Galaxy Control Systems BIOSCRYPT L-1 Quick guide

SG 10|APR 2011
[4G V-Flex/V-PROX]
WIN XP
SystemGalaxyQuickGuide
CONFIGURATION AND OPERATION
Bioscrypt 4G V-Flex(PROX)










SystemGalaxyQuickGuideforBioscrypt/L‐1SetupandEnrollmentSystemGalaxyQuickGuide
Page2of40

SystemGalaxy
QuickGuide
BIOSCRYPT / L-1
Configuration &
Operation
V‐Flex4G,V‐PROX,Vers4.1.10
Information in this document is subject to change without notice.
Therefore, no claims are made as to the accuracy or completeness of this document.
Galaxy Control Systems makes no claims on the requirements or limitations of
software or devices of 3rd Party Manufacturers. Every effort is made to include all
known requirements and capabilities as they relate to System Galaxy. Information
herein may not supersede requirements of 3rd party manufacturers.
1
st
Edition Apr 2011
Revised July 2011
Copyright © 2011 Galaxy Control Systems All rights reserved
Galaxy Control Systems
3 North Main Street
Walkersville MD 21793
www.galaxysys.com
No part of this document may be reproduced, copied, adapted, or transmitted, in
any form or by any means, electronic or mechanical, for any purpose, without the
express written consent of Galaxy Control Systems. Copyright protection claims
include all forms and matters of copyrighted material and information, including but
not limited to, material generated from the software programs, which are displayed
on the screen such as icons, look and feel, etc.
Trademarks
Microsoft®, Windows®, Windows NT®, MSDN®and SQL ServerTM are registered
trademarks of Microsoft Corporation in the U.S. and other countries. DbaMgr2k may
or may not be a registered trademark in the U.S. and other countries.
Bioscrypt is a trademark of Bioscrypt Inc.
Adobe®, Acrobat®are registered trademarks of Adobe Systems Inc.
Graphics and illustrations by Technical Writer.


SystemGalaxyQuickGuideforBioscrypt/L‐1SetupandEnrollmentSystemGalaxyQuickGuide
Page3of40
TableofContents
1. INTRODUCTION TO THE BIOSCRYPT INTERFACE.................................................4
INFORMATION COVERED IN THIS MANUAL.......................................................................................4
TYPES OF BIOMETRIC CREDENTIALS SUPPORTED...........................................................................4
OVERVIEW OF GALAXY ENROLLMENT PROCESS ........................................................5
SYSTEM INTEGRATION VIA SHARED or LINKED SQL SERVERS...........................................................5
HOW BIOMETRIC CREDENTIALS ARE MADE.....................................................................................5
HOW BIOMETRIC CREDENTIALS ARE STORED .................................................................................5
INTEGRATION REQUIREMENTS (order dependent) ...................................................6
2. SYSTEM INSTALLATION............................................................................................7
INSTALL READER HARDWARE........................................................................................................7
READER WIRING CHART................................................................................................................7
INSTALL SYSTEM GALAXY v10.0 (or higher).......................................................................................8
INSTALL SECURE ADMIN DATABASE SERVER ..................................................................................8
INSTALL SECURE ADMIN CLIENT ..................................................................................................13
3. REGISTER & CONFIGURE V-Flex (Prox) Device in Secure Admin ......................15
REGISTER L-1 READER IN SECURE ADMIN (SADB)..........................................................................15
TCP/IP vs. USB............................................................................................................................15
IF using TCP/IP to detect and register, follow the step 6 below:................................................................17
IF using USB to connect and register, follow the step 7 below:.................................................................18
To continue registering, follow the steps below:....................................................................................19
CONFIGURE L-1 DEVICE SETTINGS for V-FLEX (PROX) ....................................................................21
Configuring Device Mode: ...............................................................................................................22
Configuring Wiegand Format:...........................................................................................................23
CREATING CUSTOM 32-BIT WIEGAND FORMAT...............................................................................25
VIEW TEMPLATES IN L-1 READER .................................................................................................26
4. SYSTEM GALAXY CONFIGURATION......................................................................27
REGISTER the L-1 READER IN SYSTEM GALAXY (SysGal database) ....................................................27
ENABLE BIOSCRYPT AS THE ENROLLMENT SYSTEM AT SG WORKSTATION......................................28
CONFIGURE THE READER PROPERTIES FOR AN L-1 READER IN SG.................................................29
5. ENROLLING & MANAGING TEMPLATES................................................................30
ENROLL FINGERPRINT [IDENTIFY MODE] IN CARDHOLDER SCREEN.................................................30
ENROLL CARD AND FINGERPRINT [VERIFY MODE] IN SG CARDHOLDER ...........................................32
SeetheAppendix(section6ofthisguide)formoreindicationsandmessagesassociatedwith
connecting,capturing,savingandloadingtemplates.LOADING ALL TEMPLATES UTILITY...................33
LOADING ALL TEMPLATES UTILITY................................................................................................34
6. APPENDIX: TROUBLESHOOTING...........................................................................35
GALAXY MESSAGE LOGGING (Communication Control Window)...........................................................35
GALAXY USER MESSAGES - BY OPERATOR ACTION.......................................................................36
REGISTER READER with USB (private LAN/ not using DHCP)...............................................................39
ADDING A LINKED SQL CONNECTION STRING TO SYSGAL...............................................................40

