FCC ID: 2AQ8A-KE1-DNI-A Enkore

Pamex Enkore Series A Multi-Family Door Access Control Solution Project Implementation Guide 1 KE1-D7P1A, KE1-INP35A Table of Contents Introduction Before Installation Check List Pamex MFSP Service Platform Implementation Guide Concepts Construction Phase Lock Registration Phase Plan your area tree Build the area tree using MF-Admin Server Plan your programming cards Setup Wifi AP and Create Programming Cards Register Locks to MF-Admin Server Verify lock registration using Master Card Go-live Phase Create Tenant Cards Create Staff Card Create Vendor Card Create Guest/Temp Card Shutdown Public Area Area Time Control Lock Scheduling Access Control Rule Time Control - Add/Remove Holidays Advanced Setup Guide Lock Report Interval Alert Settings Lock UI Patterns (LED & Buzzer) Appendix Wall Reader Wall Reader Wifi AP Specification and Settings Factory default settings - Wall Reader Factory default settings - Deadbolt Factory default settings - Leverset Factory default settings - Interconnect MF-Admin Server Parameters default settings Application Parameters 4 6 6 6 7 7 8 9 10 11 14 16 19 21 26 34 42 47 54 58 59 60 64 66 68 68 69 71 71 73 74 75 76 77 78 79 80 80 2 System Parameters Mifare Card Specification Card Types Area Types Lock Real Time Events Default Severity of Alert Types FCC Statement NCC Statement 80 81 82 84 85 86 87 88 3 Introduction The Pamex Enkore series is a total solution for multi-family door access control. It not only has several models of the lock but also the browser-based central management system

(MF-Admin server)

. Figure 1 : Pamex Enkore System Architecture Overview Figure 1 shows the system architecture of Pamex Enkore solution, Below are the brief description of each component:

1. Chrome browser: The user interface to the MF-Admin Server (2). You need a PC with a Chrome browser to use MF-Admin. The card reader/writer (No.6 in figure 1) will be connected to this PC using USB. You may also use the windows server (5) as the client PC. 2. MF-Admin Server: An application running on a Windows server (5). It provides all the functions to manage the access control of the locks and the cards/fobs. 3. Wifi AP: All the Enkore locks have the wifi capability and are necessary to connect to a wifi AP in order to be programmed by the MF-Admin server. There should be a few to many Wifi APs at a multi-family property. Wifi AP is not part of Enkore products. Check the lock specifications in the Appendix for the compatible Wifi AP. 4. Enkore smart locks and NFC cards: All the Enkore locks are smart locks that are accessed using NFC card/fob (Mifare Desfire). 5. Windows Server: MF-Admin server is installed on this server. 6. Card Reader/Writer: MP100 is the default reader to issue a new card/fob to users/residents. 4 Figure 2: MP100 7. DB Server : A database is installed on windows server to keep all the data of the system. It is installed and automatically configured by the install program. Please reference MF-Admin & MP100 installation guide

. 8. MFSP platform : MFSP (Multi-Family Service Platform) is a cloud service for all the MF-Admin Servers around the world. This platform is operated by Pamex. Connected your MF-Admin Server to MFSP is not required but we encourage you to do so. MFSP will provide some enhancement to Enkore solution in the future. 5 Before Installation Check List Locks Cards : Crypto Card x 2, Construction Card x 5, Blank Card x 10 MF-Admin + MP100 Software MP100 Card Reader x 1 Windows Server x 1 Pamex MFSP Service Platform This section is for Pamex only. Before any Enkore installation, Pamex admin will have to create a project in MFSP in order to get the unique project code. An Enkore installation will need at least one Crypto card to activate all the locks. Crypto cards can only be issued through MFSP by Pamex. MFSP will keep the encryption keys of the Mifare Desfire card for every project. 6 Implementation Guide Concepts Pamex Enkore setup can be thought of in terms of three phases: Depending on the progress of your project, there are three phases defined as :

Construction Phase :

All the door locks are installed but not programmed yet. MF-Admin server is not necessary for this phase. Lock Registration Phase :

The door locks are ready to be programmed/registered to the MF-Admin server. Go-Live Phase :

