FCC ID: WIWTLR401 Fingerprint keypad

TLR401 Administration TLR401 FINGERPRINT KEY Manual Version 1.4 TIMELINK International GmbH 1 TLR401 Administration TIMELINK International GmbH Mollenbachstrasse 19 D-71229 Leonberg Phone (0 71 52) 93979-0 Fax

(0 71 52) 93979-50 info@de.timelink.com TLR401 Manual Version 1.4 Firmware 1.150 or higher Copyright 2008 TIMELINK International GmbH This Manual is protected by copyright. The user manual may only be copied within the framework of the intended usage. Any reproduction or translations of the manual beyond this or its transmission onto electronic media, even in extract form, is only allowed with the express permission of TimeLink International. TimeLink International reserves the right to make changes to the user manual and to the devices without special notice. TimeLink International does not accept any liability whatsoever for direct or indirect damage, especially loss of data, that results from the usage of the TLR401 terminal, or from the information in this Manual 2 TLR401 Administration Content 1 General Comments 1.1 1.2 1.3 1.4 1.5 1.6 1.7 1.8 1.9 2 Technical Data 2.1 2.2 2.3 2.4 2.5 2.6 2.7 2.8 2.9 2.10 3.1 3.2 3.3 4.1 4.2 4.3 4.4 4.4.1 3 Installation 4 Operation 5 Symbols....................................................................................5 Device name.............................................................................6 Intended Usage ........................................................................6 Protection Class........................................................................6 Safety Measures.......................................................................6 Before Commissioning..............................................................6 Operation..................................................................................7 Installation and Service.............................................................7 CE Conformance ......................................................................7 8 Mechanical Structure ................................................................8 Hardware Features ...................................................................8 Biometric Sensor.......................................................................8 Visual and Audible Indicators....................................................8 Connection................................................................................8 Interface....................................................................................8 Power Supply............................................................................9 Environment Conditions............................................................9 Dimensions and Weight ............................................................9 Cable Specifications .................................................................9 10 Installation Requirements........................................................10 Condition ................................................................................10 Wiring .....................................................................................10 11 View of the Control Elements..................................................11 Basics.....................................................................................12 Basic Operating Principles......................................................12 User Operation .......................................................................13 Authentication, TLR401:..........................................................13 3 TLR401 Administration 4.4.2 4.4.3 Authentication, TLR401-iCLASS: ............................................13 Authentication, 'Template on Card' (TLR401-iCLASS only)....13 5 Wiegand Configuration - Administrator Functions 14 Change the Admin Code.........................................................14 Enrollment...............................................................................15 Enroll user...............................................................................15 Write Template onto iCLASS Card (TLR401-iCLASS only).....16 Define the Number of Digits for the User ID (optional).............17 Enable Validation of the User ID (optional)..............................17 Delete Specific User(s) ...........................................................18 Delete Entire Database...........................................................18 Select iCLASS Mode (TLR401-iCLASS only)..........................19 Define Facility Code................................................................20 Choose 37-bit or 26-bit Format ...............................................20 Reset - Manually switch to Wiegand mode..............................21 Reset - Manually switch to RS485 mode.................................21 5.1 5.2 5.2.1 5.2.2 5.3 5.4 5.5 5.6 5.7 5.8 5.9 5.10 5.11 6 RS485 Configuration with NEXTOR Series Access Controller 22 Status Indication .....................................................................22 Allocation of IDs on the NEXTOR Series Access Controller....22 23 Customer Service ...................................................................23 Repairs ...................................................................................23 Warranty, Limitation on Liability to Third Parties......................23 7 Maintenance 6.1 6.2 7.1 7.2 7.3 Caution:

23 Any changes or modifications not expressly approved by the party responsible for compliance 23 could void the user's authority to operate the this equipment. 8 Datasheet Appendix 24 25 Quick Guide to Admin Functions.............................................25 Allocation of the Cable ............................................................26 Wiring Requirements ..............................................................27 8.1 8.2 8.3 4 TLR401 Administration 1 General Comments 1.1 Symbols The following symbols have been used in this manual:

Helpful tips and special characteristics of the TLR401. Careful Possible danger, which if the warning is not observed can result in damage to property, or slight to moderate bodily injury. Caution Possible danger, which - if the warning is not observed - can result in death or serious bodily injury. 5 TLR401 Administration 1.2 Device name 1.3 Intended Usage 1.4 Protection Class 1.5 Safety Measures This manual outlines the TLR401 and the supported functions. The device may only be used under conditions and for purposes for which it has been designed.

(See Chapter Environment Conditions) The device conforms to the conditions of protection class IP65. Protection class III EN60950-1. Protection class IP65 DIN EN 60529 The device has been built according to the current and recognized technical safety rules EN60950-1 and left our manufacturing facility in perfect condition. Improper handling and operation outside the specified conditions can result in dangers due to electrical current. This can endanger the lives of persons and damage the device. 1.6 Before Commissioning Inspect the device for visible damage resulting from shipment or improper storage. Do not commission a damaged device. Careful The device may only be operated with DC voltage 10 to 28V DC. The device is protected against polarity reversal. 6 TLR401 Administration 1.7 Operation Do not subject the device to any mechanical stresses such as impacts, violent shaking or heavy loads. Impacts and shaking can damage the electronics. 1.8 Installation and Service The device may only be opened by trained specialists. Disconnect the device from the power source before opening.

You may only perform repairs in collaboration with TimeLink International. 1.9 CE Conformance This device is manufactured according to the safety requirements of EN 60950. Safety of electrical equipment

European Norm EN 60950 This device complies with interference resistance criteria according to EN 55022; EN 61000-3-2/-3; EN 55024 7 TLR401 Administration 2 Technical Data 2.1 Mechanical Structure 2.2 Hardware Features

Plastic body + metal wall mount panel

Resin sealed electronics

12 inch cable molded into body iCLASS- reader 12-key Keypad

Fingerprint biometric sensor

Beeper

Keyboard illumination

Wiegand output

RS485 host interface 3 Opto-Inputs 4 red LEDs and 4 green LEDs 2.3 Biometric Sensor

Thin optical sensor 500 dpi @ 8 bit per pixel

Active area: 0,5 x 0,9 in

Template size: 130...250 bytes

Memory: 1000 templates (optionally 6000) 2.4 Visual and Audible Indicators 2.5 Connection 2.6 Interface 4 red LED and 4 green LED user interface

Beeper (3khz)

Cable with 11 circuits

RS485 interface, 19200 Baud (8/N/1)

Wiegand Output

3 Opto-inputs, active 8 TLR401 Administration 2.7 Power Supply

DC Voltage, 10...28V Minimum 1A and complying with Limited Power Source according to IEC/EN 60950-1

Power consumption max 5W 2.8 Environment Conditions

Temperature range 14 to 122 F

Protection class IP65 Indoor and Outdoor 2.9 Dimensions and Weight

Approx. 0.4 lb 4,5 in x 2,5 in x 2 in (H x W x D) 2.10 Cable Specifications

RS485 Shielded twisted pair cable (4000 feet max) Examples:

1. 2x2 strands litz wire AWG24 (0.4 kcmil) 2. J-Y(ST)Y 2x2x0,6 3. CAT 5 ... 7 STP (Shielded Twisted Pair)

Wiegand Non-twisted shielded cable (500 feet max) Examples:

1. 10 pair shielded wire AWG22 (0.64 kcmil) For shorter distances or using higher supply voltage:

