Pamex Enkore Series User manual

Pamex
Enkore Series
A Multi-Family Door Access Control Solution
Project Implementation Guide
1

Table of Contents
Introduction 4
Before Installation 6
Check List 6
Pamex MFSP Service Platform 6
Implementation Guide 7
Concepts 7
Construction Phase 8
Lock Registration Phase 9
Plan your area tree 10
Build the area tree using MF-Admin Server 11
Plan your programming cards 14
Setup Wifi AP and Create Programming Cards 16
Register Locks to MF-Admin Server 19
Verify lock registration using Master Card 21
Go-live Phase 26
Create Tenant Cards 34
Create Staff Card 42
Create Vendor Card 47
Create Guest/Temp Card 54
Shutdown Public Area 58
Area Time Control 59
Lock Scheduling 60
Access Control Rule 64
Time Control - Add/Remove Holidays 66
Advanced Setup Guide 68
Lock Report Interval 68
Alert Settings 69
Appendix 71
Lock UI Patterns (LED & Buzzer) 71
Wall Reader 73
Wall Reader 74
Wifi AP Specification and Settings 75
Factory default settings - Wall Reader 76
Factory default settings - Deadbolt 77
Factory default settings - Leverset 78
Factory default settings - Interconnect 79
MF-Admin Server Parameters default settings 80
Application Parameters 80
2

System Parameters 80
Mifare Card Specification 81
Card Types 82
Area Types 84
Lock Real Time Events 85
Default Severity of Alert Types 86
FCC Statement 87
NCC Statement 88
3

Introduction
The Pamex Enkore series is a total solution for multi-family door access control. It not only
has several models of the lock but also the browser-based central management system
(MF-Admin server).
Figure 1 : Pamex Enkore System Architecture Overview
Figure 1 shows the system architecture of Pamex Enkore solution, Below are the brief
description of each component:
1. Chrome browser: The user interface to the MF-Admin Server (2). You need a PC with
a Chrome browser to use MF-Admin. The card reader/writer (No.6 in figure 1) will be
connected to this PC using USB. You may also use the windows server (5) as the
client PC.
2. MF-Admin Server: An application running on a Windows server (5). It provides all the
functions to manage the access control of the locks and the cards/fobs.
3. Wifi AP: All the Enkore locks have the wifi capability and are necessary to connect to
a wifi AP in order to be programmed by the MF-Admin server. There should be a few
to many Wifi APs at a multi-family property. Wifi AP is not part of Enkore products.
Check the lock specifications in the Appendix for the compatible Wifi AP.
4. Enkore smart locks and NFC cards: All the Enkore locks are smart locks that are
accessed using NFC card/fob (Mifare Desfire).
5. Windows Server: MF-Admin server is installed on this server.
6. Card Reader/Writer: MP100 is the default reader to issue a new card/fob to
users/residents.
4

Figure 2: MP100
7. DB Server : A database is installed on windows server to keep all the data of the
system. It is installed and automatically configured by the install program. Please
reference MF-Admin & MP100 installation guide  .
8. MFSP platform : MFSP (Multi-Family Service Platform) is a cloud service for all the
MF-Admin Servers around the world. This platform is operated by Pamex. Connected
your MF-Admin Server to MFSP is not required but we encourage you to do so.
MFSP will provide some enhancement to Enkore solution in the future.
5

Before Installation
Check List
● Locks
● Cards : Crypto Card x 2, Construction Card x 5, Blank Card x 10
● MF-Admin + MP100 Software
● MP100 Card Reader x 1
● Windows Server x 1
Pamex MFSP Service Platform
● This section is for Pamex only.
● Before any Enkore installation, Pamex admin will have to create a project in
MFSP in order to get the unique project code.
● An Enkore installation will need at least one Crypto card to activate all the
locks. Crypto cards can only be issued through MFSP by Pamex. MFSP will
keep the encryption keys of the Mifare Desfire card for every project.
6

