Nedap MACE SMART User manual

MACE Smart
installation guide
2018-01-30 | v1.03 | 5286484

MACE SMART | INSTALLATION GUIDE
Content
2/34
CONTENT
1 INTRODUCTION _______________________________________________________ 3
1.1 MACE__________________________________________________________ 3
1.2 FIRMWARE VERSIONS ____________________________________________ 3
2 INSTALLATION ________________________________________________________ 4
2.1 SAFETY INSTRUCTION ____________________________________________ 4
2.2 MOUNTING INSTRUCTIONS _______________________________________ 4
3 CONNECTIONS ________________________________________________________ 6
3.1 POWER SUPPLY _________________________________________________ 6
3.2 COMMUNICATION _______________________________________________ 6
3.2.1 RS485___________________________________________________ 6
3.2.2 WIEGAND ________________________________________________ 7
3.2.3 MAGSTRIPE ISO7811/2 ____________________________________ 8
3.3 LED CONTROL __________________________________________________ 9
3.4 INPUTS _______________________________________________________ 10
3.5 OUTPUTS______________________________________________________ 11
3.6 TAMPER SWITCH _______________________________________________ 12
3.7 NEDAP ANTENNA INTERFACE_____________________________________ 12
4 READER CONFIGURATION______________________________________________ 13
4.1 CONFIG SOFTWARE_____________________________________________ 13
4.2 OPTIONS ______________________________________________________ 14
4.2.1 USER MODE _____________________________________________ 14
4.2.2 SEND CONFIG ___________________________________________ 14
4.2.3 READ CONFIG ___________________________________________ 14
4.2.4 SETUP BAUDRATE ________________________________________ 14
4.2.5 SETUP OSDP DEVICE ADDRESS _____________________________ 14
4.2.6 RESET CONFIG ___________________________________________ 14
4.3 SETTINGS _____________________________________________________ 15
4.3.1 GENERAL _______________________________________________ 15
4.3.2 LED/BUZZER ____________________________________________ 16
4.4 READER SETTINGS ______________________________________________ 17
4.4.1 BLE ____________________________________________________ 17
4.4.2 NFC ____________________________________________________ 19
4.4.3 QR-CODE _______________________________________________ 19
4.4.4 DESFIRE ________________________________________________ 20
4.4.5 MIFARE _________________________________________________ 21
4.4.6 OTHER ID TYPES _________________________________________ 22
4.5 COMMUNICATION OUTPUT ______________________________________ 23
4.5.1 SERIAL__________________________________________________ 23
4.5.2 WIEGAND/MAGSTRIPE ____________________________________ 25
4.6 MISCELLANEOUS _______________________________________________ 29
4.6.1 FIRMWARE UPDATE ______________________________________ 29
4.6.2 KEY UPDATE_____________________________________________ 29
A TECHNICAL SPECIFICATIONS ___________________________________________ 30
B PART NUMBERS ______________________________________________________ 31
C FCC AND ISED DECLARATIONS__________________________________________ 32
D DISCLAIMER _________________________________________________________ 33
E DOCUMENT REVISION_________________________________________________ 34

MACE SMART | INSTALLATION GUIDE
Introduction
3/34
1INTRODUCTION
1.1 MACE
MACE is an acronym for Mobile Access Control Enabler. MACE is a platform
consisting of readers, apps and a cloud based server that enables the use of
smartphones to identify people.
The MACE Smart reader supports Bluetooth and NFC to identify virtual credentials
from an iPhone or Android smartphone with the NEDAP MACE app installed.
MACE can be used in combination with any access control system or any other
system that requires the swift identification of people, like parking management
systems or registration systems.
Please remember to fill out the ‘How to Order Guide’ to prepare your MACE
installation and order virtual MACE credentials that will be read by the MACE readers
you plan to install.
1.2 FIRMWARE VERSIONS
The MACE Smart reader supports different firmware versions. Below an overview of
the available firmware versions and their key features.
STANDARD firmware (MaceSmart_v1xx.nis):
RS485 communication using CR/LF protocol
Wiegand communication output
Magstripe (clock & data) communication output
LED and buzzer control automatic or remote through digital inputs.
OSDP firmware (MaceSmartOSDP_v1xx.nis):
RS485 communication according to the SIA OSDP v2.1.6 standard
Secure Channel Protocol supported
LED and buzzer control through OSDP commands
Default the STANDARD firmware is installed.
Perform a firmware update using the MaceConfigTool software. See chapter 4.6.1.
The firmware update also allows to change from STANDARD to OSDP (or vice versa).

