HW Group HWg-SH4 User manual

HWg-SH4
User guide

HWg-SH4
2Safety information
Safety information
The device complies with regulations and industrial standards followed in Czech Republic and
European Union. The device has been tested and is supplied in working condition. Follow the
safety and maintenance conditions in order to keep the device in working condition.
Device housing cannot be opened if the relay contacts are connected to a power network.
Using the device in a manner other than recommended by a manufacturer may cause its
protection to fail.
Power supply outlet or a disconnection device has to be freely accessible.
The device must not be used under any of the following conditions:
• The device is noticeably damaged
• The device does not work correctly
• Unsafe parts are moving inside the device
• The device was exposed to moisture or rain
• The device was serviced by unauthorised personnel
• The power adapter or the power supply cable are noticeably damaged
Using the device in a manner other than recommended by a manufacturer may cause its protection to fail.
Switches, fuses and means of current protection have to be a part of a construction unit.
A manufacturer is not responsible for the device, unless it is used with a supplied or accepted power supply.

HWg-SH4
3
Table of contents
Table of contents
Safety information 2
Table of contents 3
HWg-SH4 4
Basic features 5
Connectors 6
First start 7
Web interface 9
Mode selection 10
Offline mode 10
Online mode 10
Usage options 10
Control without door codes (without the keyboard) 10
Control with door codes (with the keyboard) 10
Usage options of HWg-SH4 and subordinated units 11
Adding HWg-SH4x module into HWg-SH4 system 11
Logic architecture of the system 12
Usage examples 13
Use of HWg-SH4 in small applications 13
Use of HWg-SH4 in IT environment 15
Thorough description of the WWW interface 18
General setup 18
E-mail 19
SNMP tab 22
Remote SMS tab 24
DCD server 25
User DB 26
Modules 28
Objects configuration 29
System tab 31
HWg-DCD 32
Basic features 32
Ways of communication between HWg-SH4 and HWg-DCD 32
HWg-DCD interface 34
Typical operations 37
Technical specifications 38
Connecting HWg-SH4 accessories 40
Connecting RFID readers 40
Connection of individual lock types 42
Restoring the default settings 45
Notes 46

HWg-SH4
4HWg-SH4
HWg-SH4
Access system HWg-SH4, together with central surveillance system
HWg-DCD, is designed for access control in data centers, technological
rooms, commercial spaces, apartment houses and offices.
Out IN3 IN2 IN1 IN3 IN2 IN1
DCD Lock 2 Lock 1 Power/
Status
Out
GND +U NO COM NC
Ethernet Set RFID1 RFID2 Relay Power
GND IN1 GND IN2 GND IN3 GND NC GND NO GND IN1 GND IN2 GND IN3 GND NC COM NO
Lock2Lock1
GND
+U
Power
Out
GND
+U
Power
Out
100,0
106,0
120,0
73,0

HWg-SH4
5
Basic features
Basic features
The HWg-SH4 control unit contains two independent channels (modules) for door control
Each channel contains:
• 3 binary inputs (door contact, exit button, lock contact, etc.)
• 1 output relay switch (max. 50V/1A)
The SH4 unit can connect additional HWg-SH4e and HWg-SH4s units (max.16 units):
• HWg-SH4e units contain two independent channels (modules) for door control
• HWg-SH4s units contain one channel (module) for door control
• HWg-SH4s and HWg-SH4e units can be combined in one system
• Max. number of door channels (modules) controlled by one HWg-SH4 device is 34,
including two HWg-SH4 channels
Online / Offline mode
• Offline mode uses only the internal database of RFID tags
• RFID tags database can be managed through a built in web interface in offline mode
• Internal database allows its administrators to manage 2000 user RFID tags
Online mode uses central management server application HWg-DCD
• RFID tags database is stored simultaneously in the central management application
and in HWg-SH4 for use in case the connectivity is lost
Supports connecting two independent RFID readers (with or without keypad)
• Support of RFID readers with Wiegand or RS-232 interface
• An option to control LED or buzzers in the reader
• Door to be opened can be selected on the keypad
SNMP for remote supervising in monitoring centers supports sending of SNMP traps in case
of any action (door opening, unlocking, card read)
12V power supply input
HWg-SH4 can be installed to 19“ racks into its individual 1U holder or to a compound holder,
together with other HW group devices

