Honeywell MPA1 User manual

Document -800-26311_Rev-B – July 2020
Access Control Unit
MPA1 User Guide

Revisions
Rev Date Revisions
A 02/2020 Document created.
B 07/2020 Document updated with ULC Features

| 1
Document 800-26311
Contents 1
1 Contents . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1
1 Getting Started . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
Connecting to the Web Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
Setting Up an Ethernet Port 6
Navigating through MPA . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10
The MPA1 Dashboard 10
Accessing the Menu 11
2 Basic Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
Configuring the EVL (Ethernet Virtual Group). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
What is an EVL? 18
Network Requirements 18
Setting for EVL mode 19
Creating an EVL 19
Managing Configuration Data . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23
Configuring Host/Loop Communications 24
Initial Panel Setup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
Entering a Panel Name 28
Configuring the Network Settings 29
Configuring Time Management 30
Configuring Spaces. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38
Configuring Spaces 38
Configuring Doors 42
Configuring Door Outputs 50
Configuring Panel I/O and Groups 52
Configuring Card Formats 57
Managing Site Codes 61
Configuring Interlocks 63
Configuring People and Cards . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 66
Configuring People 66
Configuring Cards 69
Configuring Access Groups . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 73
Creating a New Access Group 74
3 Monitoring and Reporting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 77
Monitoring. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 77
Monitoring Alarms and Events 77
Monitoring/Managing Doors 80
Monitoring Inputs 81
Monitoring Outputs 82
Monitoring Output Group 83
Reporting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 86

www.honeywell.com/security
2 | MPA1 User Guide
Generating Event Reports 86
Generating Diagnostic Reports 87
Generating People/Card Reports 88
4 Maintenance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 89
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 89
Backing Up . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 89
Upload (From Panel) 90
Backing Up (or Uploading) Other Data from the Panel to the Host System 90
Synchronizing a New Panel with Information on an Existing Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .95
Replace a Primary Panel in an Existing Loop (Web Mode) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .95
Overview 95
Primary Panel Replacement and System Wide Restore 95
Replace a Secondary Panel (Web Mode) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 96
Overview 96
Secondary Panel Replacement and Synchronization 96
Hard Default a Primary in an Existing Loop (Web Mode). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 96
Overview 96
Primary | Secondary Panel Synchronization (Hard Default) 96
Hard Default an Existing Secondary Panel (Web Mode) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .97
Overview 97
Primary | Secondary Panel Synchronization (Hard Default) 97
Synchronization Detail Chart . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .98
Synchronization 98
Access control behavior during synchronization: 98
Restore Entire Loop Detail Chart. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 99
System Wide Backup Restore: 99
Restoring the Panel to Factory Default Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 100
Resetting the Panel 100
Firmware Upgrades . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 101
Panel Requirements 101
Overview 101
Planning for the Firmware Upgrade 102
Updating the MPA1 Panel Using the Web Interface 102
5 Caches and Certificates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 105
Caches. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 105
Clearing the Cache and Cookies in the Internet Browsers Used by the MPA1 Web Server 105
Generating and Installing Certificates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 106
Section 1 - Generating sign-in request and installing certificates 106
Section 2 - Installing the master certificate into the browser 109
6 MPA1 Accounts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 115
Creating MPA1 Accounts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 115
Modifying a User Account . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 117
Deleting a User Account . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 118
Technical Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 119
Normal Support Hours 119
Web 119
7 Appendix . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 121

| 3
Document 800-26311_ A - February 2020
© 2020 Honeywell All Rights Reserved.
All product and brand names are the service marks, trademarks, registered trademarks, or
registered service marks of their respective owners. Printed in the United States of
America. Honeywell reserves the right to change any information in this document at any
time without prior notice.
Microsoft and Windows are registered trademarks of Microsoft Corporation. Windows
Server is a trademark of Microsoft Corporation.
Ordering Information
Please contact your local Honeywell representative or visit us on the web at
www.honeywellaccess.com for information about ordering.
Feedback
Honeywell appreciates your comments about this manual. Please visit us on the web at
www.honeywellaccess.com to post your comments.
All information in this document (descriptions, technical specifications, pictures,
illustrations etc) are indicative only, not binding and can be changed without notice.
Nevertheless, this document remains valid.
Personal Data Storage
Please be aware that this product can store personal data. Personal data is protected by the
General Data Protection Regulation (2016/679) in Europe and therefore the owners of
personal data have obtained certain rights thanks to this regulation.
We strongly advise you to be fully aware of these owner ("data subjects") rights as well as
which limitations you have to obey regarding the use and distribution of this data. Further
details can be found on the GDPR website of the EU:
https://ec.europa.eu/commission/priorities/justice-and-fundamental-rights/data-protect
ion/2018-reform-eu-data-protection-rules_en

