OnGuard Core

Core
OnGuard-Core 7.3 EMEA Jan 2017

Legal Notice – please read
THIS PRESENTATION, DOCUMENT and ITS CONTENT IS STRICTLY CONFIDENTIAL and may
not be copied, disclosed or otherwise disseminated either in whole or in part without UTC Fire &
Security Americas Corporation, Inc.’s (UTCFS) prior written approval.
This document does not constitute an offer to supply any products or services or a binding contract
thereto, nor does it give rise to legally enforceable rights or obligations. UTCFS will not be bound to
make any supply of products or services unless and until UTCFS and your company enter into a
formal written binding contract for the same.
This document is intended solely to facilitate discussion between the parties.
This document only sets forth certain information disclosed for the purpose of this meeting and a
description of the financial and other terms that are anticipated to be included in a proposed written
agreement between the parties and shall not create a legally binding or enforceable agreement
(except for the confidentiality obligation) or offer.
You acknowledge that UTCFS standard terms and conditions are also anticipated to be included in
a proposed written agreement.
All information is delivered on an “as is” basis and all representations and warranties, express or
implied, are hereby disclaimed, including, without limitation, that the information is accurate or
reliable for any purpose whatsoever.
2
2
Introductions
Who?
– You and your employer
Where?
– Where are you from
What?
– What’s your role and experience with regard to
access control systems?
Why?
– What do you hope to achieve from this training?
3
Agenda
DAY 1 TOPICS DAY 4 TOPICS
– Certification – Alarm Acknowledgement
– OnGuard Introduction – Introduction to Monitoring Zones
– Introduction to Databases – Access Levels and Access Groups
– OnGuard Software Installation – Cardholder configuration
– OnGuard Services • Badge Designer
– Navigation • Badge types
• Managing Cardholders and their Badges
DAY 2 TOPICS
• FormsDesigner Lite
– System-Wide Configuration
– Basic Alarm Configuration
– Access Control Configuration
– Timezone Reader Mode
– Hardware Basics
– Action Types and Groups
– Holidays and Timezones
– Scheduler
– Configuration of Access Panels
– Local I/O Function Lists
DAY 3 TOPICS
DAY 5 TOPICS
– Introduction to Alarm Monitoring
– Global I/O
– Configuration of Alarm Panels
– Alarm Monitoring Additional Features
– Configuration of Card (Badge) Format
– Archiving
– Configuration Readers
– Use of WATCH Lite
– Reporting
– Single Sign-on
– What ‘s Next?
Exact timing may vary from plan
4
Course Materials
USB Flash Drive
– Course presentation slides
– Related documentation
– Hardware Crib Notes
Pad and Paper
– Please take notes!
Crib Book
OnGuard License Key (by email)
– For use after class
5
HELP: Will appear here to guide you to the correct manual or software component or page
Courseware
Plug the USB device in
Navigate to the root
Double click on autorun.exe
Select the discipline

Open the Presentation
Sticky Notes function
available in Adobe PDF
Reader
– Save file if you add notes!
6
HELP: Remember to take the device with you at the end of class. Add additional files as you wish
Core
CERTIFICATION PROGRAM
7
Certification Program
Program Objectives
– Proficiency of OnGuard VAR technical staff
– Proficiency of OnGuard USER technical staff
– Provide access to:
• UTC Fire and Security Lenel Technical Support Group
• Secure Web Resources
– Keep up-to-date with the latest feature changes and
additions through web-based Distance Learning
– Enhance the owner’s OnGuard system via various
features and topics covered in the courses offered
8
Courses are offered at various dates
and locations which can be found at
www.lenel.com/training
Certification levels are:
– Associate
– Professional
– Expert
9
Course Name
– Core
Duration
– 5 days
Exam Pass
– Required
Certification
– Associate
10
Attendees and Technical Support
Employees (direct or indirect) of Value Added
Resellers, once certified:
– Gain Access to Technical Support for Hardware and
Software help
• Customer site must have a Software Upgrade and Support
Plan (SUSP)
OnGuard End Users:
– Technical Support is available from their Value
Added Reseller
– If a Direct Support Agreement is held then they also
gain Access to UTCF&S Technical Support for
Software
11
Distance Learning (DL)
Certified VAR Engineers must maintain
Certification through Distance Learning classes
– Web-based instruction for OnGuard updates and
hardware changes
Each OnGuard release has a corresponding DL
Register to attend an update DL within 120 days
after new OnGuard release
– www.lenel.com/training - Distance Learning
System Users can choose to stay current as they
upgrade their OnGuard version
12
VAR Technical Support
The caller must have taken the necessary
course(s) for the issue(s) they are calling UTCF&S
Technical Support Group (TSG) about
TSG phone automation process requires
Certification ID number and System ID number
– Certification ID number is issued automatically to every student
and is sent via email when registered for the CORE course
– System ID is the dongle or software license ID of the customer’s
system
• System ID is the same terminology as License ID, FlexNet ID,
Dongle ID, and License File Activation ID
13
Technical Support Validation Procedure
The following is required:
– Tech Support by email:
• tech.emea@fs.utc.com
– Tech Support by phone:
• See following numbers
– Provide the following:
• Your Certification ID Number
• System ID (Customer license number)
– Must have a valid software upgrade and support contract
(SUSP)
• Provide existing Ticket number if relevant
– Existing tickets bypass initial call queue
– Closed tickets can be reopened if necessary
14
Technical Support Phone Numbers
Free phone EAME Technical Support
Updated telephone numbers may be

obtained via: https://www.utcfssecurityproducts.eu/lenel-support.php
Subject to change without notice

15
Lenel Knowledge Base
Access from http://kb.lenel.com
– Useful tool for solutions to common technical
issues, product information, and technical
documentation
Includes bookmark and powerful search
16
http://Ideas.lenel.com
Suggest ideas and improvements for the OnGuard
software through http://ideas.lenel.com website
Users can vote or make comments on the posted
ideas
Ideas gaining a lot of support are more likely to
feature in later releases of OnGuard
Use your email address and password for access
to Ideas.lenel.com
17
Certification Exam Access
Access the exam(s) once released and your
certificate(s) using your email address and
password at the exam web site
www.lenel.proexams.com
The exam is taken at this website and once
completed, it will be immediately scored
– Access certificate via Partner Center
Certificates can be authenticated via
www.lenel.com
Certification exam required once every two years
18
Initial Certification Exam
Exam required for certification
– 30 days to complete and pass from end of course
– Hosted at http://lenel.proexams.com
• User name: your email
• Password: sent by email, can be emailed to from site
• Invitation to take exam sent by email on last day
– Multi-Choice, select the one correct answer for each
question
– Minimum 70% to pass
– 2 additional attempts if required
• 80% pass required
– Reminder email sent at 20 days after class
– English or French (with English)
19
Re-Certification Exam
Regular exam required for ongoing certification
– Re-Certification Exam required once every two
years from date of original certification
Notification by email
20
Accessing Lenel’s Web-Based Tools
Initial Password by email
– By attending this class you will be provided with an
initial account and password
– If you need web access help please email
• training.registration@fs.utc.com
– Same user and password for all Lenel Websites
after certification
• http://lenel.proexams.com – examination and certificates
• http://ideas.lenel.com - discussion forum for improvements
• http://partner.lenel.com – VAR transactions logs
• http://kb.lenel.com – technical support Knowledgebase
21
WARNING!
This presentation and training is based on
OnGuard version 7.3
Earlier versions of OnGuard will have a smaller
feature set
– Consult release notes to find out when features are
introduced to the product
Later versions of OnGuard may:
– Have additional features not covered
– Use alternative navigation to that covered
– Have features removed or changed
– Attend update training!
22
Core
ONGUARD INTRODUCTION
23
OnGuard Versions Review
OnGuard is routinely re-released
– New features added
– Knowledge Base Article 1345
Release Release Date Support End Date
Unsupported
6.4 June 2010 July 2013

6.4 TU1 Nov 2010 Nov 2013
6.5 June 2012 June 2015
6.6 March 2013 April 2017 (with SP1)
Supported
7.0 October 2014 October 2017

7.1 October 2015 October 2018
7.2 February 2016 February 2019
7.3 November 2016 November 2019
24
OnGuard Commercial Packages
SWS / SWC packages
– Only require one (1) SWS (Software Server)
– SWC are for the clients (Software Client)
– SWS-32ES, SWC-32ES, SWS-ADV etc.
PCS / PCC packages
– Includes the computer (PCS-32ES, PCC-32ES, PCS-PRO, etc.)
32ESI, ADVI, PROI
– Access Control and ID Management
IDES, IDADV, IDPRO
– ID Management only
Package Concurrent Clients Quantity of Readers
32ES 1–5 32 – 64
ADV 1 – 10 64 – 256
PRO 1 – Unlimited 128 – Unlimited
25
General Hardware Architecture
LS Communication
Server Alarm Panels
Auxiliary
Inputs and
Outputs
Workstation(s)
Intelligent
System
Controller
Readers
Reader Interface Modules
Locks
LNL Series used
within this Door Contacts
illustration
Exit Buttons
Intelligent Dual Reader
Controller
26
Primary Access Control Hardware
Access Panel – ISC – Intelligent System Controller
– LNL-3300
– Legacy only: LNL-500, LNL-1000, LNL-2000
Access Panel – IDRC – Intelligent Dual Reader Controller
– LNL-2220, LNL-4420
Access Panel – ISDC – Intelligent Single Door Controller
– LNL-2210
Alarm Panels – Input and Output Modules
– LNL hosted: LNL-1100, 1200, LNL-1300e
RIMs – Reader Interface Modules
– LNL hosted: LNL-1300, LNL-1320, LNL-1300e
27
Overview Terminology
Upstream Communication
– Bidirectional between ISC and upstream LS Communication Server
Downstream Communication
– Bidirectional between ISC and downstream hardware
Relay Output
– Hardware that can be turned on, off, or pulsed such as lights, sounder or siren etc.
Devices or Modules
– Addressable hardware components
Input
– Alarm points such as motion detector, glass break sensor, switches, door contacts etc.
Auxiliary Input/Output
– Configurable use
Dedicated Input/Output
– Specific use only
Firmware
– Programmed procedures used to control hardware
28
Core
ONGUARD SOFTWARE
29
Database Overview
Databases supported by OnGuard are simply a
collection of information interlinked and
organized for ease of data storage and retrieval
– Hardware, Cardholders, and more
OnGuard supports
– Microsoft SQL (Structured Query Language)
• Data stored in Tables (rows and columns)
• SQL 2012/16 Server
– Oracle
• Required to have a database administrator (dba) available
to support Oracle needs
30
Databases - SQL
Microsoft has two key versions of SQL
– SQL Server Standard (or Enterprise) – Licensing
required
• Per seat – each computer that will access the database needs a
license. Five clients are included in the standard license and more
can be purchased
• Using multiple OnGuard applications from one computer is only 1
seat. Determine the number of workstations using OnGuard to
determine the number of CALs (Client Access License)
– SQL Server Express
• Free version of SQL
– Installation program included on OnGuard Supplemental Disc
31
Databases - SQL
SQL Express limitations
– Express has size limitation
• SQL 2012/16 Express is 10GB
– Versions prior to 2008 were 4GB
• SQL 2012/16 Express is supplied with the product
– Express has no automatic database back up utility
• No SQL Server Agent Service
• Manual backup via Express Management Studio
– Right click on database > Tasks – Backup
– Maximum RAM utilization is 1GB
• Increased workload may impact Express performance
32
Databases - SQL
SQL Server Management Studio allows users to:
– Manage SQL
• Create databases and user accounts
• Required to create an Archive Database
– If not available Archive to file is available
– Perform queries
– Configure maintenance related items
• Database backups
• Performance Analysis
• Not available in SQL Express Management Studio version
– Available from http://microsoft.com (free)
33
Database Support – SQL and Oracle
Microsoft SQL Server
– 2012 SP2 or SP3 64-bit
• SQL 2012 Express 64 bit versions supplied ready-to-install
from Supplemental disc release 18 or later
• Obtain 32 bit version if required from http://microsoft.com
– 2014 SP1 or SP2 64-bit
– 2016
Oracle
– Generally 11g and 12c
• See release notes for specific versions and limitations
34
Operating Systems Supported
Server
– Windows Server 2012 Standard 64-bit
– Windows Server 2012 R2 Standard 64-bit
Workstation
– Windows 7 with Service Pack 1 (64-bit)
• Professional
– Windows 8/Windows 8.1 (64-bit)
• Enterprise and Professional
– Windows 10 (64-bit)
Visit http://partner.lenel.com for list of approved

Microsoft Service Packs and Critical Patches
35
Supported System Components
Components
– MDAC - Microsoft Data Access Components
• Consult Release Notes for exact versions
– DirectX - Microsoft DirectX to support multimedia applications
– IIS - Internet Information Services
• Required for any Web Based OnGuard products
– Area Access Manager, Video Viewer, Visitor Management
– Scan Shell SDK 10.03.19 or later
• If using Scan Shell OSC device
– Adobe Flash Player 9 or later
36
Supported System Components
Components
– .NET Framework 4.6.1 automatically installed with OnGuard
• Can be manually installed in English via link on Supplemental disk
– For non-English download from Microsoft.com
– .NET Framework 4.0 utilized by SQL (if applicable)
– MSXML automatically installed with OnGuard
• Can be manually installed via link on Supplemental disk
– Web Browsers
• Internet Explorer (required for browser-based applications) Version 11.0 64 bit
– 32-bit version of Internet Explorer when using VideoViewer (Browser-based Client)
• Microsoft Edge: Evergreen browser
• Apple Safari (Mac only)*: v8.x or later
• Google Chrome*: Version 40.0 or later
• Mozilla Firefox*: Version 37.0.1 or later
– Microsoft Silverlight 3.0 or later
• Required for Visitor Administration
37
Core
SOFTWARE INSTALLATION
38
Installation Steps
Check for minimum system requirements
– Ensure Windows Administrator rights for Windows
User login account for the computer
Install any needed prerequisites
– Adobe Acrobat for .PDF documentation
Install database manually
Install OnGuard and follow Setup Assistant
Install any hot fixes and Microsoft security
patches
– Check for Lenel approval first
39
New Server Installation Supplies
Visit http://partner.lenel.com to download
– OnGuard Software
• ISO Installation package
• ISO Supplemental package
– Media kit is optional extra
– Updated User Guides (if relevant)
OnGuard License File
– FlexNet file
– Dongle plus file (Legacy)
If using SQL Express
– It is recommended that you obtain a copy of Microsoft SQL
Express Management Studio from microsoft.com
40
Minimum System Requirements
Minimum PC Specifications for non-digital video
client or server:
– Pentium IV Dual Core Processor
– 2 GB RAM
– USB Ports
– Monitor at 1024x768 or higher
– 6 GB of available space
Digital Video Client spec is higher
41
OnGuard Installation ISO
Decompress or mount the installation ISO file and
double-click on then:
– Install OnGuard
– View OnGuard documentation from DVD
• Browse to <DVD-Drive Letter>\Program Files (x86) \OnGuard\Doc
• Adobe Acrobat is available for install on the Supplemental DVD
– Access to the Installation.PDF and Advanced Installation
Topics.PDF as needed
– All documents may be searched at once
• Use the Search All User Guides link in the documentation folder
42
OnGuard Supplemental ISO
OnGuard Supplemental ISO
Revision 21 is released with the
software
– The ISO includes :
• Prerequisite Software
– SQL 2012 Express Server
» For 64 bit OS
– Adobe Reader
– .NET Framework 4.6.1
• Credential Center Device Drivers
• License Key Drivers
– SafeNet (USB) Driver
43
Optional Additional Downloads
Visit Microsoft.com to download:
– SQL Management Studio
– SQL 2014 Express 64 bit
– SQL 2016 Express 64 bit
Visit http://partner.lenel.com
– Module installation packages
• ‘WATCH lite’ will be used in this class
• Other modules include:
– Policies
– Credentials
– Cardholder Self Service
– Visitor Self Service
– WATCH Standard
44
Installing OnGuard – Server vs. Client
Installed Components Server Client
Installed Components Server Client Service and Support
OnGuard 2012 Program Menu Bulk User Tool √ √
Alarm Monitoring √ √ Communication Server √
Area Access Manager (SWG-RAMxx) √ √ Configuration Editor √ √
ID CredentialCenter (Edit Only) √ √ Database Backup (SQL Express only) √
ID CredentialCenter (View Only) √ √ Database Setup √
ID CredentialCenter √ √ Global Output Server √
System Administration √ √ Import √
License Server √
System Management Console √ √
Linkage Server √ √
Video Viewer √ √
Login Driver √
Visitor Management (SWG-VM) √ √
PTZ Tour Server √ √
Setup Assistant √ √
Documentation √ √ Universal Time Conversion Utility √
Video Archive Server √
Comparison of components installed for a System Tools

Badge Designer √ √
Typical Server System (Column 1) versus Device Discovery Console
Typical Client System (Column 2) Forms Designer (SWG-1210) √ √
License Administration √ √
Map Designer √ √
Replication Administration √
Server usually has all Client components Replicator √
Security Utility √ √
45
OnGuard Server - Installation Path
OnGuard
Server Install Microsoft SQL
Installation
Select Platform or
Custom
NO Does an YES
Select SQL Server/Express AccessControl Select SQL Server
(Assisted) database exist Manual
or will exist?
Select Database and

License Location
OnGuard
Setup
Assistant
46
New Installation of OnGuard
Goals:
– Install OnGuard Server
• Use ISO installation package
– Use SQL Management Studio Express
• Review AccessControl Database set-up
• Review LENEL login account
– Reference Installation Guide
47
SQL Express – Automatic Installation
Unless already installed
locate installation file
– If necessary Unzip the ISO
file to c:\supp
• Then run runme.exe
– Supplemental Disk has
installation files for SQL 2012
64 bit Express
Extracting the file will begin
Installation is fully
automated
Internet access is required
for updates
48
SQL Express – Manual Installation
Internet access is required for updates if
required
Step-by-step Video is available for OnGuard
Server installation
Carefully follow procedure in chapter 5 of the
installation guide
49
OnGuard Server Installation
Click the installation link on
memory stick or desktop
– If necessary Unzip the iso file to c:\og
– Then run setup.exe
Accept the license terms
50
Server (Choose this)
– Installs all standard server
components
– See chart on a previous slide
Client
– Installs all standard client
components
– See chart on a previous slide
Monitoring client
– Installs Alarm Monitoring
application
Badging/Credential Client
– Installs the Credential Center
application
51
Installation type
– Platform
– Custom (Choose this)
Database type
– SQL Server (Manual) (Choose this)
– If a SQL database already installed and
configured
Assisted
– The installation will automatically adds the
database called ‘AccessControl’
– The installation will also make a SQL
Login called ‘lenel’ for OnGuard to use
Oracle Server (Manual)
– If an Oracle database is already
installed and configured
52
Program installation location
– Location where OnGuard will be
installed
Location of License Server
– Network name of License Server
workstation
• Defaults to local machine name
• Port 8189 is default
Location of the Database
– Network name of database
Server
• Defaults to local machine name
53
Custom Install of Device
Discovery Console and
Service
Device Discovery Console is
utilized to discover and
maintenance devices
(Access Panels, Cameras) in
a network (local subnet)
Choose ‘This feature will be
installed on local hard drive’
from the drop down box
Device Discovery Service
can be used to find devices
on other subnets
54
Once the OnGuard installation is complete, Setup
Assistant will automatically launch to complete
the OnGuard installation
– On the Server it will assist with:
• Running the Security Utility
• License file installation
• Database installation (connect to existing SQL)
– Running Database Setup
– Starting Services
On a Client computer, it will assist with:
– Running the Security Utility
– Starting Services (Client Update Service)
55
Installation – Setup Assistant
Choose Apply
Settings for the
Security Utility
This Utility makes the
necessary security
adjustments to the
Firewall to allow
OnGuard operate
Allow Licensing
Server to be a
Trusted Site when
prompted
56
Installation – Licensing
Complete the
License file
Installation/Review
and Activation
Browser based
License
Administration may
also be launched
outside of the Setup
Assistant
– User: admin
– Password: admin
57
License Types:
– Permanent
• Contains perpetual licensed features
• All OnGuard system require one of these licenses
• OnGuard version specific
• Date restriction applies to Training and Demo licenses
• Install before any Subscription licenses
– Subscription
• Controls features that are only available while the
Software Upgrade Support Plan is active
• Features carry an expiry date
• Not OnGuard version specific
• Install after Permanent license
58
Licensing OnGuard
– Browse to the License file location
• The actual License file (.lic) does not have to remain on the
server once this process is completed
– View License File and scroll to the bottom to click
Next
– Select Yes to Agree to the License Agreement and
click Finish
– Enable the FlexNet License, see following
59
System License implementation
– Use Setup Assistant to complete 3 steps for License file
installation (Browse, View, Agree to License Terms)
• If needed, run License Administration from OnGuard Program
Folder
– LS License Server runs automatically as a service
on the OnGuard Server
• Controls the number of concurrent clients logged in
• Controls access to software options of the system
– If using USB dongles, make sure they are plugged in
– License Administrator password can be changed here
60
Permanent Licensing Activation – FlexNET
Physical dongle option for upgraded systems
– Customers using USB dongles will continue to use
dongles unless they request to use FlexNET
Completed either in Setup Assistant as part of the
License installation or in the browser based
License Administration under OnGuard Program
Folder
– Each license file has a unique Activation ID that determines
features and feature counts
Activation may be completed online, by phone, or
by text messaging (SMS)
61
To activate click on ‘(activate)’
– Not required for Hardware key licensing
62
Choose your Activation
method
– Online
• For online activation the system will
attempt to contact the Lenel
licensing server
– http://licensing.lenel.com
– Phone
• Texting
or
• Calling Technical Support
63
The Online Activation
connection might not be
able to be completed if
there is a proxy server on
the network
– The name of the server and valid
network user account information
must be supplied
Upon successful
connection to the licensing
server, the software will be
activated
64
Phone Activation
– You will see an Activation ID and
Activation Code in the window
– Contact Lenel at the phone numbers
provided to receive the Confirmation
Code
– Type in Confirmation Code
Optionally, select Phone
Activation for MobileActivate
feature
– Use Cell Phone to text Activation ID
and Activation Code
65
Benefits of using MobileActivate:
– No need to contact Lenel Technical Support
– Licenses are activated instantly
– MobileActivate provides 24/7 license activation
Steps
– Text the Activation ID, followed by a space, followed by the
Activation Code to +44 7937 947945
• Entered with or without dashes, and use upper or lower case
letters
• Example: 200110 896T91TK0CZ69l0NCXX5QJ2Z
– Receive Confirmation Code back in approximately 30 seconds
• Enter the received code into the Confirmation Code field
• Must be UPPER case
66
Returning the License
– The activation process ties the license to the server hardware, if
you need to move the license you MUST first return it
– The same process as activation will be used to ‘return’ the
license so that it can be attached to another server
– Contact Technical Support if License Server is unavailable
67
Administrator Properties
– Used to change the admin password
– Allow local administration only checkbox
• Must use License Administration at that specific computer only
68
Setup Assistant - Service Log On
LS Site Publication, LS Client Update and LS
Event Context Provider services
Provide account credentials with access to the
database
For these 3 services to be
utilized an account must be
provided with database
access unless Local System
Account can access the
database
In general the use of System

