Safran MorphoAccess SIGMA Series Instruction Manual

COPYRIGHT© 2016-2017 Morpho
Osny, France
MorphoAccess® SIGMA Family
Administration Guide

MorphoAccess® SIGMA Family Administrator Guide
Introduction
2017_2000025464-v03
This document and the information therein are the property of Morpho. They must not
be copied or communicated to a third party without the prior authorization of Morpho
2
July 17
WARNING
COPYRIGHT© 2016-2017All rights reserved.
Information in this document is subject to change without notice and do not represent a
commitment on the part of Morpho. No part of this document may be reproduced or
transmitted in any form or by any means, electronic or mechanical, including photocopying or
recording, for any purpose without the express written permission of Morpho.
This legend is applicable to all pages of this document.
This manual makes reference to names and products that are trademarks of their respective
owners.
PROPRIETARY RIGHTS
This document contains information of a proprietary nature to Morpho and is submitted in
confidence for a specific purpose. The recipient assumes custody and control and agrees that
this document will not be copied or reproduced in whole or in part, nor its contents revealed in
any manner or to any person except to meet the purpose for which it was delivered.
This caveat is applicable to all the pages of this document.

MorphoAccess® SIGMA Family Administrator Guide
Revision History
2017_2000025464-v03
This document and the information therein are the property of Morpho. They must not
be copied or communicated to a third party without the prior authorization of Morpho
3
July 17
Revision History
The table below contains the history of changes made to the present document.
Version
Date
Description
01
April 2017
First version MorphoAccess® SIGMA Family Administration Guide
Created from:
2014_0000002196_v11- MA SIGMA - Administration Guide
2015_2000010196_v8 - MorphoAccess® SIGMA Lite Series
Administrator Guide
02
June 2017
OSDP support added
Seos card support added
Note about partionned usb key that should not be used
Note about encoding card with only one finger that is not supported
Note about encoded name and first name that are limited to 20
caracters
Note about the behavior during second biometric attempt with MALite
Note about transaction logs that should be erase
Replace alphanumeric PIN by numeric PIN in webserver
03
July 2017
New administrator profile : Limited database admin (refer to Section 5
: MorphoAccess® Terminal Administration Menu)
Update first boot-up for MALITE terminal in LED –Buzzer Sequence
chapter

MorphoAccess® SIGMA Family Administrator Guide
Introduction
2017_2000025464-v03
This document and the information therein are the property of Morpho. They must not
be copied or communicated to a third party without the prior authorization of Morpho
4
July 17
Table of Contents
WARNING ............................................................................................................................2
REVISION HISTORY ...............................................................................................................3
SECTION 1 : INTRODUCTION...............................................................................................14
MorphoAccess® SIGMA Family Series Terminal................................................................15
Scope of the document ...................................................................................................16
About Biometrics ............................................................................................................18
About fingerprint biometrics ............................................................................................... 18
Templates supported........................................................................................................... 19
Notation............................................................................................................................... 20
SECTION 2 : CONNECTING THE TERMINAL TO A PC..............................................................22
General ..........................................................................................................................23
Why would one connect the terminal to a PC? ................................................................... 23
Connection methods............................................................................................................ 23
Network parameter initialization ........................................................................................ 23
Point to Point Ethernet Connection .................................................................................24
Connection through only one Ethernet switch .................................................................25
Connection through a LAN ..............................................................................................26
Description........................................................................................................................... 26
LAN with DNS Server............................................................................................................ 26
LAN without DNS Server ...................................................................................................... 27
Static IP address (DHCP disabled)........................................................................................ 27
Dynamic IP address (DHCP enabled) ................................................................................... 27
Wi-Fi™ Network configuration ........................................................................................28
Requirements....................................................................................................................... 28
Configuration....................................................................................................................... 28
Troubleshooting................................................................................................................... 28
SECTION 3 : TERMINAL CONFIGURATION AND ADMINISTRATION .......................................29
Understanding MorphoAccess® Configuration.................................................................30
Presentation ........................................................................................................................ 30
Modifying the value of a parameter ................................................................................... 30
Configuring a Networked MorphoAccess®.......................................................................31
Introduction ......................................................................................................................... 31
Network factory settings ..................................................................................................... 32