HWg-SH4
6Connectors
Connectors
LED signalization
• Power/Status (green):
• Light confirms that the device is powered up
• Flashing indicates firmware uploading or restarting to a factory detauls
• INx (green) – light indicates triggered binary input
• Outx (yellow) – light indicates active output relay
• DCD (blue) – light indicates connection to a server with HWg-DCD
Front panel connectors
• Power – power supply connector + terminal block. Input power 9-30V
WARNING: Input power is directly connected to Power Out!
• Ethernet – interface for conecting to a computer network. Follows a 100BASE-T standard (10/100MBit)
• RFID1, RFID2 – RJ-45 socket for connecting an RFID reader with Wiegand or RS-232 interface
• Relay – signalisation relay output - max. 50V/1A. Requires a special firmware version
and the functionality depends on this custom FW release. Normally not in use
• Set – two control switches:
• DIP1 – used for restarting the device to its factory default settings (More in Device reset chapter)
• DIP2 – normally not in use
Rear panel connectors
• Lock1, Lock2 – sockets for connecting door modules. Each module consists of one switch
relay (max. 50V/1A) for a lock and three pairs of binary inputs with fixed functions
(door contact, exit button, lock contact, etc.)
• Power Out – An output for permanent power
supply of connected locks. Connected with
a Power input.
RJ45 standard B colours Function
1 - out 1
2 - out 2
3 - Txd
4 - GND
5 - in 1
6 - D0/Rxd
7 - + 12V
8 - D1
white
white
orange
brown
orange
x
blue
x
green
brown
Out IN3 IN2 IN1 IN3 IN2 IN1
DCD Lock 2 Lock 1 Power/
Status
Out
GND +U NO COM NC
Ethernet Set RFID1 RFID2 Relay Power
GND IN1 GND IN2 GND IN3 GND NC GND NO GND IN1 GND IN2 GND IN3 GND NC COM NO
Lock2Lock1
GND
+U
Power
Out
GND
+U
Power
Out
Out IN3 IN2 IN1 IN3 IN2 IN1
DCD Lock 2 Lock 1 Power/
Status
Out
GND +U NO COM NC
Ethernet Set RFID1 RFID2 Relay Power
GND IN1 GND IN2 GND IN3 GND NC GND NO GND IN1 GND IN2 GND IN3 GND NC COM NO
Lock2Lock1
GND
+U
Power
Out
GND
+U
Power
Out
Out IN3 IN2 IN1 IN3 IN2 IN1
DCD Lock 2 Lock 1 Power/
Status
Out
GND +U NO COM NC
Ethernet Set RFID1 RFID2 Relay Power
GND IN1 GND IN2 GND IN3 GND NC GND NO GND IN1 GND IN2 GND IN3 GND NC COM NO
Lock2Lock1
GND
+U
Power
Out
GND
+U
Power
Out
RFID connectors RFID1,
RFID2 – connections

HWg-SH4
7
First start
First start
First steps
Connecting the cables
• Note down the MAC address of the device, printed on a sticker on the side of the device
• Check the DIP switches, eventually turn both switches off (DIP1=Off, DIP2=Off)
• Connect HWg-SH4 into the Ethernet network (with direct cable to a switches
with crossed to PCs) - RJ-45 socket
• Plug the power adapter and connect it to a connector on the device
• Green POWER LED will light up
• If the connection to Ethernet network is working, LINK LED will light up (orange light on RJ45
connector) and it then flashes during the data transmittions (Activity signalisation)
Setting an IP address - HWg-Config
HWg-Config application is located in the main folder on the attached CD (in versions for both
Windows and Linux).
This software can be also downloaded from www.HW-group.com Software -> HWg-Config.
• Start HWg-Config by clicking on its icon – software will automatically search for connected devices
Automatic search works only in a local network.
• HWg-SH4 can be identified by its MAC address (printed on the side of the device)
1
2
Double-click
for detail
see
page 8

