iGuard® LM Series

iGuard LM Series

Operation Manual

Version 3.6.5789A

Lucky Technology Inc.

US Patent No. 6,643,779

IGUARD LM SERIES OPERATION MANUAL

1 Lucky Technology Inc. US Patent No. 6,643,779

Federal Communications Commission (FCC) Statement

This Equipment has been tested and found to comply with the limits for a Class A digital device,

pursuant to Part 15 of the FCC rules. These limits are designed to provide reasonable protection

against harmful interference in a residential installation. This equipment generates, uses and can

radiate radio frequency energy and, if not installed and used in accordance with the instructions,

may cause harmful interference to radio communications. However, there is no guarantee that

interference will not occur in a particular installation. If this equipment does cause harmful

interference to radio or television reception, which can be determined by turning the equipment

off and on, the user is encouraged to try to correct the interference by one or more of the

following measures:

- Reorient or relocate the receiving antenna. - Increase the separation between the equipment and receiver. - Connect the equipment into an outlet on a circuit different from that to which the receiver is

connected.

- Consult the dealer or an experienced radio/TV technician for help.

CE

EMC DIRECTIVE 89/336/EEC (EN55022 / EN55024)

Trade Name : iGuard

Model No: FPS110 / LM

IGUARD TABLE OF CONTENTS


I. Introduction II. Product Overview

A. Capacitive Fingerprint Scanning B. Contactless Smart Card C. PIN Pad D. Embedded Features

III. Project Planning & Site Survey A. Features B. Environmental Considerations C. Site Survey D. Additional Notes

IV. Installation A. Time & Attendance B. Access Control Installation (Door Strike) C. Access Control Installation (Magnetic Lock)

V. Configuration A. Configuration at the Terminal

i. Power-Up ii. Set Date & Time iii. Configure Network Settings iv. Set Administrator & Access Passwords

B. Basic Configuration via the Web Interface i. Terminal Set-Up ii. Configure Network Settings iii. Set Administrator & Access Passwords iv. Quick Access

C. Advanced Configuration via the Web Interface i. Internet SNTP Time Server Time Synchronization ii. Operation Setting iii. Other Options iv. Web Server Options v. Fingerprints Matcher Setting vi. Door Relay & Beep Setting vii. Code Setting viii. Real Time Clock Adjust ix. Web Cam Setting x. Weigand Set-Up xi. Remote Door Relay Set-Up xii. In/Out Trigger Set-Up xiii. Holiday Set-Up

VI. System Administration A. Administration via the Web Interface

i. Department Administration ii. Employee Administration iii. Add Access Log

IGUARD TABLE OF CONTENTS


iv. Back-Up & Restore B. Administration at the Terminal

i. Add/Update Employee by Fingerprint ii. Enrollment with Smart Card iii. Registering an Existing Smart Card iv. Delete an Employee v. Inactivate & Re-Activate a User vi. Enabling an Automatch vii. Resetting the device viii. Emergency Procedures ix. Test Mode

VII. Daily Operation A. Verification with ID & Fingerprint B. Verification with Automatch C. Verification with Smart Card & Fingerprint D. Verification with User ID & Password

VIII. System Maintenance A. Back-Up & Restore B. Cleaning the Fingerprint Sensor C. Employee Export

IX. Report Creation A. Excel Report B. Text Report

X. Appendix A: Complimentary Software Utilities A. iServer

i. System Requirements ii. Installation iii. iServer Window iv. Database v. iServer Settings vi. Terminal Settings vii. Database Connection

B. Remote Door Unlock Utility C. Employee Upload Utility

XI. Appendix B: Remote Door Relay A. Remote Door Relay Types B. Installation Guidelines C. Configuring the Relay D. Configuring the iGuard

XII. Appendix C: Wiring Diagrams A. Wire Gauge Selection Chart B. iGuard Connection Diagram

XIII. Appendix D: Product View XIV. Appendix E: iGuard Parts List XV. Glossary XVI. Index



I. Introduction iGuard is the first self-contained, platform independent biometric access control and

time / attendance solution with a fully embedded architecture. With Plug-and-Play installation and an easy-to-use interface, implementation costs are minimal. User

information, administration, configuration and reporting are done through our patented,

embedded Web environment. With capacitive finger scan, contactless smart card, and

PIN pad interfaces, iGuard provides multiple layers of authentication to give you

flexibility and security.

We also offer our full featured API free with the purchase of any iGuard unit along

with several software ad-ons:

Employee Upload Utility - Allows you to add employee data to iGuard via a standard CSV file

Remote Door Unlock - Gives a receptionist or guard station the ability to unlock any door from their PC

iServer - Pulls Access Log data from iGuard real-time and places it in any ODBC compliant data store

This manual will guide you through installation and setup. It contains all the information

you will need to operate and administer the system.

II. Product Overview

iGuard is a self-contained, platform independent biometric access control and time /

attendance solution.

The iGuard system features:

Capacitive Fingerprint Scan

Contactless Smart Card

PIN pad

Embedded Firmware / Web Server

A. How capacitive fingerprint scanning works:

Beneath the sensors surface passivation layer is a 300 x 300 array of capacitor plates (90,000 capacitors) spaced with a 50 mm pitch. The diagram below shows the ridges and

valleys of the fingerprint at different distances from the capacitor plates. That difference

corresponds to a capacitance difference measured by the sensor. An on-board analog-to-

digital converter converts each capacitance measurement into an 8-bit value and then



forms the fingerprint image. The system then extracts a set of characteristics unique to

that fingerprint, called minutia. This minutia data uniquely identifies an individual.

B. The contactless smart card:

iGuard uses a standard 1K Mifare Classic 13.56 MHz smart card which is capable of

storing a users primary fingerprint template and user ID.

C. PIN Pad:

The PIN pad is a 3rd

option for user authentication. It can be used in conjunction with

either a fingerprint, a smart card or both, however the use of user password only is not recommended for use in access control due to the possibility of security compromise.

D. Embedded Features:

Firmware: Because iGuard uses embedded firmware, there is no software for you to

purchase, install or update, and the system is not susceptible to virus threats.

Web Server: The administration interface of the iGuard operates exactly like a hosted

Web site. It can be accessed via any standard Web browser by entering the systems IP address. If you give your iGuard a public IP address, or use Network Address

Translation (NAT) on your firewall or router, you can even access the administration

interface remotely. The Web interface gives the system administrator a simple, easy to

use set of tools for backup and restoration of data (including user data, access logs, and

attendance logs), import and export of user data, report generation, department creation

and more.

iGuard is DHCP capable, but it is recommended that you assign each unit a static IP for

management purposes.

III. Project Planning and Site Survey

Proper planning is the key to successful implementation of any technology project.

While the iGuard system is very easy to install and operate, there are some things to

consider before you begin installation.



If you are using the device stand-alone for time / attendance, choose a location (like the

break room) that your entire employee population has unlimited access to, and one which

will not disturb anyones personal working environment. This area will become a heavy traffic area if it is not already.

A. Features to consider during planning:

1. Automatch This feature allows up to 30 users to authenticate with their fingerprint alone. It provides faster, easier access for executives and VIPs, but is strictly limited to 30 users per network (not per device) because indexing more

than 30 records would make the database search too long.

2. Department Setup Establishing departments allows you to set different access times for different employee groups and also lets you assign access rights to each

door. The maximum number of departments is 32.

3. iServer This Windows-based application collects transaction records from the iGuard system and saves them to an ODBC database format. For database table

specifications, see Appendix A: pg 50.

4. Employee Import Utility This utility allows you to add your employees to the iGuard via MS Excel or .csv file. This is useful if you have more than a handful

of employees to enroll all at once. The enrollment of fingerprints and activation

of smart cards remains a manual process that is performed by the user in

conjunction with the System Administrator. You will still be required to enroll

fingerprints and activate smart cards manually.

