alcatraz AI User manual

Ver. 1.01
Alcatraz AI Admin Portal Guide

2Ver. 1.01
6.1.1.8—Changing Badges . . . . . . . . . . . . . . . . . . . . . . . . . . . 35
6.1.2—LED Control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36
6.1.3—ONVIF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38
6.1.3.1—Adding a Rock to the VMS (ONVIF) . . . . . . . . . . . . . . . . .40
6.1.4—HOLD Signal Detection . . . . . . . . . . . . . . . . . . . . . . 40
6.1.5—Configure ACS Alerts. . . . . . . . . . . . . . . . . . . . . . . .42
6.1.6—Configure OSDP . . . . . . . . . . . . . . . . . . . . . . . . . . 45
6.1.6.1—Select Rock to Configure OSDP . . . . . . . . . . . . . . . . . . .46
6.1.6.2—Rock Communication with Badge Reader . . . . . . . . . . . . .48
6.1.6.3—Rock Communication with ACS . . . . . . . . . . . . . . . . . . .49
6.1.6.4—Changing from Secure to Unsecure Channel . . . . . . . . . . .50
6.1.6.5—Troubleshooting Tips . . . . . . . . . . . . . . . . . . . . . . . . . 51
6.1.6.6—Wiring Details. . . . . . . . . . . . . . . . . . . . . . . . . . . . . .51
6.2—Access Groups . . . . . . . . . . . . . . . . . . 52
6.2.1—Create an Access Group . . . . . . . . . . . . . . . . . . . . . . 52
6.2.2—Delete an Access Group . . . . . . . . . . . . . . . . . . . . . . 53
6.2.3—Embedded Access Groups. . . . . . . . . . . . . . . . . . . . .54
6.2.4—Change Default Access Group . . . . . . . . . . . . . . . . . . 55
6.2.5—Add Additional Access Groups . . . . . . . . . . . . . . . . . . 56
6.3—Security Events . . . . . . . . . . . . . . . . . . 57
6.3.1—Viewing Security Events . . . . . . . . . . . . . . . . . . . . . . 57
6.3.2—Security Events Summary Table. . . . . . . . . . . . . . . . . .58
6.4—Generate QR Code . . . . . . . . . . . . . . . . . 60
6.4.1—Server Location . . . . . . . . . . . . . . . . . . . . . . . . . . .62
6.4.2—Generate and Download QR Code . . . . . . . . . . . . . . . . 63
6.4.3—Present QR Code to the Rock’s Camera . . . . . . . . . . . . .64
6.4.4—When can the Rock read a QR code? . . . . . . . . . . . . . . 64
6.5—Profiles . . . . . . . . . . . . . . . . . . . . . 65
6.5.1—Viewing Profiles . . . . . . . . . . . . . . . . . . . . . . . . . . . 66
6.5.2—Delete a Profile – Option 1 (delete through Profiles) . . . . . . 68
6.5.3—Delete a Profile – Option 2 (delete through Security Event). .69
6.5.4—Managing Access . . . . . . . . . . . . . . . . . . . . . . . . . .70
Overview 4
1 — QuickStart 5
2 — Dashboard 6
3 — Accounts 8
3.1—Create an Account . . . . . . . . . . . . . . . . . 9
3.2—Edit an Account . . . . . . . . . . . . . . . . . . 10
3.3—View an Account . . . . . . . . . . . . . . . . . . 11
3.4—Delete an Account . . . . . . . . . . . . . . . . . 12
3.5—Configure Card Format. . . . . . . . . . . . . . . . 12
3.5.1—Configure a Pre-defined Card Format . . . . . . . . . . . . . . 13
3.5.2—Configure a Custom Card Type . . . . . . . . . . . . . . . . . . 15
3.5.3—Example of Card Format with No Parity Bits. . . . . . . . . . .17
3.5.4—Example of Card Format Using Parity Bits. . . . . . . . . . . .18
4 — Permissions 19
4.1—Create a User . . . . . . . . . . . . . . . . . . . 21
4.2—Delete a User . . . . . . . . . . . . . . . . . . . 22
5 — Onboard a Rock 23
5.1—Assigning the Rock an Access Group . . . . . . . . . . . 24
5.5—Find the Rock to Onboard by Search . . . . . . . . . . . 24
5.6—Authenticate the Device . . . . . . . . . . . . . . . 24
5.4—Name the Device . . . . . . . . . . . . . . . . . . 25
6 — Device Management 27
6.1—Devices . . . . . . . . . . . . . . . . . . . . . 28
6.1.1—Configure Rock Mode of Operation. . . . . . . . . . . . . . . .29
6.1.1.1—Mode Setting – Demo . . . . . . . . . . . . . . . . . . . . . . . . 31
6.1.1.2—Mode Setting – 1FA . . . . . . . . . . . . . . . . . . . . . . . . . . 31
6.1.1.3—Mode Setting – 1FAF . . . . . . . . . . . . . . . . . . . . . . . . . 32
6.1.1.4—Mode Setting – 2FA-M . . . . . . . . . . . . . . . . . . . . . . . . 32
6.1.1.6—Mode Setting – 2FA . . . . . . . . . . . . . . . . . . . . . . . . . . 33
6.1.1.5—Operating in 3FA . . . . . . . . . . . . . . . . . . . . . . . . . . . 33
6.1.1.7—Mode Setting – Enrollment . . . . . . . . . . . . . . . . . . . . . . 34
Contents

