must log in again to use the Administrator Console.

GPIO

Select GPIO to view the GPIO Control Page. This window allows viewing and setting the status for GPI pins.
Administrator Console 4 - 41
Figure 4-30
GPIO Control Page
Settings - Map the reader GPI and/or GPO with the radio GPIO. Select either Radio or Host for GPIx or GPOx where x = 0 or 1. An attempt to violate this condition changes the selection to either Host GPIx or Host GPOx automatically. These settings are valid for FX7500 four port readers and are disabled if not
supported.
Status - To set a GPO pin high or low, click on the image next to the required pin number:
Green indicates GPIO HIGH
Red indicates GPIO LOW
Yellow indicates GPIO unknown GPI Debounce Time - Enter a value of up to 1000 milliseconds to minimize spikes that can occur when
a device connects to the GPIO port of the FX reader. The default is 50. Debounce time applies to all input pins, and pins must work independently of each other. Events and callback functions occur only after the debounce time expires, provided the pin state remains at the same level for the debounce time duration. GPIO debounce does not impact GPO and input operations when set to 0.
Set Properties - Click this when all selections are made.
4 - 42 FX7500 RFID Reader Integrator Guide
Draft 2

Applications

Select Applications to view the User Application Page. This window allows installing applications on the reader and provides details of the installed application.
Figure 4-31
The Existing Packages section includes the following options:
To create packages for the FX7500 reader, use any of the standard Debian package creation tools, or create them manually. The FX7500 Embedded SDK Programmers Guide provides details on creating application packages to install on the reader.
User Application Page
List of Installed apps - The drop-down menu lists the current packages installed in the reader. Start/Stop - The image displays the running status as follows. Click the image to toggle the status.
Green indicates application is running
Red indicates application is not running AutoStart - Select this check box to run the application at startup. Uninstall - Removes the package from the reader.
The package must contain a binary executable compatible with ELF 32-bit LSB executable, ARM, version 1, GNU Linux.
The name of the binary executable must match the name of the package, excluding the version name. For example, if the package name is package-1_2.1_all (package 1 version 2.1), the name of the binary executable must be package-1. There can be more than one binary in the package.
The package must contain a startup script in the name of start_packageName.sh to start the binary or binaries in the package. For example, if the package name is package-1_2.1_all.deb (package 1 version 2.1), the name of the startup script must be start_package-1.sh.
The package must contain a stop script in the name of stop_packageName.sh to stop the binary or binaries in the package. For example, if the package name is package-1_2.1_all.deb (package 1 version 2.1), the name of stop script must be stop_package-1.sh.
NOTE The reader executes the packages with the privileges of rfidadm user account. See the user accounts
section for information on rfidadm user privileges.

Reader Profiles

Draft 2
Select Profiles in the selection menu to view the Reader Profiles window, which shows the current profiles on the reader and allows performing profile-related operations.
NOTE Because the Reader Profiles window uses an applet to connect to the reader, enable JVM support on
The window displays a set of provided configuration files, or profiles, that a user can re-use and/or modify depending on the reader application or use case. The profiles serve as configuration examples.
Administrator Console 4 - 43
the browser in order for this window to function properly.
Figure 4-32
Reader Profiles window functions are:
The
Profiles can specify a number of reader parameters, including RF air link profiles. Air link profiles cannot be configured using LLRP or web page interface. See Appendix C, RF Air Link Configuration for more information about air link profile configuration.
Reader Profiles Window
Available Profiles in the Reader - Displays the available reader profiles. Import - Click to open a file dialog and pick a profile (XML file) from the local PC and import it into the
reader.
Export - Select an available profile and click Export to export profile information and save an XML file
onto the local drive.
Set Active - Activates a selected profile. Select an available profile and click Set Active to load the profile
content in the reader.
CAUTION Swapping profiles between readers using static IP addresses is not recommended. Activating a profile
with a static IP address changes the IP of the reader, and if not done properly can make the reader inaccessible.
Delete - Select an available profile and click Delete to delete the profile.
NOTE Current Config is a special logical profile that can only be exported to the PC. This cannot be imported,
activated, or deleted. Only the profile name indicates that it is the active profile.
4 - 44 FX7500 RFID Reader Integrator Guide
Draft 2

FIPS Support on FX7500

The FX7500 supports FIPS 140-2 Level 1 for the following interfaces:
HTTPS
FTPS
SSH
LLRP Server
IPSec
To enable or disable FIPS support in the reader profile, export the profile XML (CurrentConfig) from the reader and set FIPS_MODE_ENABLED to 1 to enable FIPS, or 0 to disable FIPS. Then import the XML to the reader and activate. Changing the FIPS mode restarts the reader. By default, FIPS is disabled.