MorphoAccess® SIGMA Family Administrator Guide
Introduction
2017_2000025464-v03
This document and the information therein are the property of Morpho. They must not
be copied or communicated to a third party without the prior authorization of Morpho
5
July 17
Date/Time settings .............................................................................................................. 32
SSL Securing ......................................................................................................................... 32
Network Wi-Fi™ configuration ............................................................................................ 33
MorphoAccess® Terminal Database Management ..........................................................34
General ................................................................................................................................ 34
Adding a user to the database ............................................................................................ 34
Removing a user from the database ................................................................................... 34
Database Size ...................................................................................................................... 35
MorphoAccess® Terminal License Management ..............................................................36
User licenses ........................................................................................................................ 37
Log licenses.......................................................................................................................... 37
Communication licenses ...................................................................................................... 38
Access Control license.......................................................................................................... 38
Time and Attendance (T&A) license .................................................................................... 39
Basic Licenses ...................................................................................................................... 39
Getting a license for a MorphoAccess® SIGMA Family terminal......................................... 39
Checking licenses installed in the terminal with license manager application ................... 39
Installing a new license........................................................................................................ 42
Terminal Firmware Upgrade ...........................................................................................43
How to get latest version of firmware................................................................................. 43
How to upgrade the firmware............................................................................................. 43
Firmware upgrade using a USB Mass Storage Key ............................................................. 43
Firmware upgrade tool for expert users.............................................................................. 43
MorphoAccess® SIGMA Family Modes.............................................................................45
MorphoAccess® 500 or J Series legacy mode ...................................................................... 45
L-1 Bioscrypt 4G Series legacy mode ................................................................................... 45
MorphoAccess® SIGMA Family native mode....................................................................... 47
SECTION 4 : MORPHOACCESS® TERMINAL FIRST BOOT ASSISTANT......................................48
Assistant Initialization ....................................................................................................49
Date & Time Configuration .............................................................................................51
Trigger Event ..................................................................................................................55
Language Configuration .................................................................................................57
Show/Hide Language Icon ..............................................................................................59
Ethernet Interface Settings .............................................................................................60
Wi-Fi™ Configuration......................................................................................................63
Protocol Configuration....................................................................................................70

MorphoAccess® SIGMA Family Administrator Guide
Introduction
2017_2000025464-v03
This document and the information therein are the property of Morpho. They must not
be copied or communicated to a third party without the prior authorization of Morpho
6
July 17
Password Configuration..................................................................................................72
First Boot Assistance At Next Boot Configuration ............................................................74
Recover Corrupted Components ......................................................................................76
SECTION 5 : MORPHOACCESS® TERMINAL ADMINISTRATION MENU...................................77
Access to Administration Menu.......................................................................................78
User Menu......................................................................................................................80
User Enrollment in Database............................................................................................... 81
User Enrolment in Card........................................................................................................ 97
User Enrolment in Card & Database ................................................................................. 100
Update User Information................................................................................................... 102
Authenticate User.............................................................................................................. 105
Delete User ........................................................................................................................ 106
Card Manager.................................................................................................................... 111
Multimedia menu .........................................................................................................146
Audio Settings.................................................................................................................... 147
Video Settings.................................................................................................................... 150
Images Settings ................................................................................................................. 153
System Menu................................................................................................................156
Terminal Configurations .................................................................................................... 157
Network Time Protocol Server (NTP Server)...................................................................... 160
Transaction Log ................................................................................................................. 178
Miscellaneous Settings ...................................................................................................... 184
Web Server ........................................................................................................................ 188
Error Log Configuration ..................................................................................................... 189
Sensor Log Configuration .................................................................................................. 191
Communication menu...................................................................................................193
Security recommendation ................................................................................................. 194
Ethernet Network Configuration ....................................................................................... 194
Wi-Fi™ Network Configuration.......................................................................................... 196
Mobile Network Configuration.......................................................................................... 196
Configure Hostname.......................................................................................................... 200
Serial Parameters .............................................................................................................. 201
Security Menu ..............................................................................................................204
User Control Settings......................................................................................................... 205
Anti-Tamper Switch For Terminal Security ........................................................................ 220
Network & Communication Security Settings ................................................................... 224