Implementation Guide
Concepts
Pamex Enkore setup can be thought of in terms of three phases: Depending on the
progress of your project, there are three phases defined as :
● Construction Phase :
All the door locks are installed but not programmed yet. MF-Admin
server is not necessary for this phase.
● Lock Registration Phase :
The door locks are ready to be programmed/registered to the
MF-Admin server.
● Go-Live Phase :
All the locks are registered to MF-Admin Server. The system is ready
to go.
Normally, as time goes by, a project will first in the construction phase, then go to the
lock registration phase, then the go-live phase. Each phase requires different tasks to
be completed as described below.
In this guide, we will use the term Card or Key from time to time. Both terms refer to
the Mifare Card or Mifare key fob is issued by Pamex Enkore solution. Used by the
Pamex Enkore system.
MP100 is the only device you use to issue card/key. Note that sometimes you have to
re-place (take a card off the reader then place the card on the reader again) the card
on the reader to successfully complete your card operation. MF-Admin server will
remind you to re-place the card as possible as it can. But remember to do so when you
encounter MP100 reader error. It’s not a bug but the nature of Mifare Card operations.
7

Construction Phase
Make sure you have Crypto Cards and Construction Cards on hand. Crypto Card and
Construction Card are shipped from Pamex together with physical locks. (See
Appendix: Card Types)
In the scenario that wifi network and MF-Admin Server is not ready, and you have
installed locks on the doors, you will need Construction Cards to unlock and open the
door.
A lock can be unlocked using Construction Card only after it has successfully scanned
the Crypto Card but before programmed by programming card. No other cards can
unlock the doors at this moment.
A Construction Card can unlock any locks which have been scanned by Crypto Card
given by Pamex for your project only.
Depending on the lock model, the lock will present below response when scanning
Mifare Cards :
Lock Model
Crypto Card
Success
Crypto Card
Fail
Wall Reader
Green LED on 1 sec & long
beep once
Red LED flash 3 times &
beep 3 times
Deadbolt
Same as Wall Reader
Same as Wall Reader
Leverset
Same as Wall Reader
Same as Wall Reader
Interconnect
Same as Wall Reader
Same as Wall Reader
Construction Cards will remain valid until you scan Programming Card to a lock.
Programming Cards can only be created using MF-Admin Server which means your
wifi APs and network are ready and you are entering the next phase - Lock
Registration Phase.
8

Lock Registration Phase
MF-Admin Server is required to complete all the tasks in this phase. Please follow the
MF-Admin Server & MP100 Installation Guide  to install MF-Admin Server.
MF-Admin Server is a web-based application with access controlled by login id and
password. A newly installed MF-Admin Server has an admin user with login id = alzk,
password = alzk. You may use this account to access all the functions in MF-Admin
but we recommend you create another ids for all the users who need to access
MF-Admin. Please check MF-Admin Server User Guide  to see how to create users.
The default admin user alzk can not be removed. Change the password of alzk
immediately is recommended to secure the account. Please check MF-Admin Server
User Manual  to see how to change alzk password.
To better illustrate all the steps, we will use a SIMPLE example project to describe how
to complete all the steps.
Figure 17: Project SIMPLE
In the SIMPLE project, there are 4 families (A, B, C, D) with one common entrance (M)
and a shared swimming pool controlled by Lock P.
You will have to go through below steps to setup the MF-Admin server and register all
the locks by using alzk account :
9

Plan your area tree
Area tree is the topology of your property. Before you can register your physical
locks and link the locks to their corresponding lock place, you have to build the
area tree in MF-Admin Server.
There are three types of areas : group, unit, public (See Appendix: Area Types for
detail). An area may contain zero or several lock places which will linked to the
physical lock one by one when registering.
For the SIMPLE project, you should prepare a table as below :
Root Area (Group area)
(No lockplace)
Public Area P
Lockplace P
Group Area M
Lockplace M
Unit Area A
Lockplace A
Unit Area B
Lockplace B
Unit Area C
Lockplace C
Unit Area D
Lockplace D
Note that the quantity of lock places will be exactly the same as the number of
physical locks.
10