All the locks are registered to MF-Admin Server. The system is ready to go. Normally, as time goes by, a project will first in the construction phase, then go to the lock registration phase, then the go-live phase. Each phase requires different tasks to be completed as described below. In this guide, we will use the term Card or Key from time to time. Both terms refer to the Mifare Card or Mifare key fob is issued by Pamex Enkore solution. Used by the Pamex Enkore system. MP100 is the only device you use to issue card/key. Note that sometimes you have to re-place (take a card off the reader then place the card on the reader again) the card on the reader to successfully complete your card operation. MF-Admin server will remind you to re-place the card as possible as it can. But remember to do so when you encounter MP100 reader error. Its not a bug but the nature of Mifare Card operations. 7 Construction Phase Make sure you have Crypto Cards and Construction Cards on hand. Crypto Card and Construction Card are shipped from Pamex together with physical locks. (See Appendix: Card Types) In the scenario that wifi network and MF-Admin Server is not ready, and you have installed locks on the doors, you will need Construction Cards to unlock and open the door. A lock can be unlocked using Construction Card only after it has successfully scanned the Crypto Card but before programmed by programming card. No other cards can unlock the doors at this moment. A Construction Card can unlock any locks which have been scanned by Crypto Card given by Pamex for your project only. Depending on the lock model, the lock will present below response when scanning Mifare Cards :

Lock Model Crypto Card Success Crypto Card Fail Wall Reader Deadbolt Leverset Green LED on 1 sec & long beep once Red LED flash 3 times &

beep 3 times Same as Wall Reader Same as Wall Reader Same as Wall Reader Same as Wall Reader Interconnect Same as Wall Reader Same as Wall Reader Construction Cards will remain valid until you scan Programming Card to a lock. Programming Cards can only be created using MF-Admin Server which means your wifi APs and network are ready and you are entering the next phase - Lock Registration Phase. 8 Lock Registration Phase MF-Admin Server is required to complete all the tasks in this phase. Please follow the MF-Admin Server & MP100 Installation Guide to install MF-Admin Server. MF-Admin Server is a web-based application with access controlled by login id and password. A newly installed MF-Admin Server has an admin user with login id = alzk, password = alzk. You may use this account to access all the functions in MF-Admin but we recommend you create another ids for all the users who need to access MF-Admin. Please check The default admin user alzk can not be removed. Change the password of alzk immediately is recommended to secure the account. Please check User Manual to see how to change alzk password. To better illustrate all the steps, we will use a SIMPLE example project to describe how to complete all the steps. MF-Admin Server User Guide to see how to create users. MF-Admin Server Figure 17: Project SIMPLE In the SIMPLE project, there are 4 families (A, B, C, D) with one common entrance (M) and a shared swimming pool controlled by Lock P. You will have to go through below steps to setup the MF-Admin server and register all the locks by using alzk account :

9 Plan your area tree Area tree is the topology of your property. Before you can register your physical locks and link the locks to their corresponding lock place, you have to build the area tree in MF-Admin Server. There are three types of areas : group, unit, public (See Appendix: Area Types for detail). An area may contain zero or several lock places which will linked to the physical lock one by one when registering. For the SIMPLE project, you should prepare a table as below :

Root Area (Group area)

(No lockplace) Public Area P Lockplace P Group Area M Lockplace M Unit Area A Lockplace A Unit Area B Lockplace B Unit Area C Lockplace C Unit Area D Lockplace D Note that the quantity of lock places will be exactly the same as the number of physical locks. 10 Build the area tree using MF-Admin Server Navigate to build area tree page. Property Management

Build Property For a brand new property, you will see only one node at beginning. Click and edit root area name. Click edit button on Root Area and select Add Public Area. Click the name text to edit public area name and lockplace name. Click menu button on Root Area and select Add Group. 11 Click name text to edit group name. Click menu button on Group Area M and select Add Lock Place. Edit lockplace name. Click menu button on Group Area M and select Add Unit. Click name text to edit unit name and lockplace name. 12 Keep adding unit from B to D Click Save To Server to save the area tree. Note that there are many ways to build an area tree as above. You may find MF-Admin Server User Manual. If you make any mistakes another techniques in during building the tree, just click Reload from server or Reset to return to the initial state. 13 Plan your programming cards The area tree is now ready to be linked to physical locks. Pamex Enkore locks support WPA2 encryption to connect to the Wifi AP. When a lock is scanned by a programming card, the preferred Wifi AP SSIDs will be loaded into the lock from programming card. A programming card may save 1 ~ 5 SSIDs. Normally, you only have to scan one time for a lock during its lifetime. The reasons to re-scan programming card will be :

