Dormakaba BEST Wi-Q ONGUARD User manual
Wireless Intelligence That Stands Alone
Wireless Intelligence
That Stands Alone
BEST WI-Q™ONGUARD
INTERFACE USER GUIDE
Credits/Copyright
Copyright ©2020 dormakaba USA Inc. All rights reserved.
Information in this document is subject to change without notice and does not represent
a commitment on the part of dormakaba USA Inc. The software described in this
document are furnished under a license agreement or nondisclosure agreement.
This publication is intended to be an accurate description and set of instructions
pertaining to its subject matter. However, as with any publication of this complexity,
errors or omissions are possible. Please call dormakaba USA Inc. at (800) 392-5209 if
you see any errors or have any questions. No part of this manual and/or databases may
be reproduced or transmitted in any form or by any means, electronic or mechanical,
including photocopying, recording, or information storage and retrieval systems, for any
purpose, without the express written permission of dormakaba USA Inc.
This document is distributed as is, without warranty of any kind, either express or
implied, respecting the contents of this book, including but not limited to implied
warranties for the publication’s quality, performance, merchantability, or tness for any
particular purpose. Neither dormakaba USA Inc., nor its dealers or distributors shall
be liable to the user or any other person or entity with respect to any liability, loss, or
damage caused or alleged to be caused directly or indirectly by this publication.
BEST Wi-Q , Wi-Q Technology and BEST are trademarks of dormakaba USA Inc.
Written and designed at dormakaba USA Inc.
6161 East 75th Street
Indianapolis, IN 46250
T85203_D June 2020
FCC/IC Certication
CAUTION: Please keep the Wi-Q Gateway antenna 20cm away from people to
ensure that FCC RF exposure compliance requirements are not exceeded.
THIS DEVICE COMPLIES WITH PART 15 OF THE FCC RULES.
Operation is subject to the following two conditions: (1) This device may not cause
harmful interference, and (2) this device must accept any interference received,
including interference that may cause undesired operation.
This equipment has been tested and found to comply with the limits for Class B Digital
Device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide
reasonable protection against harmful interference in a residential installation. This
equipment generates and can radiate radio frequency energy and, if not installed and
used in accordance with the instructions, may cause harmful interference to radio
communications. However, there is no guarantee that interference will not occur in a
particular installation. If this equipment does cause harmful interference to radio or
television reception, which can be determined by turning the equipment off and on, you
can try to correct the interference by taking one or more of the following measures:
Reorient or relocate the receiving antenna.
Increase the separation between the equipment and receiver.
Connect the equipment into an outlet on a circuit different from that to which the
receiver is connected.
Consult the dealer or an experienced radio/TV technician for help.
THIS DEVICE COMPLIES WITH INDUSTRY CANADA LICENCE-EXEMPT RSS
STANDARD(S). Operation is subject to the following two conditions: (1) This device
may not cause interference, and (2) this device must accept any interference, including
any interference that may cause undesired operation of the device.
This Class [B] digital apparatus meets all requirements of the Canadian Interference-
Causing Equipment Regulations.
CET APPAREIL EST CONFORME À LA NORME RSS INDUSTRIE CANADA
EXEMPT DE LICENCE. Son fonctionnement est soumis aux deux conditions
suivantes: (1) cet appareil ne doit pas provoquer d’interférences et (2) cet appareil doit
accepter toute interférence, y compris les interferences pouvant causer un mauvais
fonctionnement du dispositif. This Class [B] digital apparatus meets all requirements of
the Canadian Interference-Causing Equipment Regulations.Cet appareil numérique de
la classe [B] respecte toutes les exigences du Réglement sur le matériel brouilleur du
Canada.
Approved Antennas
Cong Description Antenna Part number
Gateway with rubber duck antennas Pulse W1030W
Gateway with ceiling mount omni-
directional antenna
PCTEL (Maxrad) MC2400PTMSMA
Gateway with interior/exterior wall
mount directional antenna
Mobile Mark (Comtelco) CMTB36247V
Gateway with exterior omnidirec-
tional mast mount antenna
Mobile Mark (Comtelco) CMTBS2400XL3
WARNING: Changes or modications not expressly approved by
dormakaba could void the user’s authority to operate the equipment.
Approved antennas are listed below and antennas not included in this list
are strictly prohibited for use with these devices.
UL Evaluation
Not evaluated by UL for use with Mercury Controller Board or Wireless Door
Controller.
Evaluated by UL for supplemental use (i.e. not in the path of the access
control decision making) between the Listed Access Control Equipment and a
supplemental monitoring station for monitoring and conguration.
Evaluated by UL with the “Wi-Q” Integrated Wireless Access Controller.
