Idemia MorphoAccess SIGMA Extreme Series Instruction manual

IDEMIA DOCUMENT –REPRODUCTION AND DISCLOSURE PROHIBITED
MorphoAccess®SIGMA
Extreme Series
Quick User Guide
2017_2000024419 –V4
All descriptions, illustrations, and specifications in this brochure should be
considered approximate and may relate to optional equipment or feature

IDEMIA DOCUMENT –REPRODUCTION AND DISCLOSURE PROHIBITED
Table of Contents
IDEMIA - 2017_2000024419 –V42
Color
Step
Content
One
Overview
Two
Wiring
Three
Communication
Four
SDAC (Single Door Access Control)
Five
Administration
Six
Software
Seven
Enrollment
Eight
Optional features

IDEMIA DOCUMENT –REPRODUCTION AND DISCLOSURE PROHIBITED
Status LED
The MorphoAccess®SIGMA Extreme Series
terminal has a simple and ergonomic man-
machine interface designed for access
control and Time & Attendance, with
fingerprint recognition, contactless card
authentication and PIN authentication
options.
Product Overview
IDEMIA - 2017_2000024419 –V43
(for configuration with a
USB mass storage key)
Power consumption shall
not exceed 200mA
Standard (SIGMA…)
Fake Finger Detection (SIGMA FFD…)
5“ WVGA
touchscreen
LCD
Embedded web server
(configuration & enrolment)
HID®iCLASS™ 13,56MHz (SIGMA … ICLASS)
Or MIFARE™ DESFire™ 13,56MHz (SIGMA … MULTI)
Or HID®Prox®125kHz (SIGMA … PROX)
USB host port
Speaker
Optional Wi-Fi™
USB adaptor
(plugged inside
the terminal)
Step one : overview
Microphone
Camera
RF
Card reader
Optical biometric
sensor
Light Sensor

IDEMIA DOCUMENT –REPRODUCTION AND DISCLOSURE PROHIBITED
Product packaging checklist:
MorphoAccess®SIGMA Extreme Checklist
IDEMIA - 2017_2000024419 –V44
Step one : overview
QTY
ITEM
1
MorphoAccess
® SIGMA Extreme terminal
1
Wall Mounting Plate
1
Documentation package
Electronic documentation is provided in Adobe®Acrobat®format (PDF). Adobe®Acrobat®Reader is available at http://www.adobe.com.

IDEMIA DOCUMENT –REPRODUCTION AND DISCLOSURE PROHIBITED
To secure an access, IDEMIA recommends installing the MorphoAccess®SIGMA Extreme Series terminal as a part of a typical Access
Control system, which consists of the components described below.
Terminal Implementation
IDEMIA - 2017_2000024419 –V45
Step one : overview
The MorphoAccess®SIGMA Extreme Series terminal
Its role is to process the access request from the user. It performs access right
checks using one-to-many biometric identification or one-to-one biometric
verification, and/or RF card authentication, and/or PIN check.
A Door Electric Latch or equivalent (3rd party product)
The Access Controller sends a command to activate the latch if the access is granted (i.e. if the individual's User ID is listed in the Controller
authorized user List). Control of the latch is made through a dry contact..
An Alarm (3rd party product)
The MorphoAccess®terminal sends a message to the Access Controller, to activate
the Alarm as soon as a malicious activity, such as tamper or pulling, is detected
An Access Controller (3rd party product)
The MorphoAccess®terminal interfaces with an Access Controller (using
TCP/IP, Wiegand, Data Clock, RS485 or RS422 protocol):
After access request, the MorphoAccess®terminal sends the result of user’s
access rights to the Access Controller (this message contains at least the User
ID)
The Access Controller performs additional checks, and returns the final
decision (access granted/denied) to the MorphoAccess®terminal (which
displays the result to the user), and to the door controller which opens the door
(if the access has been granted).
A
B
B
D
D
C
C
A

IDEMIA DOCUMENT –REPRODUCTION AND DISCLOSURE PROHIBITED
User’s fingerprints can be stored in the terminal database, in contactless card or in an external server
database, to enable biometric check.
Typical Access Control Process
IDEMIA - 2017_2000024419 –V46
On Access
Request, the
terminal checks
user’s access
rights using a
biometric check.
If the result of the
check is successful
(user recognized ),
a message is sent
to the Central
Access Controller
for additional
access rights
check.
If the user is
allowed to access
to the protected
zone, the central
access controller
returns an "access
granted" message
to the terminal and
a “open” command
to the gate
controller.
Step one : overview