MACE SMART | INSTALLATION GUIDE
Installation
4/34
2INSTALLATION
2.1 SAFETY INSTRUCTION
The following safety precautions should be observed during normal use, service and
repair:
The MACE Smart reader may only be installed and serviced by qualified
service personnel.
Disconnect the power supply before (dis)connecting any wires, MACE is NOT
hot-swappable, so when making or changing connections, power must be
switched OFF.
The cable shield shall be connected with safety ground and the metal case of
the external device(s).
To be sure of safety, do not modify or add anything to the MACE Smart reader
other than mentioned in this installation guide or indicated by NEDAP N.V.
2.2 MOUNTING INSTRUCTIONS
The MACE can be mounted to any surface, including directly to metal. See the
picture below for details about the dimensions.
Figure 1: MACE dimensions (mm)

MACE SMART | INSTALLATION GUIDE
Installation
5/34
Mount the base-plate on the required location.
Make sure that the reader is positioned such that the screw hole is located at the
bottom side of the reader.
Ensure that it is placed correctly covering the cable entry hole. Properly fix the base-
plate into its position using the 2 screws. When mounting on a stone or concrete
wall drill 5mm holes for the plugs. When mounting on wood, drill with 2.5mm.
Install the MACE Smart reader onto the base-plate:
1Feed the cable through the cable entry hole and place connectors.
2Attach the top of the MACE Smart reader onto the base-plate.
3Fix the assembly using the screw on the bottom.
Figure 2: MACE installation
2
1
3

MACE SMART | INSTALLATION GUIDE
Connections
6/34
3CONNECTIONS
See below an overview of the connections.
Nedap antenna interface K1-6 K2-1 RS485 A (-)
Beeper_IN* K1-5 K2-2 RS485 B (+)
Led_UL_IN* K1-4 K2-3 Ground
Led_NA_IN* K1-3 K2-4 Data-1 / Data
Ground K1-2 K2-5 Data-0 / Clock
Power supply 12 - 24VDC K1-1 K2-6 Tamper switch (normally closed)
K2-7 Tamper switch (common)
3.1 POWER SUPPLY
The MACE Smart reader requires DC power supply in the range from 12 – 24V.
Maximum current consumption is 0.2A @ 12VDC, 0.1A @ 24VDC.
Connections:
K1-1 Power supply 12 - 24VDC
K1-2 Ground
3.2 COMMUNICATION
3.2.1 RS485
The MACE Smart reader has a RS485 interface for communication with a host system
or to configure the reader settings. RS485 is a 2-wire half-duplex serial
communication interface using balanced lines. STANDARD and OSDP protocol are
available.
Connections:
K2-1 RS485 A (-) Balanced RX/TX
K2-2 RS485 B (+) Balanced RX/TR
For details about reader configuration see chapter 4.
Standard firmware:
Default RS485 communication baud rate is 115200. See chapter 4.2.4.
The RS485 output message format is described in chapter 4.5.1
OSDP firmware:
The OSDP protocol is implemented according to the SIA OSDP v2.1.6 standard
including the Secure Channel Protocol. Default RS485 communication baud rate is
9600. This may be changed using the OSDP_COMSET command.