MF-Admin server ip is changed after go-live phase : This should be a rare case and usually can be avoid. If the MF-Admin Server ip has to be changed, then you have to make new programming cards and all the locks have to be programmed again. Some Wifi AP SSID changed : For those locks in the range of changed wifi APs, you have to scan them with new programming card which has the new SSID in it. Locks have been reset to factory default. When any of the above cases happened, we recommend you to contact with the reseller for help. In SIMPLE project, we assume that you have two Wifi APs with SSID = AP1 and SSID = AP2. In real world, depending on the size of your project. you may have tens to hundreds of Wifi APs. Therefore, prepare below table is recommended :

Wifi AP SSID WPA2 Key Rooms in Range Programming

(32 characters) Card AP1 12345678 Unit A Unit B Unit C Unit D Card 1 Card 1 Card 1 Card 1 AP2 abcdefg Public Area P Card 1 For SIMPLE project, AP1 and AP2 can be saved into one programming card. Programming card can be created by using MF-Admin Server and you may create 14 several cards with the same settings in order to program the locks in parallel by several workers. In the case that several workers are programming locks in parallel, please label the UID of the card (UID can be found on MF-Admin page when you create the programming card) on the programming card with a sticker or marker. When your lock is scanned, you will be able to tell which lock is yours via the UID. See the detail in registering locks. 15 Setup Wifi AP and Create Programming Cards Navigate to system parameters page. Parameters System Management

System Select Wifi AP Setting Click Add One to add wifi ap and click Save to save wifi ap. Navigate to create programming cards page. Programming Key Property Management

Issue You will see there are two wifi aps you added previously. 16 Check the checkbox on those wifi ap and click Issue Key

. Place key/card on reader first. 17 Click Write Key/Card to get Keys UID. The green light LED on Read will blink. If three please re-place key/card and click Write Key/Card failed with beep sounds and display following message, Write Key/Card again. 18 If programming key issued successfully, two beep sounds will be made. Register Locks to MF-Admin Server Please bring a tablet or mobile phone with Chrome browser. Follow below steps to register a lock :

A. Open Chrome and type in MF-Admin server URL. B. Login to MF-Admin using alzk id. C. Go to Lock Registration Monitoring function on tablet. Property Management

Lock Registration Monitor D. Go to Room A E. Scan programming card to the lock Lockplace A. You will see the physical new lock connect to MF-Admin server. 19 F. Link the physical lock on Room A to the lockplace. Click lock icon near Unit Area A. A pop-up window will show up listing all the locks not linked yet. Click the one you like to link. G. Link the lock to Room A lockplace. G.1. If you link to the wrong lockplace, Unlink and link again. Click lockplace which you link to the wrong lockplace. Click Unlink to unlink lock. H. Repeat the steps D to G for Lockplace B,C,D,P and M I. All set and all locks are ready for go-live phase. 20 Verify lock registration using Master Card Master Card is granted unlimited access to any locks in the project. After locks are registered to MF-Admin server, only Residential Cards and Master Cards can be recognized. To verify that all the locks are successfully registered and linked to the right lock places in the area tree, lets first create the master card. How to create Master Card :

Navigate to issue master card page. Key Management

Issue Master Key And click Issue Key 21 Place key/card on reader first. Click Write Key/Card to get Keys UID. 22 The green light LED on Read should blink. If three please re-place key/card and click Write Key/Card failed with beep sounds and display following message, Write Key/Card again. If master key issued successfully, two beep sounds will be made. 23 How to verify Master Card to a lock :

Prepare an invalid Mifare Card X(You may issue an invalid card easily by assigning wrong area to the card). By default, a lock will report to MF-Admin Server and get the newly create card list from MF-Admin Server every 5 mins(Wall Reader). It means the newly created Master Card will go to the locks after 15 mins. Another way to enforce a lock to communicate with MF-Admin server is to scan an invalid card. We will use this approach to save us some time. Card X will be the invalid Card. Go to lockplace A. Scan Card X. Scan Master Card and the lock should be opened. Scan Card X again.(The event log will be transferred to MF-Admin server) Check MF-Admin Server event log. Navigate to MF-Admin Server event log page. Lock Events Report Report Management