| 5
Document 800-26311_ A - April 2020
Getting Started 1
Overview
The MPA1 is a modular 1 Door access control system. An MPA1 access control site is
configured with a host system and access control units that exceed existing NetAXS-123
specifications and approvals. These units also communicate with each other. Each access
control unit, or panel, has one reader port, which can support up to two OSDP readers. For
supported configurations, see Firmware Compatibility on page 105.
You can communicate with the MPA1 access control unit either through a host software
system or by connecting to the web server through an Ethernet connection. This chapter
describes how to connect to the web server.
For hardware and wiring installation instructions, please see the Installation Guide
supplied. The MPA1 is designed to work with most operating systems and browsers, but
Honeywell recommends Chrome™ for the best performance.
Note All information in this document (descriptions, technical specifications,
pictures, illustrations etc) are indicative only, not binding and can be
changed without notice. Nevertheless, this document remains valid.
Connecting to the Web Server
The MPA1 embedded web server is intended for supplementary and programming
purposes only. It has not been evaluated by UL for use as a monitoring station.
The embedded web server can be accessed through the following two connection types:
• Ethernet through a direct connection
• Ethernet through a hub/LAN connection

www.honeywell.com/security
6 | MPA1 User Guide
Note 1) The panel that you are connecting to the computer is the Primary panel.
The panel is set as Primary panel using the Device Utility App.
2) When creating a user in MPA1 -> Web server, the administrator should
obtain and maintain the consent.
Setting Up an Ethernet Port
There are two options for connecting the panel to a PC via a web server:
• Using a hub/LAN connection
• Using a direct connection
To set up an Ethernet Port
1. Connect your computer's Ethernet port to the panel's Ethernet port using one of the
following two methods:
a. Ethernet Hub connection: Connect both the computer’s Ethernet port and the
panel's Ethernet port to an Ethernet hub with standard Ethernet patch cables.
b. Web server direct connection: Connect the computer’s Ethernet port directly to
the panel’s Ethernet port with either a crossover or an Ethernet cable.
Note UL294 and UL60839-11-1 evaluation consist of the stand alone mode of
this device

| 7
Document 800-26311_ A - April 2020
2. Configure the computer’s network connection:
a. Select Start > Settings > Control Panel.
b. Click Network and Dial-up Connections.
c. Identify your local Ethernet connection (commonly labeled Local Area
Connection), and right-click the icon to display the Local Area Connection
Properties screen.
d. Highlight the Internet Protocol (TCP/IP) connection.
e. Click Properties to display your system’s current Internet Protocol properties.
TIP! Keep a record of your computer’s current network configuration as it appears in this
screen. You will need to re-instate this configuration later.
f. Select Use the following IP address.
g. Enter 192.168.1.10 in the IP address field.

www.honeywell.com/security
8 | MPA1 User Guide
h. Enter 255.255.255.0 in the Subnet mask field.
i. Click OK to accept the entries.
3. Open your browser, and enter https://192.168.1.150 as the target address.
CAUTION When connecting to the web using a browser, you
must use https:// for a secure connection. The standard http:// that is
the default in most browsers will not work.
4. Press the Enter key to display the Honeywell MPA1 login screen.

| 9
Document 800-26311_ A - April 2020
Note If you are using Google Chrome and you receive a message “Your connection
is not private”, follow the below steps to get to the Sign In screen.
a. Click Advanced to expand the popup window.
b. Click Proceed to <panel’s> IP address (unsafe). The Sign In screen appears.
Note For instructions on certificate errors see the Chapter 5, Caches and
Certificates.
5. Enter admin in the User Name field, and enter admin in the Password field. Both the
user name and password are case-sensitive.
Note If you fail to log in successfully 5 times, the Retry Limit will be exceeded, and
the account locks for 30 minutes. Any attempt to log into a locked-out
account, within the timeout period, restarts the 30 minute lock-out period.
Note On initial signing in, you will be asked to change your password to a new
password. For more information see Creating MPA1 Accounts on page 115.
6. Click Sign In. By default, the MPA1 opens to the Dashboard.

www.honeywell.com/security
10 | MPA1 User Guide
Navigating through MPA
The MPA1 Dashboard
On the MPA1 Dashboard, you can see the following:
• A list of all the panels in the loop.
• Any offline panels.
• The number of currently existing entries in the database.
• Clicking on the links on the Dashboard will take you directly to the selected database
page.

| 11
Document 800-26311_ A - April 2020
Accessing the Menu
In the upper left corner is the Menu button, allows you access to all of the MPA functions.
Figure 1-1 Main Menu

www.honeywell.com/security
12 | MPA1 User Guide
Table 1-1 Main Menu Selections
Icon Description For more information,
see...
Access configuration
options for Spaces,
Schedules, Holiday, Peo-
ple and Cards, and
Access.
Configuring Spaces on page 38;
Configuring People and Cards on
page 66; Entering a Panel Name on
page 28
Access panel configura-
tion options.
Configuring the EVL (Ethernet Vir-
tual Group) on page 18; Initial
Panel Setup on page 27
View the Configuration
Summary, and the status
of all the panels in the
loop.
Navigating through MPA on page
10
View alarms and events Monitoring Alarms and Events on
page 77; Table 3-1
Manage Spaces, Doors,
and Auxiliary Connec-
tions (such as Inputs,
Outputs, and Output
Groups)
Configuring Spaces on page 38;
Configuring Doors on page 42;
Configuring Panel I/O and Groups
on page 52
Specify that an account
is Administrator, Service,
or Operator. Select Lan-
guage Preference.
Creating MPA1 Accounts on page
115
Sign out
The current user