2. 8 pair AWG24 (0.4 kcmil) 9 TLR401 Administration 3 Installation 3.1 Installation Requirements 3.2 Condition 3.3 Wiring For outdoor use, determine an appropriate place for mounting the TLR401. Avoid mounting in direct sunlight as this may affect the function of the biometric sensor. Direct sunlight may overheat the TLR401. Check the following for mounting the TLR401 Device needs proper clearance. All cabling must be provided, electrical cable, data cable and door opener cabling. Power supply is provided. Do not install data cables parallel to cables conducting high voltage. If unavoidable, install the data cables in conduit and keep them at a distance of 1 yd to protect them against electromagnetic interference. 10 TLR401 Administration 4 Operation 4.1 View of the Control Elements Reads iCLASS cards when held in front of the keypad. Keypad LEDs green / red 1-2-3-4 Fingerprint Sensor Execute Button #

Wall Mount Panel 11 TLR401 Administration 4.2 Basics The TLR401 is manufactured in two versions:

1. TLR401 with built-in biometrical sensor and keypad 2. TLR401-iCLASS with built-in biometrical sensor and keypad + embedded iCLASS reader The TLR401 identifies authorized users by scanning their fingerprints (and optionally their PINs and iCLASS cards). Successful identification sends a trigger signal to an access controller within a protected area and is followed by a door lock or release. The TLR401-iCLASS reads fingerprints and iCLASS cards alternatively. Fingerprint authentication requires that the authorized user's fingerprints have been enrolled in advance and that they have been linked to a unique User ID. Enrollment can be performed on the TLR401, which stores the collected data (Templates). The 'Template on Card' mode allows you to write Templates onto iCLASS cards (currently 16k2 cards only). The TLR401 can either be run using the RS485 interface or the Wiegand output:

RS485 Configuration Wiegand Configuration Running the reader using the RS485 interface means that administration of the TLR401 is done on the NEXTOR Series access controller. All administrator functions, except for enrollment, are disabled on the TLR401. Fingerprint Templates are managed by the access controller and can be distributed to the connected TLR401 readers. All administrator functions described in this manual, except for enrollment, only apply to the Wiegand configuration. All settings are entered on the keypad of the TLR401. Fingerprint templates are stored on the TLR401 and cannot be distributed to connected TLR401 readers. 4.3 Basic Operating Principles General Pressing any key triggers a beep. Release Beep tone and all LEDs flashing green Green and Red / Green LEDs Guides an administrator through the setup menus Red LEDs and Beeps Generally indicates an error Error Message The desired function was not performed. 3 short beeps and all LEDs flashing red 3 times indicate an error. 3x Key "#"

errors or wait for timeout (10-30 seconds, depending on status) to return to the default position. Press "#" three times to reset the reader to keypad default state after typing 12 TLR401 Administration 4.4 User Operation 4.4.1 Authentication, TLR401:

Authorized users who's fingers have been enrolled and who's PIN have been registered are granted access when entering:

Finger without PIN: Press

=> Bio-Sensor is illuminated Apply Finger => Green LEDs Finger plus PIN:

(Wiegand) Finger plus PIN:

(RS485)

=> Bio-Sensor is illuminated Press Apply Finger => LEDs flash Enter PIN

=> Green LEDs Press Enter PIN Apply Finger => Green LEDs

=> Green and Red LEDs 1 and 4 flash

=> Bio-Sensor is illuminated

(Access granted)

(Waiting for PIN entry)

(Access granted)

(Waiting for PIN entry)

(Access granted) 4.4.2 Authentication, TLR401-iCLASS:

Authorized users who's fingers have been enrolled and who's iClass cards and PIN have been registered on the access controller are granted access when entering:

Finger:

as above Card without PIN:

iCLASS card => Beep and short green signal

=> Green LEDs iCLASS card => Beep and short green signal Enter PIN

=> LEDs flash

=> Green LEDs Card plus PIN:

(Wiegand) Card plus PIN:

(RS485)

(Indication card was read)

(Access granted)

(Indication card was read)

(Waiting for PIN entry)

(Access granted) iCLASS card => Beep and short green signal (LEDs 2/3) (Indication card was read) Enter PIN

=> Green and Red LEDs 1 and 4 flash

=> Green LEDs

(Waiting for PIN entry)

(Access granted) 4.4.3 Authentication, 'Template on Card' (TLR401-iCLASS only) Authorized users who's fingers have been stored onto their card and who's iCLASS cards and PIN have been registered on the access controller are granted access when entering:

Card without PIN:

Card plus PIN:

iCLASS card => LEDs flash green. Beep when finished reading the card (Indication card was read)

=> Green LEDs

(Access granted) iCLASS card => LEDs flash green. Beep when finished reading the card (Indication card was read)

=> LEDs flash

=> Green LEDs

(Waiting for PIN entry)

(Access granted) Enter PIN The TLR401-iCLASS reads fingers and iCLASS cards alternatively without having to switch between operating modes. If a mistype occurs on the keypad simply press the # three times to reset and start over. The various operating modes are configured in the administrators menu as described in section 5. 13 TLR401 Administration 5 Wiegand Configuration - Administrator Functions With the exception of enrollment all administrator functions described in this section only apply to the Wiegand configuration, i.e. connecting the TLR401 to the access controller via Wiegand. Administration of the TLR401 with Wiegand is done on the reader. The Fingerprint Key user interface is comprised of the keypad, fingerprint reader and iCLASS reader as input devices and the LEDs and beeper as output devices. The administrator functions allow administrators to configure the operating modes and the Admin code. TIMELINK delivers the device with the default Admin Code '1234'. For security reasons the default Admin Code should be changed. (see below) neuen Code berschrieben werden. In addition to the Admin Code each device has a fixed access code. This code corresponds with the devices serial number, a 12-digit hexadecimal code, which is printed on the back of the reader. The 12-digit code serves as a basis for calculating the access code if your Admin Code is lost. In this case please contact TIMELINK. 5.1 Change the Admin Code The default Admin Code is '1234'. For security reasons it is advisable to change the Admin Code!

The Admin Code can be a 4-digit to 8-digit code. Admin Mode

99

Green 1+2 Default Admin Code 1234 or enter your Admin Code Function Menu Change Admin Code

(Default = 1234) xxxx #

14 #

Green 1+2+3 Green 1+2 flashing Beep 15 #

4 - 8 digits #

Green 2+3 flashing flashing Green 1+2 Beep Beep Finalize by 3 x #

or wait for Timeout

14 TLR401 Administration 5.2 Enrollment The TLR401 assigns 2 different fingers (e.g. left index finger, right index finger) to the unique User ID of a person. Each of the 2 fingers must be scanned 3 times by the Fingerprint Key reader. The biometric sensor reads fingers best when placing your finger on the sensor with some pressure. 3 x + 3 x Bright daylight may affect the function of the biometric sensor. Shadowing the sensor with your hand will help. 5.2.1 Enroll user The fingers of a new user are enrolled by entering the following on the reader's keypad:

Admin Mode

99

Green 1+2 Default Admin Code 1234 or enter your Admin Code xxxx #

Enter Enrollment Code 12 #

Green 1+2+3 Green 1+2+3+4 flashing Enter User ID *

xxxxx #

Green 1 flashing Sensor Red Apply 2 Fingers 3x if successful:

Green 1+2+3+4 flashing Finalize by 1 x #

or wait for Timeout

Entering a User ID with an incorrect number of digits, an already existing User ID, or variant IDs with Validation enabled and also if your fingers already have been scanned will prompt an error message (all red LEDs flashing three times) and cause the reader to return to it's default position.