Account authorization is not
recommended
69
Setup Assistant - Service Log On
LS Site Publication, LS Client Update and LS
Event Context Provider services
– Log On can also be edited under Service properties
LS Site Publication
– Used with OnGuard Enterprise or Mobile Badging
options
LS Client Update
– Used to update OnGuard client Workstations
automatically
LS Event Context Provider
– Used to translate event IDs produced by hardware
into meaningful information for Webpages
70
Setup Assistant - Backup
A backup should be taken within Setup Assistant
if updating from an earlier release of OnGuard
71
Database Installation
– If prompted provide any
non-default credentials
and press ‘Connect’
– Press ‘Install database’
72
Database Setup
– Populates the OnGuard AccessControl database with the
necessary tables
– Runs on OnGuard Server only
– A valid OnGuard license is required in order to run Database
Setup
– Form Translator will be executed automatically
• Used for Web Based Applications
73
Service Startup
– Necessary LS Services will
start automatically
• Does not include LS Comm
Server which is required if
communicating with
hardware
Setup Assistant
Finished
OnGuard Server
installation is complete
74
Installation – Setup Re-run
Some Set-up Assistant
Components can be re-run if
required
Start > All Programs > OnGuard >
System Tools
– License Administration
• (Default admin admin to login)
– Security Utility
Start > All Programs > OnGuard >
Service and Support
– Database Setup
– Set-up Assistant
75
Adding WATCH Lite
WATCH stands for: Web Access Trending &
Comprehensive Health
Prerequisites
– IIS is required
– Free* subscription license is required
– Network required
– Web-page features include:
• Counting Access panels, Readers, Inputs, Outputs, Cardholders, Active badges,
Visitors, Visits, Badges created per day, Alarms per day
• Basic system information
• Installed versions of OnGuard, Windows operating system, SQL Server (not Oracle),
Server IP address
• System performance monitoring
• CPU usage, Memory usage, Hard disk space, Network usage, OnGuard error logs
(* Valid SUSP required)

76
Adding WATCH Lite
Add Microsoft Internet Information Server (IIS)
– Type ‘Turn Windows’ in run box and select ‘Turn
Windows Features on or off’, wait for list
– Select ‘Internet Information Services’
• Selection will cause the selection box to go blue
– Press OK and wait for completion
77
Adding a WATCH Lite License
If WATCH Lite is going to be used add an
appropriate Subscription license
– Open OnGuard License Administration
• Start > All Programs > OnGuard > System Tools > License
Administration (Default admin admin to login)
• Add the subscription license for WATCH lite
NOTE: WATCH Lite is only supported on SQL

databases
78
Adding WATCH Lite
Run
OGWlite_1.0_2015_06_15.msi
– When prompted
• Agree to license then ‘Install’
• Select ‘Finish’ when prompted
• Provide database connection
information
• Username: lenel (default)
• Password: Secur1ty# (default)
– Allow installation to complete
• Select ‘Close’ when If database password is
configuration completes changed WATCH Lite must
be uninstalled and
reinstalled
79
OnGuard Installation Complete
OnGuard applications are ready to use
By default the only user enabled is the SA
account
Password is SA and must be changed on initial
login
– Log in to System Administration and change the
default SA password from SA to a secure password
80
OnGuard Passwords
OnGuard supports strong password enforcement
for both user logon and database access
– Passwords that are considered weak cannot be used
– Database password needs to be changed via the login driver
• Default password = Secur1ty#
– Prior to OnGuard 7.0 the default password was MULTIMEDIA
• Reference Installation Guide
– Reinstall WATCH Lite if Database password is changed
OnGuard is not case sensitive
Strong Password Rules
– Passwords cannot be blank, same as the user name,
MULTIMEDIA, LENEL, BASIS, PASSWORD, PROKUPETS,
PROKUPET or Secur1ty#
81
OnGuard Installation Complete
Open Internet Explorer and type
url:
– http://<server_name>/watch
– Log in with SA and the new SA
password
Confirm access to WATCH Lite
It may take a few minutes for the
data in WATCH Lite to appear
Server must be connected to a
network to obtain statistics
82
Core
ONGUARD SERVICES
83
OnGuard Services
Several OnGuard programs may be run
interactively on the desktop or as a Windows
service (Preferred)
– Lenel programs able to be run as a service will be listed as LS
{service name}
Windows manages all services running in
Windows and allows the administrator to set the
startup of the service
Location options to view LS Services
– Start (Run) – type in services.msc
– Control Panel | Administrative Tools | Services
– OnGuard’s System Management Console
84
OnGuard Services
Start with
‘Lps …’ or
‘LS …’
OnGuard’s System
Management Console
view
Windows Services view
85
OnGuard Primary Services
LS Login Driver (Auto start)
– Manages database login access
– Typically located on the OnGuard Server or Database Server
• Does not run on client machines
LS License Server (Auto start)
– Communicates with the software key and provides licensing
verification (concurrent logins and feature sets available)
– Typically located on OnGuard Server, but can be any
workstation
86
LS Communication Server (Start if needed)
– Provides a communication interface between the access
control hardware and the OnGuard Server
– Typically located on OnGuard Server, but can be any
workstation(s)
– Can have LS Comm Server running on multiple computers
LS Linkage Server (Start if needed)
– Manages multiple features within OnGuard
• Scheduler
• Global I/Os and more
– Typically located on the OnGuard Server, but can be any
workstation
87
LS Client Update Service (Auto Start)
– Allows for automatic update of client machines to
match the version of OnGuard running on the
OnGuard Server
• LS Client Update Service works for new releases and
cumulative hotfixes
– Installed and runs automatically on all OnGuard
client machines
– The client User does not need Windows
administrator rights
• Service installs the upgraded client which requires
administrator Windows Log on credentials
88
LS Client Update Server Service (Start if needed)
– Configuration is needed in System Administration >
System Options
– Service must be able to interact with the Desktop
– Adjust service ‘log on as’ in client Workstation

services if required
89
Core
SQL SERVER MANAGEMENT
STUDIO INSTALLATION AND USE
90
SQL Management Studio
Installed as standard with SQL (licensed edition)
– Optional with SQL Express 2012, 2014 or 2016
Search www.microsoft.com for SQL 2012, 2014
or 2016 Express Management Studio Download
– Select 64 bit instance, Download then Run
Select all defaults at each step and accept the
license when prompted
Required for database property checks and for
manual preparation of database(s) if desired
See video for SQL Management Studio
installation
91
Select Installation
This process is only
required if the
database and SQL
login is to be
manually
(SQL 2012 shown)
configured
92
Setup Support files
(SQL 2012 shown)
93
Select Perform a new installation of SQL Server
shared component
OnGuard is pre-
configured to use
the Default
Instance of SQL
(SQL 2012 shown)
94
Product Key and License Terms
(SQL 2012 shown)
SQL 2012 is illustrated
95
Select Management Tools
(SQL 2012 shown)
96
Click Next for Error and Usage Reporting and
Installation Rules
(SQL 2012 shown)
97
Installation Progress and Complete
(SQL 2012 shown)
98
Log in to SQL Server
Management Studio
– SA password if OnGuard
installed SQL Express is
Secur1ty#
(SQL 2012 shown)
Review
– AccessControl database
exists
– Lenel Secur1ty# login exists
99
Manually Configuring SQL Server
Here are the steps to manually create the
necessary SQL database components required
by OnGuard
Launch SQL Management Studio
– Login using either Windows Authentication or SQL
Authentication
• If you use Windows Authentication, you must be an Administrator on the
SQL server
– Carefully and accurately follow the procedure

described in the OnGuard Installation User guide
100
Expand SQL server Object
tree
– To create a new ACCESSCONTROL
database, right click on the
Databases folder and select New
Database
OR
– To view current ACCESSCONTROL
database right click on the Databases
folder and select Properties
– Installation Guide
• Microsoft SQL Server 2012 or 2014
101
The OnGuard database name needs to be
– ‘AccessControl’
The database has two major components:
– Database file (*.mdf)
• Repository of configuration and data
– Transaction Log file (*.ldf)
• Log file of database transactions processed by SQL
102
50MB is the recommended initial size of the
database file
– The default behavior is to automatically grow the database file
– The file size will increase by 1% when required
– Unrestricted file growth
• The initial size is less important if this feature is used
– The recommendation is to set the growth to 10%
10MB is the recommended initial size of the
Transaction Log file
– The default behavior is to automatically grow the log file
– The file size will increase by 1% when required
– The maximum recommended log file size is 2048 MB
103
Database Recovery Model
– Simple - May only be restored to the point of the last backup
– Full - Provides complete protection against media failure
– Bulk-logged - Takes less space, but does not offer as many recovery
options
Compatibility Level
– Set to SQL Server 2012 (110)
• This is used for running SQL scripts
104
Database Options – set to True
– Auto shrink
• When the database shrinks in size, the
correct size will be shown
– Auto update statistics
• Specifies that out-of-date statistics
needed by a query for optimization are
built automatically during database
optimization
– Recursive triggers
• Enables recursive firing of triggers
105
The default database login for
OnGuard needs to be created
– It is automatically created if SQL Express
was installed during OnGuard Installation
Open the Security folder, then
right click on the Logins folder
and select new login
– To View existing LENEL account – right
click on Lenel account located in the
Security>Logins folder and go to Properties
106
The login should be configured as follows:
– Login Name ‘LENEL’
– Password ‘Secur1ty#’ – case sensitive
– Choose the use SQL authentication option
SQL passwords are case-sensitive
It is recommended to deselect the password
checkboxes
– Enforce password policy
– Enforce password expiration
– User must change password on first login
107
The Lenel account should have the
following server roles
– Database Creator (dbcreator)
– Server Administrator (serveradmin)
The Lenel account should also be
mapped to these databases
– master
– tempdb
– DO NOT select the AccessControl
database at this time
• The Lenel account cannot become the owner
of the database if AccessControl is chosen at
this step
108
The Lenel account needs to be the owner of the
AccessControl database
– Run this stored procedure from the SQL New Query
sp_changedbowner lenel
– This will make the Lenel login account the owner of the database
– Press the F5 key or the Execute button to run the procedure
109
3. Click Execute or press F5
1. Select
new
2. Type
query
the query
as shown
4. Success
message
110
Limit SQL to 50% of memory use when OnGuard is on
the same server
– See installation guide for additional details
The SQL service must be restarted after this change
111
Core
DATABASE BACKUPS
112
SQL Database Backup
It is critical to perform backups of the database
Installation Guide
– Database Backup and Restoration
Manual Database backup
– SQL 2012 Express Management Studio
• Right click on AccessControl database > Tasks – Backup
• Optionally under OnGuard program folder > Service and Support >
Database Backup
– SQL Server Management Studio
• Right click on AccessControl database > Tasks - Backup
• Backup type
– Complete (Full Backup)
– Differential (Backup changes since the last full backup)
• Select destination media
113
SQL Database Backup
Automatic Database backup
– Standard SQL backups can be automated by using a SQL
Maintenance Plan
– SQL Express backups need to use the Windows scheduled
task tool in Accessories > System Tools > Scheduled Task (or
Task Scheduler)
114
SQL Database Restoration
Database Restoration
– All OnGuard database connections must be terminated prior to
attempting to restore
– It is recommended to delete the current AccessControl
database prior to the restore if it exists
– SQL Server Management Studio
• Right click on the database folder
– Restore Database
115
SQL Database Services and Port 1433
There are several SQL Server services, but only two are
utilized as part of an OnGuard system
– SQL Server (MSSQLServer) Service
• This service must be running for database interaction
– SQL Server Agent Service (MSSQLServer)
• Installed with Standard SQL Server only, not installed with Express
• Must be running for SQL Server Maintenance Plans (backups)
SQL defaults to port 1433 for remote connections to the
database
116
Core
LANGUAGE PACKS
117
Language Packs
Many Language Packs are
supported for the current
release of OnGuard
– Supported Language list
is available at Lenel.com
under Support Tools >
Downloads
• Log in is required
– OnGuard will
automatically install all
released language packs
for new installations and
upgrades
118
Language Packs
Database Translation Utility,
which updates the database
with the translation language,
must be run on the server in
which the database resides
– Start>All Programs>Database
Translation Utility System
Regional Settings need to be
changed to the language to be
used
Must be enabled on the License
file (no charge)
Language Pack User Guide
documentation in Installation
folder
119
Language Packs
Existing customers of OnGuard 2013 and later
will not need to re-apply a language pack after
installing the upgrade to 7.3
– Appropriate language must be enabled within
License
– Launch Translation Utility via:
• Start > All Programs
• In Windows 8/10
– select the appropriate tile
120
Core
CLIENTS, UPGRADES AND

MAINTENANCE OPTIONS
121
Client Installation
For new installations
– Use Installation files to carry out a ‘client’ installation
• When prompted follow wizard for Client install
For existing installations being upgraded
– If Automatic Client Upgrade was previously
configured
• Client(s) will automatically upgrade
– If Automatic Client Upgrade is not configured
• Carry out manual upgrade from installation files
• Follow wizard for Client install
122
Client Installation
LS Client Update Service
– Allows the OnGuard server workstation to
automatically update client workstations
– When a client workstation opens an OnGuard
application, the application detects that the software
version does not match the Server
• The application then allows the user to either cancel the
login or update the client software
123
HELP: Must be configured for use within System Administration -> Administration -> System Options -> Client Update
Two services enable automatic update of Clients
• Note: Servers must be updated manually with DVD
– LS Client Update Server Service is installed on the
server workstation
– LS Client Update Service is installed on each client
workstation
– Update occurs when user logs into client
– Must be configured for use prior to server upgrade
124
HELP: Must be configured for use within OnGuard. OnGuard 6.5 or later required.
Installation Maintenance Mode
The OnGuard installation
will detect an instance of a
previous installation with the
same version/build
– Modify installation
• Add/remove components
– Repair
• Reinstalls any files found
to be corrupt
– Remove
• Removes files created
by the installation
• See Knowledge Base Article
number 1108
125
OnGuard Web Applications
OnGuard web applications require the use of
combinations of the following services:
– Internet Information services (IIS)
• Installed from the add/remove windows components dialog in the
windows control panel
– Lenel LS Platform Service
• Can only be installed via a custom OnGuard server installation from
the OnGuard installation ISO
• Prior to OnGuard 7.0 called ‘LS Application Server’
– LS OpenAccess
– LS Web Service
– LS Web Event Bridge
– LS Event Context Provider
Documentation can be found in Installation guide or
installation.pdf file
– Configuring the Web Application Server
– Attend Professional-Data class
126
OnGuard Web Applications
You must have IIS installed on the target
computer before you are able to select LS
Platform Service Server under server
applications during install or using the modify
option
– Current IIS web based applications in OnGuard are
• Area Access Manager
• VideoViewer
• Visitor Management
• WATCH lite (LS Platform Service Server not required)
It is highly recommended that the Target
Computer of IIS is a Windows Server
127
Software Upgrade
The OnGuard installation will detect an instance
of a previous version of OnGuard
– Upgrades OnGuard 6.x.x
• Database Password cannot be MULTIMEDIA
– Change via Login Driver Application before or after upgrade to 7.1
– Upgrade the Server first, then client machines
– The update process will prompt the user for a database
password and perform a scan for non-supported hardware
• This hardware must be removed from the existing database before
upgrade can continue
• A database backup will be required before the upgrade can continue
– Install updated License file after upgrade
– Database Setup must be run after upgrade
• Automatic via Setup Assistant
128
Software Upgrade (cont.)
Ensure that all prerequisites are met
.Net 4.6.1 and C++ will auto install, if missing
Accept License terms, click next
Verify Lenel DSN when prompted
Re-boot when prompted
Follow Set-up Assistant
129
Software Upgrade Mode - UTC
UTC – Coordinated Universal Time
– UTC used by OnGuard 6.3 and later
– Run OnGuard Universal Time Conversion
Utility after upgrading from 6.1 or earlier
– Run OnGuard Universal Time Conversion
Utility when restoring transaction history
archived with 6.1 or earlier
– OnGuard can be used while Universal Time
Conversion Utility is run
– Events are presented according to the User
Workstation clock
Reference KB article 1674
130
HELP: Universal Time Conversion Utility
OnGuard Updates
OnGuard Hot Fixes (when/if available)
– Available from the Lenel.com
• Tech Support page, click on DOWNLOADs
• Log in required
• Specific to build
• Only install if the fault being fixed is useful
• STOP ALL LENEL SERVICES before installing
• Must be installed on all OnGuard Workstations (Servers and
Clients)
Microsoft Windows Security Patches
– Only install if approved by Lenel
– Check the Lenel.com
– Recommended that Microsoft Automatic updates are disabled
• Reboots are often asked for that can disrupt OnGuard activity
131
OnGuard Login Driver
Steps to change LS Login Driver password
1. Stop LS Login Driver service
2. Run LS Login Driver as an application service
3. Open LS Login Driver from System Tray
4. From the Edit menu select Change Password
• Follow prompts
– Default SQL Login password is Secur1ty# (formally MULTIMEDIA)
• Note: Both the LS Login Driver and Database server password must be
updated
– This will automatically happen if they are both on the same machine
– If they are NOT on the same machine, the password can be passed to the
database server via plain text (uncheck box)
5. Exit the Login Driver application and restart the LS Login Driver service
If database password is changed Watch Lite must be uninstalled and
reinstalled
Legacy MULTIMEDIA password from 6.6 or earlier must be updated
before or after upgrade for OnGuard 7.3 to allow user login
132
OnGuard Client Updates
– Allows the OnGuard server workstation to
automatically update client workstations
– When a client workstation opens an OnGuard
application, the application detects that the software
version does not match the Server
• The application then allows the user to either cancel the
login or update the client software
– Administration rights are not required by the user
– Configuration of this service follows
133
Core
INSTALLATION
TROUBLESHOOTING TIPS
134
Operating Systems - UAC
Windows UAC:
– When using these operating systems, it is
recommended that User Account Control (UAC)
be turned off
• Potential issues with installation, registering .dlls,
accessing acs.ini file, changing Login Driver password
– Go to Control Panel/User Accounts
• Change User Account Control Settings slider to never notify
– In Windows 2008 uncheck the box to turn it off
• Search for UAC to find settings location
– DPI (dots per inch) settings for Windows
• Issue – overlap of fields in OnGuard
• Adjust DPI setting to 96 DPI by searching program and files for
DPI
135
Virtualization Support
OnGuard 7.3 can run on:
– VMware vCenter ServervSphere Client(ESX &
ESXi) 5.5 or 6.0
– VMware Workstation 11.1
– Microsoft Hyper-V 2012 or 2012 R2
Virtual platforms are NOT supported with video
viewing clients
136
Antivirus Support
Antivirus
– The following products are suggested
• Symantec Endpoint Protection
• McAfee Virus Scan
– Lenel does not re-test for new antivirus updates
– Antivirus software installed at the user’s risk
– May be necessary to disable Antivirus scanning while
installing products
137
OnGuard Clean Removal
Knowledge Base Article number 1108 for full
instructions
Knowledge
Base
Remove OnGuard from computer via
– Control Panel > Add/Remove Program
• Windows7 = Control Panel > Programs and Features
– Or using same version of OnGuard Installation ISO
138
ODBC
Open Database Connectivity (ODBC) is the process
of connecting software to a database
– SQL Server Native Client 10.0 is used as the ODBC Application or
Service
driver
ODBC should be manipulated if:
– The database computer name changes MDAC
DSN=‘lenel’
– OnGuard database (AccessControl) location has
changed
– SQL Server connecting to has changed Database
– Troubleshooting OnGuard Installation
Location of 32 bit ODBC
– C:\windows\syswow64\odbcad32.exe
139
ODBC - System DSN
OnGuard uses a System
DSN (versus File or User DSN)
DSN = Data Source Name
The OnGuard installation
process creates a System
DSN automatically
– The default DSN name is
‘Lenel’
The DSN is used by the
OnGuard software to
connect to the
AccessControl database
140
Configuring ODBC - System DSN
Server Network Name
Database Login ID/Password
– May use either the SA or Lenel account to authenticate
141
Configuring the System DSN
Default Database
– AccessControl
Testing the connection
– Testing the Data Source confirms
• The server name is correct
• The database exists
• The ID/Password combination is
correct
Note: Leave all other configurations at
their default settings
142
ACS.ini Configuration File
ACS.ini file is installed during OnGuard
installation
Initialization file which gives direction and
configuration settings when opening an OnGuard
application
ODBC Connection
– Connect="ODBC;DSN=Lenel”
DataSourceType=2 allows for database selection
when logging into any OnGuard application
– Only used with OnGuard Enterprise or for testing
LicenseServer
– Host Name
– Port (Do not change without consulting Lenel Technical Support)
143
OnGuard Installation Troubleshooting
Database Setup errors
– Use Configuration Editor to resolve
• Found under Service and Support folder within the
OnGuard folder
• Alters either the Application.config file or acs.ini file
• No Login required
• Will detect and correct inconsistences within configuration
files
144
OnGuard Installation Troubleshooting
Error when opening an OnGuard application
Check ODBC connection for correct

Server name, Login Authentication
Named Instances:
<<ServerName>>\SQLExpress
145
System Management Console
Provides a snapshot of the system
– Used for troubleshooting purposes
– Located under OnGuard folder
Displays four types of system info
– Computer information
– OnGuard information
– OnGuard services
– OnGuard log files
Export / Import files
– Log files not included
146
SQL Installation Troubleshooting
Error when opening an OnGuard application
– Ensure Named Pipes is Enabled for all Protocols
• SQL Server Configuration Manager
– Access via Microsoft SQL Server 20xx >