| 13
Document 800-26311_ A - April 2020
This page is intentionally left blank

| 17
Document 800-26311_ A - April 2020
Basic Settings 2
Overview
This chapter explains the MPA1 configuration functions as accessed via the web server.
These functions should be performed only by the system administrator or service
personnel.
CAUTION: The sequence of MPA1 configuration tasks is
critical. If you do not follow the sequence described in
Table 2-1, the system cannot be successfully configured.
Note Screen captures taken on a Windows 7 platform. If you use another OS, then
the GUI might be different.
Table 2-1 Configuration Task Sequence
To... Go here...
Configure the System
via EVL (Ethernet
Virtual Loop)
Configuring the EVL (Ethernet Virtual Group) on page 18
Initial panel setup Initial Panel Setup on page 27
Configuring schedules Configuring Schedules on page 34
Configuring spaces Configuring Spaces on page 38
Configuring people and
cards
Configuring People and Cards on page 66
Configuring access
groups
Configuring Access Groups on page 73

www.honeywell.com/security
18 | MPA1 User Guide
Configuring the EVL (Ethernet Virtual Group)
What is an EVL?
An Ethernet Virtual Loop (EVL) allows a group of IP network connected MPA1 controllers
to be managed as a group, through an embedded Web Server residing on one of the
controllers.
Up to 16 controllers may be grouped into an Ethernet Virtual Loop.
The grouping is known as a Virtual Loop since the administration paradigm is similar to an
RS-485 loop, which is used in MPA2 and NetAXS - 123 panels.
Figure 2-1 EVL System Diagram
Note EVL is not evaluated by UL294 and UL60839-11-1
Network Requirements
The controllers must be connected to a common IP sub-network that provides dynamic
address assignment through DHCP.

| 19
Document 800-26311_ A - April 2020
Setting for EVL mode
There are no DIP Switches on an MPA1. When an MPA1 panel is used in EVL mode. The
panel needs to be set up with the device Utility App. The panel is identified by its MAC
address.
TIP! When setting up an EVL loop, create a list of MAC addresses for all Panels and what doors
they control. This will be useful later when the panels are configured.
One of the controllers must be set as the Primary controller by Using the Device Utility App.
Configure other controllers as Secondary controllers by Using the Device Utility App.
Creating an EVL
An MPA1 panel can be setup in a web mode from the Device Utility App.
Settings such as Network settings, time, and selection fro the panel usage (web, MAXPRO
Cloud or Win-Pak) are set here.
When web is selected the settings for the PRIMRY and SECONDARY panel can be done.
EVL is the only available mode for host/loop communication.
Note if an MPA panel is set up in the Device Utility App as Secondary panel, then
the only way to access the panel is via web interface is to rest the panel with
the Device Utility App as PRIMARY panel.Creating an EVL
Connect all Controllers to a common IP network. The Secondary IP controllers will be
configured using the Primary controller.
1. Log into MPA1 Primary panel from a browser through the Ethernet connection
(https://192.168.1.150), or the Address setup in the Device Utility App.
2. Navigate to Host/Loop Communications Screen:
•Menu > Panel Configuration > Host/Loop Communications, or
• Click on Panels > Host/Loop Communications on the Dashboard.

www.honeywell.com/security
20 | MPA1 User Guide
Figure 2-2 Selecting Host/Loop Communication Tab
3. Set up Communication attributes (see Figure 2-2):
a. Select Web as Host Connection Type.
b. Ethernet Virtual Loop is the only available option.
c. Click Save.
4. See Setting Up an Ethernet Port on page 6.
5. Set up Network Configuration (see Figure 2-3):
a. Navigate to the Network field on the Settings tab.
b. Select DHCP or enter Static IP address assigned to Primary panel.
c. Click Save. The panel automatically reboots.
Note It is recommended to set the Primary panel as a static IP address that is
different than the default address (192.168.1.150) such as 192.168.1.100.
The Primary panel must be set to the same subnet as the Secondary panels
in order for the EVL to work properly (i.e., if DHCP server is assigning
Secondary panels to 129.17.27.XXX, then Primary needs to also be set to
129.17.27.XXX).

| 21
Document 800-26311_ A - April 2020
Figure 2-3 Network Configuration for EVL
6. Log into the Primary controller from a browser.
See Setting Up an Ethernet Port on page 6.
7. Register Secondary EVL controllers (see Figure 2-4):
Note Only secondary panels can be Registered and Unregistered.
a. Navigate to the EVL tab: Menu > Panel Configuration > Advanced > EVL
Discovery.
Figure 2-4 EVL Discovery Panel
Discovered panels appear automatically.
Panels in the loop appear
here. Panel status is
indicated by color: red =
offline; green = online.

www.honeywell.com/security
22 | MPA1 User Guide
b. Click REGISTER to register a panel. The REGISTER buttons changes to
UNREGISTER when the registration is successful.
Figure 2-5 Registered Secondary Controllers
You have now finished creating an Ethernet Virtual Loop.