SystemGalaxyQuickGuideforBioscrypt/L‐1SetupandEnrollmentSystemGalaxyQuickGuide

1. INTRODUCTION TO THE BIOSCRYPT INTERFACE
Forconvenience,thismanualincludesbasicsetupinSecureAdminforthe4GV‐FLEXPROXReadersoftware
thatisrequiredtointegratewithSystemGalaxy.ConsulttheBioscryptManualsforinstructionsonany
SECUREADMINfeaturesnotcoveredinthisdocument.

INFORMATION COVERED IN THIS MANUAL

Thismanualcoversthefollowing…
Hardwarewiringfromthe4GV‐FLEXPROXreadertotheGalaxyaccesscontrolpanel
BasicinstallstepsforSecureAdminServer/Client(asexample–seeManufacturer’sGuideforin‐depth)
ConfigurationofsharedSQLServersettings
Registeringthe4GV‐FLEXPROXreaderwithintheSecureAdmin
Configuring4GV‐FLEXPROXdevice’sReaderModeandWiegandSettingsinSecureAdmin
RegisteringandsettingSystemGalaxyforBiometricSupportusingL‐1Solutions
ConfiguringGalaxyreaderporttoworkwiththe4GV‐FLEXPROXreader
EnrollingcredentialsfromwithinSystemGalaxy
MassloadingtemplatestoareaderfromSystemGalaxy

TYPES OF BIOMETRIC CREDENTIALS SUPPORTED
SystemGalaxy10(SG10)integrateswiththeBioscryptL‐1V‐Flex4G,V‐PROXreaderasfollows:
CURRENTLYSUPPORTEDONWINDOWSXPONLY

READERMODECREDENTIALSSECUREADMIN
CARDFORMAT
SYSTEMGALAXY
CARDFORMAT
IDENTIFY(1:N)finger‐only10KTemplatesCustom32‐bitWiegand(a)GalaxyStandard
26‐bit‐pass‐thru 26‐bitWiegand
VERIFY(1:1)Proxcard+fingerindevice
500KTemplatesHIDCorporate1000HIDCorporate1000
CardOnly(b)ProxcardpassthroughSameasVERIFYmode
(a)Custom32‐bitWiegandmustbemanuallycreatedinSecureAdmin(i.e.isnotpredefined);Note:thecodeisrequired
foridentificationinaccesscontrolpanel‐aphysicalcardisnotissued.
(b)CardOnlymode,meansthereaderusesVERIFYmode,butdisablesbiometricverificationforallusers.Youmust
enrollbothcardandfingerprintsforallusers.Biometricverificationisdisabledaftertemplatesareloadedtothereader.
Allcredentialsaresenttotheaccesscontrolpanelwithoutfingerverification.