* With Validation enabled enter your User ID a second time. After the first entry of your User ID and the '#' key, the four green quickly flashing LEDs indicate the reader to expect your User ID for a second time. 15 TLR401 Administration 5.2.2 Write Template onto iCLASS Card (TLR401-iCLASS only) Setting the reader to 'Template on Card' is required for this operation (see "Choose iCLASS Mode", page 19) and the reader must 'know' the encryption of your iCLASS cards. The 'Template on Card' mode does not store fingerprint templates to the TLR401 but writes them onto iCLASS cards instead. The reader identifies authorized users by comparing the fingerprint templates stored on the card with the scanned finger of the card holder. If the two match the reader will send the facility code and card number to the controller.

'Template on Card' may be expedient where storing biometric data is prohibited. In addition this mode offers a good alternative using biometric readers in a Wiegand configuration as users will not have to enroll on multiple readers. At this point 'Template on Card' only works with 16K2 iCLASS cards and in a Wiegand configuration. The TLR401-iCLASS will store the fingers of a new user onto iCLASS cards when entering the following on the keypad:

Admin Mode

99

Green 1+2 Default Admin Code 1234 or enter your Admin Code xxxx #

Green 1+2+3 Enter Enrollment Code 16 #

Green 1 flashing Sensor Red if successful:

Green 1+2+3+4 flashing Green 1 flashing Sensor Red Apply 2 Fingers 3x Apply Card until the writing process is completed Enroll next finger or Finalize by 3 x #

or wait for Timeout

16 TLR401 Administration 5.3 Define the Number of Digits for the User ID (optional) Here the length of the User IDs (Default = 5 digits) can be set to a value between 2 and 9 digits. In the process of enrollment User IDs need to be entered as a personal and unique ID. Admin Mode

99

Green 1+2 Default Admin Code 1234 or enter your Admin Code Function Menu Number of Digits for User ID

(Default = 5) Finalize by 3 x #

or wait for Timeout xxxx #

14 #

16 #

2 - 9 digits #

Green 1+2+3 Green 1+2 Green 3+4 if successful:

Green 1+2 flashing flashing flashing Beep Beep Beep 5.4 Enable Validation of the User ID (optional) This menu allows you to enable the validation of the User ID for enrollment to eliminate incorrect entries. Admin Mode

99

Green 1+2 Default Admin Code 1234 or enter your Admin Code Function Menu Validation of User ID Enable xxxx #

14 #

22 #

1

or Disable (Default) Finalize by 3 x #

or wait for Timeout 0

Green 1+2+3 flashing Green 1+2 Green 3+4 flashing Green flashing 1+2 Beep Beep Beep Green 1+2 flashing Beep 17 TLR401 Administration 5.5 Delete Specific User(s) This function allows you to remove a single user (User ID with its fingerprints) or several users of your choice from memory. Admin Mode

99

Green 1+2 Default Admin Code 1234 or enter your Admin Code xxxx #

Green 1+2+3 Delete Specific User(s) 13 #

Green 1+2+3+4 flashing xxxxx #

if successful:

Green 1+2+3+4 flashing Beep xxxxx #

Green 1+2+3+4 flashing Beep

User ID Optional:

More User IDs Finalize by 3 x #

or wait for Timeout 5.6 Delete Entire Database Caution This function deletes all users of the reader's database!

Admin Mode

99

Green 1+2 Default Admin Code 1234 or enter your Admin Code Enter Delete Database Press key to confirm Finalize by 3 x #

or wait for Timeout xxxx #

1357 #

Green 1+2+3 Red 1+2+3+4 flashing if successful:

Green 1+2+3 Beep Beep If you see red LEDs after pressing this indicates the database was not deleted and the procedure needs to be repeated. 18 TLR401 Administration 5.7 Select iCLASS Mode (TLR401-iCLASS only) In its default setting the iCLASS mode is activated on TLR401-iCLASS readers. This mode reads fingerprints and iCLASS cards alternatively. This menu allows you to disable the iCLASS module or to enable the 'Template on Card'

mode instead (cp. "Enrollment with 'Template on Card' enabled, page 16). Admin Mode

99

Green 1+2 Default Admin Code 1234 or enter your Admin Code Function Menu iCLASS Menu Enable iCLASS (Default) xxxx #

14 #

24

1 or Enable 'Template on Card'

2 #

Green 1+2+3 Green 1+2 3+4 1+2 Green Green flashing flashing flashing Beep Beep Beep Green 1+2 flashing Beep or Disable iCLASS 0 #

Green 1+2 flashing Beep Finalize by 3 x #

or wait for Timeout

19 TLR401 Administration 5.8 Define Facility Code These settings only apply to the trigger signal of the reader's biometric sensor sent to the access controller. The Facility Code of iCLASS cards is sent to the access controller untouched and independent of these settings. In a Wiegand configuration you can set the Facility Code of the biometric sensor according to your requirements. The Default Facility Code for 37-bit is '830'. Admin Mode

99

Green 1+2 Default Admin Code 1234 or enter your Admin Code Function Menu Define Facility Code 37-bit (Default = 830) 26-bit (Default = 1) xxxx #

14 #

20 #

1 digits 0 65535 #

0 255 #

5

Green 1+2+3 Green 1+2 flashing Green 3+4 flashing Green flashing 1+2 Beep Beep Beep Finalize by 3 x #

or wait for Timeout

Caution If both fingers and iCLASS cards are employed in a Wiegand configuration your range of fingerprint User IDs must not overlap with your range of card numbers!

5.9 Choose 37-bit or 26-bit Format These settings only apply to the trigger signal of the reader's biometric sensor sent to the access controller. The Facility Code of iCLASS cards is sent to the access controller untouched and independent of these settings. In a Wiegand configuration the format of the biometric sensor's trigger signal to the access controller can be defined (e.g. Set the biometric sensor's format to the 26-bit format if HID cards with 26-bit standard format are used). Admin Mode

99

Green 1+2 Default Admin Code 1234 or enter your Admin Code Function Menu Choose Format 37-bit with Facility Code

(Default) 26-bit with Facility Code xxxx #

14 #

19 #

0 #

Green 1+2+3 Green 1+2 Green 3+4 Green 1+2 flashing flashing flashing 1 #

Green 1+2 flashing Beep Beep Beep Beep Finalize by 3 x #

or wait for Timeout

20 TLR401 Administration 5.10 Reset - Manually switch to Wiegand mode This function allows you to reset the TLR401 to its factory defaults. All settings like the changed Admin Code, the enabled Validation of the User ID will be affected. Users however will remain untouched. The reader will be set to Wiegand mode. Admin Mode

99

Green 1+2 Default Admin Code 1234 or enter your Admin Code Enable Wiegand Mode xxxx #

1 #

Green 1+2+3 Device resets to all defaults and reboots 5.11 Reset - Manually switch to RS485 mode This function allows you to manually set the TLR401 to RS485 mode. All settings will be reset. The reader indicates its' offline status by the red flashing LED 4. The TLR401 will automatically go online once it is connected via RS485 to a controller of the NEXTOR series. Admin Mode

99

Green 1+2 Default Admin Code 1234 or enter your Admin Code Enable RS485 Mode xxxx #

2 #

Green 1+2+3 Device resets and signals its'

RS485 offline status 21 TLR401 Administration 6 RS485 Configuration with NEXTOR Series Access Controller For detailed information on the administration in the RS485 configuration please turn to the manuals of the NEXTOR Series access controllers. The TLR401 is controlled by the NEXTOR Series access controller. Administrator functions are carried out on the access controller. For security reasons the identification of the templates is processed by the TLR401. Templates are managed by the NEXTOR Series access control system and can be distributed to the connected TLR401 readers. 6.1 Status Indication

"Always Open"

All 4 green LEDs are permanently on, further input is accepted.