5. Remote Door Relay This device is sold separately from the iGuard terminal, and assures that malicious damage to or tampering with the reader does not result

in a release of the door strike or magnetic lock. The use of the relay is

recommended for all installations and is required when controlling a 12VDC door

strike or magnetic lock with a current rating above 1Amp. More information

about installing and using the relay is provided in Appendix B: pg 66.

6. Optional Door Sensor Connection terminals on the iGuard can be used to alarm if the door stays open longer than 10 seconds.

7. External Alarm These connection terminals allow you to connect the iGuard to an external bell, buzzer, or alarm system. If the unit is removed from the wall

during operation, an internal case switch sends a signal through these terminals.

8. Smart Card Company Code This is a configurable, 4 character code which is written onto each smart card. Cards are formatted at the factory to work only with

iGuard, and this code is separate from the factory formatting. This code is to set

your iGuard system apart from any other iGuard system. Any smart card with

a code that does not match is not recognized by the system. For this reason set



this code before activating any smart cards. Changing this code will disable any

smart cards which are already registered, and you will have to re-register them at

an iGuard terminal.

B. Environmental Considerations during planning:

1. The iGuard terminal is designed for indoor installation. If you plan to install it outdoors, be aware that exposing it to water, heat, or other harsh conditions can

damage the device and it may not operate properly. Do not install iGuard next

to heat sources or in direct sunlight. *Note: Usage of any of the above exterior

applications will not be considered within the limitations of the iGuard

warranty.

2. Proper grounding is critical to safe and reliable operation of the iGuard system. You should have an electrician connect the mounting plate to your buildings grounding system.

3. The iGuard terminal should not share power with any other device such as the remote door relay or an electric strike. Each iGuard should be powered

independently. You can use the door relay to power an electric strike or magnetic

lock. See Appendix C: pg 70 for more information.

4. Use of the door button terminals on the iGuard unit is not recommended. If you wish to use a push-to-exit button or other device, connect it directly to the

door strike or magnetic lock, or use the remote door relay. Please see Appendix

A: pg 50, subsection B Remote Door Unlock Utility for more information on the best way to unlock a door remotely.

5. Use of the Remote Door Relay is recommended for ALL access control applications.

C. Site Survey

1. Depending on the size of your facility, you should measure the distance from each door you will be controlling to the nearest data switch or communications closet.

2. The maximum distance for CAT5 Ethernet cable is 300ft. Consult Appendix C: pg 70 for electrical wiring distance restrictions.

3. You should examine each door that you wish to control and determine the type of door (wood, glass, or metal), the direction it swings, the direction you want to

control (unless you will authenticate both directions), and the type of frame (wood

or metal). This information will help you determine the type of lock that you

want to use with the iGuard. (Consult your dealer for more information about

magnetic locks, electric strikes, and other door hardware.)



D. Additional Notes for Planning

For network installation, static IP assignment is recommended. Consult your network

administrator to obtain your network IP Schema and an available range of IP addresses

not in use. In a Windows environment, you can also open a command window ( Click

Start > Run type command [Enter] ) then type ipconfig /all [Enter]. You should see a window that looks something like this:

Record your IP Address, Subnet Mask, Default Gateway, and DHCP Server. The

iGuard terminal default IP settings are as follows:

IP Address: 192.168.0.100

Subnet Mask: 255.255.255.0

IV. Installation Installation of the iGuard unit will differ slightly between time / attendance and access

control applications.

A. Time/Attendance Installation:

1. Mount the included Mounting Bracket (Appendix D, Fig.1: pg 73) and ensure that the grounding terminal is connected to a grounding wire.

**NOTE** Failure to properly ground the unit can result in damage from

lightening and other power fluctuations.

2. Plug the RJ45 Ethernet cable into the network jack on the back of the iGuard. 3. Plug the 12VDC power adapter into the iGuard. 4. Secure the iGuard to the mounting plate with the included hex screw and

wrench.



B. Access Control Installation (Door Strike):

Inside the iGuard Reader:

1. Mount the included Mounting Bracket (Appendix D, Fig. 1: pg 73) and ensure that the grounding terminal is connected to a grounding wire.

2. Connect the RS485 pigtail and RJ45 Ethernet cable (Appendix D, Fig. 2: pg 73)

**NOTE** Be sure the A & B wires remain twisted between the iGuard Reader and the Remote Door Relay board.

On the Remote Relay Board:

3. Connect the RS485 A wire to the A terminal. (Appendix D, Fig. 3: pg 73)

4. Connect the RS485 B wire to the B terminal. (Appendix D, Fig. 3: pg 73)

5. Connect +12VDC power to the door relay terminal marked +12VDC (Appendix D, Fig. 4: pg 73)

6. Connect -12VDC power to the terminal marked GND (Appendix D, Fig. 4: pg 73)

7. Connect a power jumper wire between +12VDC and COM terminals on the Remote Door Relay (Appendix D, Fig.5: pg 73)

8. A typical door strike will have two connection wires: +12VDC and -12VDC. To deliver power to the door strike connect:

a. POSITIVE (+) to Normally Open (marked NO) terminal on Remote Door Relay (Appendix D, Fig.6: pg 73)

b. NEGATIVE (-) to Ground (marked GND) terminal on Remote Door Relay (Appendix D, Fig.6: pg 73)

9. Install a 1N4004 Diode between power leads going to the door strike. This prevents EMF damage to the Remote Door Relay and/or iGuard

Reader. The Striped end of the diode should be on the side of the +12VDC lead coming from the Normally Open (NO) terminal. See the

Appendix C: Wiring Diagrams pg 70 and Appendix D, Fig.8: pg 73 for

more information.

Inside the iGuard terminal:

10. Connect the 12VDC power supply to the iGuard terminal. (Appendix D, Fig. 9: pg 73)



C. Access Control Installation (Magnetic Lock):

Inside the iGuard Reader:

1. Mount the included Mounting Bracket (Appendix D, Fig. 1: pg 73 and ensure that the grounding terminal is connected to a grounding wire.

2. Connect the RS485 pigtail and RJ45 Ethernet cable (Appendix D, Fig. 2: pg 73)

**NOTE** Be sure the A & B wires remain twisted between the iGuard Reader and the Remote Door Relay board.

On the Remote Relay Board:

3. Connect the RS485 A wire to the A terminal. (Appendix D, Fig. 3 pg 73)

4. Connect the RS485 B wire to the B terminal. (Appendix D, Fig. 3 pg 73)

5. Connect +12VDC power to the door relay terminal marked +12VDC (Appendix D, Fig. 4 pg 73)

6. Connect -12VDC power to the terminal marked GND (Appendix D, Fig. 4 pg 73)

7. Connect a power jumper wire between +12VDC and COM terminals on the Remote Door Relay (Appendix D, Fig.5: pg 73)

8. A typical magnetic lock will have two connection wires: +12VDC and -12VDC. To deliver power to the magnetic lock connect:

a. POSITIVE (+) to Normally Closed (marked NC) terminal on Remote Door Relay (Appendix D, Fig.7: pg 73)

b. NEGATIVE (-) to Ground (marked GND) terminal on Remote Door Relay (Appendix D, Fig.7: pg 73)

9. Install a 1N4004 Diode between power leads going to the magnetic lock. This prevents EMF damage to the Remote Door Relay and/or iGuard

Reader. The Striped end of the diode should be on the side of the +12VDC lead coming from the Normally Closed (NC) terminal. See the

Appendix C: Wiring Diagrams pg 70 and Appendix D, Fig 8: pg 73 for

more information.