Page4of40

SystemGalaxyQuickGuideforBioscrypt/L‐1SetupandEnrollmentSystemGalaxyQuickGuide
OVERVIEW OF GALAXY ENROLLMENT PROCESS
FingerprintsmustbeenrolledfromSystemGalaxy.SGdoesnotpulltemplatesfromSADB.Card
andTemplatedataarestoredintheSysGaldatabase(i.e.notintheSADB).
SYSTEM INTEGRATION VIA SHARED or LINKED SQL SERVERS
SystemGalaxyusesLinkedorSharedSQLservertoSecureAdmin(SADB)connectiontopulltheListofL‐1
DevicesandIPAddressesforenrollingandmappingreaderstodoors.SystemGalaxywarnstheoperatorat
timeoflog‐inthatbiometricfeaturesaredisabledifSQLDatabaseconnectioncannotbeestablished.

HOW BIOMETRIC CREDENTIALS ARE MADE
TheSystemGalaxycapturesthefingerprint/sandcardcodeandassignsaccessprivileges.Thecredentialis
automaticallyloadedtothereaderwhencardholderrecordissaved.

HOW BIOMETRIC CREDENTIALS ARE STORED
ThefingerprinttemplatesarealsostoredinblobformatintheSystemGalaxydatabase.

Page5of40

SystemGalaxyQuickGuideforBioscrypt/L‐1SetupandEnrollmentSystemGalaxyQuickGuide
Page6of40

INTEGRATION REQUIREMENTS (order dependent)
1. System Galaxy & SecureAdmin Databases are both compatible with SQL Server 2005 or 2008
2. System Galaxy 10.0 server/database should be installed before the SecureAdmin Server.
3. SecureAdmin software 4.1.10 is only supported on Windows XP
4. SecureAdmin server / client 4.1.10 must be installed using the setup.exe - found in the Installers/L1 folder
on the Galaxy DVD (disk 1).
5. During the SecureAdmin server install, select DEFAULT CERTIFICATE.
6. Systems must be properly configured to support SQL Server connection:
a) For shared SQL Server Instance (default option): choose to install on existing SQL server. Supply
the SysGal database connection parameters when prompted by SecureAdmin install program.
b) For Linked Server: you can install SecureAdmin on separate servers and use a connection string to link
the databases. Insert the SQL connection path in SysGal’s SADB_PATH column of the
L1_SADB_INFO table. You must also enter a 1 in the L1_ENABLE column.
Stringexample:[server_name\instance_name].[database_name].[owner_name]
7. Each L-1 Reader must be registered via server in the SecureAdmin software before SG can connect.
a) Secure Registration is done with the USB Cable that comes with the reader.
WhentheDeviceDriverWizardopens,youmustbrowsetothe4gserialfolder(locatedon
theSecureAdminserverinProgramFiles\Bioscrypt\SA\SecureAdminServer\4gserial.
b) The reader must be configured for TCP/IP communication using valid IP settings for the same
broadcast domain as the Galaxy enrollment workstation.
8. In SecureAdmin, each reader must be configured for the correct card format (“26bit Pass-thru”, HID Corp
1000, and custom “Galaxy 32bit Wiegand” are supported).
9. You must enroll fingers from the System Galaxy cardholder screen.
10. Templates are stored in BLOB format in the Galaxy database.
11. System Galaxy 10.0 supports enrollment and interoperation using IDENTIFY (finger-only) and VERIFY
(prox+finger in reader) modes with the Base and Proxmodels of the V-flex and V-station. SG 10.0 does not
support Smart Card enrollment. SG 10.0 does not support PIN modes or memory expansion in the V-
station.
12. SG must be registered for Biometric Support (Corporate or Enterprise) in System Registration.
13. SG must have L-1 Solutions chosen as the biometric system in System Settings screen.
14. SG must have L-1 Solutions chosen for the reader technology, and the specific L-1 Reader Name must be
assigned to the door in the Reader Properties screen. Load Templates must be “checked”.
15. System Galaxy must be able to connect to the SADB when it starts up and operator signs in. If unable to
connect, the software displays a warning that the L1 Features will be disabled,
16. You can capture from 1 to 10 prints per card. Prints are captured in the Enrollment screen and held in
memory until the APPLY button is pressed in the main Cardholder screen.
17. Authorized templates are sent to each reader when the Cardholder APPLY button is pressed. Likewise,
templatesareremovedfromeachreaderwhentheAPPLYbuttonispressed.
“Authorizedtemplates”musthave(a)validloopprivileges,(b)validaccessgroup,and(c)the
SendTemplatesoption“checked”intheCardholderscreen.
NOTICE:theLoadTemplatesoptionmustbe“checked”inthereaderproperties.
18. The L1 Load Utility will ‘bulk’ load all authorized templates on a per reader basis. 