"Always Closed"

All 4 red LEDs are permanently on, no further input is accepted. Offline Display Offline = LED 4 flashing red, no further input is accepted. User Input is also temporarily disabled when the reader is synchronizing data from the NEXTOR Series access controller. This is indicated by LEDs 2 and 3 flashing red. 6.2 Allocation of IDs on the NEXTOR Series Access Controller On a RS485 data bus the devices are distinguished by a device ID (address). The NEXTOR Series access controller recognizes serial numbers of TLR401 readers on the bus line. These serial numbers are 12-digit hexadecimal codes (e.g. C03859110000) printed on the back of the readers. The access controller assigns the two reader IDs, ID-0 and ID-1, based upon the serial numbers according to the following rationale:

1. The NEXTOR Controller recognizes two unassigned serial numbers:

The lower value of the two is assigned to ID-0 The higher value of the two is assigned to ID-1 2. The NEXTOR Controller recognizes an already assigned serial number and one unassigned serial number:

The assigned serial number will keep its ID assignment The unassigned serial number will be assigned the available ID (0 or 1) 3. Both serial numbers are assigned by the NEXTOR Controller:

The devices keep their ID assignment The NEXTOR Series access controller allows you to change the automatic allocation. It is good practice to make note of the serial numbers for each reader location during installation. 22 TLR401 Administration 7 Maintenance Caution Danger of electric shock! Disconnect the device from the power supply before opening and before connecting cables. 7.1 Customer Service First Response identify defects and causes Contact the TimeLink hotline in the event of any device error. Have the following ready before placing your call:

Serial number of the TLR401

Customer details

What troubleshooting steps have you already taken to correct the error?

LED status

Device and controller errors

What occurred before the error?

7.2 Repairs Careful You may only undertake repair work after coordination with TimeLink International. 7.3 Warranty, Limitation on Liability to Third Parties In accordance with national statutory regulations at the place where the device is installed Caution:

Any changes or modifications not expressly approved by the party responsible for compliance could void the user's authority to operate the this equipment. 23 TLR401 Administration 8 Datasheet Credentials iCLASS card reading Template on card Biometric (fingerprint) PIN Code Host Interface RS485 Wiegand Biometric Features:

Search Modes 1 to 1 identification 1 to many verification Response/Reads Enrollment <= 1 sec Identification <= 1 sec Verification <= 0.8 sec FAR & FRR adjustable Sensor Thin optical sensor 500 dpi @ 8-bit per pixel Active area: .55 x .87 in (14mm x 22mm) Templates Template Size: ~130 to 250 bytes Storage Capacity: 1000 or 6000 templates by model (not valid for template on card) Power 10 bis 28V DC / 67mA -160mA Operating Temperature 0 to 122 F (-18 to 50 C) Relative Humidity 0 to 95%, Mechanical NEMA IP65 rated Metal Mounting Plate Resin-sealed hard plastic enclosure Color Options Black, Silver and White Dimensions 4.7 x 2.4 x 1.8 in (120 x 60 x 45 mm) 24 TLR401 Administration Appendix 8.1 Quick Guide to Admin Functions Enter Functions

# 99 # Open Admin Mode 1234 # Enter Default Admin Code (or your Admin Code) 1 # Reset - Manually switch to Wiegand Mode 2 # Reset - Manually switch to RS485 Mode 12 # Enroll user 16 # Write Template onto iCLASS Card (TLR401-iCLASS only) 13 # Delete Specific User(s) 1357 # Delete Entire Database 14 # Open Function Menu 15 # Change the Admin Code (4-8 digits) Default = 1234 24 # Select iCLASS Mode (TLR401-iCLASS only) Default = 1 0 = disabled 1 = enabled 2 = enable 'Template on Card'

16 # Define the Number of Digits for the User ID (2-9 digits) Default = 5 l a n o i t p O 22 # Enable Validation of the User ID Default = 0 0 = disabled 1 = enabled 19 # Choose 37-bit or 26-bit Format 0 = 37-bit 1 = 26-bit Default = 0 20 # Define Facility Code Default = 830 Default = 1 0 - 65535 (37-bit) 0 - 255

(26-bit) Page 21 21 15 16 18 18 14 19 17 17 20 20 25 TLR401 Administration 8.2 Allocation of the Cable Purpose Shield RS485A RS485B DC in + 12...24V DC in () Wiegand out D1 Wiegand out D0 Wiegand ground Green LEDs (Opto-In 1) Beeper (Opto-In 2) Red LEDs (Opto-In 3) Tamper Switch-NO Color Shield Yellow Black of Yellow Red Black of Red White Brown Black of Brown Blue Black of Blue Black of Green Green Remarks:

Connectors on the Door Unit Wiegand RS485 X38/X39 (3) X38/X39 (2) X36/X37 (+) X36/X37 () X36/X37 (+) X36/X37 () X38/X39 (2) X38/X39 (3) X38/X39 (1) X15/X17 (1) X16/X18 (1) The wires are arranged in twisted pairs, one colored wire with a black wire respectively. The Opto-Inputs are activated, when connected to "Wiegand Ground" (e.g. when used as a Wiegand reader "Opto-In-1" enables the green LEDs, "Opto-In-2" the beeper and "Opto-In-3" the red LEDs).

"Wiegand out D0/D1" is open collector to "Wiegand ground". The "tamper switch" switches to "Wiegand ground" (Normally open). 26 TLR401 Administration 8.3 Wiring Requirements Notice:

Do not install data cabling parallel to high voltage cables. If unavoidable install data cabling in conduit and keep a distance of 3 ft. to protect from electromagnetic interference. RS485 Shielded twisted pair cable (4000 feet max) e.g.:

1. 2x2 strands litz wire AWG24 (0.4 kcmil) 2. J-Y(ST)Y 2x2x0,6 3. CAT 5 ... 7 STP (Shielded Twisted Pair) Wiegand Non-twisted shielded cable (500 feet max) e.g.:

1. 10 pair shielded wire AWG22 (0.64 kcmil) For shorter distances or using higher supply voltage:

2. 8 pair AWG24 (0.4 kcmil) Consider whether or not to supply power with the data cable. Long distances require an increased gauge of cable. Supplying power locally or having an extra power cable pull may be preferable. Because of voltage drop over longer distances use of a 24V power source is the recommended choice. Example for calculating the power supply wiring:

1. AWG22 cable (0,34 mm2):

Loop resistance ca 115 ohm / km TLR401 current with 12V = 0,2A Cable length 150m Voltage drop: 115 ohm / km * 0.15km * 0,2A = 3.45V The supply voltage should be 15V in this case 2. AWG24 cable (0,25 mm2):

Loop resistance ca 180 ohm / km TLR401 current with 12V = 0,2A Cable length 150m Voltage drop: 180 ohm / km * 0.15km * 0,2A = 5,4V The supply voltage should be 18V in this case 27 TLR401 Administration 28 TLR401 Administration 29