MACE SMART | INSTALLATION GUIDE
Connections
7/34
3.2.2 WIEGAND
The Wiegand and Magstripe ISO7811/2 (clock & data) interface share the same
connections. This means that only Wiegand or Magstripe can be used and not both
simultaneously.
Wiegand connections:
K2-5 D0
K2-4 D1
K2-3 Ground (0V)
Message format:
The Wiegand output format is determined by the programming format of the
credential. MACE Wiegand credentials will automatically generate a Wiegand
message. If the credential is not programmed in Wiegand format, you may configure
the message output format as described in chapter 4.5.2.
Make sure to order the correct credential programming format if you want to use the
Wiegand or Magstripe interface. See also the MACE how to order guide (HTOG) for
more information.
Wiegand Timing
In the figure below the Wiegand protocol timing is specified.
Tpw
5V
0V
D1
5V
0V
D0
Tpi Tpi
Tpw
Figure 3: Wiegand protocol timing
Timing constants:
Tpi Pulse interval time 1msec
Tpw Pulse width time 50μsec
OSDP firmware:
The OSDP firmware does not support the Wiegand interface!!!

MACE SMART | INSTALLATION GUIDE
Connections
8/34
3.2.3 MAGSTRIPE ISO7811/2
The Magstripe ISO78122/2 (clock & data) and Wiegand interface share the same
connections. This means that only Wiegand or Magstripe can be used and not both
simultaneously.
Magstripe connections:
K2-5 CLK
K2-4 DAT
K2-3 Ground (0V)
Message format:
The Magstripe output format is determined by the programming format of the
credential. MACE Magstripe credentials will automatically generate a Magstripe
message. If the credential is not programmed in Magstripe format, you may
configure the message output format as described in chapter 4.5.2.
Make sure to order the correct credential programming format if you want to use the
Wiegand or Magstripe interface. See also the MACE how to order guide (HTOG) for
more information.
Magstripe Timing
The figure below shows the timing for one Magstripe character. Each bit consists out
of one period low (220μsec) and two periods high (440μsec). The Data-signal is valid
and stable on the falling edge of the Clock-signal.
odd paritymsblsb
3300μsec
0 1 1 0 1
220μsec660μsec
5V
0V
CLK
5V
0V
DAT
Figure 4: Magstripe protocol timing one character
Timing constants:
Clock period 660μsec
Clock high 440μsec
Clock low 220μsec
Data pre-amble 16 clock periods
Data post-amble 16 clock periods
OSDP firmware:
The OSDP firmware does not support the Magstripe ISO7811/2 interface!!!

MACE SMART | INSTALLATION GUIDE
Connections
9/34
3.3 LED CONTROL
The built-in high intensity LED provides visual feedback that the tag has been read
or authorized. The LED and buzzer can be controlled by the access control system.
Automatic mode:
Default the MACE reader will automatically control the LED.
During stand-by the LED will be BLUE and upon identification it will be GREEN.
These colors can be changed!
Remote control:
The LED and buzzer can be controlled remotely by a connected access control
system by activating digital inputs (active low). See chapter 3 for connection details.
Use MaceConfigTool software to setup the LED/buzzer control mode and configure
the corresponding LED colors.
Color UL LED color when input Led_UL_IN active
Color NA LED color when input Led_NA_IN active
Color UL+NA LED color when both inputs Led_UL_IN and Led_NA_IN active
Color idle LED color when both inputs not active
Direct (serial cmd):
The LED and buzzer can only be controlled by serial commands.
OSDP firmware:
Use the OSDP_LED command to control the LED.
Automatic mode and Remote control are not supported.

MACE SMART | INSTALLATION GUIDE
Connections
10/34
3.4 INPUTS
The MACE reader has 3 digital inputs (active low).
Connect to ground to active the input. Leave unconnected otherwise.
Connections
RED/BLU
Input 0 - Led_UL_IN (active-low)
WHITE
Input 1 - Led_NA_IN (active-low)
BLUE
Input 2 - Beeper_IN (active-low)
BLACK
Ground
SHIELD
Shield connected to DC-ground
STANDARD firmware:
The digital inputs can be used to control the LED and buzzer. See chapter 3.3.
OSDP firmware:
The digital inputs are general purpose inputs.
Upon status change the reader will send input status report message OSDP_ISTATR.
The current input status can be requested by sending the input status report request
message OSDP_ISTAT.