IDEMIA DOCUMENT –REPRODUCTION AND DISCLOSURE PROHIBITED
The terminal can be configured in one of the modes described in the table below
Access Control Modes
IDEMIA - 2017_2000024419 –V47
Identification
Authentication
Multifactor
Proxy
Access
control
a
pplication
Application that runs
on the terminal when
it starts.
Application that runs
on the terminal when
it starts.
Application that runs
on the terminal when
it starts.
Remote application
that controls the
terminal through
network commands
Access
control
triggering
event
A
user places a
finger on the
biometric sensor.
A user places
a
contactless
card in
front of
the reader. (*)
Both
Identification
and Authentication
triggers are enabled.
Triggering events are
selected
by the
remote application
Biometric
check (if
enabled)
The user’s captured
fingerprint is
matched against all
fingerprints in the
terminal database.
The user’s captured
fingerprint is
matched against
their reference
fingerprint.
(**)
As per Identification
or Authentication,
depending on the
triggering event
Selected
by the
remote application
Decision
to
display
result
signal to user
By Identification
standalone
application or
controller feedback
By Authentication
standalone
application or
controller feedback
By
running
s
tandalone
application or
controller
feedback
By remote
application
(* ) or the user enter their Identifier on the keypad, or a Wiegand frame is received from an external device
(**) stored on the contactless card or in the user record in the terminal’s local database
Step one : overview

IDEMIA DOCUMENT –REPRODUCTION AND DISCLOSURE PROHIBITED
General precautions
Do not expose the terminal to extreme temperatures.
When the environment is very dry, avoid synthetic carpeting near the MorphoAccess®SIGMA Extreme
terminal, to reduce the risk of unwanted electrostatic discharge.
Areas containing combustibles
Do not install the terminal in the vicinity of gas stations or any other installation containing flammable or
combustible gases or materials. The terminal is not designed to be intrinsically safe.
The terminal should be installed in controlled lighting conditions
Avoid biometric sensor exposure to a blinking light
Avoid direct exposure of the biometric sensor to sunlight or to UV lights.
Deployment Environments
IDEMIA - 2017_2000024419 –V48
Operating temperature
-
20°to + 60 °C (-4°to 140°F)
Operating
humidity
10 % < RH < 95 % (non condensing)
Storage
temperature
-
25°to + 70 °C (-13°to 158°F)
Storage
humidity
5% < RH < 95 %
IP code
IP65 rated
Step one : overview
In exceptional circumstances of ambient temperature and sun exposure, the screen may feel hot

IDEMIA DOCUMENT –REPRODUCTION AND DISCLOSURE PROHIBITED
Wiring Overview
IDEMIA - 2017_2000024419 –V49
Power supply from electrical source shall be switched off before starting the installation.
Before proceeding, make sure that the person in charge of installation and connections, is properly connected to
earth, in order to prevent Electrostatic Discharges (ESD).
All connections of the terminal are of SELV (Safety Electrical Low Voltage) type.
Step two : wiring
Backup of the Date/Time of the terminal: the volatile settings (such as date/time) of the terminal are protected against
power failure, by a dedicated component during a least 24 hours (at 25oC) without external power supply.
RJ-45 : Ethernet & PoE
1
ETH TX+
Orange / White
2
ETH TX
-
Orange
3
ETH RX+
Green / White
4
ETH VPORT+
Blue
5
ETH VPORT+
Blue / White
6
ETH RX
-
Green
7
ETH VPORT
-
Brown / White
8
ETH VPORT
-
Brown
Shell
ETH GND
Drain wire (no color)
Wiegand IN & Wiegand OUT
1
WIEGAND_LEDOUT1
Blue
2
WIEGAND_LEDOUT2
Blue / Red
3
WIEGAND_IN1
White / Red
4
WIEGAND_OUT0
Green
5
WIEGAND_OUT1
White
6
WIEGAND_IN0
Green / Red
8
WIEGAND_GND
Black / Red
RS-422 and 485
7
RS422/485_GND
Black / Red
9
RS422_RX+
Blue / Black
10
RS422/485_TX
-
Green / White
11
RS
422_RX-
Blue / White
12
RS
422/485_TX+
Green / Black
Power supply & Tamper switch
19
RELAY_NC
Orange / White
21
RELAY_NO
Yellow / White
22
RELAY_COM
Grey / White
23
SWITCH_PIN1
Light Blue
24
SWITCH_PIN2
Pink
25
Power + 12V
Red
26
Power GND
Black
RJ45
GPIO
13
GPI2
Orange / Black
14
GPO2
Yellow
/ Red
15
GPI1
Orange / Red
16
GPO1
Yellow / Red
17
GPI0
Orange
18
GPO0
Yellow
20
GPIO_GND
Black
/ Red