Firmware Version/Update

The Firmware Version window displays the current software and firmware versions and allows upgrading to new firmware. From the selection menu, click
Firmware.
Figure 4-33
Current Version indicates the binary versions currently running in the reader. Last Known Version indicates binary image versions stored in the backup partition. This window provides version information on the following firmware:
Select Revert Back to revert the firmware to last known version. The reader automatically reboots. This option is not enabled if the reader detects an error in the previous firmware update.
Firmware Version
Boot Loader OS File System Reader Application LLRP Radio Firmware Radio API

Firmware Update

Draft 2
The Firmware Update window allows upgrading to new firmware. From the selection menu, click Update.
NOTE You must be logged in with Administrator privileges in order to access this window. See Change
The reader supports three different methods of updating the firmware:
Update using a USB drive.
File-based update that allows uploading the firmware files from the PC (or a network location) to the reader and running the update.
FTP / FTPS / SCP server-based update.
For instructions on updating the firmware, see Chapter 7, Firmware Upgrade.

Commit/Discard

Changes made to the logical view of the reader network using the Administrator Console do not immediately apply to the reader and network connections. To apply reader configuration modifications, select
Commit/Discard, then click Commit to save the changes to the reader configuration file, and to update the
running physical reader network. While a successful update can take up to a minute to complete, the system continues to operate with a brief one or two second pause.
Administrator Console 4 - 45
Password on page 4-40.
Figure 4-34
To discard changes to the server's configuration file made to the reader network during this session, click Discard.
Click Factory Reset to reset the reader to factory defaults. This clears all customized user settings, including configuration, and installed applications. The reader reboots automatically.
Commit/Discard Window
4 - 46 FX7500 RFID Reader Integrator Guide
Draft 2

System Log

The System Log window lists reader log information.
Figure 4-35
This window offers the following options:
System Log Window
Apply Filter - Select a filter option from the drop-down menu to view logs for particular process and/or severity:
• None - Do not apply a filter.
• Minimum Severity only - The severity level filters the log.
• Process Selection only - Selected pre-defined processes and comma-separated process strings
filters the logs.
• Minimum Severity & Process Selection - both severity and process selection are considered in the
filter.
If you select Process Selection only or Minimum Severity & Process Selection and the process string is empty with no pre-defined process selection, then the pre-defined process list filters the logs.
Minimum Severity - Select the severity level on which to filter. Process Selection - Select the types of processes to filter upon. Other process - To filter for specific processes, enter the process in this text box using a
comma-separated process list string with no spaces. If the log file is empty for the selected filter option, an error message appears in the log text area. Click Save to save the filter settings, which persist upon reader reboot.
Log area - Select a radio button for one of the two types of log information offered:
System Log - Includes the log information generated by the reader internal instructions. This stores up
to 1 MB of log information, and overwrites the oldest logs first. The log information is saved and restored on proper system reboot (via the Administrator Console).
Access History - Provides a history log for reader access, including every successful access to the
reader through the Administrator Console.
Select the Refresh Log to refresh the information in the log, or Purge Logs to clear the information.
To copy the log file to a specific location on the host select an option from the Export drop-down. Enter the location in the File Path field, then select the Export File button.
Administrator Console 4 - 47
Draft 2

Configure System Log

This window configures system log settings. If the system log host is not set (or is not valid), log messages are not sent.
Figure 4-36
This window offers the following options:
You must select Commit to activate these settings.
Configure System Log Window
Remote Log Server IP - Configures the host IP address to which log messages are sent. IP address
0.0.0.0 indicates that no host is configured.
Remote Log Server Port - Remote log server listening port. The default port is 514. System Log Minimum Severity - The minimum severity above which data is stored in the log file. This
option does not impact remote logging or the logs already stored in the log file.
4 - 48 FX7500 RFID Reader Integrator Guide
Draft 2

Reader Diagnostics

Select Diagnostics to view the Reader Diagnostics window, which allows running diagnostics and viewing the diagnostics report.
Figure 4-37
Selecting Start Diagnostics clears the system log and displays the diagnostics report. The reader reboots when the diagnostics completes. Return to the Diagnostics window to view the diagnostics report.
To export the diagnostics report to a file, on the System Log window, select Process Selection only in Apply
Filter, de-select all other processes, and in the Other Process text box enter: rmserver.elf: N-D,llrpserver.elf: N-D
Reader Diagnostics Window

Shutdown

Draft 2
To protect the integrity of the reader data, gracefully reboot the reader via the Administrator Console when necessary.
Administrator Console 4 - 49
Figure 4-38
To shut down or restart the reader:
1. Click the Shutdown link to display the System Shutdown/Restart window.
2. Check the Please Confirm check box to accept the system shut down and/or restart the system (this may
interrupt normal system operation).
3. Select one of the following options from the What do you want to do drop-down list:
4. Click Go.
This window also provides an option to enable or disable the reader watchdog.
System Shutdown/Restart Window
Restart Reader - saves the user data and then restarts. Shut down Reader server - the reader saves the user data, stops all reader functions, and waits to be
powered off.
4 - 50 FX7500 RFID Reader Integrator Guide
Draft 2
CHAPTER 5 WI-FI CONFIGURATION
Draft 2