MACE SMART | INSTALLATION GUIDE
Connections
11/34
3.5 OUTPUTS
The MACE reader has 2 digital outputs. The function of the digital outputs is
dependent upon the installed firmware version. See below.
STANDARD firmware:
The outputs are used for Wiegand or Magstripe communication. See respectively
chapters 3.2.2 and 3.2.3
OSDP firmware:
The outputs are general purpose outputs. The outputs are open-collector and can be
used to activate an external relay. Mind flyback diode.
Use the OSDP_OUT command to control the output state. The outputs allow for
direct activation and deactivation plus timed operation (OSDP output control
compliance level 3). The permanent command is volatile (does not transcend power
cycles).
When the status of an output changes the reader will send an output status change
report message OSDP_OSTATR.
Connections:
GRAY
Output 0 (D0/CLK)
PINK
Output 1 (D1/DAT)
BLACK
Ground (0V)
SHIELD
Shield connected to DC-ground
Output ratings:
Type open collector (internal weak 5V pull-up resistor)
Max. voltage +24 VDC
Max. current 200 mA

MACE SMART | INSTALLATION GUIDE
Connections
12/34
3.6 TAMPER SWITCH
An internal magnet provides tamper indication when the reader is dismounted. This
contact may be connected to an external alarm system. The contacts are normally
closed when the reader is in place.
Tamper switches of multiple readers can be connected in series.
Connections:
K2-6
Tamper switch (normally closed)
K2-7
Tamper switch (common)
Contact ratings:
Max. current 50 mA (0.5 Volt voltage drop)
Max. switching voltage +24 VDC
The tamper contact status is reported through OSDP_LSTATR event messages.
3.7 NEDAP ANTENNA INTERFACE
The Nedap antenna interface is used to connect the MACE reader to a TCC270 or to
NEDAP AEOS access control hardware (e.g. AP1001) .
Connections:
K1-6
Nedap antenna interface. Connect to ANT
K1-2
Ground. Connect to ANT GND
When using this connection the credentials must have the Nedap XS format!!!
OSDP firmware:
The OSDP firmware does not support the NEDAP antenna interface!!!

MACE SMART | INSTALLATION GUIDE
Reader configuration
13/34
4READER CONFIGURATION
The MACE readers can be configured easily using the MaceConfigTool software. This
software tool can be downloaded from our partner portal
https://portal.nedapidentification.com.
Configuration allows to change:
 General settings.
 Reader settings; what to read and how.
 Communication output settings.
Some settings require expert knowledge. Leave settings unchanged, when their
specific meaning is unclear.
It’s always a good practice to save the configuration into a file for future reference or
when requesting technical assistance from Nedap or its business partners.
4.1 CONFIG SOFTWARE
The MaceConfigTool software allows to configure all settings for the MACE reader.
The software can interface with the reader using RS485.
Figure 5: MaceConfigTool software
Start the MaceConfigTool software and click CONNECT.
Select the following communication parameters and click OK.
COM-port
Baud rate
Communication protocol (STANDARD or OSDP)
Device address (only for OSDP)
When the connection is established, the software checks the MACE firmware
version.
Check the ID List to see what is identified.
Check the Console to see the communication details. For details about the
communication protocol refer to the firmware manual.