3Ver. 1.01
Glossary
1FA Single Factor Authentication allows a user to access an area with either a badge
credential or facial authentication.
1FAF Single Factor Authentication Face-Only allows a user to access an area with facial
authentication only.
2FA Two Factor Authentication requires a user to swipe a badge with facial authentication to
access an area.
ACS (Access
Control System) A system that controls who has access to a space, determines who can enter or exit.
Card Format Digital representation of the badge ID programmed onto a physical badge.
Crossing A person enters a space when the user exits.
Enrollment
The process to bind a badge with a user to create a profile that is unique to the user for
authentication purposes. The Rock can perform auto-enrollment where it will learn over
time and associate a badge with a user. The Rock can perform manual enrollment where
the user profile is created in one shot.
Mask
Enforcement
Mask enforcement can be set in the Rock to ensure that a user must always wear a
mask when entering a space.
Un-Authorized
Entry A user cannot be identified when entering a space.
Onboarding Steps to associated the Rock with the Alcatraz AI Admin Portal once physical
installation is complete and confirmed to be wired correctly.
ONVIF (Open
Network Video
Interface Forum)
Forum to standardize IP-based video security products.
ONVIF Profile S Supports basic streaming and configurations.
ONVIF Profile T Expands on Profile S to widen features covered such as imaging configurations,
compression formats, HTTPS for secure video streaming.
Tailgating A user is followed by another person when entering a space.
6.5.5—Troubleshooting Tips . . . . . . . . . . . . . . . . . . . . . . . .72
7 — New Rock Firmware 73
7.1—Check Lastest Firmware Version. . . . . . . . . . . . . 74
7.2—Update the Rock Firmware . . . . . . . . . . . . . . 75
7.3—Verify Update is Successful . . . . . . . . . . . . . . 77
8 — Advanced Options 79
8.1—Enabling or Disabling QR Code Receptive Icon . . . . . . . 80
8.2—Setting the Rock for Corridor Mode . . . . . . . . . . . 82
Contents

4Ver. 1.01
Overview
The Alcatraz AI Admin Portal provides administrative functions for Alcatraz Rocks. Once the Rock has been installed on the wall, the portal is required to
commission the Rocks. After the Rocks are commissioned, the portal is used to configure, monitor and administer Rocks.
Log in to the Alcatraz AI Admin Portal to:
— Monitor the status of Rocks
— Configure Rock mode of operation
— Change configuration parameters
— Update firmware
— View security events
— Manage user profiles
To request access to the Alcatraz AI Admin Portal, contact your Company Account Administrator. Permissions to make changes or delete in the portal will
be limited to user roles assigned by your Account Admin.

2 —
Dashboard

7Ver. 1.01
The dashboard is the landing page after logging in to the Alcatraz AI Admin Portal. This page provides a summary of metrics and security events information.
Recorded Security Events
■Hover your cursor over the graph to get metrics for the security events over time or filter on a timeframe by selecting from the drop-down menu
■Click on the security event names to filter out the events you do not wish to view on the graph.
Recent Security Events
■View Recent Security Events as they occur on the right-hand side
■Click on the event to view additional info including the image
Security Events by Type
■Hover your cursor over the donut to get metrics for the security events by the different types
■Click on the color-coded circles or security event name to gray and filter out the security events from the donut
Please note that the information displayed on the dashboard varies with access permissions associated with user roles.

