ICT PRT-CTRL-DIN-1D User manual

PRT-CTRL-DIN-1D
Protege GX DIN Rail Single Door Controller
Installation Manual

The specifications and descriptions of products and services contained in this document were correct at the time
of printing. Integrated Control Technology Limited reserves the right to change specifications or withdraw
products without notice. No part of this document may be reproduced, photocopied, or transmitted in any form or
by any means (electronic or mechanical), for any purpose, without the express written permission of Integrated
Control Technology Limited. Designed and manufactured by Integrated Control Technology Limited, Protege® and
the Protege® Logo are registered trademarks of Integrated Control Technology Limited. All other brand or product
names are trademarks or registered trademarks of their respective holders.
Copyright © Integrated Control Technology Limited 2003-2021. All rights reserved.
Last Published: 07-Oct-21 12:13 PM
PRT-CTRL-DIN-1D | Protege GX DIN Rail Single Door Controller | Installation Manual 2

Contents
Introduction 6
Single Door Controller Editions 6
Installation Requirements 7
Grounding Requirements 8
Safety Grounding 8
Earth Ground Connection 8
Mounting 10
Removal 10
Connections 11
Power Requirements 11
Auxiliary Outputs 13
Power over Ethernet (PoE) 13
Encrypted Module Network 14
Module Wiring 14
End of Line (EOL) Resistors 15
Backup Battery 15
Ethernet 10/100 Network Interface 16
Door Access Control 17
RS-485 Reader Locations 17
RS-485 Reader Connection (Entry Only) 17
RS-485 Reader Connection (Entry/Exit) 18
Door Contact Connection 19
Lock Output Connection 19
Programming the Onboard Reader 20
Inputs 21
EOL Resistor Value Options 21
Duplex Inputs 22
Trouble Inputs 23
Outputs 24
Configuration 25
Configuring a Controller via the Web Interface 25
Logging In for the First Time 25
Creating a Secure Password 26
Configuring the IP Address 26
PRT-CTRL-DIN-1D | Protege GX DIN Rail Single Door Controller | Installation Manual 3

Setting Up Integrated DDNS 27
Setting Up an HTTPS Connection 28
Signing In 32
Home Page 32
System Settings 32
Operators 34
Application Software 35
Configuring a Controller via the Protege GX Software 36
Adding a Controller with Default Records 36
Adding a Controller Based on an Existing Controller 37
Configuring a Controller 38
Troubleshooting Controller Connectivity 47
Communication Requirements 47
Check that the Services are Running 47
Confirm Controller IP Address 48
Unknown Controller IPAddress 48
Confirm Controller Serial Number 48
Duplicate IP Address or Serial Number 48
Confirm the Event Server is Functioning 49
Confirm Event Server IP Address 49
Confirm Ports 49
Check Computer Name 50
Repair Database Compatibility 50
Windows Firewall 50
Multiple Firewalls 51
Encryption 52
Disabling Encryption 52
Telnet 53
Hardware Configuration 54
Setting the IP Address from a Keypad 54
Temporarily Defaulting the IP Address 54
Defaulting a Controller 55
LED Indicators 57
Power Indicator 57
Status Indicator 57
Fault Indicator 57
PoE Power Indicator 57
PRT-CTRL-DIN-1D | Protege GX DIN Rail Single Door Controller | Installation Manual 4

Battery Indicator 58
Ethernet Link Indicator 58
Reader Data Indicators 58
Relay Indicator 58
Input Indicators 59
Mechanical Diagram 60
Mechanical Layout 61
Technical Specifications 62
New Zealand and Australia 64
Intruder Detection Maintenance Routine 64
Peripheral Devices 64
Testing Frequency 64
Recommended Routine Maintenance Procedures 65
European Standards 68
UK PD 6662:2017 and BS 8243 69
FCC Compliance Statements 70
Industry Canada Statement 71
Disclaimer and Warranty 72
PRT-CTRL-DIN-1D | Protege GX DIN Rail Single Door Controller | Installation Manual 5