SystemGalaxyQuickGuideforBioscrypt/L‐1SetupandEnrollmentSystemGalaxyQuickGuide
Page7of40
2. SYSTEM INSTALLATION

INSTALL READER HARDWARE
AlsoseetheBioscryptdocumentationforadditionalwiringinformation.
WiretheL‐1ReadertotheDPIboardintheSystemGalaxyaccesscontrolpanel(508ior600/635)
ConnecttheL‐1Readertothenetwork/LAN


READER WIRING CHART

1. Thereadercomeswithapowersupply.Seethemanufacturer’sdocumentationforhowtocontrol
powertothereader.
2. ThereadercomeswithaUSBserialcablethatcanbeusedtoregisterthereaderintotheSADB
3. Thereaderrequirescat‐5enetworkcable/connectiontotheLAN.Thisisrequiredinordertointegrate
thereaderwithSystemGalaxyenrollment.
4. Thereaderalsocomeswithapigtailforwiringtoanaccesscontrolpanel.

ThereaderdataandLEDlineswireasshowninthechartbelow.

L‐1Pigtail(colors)600DPI(pinout)508i(pincolor)
7WiegandLEDIn(Grey/Black)LED(pin1)LED(Brown)
12WiegandDOUT‐0(Green)Data0(pin2)Data0(Green)
14WiegandDOUT‐1(White)Data1(pin5)Data1(White)
16WGND(Black/White)GND(pin4)GND(Yellow)



NOTES:
TheL‐1readercanbesettouseDHCPenabledtoacquireanIPAddress.
YoumustregisterthereaderinSecureAdminbeforeyoucanuseit.Thisisdonefromthe
SecureAdminsoftwareafterthereaderisinstalledononline.
TheL‐1ReaderisnotsetupfromfactorytouseWIEGANDOUTPUT–thisisdonethrough
SecureAdminsoftware.
YoucanenrollfingerprintsfromtheL‐1Readerfingersensor(noextrascannerneeded).The
readerthatisusedforenrollmentmustberegisteredandabletoconnecttotheclientviaUSB
orviaTCP/IP.
IMPORTANT:DonotusetheSecureAdmintoenrollusers;howeverthesefingersdonottransfer
fromtheSecureAdmindatabasetotheSystemGalaxydatabase.Whenmakingcredentialsand
capturingprints,youshoulduseSystemGalaxycardholderscreen.
Thereaderusedtocapturefingersdoesnothavetobeconnectedtoanaccesspanel,butitmust
beregistered,poweredon,andonlineviathecat‐5networkcable.
Ifyouenrollfromareaderthatisconnectedtoapanel,itwillcausethelockrelaytoactivate
(unlockdoor)eachtimeyouenrollorverifyprints.


SystemGalaxyQuickGuideforBioscrypt/L‐1SetupandEnrollmentSystemGalaxyQuickGuide


INSTALL SYSTEM GALAXY v10.0 (or higher)
SystemGalaxymustbeinstalledusingtheGalSuiteinstallerwhichislocatedonDisk‐1.TheGalSuiteinstaller
isdesignedtoauto‐runwhenDisk‐1isinsertedintothediskdrive.
InserttheGalSuiteDisk‐1andruneachpartinsequentialorder.
1. InstallPart1oftheGalSuitefromDisk‐1(requiredtoinstallPrerequisitesComponents)
2. InstallPart2oftheGalSuite(requiredtoinstallSQLServer/Components&Database)
3. InstallPart3oftheGalSuite(requiredtoinstallSystemGalaxysoftware&utilities)



INSTALL SECURE ADMIN DATABASE SERVER
ThissectioncoversthebasicinstructionstoinstalltheSecureAdminDatabaseServer.
1) OntheGalSuiteDVDintheINSTALLERS\L1FOLDER
2) RuntheSETUPexe

3) clickServerInstallation


Page8of40

SystemGalaxyQuickGuideforBioscrypt/L‐1SetupandEnrollmentSystemGalaxyQuickGuide


4) Acceptthelicenseagreementandadvancetothenextscreen
5) ChoosethedefaultinstallpathinprogramfilesfolderevenonWIN‐7


6) ConnecttoexistingSQLEngine.
a) Tousesharedserverinstance,(installingSECUREADMINonthesameserver/instanceasSysGal
database,choosetoinstallonselectedSQLServerandchoosethesameinstancethatSysGaluses.
ProvidetheAuthenticatedloginparameters.





