Johnson Controls CK721-A User manual

24-10025-121 Revision A
March, 2016
CK721-A
Network Controller
version 3.3
installation and
operation manual

Copyright 2016
Johnson Controls, Inc.
All Rights Reserved
No part of this document may be reproduced without the prior permission of Johnson Controls, Inc.
If this document is translated from the original English version by Johnson Controls, Inc., all
reasonable endeavors will be used to ensure the accuracy of translation. Johnson Controls, Inc.
shall not be liable for any translation errors contained herein or for incidental or consequential
damages in connection with the furnishing or use of this translated material.
Due to continuous development of our products, the information in this document is subject to
change without notice. Johnson Controls, Inc. shall not be liable for errors contained herein or for
incidental or consequential damages in connection with furnishing or use of this material. Contents
of this publication may be preliminary and/or may be changed at any time without any obligation to
notify anyone of such revision or change, and shall not be regarded as a warranty.
Other Manufacturers’ Documentation
Johnson Controls does not duplicate documentation of other equipment manufacturers. When
necessary, Johnson Controls provides documentation that supplements that of other manufacturers.
When unpacking your equipment, keep all original manufacturer documentation for reference.
Technical Support
For factory technical support, Johnson Controls authorized field technicians or authorized dealer
representatives can contact Global Security Solutions Technical Support by phone at
[phone] or [phone], or by email at [email protected]. They
can also call the Field Support Center at [phone] or [phone] and use options 6, 1, 7.
End users and customers should contact their local Johnson Controls branch or authorized dealer
for any of their support needs (technical support, maintenance contracts, on-site field support,
P2000 Software Service Agreements, Service Partnerships, and so on). Visit
http://www.johnsoncontrols.com/location-finder to find your local Johnson Controls office.
For material returns contact the branch if the material was purchased through a Johnson Controls
branch or through the Product Sales Operations Team, if ordered through the Advanced Order
Management System (AOMS) and follow the RMA process; or contact the authorized dealer
representative where the material was purchased directly.
Acknowledgments
Metasys® and Johnson Controls® are trademarks of Johnson Controls, Inc. All other company and
product names are trademarks or registered trademarks of their respective owners.

Declaration of Conformity
United States: This equipment has been tested and found to comply with the limits for a Class B
digital device, pursuant to Part 15 of the FCC rules. These limits are designed to provide
reasonable protection against harmful interference in a residential installation. This equipment
generates, uses and can radiate radio frequency energy and, if not installed and used in accordance
with the instructions, may cause harmful interference to radio communications. However, there is
no guarantee that interference will not occur in a particular installation. If this equipment does
cause harmful interference to radio or television reception, which can be determined by turning the
equipment off and on, the user is encouraged to try to correct the interference by one or more of the
following measures:
• Reorient or relocate the receiving antenna.
• Increase the separation between the equipment and receiver.
• Connect the equipment into an outlet on a circuit different from that to which the receiver is
connected.
• Consult the dealer or an experienced radio/TV technician for help.
The user is cautioned that changes and modifications made to the equipment without approval of
the manufacturer could void the user's authority to operate this equipment.
Canada: CAN ICES-3 (B)/NMB-3(B)
European Union: This product complies with the requirements of the EMC Directive.
This equipment must not be modified for any reason and it must be installed as stated in the
Manufacturer’s instructions. If this shipment (or any part thereof) is supplied as second-hand
equipment, equipment for sale outside the European Economic Area or as spare parts for either a
single unit or system, it is not covered by the Directives.

UNDERWRITERS LABORATORIES® COMPLIANCE VERIFICATION SHEET
CK721-A SERIES INSTALLATION MANUAL
This product is listed under Underwriters Laboratories UL™ 1076 for Proprietary Burglar Alarm
Units and Systems, UL 294 for Access Control Systems Units and Underwriters Laboratories of
Canada ULC/ORD-C1076-86.
When installed at the site the following requirements must be met to comply with these standards.
1. Transient protection devices that are installed must not be removed or defeated.
2. The CK721-A shall be mounted in subassembly S300-DIN-L or S300-DIN-S.
3. The CK721-A in combination with the S300-DIN-L or S300-DIN-S must be connected to a UL
Listed Uninterruptible Power Supply that provides a minimum of 24 hours of AC emergency
power.
4. The tamper switch must be enabled at all times.
5. Systems requiring the use of network hubs, routers, bridges, network switches or the like shall
guarantee these devices are UL Listed for fire and shock in the category control number (CCN)
NWGQ and/or EMRT. These devices shall be installed in a temperature-controlled
environment. The temperature-controlled environment must be maintained between 13 - 35°C
(55 - 95°F) and relative humidity of 85 ± 5% by the HVAC system. Twenty-four hour standby
power shall be provided for the HVAC system.
6. The installer shall incorporate a supply line transient suppression device complying with the
Standard for Transient Voltage Surge Suppressors, UL 1449, with a maximum rating of 330 V.
Supply line transient suppression device is to be used with the power supply to the network
hub(s) routers, bridges and/or network switches.
7. External network hubs, routers, bridges or network switches must use signal line transient
suppression devices complying with the Standard for Protectors for Data Communications and
Fire Alarm Circuits, UL 497B, with a maximum marked rating of 50V.
8. In the CK721-A user-interface, the “Network Polling [LAN]” parameter must not exceed 90
seconds.
9. Modems shall not be used for primary connection to the host computer. Modems have only
been investigated by UL for supplementary use.
10. The following elevator interfaces have not been investigated by Underwriters Laboratories:
Kone, Otis, and ThyssenKrupp.
11. Do not connect equipment to an AC power source that is controlled by a switch.