Introduction
The Protege GX DIN Rail Single Door Controller is the central processing unit responsible for the control of
security, access control and building automation in the Protege GX system. It communicates with all system
modules, stores all configuration and transaction information, processes all system communication, and reports
alarms and system activity to a monitoring station or remote computer.
Protege GX is an enterprise level integrated access control, intrusion detection and building automation solution
with a feature set that is easy to operate, simple to integrate and effortless to extend.
Flexible module network architecture allows large numbers of modules to be connected to the RS-485 module
network. Up to 250 modules can be connected to the Protege system in any combination to the network, over a
distance of up to 900M (3000ft). Further span can be achieved with the use of a network repeater module.
The current features of the controller include:
⦁Internal industry-standard 10/100 ethernet
⦁32 Bit advanced RISC processor with 2Gb total memory
⦁Encrypted module network using RS-485 communication
⦁NIST certified AES 128, 192 and 256 Bit encryption
⦁Factory loaded HTTPScertificate
⦁OSDPconfigurable RS-485
⦁2 high security monitored inputs
⦁Industry standard DIN rail mounting
Single Door Controller Editions
There are two editions of the PRT-CTRL-DIN-1D Controller:
⦁The PRT-CTRL-DIN-1D can be supplied power from a 12V DC power supply connected to the N+ and N-
terminals.
⦁The PRT-CTRL-DIN-1D-POE can be supplied power from a 12V DC power supply connected to the N+ and N-
terminals OR from a power over ethernet (PoE) router via the onboard ethernet terminal.
The features specific to the PoE interface described in this manual are only relevant if using the appropriate
edition.
PRT-CTRL-DIN-1D | Protege GX DIN Rail Single Door Controller | Installation Manual 6

Installation Requirements
This equipment is to be installed in accordance with:
⦁The product installation instructions
⦁AS/NZS 2201.1 Intruder Alarm Systems
⦁The Local Authority Having Jurisdiction (AHJ)
PRT-CTRL-DIN-1D | Protege GX DIN Rail Single Door Controller | Installation Manual 7

Grounding Requirements
An effectively grounded product is one that is intentionally connected to earth ground through a ground
connection or connections of sufficiently low impedance and having sufficient current-carrying capacity to
prevent elevated voltages which may result in undue hazard to connected equipment or to persons.
Grounding of the Protege system is done for three basic reasons:
1. Safety
2. Component protection
3. Noise reduction
Safety Grounding
The object of safety grounding is to ensure that all metalwork is at the same ground (or earth) potential.
Impedance between the Protege system and the building scheme ground must conform to the requirements of
national and local industrial safety regulations or electrical codes. These will vary based on country, type of
distribution system and other factors. The integrity of all ground connections should be checked periodically.
General safety dictates that all metal parts are connected to earth with separate copper wire or wires of the
appropriate gauge.
Earth Ground Connection
The DIN rail enclosure and the DIN rail modules must be grounded to a suitable single-point earth ground
connection in the installation. A minimum 14AWG solid copper wire (or thicker, in accordance with local
authorities) shall be used from the Protege system's earth connection points.
The DIN rail enclosure includes an earth ground single-point link connection via the metallic enclosure. This single-
point link is the Protege system's earth ground. All modules that have earth ground connections and that are
installed in the same enclosure shall be connected to this single point. A single-point earth ground connection
avoids the creation of ground loops in the system and provides a single reference point to earth ground.
Reader Expander
Input Expander
Output Expander
Controller
Dialer’s Earth
Ground Connection
Power Supply
V-
DIN Rail Ground Connections (one or more cabinets installed in the same room)
DIN Rail Enclosure Additional DIN Rail Enclosure(s)
Module Network
(RS-485 N+, N-, NA, NB)
AC Mains Wiring
Earth Ground
Link Connection
PRT-CTRL-DIN-1D | Protege GX DIN Rail Single Door Controller | Installation Manual 8

Sector or Building #2Sector or Building #1 Sector or Building #3
Input Expander
Input Expander
Input Expander
Reader Expander
Input Expander
Output Expander
Power Supply
Controller
Dialer’s Earth
Ground Connection
V-
Earth Ground
Link Connection
DIN Rail Enclosure DIN Rail Enclosure DIN Rail Enclosure
Module Network (RS-485 N+, N-, NA and NB)
DIN Rail Ground Connections (multiple cabinets in different rooms, sectors, or buildings)
Note that the DIN rail enclosure earth terminal is connected to the power supply V- terminal.
There must be only one single earth grounding point per system.
PRT-CTRL-DIN-1D | Protege GX DIN Rail Single Door Controller | Installation Manual 9