Check Invalid Mifare in Event Type fields only and click Search

. You will see Invalid Mifare event with scanning invalid card. Verify lock B, C, D, P, M using the same steps. If lock A is not opened, please rescan Card X and try again. If lock A is still not opened, please unlink the lock and register/link again. Then repeat the verification steps. 24 If problem still exist, please contact your reseller for help. Please keep the Master Card safe and secure. Congratulations ! The system is ready and lets go to Go-Live phase. 25 Go-live Phase We will present several daily operations when the system goes live. Most of the daily work of an administrator or property owner should be card/key management. You have seen several card types in the previous sections: Crypto Card, Construction Card, Programming Card and Master Card. Here we will create another card type called Residential Card. There are five types of Residential Card : Tenant, Staff, Vendor, Guest and Temp Card. You can tell the purpose of the card from its name. There are three supporting features to help you create a residential card. You may create a card without using these features but leverage these template features will speed up the process when you have many cards to create :

Time Control Template Here we will create two time control template which we will use in demonstrate the creation of Guest Card and Vendor Card. Please follow below steps to create the two time control templates :

Guest Swimming Pool Period 8:00 ~ 18:00 Sat, 8:00 ~ 18:00 Sun House Cleaning Period 8:00 ~ 12:00 Mon Steps to create time control template Navigate to create time control template page. System Management Application Parameters

26 In Time Control Templates click Create button. Edit the template name, According to the document, the Guest Swimming Pool Period only open on time control to meet the requirement and click setting. 8:00 ~ 18:00 Sat, 8:00 ~ 18:00 Sun to save time control Save

. Lets edit the Lets create another template for house cleaning period. According to the requirement, house cleaning period only allow at the time control to meet the requirement and click setting. 8:00 ~ 12:00 Mon Save to save time control

. Lets edit Both control templates are created successfully. Guest Swimming Pool Period and House Cleaning Period time User Management You may maintain tenants, staffs and vendors information in User Management module. The information you entered here is only for look up purpose when issuing card which we will demo later. The benefit to create entries here is to save you some typing when issue cards/keys. 27 Lets create some user templates. We just provide basic information for demo User Type Information Kevin Huang, kevin@alzk.com.tw Tony Lin, lintungwei@gmail.com Mark Chu, mark@alzk.com.tw Jay Chen, jay@alzk.com.tw Peter Liu, peter@alzk.com.tw Ricky Chang, ricky@alzk.com.tw Company Name : Dust Buster Employee name : Vincent Chou, vincent@gmail.com purpose. Tanant A Tenant B Tenant C Tenant D Staff S1 Staff S2 Vendor V Steps to create tenants Navigate to create tenants page. User Management

Tenant Edit tenant information and click Create Tenant

. The table below the input area will list all the tenants created :

28 Please repeat the work and create tenant B, C, and D. Steps to create staffs Navigate to create staffs page. User Management

Staff Edit staff information and click Create Staff

. The table below the input area will list all the staffs created :

Follow the same process to create staff Ricky Chang. Steps to create vendors Navigate to create vendors page. User Management Vendor

29 Edit vendor information and click Create Vendor

. It will display vendor list below the input area. Click Employee button on Actions filed to add employee. Edit employee information and click Create New Employee The employee list will be displayed at the bottom of this page. 30 Key Template Key template probably is the most useful supporting features when issue abundant keys. It is almost the same as issue a key but you may save the setting for later use. Lets create two templates :

STAFFS TENANTS Public Area P (24 hours allowed), Group Area M (24 hours allowed) Public Area P (6:00 ~ 21:00), Group Area M (24 hours allowed) Steps to create the key template Navigate to create key time control template page. Key Management Key Template

Select Create New Template. Edit Template Name and click Create 31 After clicking Create button it will display Area Control page. Lets check the box on and no need to edit time control because its 24 hours open by According to the requirement, Staffs can access allowed), Group Area M (24 hours allowed) Area P default. (Click on the clock besides the checkbox can edit the time control settings to this area.) Public Area P (24 hours Public Tick the checkbox on default. Group Area M and leave the time control settings as Save Click Lets create another key template for STAFFS to save key template. TENANTS. Click Create

