AJAX Tag User manual

Tag and Pass User Manual
Updated May 21, 2021
Tag and Pass are encrypted contactless access devices for managing the security modes
of the Ajax security system. They have the same functions and differ only in their body: Tag
is a key fob, and Pass is a card.
Pass and Tag only work with .
Appearance
KeyPad Plus
Buy Tag
Buy Pass

1. Pass
2. Tag
Operating principle
Tag and Pass allow you to manage an object’s security without an account, access to the
Ajax app, or knowing the password — all it takes is activating a compatible keypad and
putting the key fob or card to it. The security system or a specic group will be armed or
disarmed.
To quickly and securely identify users, KeyPad Plus uses the DESFire® technology.
DESFire® is based on the ISO 14443 international standard and combines 128-bit
encryption and copy protection.
Tag and Pass usage is recorded in the events feed. The system administrator can at any
time revoke or restrict the access rights of the contactless identication device through the
Ajax app.
Tag and Pass can work with or without user binding, which affects the notication texts in
Ajax app and SMS.
With user binding
The username is displayed in the notications and events feed
Types of accounts and their rights

Without user binding
The device name is displayed in the notications and events feed
Tag and Pass can work with several hubs at the same time. The maximum number of hubs
in the device memory is 13. Keep in mind that you need to bind a Tag or Pass to each of the
hubs separately through the Ajax app.
The maximum number of Tag and Pass devices connected to a hub depends on the hub
model. At the same time, the Tag or Pass does not affect the total limit of devices on the
hub.
Hub model Number of Tag and Pass devices
Hub Plus 99
Hub 2 50

Hub 2 Plus 200
One user can bind any number of Tag and Pass devices within the limit of contactless
identication devices on the hub. Keep in mind that devices remain connected to the hub
even after all keypads have been removed.
Sending events to the monitoring station
The Ajax security system can connect to the monitoring station and transmit events to the
CMS via Sur-Gard (Contact-ID), SIA DC-09, and other proprietary protocols. A complete list
of supported protocols is .
When a Tag or Pass is bound to a user, arm and disarm events will be sent to the
monitoring station with the user ID. If the device is not bound with the user, the hub will
send the event with the device identier. You can nd the device ID in the menu.
Adding to the system
The devices are incompatible with the hub type of , third-party security central panels, and
and integration modules. Pass and Tag only work with KeyPad Plus
keyboards.
Before adding a device
Only a user or PRO with administrator rights can connect a device to the hub.
available here
Status
Hub
ocBridge Plus uartBridge
1. Install the . Create an . Add a hub to the app and create at least one
room.
Ajax app account
2. Make sure that the hub is on and has access to the internet (via Ethernet cable, Wi-Fi,
and/or mobile network). You can do this in the Ajax app or by looking at the hub logo
on the front panel — the hub lights white or green when connected to the network.
3. Make sure the hub is not armed nor updates by looking at its status in the Ajax app.
4. Make sure a compatible keypad with DESFire® support is already connected to the
hub.
5. If you want to bind a Tag or Pass to a user, make sure that the user’s account has
already been added to the hub.

How to add a Tag or Pass to the system
If the connection fails, try again in 5 seconds. Please note that if the maximum number of
Tag or Pass devices has already been added to the hub, you will receive a corresponding
notication in the Ajax app when adding a new device.
Tag and Pass can work with several hubs at the same time. The maximum number of hubs
is 13. Keep in mind that you need to bind devices to each of the hubs separately through
the Ajax app.
1. Open the Ajax app. If your account has access to multiple hubs, select the one to which
you want to add a Tag or Pass.
2. Go to the Devices tab.
Make sure the Pass/Tag Reading feature is enabled in at least one keypad settings.
3. Click Add Device.
4. From the drop-down menu, select Add Pass/Tag.
5. Specify the type (Tag or Pass), colour, device name, and name (if necessary).
6. Click Next. After that, the hub will switch to the device registration mode.
7. Go to any compatible keypad with Pass/Tag Reading enabled, activate it — the device
will beep (if enabled in the settings), and the backlight will light up. Then press the
disarming key . The keypad will switch to the access device logging mode.
8. Put Tag or Pass to the keypad reader. It is marked with wave icons on the body. Upon
successful addition, you will receive a notication in the Ajax app.