MACE SMART | INSTALLATION GUIDE
Reader configuration
14/34
4.2 OPTIONS
The options menu gives access to various MACE reader configuration options.
4.2.1 USER MODE
Select user mode Simple or Advanced to adjust the user interface. User mode Nedap
is intended to be used only when recommended by Nedap. Password is mace.
4.2.2 SEND CONFIG
Send configuration to reader.
This option will send all configuration settings to the reader and saves them into
non-volatile memory of the reader. A message indicates that the configuration was
sent successfully.
4.2.3 READ CONFIG
Read configuration from reader.
This option will read all* configuration settings from the reader.
A message indicates that the configuration was read successfully.
* Security keys and passwords cannot be read from the reader.
4.2.4 SETUP BAUDRATE
Select the serial communication baud rate.
Possible selections are:
1200
2400
9600 (default OSDP)
19200
38400
57600
115200 (default STANDARD)
Click OK after changing the baud rate. Upon success the software will show a
message and the baud rate in the software and reader have been changed. The new
baud rate setting in the reader is saved to non-volatile memory.
Note that when using a separate interface converter, it may be required to update
the baud rate setting in there as well.
4.2.5 SETUP OSDP DEVICE ADDRESS
Select the OSDP device address in range from 0 to 126. Default device address is 0.
4.2.6 RESET CONFIG
Reset configuration to factory defaults.
All settings will be reset to factory defaults. The reader will restart automatically
afterwards.

MACE SMART | INSTALLATION GUIDE
Reader configuration
15/34
4.3 SETTINGS
4.3.1 GENERAL
Hold time / repeat time
Set tag hold time. Default 1 sec. Max. 25 sec.
Enable 'repeat using hold-time interval' to repeat the communication output while
the tag remains within read range.
Configuration password
Enter a configuration password to lock the configuration settings in the reader.
Without the password you cannot change any configuration settings. Please
remember this password very carefully. By default the MACE reader has no
configuration password.
*** Advanced user mode settings;
Nedap customer codes
The MACE reader is programmed with a customer code. Nedap tags or credentials
may also have a customer code. Enable 'Read only if customer code is correct' to
make the reader ignore tags that have an invalid customer code.
You may change the customer code(s) in the reader. You can configure up to 20
customer-codes in the MACE reader.
Identifiers without customer code
Other tags or credentials may not have a customer code. For example MIFARE
DESFire cards or the MACE UID64. Enable or disable 'Allow reading ID-numbers
without customer code'.
Heater
This setting is not used because the MACE Smart reader doesn't have a heater unit.
ID-source values
The MACE reader indicates on which source there was an identification. These ID-
source identifier values are configurable by clicking on the link.
*** Nedap user mode settings;
Antenna modulation
This setting is only used for the Nedap antenna interface. See chapter 3.7. The
setting defines how often the ID-number is sent on the antenna interface. Default
settings is 30 cycles, which corresponds to ± 1 sec.

MACE SMART | INSTALLATION GUIDE
Reader configuration
16/34
4.3.2 LED/BUZZER
LED and buzzer mode *
Automatic
MACE reader will automatically set the LED color and optionally beep upon
identification. The LED color upon identification and during idle can be configured.
Remote (follow digital inputs)
The connected access control panel may control the LED and buzzer using the digital
inputs. The corresponding LED colors can be configured. See chapter 3.3.
Direct (using serial commands)
The connected access control panel may control the LED and buzzer using
commands on the serial interface. Details are described in the firmware manual.
LED brightness
Set LED brightness in range from 0 to 100%. Default 50%.
* Using OSDP the LED and buzzer are controlled using the OSDP_LED and
OSDP_BUZ commands. The Automatic mode and Remote control (follow digital
inputs) settings are not supported.

