FCC ID: P5W-8610K007 InTouch DX with HID 13.56 MHz Smart Card Reader

Kronos InTouch DX User Guide How to use and administer the Kronos InTouch DX timeclock. Document Revision: 2 The information in this document is subject to change without notice and should not be construed as a commitment by Kronos Incorporated. Kronos Incorporated assumes no responsibility for any errors that may appear in this manual. This document or any part thereof may not be reproduced in any form without the written permission of Kronos Incorporated. 2019 Kronos Incorporated. All rights reserved. Altitude, Altitude Dream, Altitude Pairing, Altitude PBS, CardSaver, Gatekeeper, Gatekeeper Central, Keep.Trac, Kronos, Kronos InTouch, Kronos Touch ID, the Kronos logo, Kronos Workforce Ready, My Genies, OptiLink, ShiftLogic, ShopTrac, Timekeeper Central, TimeLink, Unicru, Visionware, Workforce Accruals, Workforce Central, Workforce Genie, and Workforce TeleTime are registered trademarks of Kronos Incorporated or a related company. ACA Manager, Altitude BLISS, Altitude Insight, Altitude MPP, Altitude MPPXpress, Altitude Rostering, Altitude VBS, CMS, Comm.Mgr, CommLink, DKC/Datalink, eDiagnostics, FasTrack, Hireport, HR and Payroll Answerforce, HyperFind, iBid, Kronos 4500, Kronos 4500 Touch ID, Kronos 4510, Kronos Acquisition, Kronos ByDemand, Kronos e-Central, Kronos Efficient, Kronos Enterprise Archive, Kronos Essentials, Kronos for Dining Accelerated, Kronos for Retail Accelerated, Kronos KnowledgePass, Kronos Paragon, Kronos TechKnowledgy, KronosWorks, KVC ByDemand, KVC OnDemand, Labor Plus, MedSched, MPPXpress, Overall Labor Effectiveness, Schedule Assistant, Smart Scheduler, Smart View, StaffEasy, Start Quality, Start WIP, Starter Series, StartLabor, Stromberg, Timekeeper Decisions, Timekeeper Web, VisionPlus, WebStaff, webTA, webTA Mobile, Winstar Elite, WIP Plus, Workforce Absence Manager, Workforce Acquisition, Workforce Activities, Workforce Analytics, Workforce Attendance, Workforce Auditor, Workforce Budgeting, Workforce Central Portal, Workforce Connect, Workforce Device Manager, Workforce Dimensions, Workforce Employee, Workforce ESP, Workforce Forecast Manager, Workforce HR, Workforce Innovation That Works, Workforce Institute, Workforce Integration Manager, Workforce IntegrityScreen, Workforce Leave, Workforce Manager, Workforce Mobile, Workforce MobileTime, Workforce Operations Planner, Workforce Payroll, Workforce Record Manager, Workforce Recruiter, Workforce Scheduler, Workforce Scheduler with Optimization, Workforce Selection, Workforce Smart Scheduler, Workforce Sourcing Analytics, Workforce Tablet, Workforce Tablet Analytics, Workforce Talent Acquisition, Workforce Task Management, Workforce Tax Filing, Workforce TeleStaff, Workforce TeleTime IP, Workforce Timekeeper, Workforce View, and Workforce Worksheet are trademarks of Kronos Incorporated or a related company. For a complete list of Kronos trademarks, please visit the "trademarks" page at www.kronos.com. The source code for Equinox is available for free download at www.eclipse.org. All other trademarks or registered trademarks used herein are the property of their respective owners and are used for identification purposes only. All specifications are subject to change. When using and applying the information generated by Kronos products, customers should ensure that they comply with the applicable requirements of all applicable law, including federal and state law, such as the Fair Labor Standards Act. Nothing in this Guide shall be construed as an assurance or guaranty that Kronos products comply with any such laws. FCC Notice (for U.S. Customers)This device complies with Part 15 of the FCC Rules. Operation is subject to the following conditions: (1) This device may not cause harmful interference, and (2) This device must accept any interference received, including interference that may cause undesired operation. Changes and modifications not expressly approved by Kronos Incorporated can void your authority to operate this equipment under Federal Communications Commissions rules. Canadian DOC ComplianceThis device complies with Industry Canada license-exempt RSS standard(s). Operation is subject to the following two conditions: (1) this device may not cause interference, and (2) this device must accept any interference, including interference that may cause undesired operation of the device. Le prsent appareil est conforme aux CNR d'Industrie Canada applicables aux appareils radio exempts de licence. L'exploitation est autorise aux deux conditions suivantes : (1) l'appareil ne doit pas produire de brouillage, et (2) l'utilisateur de l'appareil doit accepter tout brouillage radiolectrique subi, mme si le brouillage est susceptible d'en compromettre le fonctionnement. EN 55022 (CISPR 32) - This product is a Class A product. In a domestic environment, it may cause radio interference in which case the user may be required to take adequate measures. RoHS DirectiveThis data collection device and all hardware options currently qualified to work with this device are designed in accordance with the restricted substance requirements of Directive 2002/95/EC and 2011/65/EU of the European Parliament and of the Council of the European Union, including Commission Delegated Directive

(EU) 2015/863 amending Annex II of the Directive. The RoHS directive prohibits the sale of electronic equipment containing certain hazardous substances such as Cadmium (Cd), lead (Pb), mercury (Hg), hexavalent chromium

(Cr VI), polybrominated biphenyls (PBB), polybrominated diphenyl ethers (PBDE), bis(2-ethylhexyl) phthalate

(DEHP), benzyl butyl phthalate (BBP), dibutyl phthalate (DBP), and diisobutyl phthalate (DIBP) in the European Union. The manufacturer has a program in place to address the requirements of the RoHS Directive in respect to the various categories of electronic products. Published by Kronos Incorporated 900 Chelmsford Street, Lowell, Massachusetts 01851 USA Phone: 978-250-9800, Fax: 978-367-5900 Kronos Incorporated Global Support: 1-800-394-HELP (1-800-394-4357) For links to information about international subsidiaries of Kronos Incorporated, go to http://www.kronos.com Document Revision History Revision 1 2 Release Date August 2019 August 2019 Contents Chapter 1: Overview Introduction ................................................................................................. 12 How InTouch DX works ............................................................................. 13 How the timeclock operates with the host application ......................... 13 Cross-punching ..................................................................................... 13 Modes of operation ............................................................................... 14 InTouch DX features ................................................................................... 15 Schedule enforcement ........................................................................... 15 Default transactions .............................................................................. 15 Transaction persistence ......................................................................... 16 Soft key schedules ................................................................................. 17 Language support .................................................................................. 17 Badges ......................................................................................................... 19 Integrated badge readers ....................................................................... 19 Remote badge readers ........................................................................... 21 Navigation ................................................................................................... 22 Gesture support ..................................................................................... 22 Home page ............................................................................................ 22 Home and Menu keys ........................................................................... 24 Alphanumeric keypad ........................................................................... 25 Calendar ................................................................................................ 26 Customize the user interface ....................................................................... 28 Logo ...................................................................................................... 28 Screen saver .......................................................................................... 28 Scrolling messages ................................................................................ 28 Employee photos ................................................................................... 28 Chapter 2: Employee Mode Transactions Introduction ................................................................................................. 30 Contents 6 Access your employee home page ...............................................................31 Community home page ..........................................................................31 Individual home page ............................................................................32 Smart Landing .......................................................................................33 Biometric scanning ................................................................................33 Standard transactions ...................................................................................35 Add Missed Punch .................................................................................36 Add Transfer ..........................................................................................36 Edit Paycode ..........................................................................................37 Enter Gate ..............................................................................................39 Enter Tips ..............................................................................................39 Request Time-Off ..................................................................................40 Review Punches .....................................................................................41 Review Timecard ...................................................................................41 View Attendance Balance .....................................................................42 View Punch Status .................................................................................43 Smart View transactions ...............................................................................44 Edit Paycode (Smart View) ...................................................................45 Message Center (Smart View) ...............................................................46 Move Paycode (Smart View) .................................................................48 Request Open Shift (Smart View) .........................................................49 Request Shift Swap (Smart View) .........................................................50 Respond to Shift Swap Request (Smart View) ......................................51 View Accruals (Smart View) .................................................................51 View My Time (Smart View) ................................................................52 View Schedule (Smart View) ................................................................54 View Timecard (Smart View) ...............................................................55 View Totals (Smart View) .....................................................................55 Chapter 3: Manager Mode Transactions Introduction ..................................................................................................58 Access manager mode ..................................................................................59 Community home page .......................................................................59 Individual home page ..........................................................................60 Biometric transactions: Kronos Touch ID Plus ............................................61 Contents Templates .............................................................................................. 61 Terminology .......................................................................................... 62 Enroll or Re-Enroll Employee .............................................................. 65 Unenroll Employee ............................................................................... 73 Standard transactions ................................................................................... 75 Add Punch ............................................................................................. 75 Delete Punch ......................................................................................... 76 Manage Bell .......................................................................................... 77 Manage Gate ......................................................................................... 79 Override Global Home .......................................................................... 81 Override Global Non-Home ................................................................. 82 Override Single Home Employee Restriction ....................................... 83 Override Single Non-Home Employee Restriction .............................. 84 Override Schedule ................................................................................. 85 View Biometric Template Reports ....................................................... 87 View Employee Information ................................................................. 88 View On or Off Premises Employees ................................................... 89 Chapter 4: Maintenance Mode Functions Introduction ................................................................................................. 92 Initial setup and configuration ..................................................................... 93 Launch Quick Setup .................................................................................... 94 Step 1: Pick Language .......................................................................... 94 Step 2: Maintenance Mode Password ................................................... 94 Step 3: Add Device ID .......................................................................... 95 Step 4: Select Network .......................................................................... 95 Step 5: Connect to Server ..................................................................... 97 Complete the setup ................................................................................ 97 Access maintenance mode ........................................................................... 99 Use a Maintenance badge ..................................................................... 99 Use the tools menu .............................................................................. 100 Use the maintenance mode button ...................................................... 100 Maintenance mode functions ..................................................................... 104 Edit Settings ............................................................................................... 105 General Communication ..................................................................... 105 7 Connect to Network .............................................................................108 Date and Time .....................................................................................111 Audio ...................................................................................................111 Display .................................................................................................112 VNC Remote Access ...........................................................................112 SSH Remote Access ............................................................................113 Bar Code Symbology ..........................................................................114 Remote Readers ...................................................................................114 Strong Passwords .................................................................................115 Edit Advanced Settings ..............................................................................116 Failure Override ...................................................................................116 Employee Enroll Count .......................................................................116 Restart Device .....................................................................................117 Change Maintenance Mode Password .................................................117 Change Database Password .................................................................118 Factory Defaults ..................................................................................118 Delete All Punches ..............................................................................119 Delete All Offline Data .......................................................................119 Biometric Verification .........................................................................119 Configure Smartcard Reader ...............................................................120 View Reports ..............................................................................................121 Software ...............................................................................................121 File System ..........................................................................................121 Database ..............................................................................................122 Hardware .............................................................................................122 Communication Settings .....................................................................122 Network ...............................................................................................123 Device Status .......................................................................................123 Memory ...............................................................................................124 Ethernet ................................................................................................124 Readers ................................................................................................124 Biometric .............................................................................................125 Biometric Templates ...........................................................................126 Diagnostics ..........................................................................................126 Contents 8 Contents Run Tests ................................................................................................... 127 Sequential ............................................................................................ 127 Communications ................................................................................. 127 Integrated Badge ................................................................................. 128 Display ................................................................................................ 129 Tone .................................................................................................... 129 LED ..................................................................................................... 129 GPIO Output Bits ................................................................................ 130 Monitor GPIO Inputs .......................................................................... 130 Microphone ......................................................................................... 130 Remote Badge ..................................................................................... 130 Network Connectivity ......................................................................... 131 9 Contents 10 Chapter 1 Overview Note: If you are configuring the Kronos InTouch DX for the first time, go to Initial setup and configuration on page 93. Chapter 1 Overview Introduction The InTouch DX is a data collection device that communicates with the Kronos host applications. The timeclock collects information that employees enter using a badge reader, biometric device, or keypad. The host application software collects data from the timeclocks to track and process labor-related data, generate management reports, and transfer information to the payroll service. The InTouch DX does the following:

Enforces schedules, by controlling when specific employees can swipe in and swipe out for shifts, meals, and breaks. Displays accrued vacation, sick time, and messages to individual employees

(depending on the host application). Enables users to perform transactions such as labor category transfers, paycode transactions, and Smart View transactions. Smart View transactions allow users to access and interact with current information that is not resident at the device. Note: This documentation refers to transactions by their default names. Your administrator can change these names to conform with your business practices. 12 How InTouch DX works How InTouch DX works How the timeclock operates with the host application Administrators: Use the host application to configure employees and information such as schedules, punch restrictions, and labor categories. The host application downloads this information to the timeclock, which uses it to accept or restrict employee punches. When employees swipe their badges at the timeclock, the punch information is stored in the timeclock database. The host application collects the stored data and totals the hours, computes overtime, calculates wages, tracks labor, and generates reports. In Workforce Dimensions, use the Device Configuration page to define which transactions users can perform, and to monitor the data that the host application and device exchange. Note: The device configuration instructions in this document assume that you are using Workforce Dimensions as the host application. The device supports SSL encryption so that sensitive information about employees and their timecards is protected on the Internet. Cross-punching Cross-punching allows employees (referred to as non-home employees) to punch at a timeclock to which they are not assigned. Administrators: To enable the cross-punching feature for a device, access the Device Configuration page, choose Transaction Settings, and select Allow non-

home employees. 13 Chapter 1 Overview Modes of operation InTouch DX operates in three modes:

Employee Manager Maintenance Each mode has its own set of transactions, depending on how the host application is configured. To access a mode, authorized users can swipe a badge or use other methods, as described in this document. Employee mode The device most often operates in employee mode. It accepts punch data that employees enter using a badge reader or the touch screen. Manager mode Manager mode allows authorized users to perform tasks such as editing employee punches, adding missed employee punches, and viewing employee information. Maintenance mode Maintenance mode allows authorized users to display technical information about the device, execute diagnostic tests, and define configuration settings. 14 InTouch DX features InTouch DX features Schedule enforcement Administrators: To configure devices to validate employee punches against their schedules, use the host application. The punch rules contain a setting that enables schedule enforcement. You can tailor the complexity of schedule enforcement to meet your business needs. Depending on your system configuration, the devices can do the following:

Limit how early and late employees can punch in or punch out. Enable managers to perform punches for employees, and to override punch restrictions for employees. Prevent employees from punching in when they are not scheduled. Enforce meal and break schedules for employees, including minors, to satisfy state and federal labor laws. To configure a full array of punch restrictions for the device, see the online help for the host application. Default transactions Administrators: You can use the device configuration settings to set up default transactions for InTouch DX users. When an employee swipes a badge or enters a badge ID, the timeclock automatically initiates the transaction that you designate as the default. Default transactions include punches, labor category transfers, job transfers, and so on. If you can assign a transaction to a soft key, you can assign it to a badge swipe or badge ID entry as a default transaction. You can assign default transactions to home and non-home employees, and to local and remote readers. If you assign a default transaction to an internal reader, it also applies to the external reader. 15 Chapter 1 Overview When the default transaction for a home employees badge swipe is a punch, you can assign a different default transaction for a badge ID entry. For example, if a group of home employees routinely change job assignments when they start a shift, you can set the default transaction to a Job Transfer for a start-of-shift badge read. The types of default transactions are:

Home employee default Home employee shift start Home employee IN during shift Home employee shift end Non-home employee default Transaction persistence An administrator can configure the host application to repeatedly apply an employees paycode edits and transfers to the employees record, for each scheduled work day. The transaction persists until the employee or manager (on the employees behalf) performs a punch, edit, or transferat the device or using the host application. The repeating transaction generates amounts (for paycode edits) or punches (for transfers), based on the employees daily schedule. A paycode edit is persistent when both of the following are true:

The employee is assigned to a schedule. The host application is configured to repeat the paycode edit on days that the employee works. A labor category transfer or work rule transfer is persistent when both of the following are true:

The employee is assigned to a schedule. The employees assigned pay rule is configured to repeat labor category transfers or work rule transfers on days that the employee works. 16 InTouch DX features If the host application automatically generates punches based on an employees schedule, and a persistent transaction is in effect for that employee, the persistent transaction takes precedence. Soft key schedules Administrators: You can use the device configuration settings to create soft key schedules, during which certain device transactions are not available to employees. For example, during periods when many employees punch in or punch out, you can de-activate the View Totals or View Schedule soft keys. Each soft key schedule can contain up to eight time intervals for each day of the week. Language support The InTouch DX includes pre-installed, translated versions of the user interface and error messages. The device currently supports the following languages:

Chinese (Simplified) Chinese (Traditional) Czech Danish Dutch German Hindi Italian Japanese Korean English (G.B.) English (U.S) French (France) French (Canada) 17 Chapter 1 Overview Polish Portuguese (Brazil) Spanish (Mexico) Spanish (Universal) Administrators: You can translate the user interface into other languages, or customize the text in any of the supported languages. For details, see the Guide to Translating and Customizing the InTouch DX Interface. Multi-language support Administrators: The timeclock can display the interface in one or more of the supported interface languages. To choose the languages, and to designate one of them as the default interface language, access the Device Configuration page, and select Languages. Employees: To perform a transaction in a different language, select a language from the language bar. The home page and the subsequent transaction pages appear in the selected language. Complete and submit the transaction. The Employee home page reappears and reverts to the default language. Note: When a user who is in manager mode or maintenance mode chooses a different language, it remains in effect for all transactions during the current logon sessionunless the user selects another language. 18 Badges Badges Integrated badge readers Smart card: MIFARE/DESFire, iCLASS, or FIPS 201 The InTouch DX is equipped with one of the following integrated badge readers:

HID Prox Bar code Magnetic stripe If the timeclock is equipped with a proximity or smart card reader, hold the badge within one inch of the timeclock, as shown in the following illustration. If the device is equipped with a bar code reader or a magnetic stripe reader, swipe the badge through the reader to perform transactions. If the device reads the badge successfully, the LED flashes green, and the speaker emits a tone. If the badge read is unsuccessful, the LED flashes red, the speaker 19 Chapter 1 Overview emits a different tone, and an error message appears on the screen. Wait until the message times out or tap the X to close the message. Then re-attempt the badge read. FIPS PIV cards The InTouch DX can read an employee badge number from a FIPS 201 PIV card, which is a type of smart card issued by the US Federal Government. As with any non-Kronos-provided credential, contact your Kronos Representative to evaluate the credentials compatibility, and to determine the configuration requirements for reading the appropriate data from the card. After configuration is completed, you use FIPS 201 PIV cards at the InTouch DX in the same way that you use other smart cards and proximity cards. Note: The FIPS 201 PIV card takes slightly longer to be read than most smart cards, but typically within 1-3 seconds of when you position it. FIPS 201 PIV card support requires:

InTouch v2.1.0 or later firmware. InTouch H3 or later version hardware, with integrated smart card reader.]

There are a variety of US Government-issued credentials that may be (correctly or incorrectly) referred to as FIPS or PIV cards. The FIPS 201 PIV card supports a multitude of data elements, but only a portion of them are used by the InTouch DX to determine the employee badge ID. The technical details of InTouch DX support for FIPS 201 PIV cards follow. Card Type: FIPS 201 PIV Contactless Smart Card. Card Data Read: Card Holder Unique Identifier (CHUID) plus the card expiration date, sometimes referred to as GSA 75 bit format. Card Data Used: The InTouch uses the 4-digit Agency Code + 4-digit + 6-

digit credential number as a 14-digit employee badge number. Note: The InTouch DX does not use the card expiration date or any other data on the PIV card. 20 Badges PIV-I Cards (Personal Identify Verification - Interoperable). Federal Government-related card types not supported by the integrated smart card reader in the InTouch DX include, but are not limited to:

CIV (Commercial Identity Verification). CAC (Common Access Card). Also, the InTouch DX does not support reading or using additional data from PIV cards, including:

Biometric data for multi-factor identification. Global Unique Identifier (GUID). Personal Identification Number (PIN) for multi-factor authentication. TWIC (Transportation Worker Identification Credential). Remote badge readers Remote or external readers (for example, Wiegand Proximity) are available, as an option. For more information, see your Kronos Representative. 21 Chapter 1 Overview Navigation Gesture support Select To select an item (for example, a labor category) from a list, press the item with one finger for at least one second. Release your finger to complete the action. If you cannot view an items description in its entirety (for example, the location transfer set Hospital A/Nursery/RN1), press and hold the item until all of the text appears. Scroll If a list of items (such as work orders) is too long to be viewed in its entirety, the interface uses arrows and scroll bars to signify that users can scroll through the list. To scroll vertically through a list, press the screen with a single finger and swipe up or down. You do not have to place your finger on the arrows or scroll bar. Alternatively, you can tap the arrows to scroll through the items. To scroll horizontally through a group of items (such as the soft keys on the home page), press the screen with a single finger and swipe right or left. You do not have to place your finger on the arrows. Alternatively, you can tap the arrows to scroll through the items. Home page The following illustration is an example of the employee home page. Administrators: You can configure the employee or manager home page to display only the date and time. In addition, you can configure the size and shape of the soft keys, how they are labeled, and the number of them that appear on each page. For more information, see the device configuration online help. 22 Navigation 23 Chapter 1 Overview Home and Menu keys The front of the timeclock contains two keys. The Home key returns users to the respective employee mode, manager mode, or maintenance mode home page. The Menu key (below the Home key) allows authorized users to access the following:

Maintenance Mode: Opens the maintenance mode home page. Clean Touchscreen: See Clean the touchscreen on page 149. 24 Alphanumeric keypad Navigation Interface standards:

The X in the text box clears your entire entry. The X on far right is the Backspace key. To close the keypad without saving, tap the Back icon. The 123? key toggles between the alphabetic and numeric keypads. 25 Chapter 1 Overview Calendar 26 Navigation Interface standards:

The selected date is orange. The calendar defaults to the current date, which is in a blue circle. The horizontal arrows allow you to scroll through the months. 27 Chapter 1 Overview Customize the user interface For details about performing these tasks, see the device configuration online help. Logo Administrators: Use the device configuration settings to add your company logo to the home page. First, import your company logo to the device. Access the Device Configuration page, open the Main Menu, and select Manage Imports >

Logo File. Then, add your logo by selecting General Settings > Logo. Screen saver Administrators: Use the device configuration settings to add a screen saver URL to the timeclock. To configure the URL and the wait time, access the Device Configuration page, and select General Settings > Display. Scrolling messages Administrators: Use the device configuration settings to configure one or two messages to periodically appear at the bottom of the page. Access the Device Configuration page, and select General Settings > Display. Specify a primary message, alternate message, and the language in which they appear. Employee photos Administrators: Use the device configuration settings to add employee photos to the confirmation pages that appear after many InTouch transactions. Only home employee photos can appear on timeclocks. Access the Device Configuration page, and select Download Option 28 Chapter 2 Employee Mode Transactions Chapter 2 Employee Mode Transactions Introduction Employee mode enables you to perform activities such as punching in, requesting time off, or viewing your schedule. When the InTouch DX is in employee mode