Inside the iGuard terminal:

10. Connect the 12VDC power supply to the iGuard terminal. (Appendix D, Fig. 9: pg 73)



V. Configuration

There are two ways to configure the iGuard terminal. You can use the LCD screen and

menus to perform basic functions like network configuration and add / activate /

deactivate users. Some functions, like fingerprint enrollment and smart card additions

must be done at the terminal. For advanced settings like department setup and access

schedules, use the Web panel. This section will familiarize you with configuration of the

iGuard system from both the terminal and the Web panel.

A. iGuard Configuration at the Terminal

i. Power-up

After it powers up, iGuard will perform a self-test, then it will enter the standby mode as

shown below:

Description LCD Display

Power Up -- when iGuard is powered up, it will perform a self-test

Initializing

After about 10 sec., the device will load the system program

iGuard System

Loading...

After loading the system program, iGuard will enter the standby mode and is now ready to use.

Monday 30 13:49

ID#:

To reach the iGuard terminal menu, press Func, then the admin password (The default is 123) and Func again. The following chart shows the options that will flash on the screen.

Options Available from the iGuard Terminal Keypad

Function 1 Add / Update User Function 7 Reset Unit

Function 2 Inactivate User Function 8 Automatch Toggle (on / off)

Function 3 Reactivate User Function 9 Issue / Import Smart Card

Function 4 Delete User Function 0 Advanced Features

Function 5 Administrator Configuration Function A Toggle Test Mode

Function 6 Set Password Function B Open Door

The following set of tables will familiarize you with the steps necessary to:

Set the date and time

Configure the network settings



Set the Administrator and Access passwords

*Note* these instructions are for configuration from the terminal. The next section will

guide you through configuration via the Web interface.

ii. Set the date and time


While in Standby Mode, press the Func key to enter the Setup Menu. You will be prompted to enter the Administrator Password as shown.

Enter Password: _

Enter the Administrator Password (default: 123).

Enter Password:

123_

Press the Func key to continue. The setup menu will scroll down slowly as shown.

Press 1:

Add/Update ID

:

Press 5: System

Configuration

Enter 5 to select the System Configuration menu. The current date is displayed. If necessary, enter the new date and then press the Func key to continue.

Date (M/D/Y):

08/30/1999

After pressing the Func key, the current time is displayed. Enter the new time then press the Func key to continue.

Time (H:M:S):

13:45:23

The system will then ask for the Terminal ID. The Terminal ID is used to identify the iGuard in your network, especially if you have installed more than one

Terminal ID:



iii. Configure Network Settings

In order to connect the iGuard terminal to your corporate network, you must configure

the network settings. The following table describes how to customize these settings.

Before proceeding you should obtain the correct settings from your network

administrator. If you do not have a network administrator, see Section III, subsection D:

pg 5 of this manual for information about how to obtain your personal network settings.

*Note* Please contact iGuard Technical Support at (800) 441-6798 for more

information about network settings.


While in Standby Mode, press the Func key to enter the Setup Menu. You will be prompted to enter the Administrator Password (default:. 123) as shown.

Enter Password:

_

Enter 5 to select the System Configuration menu. Press 1: Add/Update ID

:

Press 5: System

Configuration

Pressing the Func key until you see DHCP/Static IP

Press Func key to continue, and then press 1 to select DHCP or 2 to select Static IP. We recommend that you use a static IP address for all units, but static configuration is necessary on the master unit in a master / slave environment.

DHCP/Static IP

(1/2)? Static

Press Func key to continue. You will then be asked to enter the IP address of the device. The default is 192.168.0.100. Enter the static IP address assigned to the device (e.g., 192.168.1.123).Note: Please configure the IP according to your corporate network.

IP Address:

192.168.001.123

Press Func key to continue. Enter the sub-net mask here (e.g., 255.255.255.0).

Subnetmask:

255.255.255.000



Press Func key to continue. Enter the address of the Default Gateway (e.g., 192.168.0.200).

DefaultGateway:

192.168.000.200

Press Func key to continue. Enter the address of the Domain Name Server (e.g., 192.168.0.200). Make sure that the IP address of all units are unique. (Warning: IP addresses that are not unique will cause network error and the unit will not function.

DNS:

192.168.000.200

Press Func key to continue. You will be asked if the device is a Master or Slave device (1/2)? If you have only one unit of iGuard, choose (1) Master. If you have more than one units of iGuard, you have to decide which is the Master and which are the Slave(s). If you choose (2) Slave, the system will ask you to provide the Master IP Address, key in, default: 192.168.0.100. Please also read the section about Master and Slave mode.

Master/Slave

(1/2)? Master

iGuard LM520 can be configured as Master or Slave device. Select one and then press Func key. The system will reset itself and then return to Standby Mode.

Mon Aug 30 13:46

ID #:_

iv. Set the Administrator and Access passwords

iGuard has three global passwords. The System Administrator Password is used to

access the system menu and to configure the system. This password gives full access to

the iGuard system. The User Administrator Password is used to manage the user

accounts. This password does not give access to change system settings. The Door

Access Password is used to release the door strike in Quick Access mode. *For more

information on Quick Access mode, see pg 19.

The following table explains how to assign these three passwords:


While in Standby Mode, press the Func key to enter System Admin: 123_



the Setup Menu. Enter the System Administrator Password (default 123) and press Func key, then press 6 to select "Set Password" menu. The menu "Admin/Personal (1/2)?" will display. Press 1 to select Administrator password.

Press the to erase the old password, and enter the new password (e.g., AB456). The field size limit for individual passwords is 10 digits, from 0-9 and A/B.

System Admin:

AB456_

Press the Func key to accept the new System Administrator Password. You will then be prompted for the User Administrator Password as shown.

User Admin: _

Enter the new User Administrator Password (e.g., 7890BA).

User Admin:

7890BA_

Press the Func key to accept the new User Administrator Password. You will then be prompted for the Door Access Password as shown.

Door Access: _

Enter the new Door Access Password (e.g., 9394AB709). It is suggested to use a long and hard-to-guess password.

Door Access:

9394AB709_

Press Func to return to the standby mode. Mon Aug 30 13:49 ID #:_

*Note* To use the Door Access password, Quick Access must be turned on and

configured through the Web interface. We will discuss this in more detail in the next

section.

At this stage, basic configuration is complete. You are now ready to begin using the

iGuard terminal, however additional functionality is available through the Web

interface. The next section will guide you through this same configuration via the Web

interface and will discuss the additional options available there.

B. Basic iGuard configuration via the Web Interface

You can do all the basic and advanced configuration of your iGuard terminal through

the Web interface if you wish, but consider a few things first. The default IP Address of

the iGuard unit is 192.168.0.100. If your network does not follow the 192.168.0.x

schema, you will need to connect iGuard directly to a computer via an RJ45

*crossover* cable. If your network does follow the 192.168.0.x schema, verify that there

is not another device on your network using 192.168.0.100. If that address is available,



simply connect the iGuard terminal to your corporate network via a standard RJ45

cable.

i. Terminal Set-Up Access the iGuard Web Interface by opening your Web browser and typing the IP

address (192.168.0.100) into the address bar and pressing the [Enter] key. You should

see the Terminal Status page that looks like this:

The above screen displays the NETBIOS name of the iGuard terminal (Terminal ID),

whether that terminal is a master or slave, the firmware version and model number as

well as the IP address of the terminal and the IP address of the computer you are using to

access the terminal. On the left hand side of the screen is a navigation bar. This contains

links to all of the pages within the Web interface. To begin system configuration, select

Terminal Setup from the Administration section. You will be prompted for the username and password (admin and 123 respectively are the default). You should now see a window like this:



ii. Configure Network Settings

In order to connect the iGuard terminal to your corporate network, you must configure

the network settings. The following table describes how to customize these settings.

Before proceeding you should obtain the correct settings from your network

administrator. If you do not have a network administrator, see Section III, subsection D

pg 8 of this manual for information about how to obtain your personal network settings.