Configuration Tools > SQL Server Configuration
Manager
147
OnGuard Troubleshooting
The OnGuard log files provide information as to
OnGuard status and errors that have been
generated
The logs are located in the following hidden
location
– C:\ProgramData\Lnl\logs
Up to OnGuard 7.2 logs are located in the
following location
– C:\Program Files (x86)\OnGuard\logs
Depending on the OnGuard installation, logs will
be generated for general database access
issues, OnGuard clients and Service issues
148
Core
NAVIGATION
149
OnGuard ‘Lenel Console’
OnGuard 7.3 and later provides the Lenel
Console Webpage to launch Client Applications
and Webpages
Type https://<Server_name>:8080
– Use Fully qualified domain name of server
– A Service called LS Module Manager is responsible
for maintaining content
150
OnGuard Navigation
To gain an understanding of:
– Customizing OnGuard’s System Administration layout
– Utilizing OnGuard Help files
151
Lenel OnGuard Applications
OnGuard has multiple
applications within one
product
– Specific applications can be installed
on a computer through custom
installation of OnGuard
• Guard station using Alarm Monitoring
• Badging Station using ID Credential
Center
152
Menus
Text menus are organized for ease of use
Toolbars allow shortcuts to commonly used
dialogs
– Toolbars may be hidden, rearranged, docked, and undocked
153
HELP: System Administration
Menus - Application
Application menu
– Launches the configuration wizards
– Allows log on and off from the application
– Allows the password to be changed for the current logon
– Allows printer setup
154
HELP: System Administration > Application
Menus - Edit
Edit menu
– Required for Microsoft Certification
– Cut, Copy, Paste is available on certain forms
155
HELP: System Administration > Edit
Menus - View
View menu
– Controls toolbars
• Reset to factory defaults
• Add text labels to toolbars
• Allows toolbars to be hidden from view
– Status bar appears on the bottom of the window
– Tabs used for each open screen which allows fast access to
multiple screens
156
HELP: System Administration > View
Menus - View
Font and text color can be easily reset to system
defaults
– The list font
– The disabled text color
Save settings remembers the settings changes
made when the user exits the program
– The settings are per user, per machine
The system tree is a graphical depiction of the
common system configuration and shortcuts to
the configuration dialogs
– It may be hidden, docked or undocked as well
157
HELP: System Administration > View
Menus - Window
The Window menu controls how the windows
appear. They may be set to:
– Cascade
– Tile horizontally
– Tile Vertically
– Allow the user to arrange the icons
– Close all windows
158
HELP: System Administration > Window
Menus - Help
The Help menu contains:
– Contents
– Search
– Send Feedback
– About
159
HELP: System Administration > Help
Menus - Help
There are several ways to get to the help screen
– F1 key
– Help menu
– Question mark toolbar button
– Help button
160
Menus - Help
On any
context-
sensitive help
screen, there
are
descriptions,
and
procedures to
help you
161
Menus - Help
You can also
search by
keyword
162
Help - About
Help – About
contains:
– Intellectual Property
Information
– Product Version
– File Versions
– System Information
• Includes System ID
Number known as
‘DongleID’
163
HELP: System Administration > Help > About
Core
SYSTEM-WIDE
CONFIGURATION
164
OnGuard System Wide Configurations
To gain an understanding of:
– Creation of User accounts and permission levels
– System wide configurations affecting all OnGuard
users
– Workstations
– Scanners and Encoders
165
System Configuration
Users
– The setup of personnel with permissions to operate and
configure OnGuard via the OnGuard applications
System Options
– Configure the system’s default settings such as quantity of
timezones, access levels, and more
166
User Permissions
Configures user accounts for OnGuard applications
Permission Groups allow easy configuration of
OnGuard user accounts with similar permissions
Report
Permissions
System Cardholder
Permissions Permissions
OnGuard
User
Monitor Field/Page
Permissions Permissions
167
HELP: System Administration > Administration > Users
User Accounts
Create (Add) the user
information
– First and last name
– Notes may be added
Create an internal
account for the user
– User name and password
Access to OnGuard
disabled
Created/Changed dates
168
HELP: System Administration > Administration > Users > Users > General
Permission Groups
Permission Groups are templates used to control
user permissions within OnGuard applications
Appropriate permission group(s) can then be
assigned to the OnGuard User account
169
HELP: System Administration > Administration > Users > Users > Permission Groups
User Permissions (cont.)
System Permission Groups
– Controls system wide configuration abilities, application access,
and hardware configurations
Icon Key:
View
Add
Modify
Delete
Icon Indicator Key:

Dark - Enabled
White - Disabled
Partial under group
170
HELP: System Administration > Administration > Users > System Permission Groups
Cardholder
Permission
Groups
– Cardholder
configuration
– Badge configuration
– Capture options
– Bulk operations
171
HELP: System Administration > Administration > Users > Cardholder Permission Groups
Monitor Permission
Groups
– Alarm Monitoring
options
– Video control
– Hardware control
172
HELP: System Administration > Administration > Users > Monitor Permission Groups > Permissions
Report Permission
Groups
– Allow Users to add
and/or delete reports
– Allow Users to view,
and/or modify specific
reports
– Filter Report View for
ease of locating
specific set of reports
173
HELP: System Administration > Administration > Users > Report Permission Groups
User Permissions - Report
Upgrading to OnGuard 7.3 from 6.6 (without SP1)
or earlier
– OnGuard Users previously with no report capabilities
will have no report capabilities in 7.3
– OnGuard Users previously with partial report
capabilities (add, modify, delete, view/access) will
have View only access in 7.3
• Post-upgrade adjustments may be required
– OnGuard Users previously with full report
capabilities will have full report capabilities in 7.3
174
User Permissions
Field/Page Permission Groups
– Controls the ability to view/edit cardholder related fields
175
HELP: System Administration > Administration > Users > Field/Page Permission Groups
Permission Groups - Comparison
Compare checkbox can be used on System,
Cardholder, Monitor, and Report Permission
group tabs
Used to compare feature set between two groups
176
HELP: System Administration > Administration > Users > System Permission Groups - Compare
Exporting Permission Group Data
System, Cardholder, Monitor, and Report
Permission Groups may be exported to a Comma
Separated Variable (.csv) file format
– In the Compare mode, the user can export the
settings of the permission groups being compared
– CSV files may be imported into programs such as
Microsoft Excel
177
HELP: System Administration > Administration > Users > System Permission Groups
User Search
Search for Users with common permissions
• Permission Group
• Selected Permission (And)
– Must have all selected permissions
• Selected Permission (Or)
– May have any selected permissions
• Results may be exported as .csv file
178
HELP: System Administration > Administration > Users > Search
System Options – General Tab
Authorization Warning
– Displayed during logon as a disclaimer
• ‘None’ is the default
– Standard or Custom are other options
• Define the text and font to be displayed
• “&” symbol can be used to designate a keyboard
shortcut (Alt key plus first letter – Alt Y for example)
• ‘Yes as default’ may be selected which allows the
user to accept the warning by hitting Enter Key
179
HELP: System Administration > Administration > System Options > General System Options
Alarm Monitoring Event
Queue Threshold
– System wide setting for controlling
the maximum number of days of
queued events that the database will
store per Alarm Monitoring station
• Monitor station must be configured to
queue events
• Sets how many days before queue is
overwritten
– Specify monitor zone assignments
• If selected, allows you to choose
which monitor zone a controller is
assigned to
180
The LS Linkage Server is
used to execute many
features within the
OnGuard software
– One instance per system
• Can be run from any OnGuard
workstation, but typically on the
OnGuard Server
– Responsible for:
• Schedules, Action Groups, Global
I/Os, Guard Tours, Digital Video
Locking, Automatic E-mail,
Destination Assurance and more
181
Enforce strong passwords
– Mandates changing weak account passwords
– Default is Enabled
– Enforces the following rules
• Passwords cannot be blank
• Passwords cannot be the same as the user name
• Passwords cannot be one of the following keywords
– MULTIMEDIA
– LENEL
– BASIS
– PASSWORD
– PROKUPETS
– PROKUPET
– Secur1ty#
182
System Options - Hardware Settings Tab
System Wide Limits
– Holidays – 20-255 supported (Default = 255)
– Timezones – 127-255 supported (Default = 255)
– Access levels – 255-31,999 supported (Default = 255)
– Available panel memory for badges is reduced as these
settings are increased
183
HELP: System Administration > Administration > System Options > Hardware Settings
Maximum Badge Number Length
– Default length is 9 digits, configurable up to 18 digits
• Crystal Reports limited to displaying 15 digits in Lenel reports
– All areas of the software dealing with badge ID will conform to
this system setting
– Affects Access Panel available memory
184
Maximum access level assignments per badge
– Total
• With no activation dates
• With activation dates (Start / End date and time)
• Cannot assign to each cardholder more Access Levels than the
quantity selected in the ‘Total’ field
– 0-128 supported
• The default is 6 assignments
• Prior to version 6.1.222 the maximum was 32 access levels per
badge
– Affects access panel available memory
185
System Options – Client Update Tab
Allows the OnGuard Server to automatically
update client workstations
Feature not enabled by default
– Documentation located in Advanced Installation Guide
• Remote Installation of OnGuard
LS Client Update Service must be set to Automatic

start-up and appropriate Log On account, see earlier
186
HELP: System Administration > Administration > System Options > Client Update
Workstations
Defines hardware connected to each Alarm
Monitoring PC
– Encoder
– Scanner
Workstation
Scanner Encoder
187
HELP: System Administration > Administration > Workstations
Encoders/Scanners
OnGuard has the ability to
encode a wide variety of
card types and card
manufacturers
– Smart and Magnetic Cards
CSS Scanner may be used
for Passport, Driving
License and Business
Card Optical Character
recognition and image
scanning
188
HELP: System Administration > Administration > Workstations > Encoders/Scanners
Encoders/Scanners
Encoder is connected to Workstation
– The computer must be first configured as a workstation
Select the encoder/scanner type
Select the card formats to be encoded
189
HELP: System Administration > Administration > Workstations > Encoders/Scanners
Encoders/Scanners
The encoder can be configured one of two ways
– As a standalone device
– As an inline device within a card printer
Communication
– The settings will be dependent on the device type
– All port and communication parameters are set here
190
HELP: System Administration > Administration > Workstations > Encoders/Scanners > Location or Communications
Section Summary
System wide configuration
– User accounts and permission groups
– System Options
• Hardware settings
• Client Update Service
Workstations
– Encoders
– Scanners
191
Core
ACCESS CONTROL
CONFIGURATION
192
Access Control Configuration Topics
Hardware Basics
Holidays and Timezones
Access Panels
Alarm Panels
Card Formats
Readers
Monitor Zones
Access Levels and Access Groups
193
Core
HARDWARE BASICS
194
Power Supply Specifications
Majority of boards require external power
– Two have Power over Ethernet (PoE) option
Current capacity must be adequate to handle
total peak device load
General Rules:
– Power source should be located as close to the
hardware as possible
• Use screened/shielded cables for log-runs
– Minimum 18 AWG or 1.02 mm in diameter
– Do not exceed power rating of individual boards
195
HELP: Use ‘peak’ power requirements when calculating power required.
EAME Power Supplies – for “LNL” boards
Power Supplies with Enclosures
– LNL-400X-CE220P2
• 230 VAC / 50Hz input
• 12VDC 4A output
– LNL-400X-CE220D provides 24V or 12V
• Suitable for 2 standard PCBs (LNL-1320 in size)
• 394 x 318 x 115mm
• LNL-400X-CE220DP2 has 12V/24V output
– LNL-600X6-CE220
• 230 VAC / 50Hz input
• 12VDC 6A output
– LNL-600X6-CE220D provides 24V or 12V
• Suitable for 6 standard PCBs (LNL-1320 in size)
• 610 x 458 x 115mm
196
HELP: 220/230Vac connection by qualified Electrician only. Ensure that enclosure is earthed.
Batteries
Optional UPS (Uninterruptible Power Supply)
Battery
Batteries
– ABT-12
• 12Ah 12VDC battery
– ABT-24
• Two 12Ah 12VDC batteries with harness
• Used for 24VDC power supply operation for door strikes and
other 24VDC applications
197
Hardware Basics - Enclosures
Enclosures only
– LNL-CTX
• Supports 2 standard size printed circuit
boards (PCB)
– LNL-CTX-6
• Supports 6 standard size printed circuit
boards (PCB)
198
HELP: Above enclosures without Power Supply can be used in EMEA region
LNL Controller Ports
LNL Controller Port Numbering
– Refer to specific controller data
for available ports on each
model
– Port 1 is Primary serial upstream
port or secondary upstream CONTROLLER(s)
when LAN is primary Upstream

• Series One (legacy) boards use
Port 6 for secondary Upstream
199
Wiring Downstream Communications
Each Downstream port hosts several Downstream
Devices via RS-485 Multi-drop wiring
Cable end-to end length:1.2km
Downstream Devices Downstream Devices

CONTROLLER
Device Device Device Device
2 3
Device
Device Device
Device
If using the LNL-1300e as a downstream device a

TCP/IP connection is required
200
Expanding RS485 Downstream Ports
Star Multiplexer (LNL-8000)
– 8 RS-485 Downstream Ports from 1
Each Downstream port hosts up to CONTROLLER
8 Downstream Devices via RS-485
Multi-drop wiring
1 RS-485 Port to ISC
Does not increase Downstream STAR MULTIPLEXER
device capacity of Controller
Only method for Star-wiring RS485
201
RS-485 Cabling
1219 metres (4000 feet) - maximum cable
length end-to-end
2 pair twisted shielded pair Belden 9842
1 pair twisted shielded pair may be used
within metal conduit where conduit forms
an earthed screen
Two
Twisted
Pairs
Shield Use one twisted pair for Data
202
2-Wire Communication
TRx+, TRx-, SG (Signal Ground)
– Devices connected by like terminals
– Failure to use SG may cause communication errors
– Alternative identification is; A, B, GND
TRx+ TRx+
TRx- TRx-
SG SG
Bond one end to Earth only

203
2-Wire Communication multi-drop
Join Shield
204
RS-485 Termination
Two terminations to be used per line
– For increased reliability over extended distances
• Minimizes external noise and signal reflection
– Device terminated at each end (End of Line)
– Termination done via on-board Jumpers
– Termination drawings for each component in
hardware installation guide
Device orientation
– Access Panel at beginning of line (typical)
– Access Panel in the middle of line
205
Downstream Hardware Addressing
Each downstream hardware board, controlled by
an Access Panel or Wireless Gateway, requires a
unique ID
– LNL boards use Binary Addressing Scheme
• Downstream Port number + Binary Address
• LNL-1300e uses MAC address
206
HELP: Refer to Hardware User guide for full addressing information
LNL Hardware Addressing
Each downstream hardware board, wired from
an Access Panel, requires an address for
proper communication
Addressing is unique for each downstream
device on one port
Addresses can be duplicated between ports
Board addressing is accomplished by using
the dip switches or Jumpers/Links
Addressing Schemes:
– Where 32 downstream devices are supported: 0-31
207
HELP: Some ISCs can use RS485 upstream with address range 0-7
LNL Hardware Addressing
Dip Switches 6 and 7 are used for baud rate
– Turn both of these ON for 38,400 (Fastest)
Dip Switch 8 is for Encryption
– Turn off unless encryption is configured
Addressing configurations/values can be found in
Crib Notes and/or in the Hardware Installation Guide
– Uses Binary for dip switches 1–5
– Example Dip Switch Binary Value
• 1 ON
1 1
• 2 ON
• 3 OFF 2 2
• 4 ON
• 5 ON
3 4
– Is address 27 4 8
5 16
208
Hardware RS-485 Termination
Termination of the hardware boards is needed
for effective communication on the RS-485
cabling
Termination is accomplish per board using a
Jumper(s)
– See hardware User guides for locations and ID of
links
Default Termination of a new board is ON
– Must remove jumper(s) on hardware board(s) that are not at each
end of the RS-485 cable run
209
Alarm Inputs
An Auxiliary input can be wired and configured
for any additional or required input component
(e.g. motion detector or panic button)
A Dedicated input can be wired for one use only
(e.g. Tamper Input, Power Supply Fault, Request
to Exit Button or Door Contact)
210
Supervision of Alarm Inputs
Unsupervised
1KΩ
1KΩ
Supervised
Alarm Contact
Normally Open Or Normally Closed
211
Alarm Outputs
A Dedicated Output is an output utilized for a
specific purpose (e.g. Door Strike on Reader
Interface Modules)
An Auxiliary Output can be wired and configured
for any additional or required output component
(e.g. Lights or sirens etc.)
Outputs States
– Active, Deactivated, Pulse (5 seconds by default)
212
Alarm Output Protection
Inductive loads will require contact protection to
maintain contact life of 500,000 operations
– Diode for DC devices
• Diode should have ten times reverse breakdown voltage as
the circuit voltage
– MOV (Metal Oxide Varistor) for AC devices
– Effect of no protection:
Damaged Normal
213
HELP: Diode part number 1N4004 is usually suitable
Alarm Output Protection
Output Diode is located close to the

Load (Strike in this example) Load
Module N/C (Strike)
C
N/O
Diode
Fuse
Typical output circuit with DC

power applied. Diode conducts
when power is removed.
DC + -
Source
214
ISC LEDs
LNL ISCs contain 3 status LEDs:
– LED A or 1 – Power (blinks rapidly)

– LED B or 2 – Upstream Communication (On when
communication is in process)
– LED C or 3 – Downstream Communication (On when
communication is in process)
*(Series 2 Controllers have additional LEDs for

status and inputs.)
215
Downstream Panel LEDs
LNL Downstream Panels contains 2 status
LEDs
– LED A – Power (blinks rapidly)
– LED B – Communication to ISC (On when
communication to ISC is in process)
Input LEDs (series 2)
Reader activity (series 2)
All Output have ‘Active’ LEDs
216
Core
ACCESS PANELS OR ISC’S
217
Lenel Access Panels - Series 2
LNL-2210 LNL-2220 LNL-3300 LNL-4420
218
Access Panels (or ISC)
An Access Panel (or Intelligent System Controller)
is a requirement for hardware configuration
– Must have at least one for an access control system
Multiple and different Access Panels types may be
deployed based on the needed hardware
components (number of readers, motion
detectors, other)
An Access Panel, or ISC, is the link between the
OnGuard software and the downstream hardware
– ISC = Intelligent System Controller
219
Access Panels (cont.)
Bi-directional upstream communication with the
OnGuard software
Bi-directional downstream communication with
all dependent devices
– Alarm Panels
– Reader Interface Modules
Network (TCP/IP) / RS-232 / RS-485 / Modem
Reader
OnGuard
Server Access RIM or
Panel AP
RS-485 Motion
Or Detector
TCP/IP
220
Upstream and Downstream Comms
Upstream Downstream
Direct Connect Direct Connect
– RS-232 – RS-485
• 50 feet / 15m
• Belden 9610 or equivalent • 4000 feet / 1219m
• Belden 9842 or
– RS-485
equivalent
• 4000 feet / 1219m
• Belden 9842 or equivalent Network (TCP/IP)
Network (TCP/IP) – LNL-1300e only
Dial up
221
HELP: Not all Access Panels offer all four upstream communication choices
Access Panel Memory
Memory to store hardware, cardholder, and event
related items
Available memory on panels for database
• LNL-2210 has 6 MB – Available flash storage
• LNL-4420 has 16MB – Available flash storage
Available memory for Events
• Up to 50,000 events can be stored
• Backed up by Lithium battery
222
Replacing Series 1 for Series 2
Power
– Series 1: 12AC or 12VDC
– Series 2: 12-24VDC
• Note DC Power will be required if swapping S1 to S2
LEDs
– Series 2 has more diagnostic LEDs
Mixed Series
– Series 1 and 2 can be mixed downstream
LNL-1300 Series 1
– Does not support flash firmware – limited lifetime
223
Access Panels - Series 2
LNL-2210, LNL-2220, LNL-3300, LNL-4420
RS485 Maximum Maximum Maximum Memory Upstream Max Reader
Downstream Downstream Downstream Downstream Available Ports Supported
Panel # Ports Devices RIM Panels Alarm Panels
LNL-22101 1 8 85 85 6M 1 176
LNL-2220 1 323 325 165 6M 1 646
LNL-3300 23 32 per 325 325 15M 22 4 64
port
LNL-44207 23 32 per 325 325 16M 1 646
port
1 For downstream device support with 0 or 1 onboard reader used
2 Both upstream ports must be connected to the same LS Communication Server
3 Including the onboard RIM
4 2 with optional LAN adapter fitted, 1 otherwise
5 Maximum via network and via RS485 and combined
6 Including Onboard Readers
7 OnGuard 7.2 or later is required
224
Access Panels - Series 2
LNL-2210, LNL-2220, LNL-3300, LNL-4420
PoE Capable CTX(6) Mounting US Tripple- Built-in RIM Upstream Offline Event BACnet Support
Gang Back box Buffer
Panel # mounting
LNL-CONV-1 Ethernet
LNL-2210 Yes Yes Yes 50,000 No
Ethernet
LNL-2220 No Direct No Yes RS232 50,000 No
Modem
Ethernet
LNL-3300 No Direct No No RS232 50,000 No
RS485
Modem
LNL-4420 No Direct No Yes Ethernet 50,000 Yes

RS232
Modem
225
Access Panels - Series 2 (cont.)
On-Board RIM LNL-2210, LNL-2220 and LNL-4420
Doors Directly Supported Readers Directly Supported
LNL-2210 1 21
Single Door Controller
LNL-2220 2 2
Dual Reader Controller
LNL-4420 2 2
Dual Reader Controller
1 When not using downstream support capability, otherwise 1
226
LNL-CONV-1 Adapter
LNL-2210 and LNL-1300e can be mounted in US
triple-gang switch back-box
Use LNL-CONV-1 Plastic Adapter plate to mount
a single LNL-2210, LNL-1300 or LNL-1300e
module to fit into a CTX, CTX6 or other enclosure
– Aluminum bracket must first be removed and
discarded
– The board will overhang the adapter plate on length
227
LNL4420 BACnet
BACnet (HVAC protocol)
devices are now supported
by OnGuard 7.3 via LNL-
4420 only
– LNL-4420 acts as a BACnet
Server
– 63 points can be exposed
on one LNL-4420
• Physical inputs of the LNL-
4420 and downstream
panels (including aux inputs Alarm Panel points marked to be
on door controllers) exposed to BACnet Client (BBMD*)
• Virtual outputs, which are
State changes of OnGuard Points
settable state registers which
can be set by OnGuard will update status in BACnet Client
and/or the external BACnet
client(s) BACnet is a common protocol used
in HVAC equipment
228
LNL-3300 Dual Path Communications
The following Secondary Upstream Options are
available: Primary Secondary
– LNL-3300 RS232/485 Built-in Ethernet

Built-in Ethernet RS232/485
Ethernet Adapter
Modem
Modem None
– Only one port is active

– Switch-over is automatic if Primary fails
– Switch-back is automatic if Primary restores
– Both ports must be hosted by the same LS
Communications Server
229
Ethernet Adapter
Lantronix Devices
– LNL-ETHLAN-MICR (Micro 100) 10/100Mbps
• Secondary on LNL-3300 (Series 2)
– Primary on legacy LNL-500 & LNL-2000
• Includes Stand-offs
– Legacy LNL-ETHLAN-UDS
• Lantronix UDS1100 Micro Serial Server
• External device with external power supply
• DB25 to RJ45 (10/100baseT)
• For use with Series 1 Access Panels
– Consult Hardware user guide for set-up instructions
230
Wiring Details
Consult the OnGuard Hardware User Guide or
Hardware crib book for exact wiring schematics
and tables for each product
231
Core
ALARM PANELS
232
Alarm Panels
LNL-1100 LNL-1200 LNL-1300e
233
Alarm Panels
Used for auxiliary functionality
Inputs
– Monitors the state of hardware (open or closed) (e.g.
Motion detectors, light switch, panic button, etc.)
Outputs (relays)
– Hardware component that can be activated or
deactivated (e.g. Light bulb, sirens, strobes,
sprinklers, etc.)
234
Alarm Panel Inputs and Outputs
Input
ISC ALARM PANEL
Output
Number of Auxiliary Number of Auxiliary