. 32 Check the box on Public Area P and click its time control button

. According to the requirement, Tenants can access 21:00), Group Area M (24 hours allowed) control and click to save time control setting. Save Public Area P (6:00 ~

Public Area P

. Lets edit the time Tick the checkbox on because its 24 hours open by default. Group Area M

, no need to edit time control this time 33 Click Save to save TENANTS key template. Navigate to key template management page. Key Management Key Template

You can see those key templates has been created by pull down the select list. Create Tenant Cards In SIMPLE project, you should at least create 4 tenant cards (Card A~D) for Room A to D with below access control :

34 Card A Card B Card C Card D Public Area P (6:00 ~ 21:00), Group Area M (24 hours allowed), Unit A

(24 hours allowed) Public Area P (6:00 ~ 21:00), Group Area M (24 hours allowed), Unit B

(24 hours allowed) Public Area P (6:00 ~ 21:00), Group Area M (24 hours allowed), Unit C

(24 hours allowed) Public Area P (6:00 ~ 21:00), Group Area M (24 hours allowed), Unit D

(24 hours allowed) As you can see, leverage key template is a good idea to create the 4 tenants cards. Steps to create tenant cards Navigate to Issue Key page. Key Management

Issue Key Select Tenant at the key type drop down list

. 35 Click user management function. Select tenant Select Tenant kevin to issue key. and it will pop up a window to display all tenants you created in Select tenant kevin will automatically bring his information back to the Basic Information tab. TENANTS Select Area Control page key template and you will see TENANTS time control settings in 36 According to the requirement, tenant 21:00), Group Area M (24 hours allowed), Unit A (24 hours allowed) already set up time control of template, so lets check Unit A Public Area P to grant access to Room A. Group Area M can access Kevin and

. We had via tenant key Public Area P (6:00 ~

37 At the including Review & Issue Key Basic Information

, time control information page we can verify the information of tenant key

, Unit Area & time control information, Public Area &

Group area & time control information 38 Click Issue/Write Key to issue tenant key. Place key/card on reader first. Click Read Key From Reader to get Keys UID. 39 The green light LED on Read should blink. If three please re-place key/card and click Write Key/Card failed with beep sounds and display following message, Write Key/Card again. 40 If read key successfully click Write Key/Card to issue master key. Write Key/Card successfully with Repeat the similar process to create Tenant Cards for B,C and D. beep sounds. two 41 Create Staff Card We will then create 2 staff cards in SIMPLE project. Again, you may use the STAFFS key template to complete this job. This time you can practice to choose the staff information from the staff users you created previously. Staff S1 Public Area P (24 hours allowed), Group Area M (24 hours allowed) Staff S2 Public Area P (24 hours allowed), Group Area M (24 hours allowed) Steps to create staff card Navigate to Issue Key page. Key Management

Issue Key Select key type as Staff. 42 Select Staff Click management. Select staff Peter to issue key. and it will pop up a window to display all staffs you created at user After selecting staff peter the information. Basic Information page will automatically attach staffs Select Control STAFFS page. key template and you will see STAFFS time control settings in Area According to the requirement, staff allowed), Group Area M (24 hours allowed) access privilege of and may go to the review & Issue Key tab. Public Area P Peter can access Public Area P (24 hours

. We had already set up 24 hours Group Area M via staff key template. So you 43 Review & Issue Key At the Basic Information

, control information page we can verify the information of staff key including Unit Area & time control information, Public Area & time

, Group area & time control information Click Issue/Write Key to issue Peter staff key. Place key/card on reader first. 44 Click Write Key/Card to get Keys UID. 45 The green light LED on Read should blink. failed with Write Key/Card If three please re-place key/card and click Write Key/Card successfully with Repeat the similar process to create S2 Staff Card.. beep sounds. two beep sounds and display following message, Write Key/Card again 46 Create Vendor Card Create a vendor card for Vincent Chou, an employee of Dust Buster cleaning company. He will come to clean the swimming pool and the area around Room A~D at 8:00 -

12:00 on every Monday. So we will create a card for him to enter Lockplace P and Lockplace M with time control template : House Cleaning Period. Steps to create vendor card Navigate to Issue Key page. Key Management