*Note* Please contact iGuard Technical Support at (800) 441-6798 for more

information about network settings.

If you are installing multiple iGuard units, you should choose unique names for them like timeclock, frontdoor, or sidedoor.

The description field is for your own use.

Select the appropriate radio button for Master / Slave. If slave, provide the IP address of the master unit.

Select whether to use DHCP or Static IP. We recommend using a static IP for all units, but it is only necessary on the master unit in a master / slave environment.



Scroll to the bottom of the page and click the Save button to retain your new network settings.

iii. Set Administrator and Access password

Select Password Setup from the Administration section of the navigation bar. By default, the System Administration User Name is Admin and the Password is 123.

iGuard has three global passwords. The System Administrator Password is used to

access the system menu and to configure the system. This password gives full access to

the iGuard system. The User Administrator Password is used to manage the user

accounts. This password does not give access to change system settings. The Door

Access Password is used to release the door strike in Quick Access mode. Once you

have edited the global user names and passwords, click the Save button.



iv. Quick Access

Quick Access is an access control feature of iGuard which, when activated, allows

users to come and go without authenticating individually. This can be useful if you want

to keep your facility locked, but dont need to record who is coming and going during business hours. You can give the quick access password to Emergency Medical Services,

building maintenance, or your mail carrier. They will only be able to enter during the

time, on the days, and through the terminals that you specify. For users with smart cards,

quick access will let them enter and exit with the smart card, and will not require a

fingerprint or password. To activate Quick Access, select Terminal Setup from the Administration section of the navigation bar.

To turn on Quick Access, put a check mark in the box labeled Quick Access by Key-In ID. Scroll to the bottom of the page and click Save.

On the Navigation Bar, select Quick Access from the Access Control Section.



As shown above, by default there are no authorized terminals or access times. You must

specify the authorized period by first clicking on any one of the Day buttons (Sunday,

Monday, etc.) to display the access time configuration settings shown below. Each check

box represents a 30 minute window of time throughout the day. From here you can

specify blocks of time for Quick Access. In the figure below, Quick Access is available

from 8:00 A.M. until 6:30 P.M. Monday through Friday, and never on specified company

holidays.



C. Advanced Configuration via the Web Interface

This section will familiarize you with advanced configuration of your iGuard system,

primarily via the Terminal Setup configuration page, shown in its entirety below:



i. Internet SNTP Time Server time synchronization

You can let iGuard synchronize its clock with one of the many atomic clocks on the

internet. By default this is turned off, but we have provided the URL of a time server, so

to activate this feature, simply select the check box marked Enable under Internet SNTP Time Server time synchronization.

*Note* Your DNS server setting must be correct for this feature to function properly.

If you choose to use time synchronization, you must also select Clock Setup from the Administration section of the Navigation Bar. The Location (Time Zone) setting is disabled by default, so for time synchronization to work properly, select your time zone.

Verify that the tie and date are correct, and click Save.

ii. Operation Setting

This setting allows you to start your week on any day you choose. The default setting is

Sunday.

iii. Other Options

This section contains several drop-down boxes and check boxes to configure how the

Terminals will respond to user interaction. A screen shot of the section is shown below

the descriptions of its contents.



Default In/Out: This setting determines how the Terminal will log each clock event.

o Follow In/Out Trigger: The device will rely on the In/Out being toggled by the user at the terminal with the key. This is the default setting. If Extended In/Out Status is enabled, the active F1-F4 options will be included in the list of options scrolled through.

o Always Out: Any authentication on this terminal will be logged as a clock out o Always In: Any authentication on this terminal will be logged as a clock in o Dont show: This terminal will not log whether a user is clocking in or out o Auto In/Out Trigger: The terminal will keep a flag for each user and alternate

between in and out in the log. This prevents a user from clocking in, and

then clocking in again before clocking out.

Disable Key-In ID: When you check the box, a user must use their smart card, and cannot simply input their user ID at the keypad.

Quick Access By Key-In ID: See Quick Access in the previous section of this manual.

Anti-Passback: This option is for use in environments that require authentication to enter and exit. Once a user enters the facility, he or she must authenticate at an

exit point before being granted entrance again.

o Type of Anti-Passback: This allows you to incorporate the F1-4 functionality into your Anti Passbackrules

Enroll only one finger: This removes the prompt for a second finger during the enrollment process

Disable Enrollment Overwrite: Requires that you delete a user and re-create them in order to re-enroll.

Extended In/Out Status: The F1-F4 boxes are flags that will show up on your reports. They are used when a user clocks in for work, then out for a morning

break and back in, out for lunch and back in, out for an afternoon break and back

in and then out for the day.

Show Chinese on Terminal: Displays text on the terminal itself in Chinese

Show only ID when Authorized: This removes the employee name from the Authorized message on the terminal display

Log Unauthorized Access: This will log any failed access attempt, such as: o Employee uses the wrong finger o Employee attempts to access a terminal which he or she does not have

permission to access

o An inactive employee attempts to access any terminal o This will not log activity for non-users.

Log Retry: With Log Unauthorized Access turned on, any retry will be logged as well. This is useful for identifying users who are consistently getting false

rejections and have to attempt access multiple times. These people may have

fingerprints which are difficult to read, or may not have been enrolled properly.

Log Administration Event: This will add events to the access log when users are added, deleted, enrolled etc.



iv. Web Server Options

Access Restrictions: This setting allows you to specify a specific IP address, or a range of IP addresses that is authorized to access the iGuard system. The

default setting allows any IP address to access the system. The default setting

also allows a rejected address to authenticate (with the System Administrator or

User Administrator credentials) and then access the system. There is another

check box in this section which will require anyone to authenticate before viewing

the system, regardless of their IP address.

Web Page Language: The Web interface can be viewed in Traditional Chinese, Simplified Chinese, English, Japanese, Spanish, and Italian. *Note* the system

must be rebooted to change the Navigation Bar language.

v. Fingerprints Matcher Setting

Security Level: Allows you to change how many minutia points are required for a match. Standard is the default and requires an 8 point match.

Automatch Security Level: Allows you to change how many minutia points are required for a match by the Automatch population. The default is set to

Maximum because this is a one-to-many search.

vi. Door Relay and Beep Setting

Door Switch: Selecting this box will disable the terminals marked Reserved on the back of the iGuard . These terminals can be used to connect an external

door switch for a receptionist or other employee to unlock the door manually. ***



Door Relay Control for In: Determines whether the door unlocks when a user clocks in at this terminal. **

Door Relay Control for Out: Determines whether the door unlocks when a user clocks out at this terminal. **

Door Relay Control for F1-F-4: Determines whether the door unlocks when a user clocks an F1-F4 event at this terminal.**

Door Relay Delay Timer: This controls how long the door stays unlocked. The default setting is 0 which is three seconds.

Beep Sound: This setting will toggle the beep setting for pushing buttons on the terminal, and for events like clock-in and clock-out

*** This setting applies only if you are using the iGuard without the Remote Door

Relay. It controls how the connection terminals on the back of the iGuard function

during operation.

** When using iGuard for access control and time keeping with the same unit, some

users prefer to open the door only for certain events. These settings allow you to

configure which type of event should or should not open the door.

vii. Code Setting

This is a 4 character value that will be written to any smart card that you issue from the

system. Any smart card not containing this code will not be read by your iGuard

system. For this reason, you must set this value prior to issuing any smart cards, and

must not change it afterwards.



viii. Real Time Clock Adjust

Time Offset (sec / day): This setting allows you to run the clock faster or slower if necessary

Time Server: If you check this box, all other iGuard units on your network will synchronize their clocks to this one.

ix. Web Cam Setting (IP = 0 to disable):

This section allows you to configure up to four cameras to be viewed from within the

iGuard interface. The cameras must be IP capable, and will be visible from the Web Camera page under the Tools section of the Navigation Bar. iGuard will display the streaming video for 120 seconds at a time, and will not record. This feature is only for

viewing.

x. Wiegand Setup

Output: Enable this setting if you wish to connect iGuard to an existing, Wiegand-based system. The Wiegand connection is a 26 bit formatted output

only connection.