Inputs Outputs
LNL-1100 16 2
LNL-1200 0 16
LNL-1300e 4 2
235
LNL-1100 LEDs
LED functions
– Board status
• A - Heartbeat
• B - Communication
– Tamper/power fault status
• CT – Cabinet tamper
• PFL – Power fail
– Alarm input status
• 1-16 Input in active alarm state
– Relay status
• K1-K2 Corresponding to relay energized
236
LNL-1200 LEDs
LED functions
– Board status
• A - Heartbeat
• B - Communication
– Tamper/power fault status
• CT – Cabinet tamper
• PFL – Power fail
– Relay status
• K1-K16 Corresponding to relay energized
237
LNL-1300e in ICM mode
Input Control Module (ICM)
– Supports connection to monitor up
to 4 alarm devices
• Supervised or Unsupervised
• N/O or N/C contacts
– Includes 2 on-board relays (Aux 3 stickers are provided
with MAC address
Outputs)
– No readers/doors if in ICM mode
2 dedicated inputs
– Cabinet tamper (NC contact) PoE vs 12V link under
TB5 (remove TB5 for
– Power failure (NC contact) access)
• Jumper with wire if not using
238
LNL-1300e in ICM mode (cont.)
PoE (802.3af, 12.95 watts)
– Communications with ISC is via TCP/IP only
Ethernet Recommendations
– 10/100 MBps can be used when NOT using PoE
• Board can be powered from a regular power supply
– 10 MBps should be used when using PoE
• Switch must be configured to only allow 10 Mbps
• Using 100 Mbps may cause instability
Reports to any of the following ISCs with latest
firmware:
– LNL-2210, LNL-2220, LNL-3300, LNL-4420
For other details refer to LNL-1300e as a RIM
239
Wiring Details
240
Core
READER INTERFACE
MODULES
241
Reader Interface Modules
LNL-1300 LNL-1320 LNL-1300e LNL-2220
LNL-4420
LNL-2210
242
Reader Interface Modules (RIM)
Door hardware can have up to five
components:
– Door Contact
• Allows for monitoring of door status/state
• Dedicated input
– REX – Request to Exit
• Button or sensor operated to exit through door
• Dedicated input
– Strike – Locking device
• Powered door component used to release/energize door for entry
• Dedicated output
– ‘IN’ Reader
• Allows the person to identify themselves at the door for entry
– ‘OUT’ Reader
– Allows the person to identify themselves at the door for exit
243
General Reader Interface Functions
Provides interface to several reader data formats:
– Wiegand (D0/D1) To ISC
– Magnetic (Clock/Data)
– CASI F2F and SF2F
– RS485
• OSDP (V1) Reader Interface
• OSDP (V2) Module
• Bioscrypt / Safran Morpho
• LNL-CK
Eight (8) simultaneous card formats supported
– Interpretation of the bit-string received by the reader
Interface Module from the reader
Dedicated Inputs for door contacts, REXs
Up to 500 feet/152 metres
– Auxiliary inputs 6 Conductor cable (Belden
Dedicated On-board relays for door strikes 9536 or equivalent)
– Auxiliary outputs 4 Conductor cable if using
OSDP
NOT ALL GENERAL FEATURES ARE AVAILABLE
ON ALL READER INTERFACE MODULES
244
RIM Communication
To ISC
– 2-wire RS-485 cabling to ISC (Belden 9841 or
equivalent, recommend Belden 9842 for dedicated
SG conductor wire)
• TR+, TR-, Signal Ground
– M5 Enclosure provides back-plane RS485
– LNL-1300e uses Ethernet only
To Readers
– 6 Conductor wire (Belden 9536 or equivalent)
Cable Cross
Reference Table in
Hardware
Installation Guide
(Section 1)
245
Reader Modules
Total Doors Auxiliary Auxiliary
Readers Inputs Outputs1
LNL-1300 1 1 0 1
LNL-1320 2 1 or 2 21 2
LNL-2210 22 1 0 1
LNL-2220 2 1 or 2 21 1
LNL-4420 2 1 or 2 21 1
LNL-1300e 2 1 23 13
1 Per Reader
2 1 reader if downstream port is utilized
3 Total (reader 1 only)
246
RIM Capabilities
RIM Capabilities Table (1 of 3)
Reader Data Format Outputs Aux
1 2 1 2 3 4 5 6 DC REX Power1
Bioscrypt RS485
F2F Format
Mag with Wiegand
Output
LNL-1300
Magnetic
OSDP Protocol
SF2F Board Edge
SF2F Reader Inputs
Wiegand None 5A (strike) 1A (aux) - - - - 1 1 80mA
Bioscrypt RS485 Bioscrypt RS485

F2F Format F2F Format
Mag with Wiegand Mag with Wiegand
Output Output
LNL-1320
Magnetic Magnetic
OSDP Protocol OSDP Protocol
SF2F Board Edge2 SF2F Board Edge2
SF2F Reader Inputs SF2F Reader Inputs
Wiegand Wiegand 5A (strike) 5A (aux) 5A (aux) 5A (strike) 5A (aux) 5A (aux) 2 2 300mA
1 Current limited power for external load including reader(s)

2 Both readers must be SF2F Board Edge if used
247
RIM Capabilities
1 2 1 2 3 4 5 6 DC REX Power1
Bioscrypt RS485
F2F Format
Mag with Wiegand
Output
Magnetic
LNL-2210 OSDP v2 Biometric F2F Format
OSDP V2 Secure Cannel Mag with Wiegand
OSDP Protocol Output
SF2F Board Edge Magnetic
SF2F Reader Inputs SF2F Board Edge
Wiegand Wiegand 2A (strike) 2A (aux) - - - - 1 1 650mA
F2F Format F2F Format
Output Output
Magnetic Magnetic
LNL-2220 OSDP v2 Biometric OSDP v2 Biometric
OSDP V2 Secure Cannel OSDP V2 Secure Cannel
SF2F Board Edge2 SF2F Board Edge2
SF2F Reader Inputs SF2F Reader Inputs
Wiegand Wiegand 5A (strike) 5A (aux) 5A (strike) 5A (aux) - - 2 2 300mA

2 Both readers must be SF2F Board Edge if used
248
RIM Capabilities
1 2 1 2 3 4 5 6 DC REX Power1
Output Output
Magnetic Magnetic
LNL-4420
OSDP v2 Biometric OSDP v2 Biometric
OSDP V2 Secure Cannel OSDP V2 Secure Cannel
Wiegand Wiegand 5A (strike) 5A (aux) 5A (strike) 5A (aux) - - 2 2 300mA
F2F Format
Mag with Wiegand
Output
Magnetic
OSDP v2 Biometric F2F Format
LNL-1300e
OSDP V2 Secure Cannel Mag with Wiegand
OSDP Protocol Output
SF2F Board Edge Magnetic
SF2F Reader Inputs SF2F Board Edge
Wiegand Wiegand 5A (strike) 5A (aux) - - - 1 1 650mA
249
Typical Reader to RIM wiring
Wiegand or Clock & Data OSDP (v1 or v2)
12V Power 150mA Max 12V Power 150mA Max
VO VO
Green LED
LED LED
Buzzer or Red LED
BZR BZR
Wiegand D1 or Clock TR+
D1/CLK D1/CLK
Wiegand D0 or Data Line TR-
D0/DAT D0/DAT
Power 0V Power 0V and Signal Ground
GND GND
Connect shield to Earth Point

– not the GND terminal
OSDP v1 not available on Series 1 RIM boards or LNL-2210
reader port 2
OSDP v2 only available on LNL4420 Reader 1 and 2, LNL2220
Reader 1 and 2, LNL-2210 Reader 1 and LNL1300e Reader 1
For colours refer to manufacture's data
250
HELP: Leave BZR unconnected if reader does not have a buzzer/sounder. If reader has second LED line connect to BZR terminal.
Current Limited Reader Power
Reader power
Applies to LNL-1300, LNL-1320, LNL-1300e, LNL-2210, LNL-2220
and LNL-4420
– Maximum current draw is 150mA
• Maximum for Series 1 = 80mA
• Maximum for LNL-1300 = 80mA
If more power is required wire reader power
direct from Power Supply
– Reader Power should be fused
Fuse
PSU RIM Reader
251
Wiring Details
252
LNL-2210 Downstream Configuration
CLK/D1 = TR+
TCP/IP
DATA/D0 = TR-
Communications
GND = GND
Reader Port 2
LNL-1300e only
Up to 8
TOTAL
Downstream
Devices
RS-485
Communications
253
Core
PERIPHERAL BOARDS
254
LNL-8000 Recommendations
Topology
Example ISC
255
HELP: Port 1 RS232 mode not utilized with OnGuard
LNL-8000
Jumpers
– Termination per port
Port 1 = to ISC’s downstream
port
Port 2- 9 downstream
LEDs for status indication for
each port
8000 is NOT an addressed
device
– Does not count as a device
downstream device
DIP switches are for baud rate
256
LNL-8000 Recommendations
The following applies to the LNL-8000 module
– DIP Switch Positions for 38,400:
• 1=ON
• 2=OFF
• 3=ON
• 4=OFF
• Do not fit any EOL links on the port that LNL-8000 is
connected to including JP2
• This may rule out using this communications port for any other
panels in remote enclosures
• Max cable length for the port that LNL-8000 is connected to
is 300m (not just the cable length to this panel, but the
whole cable end-to-end)
• Maximum of 4x LNL-8000’s per ISC port
• Ports 2-9 must be terminated as normal for RS 485
257
Hardware Reference Documents
Hardware Installation Guide
Field Hardware Crib Notes
Series 2 DIP Switch notes
Alternative Reader Wiring Guide
Please review these documents now
258
HELP: Start > All Program > OnGuard > Documentation > Hardware > (select manuals)
Additional RIM Hardware
Wiegand to (S)F2F Interface Units
WIU-2 (430187001)
– To allow LNL-1380-8RP to interface to
Wiegand readers
• Converts Wiegand to F2F protocol
– 26, 32, 35, and 40-bit formats
• Unsupervised Inputs
• Enclosure 521005001 required
WIU-4 (430160001)
– To allow LNL-1380-8RP to interface to
Wiegand readers
• Converts Wiegand to SF2F protocol
– 26, 32, 35, and 40-bit formats
• Supervised Inputs 1K/1K
• Enclosure 521005001 required
259
Additional RIM Hardware
Reader Junction Box (RJB) (450222001)
– To facilitate simpler wiring of door hardware when
an F/2F reader is used
– Interface for:
• F/2F reader
• Request to Exit (REX) switch
• Door Contact
• Strike / Lock with relay and fuse
• F/2F cable back to RIM
– Contains all required terminals and inter-linking plus
relay and fuse for Door Strike Release via F2F
260
Legacy ‘NGP’ Security Series Controllers
NGP-22xxy and 33xxy controllers
– Increased capacity
– Embedded Intrusion detection
facilities xx= 00 No on-board doors
xx= 20 2 on-board doors 4 readers
Reader Modules y= i if intruder mode capable
y= (blank) if not intruder mode capable
– NGP-1300-U
– NGP-1320-U
– NGP-1320
Alarm Panels
– NGP-1100-U Attend Specialized classes for
information and certification
– NGP 1200-U http://elearning.lenel.com
– NGP-1100 & NGP-1208
261
Legacy ‘OCF* CASI’ Series
CASI M2000 (M2000PXNplus)
CASI M5/M3000 (M5000 and M3000)
Reader Modules
– For M5/M3000:
• 8RP
• 2RP/2SRP
• 20DI/16DO
Alarm Panels
– For DirecDoor:
• DDIO
– For M5/M3000: Attend Specialized classes for information and
• 16DO certification
• 20DI http://elearning.lenel.com
*OnGuard Compatible Firmware
262
Lenel ‘ILS’ Integrated Locking System
Offline and wireless
electromechanical built for
OnGuard
– Offline
– Wireless connectivity option
– Wide range of locks, handles and finishes
Attend Specialized classes for information and

certification
http://elearning.lenel.com
263
Legacy LNL-500/1000/2000
Access Panels
Also:
– LNL-500B Biometric
Gateway
Referred to as Series 1
Discontinued product
 Refer to Hardware User Guide
for configuration
264
Legacy LNL-xxxx-U
Reader Interface
Modules
Alarm Panels
Star Multiplexer
Discontinued product
 Refer to Hardware User
Guide for configuration
265
Honeywell Panel Support
Equivalent products (core functionality)
OnGuard License required

– SWG-1640
– Allows for ‘take-overs’
Training: http://elearning.lenel.com
266
Honeywell Panel Support
Separate LS Communications Server(s) is
required for the Honeywell Hardware
The Honeywell LS Communications Server(s)
Workstation requires specific ACS.INI file entries
– See DOC-1116-EN-US_Honeywell_OnGuard_Integration.pdf
Note: Downstream LNL and
HON panels cannot be mixed
267
Retro-fitting CASI Boards
Micro 5 Series boards are
used in FCWnx,
PicturePerfect and other
products that are being
phased out
Swap-out boards
– Access Panel LNL-3300-
M5
– LNL-1100-DI
– LNL-1200-16DO
– LNL-1200-16DOR
– LNL-8000-MCOM
268
Retro-fitting CASI Boards
Replacement for CASI
M2000
Swap-out boards
– LNL-1340-M2K
• For use only with LNL-
3300-M5 Access Panel
LNL-3300-M5 LNL-1340-M2K
269
Retro-fitting ACU Boards
ACUXL , ACURS2 &
ACURS4 boards are used
in Facility Commander,
FCWnx, Diamond II and
other products that are
being phased out
Swap-out boards
– Access Panel LNL-3300-
ACUXL
– Intelligent Dual Reader
Controller LNL-2240-RS4
Existing downstream
boards remain
270
Retro-fitting C-Cure Boards
C-Cure iStar boards are
used by Software House
Swap-out boards
– LNL-3300-GCM
– LNL-1380-ACM
– LNL-1100-I8
– LNL-1200-R8
All existing cabling,
enclosures and power
supplies remain
271
Core
HOLIDAYS AND TIMEZONES
272
Holidays and Timezones
Timezones encompass time of day, days of week,
and holidays
Timezones/Holidays are stored on the access
panels
A Timezone/Holiday may be used to:
– Control cardholder access (access level)
– Control online mode of card readers
– Mask alarm inputs
– Activate outputs
– Dial up an Access Panel
– Log events to the database
273
HELP: System Administration > Access Control > Timezones
Holidays
Holidays can be configured in OnGuard to manage
cardholder and hardware status changes
– Mask/UnMasking inputs on a holiday
– Cardholder access into a facility on a holiday
A holiday may be of Type 1-8 or multiple types
– Used for ease of maintaining and managing holiday categories
– All Holidays can be placed in one Type or split between multiple
Types (1-8)
274
HELP: System Administration > Access Control > Timezones > Holidays
Holidays
A single Holiday duration may be up to 366 days
Holidays can be set to recur annually
– LS Linkage Server manages updating the holiday if
the ‘Repeat yearly’ checkbox is enabled for a holiday
Holiday type names may be customized
Holidays consist of Type, date, and duration
– The number of Holidays is configurable
• 20 to 255
• Default is 255 and configured under System Options >
Hardware Settings
275
Holidays – Repeat yearly
Configure a holiday to repeat yearly
– Linkage server must be running in order to update
holidays
– Once the holiday occurs, the year is updated in the
database and transferred to the access panels when
a download occurs
• When this feature is enabled, the holiday's year is
automatically recalculated during panel downloads
• Updates year to year only
• Any associated additional days off surrounding the holiday
may need to be adjusted accordingly
276
Timezones
Timezones
– A Timezone consists of: Time of day, days of the week, and
holidays
– The number of Timezones is configurable
• Default is 255 and is configured under System Options >
Hardware Settings
– There can be up to six intervals in each Timezone
277
HELP: System Administration > Access Control > Timezones > Timezones
Timezones
“Never” and “Always” are default Timezones
Can not be modified or deleted
A Timezone may be activated on holidays by type
(H1, H2, H3…H8)
An interval may not cross a date change
Two intervals must be used
A Timezone must have at least a single interval
with a start and end date in order to be
downloaded to the access panel(s)
24-hour clock is used for start and end times
278
Timezone Rules
A Timezone activates on the leading edge of
the minute
08:00 17:00
08:00 Timezone Interval 16:59

Start End
A Timezone deactivates on the trailing edge of

the minute
279
Timezones/Holidays
A holiday is treated as an exception date
– Example: An access level that uses an 8:00-5:00 Monday-Friday
Timezone will not work if the day is a holiday
A timezone may be configured to activate on a
holiday, if desired, by enabling the appropriate
holiday type checkbox for the timezone
A newly created Timezone will work on the next
Start or End time configured
– Example: if an 08:00 – 17:00 Timezone is created and applied to
an input at 10:00, the input will change status at 17:00
• A download to the Access Panel will be required if immediate action is
required or manually adjust via Alarm Monitoring
• Output status could be manually updated via Alarm Monitoring
280
Core
HARDWARE CONFIGURATION
281
Upstream Communication Alternatives
TCP/IP
External
LAN
Adapter
Dial-up
Access
RS232 Panel (ISC)
RS485
Consult ISC details for supported upstream options for each model
282
Access Control Modems
The Modem must be added first through the
operating system
Configuration includes
– Workstation where modem is connected
– Dialup modem name
– Refer to Hardware User Guide for additional information
283
HELP: System Administration > Access Control > Modems
Access Panels
Access panel communication parameters
– Name
– Online
• Communication with the LS Communication Server will be disabled
if the access panel is not online
284
HELP: System Administration > Access Control > Access Panels
Access Panel - Location
Location
– Workstation
• The computer running LS Communication server
that is servicing this access panel
– Address
– World Time Zone/Daylight Savings
LS Communications
Workstation name
285
HELP: System Administration > Access Control > Access Panels > Location
Access Panel - Connection
Connection options (model dependent)
– Direct (RS232 or RS485)
– IPv4
– IPv6
– DNS Host name
– Dialup (Modem)
286
HELP: System Administration > Access Control > Access Panels > Primary Connection/Connection
LAN/WAN
– The LS Communication Server uses the IP Address
configured in the Lantronix network adapter or the
configured IP address of native network access panels
(LNL-2210, LNL- 2220, LNL-3300, LNL-4420)
– Either IP Address OR Host Name can be used
• Default port is 3001
– Network is the only option for LNL-2210
287
For LNL-2210/2220/3300/4420 ISCs, the initial IP
address is set at 192.168.0.251
Series 2 ISCs can also be accessed by adding
the MAC address information into the host field if
the network supports DHCP address and the ISC
is configured for DHCP
288
Dialup
– Configuration:
• Modem to be initially used
• Timezone that panel will use to dial-back
• Phone number of host and access panel
• Event threshold that panel will use to dial-back
289
Initial Dialup Panel Configuration
– The host PC must initially call the panel
• Must be done manually through alarm monitoring
– The host will then automatically download the database
• Access Panel firmware can be updated manually by right clicking on
ISC in Alarm Monitoring
Dialup Behavior
– Host to panel connection will only occur on user action
• Right click on the panel in Alarm Monitoring and select Connect
– Panel to host connection will occur:
• Upon activation of a Timezone
• When the event threshold is reached
• Via function execution in Local or Global I/O
290
HELP: System Administration > Access Control > Access Panels > Primary Connection
Secondary Upstream Connection
The Always Timezone may be assigned to the
secondary dialup connection
– Modem will automatically call from LS Communication Server
and remain connected until primary path re-established
– Applies to LNL-3300 and legacy LNL-2000
291
HELP: System Administration > Access Control > Access Panels > Secondary Connection/Connection type
Access Panel - Options
Access panel setup parameters
– Critical settings are
• Cardholders, PIN type, Toggle/Unlock mode, Store dates
– Ports, Feature capacity level and memory
• Applies to legacy LNL 500/1000/2000 ISCs only
292
HELP: System Administration > Access Control > Access Panels > Options
PIN Type
• Select from None, 4, 6 or 9 digit
• Default is none
Cardholders
• Will allocate an appropriate amount of memory on
the ISC
Event Capacity
• How many events will the access panel store if
not communicating to the OnGuard server
• Value varies on Series 1 panels based on the
configuration options selected
• Event Capacity is fixed at 50,000 for the Series 2
panels
293
Device count
• Controls the number of downstream devices that
may be added to the access panel
Store Expiration / Activation Date
• Stores the badge expiration and activation
information on the access panel
• The options are Not Enforced / Date Only / Date
and Time
– Time must be configured to be used in the General
Cardholder Options
294
LNL-2210 Configuration - Options
LNL-2210 can be configured with up to 8
downstream devices
– Combination of Reader Modules and Alarm Panels
LNL-2210 configuration choice is:
– In and Out readers off the LNL-2210 reader ports
OR
– Reader off reader port 2 and 8 downstream devices
connected to reader port 1 and/or over TCP/IP
295
Access Panel - Diagnostics
Diagnostics
• Not checked until panel is brought up in Alarm
Monitoring
• Firmware revision/ DIP switch settings / Flash chip
size
296
HELP: System Administration > Access Control > Access Panels > Diagnostics
Notes Field
Notes may be added to all hardware devices
in System Administration
– Access Panels, Video Recorders, Additional
Hardware, Readers
– Limit of 1999 characters
– Can be viewed by operators
– Appears in reports
297
HELP: System Administration > Access Control > Access Panels > Notes
Right-Click Options
Add / Modify / Delete / Copy
Download
Set Clock
– Clock set using time on LS
Communication Server computer
Promote Access Panel
– No demote option
– Note, ensure there is sufficient
capacity for promoted
downstream devices
– Existing downstream devices are
associated with promoted panel
298
ISC Promotion
Promotion through the LNL panel series
Promoting an ISC can leave downstream
devices not associated to a port
1 1 6 1
LNL-500 LNL-3300 LNL-4420
2 3 2 3 2 3
299
LNL ISC DIP Switch Settings
Use of DIP witches while running On
– Set all OFF for normal use
4
– Forcing Web page credentials:
3
• SW1 ON
2
– admin / password (valid for 5 minutes)
1
Use of DIP witches at boot-up
– Initial start-up communication mode
– Factory reset
– Forcing known IP address (192.168.0.251)
See notes included with training materials on
other uses of these switches
300
Configuration Web Page
Configuration Web Page can be launched using
any of the following methods:-
– OnGuard’s Device Discovery Console
– Double click on the appropriate Series 2 Board in the
list
– Using a Web Browser
• Type address as the IP address for the board
– Configuration Web Page button located on the
Access Panel > Location page
301
HELP: System Administration > Access Control > Access Panels > Location
Device Discovery Console
The Device Discovery
Console supports discovery
for:
– Lenel Network Based
Panels Access Panels
• LNL-1300e will not be
discovered
– Micro 100, UDS-1100, etc. Features available
depend on product
– ILS WAP (Wireless Access
type
Points)
– Some IP Cameras
302
The login screen is presented
– Click on Login
303
When switch 3 is off, you will see the following
screen
– You may select “Continue to this website”
Reminder: the initial login is:

– Username: admin
– Password: password
– Must be used within 5 minutes of moving DIP Switch 1 to ON
304
Logon Warning
A warning dialog will be issued during login indicating
– No users have been added into the controller
– Dip Switch 1 is on, enabling the default admin|password
login
• Log-in must be completed within five minutes
• Only one successful log-in is permitted
• 3 incorrect attempts causes 1 minute lockout
– If additional users have been created and switch 1 is
turned off, the default user cannot login
305
Home Page
– User notes may be added
• Up to 250 characters
• Stored on the controller
306
HELP: Home
Network Page
– The IP address settings and host name settings can be changed
here
307
HELP: Network
Host Communication Page
– Used to configure primary and secondary ports (LNL-3300 only)
– AES encryption is an available option under Data Security
– Authorized IP Address will restrict what IP addresses can access
web configuration page
LNL-2220 LNL-3300
308
HELP: Host Comms
Device Information Page
– Provides information on the ISC
309
HELP: Device Info
Users Page
– User password strength option is available
310
HELP: Users
There are three
levels of access a Access View allowed Edit allowed
user can have Home page Level 2: Yes (cannot edit notes) Level 2: No
Level 3: Yes (cannot edit notes) Level 3: No
– Level 1 – Full Network page Level 2: Yes Level 2: No
Level 3: No Level 3: No
view/edit to all
Host Port page Level 2: Yes Level 2: No
screens Level 3: No Level 3: No
– Level 2 & 3 – Device Info page Level 2: Yes n/a

Level 3: Yes
View/edit
Users page Level 2: No Level 2: No
permissions as listed Level 3: No Level 3: No
in the table Restore/Default page Level 2: No Level 2: No

Level 3: No Level 3: No
• Pg. 139 of the
Apply Setting page Level 2: No Level 2: No
hardware Level 3: No Level 3: No
installation guide
311
HELP: Users
Users Page
– These settings are only visible when dip switch 1 is on
312
HELP: Users
Disable Web Server
– This disables the ability to configure the access
panel
– It can be re-enabled by switching dip switch 1 to the
ON position
Disable Bonjour
– This is the discovery protocol that the Device
Discovery Console uses
OnGuard users are notified when an on-line ISC’s
Web Sever is accessed (OnGuard 7.3 or later)
– Via Alarm Monitoring
313
HELP: Users
Enable Auto Save
– When enabled, setting changes will be saved to non-
volatile memory at the selected time interval
– LNL-4420 (only) set Card Database to 16MB
314
HELP: Autosave
The Auto Save page has the ability to detect if a reset
occurred prior to being saved to flash memory
Network diagnostic log can be enabled to write
network data while the DEBUG mode is enabled in the
Communication Server
315
HELP: Autosave
Load Certificate
– The load certificate option is not supported with
software using Lenel OEM code
316
HELP: Load Certificate
Apply Settings
– Apply Settings and Reboot the ISC for Network and
Host Communication changes to take effect
317
HELP: Apply Settings
Return all ISC DIP switches to OFF before Apply
and Reboot otherwise this message appears
318
Core
INTRODUCTION TO ALARM
MONITORING
319
Alarm Monitoring Logon
User Name and Password
Monitor Zone Selection
– This selection is available only if the monitor zone for workstation
or user has not been assigned
320
HELP: Alarm Monitoring
What is a Monitor Zone?
Monitor zones control what a user will
View/Monitor in the Alarm Monitoring program
A Monitor Zone associates:
– Access Panels / Devices
• Events will only be seen from Panels/Devices in the zone
– Events/Times
• The default event routing group is NONE (All Events Always)
321
HELP: Monitor Zones will be covered in detail late in this class
Main Alarm Monitoring Window
Total events and pending alarms are displayed
Right mouse button displays menu for user
action on alarm
322
Alarm View Configuration
Column selection and configuration
– Allows configuration of the following
• Which columns are visible in the window
• The order of the columns from left to right
– The sort order of events based on which
column is chosen
– Select Configure > Columns in Alarm
Monitoring
Display Seconds
– Select under Options menu
323
HELP: Alarm Monitoring > Configure > Columns & Alarm Monitoring > Options
Alarm View Configuration
Click on column header to reverse order
– Options for displaying default sorting order for
Time/Date controlled by Options menu
324
HELP: Alarm Monitoring > Options
System Status Window
Displays all the system hardware assigned to the
monitor zone
Click on View > System Status
Displays graphical animated icons representing
hardware status
325
HELP: Alarm Monitoring > View > System Status
Software Connection Error
– LS Communication Server is not started
– Start as a Service and Automatically is preferred
326
Access Panel or Device Type Mismatch
– Occurs when the options inside the Access Panel
differ from what the panel or device that is currently
configured for in the database
– To correct this situation, a download should be issued
to the Access Panel
327
Monitor Zone Connections
System Status window - Right Click on Monitor Zone
– Displays all communication server workstations that are
configured for the ISCs in the Monitor Zone
328
Floating Alarm Monitoring Windows
Alarm Monitoring on Multiple Monitors using
Floating Mode
– This will allow the user to manage multiple hardware windows and
improve the consistency and usability of the monitoring interface
– When in floating mode, the positions of the windows are retained when
Save Settings on Exit is enabled
Monitor 1 – Main Program Monitor 2 – Floating Status Window
329
Floating Mode
– The display mode of any Alarm
Monitoring internal window can be
toggled between standard and
floating behavior
• Accessed from the upper left System
Menu window icon
– When a window is in the floating
display mode, it can be positioned
outside the main Alarm Monitoring
window or onto another monitor
– Floating windows can be individually
managed from the Windows Task Bar
330
Alarm Monitoring Windows will vary in regard to
the System Menu when in Floating Mode
– Always on top will force the floating window to
remain on top of other windows
The cardholder is not able to float
331
HELP: Alarm Monitoring > View > Badge Info
Status Bar - Breakthrough Options
Breakthrough Disabled
– Displays when any Breakthrough Option
is deselected
332
Status Bar - Hardware
Connection errors
– Shows any connection errors due to LS Communication Server
Offline hardware
– Controllers / Readers / Alarm panels
Workstation time
333
Status Bar - System Status Tree Window
Hardware Status Bar
– Viewing
• Shows what devices are being viewed based on the option settings
– Active count / Offline count / Mask count
• Shows the number of Active, Masked, or Offline devices in the
monitor zone
334
On-Board Battery Status
LNL-2220/3300/4420 Access Panels provide
status indication when the onboard battery is low
(2.5 volts or less)
– Supported for series 2 LNL Access Series controllers only
• LNL-2210 uses a rechargeable onboard battery and the
firmware does not perform the check
– Updates
• When panel is powered up
• Every 24 hours
• Whenever a Power Fault Input activates or secures
– System status text next to controller will indicate the battery to
be low
335
Hardware Status Refresh
A black X indicates hardware has
been marked off-line in System
Administration
A black X and status text indicates
hardware has been deleted in
System Administration
– Deleted hardware will be updated and
removed from the tree at next logon
A red X indicates that the parent
device is offline
A yellow X indicates that the
parent device is online but the
child device is offline
336
Controlling Access Panel Hardware
To interact with hardware items, right click on the
desired item
Commands may be optionally activated using the
left mouse button
337
Firmware Versions
System Status Window shows
firmware for Access Panel
Firmware Version
– Check Compatibility charts
– If “[Not Current]” is displayed then a
Firmware download is highly
recommended
338
Firmware vs. Database Download
Firmware – right click to activate
– Software used to control hardware
– Flashed to onboard memory
• Stays in memory even if power is lost
– Database download follows for Series 1 boards
– The panel suspends the processing of new events
while the event buffer empties to the database
– Once the buffer is empty, the panel reboots
Database - right click to activate
– System Configurations Note - Panel
operation stops
– Access Level and Badge Information
while Firmware is
– Stored in non-volatile memory (series 2) updated
• Stays in memory even if power is lost
339
Core
CONFIGURATION OF
ALARM PANELS
340
Alarm Panels
Alarm Panels
Alarm Inputs
Alarm Outputs
Input/Output Local Linkage
341
HELP: System Administration > Access Control > Alarm Panels
Alarm Panels
Adding Alarm Panels
– Name
– Panel
• Specifies which Access Panel the Alarm Panel is connected to
342
Alarm Panels
Communication Parameters
– Specify the port and address of the Alarm Panel
– Specify the type of Alarm Panel
– Specify downstream encryption settings
Provide the IP address for LNL-1300e devices
343
LNL-1300e addressing
IP Address is applied using utility on
Supplemental Disk 18 (or later)
Set Switches to ON ON OFF OFF (1,2,3,4)
– Re-boot board with S2
– Find board and assign
– Enter IP e.g.
122.210.005.017
Include leading zeros
– Add Subnet
– Add Gateway address
Set Switches to OFF ON OFF OFF (1,2,3,4)
– Re-boot board with S2 or power cycle
344
LNL-1300e addressing DHCP
If using a DHCP server to provide an IP address
allocate a fixed IP address on the DHCP server
based on the MAC address of the panel
The IP address of the LNL-1300e must not
change
– An unexpected change to IP address will
• Cause the RIM to go offline
• Introduce a security risk
Reminder:
– For reliable behavior use 10 Mbps switch if using
PoE
345
Terminology
Masking
– A command issued to a hardware device to conceal the event
• The event will not be sent to the system or database
Logging
– The process of sending an event to the database
By default OnGuard never masks events and
always logs events to the database
346
Alarm Inputs
Select the correct Alarm Panel
The input name and online status
The number of the input
347
HELP: System Administration > Access Control > Alarm Panels > Alarm Inputs
Alarm Inputs
Inputs may be configured as
– Supervised or Not Supervised
– Normally Open or Normally Closed
You may choose to log or mask the input alarm
during specific Timezones
348
Alarm Inputs
Entry Delay (seconds)
– Cause alarms to be delayed
• If input is Masked while entry delay is running the alarm is
cancelled
– With ‘Non-Latch Entry’ not selected an alarm is reported after
Entry delay expires regardless of the state of the input at that
time
– With ‘Non-Latch Entry selected an alarm is only reported
after Entry delay expires if the input is active at that time
Exit Delay (seconds)
– Forces an extension of the mask condition when the
input transitions from Masked to Unmasked
Attend Professional-Intruder class for more
information around this topic
349
Alarm Outputs
Select the correct Alarm Panel
Name the output
Output number corresponds to the panel output
350
HELP: System Administration > Access Control > Alarm Panels > Alarm Outputs
Alarm Outputs
Pulse duration
– By default outputs will pulse for 5 seconds
Output Activated or Deactivated by default
Timezone activation
– Output tracks the Timezone interval(s)
351
HELP: System Administration > Access Control > Alarm Panels > Alarm Outputs
Input/Output Local Linkage
An input may be linked to an output
– The link may be one to one or one to many
– Output follows the status of the Input
– Checkmark the appropriate Alarm Output(s) to be associated
with the Alarm Input
352
HELP: System Administration > Access Control > Alarm Panels > Input/Output Local Linkage
Controlling Alarm Panels in Alarm Monitoring
To interact with a desired device, right click on
that device
– Alarms may be masked or unmasked
– Outputs may be activated, deactivated, or pulsed
Commands activated by left mouse button
353
Firmware Versions
Firmware Version
– Review http://partner.lenel.com for current
Firmware compatibility charts
– recommended
354
Alarm Panels and Alarm Monitoring
Test the following items using the hardware:
– Activate Input 1
• Notice Alarm(s) generated in Alarm Monitoring
• Notice outputs (relays) activated/deactivated from local
linkage
– Mask Input 1 by right clicking on the input
• Activate the input to see the results of masking
– No Alarm and no relays activated
– Right click to Unmask the input
– Pulse output 1 by right clicking on the output
– Right click on the parent device to Mask/UnMask
Input(s) or Pulse Output(s)
– Right click on Input or Output and select Trace
• View results of Historical and/or Live trace of the device
355
Core
CONFIGURATION OF
CARD (BADGE) FORMAT
356
Card Format
OnGuard supports configuration of the following
card types
– Wiegand
– Smart Card
– Magnetic
Card Formats can be used to encode badges
– Magnetic and Smart formats
Card Formats are assigned to reader ports on
RIMs
– Magnetic and Wiegand formats
– Eight card formats per system
357
HELP: System Administration > Administration > Card Format
Card Format
Card formats can include
– Facility Code
• Identifies a particular site
• Up to 9 digits
– Badge ID
• Identifies the badge
• Up to 18 digits
– Issue Code
• Tracks reissues of the same badge ID number
• Up to 2 digits
• Not used for Proximity (Wiegand) badges
358
Wiegand Card Format
Wiegand-based Proximity badges and readers
communicate via the 125 kHz frequency
26 bit is standard Wiegand card format
– Other bit structures such as 64 and 72 bit
Proximity cards support only facility code and
badge ID
Data transmitted in binary (0/1)
Wiegand card formats are used for decoding only
– At the card reader
01100100
359
Wiegand Card Format
Wiegand card example – 26-bit format
Even Parity Data Stream Data Stream Odd Parity
10001000010010010000000000
Sum of 1s = 3 Sum of 1s = 1
Parity digit = 1 Parity digit = 0
360
Data Checking – (Standard 26 bit)
Parity checking is used to ensure data integrity
– The data stream is separated into two parts
A leading parity bit is added at the beginning of
the data
– If the sum of the 1s is an even number, the parity bit is set to 0
– If the sum of the 1s is an odd number, the parity bit is set to 1
A trailing parity bit is added at the end of the data
– The same process is performed on the back half of the data
stream, except the sum of the 1s is checked to see whether it
is an odd number
361
Wiegand Card Format
Name
Type
– Wiegand
Facility code
– Must be the same
number of digits set
in the field length
Reversed bits
– LNL-2210, LNL-2220, LNL-3300 and LNL-4420 ISCs only
362
HELP: System Administration > Administration > Card Format (Wiegand Format) > Card Format
Wiegand Card Format (cont.)
Badge Offset
– Post read re-processing of Badge ID
– Used to generate unique Badge ID from otherwise duplicated
physical Badges
– See next slides:
• Badge Offset – Add
• Badge Offset - Multiply
363
Card Format Badge Offset - Add
Add Offset to Badge ID when presented for a
specified Facility code
– Example: 100,000
+ 1,234
• Offset is 100,000
101,234
• Badge ID is 1234 (Facility code is 456)
• Resulting Badge ID reported as 101,234
Allows for duplicate Badge IDs on physical
badges providing they have different facility codes
8 Card Formats supported
1 Facility Code per Card Format is supported
– Specified Facility Code is used to trigger arithmetic
364
Card Format Badge Offset - Multiply
Multiply Offset with Facility Code then add
Badge ID to make new Badge ID for the
specified bit length 100,000 45,600,000
– Example: x 456 + 1,234
• Offset is 100,000 45,600,000 45,601,234
• Badge ID is 1234, Facility code is 456
• Resulting Badge ID reported as 45,601,234
Allows for duplicate Badge IDs on physical
badges providing they have different
facility codes
One card format used for each bit length
– Each Card Format can support many
Facility Codes
– Bit length is used to trigger arithmetic
365
HELP: Used to support sites with more than 8 facility codes in use within the badge population
Card Format Badge Offset - Multiply
Requirements
– Supported firmware
• LNL-2210, LNL-2220, LNL-3300, LNL-4420 with firmware revision
1.188 or later
– Readers must not be set for Facility Code Only online or offline
mode
• Facility code configured in the card format is NOT validated on
any card used when processing the card format
– Reader will always grant access
– Make the badge offset value larger that the highest badge ID in
order to help prevent duplicate calculated badge ID’s
• Calculated badge ID result must be 18 digits or less
• Badge offset has a 9 digit maximum length limit
– When using this feature, do not use other same length card
formats assigned to the same reader
366
Wiegand Card Format
Total number of bits
on card
Facility code, Card
number and Issue code
– Starting bit
• Set to 1 for 2nd bit starting
position
• Set to 0 for 1st bit starting
position (non-standard)
– Number of bits
Even and odd parity bits
367
Smart Card Format
Smart cards communicate with the readers via the
13.56 MHz frequency
Communication between the smart card and the
reader is encrypted
OnGuard supports the following types of smart
cards
– MIFARE
– iCLASS
– DESFire
368
Smart Card Format
All smart card formats use a Wiegand format (64
bit, 72 bit) to communicate back to the Access
Panel
A smart card format is not assigned to a wired
reader
Smart cards can be programmed for use with
Access Control, Biometrics, access to public
transportation, or other custom applications
Smart cards are discussed in more detail in the
Expert-Access (Biometrics) class
369
Magnetic Card Format
Card formats are dictated by the International
Organization for Standardization (ISO) number
7811
– Track 1 read only Track 1
Track 2
• 7 bit - 76 Char Max
Track 3
– Alphanumeric
– Write once
– Track 2 read only
– Numeric
– Write once
– Track 3 read/write/rewrite
– Numeric
– Read/write
370
Data Checking
Start sentinel – sent at the beginning of the data
stream
End sentinel – sent at the end of the data stream
Check digit – A single character generated by the
encoder and sent at the end of the data stream to
insure data integrity
Start Facility Badge Issue End Check
Sentinel Code ID Code Sentinel Digit
B12312345601F8
371
Access control track
– Configures the track on
which the access control
fields should be encoded
Total characters on
track
– Card check by checking
number of characters on
track
– Minimum allows greater
than or equal to quantity
selected
372
HELP: System Administration > Administration > Card Format (Magnetic Format) > Card Format
Field length
– Fields may be omitted by
setting order to zero
Field order and offset
– Used primarily for custom
encoding in applications
outside access control
Custom Encoding
– Allows configuration of
custom fields for all three
tracks
• All selected tracks must be
supported by the encoder
373
HELP: System Administration > Administration > Card Format (Magnetic Format) > Card Format
Custom Encoding
– Magnetic format only
– Allows configuration of
custom fields for all three
tracks
• All selected tracks must be
supported by the encoder
and card readers
– Allows custom formatting of
database fields
374
HELP: System Administration > Administration > Card Format (Magnetic Format) > Custom Encoding
Core
CONFIGURATION OF:
READERS (INCLUDING RIM)
375
Reader Configuration
Adding and RIM and Door Settings
– The name of the reader
• 96 characters, first 32 appear on LNL-CK
Select
– Access Panel, Interface Type, Reader data Output
protocol, Port, Address (RS485 or IP) and Reader
number (0 or 1) in most cases
376
HELP: System Administration > Access Control > Readers > General
Panel, select correct panel Type and Output
format from drop-down lists
Type
Output
In earlier versions of OnGuard these are

combined in one long selection list
377
Port and Address
– RS-485 downstream port from the ISC
– Device address of the Reader Interface Module
• 0-31
– If LNL-1300e select IP address
If LNL-1320, LNL-2220 or LNL-4420

– Select reader number ‘0’ is reader first port, ‘1’ is
reader second reader port
378
Port and Address
– RS-485 downstream port from the ISC
– Device address of the Reader Interface Module (0-31)
Reader Number
– The number is automatically selected
– The number is determined by Reader Type selection
Alternate Reader
– Alternate reader associated with primary reader
– Two readers on the same side of the door
– Must select Primary Reader
379
Reader modes for online operation
– Locked
– Unlocked
– Facility Code
– Card Only
– PIN or Card
– Card and PIN
380
Reader modes for offline operation
– Locked
– Unlocked
– Facility Code
Selecting any other choice sets the offline mode to
LOCKED
A reader is considered offline when:
– Communication is lost to the Access Panel but the
reader still has power
– This is sometimes also called “degraded” mode
381
Held Open Time / Extended Open
– Controls amount of time the door may remain open on a valid
access grant or REX
Strike Time / Extended Strike
– Controls how long the strike will remain energized on a valid
access grant or REX
– Extended times are configured by using the “Use Extended
Strike/Held Times” option of the cardholder badge form
382
Strike
– Option is to cut off on open or on close of door contact
Do Not Activate Strike on REX
– Starts exit timing without releasing lock
Keypad
– Options include 4 bit, 8 bit, 1-7 style, or LNL-2020 Magnetic
Stripe Reader with or without tamper
– OSDP supports PIN by default, no selection required
383
Card Format
– OnGuard supports eight card formats per system
– At least one must be selected for the appropriate card format(s)
for card reader
384
When configuring reader 2 it will populate the
‘Paired Reader’ for reader 1
– Can be updated for another unassigned Reader 2 at
a different downstream address on the same ISC
385
Select fields on multiple readers may be
configured simultaneously
– Note: Be sure readers selected when using multiple selection
share similar configuration
– All editable values will be applied to all selected readers
386
Reader Settings
Door forced and door held open alarms may be
masked during a timezone or masked by default
– blank = never
Logging events to database can be restricted to
Timezone intervals if required
– blank = always
387
HELP: System Administration > Access Control > Readers > Settings
Reader Settings
Paired Master and Paired Slave
setting
– For controlling the same door using LNL-
1320, LNL-2220 or LNL-4420
Two Card Control
– Requires two different valid cards with
access permission within 10 seconds
388
OnGuard Duress Function
Reader must be in Card and PIN mode
The Duress code is the cardholders
PIN # + 1
– Add 1 to the last digit of the PIN
– If the PIN is 1234, then the duress code is 1235
– If the PIN is 1239, then the duress code is 1230
The Duress alarm will be sent to
Alarm Monitoring
Access to the reader may be denied
as an option set per reader
389
Reader Settings – Assume and Use Limit
Assume door used
– Used when door contact hardware is not
installed
Use Limit
– Access will be denied when the use limit is
reached at the reader
– The use limit value is set per badge
• The use limit is stored in the database
• Use limit range is 0-255 with blank = Unlimited
• Remaining uses will be restored upon a
database download to the ISC
• Changes to the use limit count will take effect
immediately
390
Reader Settings - Double Card
Double Card Unlock/Toggle allow alternate
unlocking/securing an Access Series reader
– Feature enabled on the LNL-2210, LNL-2220,
LNL-3300, LNL-4420 Access Panels
Second time attempt must be performed within 5
seconds at the reader
– Same badge ID two times with proper access
and Double Card Unlock/Toggle authority
enabled
• DPS (opening of door) has no bearing on the
feature
If no action is taken to re-secure the reader, the
system will automatically reset after 24 hours
(default)
391
Reader Settings - Double Card
While reader is unlocked with Double card unlock/toggle
requests, system generated reader mode changes are
ignored
Direct requests from an Alarm Monitoring user are not
ignored
When card is used to revoke unlock/toggle mode reader/door
moves to the mode it would have been in had it not been in
unlock/toggle mode, example:
– Reader is in CARD only mode
– Reader goes to Unlocked via unlock/toggle request
– Timezone/Reader Mode asks reader for PIN + CARD mode
• This will not be implemented
– Unlock/toggle is revoked by time passing or badge
– Reader moves to PIN + CARD mode
• The mode it would have been in due to earlier request
392
Reader Settings – Inverted Strike
Provides a reversal of the operation of
the strike relay for “Fail Safe” door
requirement
– The relay is activated in a standby state,
and deactivated upon an “open door”
command state
– Suitable for fail-safe locks
393
Reader Settings - Turnstile/Tailgate
Turnstile
– Each access granted activates the strike for 1
second regardless of strike time
– Can not be used with master and slave
settings
– Designed for use with turnstile models that
buffer access granted
Tailgate
– On access Aux Output 1 pulses for one
second
– Used with optical turnstile hardware with
tailgate support to help detect tailgating
cardholders
394
Reader Settings - Alarm Shunt
Utilizes auxiliary output 1 relay to
interrupt or bypass a door contact
connected to a secondary
intrusion/alarm
– Operates while door is legitimately open
– Supported by LNL-1300 Series 2, LNL-
1300e, LNL-1320 Series 2, LNL-2210,
LNL-2220, LNL-4420
Mutually exclusive with other uses of
Output 1
– One LNL-1320 only output 2 used if
output 1 already utilized
395
Alarm Shunt Behavior
Access cycle initiated
– Valid credential, open door command, REX etc.
Auxiliary output 1 will activate 5 ms prior to the
strike output
Strike relay deactivates at the end of the strike
time
– Note: It may also deactivate when the door opens based on the
reader configuration
Aux. output 1 relay deactivates 1 second after the
door is closed if it is within the held open time
– IMPORTANT: This will also deactivate the shunt (relay) after the
held open time expires if the door remains open
– This could cause an alarm in the intrusion system
396
Alarm Shunt Behavior
Door used
NOT TO SCALE
Door not used