IDEMIA DOCUMENT –REPRODUCTION AND DISCLOSURE PROHIBITED
Power Wiring
IDEMIA - 2017_2000024419 –V410
External Power Supply: 12-24 Volts (regulated and filtered) 1 Amp min @12V, CEE/EEC EN60950 standard
compliant. A12 Volts power supply compliant with SIA's Wiegand standard will also be suitable. If sharing
power between devices, each unit must receive 1A (e.g. two units would require a 12vDC, 2A supply).
Power Over Ethernet (POE): power can be provided through RJ-45 connector using
a PSE (Power Sourcing Equipment) IEEE 802.3af or IEEE802.3at type 1 compliant.
The terminal is a Class 0 (15.4W) PD (Powered Device).
Step two : wiring
25 Power + 12V Red
26 Power GND Black
PoE Injector Specs
Output Voltage: 48VDC
Output Current: 0.32A
Power: 15.36W
A battery backup or uninterrupted power supply (UPS) with built-in surge protection is recommended.
WARNING: Under powering may cause memory and data corruption; over powering may cause hardware damage.
Both of these situations will void the warranty
Gauge
AWG
Diameter
(mm)
Maximum drop voltage
(V)
at 1m
at 5m
at 10m
20 0.81 0.03 0.17 0.33
22 0.64 0.05 0.26 0.53
24 0.51 0.08 0.42 0.84
IDEMIA recommends using a gauge AWG20 for 12V power supply.
The voltage measured on the product block connector of the terminal
must be equal to 12V-24V (-15% / +10%).
The table at the right, shows the maximum voltage drop between the
power source and the terminal, depending on the length of the cable.
RJ45

IDEMIA DOCUMENT –REPRODUCTION AND DISCLOSURE PROHIBITED
RS-485 Communication
IDEMIA - 2017_2000024419 –V411
7RS422/485_GND Black / Red
10 RS422/485_TX- Green / White
12 RS422/485_TX+ Green / Black
IMPORTANT:
A maximum of 31 devices may be installed on the same line.
The maximum total cable length is 4000 ft. (1200m).
The cable must be dedicated to this installation and not used for any other purpose
Step three : communications
RS-232
from the
Com Port
RS-232 to
RS-485
converter RS-485 to
1200m (4000ft)
For RS-485 installations, the cable should be run in a daisy-
chain configuration (i.e. converter > position 1 > position 2 >
position 3, etc.).
Use CAT-5 UTP (or better) cable (shielded recommended) with a characteristic impedance of 120 ohms.
AWG 24 should be the minimum wire gauge used.
Choose one twisted pair of conductors to use for RS422/485_TX+ (Green / Black wire - 12) and RS422/485_TX- (Green /
White wire - 10). Another conductor should be used for Signal Ground (Black / Red wire - 7).
Choose a RS-232 to RS-485 converter that supports Sense
Data to switch from Send to Receive mode.

IDEMIA DOCUMENT –REPRODUCTION AND DISCLOSURE PROHIBITED
RS-422 Communication
IDEMIA - 2017_2000024419 –V4
12
7RS422/485_GND Black / Red
12 RS422_RX+ Blue / Black
10 RS422/485_TX- Green / White
11 RS422_RX- Blue / White
12 RS422/485_TX+ Green / Black
Step three : communications
RS-232
from the
Com Port
RS-232 to
RS-422
converter RS-422 to
1200m (4000ft)
The maximum total cable length is 4000 ft. (1200m).
The cable must be dedicated to this installation and not used for any other purpose
For RS-422 installations, the cable should be run in a point to
point configuration (i.e. PC > converter > terminal)
Use CAT-5 UTP (or better) cable (shielded recommended)
with a impedance of 120 . AWG 24 should be the minimum
wire gauge used.
Choose one twisted pair of conductors to use for RS422/485_TX+ (Green / Black wire - 12) and RS422/485_TX- (Green /
White wire - 10).
Choose one twisted pair of conductors to use for RS422_RX+ (Blue / Black wire - 12) and RS422_RX- (Blue / White wire -
11).
Another conductor should be used for Signal Ground (Black / Red wire - 7).

