Introduction
...
The Primis Server has a built-in set of Card Format Definitions that determine how Wiegand data is being translated (e.g. Wiegand 75 bit, FIP-201 200 bit). Upon card swipe, Primis performs a sequential look-up of this list to find the best fitting definition.
...
Click on the System navigation tab.
On the left, click the Manage Card Format link.
To speed up the card format search, put the most relevant definition at the top of the list. If the installation is using Indala 36-bit cards for example – put the Indala 36-bit definition above all other 36-bit formats to ensure correct Wiegand data translation. Use the up/down arrows beside each definition to adjust the order of format preferences.
...
In case no suitable definition is available, use the Default Card Format drop-down list to select a default format. To narrow down the search, type the card format, and it will list the results. You can click on the required card format directly. Please note that the card format definition in Primis is highly customizable. Please feel free to contact Identiv Technical Support (support@identiv.com ) should you require a custom format.
...
The links for Dealer and Installer from the Primis Administration software can be configured to match the company who that sold and installed the MESH system.
Click on the System navigation tab.
On the left, click the Administration link.
Click the System Parameters sub-link.
Edit the dealer.ini and installer.ini files using the in-browser editor or save and edit them locally and restore them.
...
Identiv’s Primis Encryption Bridges allow door hardware to be connected to Primis servers. Bridges for card readers communicate with Primis software. Data is received from card readers, encrypted, and sent via IP to a Primis server for processing. Relays on the Primis Bridge are activated by commands from a Primis server to lock or unlock doors.
...
Primis Bridges can be discovered using one of two methods. Either using the Bridge Discovery Tool located in the Primis Administration Software or using the standalone Windows tool called Bridge Configuration Utility (BridgeUtil). For most systems, the built-in web-based discovery tool will be sufficient. If a Primis bridge is not located on the same LAN as the Primis server or is behind a switch/router where UDP MultiCast traffic is being blocked, the bridge utility application should be used on a PC located on the network where UDP traffic is not being blocked.
...
Click on the System navigation tab.
On the left, click the Utilities link.
Click the Bridge Utility sub link.
Click the [Scan Devices] button.This process might take a minute or two.
Click on the MAC address of the device you wish to provision.
Assign the appropriate IP information to the device or choose DHCP. You may need to contact your system admin for this information. If the DHCP checkbox is checked, the IP, Netmask and Gateway fields are automatically populated once the bridge receives the DHCP information.
To update Bridge Configuration only, click on Save. Note that it might take up to two minutes to save.
To update and add the Bridge to Primis, check Save & Add Device To Primis checkbox and click Save.
Enter the name by which you’d like to refer to the device and click the Save button.
...
The following tables describe the properties for of Primis bridges.
Reader Properties
...
Click on the Schedules navigation tab.
In the Actions bar, click on Add Schedule. The following screen is displayed:
Enter a Name and Description.
Select Weekdays OR Special Days.
If you select Weekdays, check the box for each Week Day this schedule applies to and check the box for each Type of Special Day you would like to exclude from this schedule. To add a Special Day, see the instructions in the previous section.
If you select Special Days then you wish to apply this schedule ONLY to the Type of special day that you select in the dropdown box.
Enter an ON Time for this schedule.
Enter an OFF Time for this schedule.
Under Effective Dates, check the Always On box if this schedule is to remain in effect at all times or, if not, enter a Start Date and an Expire Date for this schedule.
Click Save.
...
Click on the Schedules navigation tab.
On the left, click the Special Days link.
In the Actions bar, click Add Special Day. The following screen is displayed.
Enter the Name of the Special Day.
Choose a number for this Type of special day, the number between 1 and 12. Special day types allow the grouping of different special days. For example, a Type 1 special day labeled First of Every month, Month could contain the first day of every month. In this case, there will need to be 12 special days added, all of them belonging to the Type 1 group.
Select Explicit or Relative. An explicit day is a particular day of the year while a Relative day is a day that will occur every month i.e. the first Monday of every month.
Enter the Month and Day of the special day if Explicit was selected; select the Day of the Week if Relative was selected.
Click Save.
...
Door Areas are areas that has have readers, in this case, the Door Area represents the in-cab reader. Floor Areas contains contain relay outputs that activates activate elevator access (e.g. button in the cab).