NOT TO SCALE
397
Alarm Shunt – Special Caution
Special note on Alarm Shunt feature
– Certain configurations in Intrusion systems may use
the “shunted” contact as a trigger for the intrusion
panel entry delay and disarming
– Examine the intrusion panel configuration prior to
enabling the OnGuard Alarm Shunt feature
– Other functions that utilize the reader interface
module auxiliary output 1 will need to be deactivated
• Tailgate
• Special 2-man rule
398
Alarm Shunt
Interaction between Alarm
Shunt and Pre-Alarm
enforcement improved
– Alarm Shunt and Pre-Alarm
functionality cannot both use Aux
1 relay simultaneously
• Pre-alarm now able to use the Aux 2
relay on the LNL-1320 reader
interface board when Aux 1 relay is in
use
• No pulse relay option will be
available in the drop down list when
using LNL-1300 and LNL-2220 IDRC
399
Strike Follower
A strike follower cannot be configured with
a tailgate/pre-alarm because both use
auxiliary output 1
– Similar to the alarm shunt feature
Note: When strike follower is configured, aux output 1 cannot be

activated or pulsed in Alarm Monitoring or used for local I/O or global I/O
400
Strike Follower
Activation of the auxiliary 1 output
when the strike relay activates
– Useful for automatically opening a door
– Under the Auxiliary Outputs tab, configure either
• The auxiliary output 1 to follow the strike pulse, with
an option delay
• The auxiliary output 1 to pulse with the strike, with
an option delay
– This feature is ONLY supported with
• LNL-2210 , LNL-2220, LNL-3300, LNL-4420
• LNL-1320, LNL-1300 Series 2, LNL-1300e
401
Denied (PIN) Attempts
Denied attempts events include
– An unknown PIN entry at a reader in PIN or Card
mode
– An invalid PIN entry at a reader in Card and PIN
mode
– An invalid cipher entry at a reader in Cipher
mode (covered in Professional-Access class)
If configured, the reader will lock for a
configurable period of time if the
denied attempts count is exceeded
402
Count
– The number of invalid PIN access attempts
(while in Card and PIN reader mode)
• 0-255, zero disables the counter
• Produces ‘PIN Count Exceeded’ alarm
Timeout
– The time that must pass before the PIN attempt
for a Badge becomes the first attempt again
• 1-999 minutes
Restore
– When the maximum PIN attempts count is
reached
• 0 – do nothing
• 1-999 lock the reader/door for the duration selected in
minutes
403
The reader mode in the status tree will not
change while in denied attempt lockout mode
– A Reader Locked event will be generated while in denied
locked mode
404
Reader Settings
Pre-Alarm
– Used for pre-held alarm annunciation
• None: gives no warning before a Held Open
Alarm is generated
• Pulse AUX Output 1: pulses the reader AUX
Output 1 for the specified Output 1 Pulse Time
• Use Reader Buzzer: Activates the buzzer on
the reader if wired
• The duration is specified in the Pre-Alarm
timeout field
– Timeout specifies when the buzzer or AUX 1
pulse will start
– The buzzer will continue until the door is
secure
– Reader must support the buzzer control
405
Reader Settings
LED Mode
– Software configurable control of the reader
LEDs
• Single-wire control of the red/green LED
• Dual-wire control of the red/green LED
• Dual-wire control of the red/yellow/green LED
– OSDP mode:
• Without LCD display
• With LCD display
406
Reader Controls
Door Contact and REX Supervision settings
– Report REX events
• Controls whether or not REX events are displayed in Alarm
Monitoring
407
HELP: System Administration > Access Control > Readers > Controls
Relaxed Door Forced Open Detection
Relaxed door forced open detection provides a
two second restore delay once the door contact
secures after a valid door access cycle
– Access grant
– REX
– Open door command issued
Also resets the held open alarm for each re-cycle
of the door contact
408
HELP: System Administration > Access Control > Readers > Controls
Reader Inputs and Outputs
Auxiliary Inputs and Outputs
– They are created with readers based on the RIM
– They are configured the same way as Alarm panel inputs
– They will be online and ready as soon as the reader is
configured
– Can be renamed
– Supervision of Inputs can be configured
– Pulse time for Outputs can be configured
409
Reader Groups
Reader grouping is useful for finding readers /
doors / locks based on a specific search criteria
List Builder is used to populate the Reader
Groups with dropdown choices
– Located at Administration > List Builder
410
HELP: System Administration > Access Control > Readers > Grouping & System Administration > Administration > List Builder
List Builder
Allows content to be added or
deleted from select lists
– Reader group lists
– System lists such as:
• Badge status
– Found on Cardholder’s Badge tab
• Two man type
– Cardholder lists such as:
• Department, Division, Building, etc.
– Validate Lists ensures cardholder and system
lists contain valid data content when that data
is imported from other applications
411
HELP: System Administration > Administration > List Builder
Reader Groups
Searches may include one or many groups
Saving searches
– Searches may be Saved / Deleted / Recalled
Once a search is performed the filter may be
cleared by clicking on Show All
– All Readers will be displayed
412
HELP: System Administration > Access Control > Readers > Grouping
Reader Groups
Reader Group labels may be renamed using
FormsDesigner Lite (covered later in this class)
413
HELP: FormsDesigner
Readers and Alarm Monitoring
Icons in System Status Tree
– Door Forced Open
– Door Held Open
– Cabinet Tamper
Reader Status information is located next to each
reader
414
Aux Inputs/Outputs Icons
Reader AUX Inputs/Outputs are
displayed as separate icons
– Reader AUX input and output
devices display with the same
icons as alarm input and output
devices
– Reader auxiliary input and output
devices are displayed in the Alarm
Monitoring System Status window
and the System Administration
System Tree
415
Firmware Versions
System Status Window can be set to display
firmware for Reader Panels under Options >
Display Device Firmware Revisions
LNL-1300 Firmware
– LNL-1300 Series 1 Firmware Download not supported
– Replace device if latest Firmware functionality is required
– Existing field boards need to be replaced for full functionality
Review http://partner.lenel.com for current

Firmware version is not reported for
Honeywell panels
416
Firmware Versions
Firmware Version
– Review http://partner.lenel.com for current
– recommended
417
Control Hardware
Control the following via right-clicking on a
reader in Alarm Monitoring System Status tree or
event
– View Reader Notes
– Open Door(s)
– Reader Access Modes
– Activate/Deactivate/Pulse Reader Auxiliary Outputs
– Mask/Unmask Door Forced Open or Reader Auxiliary Inputs
– Perform a Trace by right clicking on the device
418
Core
ALARM ACKNOWLEDGEMENT
419
Alarm Acknowledgment
Double click on any alarm
in the Main Alarm
Monitoring Window
Displays information
regarding an alarm
Alarms can be printed to
the default printer
Previous/Next allows
multiple alarms to be
handled in the same
acknowledgement session
Notes may be associated
with alarm
– Acknowledgment notes may be
selected from a configured list
420
In Progress Alarms
Alarms can be marked as In Progress through
either
– The Alarm Acknowledgment window
– From the Fast / Group Acknowledge toolbar icon
An ‘in progress’ icon (checkmark) appears next to
the alarm/event
– The date, time, and user is logged at the time that the alarm is
marked in progress
Alarm can be acknowledged at a later time
421
Elapsed time
– Displays the elapsed amount of time between when the event
was generated and when it was responded to
Update button
– Used to update addition acknowledgement notes into the
database
422
Alarms may now be acknowledged from multiple
Alarm Monitoring locations
– Main Alarm Monitoring window
– Pending Alarms window
– Trace Monitor window
423
Fast/Group Acknowledgment
Fast/Group Acknowledgment of alarms
– Multiple selection of alarms
• Range – click the first alarm then use the shift key to select
range
• Individually – Using the control (Ctrl) key
• Ctrl key + F12 keyboard shortcut
– Ctrl key + F11 (Select All)
424
Pending Alarm Window
Displays all pending alarms
– All active alarms not yet deleted, restored, or acknowledged
There is no filtering capability
425
Core
INTRODUCTION TO
MONITORING ZONES
426
Monitor Zones
Monitor Zones are used to allow for filtering of
hardware and events/alarms in Alarm
Monitoring
– Monitor Zones can contain all hardware from an Access
Panel or specify individual hardware components such as
the Front door reader or specific motion detectors (inputs)
– Timezones give added control to configure which events
during what timeframe
Default Monitor Zone exists automatically
– Can contain all hardware
Unlimited quantity of Monitor Zones can be
created
Monitor Zones can be assigned to a
workstation and/or to an OnGuard User
427
HELP: System Administration > Alarms > Monitor Zone
Monitoring Zones
User – filtered hardware & events by time
Workstation Monitor Zone

Default
Selected
Hardware Event Routing Group
User Events Timeszones
Permission Default Map
428
HELP: System Administration > Alarms > Monitor Zones
Event Routing Group
Creation of an Event Routing group assigns:
– An event or events to the group
– A timezone that the event will be displayed in Alarm Monitoring
• Events may have different timezones assigned
Creating an Event Routing group is optional
– The default Event Routing group, None (All Events Always), can
be used
429
Monitor Zone
Creation of a monitor zone includes:
– A default map – this is optional
– Access Panel(s) to receive events and alarms from
– When selecting an Access Panel the options are to
• Include all child devices
• Specify child devices individually
– An event routing group
• Default event routing is NONE (All Events Always)
430
Monitor Station
A Monitor Zone may be assigned as
recommended to a workstation running alarm
monitoring
– Will not prevent a User from selecting another
431
Zone > Monitor Stations
Monitor Station Event Queue
Queue events when
logged out
– LS Communication
Server continues to send
events to the database
– Events are stored in a
queue until the Monitor
Station logs in
• There is a separate
queue for each Monitor
Station
– The limit for the number of
days is set in General
System Options
432
Monitor Zone User Assignment
A Monitor Zone may be assigned to an OnGuard
User
A User assignment overrides a workstation
assignment and selecting another is not possible
433
HELP: System Administration > Administration > Users > Monitor Zone Assignments
Monitor Zone Assignment
When logging on to Alarm Monitoring the
following options are available
– Save as monitoring station assignment
• The selection is stored on the Monitor Station Tab
– Save as user assignment
• The selection is stored under Monitor Zone Assignment in Users
434
Monitor Zone Assignment
Any new Access Panels that are
added to the system can be
assigned to a monitor zone(s)
– User will be prompted to assign the
Access Panel to a monitor zone
• The user has the option not to add the
Access Panel to any monitor zones by
pressing Cancel
• An Access Panel can belong to multiple
monitor zones
The system may also be
configured so that new Access
Panels are added to all monitor
zones (System Options)
435
Using Monitor Zones
Main Alarm window has a default 10,000 event limit
– Monitoring will stop receiving events (Suspend) and
issue an warning message
– Creating appropriate Monitor Zones and Event Routing
Groups will help to prevent this issue
436
Automatic FIFO Alarm Management
Optionally clears alarms automatically
– Only alarms that do not require user action are cleared
Configurable between 1,000 and 25,000 alarms for
optimal performance
Automatically prompts user if not enabled and
Maximum Alarms Range is reached
437
Core
ACCESS LEVELS AND

ACCESS GROUPS
438
Access Levels
Access Levels are used to control
cardholder access
Access Levels are assigned to
Cardholders
An Access Level may span across
multiple Access Panels
439
HELP: System Administration > Access Control > Access Levels
Access Levels
Access levels are a combination of
readers and timezones
– Multiple readers may be assigned to an access level
– Individual readers may use different timezones
Default quantity of Access Levels that
can be created is 255
– System Options > Hardware Settings tab
– Maximum is up to 31,999
– Uses shared memory space on panel
Default quantity of Access Levels that
can be assigned to a cardholder is 6
– System Options > Hardware Settings tab
– Maximum is 128, affects Access Panel memory
440
Access Levels
Add an Access Level provide unique name
Checkmark appropriate Reader(s) and Timezone(s)
Click on Assign button
Click OK to save
441
HELP: System Administration > Access Control > Access Levels > Access
Access Levels Toggle Command
Enable Access Level to authorize badge(s)
for Double Card Unlock/Toggle
Authorization
Setting in the “User Commands” tab
442
HELP: System Administration > Access Control > Access Levels > User Commands
Access Levels
Show Similar Access Levels
– This will locate access levels with similar reader assignments to
assist with duplication prevention
– Readers may be filtered for search exclusion using check
marks on readers listed
• The reader list must be refreshed after changes
– Access Levels may be filtered out by using the Exclude Levels
button
443
Access Levels
444
Access Groups
An Access Group is a collection of Access Levels
– Up the maximum configured under Hardware Settings tab (per
cardholder)
A default Access Group may be assigned to a
badge type to allow for automatic assignment of
access levels to a cardholder
A group may also be used in assigning multiple
access levels to badge
– Access Levels are assigned to the cardholder not the Access
Group
Unlimited Access Groups can be created
– Creating Access Groups is optional
445
HELP: System Administration > Access Control > Access Levels > Access Groups
Core
CARDHOLDER
CONFIGURATION
446
Cardholder Options Configurations
Cardholder Options
– Quantity of active badges per cardholder
– PIN Generation
– Use or Lose Badge feature
– Badge ID Allocation
List Builder is used to add
– Badge Statuses
– Cardholder form drop down lists:
• Title
• Department
• Division
– etc.
447
Cardholder Options – General Tab
Options affecting all cardholders are defined here
Multiple active badges
– Sets the maximum number of active badges that can be
assigned to a cardholder
– 1-9,999 active badges per cardholder
– Default = 1
448
HELP: System Administration > Administration > Cardholder Options
Badge PIN Code Generation options
– The length of the PIN
• 4, 6, or 9 digits
• 4 is the Default value
• If the PIN number is less than these values, the # key must be
pressed on the reader keypad to signal the end of the PIN
• Affects Access Panel memory
– Select PIN generation method
• None (Manual Entry) or Random
• None (Manual Entry) is the default value
• PIN number is hidden by asterisks on the badge form
• If Random is selected, the PIN number is viewable only the first
time when the badge is added
449
Badge PIN Code Generation options
– Enabling Unique PIN code prevents duplicate PINs in the
database
– Allow Edit of PIN code
– Copy PIN code checkbox will prompt user to copy PIN to next
badge when adding a new badge to a cardholder
450
Use or Lose Badge Settings
– If the badge is not used for a configured number of consecutive
days, the badge will deactivate and be set to the badge status
specified
• May also be set per Badge Type
• The lowest number of days takes precedence
– The default setting of 0 disables the feature
– Additional badge statuses may be added through List Builder
• Any badge status other than ‘Active’ is a deactivated badge
status
451
Badge Status Deactivation on Expiry
Configuration that will automatically change the
badge status when the badge exceeds its
deactivation date
– Feature will work only for added badges after this configuration is
completed. Does not affect existing badges in the database
The badge deactivate status may be configured:
– System Badge Status setting
• Configured on the General Cardholder Options tab
– Badge Type setting
• Configured on the Badge Type - Deactivation Settings tab
452
Badge Status Deactivation
Feature is disabled if the configuration dropdown
is left blank
The badge status updates occurs 24 to 48 hours
after expiration to account for differences in
world time zones
If the badge type setting is configured, it will
override the system setting
The badge is removed from the panel once the
status is changed from active
Requirements
– The Linkage Server must be configured and running
453
Thumbnail photo
– Generates an additional photo in the database for each
cardholder
– This enables faster searching
Precision Access Mode
– When access to many individual doors needs to be
assigned to badges and that need would create too
many access levels
• For example airports, where each jet way is treated as a door,
with unique access assignments for individuals
• Access Panels support inclusion only
• Must be configured in three areas of OnGuard
– Cardholder Options, Access Panel, per Cardholder
454
Badge activation/deactivation dates
– By default, badges activate and deactivate at Midnight
– The Use time option adds time control on the Badge Tab under
the Cardholder
– Badge deactivation date information is stored in the database,
not the access panel by default (can be changed per Access
Panel under Options tab)
455
Temporary Access Levels
– Granularity value determines the frequency the
access panels are updated
• The range is from 5 to 60 minutes, with a 30 minute default
– LS Communications Server examines and updates
temporary access levels based on the Granularity
setting
• Date/time stored in the database not on the hardware
– Reducing the default of 30 minutes may impact
system performance
456
Allow Duplicate Access Levels
(Different name but same Reader/Timezone combinations)
– Checked = Allows duplicate access level content
– Unchecked = Prevents duplication of access level content
– Default is to allow duplicate access levels to be created for
legacy purposes
• User will see a prompt to continue if a duplicate access level exists
Allow empty access levels