Page9of40

SystemGalaxyQuickGuideforBioscrypt/L‐1SetupandEnrollmentSystemGalaxyQuickGuide

b) IFYOUAREUSINGLINKEDSQLSERVER:youwillneedtoedittheL1_SADB_PATHtable.
OpenMSSQLManagementStudioandLoginwiththeSAloginandpassword
ExpandtheSysGaldatabaseandopentheL1_SADB_PATHtable.
Typethenumericvalue1intotheL1_ENABLEDcolumn(0disablestheconnectionstring)
TypetheconnectionstringintotheSADB_PATHcolumnusingcorrectsyntax.
SYNTAXEXAMPLE:[server_name\instance_name].[database_name].[owner_name]
Note:ifyouareusingaSQLscripttoinsertthepath,youdonotneedquotemarksaroundthe
number1toenablethepath,butyoudoneedsinglequotesaroundthepathsinceitisatextstring.


7) ChooseDEFAULTCERTIFICATE.



8) EntertheAdministrativeloginandpassword(rememberthislogin,youwillberequiredtoenteritto
signintotheClientsoftwarewhentheinstallationsarecomplete)

Page10of40

SystemGalaxyQuickGuideforBioscrypt/L‐1SetupandEnrollmentSystemGalaxyQuickGuide

9) TheInstallWizardwillinstalltheSecureAdminServer.



Page11of40

SystemGalaxyQuickGuideforBioscrypt/L‐1SetupandEnrollmentSystemGalaxyQuickGuide

10) AfterinstallingtheSystemGalaxyandSecureAdminservers,youmustenablereadandwriteprivileges
oftheSADBintheSQLServerengine.
a) OpenManagementStudioandlogin/connecttotheSystemGalaxyinstance
b) Attheinstancebranchlevel,chooseSECURITY>LOGINS
c) Right‐clickgcs_clientloginnameandselectPROPERTIES
d) ChooseUSERMAPPINGSontheleftmenu
e) ChecktheSADBdatabaseintheupperwindow
f) thefollowingrolesmustbechecked/enabled:db_datawriter,db_datareader,db_backupoperator,
andpublic
g) clickOK
SystemGalaxypullstheIPparameters,serialnumber,groupanddevicenamesofeachL‐1Readerfromthe
SADB.Thisdataisusedformappingreaderstodoors,andconnectingtoreadersforenrollmentoffinger
templatesandcardcodes.





Page12of40

SystemGalaxyQuickGuideforBioscrypt/L‐1SetupandEnrollmentSystemGalaxyQuickGuide

INSTALL SECURE ADMIN CLIENT
ThissectioncoversthebasicinstructionstoinstalltheSecureAdminClient.

1) Installtheclientsoftwareatthesameworkstationthatwillbeaenrollmentstation


2) Acceptthelicenseagreementandadvancetothenextscreen
3) ChoosethedefaultinstallpathinprogramfilesfolderevenonWIN‐7


Page13of40

SystemGalaxyQuickGuideforBioscrypt/L‐1SetupandEnrollmentSystemGalaxyQuickGuide
4) ChoosehowtodisplayfingerprintimageandselectDEFAULTCERTIFICATEasyouadvancethroughthe
nextscreens.


5) CheckthedesktopICONasdesired


6) ExittheInstallWizardwhencompleted





Page14of40

SystemGalaxyQuickGuideforBioscrypt/L‐1SetupandEnrollmentSystemGalaxyQuickGuide
3. REGISTER & CONFIGURE V-Flex (Prox) Device in Secure Admin
BeforeyoucanenrolltemplatesfromtheSystemGalaxysoftware,youmustproperlyregisterandconfigure
thereaderintheSecureAdmindatabase(SADB).OncetheSecureAdminconfigurationiscompleted,you
cansetupthereaderinSystemGalaxy.