CK721-A Installation and Operation Table of Contents
24-10025-121 Rev. A
i
TABLE OF CONTENTS
Chapter 1: Introduction
Other Documentation 1-1
Key Terms 1-2
Unpacking the Equipment 1-4
General Description 1-5
CK721-A Module 1-5
Enclosures 1-6
S300-DIN Modules 1-7
Additional Equipment 1-8
CK721-A System Specifications (All Panels) 1-9
CK721-A Panel Configuration 1-10
Expanded Address S300 Bus Configuration 1-10
Legacy Address S300 Bus Configuration 1-11
System Configuration Example 1-11
Maximum Enclosure Distance 1-12
Network Communications 1-14
TCP/IP 1-14
10/100Base-T Ethernet 1-15
Communication Modes 1-15
CK721-A/P2000 Server Encrypted Communications 1-16
PIV and PIV-I Smart Card (128-bit) Support 1-18
128-Bit Badge Number Requirements 1-18
HID pivCLASS PIV/PIV-I Readers 1-18
HID Hardware PAM (M2000) Solution 1-19
HID PIV/PIV-I Reader Connecting to RDR2S-A or RDR8S Solution 1-20
OSDP Reader Support 1-22
Chapter 2: CK721-A and S300 DIN Enclosures
CK721-A 2-1
LEDs on the CK721-A 2-2
Binary Output 2-3

CK721-A Installation and Operation Table of Contents
24-10025-121 Rev. A
ii
Setting the End-of-Line Switch 2-3
Lithium Battery 2-4
Input Power 2-5
RS485 2-5
Binary Input 2-6
Connecting the Network 2-7
RS232 2-8
Large Enclosure (S300-DIN-L) 2-10
Wiring CK721-A and Modules 2-11
Small Enclosure (S300-DIN-S) 2-13
Verifying DC and Chassis Ground 2-14
Installing CK721-A Module 2-15
No Enclosure 2-16
DIN Rail Mounting 2-16
+24 VDC Connector 2-17
Power Wiring 2-17
Ground Wiring 2-18
Chapter 3: S300 Expansion Enclosures
S300-DIN Enclosures 3-1
S300 Expansion Enclosures 3-1
Chapter 4: User Interface
Important Notes 4-1
Notes on Encryption 4-2
Principle of Operation 4-2
Communicating with the User Interface 4-3
Using your Terminal Emulation 4-4
Navigating Through the User Interface 4-5
Write Flash 4-6
Clearing Database 4-7
Clearing the Flash Memory 4-8
Router Configuration 4-8
Log Out 4-11
Rebooting the Panel 4-11

CK721-A Installation and Operation Table of Contents
24-10025-121 Rev. A
iii
Basic Panel Configuration 4-11
Panel Menu 4-11
Panel 4-12
Direct Programming of the CK721-A 4-14
Panel Screen Description 4-14
Terminal 4-22
RDR8S Input Point and Output Point Disassociation 4-37
RDR2S-A Input Point and Output Point Disassociation 4-38
Configuring PIN Codes 4-39
Assisted Access 4-43
Panel Entry/Exit 4-45
Elevator Access Control 4-46
Cabinet Access Control 4-69
Elevator or Cabinet Terminal 4-70
Output 4-74
Holiday 4-76
Access Group 4-78
Elevator Access Group 4-79
Control Door 4-80
Panel Soft Alarm 4-81
Password Change 4-82
Reboot 4-83
Badge 4-84
Input 4-88
Time Zone 4-92
Card Events 4-94
System Information 4-98
Control Output 4-101
Change Date 4-103
Chapter 5: Maintenance
Routine Maintenance 5-1
Impaired Performance Conditions 5-1
Testing Procedure 5-2
Check Backup Battery Operation 5-2
Lithium Battery Replacement 5-2