Site Code: Use this setting to communication properly with existing Wiegand systems.

xi. Remote Door Relay Setup

Output: Enable this setting if you wish to use the Remote Door Relay.

Remote Relay ID: This number must match the value set on the 8 bit jumper block, located on the Remote Door Relay. For more information about installing,

configuring, and using the Remote Door Relay, see Appendix B: pg 66.

Serial No: This value is not editable and is for reference only.



Two additional pages are provided for configuration under the Administration section of the Navigation Bar: In/Out Trigger and Holiday Setup.

xii. In / Out Trigger Setup

This page allows you to set triggers for the in / out setting. At the specified time, the

clock will automatically set to IN and clock-in anyone who accesses the terminal. The same applies for OUT. To use these triggers, see Other Options pg 22 of this manual.

xiii. Holiday Setup

This page lets you establish company holidays over the next 12 months. To set a day as a

holiday, simply click the blue number corresponding to that date. The date will then

appear in the Company Holiday list to the right of the calendar. To remove a holiday from the list, simply click the blue date in the Company Holiday list.



VI. System Administration

This section of the manual will guide you through daily operation of your iGuard

system, including Employee and Department additions and management and adding

access logs.

A. Administration via the Web interface

i. Department Administration

Before you begin adding employees to your database, it is a good idea to establish

departments. For smaller companies, this may not be as applicable, but departments are

helpful for establishing permission to individual terminals, and access times for groups of

employees. For instance, your Executive and Accounting departments may be the only

employees with access to the accounting file room, and your Tech department might

contain anyone authorized to enter the server room, while everyone in the company can

come and go through the front door. The system default department is Everyone and it cannot be deleted. Each new employee you create will automatically be added to the

Everyone department. To begin adding departments, select Add Department from the Department section of the Navigation Bar. If prompted, enter either the System Administrator or the User Administrator username and password, and you should see a

screen like this:



Enter a 4 character Department ID and a description. By default, any new department

has full access to any terminal, 24 hours a day, every day, including holidays. This is

changed the same way that Quick Access was configured. Click on any day of the week

to activate the hour increment check boxes, and change access times as necessary.

Click Save to finish. To view the departments you have set up, click List under Department on the Navigation Bar.

To delete a department, select the check box to the left of the department ID and click the

Delete button.

To edit an existing departments access rules, click the blue Department ID of the department you wish to edit. This will take you to the Department Record screen which

is identical to the New Department Record screen and operates the same way.



ii. Employee Administration

If you have not already done so, it is a good idea to establish departments before adding

employees to the system. To begin adding employees, select Add Employee from the Navigation Bar, under Employee List. If prompted, enter either the System Administrator or the User Administrator username and password, and you should see a

screen like this:

The Employee ID is a unique value, up to 10 characters, and is limited to the characters

0-9, A, and B. This is because these are the only characters on the keypad of the

terminal.

To give the employee a password, the Save New Password box must be checked and a password entered in the New Password box.

The employee status is either Active or Inactive.

Automatch can be turned on for your new employee via the Automatch check box.

The Security Level box allows you to set the security level for each individual employee.

This can be useful if one or two of your employees has trouble authenticating because

their fingerprints are difficult to read.

At this point you may also select which departments to place the employee in. Finish by

clicking the Save Button.

To view employees already in your system, select List from the Employee List section of the Navigation Bar. You should see a window that looks like this:



The text boxes at the top allow you to search and filter these results by First Name, Last

Name, Status and Department. This page is an overview, showing you the Employee ID,

Last Name, First Name, and Department. There is a set of Green lights to the right of

each employee record. Below is a description of each. Each light is a Boolean value,

Green for on and Gray for off.

Active: This will show whether an employee is Active or Inactive

FP: Shows whether the Employee has a finger print registered

SC: Shows whether the Employee has a smart card registered

PSW: Shows whether the Employee has a password assigned

A/M: Shows whether the Employee has Automatch turned on

The last piece of information for each Employee record is the In/Out monitor. This will

tell you whether the employee last clocked in or out. In the image above, Time /

Attendance is not being used, so these values are blanked out.

To Edit an employee record, simply click on the blue Employee ID to be redirected to the

Employee Record Page, shown below:



As you can see, this window is identical to the Add Employee page. Use this page to

change the name, title, departments, password, or personal security level for an individual

employee. Finish by clicking Save

iii. Add Access Log

It is sometimes necessary to add a record manually for an employee. This might be

because he forgot to clock out before going home, and when arriving to work, clocked

out when he thought he was clocking in. To fix a problem like this, you will need to add

a clock-out to the access log. Do this by clicking Add Access Log under Administration in the Navigation Bar. If prompted, enter either the System Administration or the User Administration username and password. You should then see

this screen:

Enter the Employee ID for whom you are adding the record. Specify a Date and Time,

and specify whether this is a clock-in, clock-out, or F1-F4 event. Finish by clicking the

Save button. To view the access log and verify that it has been added correctly, click Access Log under Reports in the Navigation Bar. The report you see should look something like this:



Access logs which have been added manually will have a check box next to them and

will be shown in purple. They will also say *Manual* in the Terminal column of the record. These are the only records which can be deleted from the system. Notice that

unauthorized access records are recorded in red and authorized access records are shown

in black. We will discuss the Access Log more in the section on reporting.

iv. Backup and Restore

It is a good idea to back your system up regularly. To do this, click Backup under Tools in the Navigation Bar. You have the option to back up only the Employee Data, only the Access Log data, or the entire database. The size of each is shown beside it in

parentheses. To complete the backup, make your selection and click Save. You will be prompted by windows to select what you wish to do with the file. Choose Save and then select a location to save the file to.



If you have to reset your system, you will need to perform a restore from a backup in

order to retrieve the data that was wiped during the reset. Do this by clicking Restore under Tools in the Navigation Bar. You have the option whether to restore the Employee Database, the Access Database or both. Make this selection and click the

Browse button to locate your backup file. Open this file and click the Go button to restore the data from the backup file.

v. Terminal List

The Terminal List Page displays a list of all iGuard units configured to work together in

Master / Slave configuration on your network. Your master unit is designated M and slave units will be numbered. Quickly unlock or restart any iGuard on your network

from this page. Also use this page to access the individual Web interface for

configuration of slave units by clicking the Terminal ID of the individual units. You will

also see the IP Address and Status of each iGuard available on your network.



To clear the terminal list, click on the link under Remark #4. Each slave unit will

regularly send a signal to the master unit. Once this signal is received, the master unit

will add the slave to the list again.

Test the network connection to all the slave units by clicking the Refresh button at the bottom of the page. This will cause the master unit to ping each slave unit one at a time and clear units which do not respond. If there are a lot of slave units or the network is

slow, this operation can take some time.

B. Administration at the Terminal

i. Add / Update Employee by Fingerprint (Enrollment with Fingerprint)

Good fingerprint enrollment is crucial to smooth operation of your iGuard system.

iGuard incorporates the advanced DFX (Difficult Fingerprint Extraction)

technology(originally developed by Bell Labs USA). This works very well with most

peoples fingerprint images, and allows iGuard to achieve a very low false-reject-rate:



extract. A good fingerprint image captured during the enrollment process can

significantly reduce the false-reject rate during later verification. As shown in the

diagram below, place your finger below the sensor cover and slide the cover away from

the sensor before placing your finger onto the sensor. Do not slide your finger across the

sensor, or it will read a blurry and smeared image.