IDEMIA DOCUMENT –REPRODUCTION AND DISCLOSURE PROHIBITED
Ethernet and Wireless LAN
IDEMIA - 2017_2000024419 –V413
1
ETH TX+
Orange / White
2
ETH TX
-
Orange
3
ETH RX+
Green / White
4
ETH VPORT+
Blue
5
ETH VPORT+
Blue / White
6
ETH RX
-
Green
7
ETH VPORT
-
Brown / White
8
ETH VPORT
-
Brown
Shell
ETH GND
Drain wire (no color)
Step three : communications
RJ45
LAN Ethernet
Management
station
Wireless
WLAN option
IDEMIA wireless enabled
devices support 802.11b and
802.11g standards. WEP
Open, WPA and WPA2 are
supported.
Use a category 5 shielding cable (120 Ohms) or better. It is strongly recommended
to insert a repeater unit every 90m.
Static mode is enabled by default on MorphoAccess®SIGMA Extreme terminals
(factory setting) : IP=192.168.1.10, Gateway=192.168.1.254, Mask= 255.255.254.0
Terminal Block Ethernet connection
Extreme care must be taken while connecting Ethernet wire to the block board
since low quality connection may strongly impact Ethernet signal sensibility.
Connect Rx+ and Rx- with the same twisted-pair wire (and to do the same with
Tx+/Tx- and the other twisted-pair wire).

IDEMIA DOCUMENT –REPRODUCTION AND DISCLOSURE PROHIBITED
Wiegand Communication
IDEMIA - 2017_2000024419 –V414
1
WIEGAND_LEDOUT1
Blue
2
WIEGAND_LEDOUT2
Blue / Red
3
WIEGAND_IN1
White / Red
4
WIEGAND_OUT0
Green
5
WIEGAND_OUT1
White
6
WIEGAND_IN0
Green / Red
8
WIEGAND_GND
Black / Red
Step three : communications
Three-conductor wire (shielded recommended) is required for Data 0, Data 1, and WGND.
Use 18-22AWG cable in a homerun configuration from each unit to theAccess Control Panel (ACP).
Connect WIEGAND_OUT0 (Green wire –Pin 14) to ACP Data 0,
Connect WIEGAND_OUT1 (White wire –Pin 16) to ACP Data 1,
Connect WIEGAND_GND (Black / Read wire –Pin 20) to ACP reader common (0vDC).
For 18 AWG, the maximum cable distance is 500 ft. (150m); for 20 AWG, the maximum is 300 ft. (90m); for 22
AWG, the maximum is 200 ft. (60m).
All controller output shall be open drain or 5V+/-5%
18
GPO0
Yellow
Wiegand Out
Wiegand In
LED
Out
LED In

IDEMIA DOCUMENT –REPRODUCTION AND DISCLOSURE PROHIBITED
Wiegand Communication (continued)
IDEMIA - 2017_2000024419 –V415
1
WIEGAND_LEDOUT1
Blue
2
WIEGAND_LEDOUT2
Blue / Red
3
WIEGAND_IN1
White / Red
4
WIEGAND_OUT0
Green
5
WIEGAND_OUT1
White
6
WIEGAND_IN0
Green / Red
8
WIEGAND_GND
Black / Red
Step three : communications
Important
By default, the Wiegand output format is not enabled. Wiegand
output must be configured before connecting to the ACP.
Note
On installation, the system administrator will be prompted to
select either a pre-existing Wiegand frame format or create a
custom format, and upload it to the unit before the first use.
Data Clock
The Wiegand port also supports the Clock & Data protocol.
The wiring is described below.
18
GPO0
Yellow
Data Clock Out
Data Clock In
LED
Out
Card present
(Legacy Morpho Mode)
Example Format Information
Type: Standard 26-bit
Alt Site Code and Fail Site Code Range: 0-255
Template ID Number Range: 1-65535
Extended ID Number Range: N/A
ID Start Bit: 9
Length of ID: 16
Site Code Start bit: 1
Length of Site Code: 8
Start Bit length : 0
Data
Clock
Clock
Data