TLR401 FP Administration and Enrollment TLR401 FINGERPRINT KEY Manual Version 1.2 TIMELINK International GmbH 1 TLR401 FP Administration and Enrollment TIMELINK International GmbH Mollenbachstrasse 19 D-71229 Leonberg Telefon (0 71 52) 93979-0 Telefax (0 71 52) 93979-50 info@titze.de TLR401 FP Enrollment Manual Version 1.2 Copyright 2008 TIMELINK International GmbH This Manual is protected by copyright. The user manual may only be copied within the framework of the intended usage. Any reproduction or translations of the manual beyond this or its transmission onto electronic media, even in extract form, is only allowed with the express permission of TimeLink International. TimeLink International reserves the right to make changes to the user manual and to the devices without special notice. TimeLink International does not accept any liability whatsoever for direct or indirect damage, especially loss of data, that results from the usage of the TLR401 terminal, or from the information in this Manual 2 TLR401 FP Administration and Enrollment Content 1 General Comments 1.1 1.2 1.3 1.4 1.5 1.6 1.7 1.8 1.9 2 Technical Data 2.1 2.2 2.3 2.4 2.5 2.6 2.7 2.8 2.9 2.10 3.1 3.2 3.3 3 Installation 6 Symbols....................................................................................6 Device name.............................................................................7 Intended Usage ........................................................................7 Protection Class........................................................................7 Safety Measures.......................................................................7 Before Commissioning..............................................................7 Operation..................................................................................7 Installation and Service.............................................................8 CE Conformance ......................................................................8 9 Mechanical Structure ................................................................9 Hardware Features ...................................................................9 Biometric Sensor.......................................................................9 Display......................................................................................9 Connection................................................................................9 Interface....................................................................................9 Power Supply..........................................................................10 Environment Conditions..........................................................10 Dimensions and Weight ..........................................................10 Cable Specifications ...............................................................10 11 Installation Requirements........................................................11 Condition ................................................................................11 Wiring .....................................................................................11 4 Configuration Settings 4.1 12 Before Power ON....................................................................12 5 Wiring and Jumpers 6 General Introduction 12 13 3 TLR401 FP Administration and Enrollment 6.1 6.2 6.3 6.4 6.4.1 6.4.2 View of the control elements ...................................................13 Basics.....................................................................................14 Basic operating principles .......................................................14 Operating modes ....................................................................15 User Operation (without iCLASS):...........................................16 User Operation with iCLASS:..................................................16 7 Administrator Functions 17 Enrollment...............................................................................17 Delete Single User..................................................................18 Delete Database .....................................................................19 Change to Operation Mode Identify (Default)..........................19 Change to Operation Mode Verify...........................................20 Change to Operation Mode User ID from iCLASS Card..........20 Operation Mode User ID from iCLASS Card ...........................20 Verify with iCLASS Card .........................................................21 Enroll with iCLASS..................................................................21 Adjust Admin Code .................................................................21 Define the number of digits for the User ID .............................22 Enable PIN mode and defining its number of digits.................22 Enable Re-Entry of PIN and User ID.......................................23 Enable iCLASS Mode .............................................................23 Learn iCLASS admin card.......................................................24 Define door opening time........................................................24 Adjust Standalone output mode (e.g. Wiegand 37 bit , 26 bit or RS485 security mode)_...........................................................25 Adjust HID Wiegand facility code ............................................25 Setting the display in Standalone mode ..................................26 Loading firmware (for authorized service personal only) .........26 Reset to defaults.....................................................................27 Hardware reset .......................................................................27 7.1 7.2 7.3 7.4 7.5 7.6 7.6.1 7.6.2 7.6.3 7.7 7.8 7.9 7.10 7.11 7.12 7.13 7.14 7.15 7.16 7.17 7.18 7.19 8 Online Operation with Host 28 Connecting the TLR401 to the door unit (BDC).......................29 8.1 9 Maintenance 31 4 TLR401 FP Administration and Enrollment 10 Appendix 9.1 9.2 9.3 Customer Service ...................................................................31 Repairs ...................................................................................31 Warranty, Limitation on Liability to Third Parties......................31 32 TLR401 Configuration Examples ............................................32 Setting the Reader to Fingerprint and iCLASS Mode ..............32 Enabling the PIN Mode ...........................................................32 Enrollment with PIN ................................................................32 Quick Guide to Admin Functions.............................................33 Allocation of the cable.............................................................34 Wiring requirements................................................................35 10.1 10.1.1 10.1.2 10.1.3 10.2 10.3 10.4 5 TLR401 FP Administration and Enrollment 1 General Comments 1.1 Symbols The following symbols have been used in this manual:

Check a subject matter or a process. Carry out an action. Helpful tips and special characteristics of the TLR401 Careful Possible danger, which if the warning is not observed can result in damage to property, or slight to moderate bodily injury. Caution Possible danger, which - if the warning is not observed - can result in death or serious bodily injury. 6 TLR401 FP Administration and Enrollment 1.2 1.3 Device name Intended Usage 1.4 Protection Class 1.5 Safety Measures This manual describes the TLR401 and the relating firmware. The device may only be used under conditions and for purposes for which it has been designed.

(See Section Description and Chapter Environment Conditions.) The device conforms to the conditions of protection class IP65. Protection class3 EN60950. Protection class IP65 DIN EN 60529 The device has been built according to the state of the art and recognized technical safety rules EN60950 and left our manufacturing facility in perfect condition. Improper handling and operation outside the specified conditions can result in dangers due to electrical current. This can endanger the lives of persons and damage the device. 1.6 Before Commissioning Careful Check the device for visible damage resulting from shipment or improper storage. Do not commission a damaged device. The device may only be operated with AC voltage 10 to 28V AC The device is protected against polarity reversal. 1.7 Operation 7 TLR401 FP Administration and Enrollment Do not subject the device to any mechanical stresses such as impacts, violent shaking or heavy loads. Impacts and shaking can damage the electronics. 1.8 Installation and Service 1.9 CE Conformance The device may only be opened by trained specialists. Disconnect the device from the power source before opening. You may only perform repairs in collaboration with Timelink International This device is manufactured according to the safety requirements of EN 60950. Safety of electrical equipment European Norm EN 60950 This device complies with interference resistance criteria according to EN 55022; EN 61000-3-2/-3; EN 55024 8 TLR401 FP Administration and Enrollment 2 Technical Data 2.1 Mechanical Structure Plastic body + metal wall mount panel Electronics molded in body 12 inch cable molded into body 2.2 Hardware Features iCLASS reader 12-key Keypad Fingerprint biometric sensor Beeper Keyboard illumination Wiegand output RS485 host interface 3 Opto-inputs 4 red LEDs and 4 green LEDs 2.3 Biometric Sensor 2.4 Display 2.5 Connection 2.6 Interface Thin optical sensor 500 dpi @ 8 bit per pixel Active area: 0.5 x 0.9 in Template size: 130-250 bytes Memory: 1000 templates (optional 6000 templates) 4 red LED and 4 green LED user interface 1 3khz Beeper Cable with 11 circuits Host interface RS485, 19200 Baud Wiegand output 3 Opto-inputs, active 9 TLR401 FP Administration and Enrollment 2.7 Power Supply DC Voltage, 10V-28V, 100VA

(limited power source for US and Canada) Power consumption max 5W 2.8 Environment Conditions Temperature range 14F to 122 F Indoor and Outdoor 2.9 Dimensions and Weight Approx. 0.4 lb 4.5 in x 2.5 in x 2 in (H x W x D) 2.10 Cable Specifications Connecting cable: Matched drilled and shielded telephone cable 10 TLR401 FP Administration and Enrollment 3 Installation 3.1 Installation Requirements 3.2 Condition 3.3 Wiring The customer must provide cabling and power source. For outdoor use, consider an appropriate place for mounting the TLR401. Direct sunlight might overheat it. Bright daylight may also affect the function of the biometric sensor. Shadowing the sensor with your hand will help. Check the following for mounting the TLR401 All cabling must be provided, electrical cable, data cable and door opener cabling. Device needs enough clearance. Do not install any data lines parallel to cables conducting high voltage. If this is unavoidable, install the data lines within closed steel conduit and keep them at a distance of 1 yd to protect them against electromagnetic interference. 11 TLR401 FP Administration and Enrollment 4 Configuration Settings 4.1 Before Power ON Check Cabling?

Parameters?

Data line connections?

Set jumpers of the resistors?

Power for the TLR401?