Wireless Network Advanced Configuration

FX7500 uses the wpa_supplicant application to connect with wireless networks. Advanced users can place their own configuration file in the /apps folder to connect to wireless networks. This configuration file is wpa_supplicant.conf. The parameters of this file are well documented in the public domain. Refer to
http://linux.die.net/man/5/wpa_supplicant.conf for the most commonly used parameters and http://www.daemon-systems.org/man/wpa_supplicant.conf.5.html for all available parameters. Also see
Appendix E, Copying Files To and From the Reader for instructions on copying files to /apps directory.
If /apps/wpa_supplicant.conf is present in the reader, the reader uses this file to connect to a wireless network. This supersedes the configuration in the Administrator Console, which changes to reflect the custom configuration file.
Figure 5-1
Administrator Console Update
5 - 2 FX7500 RFID Reader Integrator Guide
Draft 2
Note that there are no text boxes in the user interface for ESSID and password. The console obtains these directly from the custom configuration file.

Sample Configuration Files

Wireless network with WPA2 encryption type (AP name is "DEV"):
ctrl_interface=/var/run/wpa_supplicant ctrl_interface_group=0 ap_scan=1
network={
ssid="DEV" proto=RSN WPA key_mgmt=WPA-PSK pairwise=CCMP TKIP group=CCMP TKIP psk="my secret password"
}
Open wireless network (AP Name is DEV_Open):
ctrl_interface=/var/run/wpa_supplicant ctrl_interface_group=0 ap_scan=1 network={
ssid="DEV_Open" key_mgmt=NONE
}
Wireless network with WEP encryption type (AP Name is WEP128):
ctrl_interface=/var/run/wpa_supplicant ctrl_interface_group=0 ap_scan=1
network={
ssid="WEP128" key_mgmt=NONE wep_key0= "my secret password " wep_tx_keyidx=0 priority=5
}
Configuration file with multiple network blocks:
Draft 2
# Simple case: WPA-PSK, PSK as an ASCII passphrase, allow all valid ciphers network={
ssid="RFID_TNV" psk="123456789"
priority=1 } network={
ssid="RFID_TNV_WPA/WPA2"
psk="123456789"
priority=2 }
Refer to http://linux.die.net/man/5/wpa_supplicant.conf for further examples.
Wi-Fi Configuration 5 - 3
5 - 4 FX7500 RFID Reader Integrator Guide
Draft 2

Preferred Configurations for Access Points

The FX7500 reader supports WPA/WPA2 (http://en.wikipedia.org/wiki/Wi-Fi_Protected_Access) and also WEP128 (http://en.wikipedia.org/wiki/Wired_Equivalent_Privacy) by default over the Administrator Console.
Other supported protocols are explained in previous sections. This section provides details on the preferred configurations for access points.

AP: Zebra AP 5131

Network Type: WPA/TKIP
Figure 5-2
Create a security policy WPA and select WPA/TKIP from the Encryption menu. Enter an ASCII password between 8 and 63 characters or 64 hex characters. Select Apply and associate the ESSID with a security policy.
AP 5131, WPA/TKIP
Network Type: WPA2/CCMP
Draft 2
Wi-Fi Configuration 5 - 5
Figure 5-3
Create a security policy WPA2 and select WPA/TKIP from the Encryption menu. Enter an ASCII password between 8 and 63 characters or 64 hex characters. Select Apply and associate the ESSID with a security policy.
AP 5131, WPA2/CCMP
5 - 6 FX7500 RFID Reader Integrator Guide
Draft 2
Network Type: WEP128
Figure 5-4
Create a security policy WEP128 and select WEP from the Encryption menu. Enter an ASCII password between 13 characters or HEX password of 26 characters. Select Apply and associate the ESSID with a security policy.
AP 5131, WEP128
Open Network
Draft 2
Wi-Fi Configuration 5 - 7
Figure 5-5

AP: Android Device

Enable the wireless tethering from the settings menu.
Open Network
Open Network
Figure 5-6
Select Open from the Security drop-down menu and select Save.
Android Device, Open Network
5 - 8 FX7500 RFID Reader Integrator Guide
Draft 2
Network Type: WPA2 PSK
Figure 5-7
Select WPA2PSK from the Security drop-down menu and enter a password. Select Save to start the wireless hotspot.
WPA PSK
Android Device, WPA2 PSK
Figure 5-8
Select WPA PSK from the Security drop-down menu and enter a password. Select Save to start the wireless hotspot.
Android Device, WPA PSK
Loading...