MorphoAccess® SIGMA Family Administrator Guide
Introduction
2017_2000025464-v03
This document and the information therein are the property of Morpho. They must not
be copied or communicated to a third party without the prior authorization of Morpho
7
July 17
Terminal Settings > Communication > Communication Channels Configuration ............. 236
Additional User Verification Settings................................................................................. 240
Change LCD Password ....................................................................................................... 243
Additional User Control Settings ....................................................................................... 245
USB Menu.....................................................................................................................251
Format USB Mass Storage device...................................................................................... 252
Initialize USB Mass Storage device.................................................................................... 254
Import Data into Terminal................................................................................................. 256
How to Import User Database........................................................................................... 257
How to Import Contectless key.......................................................................................... 260
How to Import Language................................................................................................... 262
Export Data in USB Mass Storage Device.......................................................................... 265
How to Export & View Transaction Logs ........................................................................... 266
How to Export Error Logs................................................................................................... 269
How to Export User Database ........................................................................................... 271
How to Export Contectless key .......................................................................................... 273
Information Menu ........................................................................................................276
View Device Details ........................................................................................................... 277
View Firmware Information .............................................................................................. 279
View Sensor Revision Information ..................................................................................... 280
View Communication Parameters..................................................................................... 281
View Memory Status ......................................................................................................... 284
View User Status................................................................................................................ 285
View Transaction Log Status ............................................................................................. 287
Reboot Terminal ...........................................................................................................288
SECTION 6 : MORPHOACCESS® TERMINAL : VIDEOPHONE FACILITY...................................290
Introduction to Videophone ..........................................................................................291
Configure Video Phone Server .......................................................................................292
Viewing Video Phone Server Details..............................................................................295
Delete Video Phone Server............................................................................................296
How User can make Video Call......................................................................................298
SECTION 7 : TERMINAL MENU FOR MORPHOACCESS® SIGMA LITE+ SERIES .......................301
MorphoAccess® SIGMA Lite+ Series terminal Screens ....................................................302
Terminal Home Screen....................................................................................................... 302
Terminal Information Menu .............................................................................................. 302
Terminal Details................................................................................................................. 303

MorphoAccess® SIGMA Family Administrator Guide
Introduction
2017_2000025464-v03
This document and the information therein are the property of Morpho. They must not
be copied or communicated to a third party without the prior authorization of Morpho
8
July 17
Communication Details ..................................................................................................... 304
Steps to Setup Wallpaper..............................................................................................305
Recover Corrupted Components ....................................................................................306
Display Screens and Actions ..........................................................................................307
SECTION 8 : TERMINAL CONFIGURATION THROUGH WEBSERVER .....................................311
Access to Administration Menu through Webserver ......................................................312
Login to Webserver............................................................................................................ 314
User Enrollment in Database............................................................................................. 315
User Enrolment in Card...................................................................................................... 321
User Enrolment in Card & Database ................................................................................. 323
Update User Information................................................................................................... 325
Delete User ........................................................................................................................ 327
Card Manager.................................................................................................................... 329
SECTION 9 : USB SCRIPTS..................................................................................................343
USB Scripts ...................................................................................................................344
SECTION 10 : ACCESS CONTROL ....................................................................................345
Access control presentation ..........................................................................................346
Typical architecture of an access control system .............................................................. 346
Typical access control process ........................................................................................... 347
Preliminary: adding a biometric template in local database ..........................................348
MorphoAccess® SIGMA Family terminal operating modes .............................................349
Standalone mode or Slave mode....................................................................................... 349
Standalone mode: Identification and/or Authentication .................................................. 349
Access Control Process in Identification Mode.................................................................. 350
Access Control Process in Authentication Mode ............................................................... 351
Access Control Process for VIP Users................................................................................. 352
Access Control Result ....................................................................................................353
Information for the User.................................................................................................... 353
Information for the Administrator..................................................................................... 353
Integration in an Access Control System ........................................................................... 353
Access Granted .................................................................................................................. 354
Access Denied .................................................................................................................... 354
SECTION 11 : ACCESS CONTROL BY IDENTIFICATION .........................................................355
Identification Mode Description ....................................................................................356
Identification Process ........................................................................................................ 356
Access Control by Identification ........................................................................................ 356