MACE SMART | INSTALLATION GUIDE
Reader configuration
17/34
4.4 READER SETTINGS
4.4.1 BLE
The MACE Bluetooth Low Energy (BLE) reader is a single mode Bluetooth Smart
reader that complies with the Bluetooth Core specification 4.1. The Bluetooth reader
implements the peripheral role.
Enable
Enable the MACE BLE module. This automatically starts the Bluetooth advertising.
Default bluetooth device name
Enable to have the default Bluetooth device name. This is recommended because
the MACE app uses the Bluetooth device name for ranging purpose.
Ranging profile
Select ranging profile:
P Proximity range (max ± 25 centimeter)
S Short range (max ± 2 meter)
M Medium range (max. ± 5 meter)
L Long range (max ± 15 meter)
There is a lot of variation in performance of Bluetooth communication across the
wide range of phones that are available today. Please take this into account when
planning the commissioning and configuration of your application.
*** Advanced user mode settings;
Reader function
Select the reader function. This function is reserved for future use. It might trigger
the MACE app to require user confirmation or pin verification.
Default M - MACE general purpose.
Reader sequence number
Used for MACE reader identification.
*** Nedap user mode settings;
Advertising interval
Default advertising interval is 100 msec.
TX power
Set TX power in dBm (default 8 dBm). Not each TX power setting is possible. The
value will be rounded to the nearest possible TX power setting.
It is recommended to keep the highest possible TX power setting. This makes range
checking more reliable.
TX correction
The TX correction (default 0 dBm) can be used for readers that are mounted on a
location that affect the gain of the Bluetooth antenna.
Note:
Please be aware that, after
changing the ranging
profile it may take some
time before the MACE app
recognizes the update.
When the ranging profile
has been changed it may
occur one or two times that
the MACE app is still
responding based on the
prior settings.

MACE SMART | INSTALLATION GUIDE
Reader configuration
18/34
The TX power and TX correction added together are sent within the advertisement
data. They are used by the MACE app to implement range checking.
Set the TX correction to a positive value when the received signal is higher than
expected. In other words; increasing the TX correction will result in a shorter range.
Note that smartphone specific corrections will be done by the MACE app.
Authentication
Bluetooth authentication should always remain enabled. The key will be diversified
to ensure a unique security key per identifier.

MACE SMART | INSTALLATION GUIDE
Reader configuration
19/34
4.4.2 NFC
Near Field Communication (NFC) is a wireless communication technique operating
on 13 MHz. Read range is only few centimeters. NFC is currently not supported on
Apple iOS. On Android at least version 4.4 (KitKat) is required.
Enable
Enable the MACE NFC reading.
*** Nedap user mode settings;
Application ID, file number, data length and offset
For MACE the following settings are required:
Application ID: A0000007151001
File number: 0
Data length: 0
Data offset: 0
Authentication
NFC authentication should always remain enabled. The key will be diversified to
ensure a unique security key per identifier.
4.4.3 QR-CODE
These settings are not used because the MACE Smart reader does not have a
barcode scanner.

MACE SMART | INSTALLATION GUIDE
Reader configuration
20/34
4.4.4 DESFIRE
The MACE Smart reader features also a universal smartcard reader. It also supports
reading MIFARE DESFire (EV1) cards.
*** Advanced user mode settings;
Enable
Enable to read custom MIFARE DESFire cards.
Data to read
Select to read the CSN (7-bytes) or DESFire file data.
Byte order
Select byte order normal or reversed.
For example CSN normal is = 04 6C 5E A2 BD 24 80
For example CSN reversed is = 80 24 BD A2 5E 6C 04
Application ID
Application ID. 6-digit hex. For example F12345.
File number
File number within range from 0 to 255.
Communication mode
Select Plain, MACed or Enciphered.
Data length and offset
Select the data length and offset in nibbles. Set data length and offset both to 0
(zero) to read the whole file. Nibbles are half bytes or digits.
For example file data is 0123456789ABCDEF.
Set data length to 3 and offset to 7.
This will result in the ID-number 789.
Encryption
Select the authentication/encryption method.
None (skip authentication)
Native DES/3DES
ISO DES/3DES
3Key 3DES
AES
Select the key number in range from 0 to 13.
Enter the read key. The length of the key depends upon the chosen encryption
method.
Data conversion
Optionally select a data conversion option, for example BCD to HEX or HEX to BCD.