(the default mode), you initiate a transaction by tapping the appropriate soft key. The following sections describe how to perform employee mode transactions. 30 Access your employee home page Access your employee home page Note: This section assumes that your administrator has configured a punch as the default transaction for a badge swipe or finger scan. Your employee home page contains your photo or initials, a link to the Message Center (if configured), and a log-out button. Community home page There are three ways to access your employee home page when the timeclock is configured to display the community home page. 31 Chapter 2 Employee Mode Transactions Option 1 Option 2 Option 3 1. Scan your finger, swipe your badge, or tap Enter ID and enter your badge ID. 2. Enter your password. A message confirms that your punch was successful. 3. Do one of the following:

Tap Accepted. The community home page re-opens. Tap the messages link. Enter your credentials to access the Message Center. 1. Tap Employee Logon. 2. Scan your finger, swipe your badge, or tap Enter ID and enter your badge ID. 3. Enter your password. Your employee home page opens. 1. Tap any soft key except Employee Logon. 2. Scan your finger, swipe your badge, or tap Enter ID and enter your badge ID. 3. Enter your password. 4. Complete the transaction. The community home page re-opens. Individual home page To access your employee home page when the timeclock is configured to display the individual home page. 1. Scan your finger, swipe your badge, or tap Enter ID and enter your badge ID. 2. Enter your password. 3. Either the Smart Landing page (if configured) or your employee home page opens. 32 Access your employee home page Note: If you are not a home employee, and cross-punching is not allowed at this timeclock, the community home page opens. Smart Landing The optional Smart Landing feature displays time-sensitive messages (such as a reminder to punch, or acceptance of a time-off request) when you access your individual home page. Your administrator can configure a Smart Landing soft key. Note: Typically, a single event, such as an accepted time-off request, appears in both the Smart Landing area (to immediately alert you) and the Message Center

(so that you can retain it for later reference). All messages that appear in the Message Center appear as Smart Landing notifications, but not vice-versa: Some Smart Landing notifications do not appear in the Message Center, usually because they are not directly work-related. For more information, see Message Center

(Smart View) on page 46. Navigation The message in the leftmost position is considered open. To close it, tap Close. To view the previous or next message, swipe right or left. You can close only messages that are in the leftmost position. If you tap the log out button, the messages are considered unread, and will appear in the Message Center. When you swipe left on the last open message, Smart Landing closes. Biometric scanning Timeclocks that include the Kronos Touch ID Plus option can validate your identity based on a finger (or biometric) scan. This option offers three types of biometric scanning: biometric verification, biometric identification, and biometric identification with badge ID. 33 Chapter 2 Employee Mode Transactions Biometric verification requires you to swipe your badge or enter your badge ID before you scan a fingeron a timeclock that is configured for biometric verification. Biometric identification requires you to perform only a finger scanon a timeclock that is configured for biometric identification. Biometric identification with badge ID requires you to swipe your badge or enter your badge ID before you scan a fingeron a timeclock that is configured for biometric identification. Before you can use biometric scanning to perform transactions, your manager must enroll you for biometrics. Managers: For details about enrolling employees for biometric scanning, see Biometric transactions: Kronos Touch ID Plus on page 61. 34 Standard transactions Standard transactions Standard (or local) transactions use information that is stored in the timeclock. Administrators: You can configure the following options for standard transactions. For details, see the device configuration online help. Enable biometric verification or biometric identification for home employees. Access the Device Configuration page, and select Cards and Readers >

Biometric. To enable biometric identification, select Enable Biometric Identification. To enable biometric verification, clear this check box. Enable biometric verification for non-home employees (that is, to enable cross-punching). Access the Device Configuration page, and select Cards and Readers >

Biometric. Select Enable Biometric Validation. Note: Employees cannot cross-punch using biometric identification. Enforce biometric verification (that is, to require employees to enroll for biometrics before performing transactions that use biometrics). Access the Device Configuration page, and select Cards and Readers >

Biometric. Select Enforce Biometric Verification. Enable biometric verification for all standard transactions. Access the Device Configuration page, and select Cards and Readers >

Biometric. Select Enable Biometric Verification on all Transactions. Employees who are enrolled for biometrics can then use biometric verification or biometric identification for all of the standard transactions that is, those that result in timecard entries, and others such as View Attendance Balance or View Punch Status. Note: You cannot enable biometric scanning for only selected standard transactions. The device configuration setting that enables biometric verification or biometric identification applies to all standard transactions that can result in timecard entries. If you select Enable Biometric Verification on all Transactions, you enable biometrics for all of the standard transactions. 35 Chapter 2 Employee Mode Transactions The following standard employee transactions are included with the InTouch DX. All procedures assume that you have already entered your credentials. Add Missed Punch Allows you to add a missed punch to your timecard. 1. Tap Add Missed Punch. The punches for each day in the current pay period appear. Missed punches are denoted by an exclamation point icon. 2. Do one of the following:

Tap the row with the missed punch, enter the punch time, and tap Add. Tap Add Punch, select the date, enter the punch time, and tap Add. 3. To attest that your timecard is accurate, tap Approve. Add Transfer Enables you to transfer to another job, pay cost center, project, and so on. The available options depend on how the host application is configured. 36 Standard transactions 1. Tap Add Transfer. 2. Depending on your configuration, complete one or more of the following Pay Cost Center fields:

Business Structure Work Rule Work Order Comment Code Project 3. Enter the Date. 4. Enter the Time. 5. Tap Submit. Edit Paycode Allows you to edit the number of hours or the amount of money charged to a paycode. 37 Chapter 2 Employee Mode Transactions 1. Tap Edit Paycode. 2. Tap Hours. 3. Tap the Date text box, and select the date. You can enter a date up to 29 days in the past or in the future. 4. Enter the number of hours. 5. Open the Paycode list, and select the paycode that you are editing. 6. 7. Tap Submit. If successful, a summary of the transaction appears.

(Optional) Select the Business Structure. 1. Tap Edit Paycode. 2. Tap Money. 3. Tap the Date text box, and select the date. You can enter a date up to 29 days in the past or in the future. 4. Tap the Time text box, and select the time. 5. Tap the Amount text box, select the dollar amount, and tap Enter. 6. Open the Paycode list, and select the paycode that you are editing. 7. 8. Tap Submit. If successful, a summary of the transaction appears.

(Optional) Select the Business Structure. Hours Money 38 Enter Gate Standard transactions Tap Enter Gate to unlock a door or turnstile without affecting your punch status. Enter Tips Allows you to record your tips. 1. Tap Enter Tips. 2. Enter the Tip Amount. 3. Select the Business Structure. 4. Select the Cost Center. 5. Select the Work Rule. 6. Depending on how your system is configured, you may have the option to add a transfer. 7. Tap Submit. 39 Chapter 2 Employee Mode Transactions Request Time-Off Enables you to request vacation time, sick time, or other time off from work. In a single transaction, you can make one or more requests for time-off. 1. Tap Request Time-Off. 2. 3. Complete the following fields:

If prompted, select a time-off sub-type. Otherwise, go to the next step. Start Date End Date Paycode Duration

(Optional) Comments Code

(Optional) Comments 4. Do one of the following:

If you are submitting a single request, tap Submit. A confirmation message appears, followed by a summary page. Go to step 5. If you are submitting multiple requests, tap Add Another. Repeat steps 23 for each additional request. Then go to the next step. 5. Tap Review. You have the option to edit or delete your requests. 6. Tap Submit. A confirmation message appears, followed by a summary page. 7.

(Optional) Tap View Message Center, or Create New Request. 40 Review Punches Standard transactions Enables you to view successful punches, rejected punches, and labor transfers that have occurred during a specified time period. Administrators: To configure the number of hours worth of data that the timeclock displays, see the online help for the host application. 1. Tap Review Punches. Each punch, rejected punch, and labor transfer that occurred in the previous review period. 2. To view details about a rejected punch or labor transfer, tap the row. Review Timecard Allows you to attest to the accuracy of your current timecard. 1. Tap Review Timecard. 2. At the prompt, tap Proceed. A read-only view of your timecard for the current pay period appears. 3. To view details about a day, such as transfers and exceptions, tap the day. 41 Chapter 2 Employee Mode Transactions 4. Depending on your configuration, do one of the following:

To add missing punches to your timecard, tap Continue. The Add Missed Punch transaction opens. For details, see Add Missed Punch on page 36. To approve your timecard as is, tap Review. At the attestation prompt, tap Approve. View Attendance Balance Displays your attendance balances for a specified pay period. 1. Tap View Attendance Balance. 2. Use the calendar icon to select the pay period. The total for each balance type appears, as of the current day. Depending on your configuration, the balances are measured in hours or points. 3. To view details about a balance, such as events that occurred during the pay period, or pending manager actions, tap the row.

(Optional) In some configurations, you can perform the View My Time transaction. For details, see View My Time (Smart View) on page 52. 4. 42 View Punch Status Standard transactions Tap View Punch Status to view the date and time of your last punch. The time span that the system searches is configurable. 43 Chapter 2 Employee Mode Transactions Smart View transactions Unlike standard transactions, Smart View transactions do not rely on information that is stored in the InTouch DX. Instead, they allow you to perform transactions at the timeclock and submit the information directly to the host application database. Transaction information and data entry screens are HTML pages that you access using a web address (URL). Administrators: You can enable biometric scanning for individual Smart View transactions. Access the Device Configuration page, and select Smart View. Open the Smart View Transaction Editor and select the Prompt for Employee Badge and Biometric Verification check boxes. The Smart View transaction allows biometric scanning for home employees who are enrolled in biometrics. Non-home employees can also use biometric scanning for the Smart View transaction, provided that you enabled non-home employees to perform biometric scanning for standard transactions. The following Smart View transactions are available when you are working in employee mode. Edit Paycode Message Center Move Paycode Request Open Shift Request Shift Swap Respond to Shift Swap Requests View Accruals View Schedules View Timecard View Totals View My Time 44 Smart View transactions Administrators: You can create custom Smart View transactions for your employees. For example, you can configure a Smart View transaction that plays a training or educational video that resides on the host application. For more information, see the device configuration online help. Edit Paycode (Smart View) Use the Edit Paycode transaction to associate a positive or negative amount of time or money with a paycode. Use this feature to enter non-productive time when you are unable to punch in and out (for example, sick, vacation, or personal time). The paycodes that are available depend on your configuration in the host application. 1. Tap Edit Paycode. 2. Swipe your badge or enter your badge ID and tap Enter. 3. Do one of the following:

To edit a paycode in hours, go to Hours. To edit a paycode in money, go to Money. Hours 1. Tap Hours. 2. Select the date. You can enter a date up to 29 days in the past or in the future. 3. Enter the number of hours. 4. Select the paycode. 45 Chapter 2 Employee Mode Transactions

(Optional) Select the business structure, and one or more labor levels. 5. 6. Tap Submit. Money 1. Tap Money. 2. Select the date. You can enter a date up to 29 days in the past or in the future. 3. Enter the amount. 4. Select the paycode. 5. 6. Tap Submit.

(Optional) Select the business structure, and one or more labor levels. Message Center (Smart View) The Message Center transaction allows you to view and store messages related to time-off requests, shift-swap requests, and other transactions. When you successfully punch, the confirmation page indicates the number of unread messages (if any) that are in the Message Center, which is denoted by a bell icon. To view the messages, tap the link and enter your credentials. 46 Smart View transactions Navigation Unread messages contain bold text and color graphics. Messages that you have read are grayed out. By default, all messages appear in the list, but you can view only unread or only read messages by tapping the appropriate button (if configured). To view the contents of a message, tap its row. Some messages, such as requests for time-off, allow you to view the original transaction without exiting the Message Center. 47 Chapter 2 Employee Mode Transactions Move Paycode (Smart View) Use this transaction to deduct hours charged to a paycode and add them to a different paycode. 1. Tap Move Paycode. 2. Tap the Date text box, and select the date. You can enter a date up to 29 days in the past or in the future. 3. Tap the Time text box, and select the time. 4. Enter the number of hours. 5. Open the From Paycode list, and select the paycode from which you are deducting hours. 6. Open the To Paycode list, and select the paycode to which you are charging hours.