HWg-SH4
8First start
• Clicking on a MAC address of the device opens a window for setting up its basic network
parameters.
Setting network parameters of the device:
• IP address / HTTP port (in default 80)
• Mask of the network
• Gateway IP address for the local network
• Device name (You can choose the name)
Save the settings with Apply Changes button
To set the IP address you can also use:
• UDP Config for Linux
WWW interface
WWW interface of the device can be opened by one of the following steps:
• Open the device’s IP address in a web browser
• Click the IP address in HWg-Config application
First steps
3
!
Important
In case the device stops working because of a wrong configuration set, the settings
can be restored to the factory defaults. More in restoring the default settings chapter.

HWg-SH4
9
First start
Web interface
Home actual values overview
General Setup: IP address, DNS, security options (login/password)
Email: settings and email test options
Time: time parametrs, NTP server
Remote SMS: settings and test SMS options
DCD Server: HWg-DCD server connection settings
User DB: users and offline mode rights management options
Modules: output control options and alarm settings
SNMP: SNMP / SNMP traps settings (ports and alarm messages recipients)
System: FW upgrade, configuration download options, etc.
Door closed and
unlocked – can be
opened
Door closed
and locked
Door opened
and unlocked
Door opened and
locked – door opened
by an authorized user,
waiting to be closed
Door disconnected
– connection with
module lost
First steps
1 2 3
2
1
3
HWg-DCD connection
status
Doors state & manual
control options
List of the most recent actions including
RFID tags.

HWg-SH4
10 Mode selection
Mode selection
For testing of HWg-SH4 in offline mode you can keep the unit in the default settings, only with
connected RFID reader.
Offline mode
Offline mode enables users to start using the access system HWg-SH4 immediatelly. Users
can be added, edited or removed manually on the User DB tab. This way of use is preferred to
be used only for managing a single HWg-SH4 unit with a small number of users.
Advantage of this mode is that administrators of the system can immediately react and open
doors or manage users.
Central user management with more doors and online user database backup are not availa-
ble in this mode. A manual authorization with a master tag is required for assigning available
RFID tags.
Online mode
A mode in which the access system is used together with HWg-DCD for managing users
and doors. All users are managed through the HWg-DCD application (can be run on any PC,
in case the DCD server is available on the Internet/Ethernet network). The access rights are
afterwards copied to HWg-SH4 devices.
Main advantage of this mode is its ability to manage large networks with many users, HWg-
SH4 units and subordinated units HWg-SH4e and HWg-SH4s. Online mode also allows admin-
istrators to work with unknown tags, that can be loaded into the system and assigned, after
the user is authorized.
Online mode requires a central server and the HWg-DCD application. However this server
does not have to be constantly online, in case a permanent survelience is required.
Usage options
Control without door codes (without the keyboard)
One standard RFID reader is connected to HWg-SH4 in basic configuration. After reading a tag
with access rights for door opening, the device unlocks the door. One RFID tag can be allowed
to open front, back or both doors connected to the unit.
Control with door codes (with the keyboard)
In this mode you need to connect the RFID keypad reader to the HWg-SH4. Each door has its
own numeric code which has to be entered and then confirmed by an RFID tag in order to un-
lock the door. HWg-SH4 then evaluates the code and the tag and opens each door associated
to this code and also each door with no code assigned.