The following table outlines the steps to enroll a fingerprint. The process is the same for

a new or existing user. For an existing user input their Employee ID when prompted.

For a new user, choose an Employee ID and input it when prompted.




While in standby mode, press the Func key to enter the Setup Menu. Enter the Administrator Password (default 123) and press Func key, then press 1 to select "Add /Update ID" menu. Press 1 to input fingerprint.

By Finger/Passwd

(1/2)?

Enter ID # and

scan 1st Finger

Enter the user ID # (e.g. A01). The ID can be of any length from 1 character to 8 characters.

Enter ID# A01_

Press the Func key to confirm the ID #. The device now begins to capture the 1st image of the primary finger. The horizontal bar on the second line indicates the quality of the image. Lift the sensor shutter with your right-hand thumb and place it firmly on the sensor until the quality bar reaches the right end. You may need to move and rotate the thumb a little bit to achieve the required quality.

Scanning 1 of 3...

:

:

Scanning 1 of 3...

After the quality bar reaches the right end, you will be asked to remove the finger from the sensor.

Analyzing. Pls

remove finger...

When the device detects that you have removed the finger, it will ask you to place it back again for the 2nd image.

Press Func to scan

2 of 3

Press the Func key and repeat the same procedure, and you will be asked to scan the 3rd time of the same primary finger.

Press Func to scan

3 of 3

Press the Func key again and repeat the procedure for the third time. You will then be asked to scan the secondary finger.

Press Func to scan

2nd Finger

Press the Func key, and repeat the above steps to ID: A01 Added OK!



scan the left-hand thumb three times again. If all the images are OK, you will see the acknowledge message "ID: A01 Added OK!" momentary, then the device is ready for next enrollment.

:

:

Enter ID # and

scan 1st Finger

Press to return to the standby mode.

Mon 30 Aug 12:00

ID #:_

In the case of dry finger (poor fingerprint image), it will warn you for dry finger. You can either wet your finger with lotion and try again, or continue.

Scanning 1 of 3

=== Too Dry !===

If continue with dry finger, at the end, it will prompt you if you want to set security to low2. We recommend to choose low security only for time attendance application.

Set Security to

Low2 yes(1)/No(2)?

ii. Enrollment with Smart Card

To use this function, users must be created and have either a password and/or a

fingerprint registered. **Note: Once enrolled, user ID, Password, and Fingerprint

template are stored in internal Memory.

Each users primary fingerprint template can be stored on the smart card if desired.


While in the standby mode, press the Func key to enter the Setup Menu. Enter the Administrator Password (default 123) and press Func key, then press 9 to select Issue/Import Card" menu. Press 1 to issue Smart Card.

Enter ID #: _

Enter the ID # you want to write to the Smart Card (e.g., A01).

Enter ID #: A01_

Press the Func key to confirm. You will then be asked to present the Smart Card.

Waiting for

SmartCard...



Present a Smart Card near the keypad. The unit will then write the user information to the card.

Writing....

After writing to the card, you will be asked whether or not to remove the user's fingerprint information from the internal memory. It is recommended not to remove user fingerprint information from memory.

Remove Fingerprint

Yes(1)/No(2)?

The unit will prompt for another ID. Enter ID #: _

Press



You will then be asked to present the Smart Card. Waiting for Smart Card...

Present a Smart Card near the keypad. The unit will then write the user information to the card.

Writing....

iv. Delete and Employee

To permanently delete a user from the system, follow the instructions in the table below:


While in standby mode, press the Func key to enter the Setup Menu. Enter the Administrator Password (default 123) and press Func key, then press 4 to select "Delete ID" menu

ID to Delete:

Enter the ID # you want to delete (e.g., A01).

ID to Delete:

A01

Press the Func key to confirm. The ID # is deleted, and the user can no longer get access. The system will return to the standby mode.

ID #A01

Deleted!

v. Inactivate and Re-activate a user

If you want to remove a persons access to your facility, but think you might give them access again in the future, you should inactivate them rather than deleting them

altogether. This feature is also useful because if an inactive user attempts to access your

facility and your system is configured to log unauthorized access (see pg 23) then your

access log will show their failed attempt to access the building. To inactivate a user,

follow the instructions in the table below:




While in Standby Mode, press the Func key to enter the Setup Menu. Enter the Administrator Password (default 123) and press Func key, then press 2 to select Inactive ID" menu.

Enter ID:

Enter the ID # you want to suspend (e.g., A01).

Enter ID: A01

Press the Func key to confirm. The ID # is suspended, and the user can no longer be authenticated. The system will return to the standby mode.

ID A01:

Inactivated !

To re-activate a user, follow these steps:


While in Standby Mode, press the Func key to enter the Setup Menu. Enter the Administrator Password (default 123) and press Func key, then press 3 to select Reactive ID" menu.

Enter ID:

Enter the ID # you want to suspend (e.g., A01).

Enter ID: A01

Press the Func key to confirm. The ID # is re-activated, and the user can now be authenticated. The system will return to the standby mode.

ID A01:

Reactivated !

vi. Enabling Automatch

This feature enables the device to identify a person without requiring the user to first

enter his/her user ID. To authenticate, an Automatch user simply presents their finger for

recognition. Once a match is made, the door opens and the system will then return to the

standby mode.

The maximum number of users allowed to access the iGuard using automatch is limited

to 30 users. This limitation is because normal verification is done by a 1-to-1 comparison



against the fingerprint stored under the user ID which is called up when the user presents

their smart card or enters their ID, and Automatch is a one-to-many comparison against

the entire Automatch population. All Automatch records must be indexed to carry out

this procedure, so allowing more than 30 users would cause the system to run very slow,

and would pose a significant risk of false acceptance.

Users with poor fingerprints should not user Automatch.

vii. Resetting the device

Any iGuard terminal can be turned off easily by removing the power source. However,

there is a very small chance that the unit is in the process of accessing and updating the

internal flash memory at the moment that power is removed. This could result in data

loss.

For this reason, Function 7 allows you to shut down, restart, or reset the system. **Note:

It is recommended that you ALWAYS back up you iGuard before entering the reset

menu.

viii. Emergency Procedures

This feature has been added as a safety precaution. If for some reason your iGuard fails

to respond to you and does not unlock the door as instructed, you can open the door with

the emergency procedure. Press Func key to enter the Setup Mode. Enter your

Administrator Password (default is 123) and press the Func key once again. Press B to

unlock the door manually.

ix. Test Mode

Under normal operation, iGuard will record all user transactions in the access log. You

can disable this functionality for testing purposes during installation if you wish. To do

this, follow the procedure below.


While in Standby Mode, press the Func key to enter the Setup Menu. You will be prompted to enter the Administrator Password (default: 123) as shown.

Enter Password: _

Press the Func key, then press "A" to toggle the machine to Test Mode. The Display will show the Test Mode status as shown. You can now ask the new users to practice with the machine, and the transactions will not be recorded.

== Test Mode! ==

ID #:_



Following the same procedure above and press "A again in the setup menu to put the machine back to Normal Mode.

Mon 30 Dec 13:49

ID #:_

**Note** You must toggle this setting from Test Mode back to Normal Mode before it will begin to record transactions in the access log again.

x. Advanced Functions

Use this set of features to Set Quick Enroll and Reset User In/Out Status.

Quick Enroll is a function which can be used for testing and evaluation, but is not

recommended. It allows a user to be enrolled with only one scan per finger instead of the

usual 3 and yields a fingerprint template of much lower quality. The Quick enroll option

is a toggle function.

After selecting whether or not to use Quick Enroll, the system will ask whether or not to

reset User In/Out Status. The system keeps track of each users last clock event and displays it on the Employee List page. Resetting the User In/Out Status will display a null value for each employee. The system does this automatically every day at midnight.