If you try to bind a Tag or Pass to a hub that has already reached the hub limit (13 hubs are
bound to them), you will receive a corresponding notication. To bind such a Tag or Pass to
a new hub, you will need to reset it (all data from tag/pass will be erased).
States
The states include information about the device and its operating parameters. Tag or Pass
states can be found in the Ajax app:
Parameter Value
User
The name of the user to which Tag or Pass is bound.
If the device is not bound to a user, the eld displays
the text Guest
Active
Displays the status of the device:
Identier Device identier. Transmitted in events that are sent to
the CMS
Setting up
Tag and Pass are congured in the Ajax app:
Please note that after changing the settings, you must press the Back button to save them.
How to reset a Tag or Pass
1. Go to the Devices tab.
2. Select Passes/Tags.
3. Select the required Tag or Pass from the list.
Yes
No
1. Go to the Devices tab.
2. Select Passes/Tags.
3. Select the required Tag or Pass from the list.
4. Go to Settings by clicking on the icon.

Parameter Value
Select device type Tag or Pass
Colour Choice of Tag or Pass colour: black or white
Device name
Displayed in the list of all hub devices, SMS texts, and
notications in the events feed.
The name can contain up to 12 Cyrillic characters or up
to 24 Latin characters.
To edit, click on the pencil icon
User
Select the user to which Tag or Pass is bound.
When a device is bound to a user, it has the same
security management rights as the user
Security management
Selection of security modes and groups that can be
managed by this Tag or Pass.
The eld is displayed and active if Tag or Pass is not
associated with the user
Active Allows you to temporarily disable Tag or Pass without
removing the device from the system
User Guide Opens the Tag and Pass User Manual in the Ajax app
Unpair device Removes Tag or Pass and its settings from the system.
There are two options for removing: when Tag or Pass
is placed nearby, or access to it is absent.
If Tag or Pass is nearby:
If Tag or Pass is not available:
Learn more
1. Start the device removal process.
2. Go to any compatible keypad and activate it.
3. Press the disarming key . The keypad will
change to access devices removal mode.
4. Bring the Tag or Pass to the keypad reader. It is
marked with wave icons on the body. Upon
successful removal, you will receive a notication
in the Ajax app.
1. Start the device removal process.

In both cases you don’t delete the hub from Tag/Pass
memory. To clear the device memory you should reset
it (all data from Tag/Pass will be erased)
Binding a Tag or Pass to a user
When a Tag or Pass is linked to a user, it fully inherits the rights to manage the user’s
security modes. For example, if a user was able to manage only one group, then the bound
Tag or Pass will have the right to manage only this group.
One user can bind any number of Tag or Pass devices within the limit of contactless identication
devices connected to the hub.
User rights and permissions are stored in the hub. After being bound to a user, Tag and
Pass represent the user in the system if devices are bound to the user. Therefore, when
changing user rights, you do not need to make changes to the Tag or Pass settings — they
are applied automatically.
To bind a Tag or Pass to a user, in the Ajax app:
2. Select the Delete without pass/tag option and
follow the app’s instructions.
1. Select the required hub if there are several hubs in your account.
2. Go to the Devices menu.
3. Select Passes/Tags.