HWg-SH4
11
Usage options of HWg-SH4 and its subordinated units
Usage options of HWg-SH4 and its subordinated units
Up to 16 HWg-SH4e and HWg-SH4s units can be connected to HWg-SH4:
• HWg-SH4e units contain two independent channels (modules) for door control
• HWg-SH4s units contain one channel (module) for door control
• HWg-SH4s and HWg-SH4e units can be combined within one system
• max number of door channels (modules) controlled by one HWg-SH4 unit is 34,
including two channels on HWg-SH4
Connected modules communicate with HWg-SH4 using a TCP connection.
Subordinated units can be connected to HWg-SH4 on a configuration level. These units are
identified as modules of their master HWg-SH4.
Adding HWg-SH4x module into HWg-SH4 system
Units subordinated to HWg-SH4e and HWg-SH4s can be added through the WWW interface
of HWg-SH4 on Modules page by Add Module link.
You need to enter the following
Module Name – under this name the module will be identified in the HWg-SH4 system
and eventually also in the HWg-DCD application
Type – type of the subordinate module
IP Address – IP address of the connected unit
Username – username for communication security, defaults to „user1“. The subordinated unit
has to be reconfigured manually in case any changes are done. More information can
be found in the manual for the units
Password - password for communication security, defaults to „pass1“. The subordinated unit
has to be reconfigured manually in case any changes are done. More information can
be found in the manual for the units

HWg-SH4
12 Logic architecture of the system
Logic architecture of the system
HWg-SH4 system is built on a hierarchy of MODULE => OBJECT => ELEMENT.
• Modules are physical devices like the HWg-SH4, HWg-SH4e, HWg-SH4s and others.
Each module contains one or more objects.
• Object represents door type objects, RFID readers and relay type objects
– (Relay type objects chapter). Each object contains one or more elements.
• Element represents the lowest point of hierarchy. Represents output relays, binary inputs,
Wiegand interface or RS-232. Elements ARE NOT defined by users!
Door type object
Door objects are used to control locks, lock sensors, for door opening detection or for
connecting exit buttons. This object consists of four elements – 3 binary inputs + 1 relay
output. Elements create a whole unit and CANNOT be managed separately.
Predefined objects:
RFID type object
Used for connecting RFID readers through Wiegand interface or RS-232 into an RJ45 connector.
Predefined objects:
Both RFID readers are connected independently and types of the readers can be combined.
You can then for example connect an EM4100 together with Mifare reader, which would allow
its users to use RFID tags they already have. Or you can use one reader with a keyboard
at the enatrance to a building and another reader withouth a keyboard at the exit.
More object types can be added on request. If you have a request on object types, please contact your distributor.
Module
Number of objects in types
Door RFID Relay
HWg- SH4 2 2 1
HWg- SH4e 2 0 1
HWg- SH4s 1 0 1
Component
Elements
Binary
Inputs
Relay
Outputs
RS-232/
Wiegand
Door 3 1 0
RFID 0 0 1
Relay 0 1 0
Element
Door Model IN1 IN2 IN3
Magnetic Lock Door contact Not used Exit Button
Soutchco R4-EM Rotary Door contact Switch Not used
Soutchco H3-EM - Electronic Locking Swinghandle Door contact Lock status Mech status
RFID reader Interface Keyboard Frequency Standard Audio output Optical output
HWg-R3 Wiegand Yes 125kHz EM4100 Yes Yes
JA-80H Wiegand Yes 125kHz EM4100 Yes Yes
RFID reader 232-M1 RS-232 NO 13,56MHz Mifare Yes
(not defined)
NO
(not defined)

HWg-SH4
13
Solution without HWg-DCD Solution with HWg-DCD
Usage examples
Relay type object
Relay type objects CANNOT be controlled manually in standard version of the product.
They can be used to control signalization, to identify selected door in large rack systems
or for switching internal lighting in telco rooms, etc. To get more information on possible
usage options of the relays, please contact your local distributor with your request.
Usage examples
Using HWg-SH4 in small applications
The small applications can be for example apartment houses, small companies, or systems
using existing RFID tags.
Apartment building access system
HWg-SH4 can be used as an access system for apartment houses or offices. A typical
application can be using RFID reader for access from the outside of the building, together with
an exit button installed on the inner side of the door. To enter the house you can then simply
use the RFID tag and to leave the building you can press an exit button. The door can be also
opened remotely from individual apartments. The system can also be used to control the gate
to a parking lot.
Using HWg-DCD is in such cases is optional, as it is not needed for direct administration.
However it can notably simplify registering of access tags and deactivation of the lost ones.
RFID
reader
RFID
reader
HWg
DCD