(Has name but no Readers/Timezones)
– Restricts creating an access level without reader assignments
– Default is to allow empty access levels to be created
457
Cardholder Options - Badge ID Allocation
Badge ID generation options
– Automatic – the next sequential number (Default selection)
– From ‘Cardholder ID’ – uses the cardholder ID field (or custom
defined field) value
– Internal Cardholder ID – uses a system generated value (EMP
ID), which is an internal database ID
– Manual Entry – operator manual entry
FASC-N – Federal Agency Smart Credential
Number (US Government issued badges)
458
HELP: System Administration > Administration > Cardholder Options > Badge ID Allocation
Issue Code
– First issue code – the number used as starting point for first
issue of badge
– Auto-increment issue code – automatically assigns the next
sequential number on re-issue of same badge
• Zero (0) is the default and can be changed
• Automatically selected for the following choices
– From ‘Cardholder ID’
– Internal Cardholder ID
459
ID Ranges (optional)
– Allows for specified fixed ranges of badge IDs to be used
• Restricts Badge ID field under the cardholder to conform to this
range of values
• Unique ranges can also be specified by badge type
• Reduces input error
460
Possible Warnings and Notifications
Unique PIN Enabled Create/Save Photo Thumbnails
Use Time Log out and on
461
Core
BADGE DESIGNER
462
Badge Designer
Badge Designer program allows
users to create Badge Layouts that
can be associated with badge types
in OnGuard
Various badge layouts can be
created for different purposes
– Visitors
– Employees
– Contractors
Printed badge will mimic the badge
layout design (WYSIWYG)
463
HELP: Badge Designer
Badge Designer
Steps to Create a Badge Layout
– Start a new badge layout (Layout > New)
– Define the layout properties (View > Layout
Properties)
– Place objects on the layout (Edit > Insert)
– Customize the objects (Object Properties)
– Save the layout (Layout > Save)
464
HELP: Badge Designer
Core
BADGE TYPES
465
Badge Types
A Badge Type must be assigned to a
cardholder when a badge ID is going
to be added to that cardholder
Unlimited number of Badge Types
can be created
A Badge Type is simply a mechanism
to assign key features to a
Cardholder’s Badge
– Card Format (for Smart or Magnetic encoding)
– Deactivation Date
– Badge Layout
– Default Access Group (Access Levels)
466
HELP: System Administration > Administration > Badge Types
Badge Types
A Badge Type also allows
for specific configurations
for: Badge
– Printing and Encoding needs Card Design
– Use or Lose feature and Badge Format
Deactivation for a specific group
of badgeholders as needed Access
• Contractor or Visitors for Levels
example
– Management of Required Fields
and any Missing field data on the
Cardholder record
Badge Type
467
Badge Types
Classes of Badge Types
– Standard
• Employee – permanent badge
– Temporary
• Temporary badge - Transferrable
– Visitor
• Non-disposable – may have access level assignments
• Disposable – cannot have access level assignments
• Transferrable
• Only Badge Type which can be assigned to a visitor when
using OnGuard’s Visitor Management
– Special Purpose
• These badges are used with ILS wireless readers only
468
Badge Types
Badges may be automatically moved only
for Visitor and Temporary badge classes
– Allows for reuse of badges for different
visitors and contractors
If using the Standard badge type, the Badge
ID must be deleted in order to reuse that
particular Badge ID number
– This is not a recommended process
469
Badge Types
Create a Badge Type
Name and Choose Class type
Default deactivation date of
badge (Choose one)
– After: Deactivates based on
pre-defined period from
activation date
– On: a specific date
– No default
• User must enter date manually on
the Badge tab under the
Cardholder
470
Badge Types
System setting enables
the use of time in
addition to date for
activation and
deactivation
– Access panel configuration
allows storing date only or
date and time
– Specify time of expiration
per Badge Type
– Default it 12:00AM
471
Badge Types
Override with date of
existing badges
– This setting will use the
deactivation date of an
existing badge in the
system when another badge
of the same type is issued
to a cardholder
– This is useful for contractors
that are only onsite for a
specific amount of time
472
Badge Types
Default access
group
– This assigns default
access levels to the
badge
Front layout
Back layout
– Optional
473
Badge Types
Printing
– Duplex print mode
– The default Badge Type card
printer
– The Badge Type card printer
for this workstation
• Overrides the default badge
type card printer
– Enable Print limit to restrict
OnGuard Users from printing
multiple badges of this Badge
Type
• Works in conjunction with the
print duplicate badges
cardholder badge permission,
if enabled
474
HELP: System Administration > Administration > Badge Types > Printing
Badge Types
Encoding
– Assigns an
encoding format for
the badge
• Magnetic or Smart
Card formats may be
encoded
• The encoder may be
a standalone device
or inline device on a
card printer
475
HELP: System Administration > Administration > Badge Types > Encoding
Badge Types
Required Fields
– The addition of a badge
record will be denied if a
required field is blank
– Fields required may
change based on badge
type
– Useful when specific
database fields appear
on a badge
476
HELP: System Administration > Administration > Badge Types > Required Fields
Badge Types
Cardholder records can be searched per Badge
Type for required field data
– Update all record totals
• Displays a count of records not containing data in all fields
– Search up records missing required data
• Runs a cardholder search for all records not containing data in
required fields
– Search up records missing highlighted data
• Runs a cardholder search for all records not containing data in
highlighted fields
– Highlight all required fields
• Highlights all the fields selected as required
477
Badge Types
478
Badge Types
Badge ID Allocation
– Configures the Badge Type
to use the system setting for
ID allocation or a different
method
– Each Badge Type may be
configured with its own
badge ID settings
• Specific badge ID ranges
may be created and used,
which will override system
settings
479
HELP: System Administration > Administration > Badge Types > ID Allocation
Badge Types
Use or Lose Badge Type
Settings
– The use or Lose feature is
configurable per Badge
Type
• The number of days
• New badge status on
deactivation
Badge Deactivation
Status
• Badges are changed to this
status when deactivated by
date
480
HELP: System Administration > Administration > Badge Types > Deactivation Settings
Badge Types
Processing Use or Lose Feature
– Badge will be deactivated based on the lower number
of days set for system setting or Badge Type
• Setting either the system setting or Badge Type setting to a
value of zero keeps it from being processed
– If the system setting is set to zero and the Badge Type is set to
a value, Use or Lose is not processed for any badges other
than those with that Badge Type
Processing Badge Deactivation Status
– If configured for Badge Type, this setting will override the system
default
481
HELP: System Administration > Administration > Badge Types > Deactivation Settings
Core
MANAGING CARDHOLDERS
AND THEIR BADGES
482
Cardholder Management
Access the Cardholder forms
from:
– System Administration
• Administration -> Cardholders
– Alarm Monitoring
• View -> Badge Info
– IDCredentialCenter
• Launch program
OnGuard Credentials module
Webpage also available
– Requires Subscription license
483
HELP: System Administration > Administration > Cardholders
Cardholder Data Input
Add a Cardholder
Standard text fields
– Required fields
• Last name is the only
required field
– Drop-down lists
• Values must be
populated with List
Builder
Initially adding a
cardholder, all tabs
Default layout and field names shown
are accessible
Top and right
sections of the
cardholder form are
ubiquitous on all tabs
484
Badge Type
Selecting a Badge Type can automate the badge
and access level assignment for new cardholder
– The Default Access Group from Badge Type is assigned to the
cardholder automatically
A cardholder record may be added by itself by
not selecting a Badge Type
A cardholder without a Badge Type assignment
will not be downloaded to an access panel
485
Cardholder – Badge Tab
Badge Type selection
Badge ID number
– Manual / Automatic
– Determined from Badge ID
Allocation Tab (Cardholder
options or specific Badge
Type)
Issue Code
Badge Status
– Any choice other than
‘Active’ will deactivate the Default layout and field names shown
badge
– Use List builder for
additional content
486
HELP: System Administration > Administration > Cardholders > Badge
Activation and Deactivation Dates for
badge
– Auto assigned based on Badge Type selected
– Can be manually changed
PIN Assignment
– Up to 4, 6, 9 digits
– Manual or Random
– Configured under Cardholder Options
Use limit
– Enforce use limit setting must be enabled at the
reader
– Access Panel monitors the use limit count set per
Cardholder
487
Embossed Number Correlation
– Also known as hot stamp
– Typically the same as the Badge ID
– Used for badge tracking
Extended strike/held times
– Uses reader extended strike and held open times
488
Adding Badges
Maximum active badge enforcement
– If the cardholder has the maximum number of badges allowed
(set under Cardholder Options), adding a new badge requires
an existing badge to be deactivated
Default deactivated badge status
– Lost or Returned
– Others may be added with List Builder
489
Adding Badges
Access level assignment of new badge
– Copy from existing badge
– Use the default access group for this Badge Type
– No access level assignment
Copy PIN optional
– Set under Cardholder Options
490
Cardholder – Access Level Tab
Access levels are assigned to a cardholder’s
badge via the Access Levels tab
Access Levels can be automatically assigned to
a badge if the Default Access Group was
configured in the Badge Type
491
HELP: System Administration > Administration > Cardholders > Access Levels
Cardholder – Access Level Tab
Access group assignment
– Assigns access levels in the group to a badge
Temporary access level assignment
– Sets the activation and deactivation dates for an access level
492
Temporary Access Levels
Assigns activation and
deactivation dates to the
access level
– These may include time if that
option has been configured
under Cardholder Options
• Always rounds down to the
nearest Granularity level
• i.e. Granularity set at 30 minutes
in Cardholder options:
time set to 4:10, time will revert
to 4:00
– LS Communications Server
manages and issues the update
to the access panel(s)
• In OnGuard 7.0 and earlier the LS
Linkage Server manages this
process
493
Double click on Access Level
Double click on any Access Level in the
Cardholder screen Access Level tab to view the
associated Readers and Timezones
494
Capture Dialog
Use the capture button to add or modify photos,
signatures, and biometric templates
– The capture source may be selected manually
– Processing profile may be selected manually for
enhancing the image
495
HELP: System Administration > Administration > Cardholders [Capture]
Capture Source
Capture source
– WDM Video displays Video
Settings sub-tab
– FlashPoint/MCI Video
displays Video Settings and
Video I/O Settings sub-tabs
– Scanner displays Scanner
Settings sub-tab
– Digital Camera displays
Digital Camera sub-tab
– File Import displays File I/O
Settings sub-tab
496
HELP: System Administration > Administration > Cardholders [Capture] > Photo
Capture Configuration
Capture Tabs
– Chromakey
setup
– Effects gallery
– General
settings
– Capture source
settings
– File I/O settings
497
HELP: System Administration > Administration > Cardholders [Capture] > Photo
Chromakey Tab
Chromakey is used to
remove the static
color from behind the
cardholder photo
image
Key to origin
– Resets the crosshair to the
upper left corner
Tolerance
– Controls how much color
removal occurs
498
HELP: System Administration > Administration > Cardholders [Capture] > Photo > Chromakey
Effects Gallery Tab
Standard imaging effects are incorporated in the
OnGuard product
Multiple effects may be pre-defined
Six effects are pre defined in the Gallery
Imaging effects may be combined to achieve
desired result
499
HELP: System Administration > Administration > Cardholders [Capture] > Photo > Effects Gallery [Process]
General Settings Tab
Show admin settings by default
Define the default video
capture source
Define the default processing
file
Adjust the amount of image
compression
Set the crop window attributes
500
HELP: System Administration > Administration > Cardholders [Capture] > Photo > General Settings
Photo Auto-crop
Automatically crop/rotate a
cardholder image for
uniformity of cardholder
photo images
Enabled by default
Available from any capture
dialog in OnGuard
The features may be
enabled/disabled per
workstation
Aspect Ratio can be
changed
501
Photo Auto-crop
Considerations for use
– Images must be at least 640x480 pixels in resolution
– Both cardholders eyes must be visible in the image
– The face may not be covered in the image
– The image includes the cardholders head and partial shoulder
area
– The cardholders head may not be too close to either side or
top/bottom of the image
– The cardholder may not be too small or large in the image
– The cardholders head may not be tilted more than ±17°
– The image may contain only one face
502
Photo Auto-crop
Eye Detection Crosshairs Crop Window
503
HELP: System Administration > Administration > Cardholders [Capture] > Phot > General Settings
Photo Rotation and Auto-crop
504
Signature Settings
Select Tablet Type
Pen Attributes
– Pen Pressure
Granularity controls the
amount of stylus tip
pressure needed to
begin writing
– Pen Width controls the
line width in pixels
Pen and
Background Color
505
HELP: System Administration > Administration > Cardholders [Capture] > Signature [Sign]
Cardholder Searches
Searching of existing records
– All cardholder fields are searchable
• PIN field on the Badge tab is not available
– Refine search by entering more detail in the available fields
– Search > OK results in all cardholders
– Boolean search methods are used
• Wildcard character % can be used in searching
– Access level searches include all, partial, none of the selected
506
HELP: System Administration > Administration > Cardholders > [Search]
Cardholder Search Permission
Adjusting a Cardholder User Permission can
prevent the OnGuard user from accessing the
Cardholder Search feature
– The cardholder form may be configured to automatically launch
in Alarm Monitoring displaying the cardholder record
– Limits the user to display only the current cardholder record
Prevents Alarm Monitoring user from performing a
record by record search
507
HELP: System Administration > Administration > Users > Cardholder Permission Groups
Printing Badges
Print preview or print may be selected
Single badge or multiple badges may be printed
for the same cardholder
Multiple badges may be printed based on
cardholder search
508
HELP: System Administration > Administration > Cardholders > [Print]
Encoding Badges
Select the badge and click the Encode button
509
HELP: System Administration > Administration > Cardholders > [Encode]
Cardholder Menu
Only available when the Cardholder
form is active
Viewable in System Administration
and Alarm Monitoring
– Keyboard Wedge Settings
– View Options
– Bulk Operations
– Show Last Granted Location or
Attempted Location
510
HELP: System Administration > Cardholders (with Cardholders already open)
Keyboard Wedge Settings
Cardholder Menu Selection
– Keyboard Wedge Settings
• Support for both non government cards and the Department
of Defense Common Access Card (CAC)
– Can be used to search cardholder via Badge ID by
simply typing in the badge ID number while at the
cardholder screen
511
HELP: System Administration > Cardholders (with Cardholders already open) > Keyboard Wedge Reader Settings
View Options
The View Options features allow the OnGuard
User to alter Cardholder photo and signature
view ability
– Can be set per workstation
Number of records to move when using the fast
forward or rewind buttons
512
HELP: System Administration > Cardholders (with Cardholders already open) > View Options
Bulk Operations
Bulk Operations allows
for mass changes of the
cardholders searched
– Access level assignments
• Add and Remove only
– Modify Badges
• Update Activate/Deactivate
Date
• Update Badge Status
• Update Use Limit
• Apply Badge Filters as
needed
513
HELP: System Administration > Cardholders (with Cardholders already open) > Bulk
Show Last Access
To change the access
activity results displayed
below the cardholder
photo simply choose
either Show Last Granted
Location or Show Last
Attempted Location
– Set up per workstation
– Default is Last Granted
Location
514
HELP: System Administration > Cardholders (with Cardholders already open) > Show Last Granted/Attempted Location
Testing Cardholder / Badge Functions
Test the following, observe the results
 Access Granted on  Pre-Alarm Door held
each reader open
 Granted No entry versus
 Relaxed Door Forced
Granted Access
 Duress PIN
Open
 With and without Access  With Series 2 hardware:
Denied checkbox selected  Alarm Shunt
 Assume Door Used  Strike Follower
 Double Card Unlock/Toggle
 Use Limit  Test with badges that do
 Set limit in cardholder form and do not have this
authority applied via their
 Two Card Control Access Levels
 Denied Attempts
 Invalid Badge
 Invalid Access Level
515
Core
FORMSDESIGNER LITE
516
FormsDesigner Lite Application
Used to:
– Modify field names on forms
– Modify the form layout
– Modify the Tab order
Changes made to field names on forms does not
update reports or List Builder names
The following forms can be modified:
– Cardholders
• Cardholder and Badge form
– Readers
• Group form
– Visit, Visitor, Asset
• Not covered on this class
517
HELP: Start > All Programs > OnGuard > System Tools > FormsDesigner
FormsDesigner Lite Application
Separate OnGuard application accessed via
– Start>All Programs>OnGuard>System Tools > FormsDesigner
Functionality controlled through the license
– FormsDesigner Lite
• Supplied with OnGuard
• Allows cosmetic changes
– FormsDesigner Full
• Requires an additional license
• Covered in detail in the PRO-Data class
518
Before Launching FormsDesigner
Ensure that the form being edited is not in use by
any OnGuard User when the revised form is
being saved
– Force operators off the system if necessary
• Disable User accounts
• Revoke license via License Administration
• Wait 1 minute
• Save the form
• Enable the User accounts
519
Before Launching FormsDesigner
You must backup your database
– You will be prompted to confirm you have done so
– Once saved modifications cannot be undone
– This protects against unforeseen problems such as
• Power Outage
• Network Problems
• Database Issues
520
FormsDesigner Navigation
Object List
All Viewing Permanent Area
Database
Info Window Custom Area
521
521
FormsDesigner Lite
Typical Cosmetic Changes
– Change field labels object text to match country
requirements, such as zip code, state, etc.
– Rename Reader groups to customer defined names
– Relocate fields on a page
– Change the tab order when adding cardholders
522
Label Object
Double click on the label to be updated
Update the label text to the appropriate value
Update Field Label here

Then press OK
523
Reader Groups
Reader Group names can changed
There are six default groups
available, more can be added with
FormDesigner Full
The names of the groups can be
changed in FormsDesigner Lite
524
Reader Groups (Cont.)
Changing the label of the reader groups is the
same as changing fields in the Cardholder pages
525
Reader Groups (Cont.)
This change will reflect on the Readers and doors
screen, but not in List Builder
526
HELP: System Administration > Access Control > Readers > Grouping & System Administration > Administration > List Builder
Field Location
Fields may be moved within the chosen screen
– Select the field as shown, then drag to the desired
location
– Be careful not to place one field on top of another
– Keep the field and field labels together
– Only fields in the custom area should be moved
527
Finalizing The Layout
Alignment Tools
– Allow objects to be
properly aligned
– Horizontally or Vertically
– Carefully select
appropriate fields for
alignment: <ctrl> click
– Toolbar buttons appear
in lower left corner when
two fields are selected
528
HELP: FormsDesigner > Object > Align Horizontally / Vertically
Set Tab Order
Speeds up copy-typing
from lists
Step 1
1. Sets the order in which
the cursor moves from
field to field when the user
tabs through them on a
page Step 2
2. Click on the fields in the
order required
3. When done select Save
and Exit Tab Mode Step 3
529
HELP: FormsDesigner > Edit > Set Tab Order
Saving Changes
With FormsDesigner Lite the only option is to
save cosmetic changes
– This does not affect the data in the database
– Log back in to System Administration and review the
results
WARNING: This presentation
does not cover the licensed
version of FormsDesigner. Use
of this product requires careful
consideration and attendance
on the Professional-Data class is
highly recommended before
use.
530
HELP: FormsDesigner > Edit > Save
Core
BASIC ALARM
CONFIGURATION
531
Basic Alarm Configurations
The display and behavior of each
alarm/event in alarm monitoring can be
adjusted through the alarm’s definition
Existing default alarms/events can be
adjusted and/or new custom alarms can be
configured
– Priority and priority color
– Must acknowledge
– Must enter a response when acknowledging
– Highlighting the alarm (Active alarm)
– And more….
532
Any configuration changes that
are made in any of the tabs from
the Alarm Configuration form in
System Administration, requires a
Refresh in Alarm Monitoring
In Alarm Monitoring, select
Options > Refresh Alarm
Configuration to ensure Alarm
Monitoring sees all updates made
to an alarm
533
‘System Type’ alarms/events are default alarms
– ‘User Type’ are custom created alarms/events covered on the
Professional-Access class
In System Administration select Monitoring >
Alarms…
534
Alarms may be prioritized
– 0 – 255 priority levels
– Higher the number = higher the priority
– Can be sorted by priority column in Alarm Monitoring
Alarms may be configured to have customized
attributes
– Use F1 (help) for feature information
535
The Priority tab allows for addition or
modification of display colours
– In the following example YELLOW will be used for
priority 125 – 174
– Different colours can be used for unacknowledged
and acknowledged alarms
536
Core
TIMEZONE READER MODE
537
Timezone Reader Modes
Controls the reader mode during the start and
end of a Timezone
The start and end reader mode will override the
current online mode of the reader
Assign only one Timezone to a reader
– Assigning more than one can produce instability
A newly created Timezone Reader mode will
work on the next Start or End time configured
– Example: if an 08:00 – 17:00 timezone is assigned to a reader
at 10:00, it will work next change reader mode at 17:00 and
then continue as configured
– Manually change the reader mode if a reader mode change is
required before the next start or end of the timezone(s) interval
538
Timezone Reader Modes
Click on Modify
Select Reader, Timezone, Start and End Mode
Click on the Assign button
Repeat as needed and click OK when finished
539
HELP: System Administration > Access Control > Timezones > Timezone/Reader Modes
Core
ACTION TYPES AND GROUPS
540
Action Groups Defined
An Action Group contains one or more Action
Types that will be executed (near) simultaneously
An Action Group Library contains one or more
Action Groups
– The Action Group created is listed in the Action Group
Library
System Administration User Guide – Appendix A
lists all the available Action Types
LS Linkage Server is required
541
Action Group Library
Action Groups can be used in other System
Administration features such as
– Scheduler
• Covered later in this class
– Global I/O
• Covered later in this class
– Note: User permissions can restrict the available

Actions that can be included
542
Action Group Library
Select Action Group Library under the
Administration program menu
Click on Add
543
HELP: System Administration > Administration > Action Group Library
Action Types
Click on Add to add the Action Type (s) to the
Group
Select the Action Type
544
Action Types
Select the corresponding components or features
for the selected Action Type
Click OK to save
545
Action Types
Tick the appropriate Monitor Zone(s)
– If Users needs to access them
Click OK
546
HELP: Selecting ‘Cancel’ will hide the Action Type from all Users.
Action Groups within Monitor Zones
Monitor Zones may be configured to include
Action Groups in the Alarm Monitoring system
tree
The Action Group may be directly executed
through right click menu, LS Linkage Server must
be configured and running
547
Core
SCHEDULER
548
Scheduler
Defines a schedule for either:
– Action Types
– Action Group
LS Linkage Server must be configured and
running
– Schedule does not reside on the Access Panel(s)
– If upstream communication is lost, scheduled item will
fail
549
Scheduler Configuration
May be launched from:
– System Administration >
Administration > Scheduler
• Scheduler for all objects
– Alarm Monitoring > View > Scheduler
• Scheduler for all objects
550
HELP: System Administration > Administration > Scheduler
Scheduler
Service Status indicates LS Linkage Server status
and Host Name is the computer running the
service
Time Zone selection shows current time in a
specific world time zone
– For reference purposes only
551
Scheduler
Click on Add
Select the Action Type or Action Group
– Select individual Action Type and then follow wizard
or select Action Group name
552
Scheduler
Schedule the Action
Type(s) or Action Group
– World Time Zone that
schedule time will be
based upon
– Select either
• One time with appropriate
date and time
• Recurring and click on
Change button to define
schedule
Schedule can be Disabled
using checkbox
553
Scheduler
Schedule the Occurrence
– Daily, weekly, monthly
Schedule the Frequency
– Occurs once or Occurs
every quantity of minutes
or hours, starting at and
ending at specific times
Schedule the Duration
– Start and end date
Click OK
554
Scheduler and Alarm Monitoring
Scheduler will attempt to perform configured
action at scheduled time
– Failure will be logged and may be examined by right
clicking on scheduled item
– If a single item in the schedule fails to execute a
failure will report
• View action history
• View current status
• Refresh action
555
Core
LOCAL I/O – FUNCTION LISTS
556
Local I/O – Function Lists
Local I/Os automatically trigger
specified output action(s) within a
Function List, when a specified event
occurs
Local I/Os are confined to a single
access panel
– They do not span across multiple ISCs
Function Lists are configured per
access panel
– Up to 100 Function Lists are supported
per ISC
– These are stored in the OnGuard
Database and held in ISC memory
557
HELP: System Administration > Access Control > Local I/O
Functions available from topics covered in this class:
– Activating alarm panel outputs
• Activate, Deactivate or Pulse Outputs
– Activating reader outputs
• Activate, Deactivate or Pulse Outputs
– Unlocking readers or setting reader mode
– Timezone Activate/Deactivate
• Change the status of a timezone, next interval change will update status
– Timezone Override
• Change the status of a timezone, next interval s will not update status
– All Reader Lock/Set Mode
• All readers controlled by ISC will move to the mode specified for the duration
selected
– Dialing back to the host computer when upstream communication for
access panels is set to dialup
• Only used with Modem based ISC, causes dial-back and database synchronization
558
Functions available beyond the scope of this class:
– Masking/unmasking of alarm groups
• Alarm Mask Groups must be built
– Opening/closing areas
• Local Areas must exist
– Activating Two Man Area Control
• Local Areas must exist
– Testing for active alarms in alarm group
• Used in conjunction with Alarm Group unmasking to provide intrusion detection panel
functionality
– Intrusion Mask Group Force Arm Away
• Used to schedule automatic arming of Intrusion Groups
Chain Lists:
– Chaining multiple function lists together
• Use if 6 functions are insufficient
559
Once the Function is selected then a
corresponding Argument(s) must be selected
Up to six (6) functions can be selected per List
560
Take note of the Function Behavior box listed in
the configuration form
– Set True
– Set False
– Pulse
561
All Reader Lock/Set Mode behavior
– Set true
• Sets all readers on the controller to Locked for the time
specified in argument 2
– Set false
• Sets all readers on the controller to the mode selected in
argument 1 for the time specified in argument 2
– Set pulse argument 1 mode selected
• Set all readers on the controller back to the online mode
configured in the reader configuration plus any timezone
changes
Note: The reader mode may be manually changed in Alarm Monitoring.
This will remove the locked override mode of the reader and will return
the reader to the selected reader mode
562
Local I/O – Function Lists Example
Select Local I/O
under the Access
Control program
menu
Click on Add
Name the Function
Select the Access
Panel
563
Local I/O
Local I/Os may be executed via:
– Alarm Monitoring by right clicking on the Local I/O
and selecting Execute
– Device Linkage (second tab under Local I/O)
– Scheduler
• Action type: Execute Function List
– Command Programming*
– Instant Commands*
– Area count*
– Alarm mask group count*
– Alarm Acknowledgment*
* Not covered on this class
564
Local I/O
Device Linkage options include:
– All alarm points
• Inputs
• Door Forced Open
• Door Held Open
– Communications loss to downstream devices
– Host communication loss
• Loss in communication to workstation running the LS
Communication Server
– Access activity
– Cabinet Tampers
– Power Failure
565
Local I/O
Input actions on state change can be configured
to
– Do nothing
– Set true
– Set false
– Pulse
Based on the Function Behavior box on the
Function Lists tab
566
Local I/O
Select Access panel from the drop down list on
the second tab under Local I/O
Select a Device on the left side
Select a Function List on the right side
Click on the Link button
567
Local I/O
Select the appropriate Logical Event
– Each Logical Event can be linked to only one Function List
Select the appropriate Take Action(s)
– Do Nothing
– Set False
– Set True
– Pulse
Click OK
568
Local I/O
Device and Function are linked
To Modify or Remove the link, click on the link to
access the Modify Link or Remove Link buttons
– Double clicking on the link opens the tree to display specifics
contained within the link
569
Local I/O and Alarm Monitoring
Activate the Device (Input) to trigger the Function
List and view results in Alarm Monitoring
Activate the Function List manually by right
clicking on the function in the System Tree
570
Core
GLOBAL I/O
571
Global I/O
Global I/O functionality allows linkage between
Access Panels and downstream devices system
wide
– Configuration includes
• Global Linkage
• Input Event
• Output Action
– Utilizes the LS Linkage Server for Global I/O execution
• Global I/Os are not resident on the Access Panels
• Global I/Os are server based
572
HELP: System Administration > Access Control > Global I/O
Global I/O
Select Global I/O under Access Control program
menu
Click on Add and enter a Name
573
Global I/O
Global Linkage
– World Time Zone
• Defines world time zone that the LS Linkage Server will
use to execute based on the OnGuard Timezone
assignment
– Timezone
• Defines allowable times when Global Linkage will execute
based on world time zone
– Always
– User defined
– Never – Could be used to disable Global I/O linkage
574
Global I/O
Event Timestamp Tolerance
– Sets a user specified timeout period for a linkage
which indicates how long after an input is activated it
will remain valid and can cause an output action
• 3 Minutes is the default time
575
Global I/O
Logic correlation time period
– When creating a linked alarm
event (And Logic), set this to the
maximum number of seconds
between each event occurring
• This is a rolling time limit where the
time period resets after each
correlating event occurs
• Valid range 1-999 seconds
– Defaults to 10 seconds
– If each event transaction occurs
within the logic correlation time,
the output action is triggered
576
HELP: Please note that events are correlated not the states of devices!
Global I/O ‘AND’ Practical Example
Strobe Output required for multiple Door Forced
Conditions
Door Forced
Output
Door Forced
Action
Output occurs if
Door Forced
all three doors