IDEMIA DOCUMENT –REPRODUCTION AND DISCLOSURE PROHIBITED
15
GPI1
Orange / Red
16
GPO1
Yellow / Red
17
GPI0
Orange
18
GPO0
Yellow
Single Door Access Control (SDAC)
IDEMIA - 2017_2000024419 –V416
19
RELAY_NC
Orange / White
21
RELAY_NO
Yellow / White
22
RELAY_COM
Grey / White
If door contact is not used, GPI1 (15) and GPO1 (16) shall be connected together
Power
supply
Single Door Access Control (SDAC) wiring sample : with Push Button
Deadbolt / Door strike
Door contact
Step four: SDAC
Power
supply
Push Button
Power supply from electrical source shall be switched off before starting the installation.
See details on next page
for relay connection

IDEMIA DOCUMENT –REPRODUCTION AND DISCLOSURE PROHIBITED
19
RELAY_NC
Orange / White
21
RELAY_NO
Yellow / White
22
RELAY_COM
Grey / White
Internal Relay Wiring
IDEMIA - 2017_2000024419 –V417
RJ45
Inductive load management requires a parallel diode for a better contact lifetime.
Warning
The internal relay is limited to a maximum current of 1A @ 30V. If the deadbolt / door strike draws
more than 1A, damage to the device may occur. If the deadbolt / door strike load exceeds 1A, an
external relay must be used.
The internal relay is designed for 100.000 cycles. If more cycles are needed, an external relay
driven by GPO must be used.
Power supply
VCC < 30V
Imax < 1A
Deadbolt /
Door strike
Push Button
on other side
of the door
Protection Diode
Warning
This is recommended only for
small or stand-alone
applications where access
control panels are not available.
In this mode it is strongly
recommended to monitor the
Tamper Detection of the device
Example for Normally
Open connection
Step four: SDAC

IDEMIA DOCUMENT –REPRODUCTION AND DISCLOSURE PROHIBITED
The First BootAssistant (FBA) helps the administrator to
configure all the devices fundamental settings.
It is automatically launched at first terminal startup, but can
also be launched on demand, though administration menu
(i.e. to reinitialize terminal main settings)
Local Administration - First Boot Assistant
IDEMIA - 2017_2000024419 –V418
Main settings managed by FBA
Date & Time & Time Zone Settings
Trigger Event: select event(s) to be processed
as an access request by a user
Language Settings: user interface language
selection,
Network Settings: LAN or WLAN parameters
Password Settings: terminal administration
password modification
Boot assistant at next boot: Display this
screen on next boot.
Protocol Settings: select communication
protocol : Bioscrypt 4G terminals, MA 500 and J
Series (MA2G), or MorphoAccess SIGMA
(MA5G)
Step five: Administration

IDEMIA DOCUMENT –REPRODUCTION AND DISCLOSURE PROHIBITED
Local Administration –Using Touch Screen Menu
IDEMIA - 2017_2000024419 –V419
Frequently used icons
+ password
(default: 12345)
For security reasons, it
is highly recommended
to change the devices
default password to a
custom password.
Exit or Go
Home
Validation or
confirmation
Cancel
or refuse
Back (and
Cancel)
User
management
Terminal
security
Multimedia
management
Communication
settings
Information
about terminal
Terminal
settings
Restart
terminal
USB key
management
Step five: Administration

IDEMIA DOCUMENT –REPRODUCTION AND DISCLOSURE PROHIBITED
Administration with MorphoBioToolBox application
IDEMIA - 2017_2000024419 –V420
Terminal administration with MorphoBioToolBox (MBTB) application
Step five: Administration
The MorphoAccess®SIGMA
Extreme Series terminal can be
configured using a dedicated
(Windows) application :
MorphoBioToolBox
Please note that this application has
an embedded User Guide (Help
menu).
North and South America :
E-mail [e-mail]
with your name, phone number, serial
number of your MA SIGMA Extreme and
“Please Send Link for MBTB” in the
subject of your e-mail.A link to download
the software will be e-mailed to you.
Other countries : please contact your
sales representative.