3 —
Accounts
Accounts are created for each customer to manage Rocks. Only Dealer Admins can create, delete or edit Accounts. Each account should be assigned an
Account Administrator to be responsible for managing the Account. This would include creating other admins or portal users as well as configuring card
formats.
3.1—Create an Account 9
3.2—Edit an Account 10
3.3—View an Account 11
3.4—Delete an Account 12
3.5—Configure Card Format 12
3.5.1—Configure a Pre-defined Card Format 13
3.5.2—Configure a Custom Card Type 15
3.5.3—Example of Card Format with No Parity Bits 17
3.5.4—Example of Card Format Using Parity Bits 18

1
2
3
9Ver. 1.01
3.1—Create an Account
1. Go to Accounts and click on Create an Account.
2. Complete the information in the Add Account pane.
■Reference Number (optional) – gives flexibility to add a number to associate with, for example, a billing account.
3. Click Submit.

1
2
3
10Ver. 1.01
3.2—Edit an Account
1. Identify the Account from the list or search for the Account in the search bar.
2. Navigate to the far right, click on the three dots and select Edit to open up the Edit Account pane.
3. Update Account information and click Submit.

2
1
3
11Ver. 1.01
3.3—View an Account
1. Identify the Account from the list or search for the Account in the search bar.
2. Click on the Account name or navigate to the far right, click on the three dots and select View.
3. The Account information page will be displayed.

2
1
3
12Ver. 1.01
3.4—Delete an Account
1. Identify the Account from the list or search for the Account in the search bar.
2. Navigate to the far right, click on the three dots and select Delete.
3. Confirm the deletion.
Note that only Dealer Admins can delete an account
3.5—Configure Card Format
The Rock operates with any type of badge reader and badge.
When a company distributes badges to its employees, these badges will have a specific card “format”. Card formats define how data is encoded in the card. Many cards have a
facility code and a card number but it is possible that the format only contains a card number. Cards will vary in sizes such as 26, 33, 37, 48 bits although the bits do not indicate the
format. The facility code and card number can be displayed if the size and location of the bits within the bit length are known.
Companies may also have more than one card format. The Alcatraz AI Admin Portal is able to display the correct badge number and facility code as long the card formats are
configured for the account. The portal supports configuring multiple card formats.
Card formats are configured once for the Account. The information used for configuring can be obtained from your Access Control System (ACS) administrator.

3 2
1
13Ver. 1.01
For convenience, some of the popular card formats have been pre-defined and can be selected for use.
1. Click on the Account name or navigate to the far right, click on the three dots and select View.
2. Select Create a Card Format
3. Define a custom card format pop-up window appears
3.5.1—Configure a Pre-defined Card Format

5
4
14Ver. 1.01
4. Select Pre-defined for Card Type and select a format from the Pre-defined Format list
5. Click Save and the selected card format will be displayed in the list

3 2
1
15Ver. 1.01
2. Select Create a Card Format
3. Define a custom card format pop-up window appears
3.5.2—Configure a Custom Card Type
To configure a custom card format, before proceeding, retrieve the information from your Access Control System (ACS) Administrator.
Information that may be part of your card format and needed as part of the configuration include:
■The start position and the number of bits for card number
■The start position and number of bits for the facility code
■Parity bits info
1. Go to Accounts and click on View Account

5
6
4
16Ver. 1.01
4. Select Custom for Card Type. Give the card format a name and indicate number of bits.
Please note that only one card format is allowed for a given bit length.
5. Follow the information retrieved from the ACS Administrator and toggle bits as required
6. Click Save when finished

17Ver. 1.01
3.5.3—Example of Card Format with No Parity Bits

18Ver. 1.01
3.5.4—Example of Card Format Using Parity Bits

4 —
Permissions
4.1—Create a User 21
4.2—Delete a User 22
The Permissions section of the Alcatraz AI Admin Portal provides capability to create new system users to log into the Alcatraz AI Admin Portal.
When a new system user is created, they must be assigned a role. This role will be associated with permissions to create, edit, view, or delete in the portal.

20Ver. 1.01
Users are associated with an Account so the Account must be previously created in order to assign the user a role for an Account. This is important to
note for Dealer Admins who must manage multiple Accounts.
Note: Only Dealer Admins and Installer roles are able to Delete Rocks from Accounts.
Table of contents
Other alcatraz IP Access Controllers manuals