Follow the instructions below to toggle Quick Enroll and to Reset User In/Out Status.


While in standby mode, press the Func key to enter the Setup Menu. Enter the Administrator Password (default 123) and press Func key, then press 0 to select "Advanced Functions" menu.

Mon 30 Dec 13:49

ID #:_

System

Configuration

Enter 1 to turn Quick Enroll on and 2 to turn it off. Set Quick Enroll Yes(1)/No(2)?

Enter 1 to Reset User In/Out Status and 2 to ignore and return to standby mode.

Reset User In/O...

Yes(1)/No(2)?



VII. Daily Operation There are numerous ways to authenticate a user . The next sections will familiarize you

with the verification process in several different ways.

A. Verification with ID and Fingerprint


While in the standby mode, key in the user ID number (e.g., A01).

Mon Aug 30 13:49

A01_

Lift the shutter and place either your primary finger (right-hand thumb) or your secondary finger (left-hand thumb) on the sensor. You should place the finger the same way as you did during the enrollment procedure. The device will automatically start scanning when the sensor shutter is lifted all the way up.

Scanning... A01_

:

:

Verifying...

If you are authenticated, the device will open the door, and will return to the standby mode.

A01 Authorized!

:

:

Mon Aug 30 13:49

ID #:_

B. Verification with Automatch


While in Standby Mode, place either your primary or secondary finger on the sensor by lifting the shutter. The device will automatically start scanning when the sensor shutter is lifted all the way up

Mon Aug 30 13:49

== Automatch !==

:

:



Mon Aug 30 13:49

Verifying...

If you are authorized, the device will open the door, and will return to the standby mode.

Mon Aug 30 13:49

Authorized !

C. Verification with Smart Card and Fingerprint


While in standby mode, present the smart card near the keypad. The unit will read the data stored in the card, and if the card is valid (i.e., it is not a blank card and with the correct company code), you will be asked to scan your finger.

Jacky Hui

Waiting Finger

The fingerprint image matches the data stored in the card, the user is authenticated. The unit will return to the standby mode, and it is ready for the next card.

Jacky Hui

Authorized

D. Verification with User ID and Password


While in standby mode, key in the user ID number (e.g., A01).

Mon Aug 30 13:49

A01_ IN

Instead of lifting the shutter and placing the finger on the sensor, press the Func key.

Your Password:



Enter the personal password (e.g., 123456) Your Password: ******

Press Func key again to confirm. If the personal password is correct, the person is authenticated and the message will appear.

A01

Authorized

VIII. System Maintenance

A. Backup and Restore

We suggest that you backup the internal iGuard data periodically to a PC on your

network. In the event that the system has to be replaced or reset, the data can be restored,

and the employees do not need to re-enroll. If you reset the system without a current

backup, all user, access, and attendance records will be lost. There is no way to recover

any data from the iGuard unless you have a backup. To perform a backup, from the

Web interface, select Backup from Tools in the Navigation Bar. If prompted, enter the System Administrator username and password (admin / 123 is the default) and you

will see a window like this:

Select what you would like to backup, and click Save. You will see a dialog box similar to the one below asking you what you would like to do with the file:



Click Save and you will see the default, Windows Save as Dialog box. Choose a name and location for the file to save it.

To restore data to your iGuard system, select Restore from Tools in the navigation bar. You will see this window:

Click Browse to select the location of your backup. When the location is set, select what you would like to restore with the Restore Options check boxes and click Go to perform the restore action.

B. Cleaning the Fingerprint Sensor

C. Employee Export

This function is used to move an employee from one iGuard system to another. You

can export up to 20 employees at once, and they are exported to a file on your PC. To

perform this action, select Export Employee from Tools in the Navigation Bar. If prompted, enter the System Administrator username and password (admin / 123 is the

default) and you will see this window:



Enter the Employee ID that you wish to export and click the Export button. You will be prompted to save the file.

IX. Report Creation

iGuard has the ability to generate Access Log, Attendance, and Daily In/Out reports in

Microsoft Excel (.xls) as well as generic, comma delimited text (.txt). The Period drop down menu allows you to specify a generic date range like yesterday, today, last week or last month. It also gives you the ability to specify a date range. Reports may be run by department, or you can select All Departments. **Note: Because each employee may be a member of more than one department, any report run with All Departments selected will show --- in the department field in the export. For advanced reporting capabilities, see Appendix A: pg 50.

A. Excel Report

From the Web interface, select Export (XLS) from Tools in the Navigation Bar. If prompted, enter the System or User Administrator username and password, and you will

see this screen:

Select the parameters for the report you wish to export, and click the Export button. You will be prompted to download the file. Leaving the Employee ID field blank pulls all employee IDs



B. Text Report

From the Web interface, select Export (TXT) from Tools in the Navigation Bar. If prompted, enter the System or User Administrator username and password, and you will

see this screen:

Select the parameters for the report you wish to export, and click the Export button. You will be prompted to download the file. Leaving the Employee ID field blank pulls all employee IDs



X. Appendix A: Complimentary Software Utilities

A. iServer

iServer is a Free, Windows based program used to collect transaction records from

iGuard and save them to an ODBC compliant database format. You can download

iServer at http://www.lucky-tech.com/us/downloads.php.

By default, iServer will create a Microsoft Access file (.mdb), but it is compatible with

any ODBC compliant database, so it can be used with MS SQL, mySQL or Oracle quite

easily.

i. System Requirements

Windows 98/ME/NT 4.0 or later/XP/Vista. For Windows 98, ensure that the latest ODBC driver patch is downloaded from Microsoft.

iServer software can connect to iGuard via modem, LAN, or WAN.

ii. Installation

This section will guide you through the installation of iServer with default settings. We

will assume that the network settings in your iGuard master unit are the default settings.

If you have changed those settings, please make note of the changes.

If you have not already done so, download the iServer executable from:

(http://www.lucky-tech.com/downloads/ISVRSetup243851.exe ). The executable will

guide you through actual installation, and we will discuss post-installation configuration

in this manual. After installation, iServer will launch and prompt you with the following

dialog box:

If you select Yes, iServer will create an empty database for you in Microsoft Access (.mdb) format. If you select No, you will need to create and configure a database on your own. For more information about creating your own database, see pg 61.

After clicking Yes you will see this dialog box:



This allows you to select Microsoft Access compatibility. If you do not know what

version you are using, the default is usually acceptable. Do not change these settings

unless you have a specific reason to. Select Ok and the following dialog box will appear:

This screen allows you to set the name of the data source, its description and location.

Select Ok to move to the next screen. You will be prompted by a dialog box whether to configure iServer now. If this is your first time running the program, select No to use program defaults. These are the most common settings and will work for 99% of iServer

users.



The next three dialog boxes will ask you whether you want a desktop icon, if you want

iServer to start when Windows starts, and if you want iServer to start receiving the access

log now. iServer is now ready to add an iGuard master unit.

To add a master unit, click the Add icon on the iServer menu bar. iServer will search your network for iGuard master units. If yours is not shown, input the IP address of

your iGuard master unit in the appropriate place in the Add Master Unit Dialog Box

and click Add

If you input a valid IP address, iServer will ask if you want to configure the iGuard.

Click yes to configure advanced options.

All options displayed in the iGuard Properties Dialog Box should be correct by default.

Ensure that the Register Server Check Box is selected and click Ok. This will register iServer with the iGuard Master Unit and complete the configuration of iServer.