...
This is a new option implemented in later versions of 10.1 and 9.2c. It reduces database migration effort from older systems such as 9.1, 8.7, and below.
To switch to this mode, in siteEngine.ini, set property “UseFloorAccessGroups” to “no”. Restart the server after update (please note that once this mode is chosen, returning to the old method may require some database clean up).
...
Click on the Controlled Areas navigation tab.
In the Actions bar, click Add Controlled Area. The following screen is displayed:
Enter a Name that describes the controlled area.
Enter an optional Description.
Select Door Area as the Area Type.
Select a Reader for the controlled area.
By default, Primis assigns the input 1 as Door Contact and input 2 as Request to Exit. To choose a custom setting, check Custom and select the desired input mapping.
Click Save.
...
Select a Card Format for the Reader; set it to Auto to default to the system settings.
For the Door Contact, check the Suprv Ready box to indicate that the bridge input has supervised resistors set.
Set the Door Contact Switch to Normally Open or Normally Closed.
For Request to Exit, check the Suprv Ready box to indicate that the bridge input has supervised resistors set.
Set the Request to Exit Switch to Normally Open or Normally Closed.
Check the Activate Relay to set the lock to trigger when the REX is fired and select a Relay and enter the number of seconds for it to remain active.
For each of the Outputs, enter a Delay time (the number of minutes/seconds the relay will fire) and an Activation Time (the number of minutes/seconds the relay stays open).
Select an Output for this door.
Enter an optional Description.
For each output, enter a Delay time (the number of minutes/seconds until the relay will fire) and an Activation Time (the number of minutes/seconds the relay stays open). Click the Show Accessibility box to enter an Accessibility Delay time and an Accessibility Activation time: this is a separate set of delays and activation times for users with special needs (e.g. wheelchair, crutches) that are used if the Accessibility check box is selected in that user’s setup page. See Chapter Users for more information on setting up a User.
Check the Latch Allowed box to allow the corresponding output to remain open(latched) when it is set to Open state either by the Administrator or through Unlock Schedule.
To add another Output line, click the + button beside the first output line.
Click Save when all outputs are configured.
...
A Schedule is a given period of time that is applied to a Controlled Areas and Access Groups and is used to schedule device activation and alarms. If a schedule is added to a Controlled Area, then that schedule activates the devices and outputs in that Controlled Area. If a schedule is linked to a Controlled Area, under User or Guest Access Groups, then the schedule enables or disables access to that Controlled Area only to the users that are contained in that User Access Group.
...
Select a Schedule for this controlled area.
Select an ON action.
Select an OFF action.
Select the box below each Alert Level that corresponds to the users in this controlled area: Low, Guarded, Elevated, High, or Severe.
To add another Schedule line, click the button button beside the first schedule line.
Click Save.
...
Under Door Held Open Alarm, check the Enable box.
Enter the number of seconds in the Held Open Time box before the alarm will sound.
Select an output in the Output 1 dropdown box; in the Action box, select Activate or Deactivate; in the Duration box, select the number of seconds the alarm will sound.
Repeat Step 3 for Output 2 if necessary.
Select the Schedule from the dropdown box that you would like applied to the action, or select Always On if you need the action to be enabled 24/7; check the Effective Except for this Schedule box to have the alarm sound during all schedules except this one.
Check the General Alarm box if you need this action to generate an alarm in the Events tab.
Check the Ack. Required box to require an acknowledgement acknowledgment from the AMS Server.
Select a Severity level from the dropdown box: Warning, Error, Alert, Critical, or Emergency.
If needed, a customized message can be added in the Instruction field that will be displayed in the log when the Alarm is triggered. The Instruction dropdown menu passes the selected instructions to the AMS Server. To create a new alarm instruction, click the Alarm Instructions link and click Add Alarm Instruction in the Actions bar.
Once done, click save at the bottom of the window
...
Under Door Forced Open Alarm, check the Enable box.
Select an output in the Output 1 dropdown box; in the Action box, select Activate or Deactivate; in the Duration box, select the number of seconds the alarm will sound.
Repeat Step 2 for Output 2 if necessary.
In the Racing box, enter the number of seconds when the door contact state change is reported before the push button bar signal reaches the system. If Racing is set to 1, then the DFO will not fire if a REX is detected within one second of the door contact change state.