To be mounted in the protected area
DC power to be provided by GlobTek GT-41080-1817.9-5.9 plug in power supply
only.
0-49°C, 85% humidity
Electrical Ratings
Source Voltage Current
DC 12VDC 1A
PoE 44-52VDC (mode B) 84mA
Wiring methods used shall be in accordance with the National Electrical Code,
ANSF/NFPA70.
UL evaluated with standard antennas.
For UL installations using PoE, the following must be observed:
• Compliance with IEEE 802.3 (at or af) specications was not veried as part of
UL 294.
• Locations and wiring methods which shall be in accordance with the National
Electrical Code, ANSI/NFPA 70.
• This product is not intended for outside wiring as covered by Article 800 in the
National Electrical Code, NFPA 70.
• Category 5e cabling is the minimum performance category recommended.
• The minimum conductor gauge permitted to connect between the PSE or power
injector and the PD shall be 26 AWG (0.13 mm2) for patch cords, 24 AWG (0.21
mm2) for horizontal or riser cable.
• Connected through standard eight-pin RJ-45 connectors.
• Evaluated for Mode B only.
• PoE power is to be supplied by an Access Control System Unit (ALVY), Class 2
power limited, PoE injector (PSE) providing 44-52VDC and 15W for maximum
output.
Table of Contents
1 Overview
System Overview.............................................................9
Setup Checklist.............................................................. 11
2 Hardware Installation
Hardware Overview...................................................... 13
Installing System Hardware........................................ 16
Develop a Site Plan (Task 1) ........................................ 17
Position Wi-Q Gateways (Task 2)...............................20
Install Wi-Q Gateways (Task 7) ..................................25
Install Door Hardware (Task 8) ...................................29
Sign-on Controllers (Task 9)........................................32
3 Software Installation
Gather and Organize Segment Data
(Task 3) .............................................................................36
Prepare Your Computer (Task 4) .................................37
Install Wi-Q Interface Software
(Task 5).............................................................................51
4 Software Conguration and Use
Wi-Q Interface Conguration
Tool Overview.................................................................66
Congure Wi-Q Gateways (Task 6)............................67
Congure Software (Task 10)......................................70
Firmware Updates .........................................................98
5 Advanced Troubleshooting
Status Flags in the FLAGS Column...........................105
Update Flags in the PEND Column ...........................107
A Glossary
Glossary ......................................................................... 109
B Lock Installation
Lock Installation............................................................113
8
This manual is your complete guide to the integration of BEST Wi-Q wireless hardware into
your BEST Access Control System. It provides detailed steps for installing hardware and
software and conguring your system.
Note BEST Wi-Q Technology can also be integrated into a Lenel Onguard system.
The information in this guide is presented in a linear manner; however, tasks to install
hardware and software and congure the system for the rst time do not necessarily
progress in a linear manner. You will nd a Setup Checklist at the end of this section to
take you through the initial setup and conguration tasks in a logical sequence. If you
are unfamiliar with the terms used in wireless technology, you may want to refer to the
Glossary included in this manual as Appendix A.
1 Overview
9
System Overview
A BEST Access Control System with integrated Wi-Q Technology combines powerful
access control software with Wi-Q Gateways, Wireless Access Controllers, and multiple
controller formats that work together to enable all decision making at the door. The BEST®
Wi-Q system runs remotely with no need for hard wiring, providing innovative access
control in any environment. The Wi-Q Interface system is versatile, so you can create a
whole new system, retrot existing hardware, and include various video camera, alarms,
and inputs/outputs.
Basic Wi-Q Interface Components
A basic Wi-Q Interface system has four components: (1) a Server running the System
Software, (2) a host computer with the Wi-Q Interface Software installed, (3) a Wi-Q
Gateway, and (4) a Wireless Controller at the door. Figure 1 is a simple diagram showing
these four components.
Figure 1 Four Basic Components
1 Server with System Software
Existing systems and operators can continue to work with OnGuard as normal to
control Wi-Q wireless components.
Note The System Software must be installed and operational prior to the installation and
operation of the Wi-Q components.
2 Wi-Q Interface software
Wi-Q Interface software is installed either on the same computer as the OnGuard
Server or another Host computer and set up to translate data between the two
systems to allow normal access control functionality.
3 Wi-Q Gateway
The Wi-Q Gateway is a wireless device connected to the Host computer through a
secure IP address, similar to the way your computer is connected to the internet. It
transfers data signals from Wireless Controllers to and from the Host computer. The
Host
LAN/WAN
Wi-Q
Gateway
Wireless
Door
Controller
10
Wi-Q Gateway recognizes all Wireless Controllers within its antenna range. One Wi-Q
Gateway can control as many as 64 Wireless Controllers in a system.