HWg-SH4
14 Usage examples
RFID
reader
Exit button
RFID
reader with
keypad
RFID
reader with
keypad
Exit button
SH4
Using the exit button
Access into a company building with a gate
HWg-SH4 can be used for entry gates on company parking lots. One RFID reader with a keyboard
would control the entry gate and another reader with a keyboard would then control access
into the building (the gate and the door require differend codes assigned). An exit button can
be used for leaving; eventually a second RFID reader can be used at the gate (can be then
used for evidence of cars parked in the parking lot). Using the HWg-DCD is optional here as well.
Building access system with availability for other applications
Thanks to the ability to use common RFID readers the HWg-SH4 is optimal for integration
into existing systems. For instance in many schools and libraries there are some RFID tags
systems already installed.
With HWg-SH4 you can easily assign access rights to a building by using the same tags.
Also late arrivals are then recorded, the log can also be sent as e-mail or SMS notifications.
The same can be applied in different office or storage premises.
RFID
reader
Exit button
RFID
reader with
keypad
RFID
reader with
keypad
Exit button
SH4

HWg-SH4
15
Usage examples
Using HWg-SH4 in IT environment
A typical example is use of HWg-SH4 for access into rack cabinets and technological rooms.
Standalone solution for racks
A typical application for HWg-SH4 is in a rack cabinet, not only in individual cabinets but also
as a part of a data center. HWg-SH4 unit is then installed inside the rack and the RFID reader
is placed on one of the doors (or both). If there is only a single HWg-SH4, it can be simply
configured in offline mode through its WWW interface.
However if HWg-SH4 is installed in a data center where one unit is installed in every cabinet,
it is recommended to use the devices in online mode with HWg-DCD.
Rear door
contact
HWg
DCD
RFID
reader
with keypad
Side door
contact
Front door
contact
rear door
lock
Standard cabinet
front door
lock
RS 232
Wiegand
Users DB
Ethernet IP
WEB acces
ONLINE
mode
OFFLINE
mode
RFID CARD
Online/Offline mode
DIN KEY
SH4

HWg-SH4
16 Usage examples
A solution using remote HWg-SH4e/HWg-SH4s units
One of the main advantages of the HWg-SH4 system is the option to use one control unit
with several subordinated HWg-SH4e or HWg-SH4s units. In such cases a use of RFID reader
with a keyboard connected to HWg-SH4 is expected. Individual doors have their own unique
numbers corresponding with a door (key/lock) number or with a number of the rack cabinet
(where the number is then used as a door code). Subordinated units HWg-SH4s or HWg-SH4e,
which directly control the door locks, are installed in individual rack cabinets.
NOTE: The units (both head and subordinated) can also use relay type objects for example for lighting
control in racks or for identification of the unlocked door. This function is not active in default.
A user enters a door code on the RFID reader’s keypad and confirms the code with his RFID
tag. The system then evaluates the request and opens the required door.
HWg
DCD
Ethernet/Internet Ethernet/Internet
EthernetEthernetEthernet
Ethernet/Internet
SH4e
X
SH4s
X
SH4s
X
SH4e
X
SH4e
X
SH4s
X
SH4e
X
SH4s
X
SH4s
X
SH4e
X
SH4s
X
RACK RACK RACK RACK RACK RACK RACK RACK RACK RACK RACK
RFID
reader with
keypad
RFID
reader with
keypad
RFID
reader with
keypad
SH4 SH4 SH4