MorphoAccess® SIGMA Family Administrator Guide
Introduction
2017_2000025464-v03
This document and the information therein are the property of Morpho. They must not
be copied or communicated to a third party without the prior authorization of Morpho
9
July 17
Result of the access control request.................................................................................. 356
User’s Data required in the terminal................................................................................. 356
Identification Modes (database extension licenses) ......................................................... 356
Compatibility with Access Control Systems....................................................................... 357
User Interface .................................................................................................................... 358
SECTION 12 : ACCESS CONTROL BY AUTHENTICATION.......................................................359
Authentication Process .................................................................................................360
Introduction ....................................................................................................................... 360
Authentication process...................................................................................................... 360
Access control by authentication ...................................................................................... 360
Contactless Smart Card ..................................................................................................... 361
List of contactless cards validated..................................................................................... 361
Authentication Process Options ........................................................................................ 363
Manual bypass of biometric control.................................................................................. 363
Automatic bypass of biometric control ............................................................................. 365
Result of access control check ........................................................................................... 365
Compatibility with Access Control Systems....................................................................... 365
Selection of user’s contactless card type (MIFARE® and/or DESFire®).............................. 366
Biometric check, biometric data on user's card ..............................................................368
Description......................................................................................................................... 368
User’s data required in the terminal ................................................................................. 368
User’s data required on the user’s card ............................................................................ 368
Activation key .................................................................................................................... 368
User Interface .................................................................................................................... 369
PIN verification - PIN stored on card..............................................................................370
Description......................................................................................................................... 370
User’s data required in the terminal ................................................................................. 370
User’s data required on the user’s card ............................................................................ 370
Activation key .................................................................................................................... 371
User Interface .................................................................................................................... 372
BIOPIN verification - BIOPIN stored on card...................................................................373
Description......................................................................................................................... 373
User’s data required in the terminal ................................................................................. 373
User’s data required on the user’s card ............................................................................ 373
Activation key .................................................................................................................... 373
User Interface .................................................................................................................... 374

MorphoAccess® SIGMA Family Administrator Guide
Introduction
2017_2000025464-v03
This document and the information therein are the property of Morpho. They must not
be copied or communicated to a third party without the prior authorization of Morpho
10
July 17
Biometric check and biometric data in local database ...................................................375
Description......................................................................................................................... 375
User’s data required in the terminal ................................................................................. 375
User’s data required on the user’s card ............................................................................ 375
Activation key .................................................................................................................... 376
User interface .................................................................................................................... 376
Authentication with local database: User ID entered from keyboard .............................377
Description......................................................................................................................... 377
Activation key .................................................................................................................... 377
Authentication with local database: ID input from Wiegand or Clock & Data.................378
Description......................................................................................................................... 378
Activation key .................................................................................................................... 378
Wiegand Frame Configuration .......................................................................................... 380
Site-code Propagation ....................................................................................................... 381
Wiegand frame example (26 bits)..................................................................................... 381
No biometric check, no User ID check ............................................................................382
Description......................................................................................................................... 382
User’s data required in the terminal ................................................................................. 382
User’s data required on the user’s card ............................................................................ 382
Activation key .................................................................................................................... 383
User Interface .................................................................................................................... 383
No biometric check, User Identifier in the database.......................................................384
Description......................................................................................................................... 384
User’s data required in the terminal ................................................................................. 384
User’s data required on the user’s card ............................................................................ 384
Activation key .................................................................................................................... 385
User Interface .................................................................................................................... 386
Authentication process specified by User's card.............................................................387
Description......................................................................................................................... 387
User’s data required in the terminal ................................................................................. 387
User’s data required on the user’s card ............................................................................ 387
Activation key .................................................................................................................... 388
User Interface .................................................................................................................... 388
Allowed format for User's identifier ..............................................................................390
TLV structured data ........................................................................................................... 390
Binary Data........................................................................................................................ 392