5 Wiring and Jumpers 12 TLR401 FP Administration and Enrollment 6 General Introduction 6.1 View of the control elements LED green / red 1-2-3-4 Keypad Fingerprint Sensor Finalize Button #

13 TLR401 FP Administration and Enrollment 6.2 Basics The TLR401 is manufactured in 2 versions:

1. TLR401 with built-in biometric sensor and keypad 2. TLR401 with built-in biometrical sensor and keypad + embedded iCLASS reader The TLR401 identifies authorized persons by scanning their fingerprints. Successful identification sends a trigger signal to another device (BBDC) within a protected area and is followed by a door or lock release. Fingerprint authentication requires that the authorized persons fingerprints have been enrolled beforehand and that they have been linked to a unique User ID. Enrollment can be executed on the TLR401, which stores the collected data. During enrollment users can choose a 2 to 9-digit numeric PIN (Personal Identification Number). It is only employed in operating mode Identify and provides additional user protection. In order to prevent incorrect input, PIN and User ID will be entered 2 times each during enrollment. 6.3 Basic operating principles General Pressing a key triggers a beep (0.1 seconds) and permanently illuminates the first green LED. If no further input follows, the LED light will turn off after a defined time period. Door Release Beep tone and all LEDs flashing green Green and Red / Green LEDs Guide through menus Red LEDs and Beeps Generally indicate an error Error Message 3 short beeps and all LEDs flashing red 3 times indicate an error. The desired function was not performed. 3x Key #

Triple press "#" after typing errors or wait for timeout (10-30 seconds, depending on status) to return to the starting position. 14 TLR401 FP Administration and Enrollment 6.4 Operating modes Each TLR401 can be set up in two different main modes of operation which can be combined with sub-operating modes. The TLR401 operational modes are defined by function menus and adjustable codes. Two Main Modes of Operation Standalone: All fingerprint templates are maintained on the TLR401. All required data can be fed into the TLR401. Door opening code will be put out via Wiegand or an RS485 security code to an according door control module. Host:

All fingerprint templates are maintained on the controller and, if necessary, matched with TLR401. 15 TLR401 FP Administration and Enrollment 6.4.1 User Operation (without iCLASS):

No PIN With PIN Press Apply Finger Press Enter PIN Apply Finger

=> Bio-Sensor is illuminated,

=> Red or Green lights

=> LEDs 1 and 4 flash

=> Bio-Sensor is illuminated

=> Red or Green lights 6.4.2 User Operation with iCLASS:

No PIN, No iCLASS With PIN, No iCLASS Press Apply Finger Press Enter PIN Apply Finger

=> Bio-Sensor is illuminated,

=> Red or Green lights

=> LEDs 1 and 4 flash

=> Bio-Sensor is illuminated

=> Red or Green lights No PIN, With iCLASS With PIN, With iCLASS Press Apply iCLASS badge

=> Bio-Sensor is illuminated and off again

=> LEDs 2 and 3 flash

=> Red or Green LEDs Press Enter PIN Apply iCLASS badge

=> LEDs 1 and 4 flash red and green

=> LEDs 2 and 3 flash red and green

=> Red or Green lights After typing errors triple press # or wait for timeout The different operating modes are configured in the administrators menu as described in Section 7. 16 TLR401 FP Administration and Enrollment 7 Administrator Functions The Fingerprint Key user interface comprises keyboard, fingerprint reader and iCLASS reader as input devices and LEDs and beepers as output devices. The administration function users allows to adjust the different operating modes and appropriate codes. The device will be delivered with a default admin code (1234). For security reasons the default admin code should be changed. neuen Code berschrieben werden. Each device has its permanent access code which is found on the shipping ticket used during delivery. This code corresponds with the devices unique ID. It is randomized following a special algorithm only known to the company. The unique ID is visibly attached to the enclosure and serves as a basis for recalculating a lost original code if necessary. Individual codes for performing different functions can be tuned via Administrator menu. 7.1 Enrollment The TLR401 assigns 2 different fingers (e.g. left index finger, right index finger) to the USER ID of a person. Each of the 2 fingers must be scanned 3 times by the Fingerprint Key reader. 3 x + 3 x Bright daylight may affect the function of the biometric sensor. Shadowing the sensor with your hand will help. 17 TLR401 FP Administration and Enrollment Admin Mode Default admin code 1234 or enter your admin code Enter Enrollment Code Enter User-ID

(Enter twice with re-entry active) 99 #

xxxx #

12 #

xxxx #

xxxx #

Green 1+2 Green 1+2+3 Green 1+2+3+4 Green 1+2+3+4 If successful 2x Beep Note: A wrong length User ID, an already assigned User ID or two different IDs

(with Re-entry enabled) will prompt an alarm message and the device will go back to its initial state. With activated PIN Entry Enter PIN With Re-Entry, once again PIN Enter PIN xxx #

xxx #

xxx #

Green 1+4 Beep 1 second Green 2+3 If successful 2x Beep 7.2 Delete Single User This function removes fingerprints allocated to a User ID from memory. Admin Mode Default admin code 1234 or enter your admin code 99 #