4 Wireless Controller
The Wireless Controller is equipped with Wi-Q Technology that controls user access
at the door. The basic conguration is battery operated, with either keypad or card
reading capability and an internal antenna that communicates with the Wi-Q Gateway.
The Wireless Controller grants user requests according to how they are congured in
the System Software.
Note The terms “Controller” and “Lockset” are used synonymously throughout this guide.
The System Software uses the term “Reader” to refer to wireless locks, while the Wi-Q
Interface Software uses the term “Controller.”
Basic Operation
The system works very simply. A user enters a pass code at a Wireless Controller, either
using an access card or by entering a code on a keypad. If the controller recognizes the
credential from the congured settings downloaded from the Host via the Wi-Q Gateway
to the controller, the door opens. The controller also sends regular signals (beacons) to the
Wi-Q to let it know that it’s working properly. If a controller goes ofine, the Host receives
a message from the Wi-Q Gateway.
Additional System Congurations
Wi-Q Interface supports various system congurations. For example, some locations at
your segment may already be hard wired with legacy equipment or additional input or
output devices. You can include a Wireless Access Controller that links a hard wired strike
and controller with a Wi-Q Gateway. For more information about various applications you
can adapt for use with Wi-Q Interface, see “Hardware Overview” on page 13.
11
Software Overview
Wi-Q provides powerful tools to manage your system. The Wi-Q Interface Software
allows you to add Wi-Q Gateways, Controllers and Segment Sign on Credentials to your
system. The Conguration Software also allows you to send rmware updates to your
Wi-Q Gateways and wireless locksets as they become available. Once your BEST® Wi-Q
components are added into OnGuard, you may manage your online and wireless systems
together as one.
Setup Checklist
Wi-Q Interface is set up in ten basic tasks. Completing these tasks will ensure you get your
system up and running as quickly and efciently as possible. Some tasks are performed at
the Host computer and some at the segment site. It is appropriate to perform some tasks
concurrently. For example, you may have someone prepare your computer and install the
software concurrently with site plan development and hardware installation. However,
you must have the software installed and Wi-Q Gateways ‘online’ before you can sign on
controllers.
Note System setup does not proceed in a linear manner. The following references prompt you to
skip around within the Wi-Q Interface User Guide.
Task 1: Develop a Site Plan
See page 17.
Task 2: Position Wi-Q Gateways and Standalone Survey Mode
See page 20.
Task 3: Gather and Organize Segment Data
See page 36.
Task 4: Prepare your Computer
See page 37.
Task 5: Install Wi-Q Interface Software
See page 51.
Task 6: Congure Wi-Q Gateways
See page 67.
13
2 Hardware Installation
Hardware Overview
Wi-Q Interface integrates wireless hardware into your existing hard-wired system. Wi-Q
Interface is designed for versatility so you can retrot existing Wi-Gateways and include
various I/O devices.
Note Once Wi-Q Technology locksets are installed, you will need to sign them on in the Wi-Q
Interface Software. Therefore, it is appropriate to install Wi-Q Interface Software before or
concurrent with hardware installation. For more information, see “Sign on Controllers (Task
9)” on page 32.
Figure 2 is a block diagram showing various congurations. Wi-Q Interface supports all
Wi-Q Technology Wireless Controllers via Wi-Q Gateways (A); and existing Prox/Wiegand,
RQE, door strike, and door monitor switch congurations (B). Conguration types are briey
described in the following paragraphs. Full installation instructions are provided in the
following sections.
14
Figure 2 Example System Congurations
Wi-Q Gateway
The Standard Wi-Q Technology Wi-Q Gateway is a wireless device connected to the Host
computer through a secure IP address, similar to the way your computer is connected to the
Internet. It transfers data signals from Wireless Controllers to and from the Host computer.
The Wi-Q Gateway recognizes all Wireless Controllers within its antenna range. One Wi-Q
Gateway can control up to 64 Wireless Controllers.
Wi-Q Gateways provide bi-directional radio frequency communication between Wireless
Controllers and the associated host computer(s). All communications are via secure AES
128-Bit encrypted 2.4 HGz using spread spectrum RF Radio technology. The Wi-Q Gateway
communicates to the host computer through web services via either Ethernet 10/100 BaseT,
or an approved commercial RF carrier-enabling a wireless solution end-to-end. Transmit
range from Wi-Q Gateways will vary based on building construction. Directional antennas
are also available to further extend range.