Mounting
Protege DIN rail modules are designed to mount on standard DIN rail either in dedicated DIN cabinets or on
generic DIN rail mounting strip.
When installing a DIN rail module, ensure that there is adequate clearance around all sides of the device and that
air flow to the vents of the unit is not restricted. It is recommended that you install the module in a location that
will facilitate easy access for wiring. It is also recommended that the module is installed in an electrical room,
communication equipment room, secure cabinet, or in an accessible area of the ceiling.
1. Position the DIN rail module with the labeling in the correct orientation.
2. Hook the mounting tabs (opposite the tab clip) under the edge of the DIN rail.
3. Push the DIN rail module against the mount until the tab clips over the rail.
Removal
A Protege DIN rail module can be removed from the DIN rail mount using the following steps:
1. Insert a flat blade screwdriver into the hole in the module tab clip.
2. Lever the tab outwards and rotate the unit off the DIN rail mount.
PRT-CTRL-DIN-1D | Protege GX DIN Rail Single Door Controller | Installation Manual 10

Connections
Power Requirements
Power is supplied to the controller by a 12V DC power supply connected to the N+ and N- terminals. The controller
does not contain internal regulation or isolation and any clean 12V DC supply is suitable for this purpose.
Termination of wiring to the module while power is applied or the battery is connected may cause serious
damage to the unit and will VOID ALL WARRANTIES OR GUARANTEES.
Power the unit only after all wiring, configuration and jumper settings are completed.
A battery backup must be connected to the module network to provide a monitored supply. The battery plays an
important role in power conditioning and provides a continuous source of power in the event of a power outage.
Example 2A Power Supply Connection:
PRT-CTRL-DIN-1D | Protege GX DIN Rail Single Door Controller | Installation Manual 11

Example 4A Power Supply Connection:
In a small installation this same power supply can be used to supply the module network as well, so long as the
maximum load of the power supply is not exceeded. In larger installations, the power supply may need to be split
to allow for load sharing between several supplies.
To comply with EN 50131-1 only one battery can be connected and monitored per system. If more capacity is
required a single larger battery must be used.
Example Multiple PSU Connection:
When using multiple power supplies it is important to ensure that all ground connections (V-) are connected
between all power supplies and that no power connections (V+) are connected between any power supplies.
PRT-CTRL-DIN-1D | Protege GX DIN Rail Single Door Controller | Installation Manual 12

Auxiliary Outputs
The auxiliary outputs (S- S+) of the controller can be used to supply other equipment. Note that there is no
onboard regulation or isolation for these outputs - they are a fused feed-through from the N+ N- input terminals.
When using these outputs to supply other devices, be sure not to exceed the rating of the internal fuses as
outlined in the Technical Specifications.
Power over Ethernet (PoE)
PoE models only
Power can be supplied to the controller by a PoE router connected to the ethernet terminal.
There are two types of PoE routers available:
⦁Low Power Type 1 (PoE) IEEE 802.3af, 12.95W Deliverable
⦁High Power Type 2 (PoE+) IEEE 802.3at, 25.5W Deliverable
When using a PoE router as the power source to the controller, the N+ and N- terminals become the network
outputs that can be used for powering the module network. The auxiliary outputs (S- S+) should be used for
powering readers and auxiliary loads such as locks.
The use of a High Power Type 2 (PoE+) router is necessary when the controller is required to supply a combined
auxiliary load of more than 600mA.
When using a PoE router as power source for the controller, the rating for the auxiliary outputs (S- S+) will be
different to those when the controller is being powered by an Integrated Control Technology power supply or a
12V DC supply. Please refer to the values outlined in the Technical Specifications below for more details.
PRT-CTRL-DIN-1D | Protege GX DIN Rail Single Door Controller | Installation Manual 13

Encrypted Module Network
The controller incorporates encrypted RS-485 communications technology. Connection of the communications
should be performed according to the following diagram.
PSU or
equivalent 12V DC
Shield is frame
grounded at
one point
Shields are
connected together
and Isolated
Shielded Cable
Controller Network Module Network Module
Shielded Cable
Shield not
connected
supply
NAN+ N- NB NAN+ N- NB
NAN+ N- NB
Always connect the controller's NA and NB terminals to the NA and NB terminals of the expansion devices and
keypads. The N+ and N- must connect to a 12V power supply source capable of supplying the peak current drawn
by all modules. If a shielded cable is used, the shield must be connected at only one end of the cable. DO NOT
connect a shield at both ends.
The 12V N+ and N- communication input must be supplied from only one point. Connections from more than
one 12V supply may cause failure or damage to the unit or the device supplying network power. Make sure that
the power supply can supply enough current for the peak load drawn by all modules connected to the 12V
supply, including the controller itself.
Module Wiring
The recommended module network wiring specifications are:
⦁Belden 9842 or equivalent
⦁24AWG twisted pair with characteristic impedance of 120 ohm
⦁Maximum total length of cable is 900m (3000ft)
⦁CAT5e / CAT6 are also supported for data transmission when using ground in the same cable (to a maximum
length of 100m (328ft))
Warning: Unused wires in the cable must not be used to carry power to other devices.
PRT-CTRL-DIN-1D | Protege GX DIN Rail Single Door Controller | Installation Manual 14