HWg-SH4
17
Usage examples
Solution with 8x HWg-SH4s
In this application the HWg-SH4 serves only as a terminal connected to an RFID reader,
while subordinate units control all the locks. A door to be opened is defined by a code entered
on the keypad.
HWg-SH4 as another access point
In this configuration the HWg-SH4 works as an access point, it controls subordinate units
and opens door as well. The door is selected with a code entered on a keypad.
RFID
reader with
keypad
HWg
DCD
Ethernet IP
SH4sSH4sSH4sSH4sSH4sSH4sSH4sSH4s
SH4
RFID
reader with
keypad
HWg
DCD
Ethernet IP
SH4sSH4sSH4sSH4sSH4sSH4sSH4sSH4s
SH4

HWg-SH4
18 Description of the WWW interface
Description of the WWW interface
General setup
General Setup is used to set basic operational parameters of HWg-SH4.
Base section
• Device Name – (HWg-SH4) – helps to distinguish between different HWg-SH4’s in one network.
Device name can be up to 16 characters long
• WWW Info Text – text of a footer in WWW interface – useful for example for entering data
center administrator’s contact details
Network section
• DHCP – allows DHCP server to set the IP address of the unit, if available. Enabling or
disabling of DHCP depends on actual requirements of the user and the network administratior.
• IP Address – IP address of the HWg-SH4 – assigned by a network administrator.
• Network Mask – assigned by a network administrator.
• Gateway – IP address of a default gateway– assigned by a network administrator.
• DNS Primary/DNS Secondary – IP address of a DNS server – assigned by a network administrator.
• HTTP Port – port number where the built-in WWW server listens – changing the port number is
necessary for example if more devices are accessable from outside the network through
a router. Please consult any changes in this setting with your network administrator.
Port set to 80 in default.
Security: Device Admin section
• Username/Password – login details used for accessing HWG-SH4 settings

HWg-SH4
19
Description of the WWW interface
E-mail
E-mail tab defines e-mail server and parameters of alarm e-mail messages (starts or endings
of alarm states).
Check this before sending an e-mail
1. Correct Gateway IP address
2. DNS server in the network settings
3. SMTP server and its port
4. Activated authentication and correct
login name and password
5. Disabled spam filter of the mailbox

HWg-SH4
20 Description of the WWW interface
Email Settings section
• SMTP Server – IP or domain address of a SMTP server.
• SMTP Port – port number of the e-mail server – in default port 25.
• Secure TLS mode – use this option if the SMTP server requires secured communication
using SSL/TLS.
• Authentication – tick this option in case the SMTP server requires authentication.
• Username – necessary for SMTP server authorisation. If the Authentication field is not ticked,
this is not used.
• Password – used for SMTP server authorisation. If the Authentication field is not ticked,
this is not used.
• Importance – sets priority of the e-mail messages. Necessary for filtering and further pro
cessing of alarm messages.
• FROM – e-mail address of a sender - HWg-SH4 unit. Address can be required by SMTP
servers and can be used for HWg-SH4 device identification, eventually for filtering and
further processing of alarm messages.
• Subject – Content of this field can be used for identification of the HWg-SH4, eventually for
filtering and further processing of alalrm messages.
•TO – recipient – e-mail address of alarm e-mails recipient. Only one e-mail address can
be entered.
• CC – copy – e-mail address of alarm e-mails copy recipient. Only one e-mail address can
be entered
Fields To and CC allow entering of more addresses or of a dirtribution list. For sending
e-mails to more recepients it is necessary to have a distribution list in form of a single
e-mail address (from your SMTP server administrator).
• Send SNMP Trap when the door state changes – Allows sending of notifications in case
of selected events. Available event options:
• Open/Close – Door opened or closed
• Lock/Unlock – Door locked or unlocked
• Fail/Normal – Door error – For specific lock types
• Enable/Disable – Door object powered on or off (activated/deactivated)
• Connect/Disconnect – only for network modules HWg-SH4e and HWg-SH4s
• Send SMS when RFID state changes – Allows sending of notification in case of a specific
reader object event. Available events:
• RFID Tag invalid code – unknown code loaded
• RFID Tag valid code – valid code loaded
Send Test Email section
A button for sending test e-mail messages after completing the e-mail settings.