are forced open
within a user
(Door Forced in an example)
defined time limit
577
Global I/O - Input
Click on Add to add Input Event(s)
– Event is required
• May individually add more inputs to be linked to same
output action(s)
578
Global I/O - Input
Devices may be optionally assigned
– All field hardware
Badges may be optionally assigned
– One badge number per configuration
579
Global I/O - Input “Or” Logic
Any specified input event selection causes
generation the output event(s)
Default logic
580
Global I/O - Input “And” Logic
Requires two or more input (event) transactions
in a pre-configured time (Logic correlation time
period) in order to generate the output event(s)
– Not a state-based AND operation
• All inputs must report active, but do not have to remain active
• Inputs are ‘transaction’ based NOT ‘Alarm State’ based
581
Global I/O - Input “And / Or” Logic
Multi-layer AND/OR hierarchy may be created
– OR gates feeding an AND gate
– The AND gates feeding an OR gate
– Limited to OR-AND-OR relationship
582
Global I/O - Input Modifying Logic
Inputs may be dragged and dropped between
logic groups using a mouse
– As long as moving the input does not violate the logical
operation
• Example: There MUST always be at least 2 inputs in an
‘AND’ group
Logic groups may be deleted
– User will be prompted for keeping the inputs belonging to the
group
583
Global I/O – Output Actions
Click on Add to add
Output Action(s)
– Choices include
• Action Types
• Action Group Library
– Control action
• Action dependent on
selected item
Click OK to save Global
I/O
584
Global I/O – Additional Output Actions
Deactivate Badge
– Deactivates any badge
based on a specified Input
Event(s)
• New Badge Status
automatically assigned
• Use List Builder to add more
Badge Status values
585
Local I/O may be linked to Global I/O when
Execute Function List is selected for the Output
Action
– Execute: True
– Execute: False
– Execute: Pulse
586
Grant / Deny Action Type
Launches pop-up on any
access related event
Grant access or Deny access
to the output action reader
selected
NOTE: Two RIMs are required
one for reader the other for
the stike/REX/Door contact
587
Generate Event
Custom text alarm generated in Alarm
Monitoring as an output action
– Useful for creating a custom alarm text for the
AND/OR linkage
588 588
Global I/O - Generate Event
Configuring event text
– Select configured text using dropdown
• Contents added in Text Library under Administration
– Events can be typed in the given area
• Automatically added to Text Library
589 589
Global I/O: Generate Event Text
Generate Event Text and Alarm Monitoring
Trigger Global I/O with Generate Event as an
Output Action to view the results
590 590
Core
ALARM MONITORING
ADDITIONAL FEATURES
591
Search bar for trees and lists
User may press ‘<ctrl> F’ to search hardware
trees or hardware lists in System Administration
and Alarm Monitoring
– An item in the system tree or list must be selected
Useful for finding devices by name in large
trees/lists
– Pressing F3 will take you to the next item in the list that
matches your criteria
592
Runaway Mode Behavior
Runaway mode (must be enabled for use)
– While in this state, the Communication Server stops
sending the runaway events to Alarm Monitoring
stations and to the database
• Events may optionally continue to log to the database
– Restores from Runaway after 10 seconds of no
events
593
HELP: System Administration > Administration > System Options > Runaway Detection
Runaway Detection (Cont.)
Detect runaway devices
– Enable the feature within
System Options tab
Number of events and time
interval evaluated as logical
AND
– Number of events
• Quantity of alarms that
occur from a single device
– Time interval
• Alarms occurring within the Setting applied to ALL
specified time interval
Log events to the database devices
– Will continue logging to the
database once in the
runaway detection mode
594
HELP: System Administration > Administration > System Options > Runaway Detection
File Program Menu
Switch Log On
– Used to switch OnGuard user without
closing out of Alarm Monitoring session
Change Password
595
HELP: System Administration > Applications > Switch Log On & Alarm Monitoring > File > Switch Log On
Edit Program Menu
Acknowledge Alarms
Fast/Group Acknowledge
– Shortcut = Ctrl + F12
Select All
– Shortcut = Ctrl + F11
596
HELP: Alarm Monitoring > Edit > Fast/Group Acknowledge/Select All or Ctrl F12/F12
View Program Menu
Badge Info is the Cardholder Form
System Status for tree
Pending Alarms window
597
HELP: Alarm Monitoring > View
View Program Menu
Cardholder Verification
Launches a window that will show
the image from the cardholder
record based on access activity at
a reader
– Any reader belonging to the monitor zone
may be chosen
– Multiple windows can be configured each
with different readers
Display will be based on the
access transaction from the
selected reader
– Access event and the cardholder name are
displayed
– Border color will be based per alarm
definition on alarm priority colors
598
HELP: Alarm Monitoring > View > Cardholder Verification
View Program Menu
Reports can be run within
Alarm Monitoring
– User Permission applies
– Reports will be covered later in
this class
599
HELP: Alarm Monitoring > View > Map
Trace Program Menu
Live traces can include Devices (hardware),
Badges, Monitor Zone
Historical traces can also be run with the time
and date selectable
Alarms can be filtered in the trace using the same
filter from the main window
Multiple traces may be run simultaneously
600
HELP: Alarm Monitoring > View > Trace
Tracing
Tracing
Badge ID trace
Badge, Device
and Controller
Trace
To initiate a trace Configuration
– Right-click mouse of
selected item Badge, Device, and
– Use the trace icon on the Controller Trace
toolbar Monitor
601
Trace Window Alarm Filtering
Alarm Filtering may be
configured by right Grouped and selectable by date
clicking on any column

title in any Trace
window
– Select all
– Individual items based
on column being filtered
Grouped and selectable by alarm description
602
Configure Program Menu
Alarm filter allows specific types of events to be
viewed
– The main alarm monitor window must be selected
603
HELP: Alarm Monitoring > Options > Alarm Filter
Configure Program Menu
Multiple hardware windows may be opened and
configured individually
Configure Column order and selection
Configure System Status Options
– Useful for troubleshooting devices
– Click on the System Tree window for feature
604
HELP: Alarm Monitoring (System Tree open) > Configure > Columns or System Status Options
Control Program Menu
Update All Hardware Status
– Refreshes System Tree
– Does not take hardware off line
Set All Controller Clocks
– Does not take hardware off line
605
HELP: Alarm Monitoring > Options > Update All Hardware Status
Options Program Menu
Mute Sound
– Prevents audio from playing on alarm
Change font of alarm
monitoring text
Save Alarms on Exit
– Displays current alarms when
program reopens
606
Save settings in Alarm
Monitor
– The settings can be saved on exit
or immediately
Alarm view
– Alarms can be set in either
ascending or descending order
– Time display can include seconds
Show alarms marked in
progress
– Alarms marked in progress can be
hidden from view in alarm
monitoring
607
Auto cardholder display for
access alarms
– Cardholder window with the
associated cardholder will display
with an access event
Options that control the
automatic display of objects
in response to alarm
configurations
– Automatic Map Display
• Will display the default map
associated with an event
608
Automatic…
– Cardholder display
• Will display the cardholder record
associated with the event
– Video Verification
• Will display the video verification window
– Visual Notification
• This enables Alarm Monitoring to take
focus from other programs that may be
running
– Automatic Live Video Display
• This displays a live video player from the
camera associated with the event device
– Launch Video for Active Alarm
• This will display video from an alarm at
the time the alarm was active as opposed
to the current time
609
PTZ Options
– These are options for controlling a
camera with pan tilt and zoom (PTZ)
capabilities. This is discussed in the
PRO-VIDEO class
Display status on maps
– Device information other than the
device name will be displayed on the
map
Highlight entire row
– This will highlight the entire row rather
than the first column for an active alarm
610
Disable command verification
– This will prevent successful notifications
from being displayed
Execute command on single-
click of icon
– This changes the option to execute
commands from double click to single
click
Display controller capacity
– This will display additional controller
information in the system hardware
611
Display device firmware
revisions
– This will display the firmware revision
for devices other than access panels
Display device serial numbers
– This will display serial numbers of
devices in the monitor zone
Refresh alarm configuration
– This will force the refresh of the alarm
configuration
612
Core
ARCHIVING
613
Archiving and Restoring History
AccessControl Database
– Non-history data
– Transactional (history)
data
History older than

threshold is either:
– Deleted
– Archived
614
Archiving History
- OR -
Archival Database
(7.0 or later)
615
Archiving – to shared folder
Archiving is the process of moving
records from the database to a text file
(.txt) located in the specified path
– Useful for maintaining the size of the database
– Records can be restored to run reports on
archived data
• These records are copied into “_restored” tables in
the database to prevent writing over live data tables
– Scheduler feature in OnGuard should be used to
automate the process
• Requires LS Linkage Server
– Default archiving timeframe is records older than
180 days
616
HELP: Alarm Monitoring > Administration > Archives
The archive window will define the following
– Whether records will be archived to disk or purged
– Defines how long records will remain in the database
• Default is 180 days
– Sets the default archive path
• Change from the default path of C:\Program Files\OnGuard\Archive folder
– What the record counts are based on the archive settings
chosen
– Allows the manual purging of data to archive files
617
Archive Specific Event Types
– Each of the event and alarm acknowledgements can have their
own archive settings
– Select radio button “Archive specific event types”
618
Archived records are stored as text files (.txt)
– These records should be stored in a secure location
– The records are date stamped and includes archive type
(Events, User Trans, etc.) as part of the file name
619
Restoring History – from shared folder
History must be restored to
Database if needed
Shared Folder
620
Restoring Records – from shared folder
Shared folder records must be restored before
reports can be run on that data
– The appropriate archive must be chosen
– That archive must be restored to the database
– When running the report, the Use archived records checkbox
MUST be chosen
– Reports cannot be run on live and archived data
simultaneously
621
HELP: Alarm Monitoring > Administration > Reports
Management of shared folder Archives
Archive management includes
– Deletion of obsolete archive files
– Restoring of archived records to the database for reporting
purposes
– Deleting the restored records from the database
– Viewing current or deleted archive files
622
HELP: Alarm Monitoring > Administration > Archives > Restoring
Archiving – to Database
Preparation
– Delete any Restored Archives shown within the
Restoring Tab
623
Archiving – to Database
Within the Archiving tab select
– Archive to database
– Provide Database name
• For OnGuard 7.0 must be named
– ‘AccessControl_Archival’
– And already exist
– From OnGuard 7.0 SP1 and later Setup Assistant will

create the required database in the same instant on SQL
that the main database resides in if Assisted Set-up for
SQL was selected at installation
624
Archive (Database) Management
Archive management includes
– Purge the archived records from the archive database when
required
• Cannot be scheduled
– Viewing database size and availability status
625
Archive Scheduling
Scheduling Automatic Archiving
– LS Linkage Server is required
– Output action is ‘Archive/Purge Live Database’
– Set for recurring interval as appropriate
[Scheduling is covered in more detail on

the Professional-Access Class]
626
Restoring from file via Database
If Archive files had been created then Archiving
by Database is selected, to view the archive file
restore file to the Archive database then run
reports from the archive database
Once restored to the Archival Database the
restored records will be managed by the purging
interval of the Archive database
Once an Archive text file has been restored to the
Archive Database it can be deleted via the
Restoring tab
627
Core
WATCH LITE
628
Review WATCH Lite Activity
Open Internet Explorer and type
url:
– http://<server_name>/watch
– Log in with an OnGuard Internal
Account
It may take a few minutes for the
data in WATCH Lite to appear
Server must be connected to a
network to obtain statistics
Note if Database password was changed since
WATCH Lite was installed login will be denied
– Reinstall WATCH Lite to resolve
629
WATCH Lite
Monitor statistics in live graphs and data
630
WATCH Lite
Set planned event reminders
631
WATCH Lite
View capabilities of WATCH Lite vs. WATCH
632
Core
REPORTS
633
Cardholder Reports
Cardholder reports
– Cardholder reports can be run based on a cardholder search
– ‘Limit report to current search’ checkbox is enabled by default
634
HELP: System Administration > Administration > Cardholders > Reports
Cardholder Reports
Only reports assign to the user via Reports
Permission Group will be initially viewable in the
Report list
– ‘Display unauthorized reports’ checkbox can be enabled
to view all reports
635
HELP: System Administration > Administration > Cardholders > Reports
Cardholder Reports
Cardholder reports
– Select report and click on Print
– Select Preview, Export, or Print
636
HELP: System Administration > Administration > Cardholders > Reports [Print]
System Reports
Reports are available from System Administration
or Alarm Monitoring
Approximately 150 default reports in OnGuard
637
HELP: Alarm Monitoring > View > Reports or System Administration > Administration > Reports
System Reports
System Reports include the following:
– The ability to search within a report
– The ability to export reports to other file formats
– A customizable report description
– Reports may be run against live data or archived records
separately
• Enable checkbox at the bottom to ‘Use archived records’
Through User Permissions, displaying specific

reports can be limited
– Reports Permission Group
638
Reports
Filter Report View
– Allows the filtering of report view by type
Display unauthorized reports checkbox
– Display reports not assigned to user via Report Permission
Group
639
HELP: Alarm Monitoring > View > Reports or System Administration > Administration > Reports [Filter Report View]
Reports Types
Report Configuration tab
– Used to password protect, delete or add new
Report Template files
Report tabs
– Use to apply filters to the data to be provided in
selected reports
System configuration reports are useful for

documenting and recoding an installation
configuration
640
HELP: Alarm Monitoring > View > Reports or System Administration > Administration > Reports
Report Filtering
Each report tab has filtering capabilities to refine
the desired report
Filtering options include
– Date and Time
– Cardholder
– Reader, Alarm Panel, Access Panel
– Text
– Events
641
HELP: Alarm Monitoring > View > Reports or System Administration > Administration > Reports > (several tabs)
Previewing Reports
Find
Export
Page
Forward/Back
642
HELP: Alarm Monitoring > View > Reports or System Administration > Administration > Reports [Print/Preview]
Report Output
Report may be:
– Exported
• Data may be exported to
– Disk file
» .PDF
» .XLS
» .CSV
» .XML
» .RTF
» .RPT
– Printed
643
Scheduling of Reports
Automatic reports can be scheduled and sent to a
printer or attached to an email
File attached to email

– Requires configuration of LS Global Output Server
• See professional Access class
644
Customizing Reports
A run-time version of Crystal Reports is included
with OnGuard
To customize reports, the full version of Crystal
reports is required
– OnGuard 7.3 utilizes Crystal Reports 2011
An introduction to customized reports using
Crystal Reports is covered in the Professional-
Data class
645
Core
SINGLE SIGN-ON
646
Logon Options
OnGuard Internal account
– Username and Password created in OnGuard are
required credentials for log in
Auto Single Sign-On
– Automatically signs OnGuard user in, based on
linked directory credentials
Manual Single Sign-On
– Uses same directory as Auto Single Sign-on
– Allows the option of logging in using the directory or
an internal account credentials
647
Internal Account
The Internal Account is the credential used for
regular OnGuard log on
648
Auto Single Sign-On
Launch the Logon window
– Open OnGuard Application
– Log on to OnGuard using key icon or menu option
– Auto Logon will be started
• Press the Shift Key to bypass Auto Logon and log in
manually
649
Single Sign-On Configuration
Associate Directory
– Lightweight Directory Access Protocol
– Active Directory
• (See later in this class)
– NT4 Domain
– Windows Local Accounts
Configure authentication method (if required)

– Anonymous
– Current Windows account
– Explicit
650
Single Sign-On Configuration
Link Directory Account to OnGuard User
651
Manual Single Sign-On
Click the “Options >>” button to be given the
ability to choose between logging in using the
internal account or the directory account
(manually).
– Deselecting the “Allow manual single sign-on” check
box in the directory form will prevent the directory
from displaying in the log on directory drop-down
box.
652
Single Sign-On
Advantages of using Single Sign On
– Enhanced password policy enforcement via
directory
• Password expirations and changes
• Complexity requirements (special characters, minimum
length, upper/lower case, etc.)
– Convenience or ease of access to OnGuard
applications
Consideration when using Single Sign On
– Security risk if user fails to log out of Windows
– User permission for Windows logout upon (Alarm)
Monitoring logout is available
653
Core
WHAT’S NEXT?
654
What Next?
We have completed the CORE class materials but this
is not the full capability of OnGuard
Further classes and User guides are available to
cover:
– OnGuard Web Modules
• Credentials
• Policies
• Cardholder Self Service
• Visitor Management
• Visitor Self Service
• WATCH Standard
• Video Viewer
– Access Area Management
– Map Designer
– Importing and Exporting data
655
What Next?
cover:
– System Data Encryption
– Biometric hardware for verification
– Intrusion system Configuration
– OnGuard Video Management
• Prism Video Viewer
• UltraView
– Integration tool kits
– Elevator/Lift Integration
– Guard Tour
– Cardholder Commands
– Lenel BlueDiamond Mobile
656
What Next?
cover:
– Destination Assurance
– Extended Alarm Handling
– Email Integration
– Device Groups
– First Card Unlock
– Custom Reporting
– Forms Designs
– Mobile Monitoring
– BACnet Support
657
What Next?
cover:
– Alternative Alarm input supervision
– Data privacy – Segmentation
– OnGuard Enterprise
• Multiple Server scenarios
• Fault-Tolerant Server Clusters
– Microsoft
– NEC
– Open Access Alliance Partners
• Command and Control
• Fire and Intercom Systems
• Key Management
– etc.
658
What Next?
cover:
– Migration from :
• CASI M5 hardware
• CASI M2000 hardware
• Honeywell hardware
• ACU hardware
• Software House iStar hardware
• IFS Networking infrastructure
– Alternative
• NGP Security Series hardware
• ILS Wireless locks
659
Certification Testing Center
Follow the link within email sent to you
http://lenel.proexams.com
You can pause the exam and return to answer
more questions later or change earlier answers
Don’t forget to submit the exam within 30 days
660
HELP: http://lenel.proexams.com
Upon Completion of Class
You have 30 days to complete the exam
– 70% for a Pass
– 80% if not passed first time
– 80% if not passed second time
After passing the Associate exam you will
automatically be registered for access to the
tech support web page
Training licenses can be renewed provided
your certification is current
Practice, Practice Practice !
661
Thank you for your
attendance
Please make sure to take all personal items

with you. Leave badges on your desk.
662

OnGuard Core

Uploaded by

Copyright:

Available Formats

You might also like

OnGuard Core

Uploaded by

Document Information

Original Description:

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

OnGuard Core

Uploaded by

Copyright:

Available Formats

Core

OnGuard-Core 7.3 EMEA Jan 2017

Select the discipline

Updated telephone numbers may be

Subject to change without notice

6.4 June 2010 July 2013

7.0 October 2014 October 2017

Visit http://partner.lenel.com for list of approved

Comparison of components installed for a System Tools

Select Database and

In general the use of System

(* Valid SUSP required)

NOTE: WATCH Lite is only supported on SQL

Windows Services view

– Adjust service ‘log on as’ in client Workstation

SQL 2012 is illustrated

SQL 2012 is illustrated

SQL 2012 is illustrated

SQL 2012 is illustrated

SQL 2012 is illustrated

– Carefully and accurately follow the procedure

CLIENTS, UPGRADES AND

Check ODBC connection for correct

– Access via Microsoft SQL Server 20xx >

Icon Indicator Key:

LS Client Update Service must be set to Automatic

when LAN is primary Upstream

Downstream Devices Downstream Devices

If using the LNL-1300e as a downstream device a

Bond one end to Earth only

Output Diode is located close to the

Typical output circuit with DC

– LED A or 1 – Power (blinks rapidly)

*(Series 2 Controllers have additional LEDs for

ACCESS PANELS OR ISC’S

LNL-4420 No Direct No Yes Ethernet 50,000 Yes

1 When not using downstream support capability, otherwise 1

– LNL-3300 RS232/485 Built-in Ethernet

– Only one port is active

Number of Auxiliary Number of Auxiliary

Bioscrypt RS485 Bioscrypt RS485

1 Current limited power for external load including reader(s)

1 Current limited power for external load including reader(s)

1 Current limited power for external load including reader(s)

Connect shield to Earth Point

PSU RIM Reader

Please review these documents now

*OnGuard Compatible Firmware

Attend Specialized classes for information and

OnGuard License required

HOLIDAYS AND TIMEZONES

08:00 Timezone Interval 16:59

A Timezone deactivates on the trailing edge of

Reminder: the initial login is:

– Level 2 & 3 – Device Info page Level 2: Yes n/a

in the table Restore/Default page Level 2: No Level 2: No

Provide the IP address for LNL-1300e devices