Green 1+2 xxxx #

Green 1+2+3 Single Delete Code

`````````13 #

Green 1+2+3+4 User ID xxxx + #

Green 1+2+3+4 Opt. further User IDs Finalize by 3x #

or Timeout Green 1+2+3+4 xxxx #

18 TLR401 FP Administration and Enrollment 7.3 Delete Database Caution This function deletes and reformats the fingerprint readers database for new entries. Admin Mode Default admin code 1234 or enter your admin code Enter Delete Code Press key 99 #

xxxx #

1357 #

Green 1+2 Green 1+2+3 Red 1+2+3+4 Beep Green 1+2+3 Beep Red LEDs > Error Repeat Database delete Change to Operation Mode Identify (Default) 7.4 Fingerprint will be compared with the saved fingerprints (identified). This process might take longer with large databases. Admin Mode Default admin code 1234 or enter your admin code Operation Mode Identify Finalize by 3x #

or Timeout 99 #

Green 1+2 xxxx #

Green 1+2+3 Green 1+2+3+4 Beep 10 #

19 TLR401 FP Administration and Enrollment 7.5 Change to Operation Mode Verify User ID will be compared to the saved fingerprint (verified). Admin Mode Default admin code 1234 Or enter your admin code Operation Mode Verify Finalize by 3x #

or Timeout 99 #

Green 1+2 xxxx #

Green 1+2+3 Green 1+2+3+4 Beep 11 #

7.6 Change to Operation Mode User ID from iCLASS Card Admin Mode Default admin code 1234 Or enter your admin code 99 #

Green 1+2 xxxx #

Green 1+2+3 Operation Mode from iCLASS 0007 #

Green 1+2+3+4 Beep Finalize by 3x #

or Timeout

7.6.1 Operation Mode User ID from iCLASS Card In normal position the iCLASS reader is active waiting for a card to be presented, the keypad is switched off. The User ID is read in via card, not via keypad. The Administrator Card activates the keypad for Administrator function. Entry "99#"

functions the same setting the mode for Administrator Code input (Level-2), the green LED 1 and LED 2 flash. 20 TLR401 FP Administration and Enrollment 7.6.2 Verify with iCLASS Card This operation mode stores fingerprint and User ID together. The User ID must be read from the iCLASS Card and then fingerprint scan will follow. If the fingers User ID matches the User ID stored, a release action is triggered. Procedure:

The user presents his card with his User ID. If the User ID is found, the fingerprint reader flashes for a finger to be presented. If the finger matches the User ID associated a beep is heard and all LEDs flash green to indicate release. A finger that does not fit the data records will cause the fingerprint reader lights to turn off. If no User ID is detected means then no action will take place. 7.6.3 Enroll with iCLASS Same procedure as described above except the User ID is replaced by presenting the iCLASS card instead of keypad entry. To exit this function menu the administrator card needs to be presented or wait for a timeout to get back to the initial state. 7.7 Adjust Admin Code Admin Mode Default admin code 1234 or your admin code Function menu Adjust admin code

(Default = 1234) Finalize by 3x #

or Timeout 99 #

xxxx #

14 #

15 #

4 - 8 digits #

Green 1+2 Green 1+2+3 Green 1+2 Beep Green 2+3 Beep Green 1+2 Beep 21 TLR401 FP Administration and Enrollment 7.8 Define the number of digits for the User ID Admin Mode 99 #

Green 1+2 Default admin code 1234 Or enter your admin code Function menu Number digits User ID

(Default = 5) Finalize by 3x #

or Timeout xxxx #

14 #

16 #

2 - 9 digits #

Green 1+2+3 Green 1+2 Beep Green 3+4 Beep Green 1+2 Beep 7.9 Enable PIN mode and defining its number of digits Admin Mode 99 #

Green 1+2 Default admin code 1234 or enter your admin code Function menu Enable PIN / number digits Default = 0 (PIN disabled) Finalize by 3x #

or Timeout xxxx #

14 #

21 #

2 - 9 digits #

Green 1+2+3 Green 1+2 Beep Green 3+4 Beep Green 1+2 Beep 22 TLR401 FP Administration and Enrollment 7.10 Enable Re-Entry of PIN and User ID Admin Mode Default admin code 1234 or enter your admin code Function menu Re-Entry PIN + User ID Enable Disable (Default) Finalize by 3x #

or Timeout 7.11 Enable iCLASS Mode Admin Mode Default admin code 1234 or enter your admin code Function menu iCLASS Menu Enable Disable (Default) Finalize by 3x #

or Timeout 99 #

xxxx #

14 #

22 #

1 #

0 #

99 #

xxxx #

14 #

24 #

1 #

0 #

Green 1+2 Green 1+2+3 Green 1+2 Beep Green 3+4 Beep Green 1+2 Beep Green 1+2 Beep Green 1+2 Green 1+2+3 Green 1+2 Beep Green 3+4 Beep Green 1+2 Beep Green 1+2 Beep 23 TLR401 FP Administration and Enrollment 7.12 Learn iCLASS admin card Admin Mode 99 #

Green 1+2 Default admin code 1234 or enter your admin code Function menu Menu: learn iCLASS admin card 0009 #

Apply card xxxx #

14 #

Green 1+2+3 Green 1+2 Beep Green 1+4 Beep Beep Device is in operation mode with iCLASS User ID. Other operation modes can be adjusted. Caution No Timeout In case of failure reader is in iCLASS Mode without admin card. This status can only be reversed by hardware reset. 7.13 Define door opening time Admin Mode Default admin code 1234 or enter your admin code Function menu Door opening time 3 digits Example: 100 = 10 sec. 030 = 3 sec. (Default) Finalize by 3x #

or Timeout 99 #

xxxx #

14 #

17 #

xxx #

Green 1+2 Green 1+2+3 Green 1+2 Beep Green 1+4 Beep Green 1+2 Beep 24 TLR401 FP Administration and Enrollment 7.14 Adjust Standalone output mode (e.g. Wiegand 37 bit , 26 bit or RS485 security mode)_ Admin Mode Default admin code 1234 or enter your admin code Function menu Output menu Wiegand 37bit Facility Code

(Default) Wiegand 26bit Facility Code Finalize by 3x #

or Timeout 99 #

xxxx #

14 #

19 #

0 #

1 #

Green 1+2 Green 1+2+3 Green 1+2 Beep Green 3+4 Beep Green 1+2 Beep Green 1+2 Beep Query inputs in Standalone Mode, as long as the inputs are addressed the respective outputs are active. opto-in-1 = green LED opto-in-2 = Beeper opto-in-3 = red LED 7.15 Adjust HID Wiegand facility code Admin Mode 99 #

Green 1+2 Default admin code 1234 or enter your admin code Function Menu Facility code menu xxxx #

14 #

20 #

1 5 digits #

e.g. Wiegand 37bit (Default = 830) 0 65535 #

Wiegand 26bit (Default = 1) 0 255 #

Finalize by 3x #

or Timeout

Green 1+2+3 Green 1+2 Beep Green 3+4 Beep Green 1+2 Beep 25 TLR401 FP Administration and Enrollment 7.16 Setting the display in Standalone mode Admin Mode Default admin code 1234 or enter your admin code Function menu Display menu Disable Enable

(Default) Finalize by 3x #

or Timeout 99 #

xxxx #

14 #

23 #

1 #

0 #

Green 1+2 Green 1+2+3 Green 1+2 Beep Green 3+4 Beep Green 1+2 Beep Green 1+2 Beep 7.17 Loading firmware (for authorized service personal only) Admin Mode Default admin code 1234 or enter your admin code Function menu Menu firmware 99 #

xxxx #

14 #

0001 #

Green 1+2 Green 1+2+3 Green 1+2 Beep Green 1-4 In order to load a new release of the TLR401s firmware it must be set to its loading mode. First turn off the reader and then plug in the USB cable to X3 and unplug jumper X11. Then turn on the TLR401 and proceed to the loading menu as indicated above. Load firmware from your computer. When finished unplug the USB cable, set jumper X11 and turn off and back on the TLR401. 26 TLR401 FP Administration and Enrollment 7.18 Reset to defaults Admin Mode Default admin code 1234 or enter your admin code Function menu Menu reset to defaults Device resets to all defaults and reboots 99 #

xxxx #

14 #

0000 #

7.19 Hardware reset Green 1+2 Green 1+2+3 Green 1+2 Beep There are operating modes in combination with iCLASS that lock the keypad. If an iCLASS admin card got lost, a reset can be the appropriate reaction. Connecting Wiegand-Out-D0 (brown) to Opto-In-1 (blue) during a turn-on procedure sets the device back to default mode. All other settings will be retained. 27 TLR401 FP Administration and Enrollment 8 Online Operation with Host With this setup the host access control system manages the TLR401. While enrolling, no operation with the key pad is needed, except for presenting the finger that must be enrolled. For security reasons the identification of the templates is processed by the TLR401. Along with fingerprint-based operation, the TLR401 can be used with iCLASS cards. Instead of using a finger, the user can be identified by his iCLASS card for if his finger is unreadable. Templates are organized by the host and can be distributed to the connected TLR401 readers . The PIN code is not processed locally. In the case of a successful identification the TLR401 will send a message to the host. The host controls the door opener. The administration of the TLR401 is done on the host system. The host system processes signaling, e.g. release or reject (see host manual) Always Open"

(all 4 green LEDs are permanently on, further inputs are accepted)

"Always Closed"