(Optional) Select the business structure, and one or more labor levels. 7. 8. Tap Submit. If successful, a summary of the transaction appears. 48 Request Open Shift (Smart View) Smart View transactions 1. Tap Request Open Shift. 2. 3. Tap the Select Shift text box. A list of open shifts appears (to view details, tap If prompted, select a shift sub-type. Otherwise, go to the next step. the shift). 4. Select the appropriate shift. 5. Tap Select. 6. On the Shift Preferences page, complete the following fields:

Start Date End Date Shift Type 7. Tap Apply. 8.

(Optional) To request another shift, tap Create New Request. 49 Chapter 2 Employee Mode Transactions Request Shift Swap (Smart View) This transaction allows you to exchange one of your shifts for the shift of another employee. 1. Tap Request Shift Swap. 2. Tap the Offered Shift field to view your shifts. Select the shift that you are offering to swap, and tap Select. The information icon reveals shift details. Note: If the Respond to Swap Request button appears, another employee has submitted a request to swap a shift with you. See Review Punches on page 41. 3. Tap the Requested Shifts field to view the available shifts. Tap one or more shifts and tap Select. 4. Tap Submit. 5.

(Optional) On the confirmation page, you can request time-off or view pending requests by tapping the appropriate button. 50 Respond to Shift Swap Request (Smart View) Smart View transactions Use this transaction to respond to requests for shift swaps from other employees. 1. Tap Respond to Shift Swap Request. The requests for the current pay period appear. 2. Tap an employee to view the offered and requested shifts. To view details, tap the information icon. 3. Tap Refuse or Accept. 4. Continue in this manner to accept or refuse any other requests. View Accruals (Smart View) Use the View Accruals transaction to view current totals of accrued time, such as vacation, personal, and sick time. The totals are accurate as of the time that you perform the transaction. Accrual totals information includes the available, ending, opening vested, and tracking period balances. 1. Tap View Accruals. A green bar indicates an accrual with a positive balance;

a red bar indicates an accrual with a negative balance. 51 Chapter 2 Employee Mode Transactions 2. To view details about an accrual, tap its row. 3.

(Optional) Depending on your configuration, you can perform the View Totals or Request Time-Off transactions. View My Time (Smart View) View My Time allows you to compare actual punches to your schedule, and includes transfers, exceptions, paycodes, and hours per day. It essentially combines features of the View Schedules and View Timecard transactions. Shows upcoming shifts and past punches. 1. Tap View My Time. 52 Smart View transactions The page defaults to current pay period, but you can select the previous or next pay periods, and view past punches and upcoming shifts. Tap Scheduled or Actual to view the scheduled or actual shifts for the day. The number of timecard exceptions for the day is denoted by a counter. The affected shift is denoted by an exclamation point; tapping it shows the exception details. When viewing a complete pay period, you can perform the following transactions:

Request Time-Off: For details, see Request Time-Off on page 40. Approve Timecard: Allows you to approve all days in a pay period through the current day. The timecard shows actual punch times even if the host application is configured to perform punch rounding. When you tap Approve Timecard, the button toggles to Remove Timecard Approval, which allows you to revert an approved timecard to its unapproved state. When viewing a day, you can perform the following transactions:

View Totals: For details, see View Totals (Smart View) on page 55. 53 Chapter 2 Employee Mode Transactions Approve Day: Allows you to approve the day that you are viewing. When you tap Approve Day, the button toggles to Remove Day Approval, which allows you to revert an approved day to its unapproved state. Note: If the timeclock is not configured to permit daily approvals, the Approve Day button is replaced by Approve Timecard button. View Schedule (Smart View) Displays your schedule for the current or future pay periods. You can also request time-off or a shift swap. 1. Tap View Schedule. Your schedule for the current pay period opens. To view your schedule for a future pay period, tap the calendar icon. 2. Tap a scheduled day to view details. 3.

(Optional) Tap Request Time-Off or Request Shift Swap. 54 View Timecard (Smart View) Smart View transactions The View Timecard transaction displays timecards for employees whose assigned time entry method is hourly. 1. Tap View Timecard. 2. At the prompt, tap Proceed. A read-only view of the timecard for the current pay period opens. A missed punch is denoted by an exclamation point icon. Tap the calendar icon to select another pay period. Tap a day to view details. An exclamation point icon indicates that there is an exception. 3. Tap Review. 4. To attest that your timecard is accurate, tap Approve. View Totals (Smart View) 55 Chapter 2 Employee Mode Transactions Use the View Totals transaction to view total hours for each job in a selected pay period. 1. Tap View Totals. A list of total hours per job appears. 2. Tap a row to view the hour amounts categorized by type, such as regular, evening, and overtime. When viewing your totals, you can perform the following transactions:

View Accruals: For details, see View Accruals (Smart View) on page 51. Request Time-Off: For details, see Request Time-Off on page 40. 56 Chapter 3 Manager Mode Transactions Chapter 3 Manager Mode Transactions Introduction Administrators: Use the device configuration function to set up access to manager mode. You can configure a device to include one or more employee mode transactions while the device is in manager mode. For information about Employee mode transactions, see Employee Mode Transactions on page 39. To perform transactions for employees (such as adding punches, or overriding restrictions), you must be enrolled in Workforce Dimensions as an employee with a Manager license. Caution: Performing manager mode transactions can affect data that the device has already sent to payroll for processing. 58 Access manager mode Access manager mode Manager mode allows you to perform supervisory transactions (such as enrolling employees for biometric authentication, adding punches, or overriding schedule and punch restrictions). You can access manager mode (that is, the manager home page) in different ways, depending on how the host application is configured. Your administrator can configure the timeclock to open either your manager home page or your employee home page after you enter your credentials. Administrators: You can use the host application to configure the Manager Logon soft key to immediately open the manager home page. Community home page There are two ways to access manager mode when the timeclock is configured to display the community home page. Option 1 Option 2 Scan your finger, swipe your badge, or tap Enter ID and enter your badge ID. Enter your password. The manager home page opens. Tap Manager Logon. Scan your finger, swipe your badge, or tap Enter ID and enter your badge ID. Enter your password. The manager home page opens. 59 Chapter 3 Manager Mode Transactions Individual home page There are two ways to access manager mode when the timeclock is configured to display the individual home page. Scan your finger, swipe your badge, or tap Enter ID and enter your badge ID. Your employee home page opens. Tap Manager Logon. Tap Enter ID and enter your badge ID. Enter your password. The manager home page opens. Scan your finger, swipe your badge, or tap Enter ID and enter your badge ID. The community home page opens. Tap Manager Logon. Tap Enter ID and enter your badge ID. Enter your password. The manager home page opens. Option 1 Option 2 60 Biometric transactions: Kronos Touch ID Plus Biometric transactions: Kronos Touch ID Plus If you are using the Kronos Touch ID Plus option, the Enroll Employee and Unenroll Employee transactions are available. These transactions also require some configuration in the host application. For details, see the device configuration online help. Templates The Enroll Employee transaction creates a template for an employees finger. A template is a mathematical representation of a fingertip that is stored on the InTouch DX device, in an encrypted format. The fingerscan device uses a composite of three different images of an employees fingertip to create the template. The Kronos Touch ID Plus technology does not store actual fingertip images. Furthermore, the mathematical representations of the fingertips cannot be used to re-create the original images. Each employee can enroll two fingersa primary finger and, if required, a secondary finger. InTouch DX uses these templates to perform biometric verification or biometric identification when employees perform a fingerscan. Biometric verification requires an employee to swipe a badge or enter a badge ID before scanning a finger. Biometric identification requires only a fingerscan. Note: Biometric identification supports only home employees. The fingerscan device can enroll a maximum of 5,000 employees and 10,000 templates. If you attempt to enroll an employee after this limit is reached, an error message appears. To determine the current capacity of a device, run the Biometric report. See Biometric on page 125. 61 Chapter 3 Manager Mode Transactions Terminology finger core cuticle finger core A finger contains a pattern of ridges, with typically one innermost ridge that curves in on itself, near the center. The fingerscan device uses the unique characteristics of a fingertips ridges to construct the template. arches (plain and tented) loops (singular and twin) 62 Biometric transactions: Kronos Touch ID Plus whorls and central pocket loops Managers: Before you attempt to enroll employees, practice enrolling yourself several times, and observe how finger placement, pressure, and moisture affect the scan results. Then enroll a small group of employees to familiarize yourself with the process. Keep future enrollment groups as small as practical. sensor 63 Chapter 3 Manager Mode Transactions Place your finger on the sensor with your cuticle at its center. cuticle in center of sensor 64 Biometric transactions: Kronos Touch ID Plus Enroll or Re-Enroll Employee Administrators: When an employee places a finger on the sensor, the timeclock displays a live image of the fingertip. The image helps the employee position the fingertip on the sensor to achieve a Good enrollment. You can, however, disable this feature and substitute a static image of a finger by using free-form XML. Access the Device Configuration page, and select General Settings > XML. For details, see the device configuration online help. 1. To enroll or re-enroll an employee for biometric validation, tap Enroll Employee. 2. To select the employee, use one of the following methods:

Swipe the employees badge. Enter the employees badge ID. Search by employee name. Browse the employee list. Note: If you select an employee who is already enrolled, the enrollment summary page opens. The system directs the employee through the process. Managers: If the employee is already enrolled, the system offers you the option of re-enrolling the employees primary or secondary finger. 65 Chapter 3 Manager Mode Transactions Employee instructions 1. Tap the target (+) that corresponds to the finger you are enrolling. In order of preference, select your index finger, middle finger, or thumb. Enroll your ring finger or pinky only if you cannot successfully enroll the other fingers. If you do tap the ring finger or pinky, a warning message appears; you can then continue or change the finger. Note: Ensure that your finger is clean, and not too dry. 2. To scan your finger:

a. Directly face the timeclock so that you can comfortably place your finger on the sensorwithout awkwardly extending your arm or hand. b. Position your finger core above the center of the sensor. c. Place your finger flat on the sensor. Do not twist, rotate, or slide your finger while it is on the sensor. If your finger is positioned incorrectly, the system instructs you to reposition it for a successful scan. 66 Biometric transactions: Kronos Touch ID Plus Note: If the system directs you to reposition your finger, do not slide the finger into place. Rather, lift your finger from the sensor and then place the finger in the recommended position. d. Apply firm, even pressure. If you apply too little pressure, the sensor might not detect your finger. If you apply too much pressure, the image might be too dark. In either case, the enrollment can fail. e. Hold your finger on the sensor until the image frame turns green, the LED flashes green, and the timeclock emits a tone; then remove it. Administrators: To disable the tone, access the Device Configuration page, and select General Settings > Display. Then, clear the Enable tone for response check box. The system grades the scan quality as Good, Fair, or Poor, and prompts you to re-scan the same finger. 3. When instructed, re-scan the same finger. Repeat the process until you have obtained three scans. The system uses the three images to create a single template. The results pages for the three scans include the following information:

Parameter Enrollment Quality Score Threshold Description Good Fair Poor A measure of the useful data that the sensor detected in the fingerscan. Some fingers have indistinct ridges, scars, or other characteristics that can lower the quality score. The system uses the following scale:

Good: 60 or greater Fair: 4059 Poor: 39 or less A measure of how closely an employees live fingerscan must match the stored enrollment template. There are four threshold settings: High, Normal, Low, and None. 67 Chapter 3 Manager Mode Transactions The results pages vary, depending on the enrollment score: Good, Fair, or Poor. Good Enrollment After a few seconds, this screen times out. Fair Enrollment Do one of the following:

Tap Retry. Return to step 2. Re-scan the same finger, and try to achieve a Good enrollment. Tap Change Finger. Return to step 1 and select a different finger. If you have tried enrolling each finger, without achieving a Good Enrollment, tap Accept Best. Go to Confirm Fingerscan. 68 Biometric transactions: Kronos Touch ID Plus Poor Enrollment Note: A low Quality score might indicate that your finger is too dry. Moisten it using the PreScan fingertip enhancer pad. Do one of the following:

Tap Retry. Return to Capture Fingerscan. Re-scan the same finger, and try to achieve a Good enrollment. Tap Change Finger. Return to Select Finger to Enroll and select a different finger. If you have tried enrolling each finger, without achieving a Good Enrollment, tap Accept Best. 69 Chapter 3 Manager Mode Transactions If you tap Continue, and thereby accept a Poor enrollment, you can use only biometric verification or biometric identification with badge ID at the timeclock. That is, you must first swipe a badge or enter a badge ID before scanning the finger that you enrolled. Go to Confirm Fingerscan. For more information, see Biometric identification with badge ID. Confirm Fingerscan At the Confirm Fingerscan screen, re-scan the same finger that you used in the Capture Fingerscan step. The biometric device compares the previously captured fingerscan image (or template) with your current live fingerscan. The following sections describe the possible results of the enrollment test. Accepted If you have enrolled only a primary finger, the system prompts you to enroll another, secondary finger. Tap Enroll Secondary Finger, and repeat steps 1n for the secondary finger. 70 Biometric transactions: Kronos Touch ID Plus Tap one of the following:

Yes: Return to Select Finger to Enroll, and select another finger. No: The enrollment process is completed. Failed Do one of the following:

Tap Retry. Return to step 2. Re-scan the same finger, and try to achieve an Accepted enrollment test. Tap Change Finger. Return to step 1 and select a different finger. Managers: If the employee fails the enrollment test three consecutive times, on a timeclock that is configured for biometric verification, the system prompts you to change the threshold, or ask the employee to enroll a different finger. Note: The employee should first attempt to successfully enroll any finger, by tapping Change Finger, before you consider lowering the threshold. A lower thresholdNormal or Lowallows a wider variance between the enrollment template and the live fingerscan. This adjustment increases the chance that the device will accept the employees test resultsbut it also increases the chance that the device will incorrectly accept another employees fingerscan. Furthermore, if you lower the threshold from High, these templates will be ineligible for biometric identificationbut they can be used for biometric verification or biometric identification with badge ID. If you set the threshold to None, the device will always accept the employees test result, regardless of its quality. When you lower the threshold setting at this screen, it applies to the current employee only. 71 Chapter 3 Manager Mode Transactions Biometric identification with badge ID Biometric identification with badge ID is designed for employees who attempt to enroll for biometric identification, but whose fingerscans are consistently Poor. The Biometric identification with badge ID feature thus allows organizations to use InTouch devices for biometric identification for the majority of its employeesthat is, those employees who achieve Good or Fair enrollments can identify themselves by using a fingerscan only. For those few employees who can only achieve Poor enrollments, this feature permits them to use the device by swiping a badge (or entering the badge ID) and then scanning a finger. Managers: After you complete the enrollment process for an employee, the system prompts you to enroll another employee. Re-enroll employee Managers: You can re-enroll an employee whose enrollment scores are unsatisfactory. In this example, the employee is re-enrolling the secondary finger, which achieved only a Fair enrollment. 1. Tap Enroll Employee. 2. Swipe the employees badge or enter the badge ID and tap Enter. 3. Tap Yes. 4. Tap Secondary. The check mark indicates the primary finger that the employee enrolled. 5. Instruct the employee to select any other finger as the secondary. 6. Go to Capture Fingerscan to continue the enrollment process. 72 Troubleshooting Result Dark image Biometric transactions: Kronos Touch ID Plus Possible cause You are applying too much pressure. Your finger is too moist. Your finger is not clean. The sensor is not clean. Wipe the sensor with a soft cloth dampened with water or diluted dishwashing liquid. Let the sensor dry before resuming enrollments. Do not use disinfectant wipes, alcohol, or abrasive cleaners on the sensor. Screen reads Press harder. You are not applying enough pressure. Your finger is too cold. Fingers that are at room temperature scan best. Rub your hands together. Your finger is too dry. Use the PreScan fingertip enhancer pad or apply hand moisturizer. Unenroll Employee The Unenroll Employee transaction removes an employees template from the timeclock. It revokes the employees ability to punch using a fingerscan. 73 Chapter 3 Manager Mode Transactions 1. To start, tap Unenroll Employee. 2. To select the employee, use one of the following methods:

Swipe the employees badge. Enter the employees badge ID. Search by employee name. Browse the employee list. Note: If you select an employee who is not yet enrolled, you have the option to enroll the employee. 3. You are prompted to confirm your action. Tap Unenroll. 4. After successfully unenrolling the employee, you are prompted to unenroll another employee. 74 Standard transactions Standard transactions Standard (or local) transactions use information that is stored in the timeclock. The following standard manager transactions are included with the InTouch DX. The instructions for all manager mode transactions assume that you are already in manager mode. Add Punch Use the Add Punch transaction to add a missing punch for an employee, or to edit punch information. You cannot change the date or time of an existing punch. However, you can delete the punch (see Delete Punch on page 76) and then add a punch with a new date or time. You can perform this transaction for 29 days before or after the current date, which is considered day 0. 1. Tap Add Punch. 2. To select the employee, use one of the following methods:

Swipe the employees badge. Enter the employees badge ID. Search by employee name. Browse the employee list. 3. Select the date. 4. Select the time. 75 Chapter 3 Manager Mode Transactions Note: Midnight (enter as 00:00) is the first minute of a day; 11:59 P.M. (enter as 23:59) is the last minute of a day.

(Optional) Select a comment code. 5. 6. Depending on how your system is configured, you can make selections from Pay Cost Center one or more transfer-related fields. For example:

Business Structure Work Rule Department Work Order Project 7. Tap Submit. If accepted, a confirmation message appears. Depending on the system configuration, you have the option of performing the View Employee Timecard or View Employee Schedule transactions. Delete Punch Use the Delete Punch transaction to delete an improperly entered employee punch. You can enter a date up to 30 days before or after the current date. 1. Tap Delete Punch. 2. To select the employee, use one of the following methods:

76 Standard transactions Swipe the employees badge. Enter the employees badge ID. Search by employee name. Browse the employee list. 3. Select the date. 4. Select the time. 5. 6. Tap Submit. If successfully deleted, a confirmation message appears.

(Optional) Select a comment code. Depending on the system configuration, you have the option of performing the View Employee Timecard or View Employee Schedule transactions. Manage Bell If the timeclock is connected to a bell, organizations can schedule the bell to ring at specific times, such as the start of a break. Bell schedules include primary bells and optional warning bells. Primary bells signal the start of a transaction; warning bells signal the approach of a transaction (for example, the start of a shift). Administrators: To configure bell schedules, including the following parameters, access the Device Configuration page, and select Bells & Gates > Bells. 77 Chapter 3 Manager Mode Transactions Ring Bell To ring the bell at unscheduled times (such as during an emergency):

1. Tap Manage Bell. 2. From the Duration Seconds menu, select the duration. 3. Tap Ring Bell. Silence Bell To either prevent the bell from ringing as scheduled (for a specified duration), or to silence a bell that is ringing:

1. Tap Manage Bell. 2. From the Duration Seconds menu, select the duration. If you enter 0, the bell is silent for an indefinite period. 3. Tap Silence Bell. Note: To revert the silencing of the bell so that it will ring, as scheduled, perform this transaction again and specify a duration other than 0. View Bell Times To view the bell schedules downloaded to the timeclock:

1. Tap Manage Bell. 2. Tap View Bell Times. The information includes:

The days and times that the primary bell rings. The length of time that the primary bell rings. The length of time before the primary bell rings that the warning bell rings. The length of time that the warning bell rings. 78 Manage Gate Standard transactions Administrators: You can connect a timeclock to a door latch, to control employee access to a locked building or room. To do the following, access the Device Configuration page, and select Bells & Gates > Gates. Configure the timeclock to accept gate entry punches from home employees only, or all employees. Connect a remote badge reader to a device that is configured for gate entry. You can install the reader outside the door to the building that houses the device. The default transaction for the reader is Enter Gate. Configure the device to interpret a badge read as either of the following:

Entry onlySet up a soft key to perform this transaction. Entry and a simple in-punch or out-punch for a shiftThe punch can also be subject to schedule enforcement and biometric verification or identification. Set up the gate schedules for a device. A gate open schedule is a period when a door is unlocked, and employees can access an area without swiping their badges. A gate off schedule is a period when the gate remains locked, even if an employee performs a transaction that would otherwise unlock the gate. Override Gate for All Opens a door for all employees for a specified time spanwithout requiring them to swipe a badge. This feature is useful when you are not restricting access to an area. 79 Chapter 3 Manager Mode Transactions Note: If a gate is already overridden for an employee, this transaction cancels that override and replaces it with the current one. 1. Tap Manage Gate. 2. Tap Override Gate for All. 3. Enter the duration of the override, in minutes. Maximum amount: 10,080 (or 7 days). 4. Tap Override. The door unlocks to allow unrestricted entry. The status of the override appears on the screen. Tap it to view the employees who have active overrides.

(Optional) To cancel the override and restore the gate schedule, tap Cancel Override. A confirmation message appears. 5. Override Gate for Employee Opens a door for a specific employee. This feature is useful when the timeclock cannot read an employees badge, or when the employee has forgotten the badge. 1. Tap Manage Gate. 2. Tap Override Gate for Employee. 3. Swipe the employees badge or enter the badge ID. 4. Enter the duration of the override, in minutes. Maximum amount: 10,080 (or 7 days). 5. Tap Override. The door unlocks to allow the employee to enter. 6.

(Optional) To cancel the override for this employee, tap Cancel Override. A confirmation message appears. 80 Standard transactions View Gate Times To view the gate schedules downloaded to the timeclock:

1. Tap Manage Gate. 2. Tap View Gate Times. A summary of the gate open and gate close schedules appears. Override Global Home Administrators: For information about punch interpretation rules, see the device configuration online help. Use this transaction to override schedule and punch restrictions for home employees when unusual circumstances occur. For example, if there is inclement weather, this feature enables home employees to punch out early. 1. Tap Override Global Home. 2. Tap the Duration Hours text box. 3. Enter the duration of the override (use the hh:mm format). The maximum value is 99:59. Tap Enter. 4. Tap Enable Override. Note: After a successful override, a summary page opens. To disable the override, tap Disable Override. 81 Chapter 3 Manager Mode Transactions Override Global Non-Home Use this transaction to temporarily or indefinitely allow non-home employees to punch at restricted times. For example, this feature enables non-home employees to punch out early because of inclement weather. 1. Tap Override Global Non-Home. 2. Tap the Duration Hours text box. 3. Enter the duration of the override (use the hh:mm format). The maximum value is 99:59. Tap Enter. 4. Tap Enable Override. Note: After a successful override, a summary page opens. To disable the override, tap Disable Override. 82 Override Single Home Employee Restriction Standard transactions When unusual circumstances occur, use this transaction to override schedule and punch restrictions for a specific home employee. For example, you can allow an employee to start or leave work earlier than scheduled. 1. Tap Override Single Home Employee Restriction. 2. To select the employee, use one of the following methods:

Swipe the employees badge. Enter the employees badge ID. Search by employee name. Browse the employee list. 3. Enter the number of credits (99 or fewer). 4. Enter the duration of the credit, in days. 5. Tap Submit. If the override is accepted, a confirmation message appears. You have the option to select another employee and perform the same transaction. 83 Chapter 3 Manager Mode Transactions Override Single Non-Home Employee Restriction Use this transaction to enter a punch for a non-home employee when there is a Global Restriction in effect. You can perform this transaction for several employees in succession. 1. Tap Override Single Non-Home Employee Restriction. 2. Swipe the employees badge or enter the badge ID and tap Enter. 3. Swipe the next employees badge or enter the badge ID and tap Enter. 4. Continue in this manner until you have included all of the appropriate employees. 84 Override Schedule Standard transactions This transaction allows managers to modify an employees schedule from the timeclockwithout needing to use the host application. The host application validates these revisions against the punch interpretation rules that apply to the employee. If the changes are accepted, the revised schedule is saved to the host application database. The host application then sends the revised schedule back to the timeclock, which accepts or rejects the punches. 1. Tap Override Schedule. 2. To select the employee, use one of the following methods:

Swipe the employees badge. Enter the employees badge ID. Search by employee name. Browse the employee list. Note: If configured to override the schedules of non-home employees, you cannot search by employee name, or browse the employee list. You can add, edit, or delete a shift for the employee you selected. 85 Chapter 3 Manager Mode Transactions Add shift 1. Tap Add Shift. 2. Enter the following information:

Start Date Start Time End Date End Time Paycode Comment Code (optional) 3. Tap Add Shift. If the override is accepted, a confirmation message appears. Edit shift 1. Tap Edit Shift. A list of all of the shifts for the current date appears. 2. Do one of the following:

Tap the appropriate shift. To views shift on a different day, tap Select Date, choose the day, and then tap the appropriate shift. 3. Tap Select. 4. Edit one or more of the parameters. 5. Tap Submit. If the override is accepted, a confirmation message appears. Delete shift 1. Tap Delete Shift. A list of all of the shifts for the current date appears. 2. Do one of the following:

Tap the appropriate shift. To views shift on a different day, tap Select Date, choose the day, and then tap the appropriate shift. 86 Standard transactions 3. Tap Select. 4. 5. Tap Submit. If the override is accepted, a confirmation message appears.

(Optional) Select a comment code. View Biometric Template Reports Displays a list of some or all of the biometric templates that are stored in the biometric device. To start, tap View Biometric Template Reports. Templates with Problems By default, the transaction displays templates with problems (if any), such as low quality or content scores. All Templates To view a list of all of the templates, including any problematic ones, tap All Templates. Filter To view a list of templates sorted by one or more criteria:

1. Tap Filter. 2. Select the search criteria, and tap Apply. 87 Chapter 3 Manager Mode Transactions Note: For details about these terms, see Biometric transactions: Kronos Touch ID Plus on page 61. View Employee Information 1. To display a set of data for a specific employee, tap View Employee Information. 2. To select the employee, use one of the following methods:

Swipe the employees badge. Enter the employees badge ID. Search by employee name. Browse the employee list. The information that appears includes the punch interpretation rule, the date and time of the last punch, and whether the employee is enrolled in biometric validation. 88 View On or Off Premises Employees Standard transactions Use the View On or Off Premises Employees transaction to view a list of home employees (that is, those who are assigned to this timeclock) who are currently on or off the premises. 1. Tap View On or Off Premises Employees. 2. Tap the search icon. A list of home employees appears. 3. To view only the employees who are on the premises, or only those who are off the premises, tap the appropriate button. 89 Chapter 3 Manager Mode Transactions 90 Chapter 4 Maintenance Mode Functions Chapter 4 Maintenance Mode Functions Introduction Maintenance mode allows you to display technical information about the InTouch DX, perform configuration tasks, and execute diagnostic tests. These tests can help you troubleshoot hardware malfunctions. Important: The application software for the device resides on the SD (Secure Digital) card, which is in the unit. Copying or altering the SD card voids your warranty. 92 Initial setup and configuration Initial setup and configuration The procedure for setting up and configuring a newly installed InTouch DX can vary, depending on which options are installed and which features your organization is using. Some configuration tasks, such as defining which transactions users can perform at the timeclock, require you to use the device configuration settings in the host application. In addition, many of the settings that you configure on the timeclock must match the corresponding settings in the host application. These settings are identified throughout this chapter. For more information, see the device configuration online help. 93 Chapter 4 Maintenance Mode Functions Launch Quick Setup When a new InTouch DX powers up, the Launch Quick Setup feature guides you through the initial setup process. Note: If the device times out during the initial setup, you can re-access maintenance mode in three ways: use a Maintenance badge; use the tools menu on the front of the timeclock; or use the maintenance mode button. If you have not yet created a maintenance mode password, enter the default password (115190), when prompted. For details, see Access maintenance mode on page 99. Step 1: Pick Language 1. Select the language. 2. Tap Next, Set Maintenance Mode Password. Step 2: Maintenance Mode Password Note: Even if you do not require users to enter a password to access maintenance mode, you must change the default password (115190) to a new value. That is, you cannot set a blank password. 94 Launch Quick Setup By default, you are required to create a strong password to access maintenance mode. Strong passwords require at least eight characters, including one uppercase letter, one lowercase letter, one digit, and one special character (, . / \ + -). If strong passwords are required, but a user creates a password that does not meet the criteria, the system rejects it. This setting also applies to the passwords required to remotely access the timeclock using a VNC viewer or SSH viewer. 1. Enter the Password. 2. Select the Password Strength:

Strong Weak 3. To require users to enter this password when they swipe a Maintenance badge, enable Require Password with Badge. 4. Tap Next, Add Device ID. Step 3: Add Device ID 1. Enter the ID. 2. Enter the Password. 3. Tap Next, Connect to Local Network. Step 4: Select Network Ethernet 1. Tap Ethernet. 2. Do one of the following:

Tap Static IP. Go to the next step. Tap DHCP. Go to step 4. 95 Chapter 4 Maintenance Mode Functions 3. Complete the following fields:

IP Address: Enter the IP address for this timeclock. Subnet Mask: Enter the IP address for the sub-network. Gateway Address: Enter the gateway IP address. Primary DNS: Enter the IP address for the primary DNS server. 4. Tap Save Configuration. 5. Tap Next, Connect to Dimensions. Wi-Fi 1. Tap Wi-Fi. 2. Do one of the following:

Select a network. Go to step 6. Tap Add Network. Go to the next step. 3. Enter the SSID. 4. Select the type of Security. 5. Tap Add Network. 6. EAP Method. 7. Phase 2 Authentication. 8. CA Certificate 9. 10. Anonymous Identity 11. Password 12. Tap Save Configuration. 13. Tap Next, Connect to Dimensions. Identity 96 Launch Quick Setup Proxy Server (Optional) 1. Tap Proxy Server (Optional). 2. Complete the following fields:

Host Name: Enter the IP address of the proxy server. Port: Enter the port number. Proxy Type: Select HTTP-Connect or SOCKS5. 3. To add a username, tap Add Username and complete the Username and Password fields. Otherwise, go to the next step. 4. Tap Save Connection Setting. 5. Tap Next, Connect to Workforce Dimensions. Step 5: Connect to Server 1. Enter the Server Name. 2. Enter the Tenant Identifier. 3. Enter the Port number. 4. 5. Tap Next, Test Connectivity. If successful, a configuration summary appears. Indicate whether HTTPS is enabled. If unsuccessful, the system provides troubleshooting suggestions. Complete the setup Use the host application to complete the following tasks (for details, see the device configuration online help). Add the timeclock to your system configuration, and assign it to a device group. Test the communication between the host application and the timeclock. Define the transactions (in employee mode and manager mode) that users can perform at the timeclock. 97 Chapter 4 Maintenance Mode Functions Define which type of data to download from the host application to the timeclock (for example, activity codes, paycodes, and so on). Download or initialize the timeclock with the configuration that you defined in the device configuration settings. 98 Access maintenance mode Access maintenance mode There are three ways to access maintenance mode, as described in the following sections. Note: To exit maintenance mode, press the Home icon on the front of the timeclock; the timeclock reverts to employee mode. If the timeclock is idle for 45 seconds without any input from a user, it automatically exits maintenance mode and reverts to employee mode. Use a Maintenance badge Note: Some InTouch DX configurations do not ship with a Maintenance badge. Swipe the Maintenance (M) badge within two inches of the target area. Depending on how the timeclock is configured, the system prompts you for a password. 99 Chapter 4 Maintenance Mode Functions Use the tools menu Press the tools menu icon on the front of the timeclock (below the home icon), and tap Maintenance Mode. Enter the maintenance mode password, and tap Enter. Use the maintenance mode button 1. Use the security wrench that was supplied with the InTouch DX to loosen the screws on the sides of the timeclock. By design, the screws remain attached to the mounting bracket. 100 Access maintenance mode 2. Grasp the sides of the timeclock assembly, and gently pull it down so that it swings open on its hinge:

101 Chapter 4 Maintenance Mode Functions 3. Grasp the curved ridge, and pull open the cover of the microSD card compartment. Do not remove the cover from the hinges. 4. Press and hold button (see the following illustration) for at least fifteen seconds. 102 Access maintenance mode Note: If you are prompted to calibrate the touchscreen, contact your Kronos Representative before proceeding. For more information, see Calibrate the touchscreen on page 202. 5. Slightly rotate the timeclock assembly into view to confirm that the timeclock is in maintenance mode. 6. Close the cover of the microSD card compartment. 7. Close the timeclock assembly, and fasten the two screws on the mounting bracket. 103 Chapter 4 Maintenance Mode Functions Maintenance mode functions Note: The instructions for maintenance mode functions in this chapter assume that you are already in maintenance mode. 104 Edit Settings Edit Settings General Communication Note: The communication settings for the device must match the corresponding settings that you enter in the host application. Server-Initiated 1. Tap Edit Settings. 2. Tap General Communication. 3. ServerDevice Initiated: Tap Server-Initiated. 4. Device ID: Enter the same ID that you enter in the host application (on the Device Configuration page, select Communication Settings >

Communication Settings tab). 5. Tap Submit. Note: For Server-Initiated communication, you must also enter the IPV4 configuration settings. See IPV4 Configuration on page 107. Device-Initiated 1. Tap Settings. 2. Tap Communication Settings. 3. Tap General Communication. 105 Chapter 4 Maintenance Mode Functions 4. ServerDevice Initiated: Tap Device-Initiated. 5. Device ID: Enter the same ID that you enter in the host application (on the Device Configuration page, select Communication Settings >

Communication Settings tab). 6. Primary Server Password: This password allows the host application to identify the device when it performs operations such as Smart View transactions. Enter a numeric password whose length is 610 digits. Note: If the password is enabled for the device in the host application (on the Device Configuration page, select Communication Settings > Device Initiated Authentication tab) enter the same password here. If the password is disabled for the device, enter any combination of six digits. 7. Verify Server Password: Re-enter the password. 8. HTTP-SSL: Choose the same setting that you specify in the host application

(on the Device Configuration page, select Communication Settings >

Communication Settings tab). 9. Primary Server: The IP address (the default value 127.0.0.5) or the fully qualified domain name of the Web host server that you are connecting to. Enter the same IP address that you enter in the host application (on the Device Configuration page, select Communication Settings > Communication Settings tab). 10. Primary Server Port: Enter the same Primary Port number that you enter in the host application (on the Device Configuration page, select Communication Settings > Communication Settings tab). The default value is 80 (non-SSL). 11. Primary Server Instance ID: The instance ID number of the host application that the device is communicating with (the default value is 5001). Enter the same instance ID that you enter in the host application (on the Device Configuration page, select Communication Settings > Communication Settings tab). 12. Tap Submit. 106 Edit Settings IPV4 Configuration Important considerations for Dynamic Host Configuration Protocol (DHCP) Use a DHCP server to automatically assign IP addresses to devices (see step 4, in the procedure that follows). Before you complete the communication settings for the device, note the following:

Ensure that your DHCP server complies with the minimum requirements of the DHCP RFC2132 standard to supply an IP address, subnet mask setting, and default gateway setting. Do not configure InTouch DX devices to use DHCP on a network that does not support DHCP. Otherwise, each device performs an address request every five seconds for an indefinite period. These requests can adversely affect network performance. To change the IP address of a device that uses DHCP: change the address on the network; assign the address to the device; and then remove the address from the DHCP pool so that another device cannot use it. If you remove a device that uses DHCP, you can reuse its former IP address. To configure the device to use the IPV4 address format:

1. Tap Settings. 2. Tap Communication Settings. 3. Tap IPV4. 4. Address Modedo one of the following:

Tap DHCP. Go to step 8. Tap Static. Go to the next step. IP Address: Enter the IP address for this device (the default value is 127.0.0.1) and tap Enter. 5. 6. Subnet Mask: Enter the IP address for the sub-network (the default value is 255.255.255.0) and tap Enter. 7. Gateway: Enter the gateway IP address (the default value is 127.0.0.2) and tap Enter. 107 Chapter 4 Maintenance Mode Functions 8. Speedtap one of the following:

Auto 10 Full Duplex 10 Half Duplex 100 Full Duplex 100 Half Duplex 9. Primary DNS Server: Enter the IP address and tap Enter. 10. (Optional) Secondary DNS Server: Enter the IP address and tap Enter. 11. Tap Review. 12. Tap Submit. Connect to Network Ethernet 1. Tap Edit Settings. 2. Tap Connect to Network. 3. Tap Ethernet. 4. Do one of the following:

Tap Static IP. Go to the next step. Tap DHCP. Go to step 6. 5. Complete the following fields:

IP Address: Enter the IP address for this timeclock. Subnet Mask: Enter the IP address for the sub-network. Gateway Address: Enter the gateway IP address. Primary DNS: Enter the IP address for the primary DNS server. 6. Tap Save Configuration. 108 Wi-Fi Supported Wi-Fi networks Edit Settings 802.11 b, g, or n 2.4 GHz compatible wireless local area networks. InTouch DX supports connections to wireless local area networks (WLAN) that meet the following requirements:

WPA and WPA2 Personal and Enterprise security protocols. InTouch DX does not support connections to networks with the following characteristics:

CDMA/3g/4g or any other type of cellular wireless network. Wi-Fi networks that require a secondary password or confirmation via a web browser. Configure settings The timeclock supports only DHCP connections for Wi-Fi. Note: The timeclock can take up to several minutes to make the wireless connection. A confirmation page indicates whether the connection was successful. After you complete the Wi-Fi settings, ensure that the IPV4 settings are configured correctly for the Wi-Fi network (see IPV4 Configuration on page 107). 1. Tap Edit Settings. 2. Tap Connect to Network. 3. Tap Wi-Fi. 4. Slide the OFF button to ON. 5. Tap the appropriate network from the list. 6. Tap Connect to network. 7. Scroll to and tap the Identity field. 8. Use the keypad to enter the user name (for example, john.doe@company.com) and tap Next. 109 Chapter 4 Maintenance Mode Functions Note: To view numeric and special characters on the keypad, tap the 123?

key. 9. Tap Next. 10. Enter the users password, and tap Done. 11. Tap Save. Under the name of the network you selected (in step 5), the processing status appears (Connecting, Saving, and so on). 12. To return to the Maintenance mode home page, press the Home icon on the front of the timeclock. 13. Tap Reports. 14. Tap Network. 15. Ensure that the Wi-Fi Connection Status is Connected, and that the IPV4 Configuration displays the correct IP address. Proxy Server The proxy server feature allows you to direct all incoming traffic from the InTouch DX through a proxy server before it reaches an internal network. It supports communication through HTTP and SOCKS5 proxy servers, on both device-initiated and server-initiated devices. Basic authentication is supported for both HTTP and SOCKS5. When the InTouch DX is in maintenance mode, the Network report provides the status and configuration of the proxy client. Note: InTouch DX timeclocks currently do not support direct user configuration to communicate via a proxy server; and VNC, SSH and VoIP do not use the proxy client. To configure the InTouch DX to work with an existing proxy server:

1. Tap Edit Settings. 2. Tap Connect to Network. 3. Tap Proxy Server. 110 Edit Settings 4. Enter the Proxy Server IP address. 5. Enter the Proxy Server Port. 6. Select the Proxy Server Type:

HTTP SOCKS5 7. Tap Submit. The changes you submitted are effective immediately. Traffic from the timeclock will now be routed through the proxy server to the network. Date and Time Use the Date and Time setting to set the date and time on the timeclock. 1. Tap Edit Settings. 2. Tap Date and Time. The values default to the current date and time. 3. Year: Enter the year (four-digit format). 4. Month: Enter the month (numeric format). 5. Day: Enter the date. 6. Time: Tap the field; the time selector opens. Enter the time (the system automatically formats it). Tap the AM/PM key to toggle between AM and PM, and tap Enter. 7. Tap Save Settings. Note: When the timeclock establishes a connection with the host application, the latter resets the date and time on the timeclock to match its own settings. Audio Use the Audio settings to configure the tones that the device emits. 1. Tap Edit Settings. 2. Tap Audio. 111 Chapter 4 Maintenance Mode Functions 3. Slide the Volume control, and tap Test Volume to listen to the setting. 4. Enable the Key Click control : Indicates whether the device emits a clicking tone when users tap the touchscreen. 5. Tap Save Settings. Display Use the Display setting to adjust the brightness of the timeclock screen. 1. Tap Edit Settings. 2. Tap Display. 3. Slide the Brightness control to the appropriate level. 4. Tap Save Settings. VNC Remote Access This function enables a timeclock to be remotely accessed, using a VNC viewer. It is useful for troubleshooting purposes. 1. Tap Edit Settings. 2. Tap VNC Remote Access. 3. Tap Enabled. 4. Enter the Access Password. If you have not created a password, you are prompted to re-enter the password. The strength requirements for the VNC remote access password are the same as those for the maintenance mode password. See Step 2: Maintenance Mode Password on page 94. Note: If you have previously created a password, the Change Password option appears. 5. Tap Save Settings. 112 Edit Settings IP address of the timeclock. To remotely access this timeclock using a VNC viewer, you must have the following information:

Remote access password for the timeclock (created in step 4). When you connect to this timeclock using a VNC viewer, you can access the two icons on the front of it:

To access the tools menu icon from a viewer session, press Ctrl+m. To access the Home icon from a viewer session, press Ctrl+h. SSH Remote Access This function enables a device to be remotely accessed, using an SSH or SCP viewer. It is useful for troubleshooting purposes. 1. Tap Edit Settings. 2. Tap SSH Remote Access. 3. Tap Enabled. 4. Enter the Access Password. Enter the Access Password. If you have not created a password, you are prompted to re-enter the password. The strength requirements for the VNC remote access password are the same as those for the maintenance mode password. See Step 2: Maintenance Mode Password on page 94. Note: If you have previously created a password, the Change Password option appears. 5. Tap Save Settings. To remotely access this timeclock using an SSH viewer, you must have the following information:

Remote access password for the timeclock (created in step 4). IP address of the timeclock. 113 Chapter 4 Maintenance Mode Functions Bar Code Symbology Use the Bar Code Symbology setting to specify the types of bar codes that employee badges use, so that the timeclock can read the badges properly. When the host application sends the device configuration to this timeclock, it overwrites the settings that you select here. Caution: If you set Interleaved 2-of-5 to False, the timeclock cannot read a Maintenance badge. 1. Tap Edit Settings. 2. Tap Bar Code Symbology. 3. Select True for each bar code type that employee badges use:

Interleaved 2-of-5 Code 3-of-9 UPC-A (Universal Product Code A) UPC-E (Universal Product Code E) Code 128 EAN-8 (European Article Numbering 8) EAN-13 (European Article Numbering 13) Code 39 Codabar 4. Tap Save Setings. Remote Readers You can connect one or two remote badge readers to a given timeclock. Remote readers can allow employees to perform simple punches. To configure remote readers:

1. Tap Edit Settings. 2. Tap Remote Readers. 114 Edit Settings 3. Remote Readers 1: Select a reader type. 4.

(Optional) Remote Readers 2: Select the same reader type that you chose in the previous step. 5. Tap Save Settings. The device automatically restarts. Strong Passwords 1. Tap Edit Settings. 2. Tap Strong Passwords. 115 Chapter 4 Maintenance Mode Functions Edit Advanced Settings The Advanced settings allow you to support the biometric functions, and to perform routine maintenance and troubleshooting activities. Failure Override Note: This setting is available only for timeclocks that include a biometric device. Use Failure Override to specify whether the InTouch DX accepts or rejects biometric punches when authentication fails. This setting defaults to Reject Punches. 1. Tap Edit Advanced Settings. 2. Tap Failure Override. 3. Do one of the following:

To allow punches when authentication fails, tap Accept Punches. To disallow punches when authentication fails, tap Reject Punches. 4. Tap Save Settings. Employee Enroll Count This function is available only for timeclocks that include a biometric device. It displays the number of employees who are enrolled for biometric authentication, and the number who are not enrolled. 116 Edit Advanced Settings 1. Tap Edit Advanced Settings. 2. Tap Employee Enroll Count. 3. To view the names of the employees in each group, tap the appropriate row. Restart Device Note: You can also restart a device using the host application. Access the Device Details page, open the Troubleshooting menu, and select Reboot Device. Use the Restart Device function to restart the timeclock. 1. Tap Edit Advanced Settings. 2. Tap Restart Device. 3. To confirm your selection, tap Restart. Important: If the device is not responding, you can reboot it using the restart button on the main board, which is on the inside cover of the device. To remove the cover, use the security wrench that was shipped with the device. You must press and hold the button for four seconds. For details, see Use the maintenance mode button on page 100, and the accompanying illustrations. Change Maintenance Mode Password Use this function to change the password for a Maintenance badge, and to require users to enter a password when they swipe their badges. 1. Tap Edit Advanced Settings. 2. Tap Change Maintenance Password. 3. Enter the Current Password. 4. Enter the New Password. 5. Re-enter the new password and tap Enter. 6. Select the Password Strength:

117 Chapter 4 Maintenance Mode Functions Strong Weak 7. To require users to enter this password when they swipe a Maintenance badge, enable Require Password with Badge. 8. Tap Save Settings. Change Database Password Use the Change Database Password function to change the password for a database. 1. Tap Edit Advanced Settings. 2. Tap Change Database Password. 3. Enter the new password, which must be eight characters in length, and contain at least one of each of the following: uppercase letter, lowercase letter, number, and special character. Tap Enter. 4. Re-enter the new password and tap Enter. 5. Tap Save Settings. Factory Defaults Use Factory Default to restore the device settings to the factory default settings. Caution: Use the Factory Default settings only if the timeclock is not operating properly. You lose all previous settings and data when you perform this function. 1. Tap Edit Advanced Settings. 2. Tap Factory Defaults. 3. To confirm your selection, tap Restore. The timeclock reboots. 118 Edit Advanced Settings Delete All Punches Caution: The Delete All Punches function deletes all transactions stored in the timeclock database. Use the Delete All Punches function to correct the Last punch invalid error. After you perform the Delete All Punches function, the timeclock contains only home employee data associated with schedule enforcement. 1. Tap Edit Advanced Settings. 2. Tap Delete All Punches. 3. To confirm your selection, tap Delete. Delete All Offline Data 1. Tap Edit Advanced Settings. 2. Tap Delete All Offline Data. 3. To confirm your selection, tap Delete. Biometric Verification Note: This test applies only to devices that include the Kronos Touch ID Plus authentication device. The InTouch DX confirms that an employees finger scan image matches the corresponding template in the biometric device. The Biometric Verification function allows you to perform a typical biometric verification punch without creating an actual punch record for the employee. 1. Tap Edit Advanced Settings. 2. Tap Biometric Verification. 119 Chapter 4 Maintenance Mode Functions 3. To select the employee, use one of the following methods:

Swipe the employees badge. Enter the employees badge ID. Search by employee name. Browse the employee list. 4. Direct the employee to place the appropriate finger on the sensor, using the same position that was used during the initial enrollment. If the timeclock accepts the verification, a confirmation message appears. If the verification fails, an error message appears. Tap Retry and instruct the employee to repeat the verification process. If the verification repeatedly fails, re-enroll the employees finger. See Biometric transactions: Kronos Touch ID Plus on page 61. Configure Smartcard Reader 1. Tap Edit Advanced Settings. 2. Place the configuration card within two inches of the reader. 3. Tap Continue. 120 View Reports View Reports Software This report displays various file components and their version numbers. The report can reveal whether certain components are up-to-date, which can help you perform diagnostics. 1. Tap View Reports. 2. Tap Software. File System Total Size: The total size of the partition. This report displays the following information (all sizes in megabytes):

Used: The amount of space that is currently being used. Available: The amount of available space in the partition. Used Percentage: The percentage of the partition that is currently being used. To run the report:

1. Tap View Reports. 2. Tap File System. 121 Chapter 4 Maintenance Mode Functions Database This report displays information about the tables in the database. It includes information about punches, employees, and the biometrics function. To run the report:

1. Tap View Reports. 2. Tap Database. Hardware This report displays information about the hardware inside or attached to the timeclock, including:

The serial number of the timeclock, and the device ID. The kinds of optional devices that are installed (for example, remote bar code reader, proximity reader, biometric scanner, and so). The formats of the optional devices. The amount of total and used memory. The amount of total and used disk space. To run the report:

1. Tap View Reports. 2. Tap Hardware. Communication Settings Note: The Communication Settings report is only available with devices that operate in device-initiated mode. This report displays all of the settings that you configured using the Communication Settings function (See General Communication on page 105). The information in the report can help you diagnose problems with the device. 122 View Reports To run the report:

1. Tap View Reports. 2. Tap Communication Settings. Network This report displays the network configuration for the device. It indicates whether the remote access feature is enabled, provides the status and configuration of the proxy client (if any), and includes the IP addresses for the primary and secondary domain name servers (DNS). To run the report:

1. Tap View Reports. 2. Tap Network. Device Status The version number of the operating system. The device ID. The version number of the database schema. The version number of the application firmware. Use this report to display information about a particular device, including:

To run the report:

1. Tap View Reports. 2. Tap Device Status. 123 Chapter 4 Maintenance Mode Functions This report displays the amount of memory on the device. It includes the amount of total memory, free memory, and swap memory. To run the report:

1. Tap View Reports. 2. Tap Memory. The MAC (Media Access Control) address. The Ethernet speed. The number of packets that were transferred and received. The number of transfer and receive errors that occurred. The number of collisions that occurred. This report displays information about the Ethernet connection to the device. The statistics reflect the activity since the device was last restarted, including:

To run the report:

1. Tap View Reports. 2. Tap Ethernet. This report displays information about the badge readers that are attached to the device. The content varies, depending on the type of reader, but it includes:

The type of reader. The device state. The firmware version number. The number of good reads. The number of bad reads. Memory Ethernet Readers 124 View Reports To run the report:

1. Tap View Reports. 2. Tap Readers. Biometric This report is available only for InTouch DX devices that include a biometric validation device. The report displays statistics about the biometric activity at the device, including:

The number of templates that are stored in the biometric device. If a single employee enrolls both a primary and a secondary finger, the device counts them as two templates. The maximum number of templates that the device can hold, and the current number of templates. The number of successful finger scan images. The number of times that the device could not associate a template with the badge ID of an employee. The number of firmware and hardware errors associated with the device. Note: The number of event occurrences are cumulative totals. You cannot reset the totals or report on specific time spans. 1. Tap View Reports. 2. Tap Biometric. 125 Chapter 4 Maintenance Mode Functions Biometric Templates This report displays a list of some or all of the biometric templates that are stored in the biometric device. 1. Tap View Reports. 2. Tap Biometric Templates. 3. Do one of the following:

To view all of the templates, tap All. Go to step 6. To view only templates that have low scores or other problems, tap Problem. Continue to the next step. 4. Select the search criteria. Tap the appropriate soft key and tap Yes. Fair Enroll Poor Enroll No Threshold Ring or Pinky 5. Tap Review. 6. Tap Submit to view the results.]

Diagnostics This report displays various statistics and historical data about the device, including information about the firmware, maintenance mode logins, reboots, and punches. 1. Tap View Reports. 2. Tap Diagnostics. 126 Run Tests Run Tests Sequential Use this test to execute the Display, LED, and Tone tests, in succession. When the beeper emits two tones, the test is complete. Note: You can run each test included in the Sequential Tests function individually, using each tests maintenance function. 1. Tap Tests. 2. Tap Sequential. The tests execute automatically. Communications Note: The Communications test is available only on devices that use device-

initiated communication. On devices that use server-initiated communication, use the Test Device function in the host application. Access the Device Details page, open the Troubleshooting menu, and select Test Device. 127 Chapter 4 Maintenance Mode Functions The outcome of the test (Success or Failure). The primary server IP address. The primary server instance ID. The primary server port. Use the Communications test to determine whether the data collection device is communicating properly with the application server. The application server is also known as the primary server. The information on the report includes:

To run the test:

1. Tap Tests. 2. Tap Communications Test. The device contacts the primary server and then displays the results screen. Integrated Badge Use this test to check a badge or badge reader. 1. Tap Run Tests. 2. Tap Integrated Badge. 3. Swipe the badge that you are testing. Depending on the type of badge you are testing, the information can include the following:

CSN (card serial number) Symbology Badge Data Badge Type Barcode length Company Code String Part1 String Part2 String Part3 128 Run Tests Display Tone LED Note: You can execute the Display test, Tone test, and LED test as a group by running the Sequential test. See Sequential on page 127. This test ensures that the timeclocks screen is operating properly. 1. Tap Run Tests. 2. Tap Display. A pattern of vertical bars in each of the following color arrangements appears:

Red, green, blue, black, white. Green, blue, black, white, red. Blue, black, white, red, green. Black, white, red, green, blue. White, red, green, blue, black. This test ensures that the timeclocks beeper is operating. 1. Tap Run Tests. 2. Tap Tone. The device emits a tone during this test. If the test is successful, the message Tone Detected appears. This test ensures that the timeclocks LED lights are working. Note: This test does not test the LED light on an attached remote reader. 1. Tap Run Tests. 2. Tap LED. If the test is successful, the lights flash, in succession, red, green, and yellow. 129 Chapter 4 Maintenance Mode Functions GPIO Output Bits Output bits are electronics that control external devices such as bells or door strikes, which can be attached to the InTouch DX. If you have installed such external devices, use this test to ensure that they are operating. 1. Tap Run Tests. 2. Tap GPIO Output Bits. 3. Slide the button that corresponds with the output bit (1-4) that you are testing to toggle the output bit between an on or off state. Monitor GPIO Inputs Note: This test functions only if the transition board option is installed. 1. Tap Run Tests. 2. Tap Monitor GPIO Inputs. Microphone This test ensures that the integrated microphone is operating properly. 1. Tap Run Tests. 2. Tap Microphone. 3. To record a test message, tap Record. 4. To listen to the recording, tap Play. Remote Badge If you have installed the remote badge reader option, this test ensures that it is operating properly. 1. Tap Run Tests. 2. Tap Remote Badge. 130 Run Tests 3. Swipe the badge that you are testing, and tap the play button. The information that appears depends on the type of badge you are testing. It can include the following:

Badge data Badge type Barcode length Company code String Part1 String Part2 String Part3 Network Connectivity This test verifies that the timeclock can communicate with the network using TCP/IP. 1. Tap Run Tests. 2. Tap Network Connectivity. 3. Enter the IP address, URL, or FQDN (fully qualified domain name) for the primary server. If the test was successful, a confirmation message appears. 131 Chapter 4 Maintenance Mode Functions 132

External Photos P5W-8610K007 Front View Rear View Top View Bottom View Left View Right View

Product Label Compliance Label FCC Label

This Label sample includes the following FCC IDs:

P5W-8610K003 P5W-8610K007

& KRONOS Kronos Incorporated phone +1 978 250 9800 900 Chelmsford Street fax +1 978 367 5900 Lowell, MA 01851 url www.kronos.com Letter Of Agency Date: August 19, 2019 RE: FCC ID: PSW-8610K007 To Whom It May Concern:

Please be advised that LAWRENCE REED of KRONOS, INC. authorizes Larry Stillings of Compliance Worldwide, Inc. to act on our behalf, until otherwise notified, for applications submitted for the purpose of obtaining an FCC Grant of Equipment Authorization. We certify that we are not subject to denial of federal benefits, that includes FCC benefits, pursuant to Section 5301 of the Anti-Drug Abuse ACT of 1988, U.S.C. 862. Further, no party, as defined in 47 CFR 1.2002(b), to the application is subject to denial of federal benefits, that includes FCC benefits. Thank you for your attention to this matter. Signatory AC LS) LAWRENCE REED

&@ KRONOS Kronos Incorporated phone +1978 250 9800 900 Chelmsford Street fax +1 978 367 5900 Lowell, MA 01851 url www.kronos.com Date: August 19, 2019 Federal Communications Commission Authorization and Evaluation Division Confidentiality Request regarding application for certification of FCC ID: P5W-8610K007 Pursuant to Sections 0.457 and 0.459 of the Commissions Rules, we hereby request confidential treatment of information accompanying this application as outlined below:

Exhibit Type File Name Block Diagram P5W-8610K007 BlkDia.pdf Schematics P5W-8610K007 Schem.pdf Operational Description P5W-8610K007 OpDes. pdf The above materials contain trade secrets and proprietary information not customarily released to the public. The public disclosure of these materials may be harmful to the applicant and provide unjustified benefits to its competitors. The applicant understands that pursuant to Section 0.457 of the Rules, disclosure of this application and all accompanying documentation will not be made before the date of the Grant for this application. Pursuant to DA04-1705 June 15, 2004 of the Commission's public notice, we also require temporary confidential treatment of information accompanying this application as outlined below for a period of 180 days:

Exhibit Type File Name Internal Photos P5W-8610K007 IntPho.pdf Temporary confidentiality for 180 days from public disclosure is important for KRONOS, INC. from a commercial perspective. It enables the company to complete its development and regulatory efforts prior to introducing the product to the marketplace. Releasing information on the product via the FCC website prior to formal market introduction can be confusing to our customers, and places the company at a competitive disadvantage. Sincerely, J:

awrence Reed

& KRONOS Kronos Incorporated phone +1 978 250 9800 900 Cheimsford Street fax +1 978 367 5900 Lowell, MA 01851 url www.kronos.com 4 September 2019 To whom it may concern, Kronos would like to attach different FCC / Industry Canada labels identified below on three (3) different product part numbers. FCC label FCC ID: PSW-8610K007 IC: 1416A-8610K007 for HID 13.56 MHz reader FCC ID # Industry Canada OEM Vendor / Kronos Product Part Frequency Numbers PSW-8610K007 1416A-8610K007 HID / 13.56 MHz 8610000-007, 8610000-107, 8610000-407 All three Kronos part numbers contain electrically identical base system. The (-) dash variation is determined by what integrated radio-based badge reader is included. e Part number 8610000-007 = Kronos electronics with HID 13.56 MHz reader. e Part number 8610000-107 = Exact same unit as 8610000-007 but used for rented units. e Part number 8610000-407 = Exact same unit as 8610000-007 but is private label. o Lawrence Reed Senior Director, Engineering 4 September 2019