Thissectioncovers:
RegisteringanL‐1ReaderinSADB
ConfiguringanL‐1Prox(V‐Flex,Prox)forVERIFYmode(Card+BiometricsinDevice)
ConfiguringanL‐1Prox(V‐Flex,Prox)forIDENTIFYmode


REGISTER L-1 READER IN SECURE ADMIN (SADB)
TCP/IP vs. USB
1) ApplypowertotheL‐1readerandconnectyourreadertothePCorLANtoregister
a) TCP/IP‐ConnectthereadertothenetworkusingCat5ecable.Thereadershouldbeonthe
samebroadcastdomainastheSecureAdminServer/PC.
b) USB‐ConnectthereadertothePCusingtheUSBcablethatisprovidedwiththereader).
IftheDeviceDriverWizardopens,youmustbrowsetothe4gserialfolder,whichislocatedonthe
SecureAdminserverinProgramFiles\Bioscrypt\SA\SecureAdminServer\4gserial.

2) Start/LogintheSecureAdminsoftware

Page15of40

SystemGalaxyQuickGuideforBioscrypt/L‐1SetupandEnrollmentSystemGalaxyQuickGuide

3) TheClientsoftwarewillopenasfollowswhentheloginiscorrect:


4) Expand(open)theNETWORKmenubyclickingontheNetworkbuttonontheleftside


5) ChooseRegisterviaServer


Page16of40

SystemGalaxyQuickGuideforBioscrypt/L‐1SetupandEnrollmentSystemGalaxyQuickGuide


IF using TCP/IP to detect and register, follow the step 6 below:
6) ChooseEthernetoption
a) CheckSearchAutomaticallytodetectallreadersonthebroadcastdomain.
NOTE:itisalternatelypossibletoenteraspecificIPAddressoranIPRangetosearchfor
devices.Ifyousearchbyspecificorrangeofaddressesyoushouldunchecktheautomatic
searchoption.
b) Click[SCAN],thedevicewillappearintheAvailableDeviceslistview.
NOTE:theDHCPoptionmightbeenabledfromthefactory.IfyoudonothaveaDHCP
server,orsimplycannotdetectthereaderusingTCP/IP,youcanusetheUSBcableto
connecttothedevice(seestep7todetectthedeviceviaUSBCable).
c) ClicktheReadericonintheRegistrationStatuscolumn(iconshowsayellowplussignifitisnot
registered).
d) AdvancetoStep8tocontinueregistrationinstructions.


Page17of40

SystemGalaxyQuickGuideforBioscrypt/L‐1SetupandEnrollmentSystemGalaxyQuickGuide

IF using USB to connect and register, follow the step 7 below:
7) CHECKtheSerialConnection/ComPortoptionintheleftcorner
a) SettheBaudRateto“Auto”.
b) Click[SCAN],andthedevicewillappearintheAvailableDeviceslistview.
c) ClicktheReadericonintheRegistrationStatuscolumn(iconshowsayellowplussignifitisnot
registered).

Page18of40

SystemGalaxyQuickGuideforBioscrypt/L‐1SetupandEnrollmentSystemGalaxyQuickGuide

To continue registering, follow the steps below:
8) UNCHECKtheObtainIPfromDHCPifyoudonotintendtouseDHCPaddressing
9) IfyouareusingastaticIPAddressforthedevice,thensettheIPAddress,SubnetandGatewayas
requiredtooperateonyournetwork.Datashowninthescreenshotbelowisonlyanexample.
10) ClickNEXTtocontinue


11) CreateadescriptiveDeviceNameforthereader
12) AssignthereadertoaGroup
13) ClickREGISTER

Page19of40

SystemGalaxyQuickGuideforBioscrypt/L‐1SetupandEnrollmentSystemGalaxyQuickGuide

14) ThedevicewillbeaddedtotheSecureAdmindatabase(SADB)

15) CLICKOKtoreturntotheNETWORKscreen.
ToensurethatDHCPissetproperly,gototheDeviceSettingspageandopenthe
Communicationstab.BesurethatDHCPissetupasneeded(UNCHECKEDisoff).

16) TheREADERICONwillnowshowayellowcheckmarktoindicateitisregistered.

Page20of40