Host
Ethernet
10/100 BASE T
WiFi Device
LAN/WAN
Secure
Socket
Up to 64 Wireless Devices
Per Wi-Q Gateway
(configured in
increments of 16)
Wireless Access
Controller
RQE
Strike
2.4 Ghz, Spread Spectrum/
AES 128 Bit Encryption
Door Monitor
Switch
Existing
Prox/Weigand
Card Reader
12/24 V DC
Power Supply
A
B
Wireless
Door
Controller
Wi-Q
Gateway
Wi-Q
Gateway
15
Wireless Controllers
Wi-Q Interface is designed to operate with Wi-Q Technology BEST 45HQ mortise and/
or BEST 9KQ Cylindrical locksets equipped with either keypad, card, or a combination
of controller input devices. Door switch monitor, request to exit, and door lock position
sensors are included in the locks. BEST Wi-Q Technology controllers support a broad range
of controller technologies:
Card or Keypad ID with PINs
Magnetic Stripe, Prox, MIFARE (card number only)
512 Timezones (per Segment)
14000 User Credentials per controller (based on licensing)
Cardholder access level denition
Dynamic memory for IDs vs Transactions
Locally stored and transmitted transactions
ADA Compliant
No AC required at door
Wireless Access Controllers
You can retrot any existing controller conguration to communicate with BEST Wi-Q
Gateways using Wi-Q Wireless Access Controllers. You can also use this device to connect
other I/O devices to the system. About the size of a standard double-gang box electrical
box, these controllers operate on standard 12V DC or an optional 12/24 V DC power supply,
sealed, lead acid battery pack. They seamlessly integrate existing door hardware into the
Wi-Q Interface system, supporting Wiegand-compatible keypad controller inputs.
Note Please check with your dormakaba representative for a list of compatible controllers.
Antenna Types and Applications
To optimize system performance, it is important to position Wi-Q Gateways to receive
maximum signal strength from the Wireless Controllers. Once all door hardware has been
installed, you will be ready to position Wi-Q Gateways using the Wi-Q Technology Site
Survey Tool. Wi-Q Technology supports two antenna types: Omni-directional, designed to
provide coverage in all directions; and Directional antennas that focus the signal from point-
to-point over longer distances and through obstacles. For more information, see “Position
Wi-Q Gateways (Task 2)” on page 20.
16
Installing System Hardware
A system with integrated Wi-Q Technology can operate with BEST 45HQ Mortise locks,
BEST 9KQ Cylindrical locks, BEST EXQ Trim, Wireless Access Controllers and Wi-Q
Technology Wi-Q Gateways. Detailed installation instructions are provided in the following
sections and in the lock instructions provided with the hardware which are included as
Appendices to this manual.
What you will need
Engineering drawings or segment map
Wi-Q Technology Site Survey Kit
For keypad controllers, you will need the sign-on credential from the Wi-Q Interface
Software.
For magnetic stripe or proximity card readers, you will need the Temporary Operator
Card (supplied with the controller) and Sign on Card (supplied in the Wi-Q Interface
Software package). You will also need the appropriate magnetic stripe or proximity
USB enrollment reader to create a proximity sign-on credential.
Locksets to be installed on doors, including cores and keys supplied with specic
model.
Installation instructions for specic lockset brand and model
Wi-Q Gateways
Access to standby power for 120 VAC non-switch circuit for 12 VDC plug-in transformer
10/100/1 GigE Base-T network connection
Crossover Ethernet cable if direct connection between Wi-Q Gateway and Host will be
used.
Wireless Access Controllers, if used, and knowledge of existing hardware and
switches for any retrot installations
Installation tools
Drill Motor/hole saw with bits appropriate for the specic lock (see the template
included in your lock)
Phillips-head and at-head screw drivers
Access to the Host, a networked workstation, or wireless laptop computer.
17
Develop a Site Plan (Task 1)
Before installing Wi-Q Gateways, it is a good idea to develop a general plan for the
segment. This plan will guide you in deciding where to install the Wi-Q Gateways. You must
consider the following:
Transmit range from Wi-Q Gateway to controller varies based on building construction. Site
characteristics such as reinforced concrete walls could interfere or weaken the signal; open
spaces and low interference can increase signal strength.
Figure 3 shows a typical site conguration. The Host (A) is located in Building 1. The
Building 1 Wi-Q Gateway (B) is located near the electrical panel in the communications/
electronics room.
The Building 2 Wi-Q Gateway (C) is positioned next to the electrical panel. With 48 rooms
in this three-story dorm, front and rear access doors and access to the elevator on three
oors, this gateway provides coverage to 53 controllers. Its range extends to all three
oors of the building, and will also cover the pedestrian access, and elevator of the Parking
Garage.