Build the area tree using MF-Admin Server
Navigate to build area tree page. Property Management => Build Property
For a brand new property, you will see only one node at beginning.
Click and edit root area name.
Click edit button on Root Area and select Add Public Area.
Click the name text to edit public area name and lockplace name.
Click menu button on Root Area and select Add Group.
11

Click name text to edit group name.
Click menu button on Group Area M and select “Add Lock Place”.
Edit lockplace name.
Click menu button on Group Area M and select “Add Unit”.
Click name text to edit unit name and lockplace name.
12

Keep adding unit from B to D
Click Save To Server to save the area tree.
Note that there are many ways to build an area tree as above. You may find
another techniques in MF-Admin Server User Manual.  If you make any mistakes
during building the tree, just click “Reload from server” or “Reset” to return to the
initial state.
13

Plan your programming cards
The area tree is now ready to be linked to physical locks. Pamex Enkore locks
support WPA2 encryption to connect to the Wifi AP. When a lock is scanned by a
programming card, the preferred Wifi AP SSIDs will be loaded into the lock from
programming card. A programming card may save 1 ~ 5 SSIDs.
Normally, you only have to scan one time for a lock during its lifetime. The reasons to
re-scan programming card will be :
● MF-Admin server ip is changed after go-live phase : This should be a rare
case and usually can be avoid. If the MF-Admin Server ip has to be changed,
then you have to make new programming cards and all the locks have to be
programmed again.
● Some Wifi AP SSID changed : For those locks in the range of changed wifi
APs, you have to scan them with new programming card which has the new
SSID in it.
● Locks have been reset to factory default.
When any of the above cases happened, we recommend you to contact with the
reseller for help.
In SIMPLE project, we assume that you have two Wifi APs with SSID = AP1 and
SSID = AP2. In real world, depending on the size of your project. you may have tens
to hundreds of Wifi APs. Therefore, prepare below table is recommended :
Wifi AP SSID
WPA2 Key
(32 characters)
Rooms in Range
Programming
Card
AP1
12345678
Unit A
Card 1
Unit B
Card 1
Unit C
Card 1
Unit D
Card 1
AP2
abcdefg
Public Area P
Card 1
For SIMPLE project, AP1 and AP2 can be saved into one programming card.
Programming card can be created by using MF-Admin Server and you may create
14

several cards with the same settings in order to program the locks in parallel by
several workers. In the case that several workers are programming locks in parallel,
please label the UID of the card (UID can be found on MF-Admin page when you
create the programming card) on the programming card with a sticker or marker.
When your lock is scanned, you will be able to tell which lock is yours via the UID.
See the detail in registering locks.
15

Setup Wifi AP and Create Programming Cards
Navigate to system parameters page. System Management => System
Parameters
Select Wifi AP Setting
Click Add One to add wifi ap and click Save to save wifi ap.
Navigate to create programming cards page. Property Management => Issue
Programming Key
You will see there are two wifi aps you added previously.
16

Check the checkbox on those wifi ap and click Issue Key.
Place key/card on reader first.
17

Click Write Key/Card to get Key’s UID.
The green light LED on Read will blink.
If Write Key/Card failed with three beep sounds and display following message,
please re-place key/card and click Write Key/Card again.
18

If programming key issued successfully, two beep sounds will be made.
Register Locks to MF-Admin Server
Please bring a tablet or mobile phone with Chrome browser.
Follow below steps to register a lock :
A. Open Chrome and type in MF-Admin server URL.
B. Login to MF-Admin using alzk id.
C. Go to Lock Registration Monitoring function on tablet.
Property Management => Lock Registration Monitor
D. Go to Room A
E. Scan programming card to the lock Lockplace A.
You will see the physical new lock connect to MF-Admin server.
19

F. Link the physical lock on Room A to the lockplace.
Click lock icon near Unit Area A.
A pop-up window will show up listing all the locks not linked yet. Click the one
you like to link.
G. Link the lock to Room A lockplace.
G.1. If you link to the wrong lockplace, Unlink and link again.
Click lockplace which you link to the wrong lockplace.
Click Unlink to unlink lock.
H. Repeat the steps D to G for Lockplace B,C,D,P and M
I. All set and all locks are ready for go-live phase.
20