CK721-A Installation and Operation Table of Contents
24-10025-121 Rev. A
iv
Field Servicing 5-3
Troubleshooting 5-3
Appendix A: Expanded Address S300 Bus
Appendix B: Performance Analysis
Appendix C: Grounding and Connectors
Cable Grounding C-1
“D-Type” Connectors C-2
Non “D-Type” Grounding Connections C-3
Installations in the USA C-3
Installations in Europe C-4
Card Reader Unit Grounding C-5
Appendix D: Door Open/Aux Access Supervision
Purpose of Supervised Inputs D-1
Configuring the S300-SIO8 D-2
Wiring to the Reader Module D-2
Appendix E: Database Flash Backup from the Host
Appendix F: Using a Keypad Reader on a Panel
Invoking Access Requests from a Keypad F-1
Invoking Air Crew Access Requests from a Keypad F-2
Invoking Timed Overrides from a Keypad F-3
Invoking Panel Card Events from a Keypad F-7
Quick Guide to Using Keypad Readers F-11
Appendix G: Configuring SSH and SFTP Clients
PuTTY Client G-1
WinSCP Client G-7
Appendix H: Wiring Concepts
Wiring Readers H-1
Wiring for Door Controls H-1
Door Strike Wiring H-2
Output Wiring H-4

CK721-A Installation and Operation List of Figures
24-10025-121 Rev. A
v
LIST OF FIGURES
Figure 1-1: Sample CK721-A System Configuration 1-12
Figure 1-2: 10/100Base-T 4x5 Rule 1-13
Figure 1-3: CK721-A/P2000 Server Encrypted Communications 1-16
Figure 1-4: HID Hardware PAM (M2000) 1-20
Figure 1-5: System with P2000 and CK721-A Controller 1-21
Figure 1-6: System Diagram 1-22
Figure 2-1: Wiring Between RS485B and RDR2S-A Module 2-6
Figure 2-2: Wiring Between Binary Input 1 and Trouble Pin 2-6
Figure 2-3: Hub to CK721-A Wiring 2-7
Figure 2-4: Large Enclosure with Installed Components 2-10
Figure 2-5: One CK721-A Module Mounted in a Large Enclosure 2-10
Figure 2-6: One CK721-A Module and Two RDR2S-A Modules Mounted in a
Large Enclosure 2-11
Figure 2-7: Daisy Chain Module Wiring for S300-DIN-L 2-12
Figure 2-8: Small Enclosure with Installed Components 2-14
Figure 2-9: One CK721-A Module Mounted in a Small Enclosure 2-15
Figure 2-10: CK721-A Module Mounted on a DIN Rail. 2-17
Figure 2-11: +24 VDC Connector (Part of the DC Power Harness) 2-17
Figure 2-12: Wiring Multiple Modules - Overview 2-18
Figure 4-1: CK721-A Controller/P2000 Host Connection Methods 4-3
Figure 4-2: Static Route Examples 4-10
Figure 4-3: Assisted Access Timing Diagram 4-44
Figure 4-4: KONE KIC Controller with Multiple Elevator Groups 4-51
Figure 4-5: KONE KIC Controller with Multiple Elevator Groups and Multiple
CK721-A Controllers 4-52
Figure 4-6: Primary and Backup KONE IP Controllers 4-53
Figure 4-7: ThyssenKrupp Touch Screen 4-54
Figure 4-8: ThyssenKrupp Building Elevator Layout 4-56
Figure 4-9: ThyssenKrupp Serial Elevator Integration System Architecture 4-57
Figure 4-10: Otis Serial E.M.S.Server-Client Elevator Configuration Layout 4-59
Figure 4-11: Otis E.M.S. Master-Slave Elevator Configuration Layout 4-62

CK721-A Installation and Operation Table of Contents
24-10025-121 Rev. A
vi
Figure 4-12: Using Multiple Time Blocks 4-92
Figure B-1: CK721-A Access Time Performance Graph B-2
Figure C-1: Example of D-Type Connector Grounding C-2
Figure C-2: Example of Grounding Shielded Cable at Both Ends C-4
Figure C-3: Example of Grounding Shielded Cable at Only One End C-5
Figure D-1: Input/Output Contact Wiring D-3
Figure E-1: CK705/CK720 Write DB to Flash Dialog Box E-1
Figure H-1: Maximum Distance Between Readers and S300 Expansion
Enclosures H-1
Figure H-2: Example of a Typical CK721-A System H-2
Figure H-3: Field Installed Metal Oxide Varistor H-3
Figure H-4: Field Installed Metal Oxide Varistor H-4