End of Line (EOL) Resistors
The 330 ohm EOL (End of Line) resistor provided in the accessory bag must be inserted between the NA and NB
terminals of the first and last modules on the RS-485 network. These are the modules physically located at the
ends of the RS-485 network cabling.
330R 330R
First Module on RS-485 Network Last Module on RS-485 Network
To
Next
Module
From
Previous
Module
NAN+ N- NB
NAN+ N- NB
Backup Battery
PoE models only
It is recommended that a minimum of a 7Ah battery is used as the main backup battery. From the accessory bag
provided, connect the RED and BLACK battery termination wires to the B+ and B- plugs. Connect the spade
terminals to the battery as shown below. Connection of the battery in reverse will not damage the controller but
will cause the battery fuse (5A resettable fuse) to open, requiring resetting by removal of all connections to the B+
and B- plugs for approximately 30 seconds.
Single Door Controller with PoE Battery Connection:
Warning:
⦁Only attach standard lead acid batteries.
⦁Do not connect the battery wires or B+ and B- plugs of the module to any other ancillary device (siren, lock,
mag clamp, etc.).
⦁An incorrect connection may cause erroneous faults or serious damage to the module and will VOID ALL
WARRANTIES OR GUARANTEES.
The battery test procedure uses a special algorithm to prevent deep discharge and increase battery endurance. A
dynamic battery test is performed every ten minutes when mains power is present and a battery condition alarm
will be generated if the battery is either disconnected or shows poor capacity. Battery fault conditions will activate
the battery trouble input associated with the address assigned to the controller.
PRT-CTRL-DIN-1D | Protege GX DIN Rail Single Door Controller | Installation Manual 15

In addition to the dynamic battery test procedure, the controller performs a battery presence test every 60
seconds, which determines whether the presence of a backup battery is detected. Similarly, a battery condition
alarm will be generated and the battery trouble input associated with the address assigned to the controller will
also be activated.
To comply with EN 50131-1 only one battery can be connected and monitored per system. If more capacity is
required a single larger battery must be used.
Ethernet 10/100 Network Interface
The communication between the Protege system and the controller uses a 10/100 ethernet network operating the
TCP/IP protocol suite. The IP address of the controller can be configured using an LCD keypad terminal or via the
built-in web interface. The default IP address is set to a static address of 192.168.1.2 with a subnet mask of
255.255.255.0. These IP address settings are commonly used for internal networks.
Installing the module on an active network requires knowledge of the configuration and structure for the network.
Always consult the network or system administrator and ask them to provide you with a fixed IP address that can
be assigned to the module.
When installing an ethernet connection the module should be interfaced using a standard segment (<100m in
length) and should be connected to a suitable ethernet hub or switch:
Ethernet 10/100 Switch Hub Connection:
Temporary direct connections can be used for onsite programming by using a standard ethernet cable.
Ethernet 10/100 Direct Connection:
PRT-CTRL-DIN-1D | Protege GX DIN Rail Single Door Controller | Installation Manual 16