The Parking Garage Wi-Q Gateway (D) is positioned to cover the pedestrian door near
the dorm and the stairway and elevator doors. Its range also extends to the entrance of
Buildings 1 and 2.
18
Figure 3 Sample site installation plan
Building 2
C
Comm./
Elect.
Stair/
Elevators
3 Story Dorm Rooms
101-148
Double Occupancy
96 Students
200 ft
102
103
104
105
106
107
108
109101
110
111
112
113
114
115
116
Parking Garage
Stair/
Elevators
Wi-Q
Gateway
D
50 ft
Building 1
Lecture 1
Admin.
6 Staff
Lecture 2
Housekeeping
10 Staff
B
A
250 ft
Host
Electrical
Panel Box
150 ft
Wi-Q
Gateway
19
Plotting the Plan
If you don’t already have a site plan indicating building dimensions, distances between
buildings, possible obstructions, parking segment, and other gated access points, contact
your facilities maintenance or project engineer. If none are available, you will need to visit
the site, take measurements and draw up a plan of your own.
Device Identication
Each device in the system will have its own unique identity. It will be important for you
to document that identity, along with capacities and locations, and to give each device
a common name such as “Parking Garage” or “Admin 1”. At a minimum, you must record
the Media Access Control number (MAC address) for each device. This 12-digit number is
assigned by the manufacturer of a network device so that it can be recognized as a unique
member of a network.
Note The MAC address is most commonly shown on the back of or inside the device, so it’s
important to record this number before you install the device.
When you move on to congure the Host computer, it is essential to have a list identifying
each Controller and Wi-Q Gateway recognized by the system. We recommend creating
a temporary label for each device that includes the MAC address, device name, location,
capacity, and type of antenna so that installers on the site will have a reference for
installing the correct device in a location.
Interference
Wi-Q Technology transfers information between devices in the form of data packets over
the 2.4 GHz ISM band. This band frequency is very heavily used in many devices such as
wireless computer networks (802.11 Wi-Fi) and cordless phones, which increases the risk
of lost packets, that is, packets that do not make it from a controller to a Wi-Q Gateway
because of interference. Interference can also reduce controller battery life due to the
constant re-broadcasting of packets and lost connections to the Wi-Q Gateways. To
achieve maximum efciency in Wi-Q Interface, this frequency range must be managed
effectively. Therefore, the installer must know the positions and channels of all the 2.4 GHz
wireless devices in the segment and ensure channels are assigned to each device so that
there is minimum frequency overlap with adjacent or nearby devices.
Extended Range
It is likely that you will have locations in your segment separated by distances greater than
300 feet. You may want to consider adding a Wi-Q Gateway with a directional antenna to
extend the transmit range.
20
Note The recommended range is to have controllers no more than 100 feet from a Wi-Q Gateway.
Note Actual distances will vary based on building construction.
Position Wi-Q Gateways (Task 2)
Once all door hardware and controllers have been installed, you are ready to determine the nal
placement of Wi-Q Gateways using the results from the Wi-Q Technology Site Survey Kit. The
Site Survey Kit helps you determine the number and optimum location of Wi-Q Gateways and
verify signal strength before permanently installing the hardware. It is important to perform the
Site Survey process as many times as needed to determine the optimal position.
The Wi-Q Gateway has a built in Survey Mode. This feature is especially handy when performing
a Site Survey for Wi-Q Gateway and controller approximations for future installations as well as
troubleshooting existing installations. The Survey Mode offers a live trace of signal strength and
packet ratio transfer ratio.
Using the Wi-Q Gateway for a Stand-alone Site Survey
The Wi-Q Gateway can be used standalone without an ACS to perform a Site Survey to
determine the Gateway antenna placement in approximation to the Wi-Q Controllers and the
number of Gateway’s needed for adequate coverage as well as troubleshooting signal and packet
transfer ratio issues.
Using a Wireless Smart Device:
1 Power on the WQXM-PG (wait for the boot process to complete).
2 Press the WiFi toggle push button of Gateway and release.
Note Gateway Wi-Fi access point will be disabled by default after a reboot. Once the
Wi-Fi push button is pressed, the access point will remain active until the button is
pressed again or 30 minutes have elapsed after the last Wi-Fi client disconnects.
3 Connect smart device to the Gateway WiFi access point (SSID if Gateway will be like
WiQ-123456, where 123456 are the last 6 digits of the Gateway MAC address).
4 Using a smart device’s browser, navigate to WQXM-PG wireless network IP address:
192.168.3.200.
5 Log in to the Gateway’s webpage using the previously updated Username and Password.
Table of contents
Other Dormakaba Control System manuals