When the user—to whom Tag or Pass is assigned—is deleted from the hub, the access device can not
be used to manage security modes until not assigned to another user.
Temporarily deactivating a Tag or Pass
The Tag key fob or the Pass card can be temporarily disabled without removing them from
the system. A deactivated card cannot be used to manage security modes.
If you try to change the security mode with a temporarily deactivated card or key fob more
than 3 times, the keypad will be locked for the time set in the settings (if the setting is
enabled), and corresponding notications will be sent to the system users and to the
security company monitoring station.
To temporarily deactivate a Tag or Pass, in the Ajax app:
To reactivate Tag or Pass, turn on the Active option.
Resetting a Tag or Pass
Up to 13 hubs can be bound to one Tag or Pass. As soon as this limit is reached, binding
new hubs will only be possible after completely resetting Tag or Pass.
Note that resetting will delete all settings and bindings of key fobs and cards. In this case,
the reset Tag and Pass are only removed from the hub from which the reset was made. On
4. Select the required Tag or Pass.
5. Click on the to go to settings.
6. Select a user in the appropriate eld.
7. Click Back to save the settings.
1. Select the required hub if there are several hubs in your account.
2. Go to the Devices menu.
3. Select Passes/Tags.
4. Select the required Tag or Pass.
5. Click on the to go to settings.
6. Disable the Active option.
7. Click Back to save the settings.

other hubs, Tag or Pass are still displayed in the app, but they cannot be used to manage
the security modes. These devices should be removed manually.
When protection against unauthorized access is enabled, 3 attempts to change the security mode with
a card or key fob that has been reset in a row block the keypad. Users and a security company are
instantly notied. The time of blocking is set in the device settings.
To reset a Tag or Pass, in the Ajax app:
Use
The devices do not require additional installation or fastening. The Tag key fob is easy to
carry with you thanks to a special hole on the body. You can hang the device on your wrist
or around your neck, or attach it to the key ring. The Pass card has no holes in the body, but
you can store it in your wallet or phone case.
If you store a Tag or Pass in your wallet, do not place other cards next to it, such as credit
or travel cards. This may interfere with the correct operation of the device when attempting
to disarm or arm the system.
To change the security mode:
1. Select the required hub if there are several hubs in your account.
2. Go to the Devices menu.
3. Select a compatible keypad from the device list.
4. Click on to go to settings.
5. Select the Pass/Tag Reset menu.
6. Go to the keypad with pass/tag reading enabled and activate it. Then press the
disarming key . The keypad will change to the access device formatting mode.
7. Put the Tag or Pass to the keypad reader. It is marked with wave icons on the body.
Upon successful formatting, you will receive a notication in the Ajax app.
1. Activate KeyPad Plus by swiping over it with your hand. The keypad will beep (if
enabled in the settings), and the backlight will light up.
2. Put the Tag or Pass to the keypad reader. It is marked with wave icons on the body.
3. Change the security mode of the object or zone. Note that if the Easy armed mode
change option is enabled in the keypad settings, you do not need to press the security

Using Tag or Pass with Two-Stage Arming enabled
Tag and Pass can participate in two-stage arming, but cannot be used as second-stage
devices. The two-stage arming process using Tag or Pass is similar to arming with a
personal or general keypad password.
Maintenance
Tag and Pass are battery-free and maintenance-free.
Tech specs
Technology used DESFire®
Operating standard ISO 14443-А (13.56 MHz)
Encryption +
Authentication +
Protection from signal interception +
Possibility to assign the user +
Maximum number of bound hubs Up to 13
mode change button. The security mode will change to the opposite after holding or
tapping Tag or Pass.
Learn more
What is two-stage arming and how to use it

Compatibility KeyPad Plus
Operating temperature range From -10°C to +40°C
Operating humidity Up to 75%
Overall dimensions Tag: 45 × 32 × 6 mm
Pass: 86 × 54 × 0,8 mm
Weight Tag: 7 g
Pass: 6 g
Complete Set
Warranty
Warranty for the AJAX SYSTEMS MANUFACTURING Limited Liability Company products is
valid for 2 years after the purchase.
If the device does not function correctly, please contact the Support Service rst. In half of
the cases, technical issues can be solved remotely!
Technical support:
1. Tag or Pass — 3/10/100 pcs (depending on the kit).
2. Quick Start Guide.
Warranty obligations
User Agreement
suppor[email protected]