Door Access Control
The controller provides onboard access control allowing the connection of up to two RS-485 readers (configured
for entry and exit) to a single door.
The recommended cable types for RS-485 are:
⦁Belden 9842 or equivalent
⦁24 AWG twisted pair with characteristic impedance of 120ohm
Important:
⦁The card reader must be connected to the module port using a shielded cable.
⦁Do not connect the cable shield to an AUX-, 0V or V- connection on the module.
⦁Do not join the shield and black wires at the reading device.
⦁Do not connect the shield to any shield used for isolated communication.
⦁The shield connection must only be connected at one end of the cable in the metallic enclosure (frame
grounded).
All ICT readers are shipped with single LED mode set as default and are fully compatible with the Protege system,
such as tSec Standard Readers, tSec Mini Readers, etc.
RS-485 Reader Locations
As two RS-485 readers can be connected to the same RS-485 reader port, configuration of the green and orange
wires uniquely identifies the reader, and determines which is the entry reader and which is the exit reader.
Location Configuration
Entry Green and orange wires not connected.
Exit Green and orange wires connected together.
RS-485 Reader Connection (Entry Only)
The following diagram shows the connection of a single RS-485 reader connected in entry only mode.
Shield is frame
grounded at
one point
Shielded Cable
RED
BLACK
GREEN
WHITE
ORANGE
BROWN
BLUE
YELLOW
VIOLET
Shield not
connected
SB SA S- S+ Z2 V- Z1 NC C NO
RS-485 NETWORK 12VDC OUT INPUT 2 INPUT 1 RELAY 1
SHIELD
1 2
3 4
5 6
7 8
9 0
X
When the green and orange wires are not connected together, the reader defaults to an entry reader.
PRT-CTRL-DIN-1D | Protege GX DIN Rail Single Door Controller | Installation Manual 17

RS-485 Reader Connection (Entry/Exit)
The following diagram shows the connection of two RS-485 readers connected to provide an entry/exit
configuration.
Shield is frame
grounded at
one point
Shielded Cable
Shielded Cable
RED
BLACK
GREEN
WHITE
ORANGE
BROWN
BLUE
YELLOW
SHIELD
RED
BLACK
GREEN
SHIELD
WHITE
ORANGE
BROWN
BLUE
YELLOW
Shield not
connected
SB SA S- S+ Z2 V- Z1 NC C NO
RS-485 NETWORK 12VDC OUT INPUT 2 INPUT 1 RELAY 1
VIOLET
VIOLET
ENTRY
EXIT
1 2
3 4
5 6
7 8
9 0
X
The exit reader has the green and orange wires connected together.
A 330 ohm EOL (End of Line) resistor may be required to be inserted between the NA and NB terminals of the
reader and a second 330 ohm EOL resistor must then be inserted between the source NA and NB terminals at the
other end of the wiring.
PRT-CTRL-DIN-1D | Protege GX DIN Rail Single Door Controller | Installation Manual 18

Door Contact Connection
The controller allows the connection of 2 contacts for monitoring and controlling the door.
Typical Configuration of Door Monitoring Contacts:
Each of these inputs can be used for either the door function that is automatically assigned or as a general purpose
input. If used as general purpose inputs, make sure the inputs are not defined in the onboard reader setup.
Input Access Control Function Default Setting
Input 1 Door Contact, Port 1 Door Contact, Port 1
Input 2 REX Input, Port 1 REX Input, Port 1
When connected the REX input can be programmed to operate regardless of the door contact state. The REX
input can also be programmed to recycle the door alarm time to prevent nuisance alarms when the door is held
open to permit longer entry.
Lock Output Connection
The controller provides a connection for an electric strike lock using the integrated relay.
To use the lock output in conjunction with the onboard reader, the lock output for the door associated with the
reader port must be configured to be the desired lock output on the controller. This is not configured by default.
Typical Lock Output Connection:
PRT-CTRL-DIN-1D | Protege GX DIN Rail Single Door Controller | Installation Manual 19

Programming the Onboard Reader
The onboard reader is programmed in exactly the same way as any other reader module. It can be thought of as if
it were a normal reader expander module on a separate circuit board. By default the onboard reader is disabled.
To enable it, configure the address at which you want it to register using the Protege user interface. Note that any
physical reader expander module that is connected with the same address will be treated as a duplicate and will
fail to register, so care should be taken to ensure the address is unique.
The onboard reader uses inputs 1 and 2 as its door contact and REX respectively. Any inputs that are not
configured for used with the onboard reader may be used as general purpose inputs. If you wish to use an access
control input as a general input, you will need to disable the associated function input in the door programming
section of the Protege user interface.
The default settings are shown in the following table:
Input Access Control Function Default Setting
Input 1 Door Contact, Port 1 Door Contact, Port 1
Input 2 REX Input, Port 1 REX Input, Port 1
The controller's onboard reader port supports an RS-485 reader interface, allowing ICT RS485 readers to be
configured. This can be set in the Expanders | Reader Expanders menu.
PRT-CTRL-DIN-1D | Protege GX DIN Rail Single Door Controller | Installation Manual 20