(all 4 red LEDs are permanently on, no further inputs are accepted) Online/Offline display (can be switched off by the host) Offline = Red LED flashes 4 times Online = Green LED flashes 4 times While the device is offline no further inputs are accepted. Inputs are also temporarily blocked when the biometric reader is loading data from the host. This is indicated by the red flashing LEDs 2 and 3. 28 TLR401 FP Administration and Enrollment 8.1 Connecting the TLR401 to the door unit (BDC) Generally:

The number of TLR401 connected to one BDC is limited to two. Physically :

The devices are connected by a so called bus connection, which means there is one long cable with short stubs to the devices. Long can mean up to 1300 yards and short can mean up to 5 yards (these are approximate values). The rule of thumb is the shorter the long cable the shorter the stubs. The two furthermost devices must have termination resistors (these are built in on the BDC and TLR401 and can be activated by two jumpers, see hardware manuals). If there are two TLR401 devices, it is best to connect one on the BDC reader terminal-1, the other on the BDC reader terminal-2. The BDC is in the middle of the bus, which means there are no termination resistors for the BDC, but both TLR401s need their termination resistors activated. With one TLR401 connected to the BDC both the BDC and the TLR401 must have their termination resistors activated. Logically:

On a bus line the devices are distinguished by a device ID (address). The TLR401 devices have a built in unique-number. The BDC recognizes all available unique numbers on the bus line. On the TLR401 you will find the unique-number printed as a 12 digit binary number. In order to avoid confusion it might be helpful for the installer to create a list of device unique-numbers and their respective locations. The BDC assigns the two IDs 0 and 1 to the recognized unique-numbers according to the following logic:

The BDC recognizes two unknown unique-numbers =>

The lower unique-number is assigned to ID-0. The higher unique-number is assigned to ID-1. The BDC recognizes an already known unique-number and one unknown unique-

number =>

The known unique-number will keep its ID-assignment. The unknown unique-number will be assigned the available ID (0 or 1). Both unique-numbers are known by the BDC =>

The devices keep their ID assignment. 29 TLR401 FP Administration and Enrollment Possible operations on the Web Interface in regards to the unique-numbers Display the recognized unique-numbers and their ID assignments. Reset the existing assignments and a new assignment according to specified logic. Free assignment of unique-numbers and IDs. 30 TLR401 FP Administration and Enrollment 9 Maintenance Caution Danger of electric shock! Disconnect the device from the power supply before opening and before connecting cables. 9.1 Customer Service First Response identify defects and causes Phone the Timelink hotline in the event of any malfunctions. Note the following points before placing your call:

Serial number of the TLR401 Unique-number Customer number What action have you already taken to rectify the defect?

LED condition Device and host errors What action happened before the error appears?

What did you do for correcting the error?

9.2 Repairs Careful You may only undertake repair work after coordination with Timelink International Repairs must be performed professionally. Use genuine spare parts only. 9.3 Warranty, Limitation on Liability to Third Parties In accordance with national statutory regulations at the place where the device is installed 31 TLR401 FP Administration and Enrollment 10 Appendix 10.1 TLR401 Configuration Examples 10.1.1 Setting the Reader to Fingerprint and iCLASS Mode 1. 2. 3. 4. 5. Enter 99 #

1234 #

14 #

24 #

1 #

Details Admin mode Enter admin code (here the default code) Open Function menu Open iCLASS menu (default = 0, disabled) Enable iCLASS mode The TLR401 is now set to iCLASS mode. Once the user enters the reader is ready to read the iCLASS card and indicates this by LEDs 2+3 flashing red and green. Entering the user still can be identified through the fingerprint module. 10.1.2 Enabling the PIN Mode If you wish to use the reader in PIN mode it is imperative in standalone mode to enable the PIN mode before users enroll so that each user can enter his individual PIN in the enrollment process. 1. 2. 3. 4. 5. Enter 99 #

1234 #

14 #

21 #

2-9 #

Details Admin mode Enter admin code (here the default code) Open Function menu Open PIN menu (default = 0, disabled) Enable PIN mode and define at the same time the number of digits of at least 2 digits to a maximum of 9 digits. The TLR401 is now set to PIN mode. Once the user enters the reader expects the user to enter his personal PIN before identifying the finger and indicates this by LEDs 1+4 flashing red and green. Enrollment now will entail first entering the User ID then the PIN and then reading two fingers three times each. 10.1.3 Enrollment with PIN 1. 2. 3. 4. 5. 6. 7. Details Admin mode Enter admin code (here the default code) Enable enrollment Enter 99 #

1234 #

12#

e.g. 00001 # Enter User ID (here 5 digits, the default) e.g. 0001 #

3 x finger 1 3 x finger 2 Enter PIN (here 4 digits) Two fingers (e.g. thumbs, left & right) are read three times each Apply the second finger three times The user is stored on the database of the TLR401. The reader now will identify the user by his PIN and his fingerprints. 32 TLR401 FP Administration and Enrollment 10.2 Quick Guide to Admin Functions 99 #

Enable admin mode 1234 #

Enter admin code (or enter individual code) Enroll Delete one user (User ID) 12 #

13 #

1357 # Delete entire database 10 #

11 #

0007 #

Identify Verify Verify with iCLASS 14 #

15 #

16 #

21 #

22 #

24 #

Function menu New admin code (4-8 digits) Number of digits: User ID (2-9 digits) Number of digits: PIN (2-9 digits) 0 = disabled Re-entry of PIN and User ID 0 = disabled 1 = enabled iCLASS mode 0 = disabled 1 = enabled 0009 # Learn iCLASS admin card 17 #

Door opening time 3 digits with leading zeros Output mode 0 = Wiegand 37 bit 1 = Wiegand 26 bit HID Wiegand facility code 0 - 65535 = 37 bit 0 - 255 = 26 bit Release local display 0 = enable 1 = disable Load bio-sensor firmware Reset configuration to original settings 19 #

20 #

23 #

0001 #

0000 #

(default = 1234)

(default = 5)

(default =0)

(default = 0)

(default = 0)

(default = 030 => 3 sec)

(default = 0)

(default = 830)

(default = 1)

(default = 0) 33 TLR401 FP Administration and Enrollment 10.3 Allocation of the cable connector on board details color of wire

Screen RS485B RS485A tamper switch-NO opto-in-2 opto-in-3 DC in + 12...24V DC in () Viso common Wiegand out D1 Wiegand out D0 opto-in-1 X1 1 2 3 4 X4 1 2 3 4 X5 1 2 3 4 Remarks:

Screen Wire black of yellow yellow green black of blue black of green red black of red black of brown white brown blue The wires are arranged in twisted pairs, one colored wire with a black wire respectively. RS485: The last device in the line must be provided with 2 jumpers in JP1. Opto-in-x Goes active, when connected to "Viso common" (e.g. in "stand alone Wiegand" mode "opto-in-1" enables the green, "opto-in-2" the red LEDs and "opto-in-3" the beeper). Wiegand out is open collector to "-Viso common"

Tamper switch switches to "-Viso common"

34 TLR401 FP Administration and Enrollment 10.4 Wiring requirements Notice:

Do not lay the data lines parallel to high voltage cables. If unavoidable lay the lines in closed steel tubes and keep a distance of 3 ft. for the protection from electromagnetic interference. RS485 Shielded twisted pair cable (1300 yards max) e.g.:

1. 2x2 strands litz wire AWG24 (0.4 kcmil) 2. J-Y(ST)Y 2x2x0,6 3. CAT 5 ... 7 STP (Shielded Twisted Pair) Wiegand Non-twisted shielded cable (150 meters max) e.g.:

1. 10 strands shielded litz wire AWG22 (0.64 kcmil) For shorter distances or using higher supply voltage:

2. 8 strands litz AWG24 (0.4 kcmil) Consider whether or not to supply power with the data cable. Long distances require an increased diameter of the cable. Supplying power locally or having an extra power cable may be preferable. Because of voltage drop over longer distances the 24V power supply may be the appropriate choice. Example for calculating the power supply wiring:

1. AWG22 cable (0,34 mm2):

Loop resistance ca 115 ohm / km TLR401 current with 12V = 0,2A Cable length 150m Voltage drop: 115 ohm / km * 0.15km * 0,2A = 3.45V The supply voltage should be 15V in this case 2. AWG24 cable (0,25 mm2):

Loop resistance ca 180 ohm / km TLR401 current with 12V = 0,2A Cable length 150m Voltage drop: 180 ohm / km * 0.15km * 0,2A = 5,4V The supply voltage should be 18V in this case 35 TLR401 FP Administration and Enrollment 36 TLR401 FP Administration and Enrollment 37