Click Ok in the Save Changes Dialog box. iServer is now ready to receive transactions from your iGuard Master Unit. To test this, select the Access Log tab along the bottom of the iServer window, and present your finger print or smart card at

your iGuard Master Unit. You should see the access record immediately.

iii. iServer Window The iServer interface is divided into four main sections:

The Menu Bar along the top containing standard and specific menus as well as graphical buttons

The Navigation pane at the left of the window containing links to the Access log, Employee list, Reports, and other information

The Navigation Tabs along the bottom, duplicating most of the information in the Navigation pane

The Information window which will change based on your selection in the Navigation Pane or Navigation Tabs

Navigation Pane / Navigation Tab Options and Details

Server o iServer Program Version o Number of iGuards o Number of Logs Received since the program started

iGuards o Name o IP Address o Master / Slave



o Description o Serial No. o Version o Last Access

Access Log o EmployeeID o LogDateTime (For Microsoft Access and Microsoft SQL Server only) o LogDate (For other databases) o LogTime (For other databases) o TerminalID o InOut (0 = In, 1 = Out, 2 = F1, 3 = F2, 4 = F3, 5 = F4) o Access Log Viewer Modes:

Text Mode Shows only most recent 200 logs

Use this mode for best performance Database Mode

Shows all Access logs in the database

Performance depends on the number of logs in the database

Employee o EmployeeID o LastName o FirstName o OtherName o Password (Not in use) o EmpStatus o NumMinutiae1 (Not in use) o NumMinutiae2 (Not in use) o PhotoFile (Stores the file name) o Minutiae 1 (Not in use) o Minutiae 2 (Not in use) o Photo (Not in use) o Department

Reports o RCDID o EmployeeID o LogDate o LogTime o TerminalID o InOut

Event Log o Time o Events



iv. Database

Transaction

In order for iServer to receive access log data from iGuard, the iServer must be

registered. Registering iServer to your master unit tells the master unit where to send

access logs, and also tells the master to buffer access log records if the iServer is offline

for any period of time. Once iServer is registered to the master unit, all access log

records are stored in the iGuard unit locally and also in the iServer database. **Note**

FPS model iGuard units will store up to 5000 access log records in internal memory,

and can buffer the full 5,000 while iServer is offline. For LM Series iGuard units, this

number is 10,000.

Import From iGuard

o Access Log

To import the access log, right click on the name of the iGuard master unit and select

Import Access Log from iGuard. This is located on the left hand side of the iServer window, at the bottom of the Navigation Pane. This will import all records from the

iGuard access log database into your iServer database.

o Employee

If you are using FPS model iGuard units, it is possible to import employees from the

smart card database or the internal database. For LM series iGuard units there is only

an internal database. To import the Employee data (EmployeeID, LastName, FirstName,

OtherName, Department and EmpStatus) to the local database, right click on the name of

the iGuard master unit and select Import Employee List from iGuard > Internal Memory.

Backup and Restore from iGuard

o Backup

You can perform a backup of your iGuard system through iServer. To do this, select

Backup Database from the Terminals menu on the menu bar. You will be prompted to select a location for the .idb iGuard backup data file.

o Restore

iServer will also allow you to perform a restore of your iGuard data from a backup. To

do this, select Restore Database from the Terminals menu on the menu bar. You will be prompted to select the file you wish to restore. Only .idb files are compatible with the

restore functionality.



o Purge Access Log from iGuard units

iServer will allow you to purge the access log data from your iGuard units. This will

permanently delete any access log data currently being stored in the iGuard internal

memory, but access log transactions stored in iServer will remain intact. To do this, right

click on the name of the iGuard in the Navigation Pane and select Purge Access Log. ** Note** You will not be prompted to confirm this action.

Purge Logs from Local Database (ODBC)

o Access Log

You can purge all data from the access log in your ODBC database copy of the iGuard

data if you wish. To do this, select Purge Access Log from the Tools menu on the menu bar. You will see a dialog box asking if you are sure. Click Yes to purge the access log.

o Event Log

You can purge all data from the event log in your ODBC database copy of the iGuard

data if you wish. To do this, select Purge Event Log from the Tools menu on the menu bar. You will see a dialog box asking if you are sure. Click Yes to purge the access log.

Backup and Compact Database (ODBC)

This function allows you to perform standard maintenance on your database as well as

back it up to an alternate location if you wish. Select Compact Database from the Tools menu on the Menu Bar. You will be asked whether you want to backup the database. Choose yes to select a location, choose no to simply compact your database.

You will be notified whether this is successful or not.

Create Empty Database (ODBC)

iServer gives you the ability to create an empty database that is linked to iServer and

ready to receive transactions. Create an empty database by selecting Create Empty Database from the Tools menu on the menu bar.

Insert Test Log

iServer contains a function that allows you to insert a specified number of test records

into the ODBC database Access Log. Do this by selecting Start Log Insert Test from the Tools menu on the Menu Bar.



v. iServer Settings

System Settings

o Network Settings

Access the iServer Configuration Dialog Box by clicking the Setting button on the Menu Bar. Network settings are under the System Setting of the Configuration dialog box. You can change the server port and the subnet mask.

o Miscellaneous Settings

Click the Setting button on the menu bar. The System Setting tab includes a Misc. Setting box that allows you to do several different things.

Keep Access Log in drop down box o This box allows you to specify whether to record access log records to the

ODBC database, a text file, or both

Start Receive Data when server starts Check Box o This box must be checked for iServer to collect data from iGuard

automatically

Hide Window when Start-up Check Box o Check this box to minimize iServer to your task bar upon startup

Date Format drop down box o This box specifies the format that iServer will save dates in the database

or text file. **NOTE** This format MUST match the format configured

in your iGuard master unit or iServer will not receive the access log

records from iGuard correctly.

Hide when minimized check box o Checking this box will minimize iServer to the tray rather than the task

bar.

Update Terminal list IP check box

You will also find check boxes on this tab that will create shortcuts to iServer on your

desktop and in your PCs startup folder.

ODBC Setting

The ODBC setting tab will need to be accessed and edited if you want to use a database

other than Microsoft Access.

To reach the ODBC settings, click the Setting button on the Menu Bar. Select the ODBC Setting tab in the Configuration dialog box. This tab allows you to see the data source names, driver names, Parameters of the ODBC database, and the tables it



contains. Use this tab to disconnect from the data source, create a table in an existing

data source, and delete a data source.

The default database created in Microsoft Access will not have parameters specified in

the parameter box, however some databases will need login user name and password.

The example below shows the parameters required for a SQL server:

DSN=iServer

UID=sa

PWD=1

The parameters cannot be changed while you are actively connected to a data source.

Once you have entered parameters, click the Connect Button. If iServer connects successfully to the database, the Tables in Database list should populate. iServer will now be ready to receive data. For more information see pg 61.

Database Settings

o Access Log

The Table Name drop down box allows you to select which database table iServer will use. This section also allows you to select whether to display only the most recent 200

records or all records in the database within the iServer interface.

o Use Employee Table

The Use Employee Table Check Box must be checked in order to use the Employee Viewer part of the iServer interface. This section also allows you to specify whether to

save employee photos inside the database or in a separate file. **Note** Most databases

do not support saving image files within the database itself and this is not recommended.

o Other Options

The Check Box labeled Show Emp Info in Acc Log (Slow) works only when you choose to show all logs in database. When selected, this option will show each

employees First and Last name, Other name, and Department for each transaction in the access log viewer. The other check box in this section allows you to show or hide the

report page in the iServer interface.

Advanced Settings

The advanced tab of the Configuration dialog box contains the SQL statement used to

place data into your ODBC database. It is not recommended that you change this

statement.



You can also specify whether the In / Out status is saved as a Boolean (Raw Integer

Value) or Text format.

Additionally you can save In, Out, and F1-F4 records as a coded value. Do this by

selecting the Convert Access Log Status Check Box.

SMTP Settings

If you would like to receive e-mails about iServer errors, you can configure the SMTP

outgoing mail server settings. Because most Internet Service Providers (ISPs) no longer relay mail without authentication, these settings are only recommend

Documents

iGuard® LM Series