In the Shunt Window box, enter the number of seconds. This options option shunts the alarm when the REX opens the door (no card scan releases the door).
Select the Schedule from the dropdown box that you would like applied to the action or select Always On if you need the action to be enabled 24/7; check the Effective Except for this Schedule box to have the alarm sound during all schedules except this one.
Check the Generate Alarm box if you need this action to generate an alarm in the Events tab.
Check the Ack. Required box to require an acknowledgement acknowledgment from the AMS Server.
Select a Severity level from the dropdown box: Warning, Error, Alert, Critical, or Emergency.
If needed, a customized message can be added in the Instruction field that will be displayed in the log when the Alarm is triggered. The Instruction dropdown menu passes the selected instructions to the AMS Server. To create a new alarm instruction, click the Alarm Instructions link and click Add Alarm Instruction in the Actions bar.
Click Save.
...
Options | Description |
Toggle | Sets the Controlled area to Secure or Unsecure based upon an event other than a schedule. For example, an Authorized Card can change the state. Check the box for this function. Also provides ability to Disable the Door Monitor Event. Alarms are now enabled by default. This will not generate the alarm unless the Generate Alarm box is checked. |
Multi-Factor | Sets the number of Authorized Card Reads necessary to allow entry to the Area. Allows ability to implement 2-Factor or 3-Factor identification. |
Auth Mode | Relates to Multi-Factor. Sets the number of Users required for entry to the Area. Two Factor authentications for the number of factors to be used to activate an access granted: Single User, Multi-User, Guard Group. |
Guard Access Group | Defines the access group required for two-authentication. |
Auth Timeout | Relates to Multi-Factor. Set the number of seconds allowed between card reads. Note: a device that has Multi-Factor set can only reside in one Controlled Area. |
Exit Reader | Defines the exit reader. Required for counting for zone groups for Anti-passback and/or Muster reporting. |
...
Multi Card Swipe Tab
The multiple swipe action is intended to place a multiple actions to change the state of a single Controlled Area, or an entire zone group on a pre-set number of card scans, in a defined window of seconds.
It is a recommended best practice to have the least secure action as the lower number , and the higher secure action as the higher number.
...
Select a Floor Controlled Area from the Linked Floor Area dropdown box to link to this controlled area.
NOTE: More details on Floor Controlled Areas can be found in Chapter Elevator Configuration.Enter a Delay time (a pause before the relay fires, default is 0 second) and an Activation Time (the duration that the relay activates, default is 5 seconds).
Click the Show Accessibility box to enter an Accessibility Delay time and an Accessibility Activation time. This is a separate set of delays and activation times for users with special needs (e.g. wheelchair, crutches) that are used if the Accessibility check box is selected in on that user’s setup page. See Chapter Users for more information on setting up a User.
To link another floor to this controlled area, click the add button +
Click Save.
...
Click on the Controlled Areas navigation tab and select the Controlled Area that was just created.
In the Actions bar, click Assign Device.
In the Assign/Replace Door Reader screen, select a Reader for this controlled area.
Select Default or Custom
...
Click on the Access navigation tab.
Click on the User Access Groups, Floor Access Groups or Guest Access Groups link.
In the Actions bar, click on Add Access Group. The following screen is displayed:
Enter a Name and a Description.
Select the Risk Levels during which this group will have access: Low, Guarded, Elevated, High or Severe (the current risk level is always displayed at the top of the Primis screen)
For more information on Risk Levels see the Alert Level Managementsection.Select a Controlled Area for this group.
Select a Schedule for the Controlled Area. If that controlled area is not going to be accessed by that User Access Group, leave the schedule as Always Off.
If you need an additional line for extra Controlled Areas and/or Schedules, click the + button beside the current line. To delete a line, click the x button.
Click Save.
Global User Access Groups
...
Create a new Controlled Area with the elevator reader.
In the new Controlled Area’s Floor tab, select all the associated Floor Areas; specify the desired activation time and click +.
...
Create a Floor Access Group
...
To remove a Certificate Policy OID:
Click theX button next to the OID.
...
Extended Key Usage Extensions
...
To remove an extended key usage extension constraint:
Click the X button next to the OID.
...
PKI Fault Options
...