Issue Key Select key type as Vendor. Select Vendor Click before at user management function. Select vendor issue key. and it will pop up a window to display all vendors you created Vincent from Dust Buster to 47 After selecting vendor vincent, the vendors information. Basic Information page will automatically attach Check the box on Public Area P and click time control button to edit. According to the requirement, Vendors can access at Monday on House Cleaning Period then click

. Lets use Public Area P Save to save time control setting. 8:00 - 12:00 on every time control template we created before 48 Check the box on Group Area M and click time control button to edit. 49 Use Area M House Cleaning Period time control template we created before on Group then click Save to save time control setting. At the including Review & Issue Key Basic Information

, time control information page we can verify the information of vendor key

, Unit Area & time control information, Public Area &

Group area & time control information 50 Click Issue/Write Key to issue the vendor key. Place key/card on reader first. 51 Click Write Key/Card to get Keys UID. The green light LED on Read should blink. If three please re-place key/card and click Write Key/Card failed with beep sounds and display following message, Write Key/Card again. 52 Write Key/Card successfully with two beep sounds.. 53 Create Guest/Temp Card Guest Card and Temp Card are almost the same. They serve the purpose to temporarily grant access to a visitor. The default expired date will be one day only. The one time pass attribute can be used to further restrict access to lockplace to only one time for all the lockplaces granted. Below is a demo to create a Guest Card. Create a temp card is the same. You will request the visitor to return the Guest/Temp Card when they leave the property. The returned card can be reused to issue any card types. Steps to create a guest card Navigate to Issue Key page. Key Management

Issue Key Select key type as Guest. 54 Edit guest information. Area Control page, Check the box on Public Area P and click edit time control At button

. Lets assume guest control settings and click August can access Public Area P on this weekend

, edit time Save to save time control setting. Review & Issue Key At the Basic Information

, control information page we can verify the information of guest key including Unit Area & time control information, Public Area & time

, Group area & time control information 55 Click Issue/Write Key to issue August guest key. 56 Place key/card on reader first. Click Write Key/Card to get Keys UID. 57 The green light LED on Read should blink. Write Key/Card If three please re-place key/card and click Write Key/Card successfully with failed with beep sounds and display following message, Write Key/Card beep sounds. again. two Shutdown Public Area The only public area we have in SIMPLE project is the swimming pool. Suppose you need to close the swimming pool in the winter or for maintenance purpose, it is not a good idea to re-issue all the cards to remove the swimming pool access right. 58 MF-Admin server has two features: Area Time Control and Lock Scheduling which will help you to complete this task in a second without re-issuing any cards. Area Time Control Area Time Control is another layer of time control which logically AND with the time control you set on the Mifare card during card creation for a specific area/lockplace. Area Time Control setting will take effect to all the residential cards (NOTE:

exceptions exist if you change the access rule, we will discuss it later). Therefore, when you want to restrict the access of swimming pool to a certain time period of a day in a weekly manner, area time control is here for this task. Suppose your card has the access right of swimming pool for 24 hours everyday. And the area time control of swimming pool is only for Saturday and Sunday 24 hours. Then you are only able to access swimming pool on Saturday and Sunday. Note that this approach can not completely shut down the swimming pool because if you leave all the time control cells blank, it means NO time control. To complete shut down a public area, you better use Lock Scheduling feature. To demonstrate how to set the area time control, follow below steps. (Note that you set time control for an area, not a lock.). Area time control allows to set the public Steps to set area time control for swimming pool Navigate to Area Time Control Setup page. Area Time Contro l Lock Management

59 Assume the area time control of swimming pool is only for Sunday 24 hours requirement, click

. Lets edit swimming pool time control to meet the Save to save time control setting. Saturday and Public Area P is blinking which means there is a You can see the lock on time control setting over this area

. Lock Scheduling Lock scheduling has nothing to do with Mifare card. It can be used to control the schedule to lock/unlock a lock. In SIMPLE project case, we may use lock operation mode to control the locking status. Three modes are available for a lock (not an area):

Normal (default) : Scan card is needed. Passage : Keep the lock unlocked, scan card is not necessary. Private : It acts like normal mode. In combination with the NoPrivacy access rule, only Staff Card (and Master Card of course) can access the private area. But you may change the access rule to block all cards except Master Card. Therefore, set the operation mode to Private will block all non-staff cards now. Steps to set operation mode Navigate to lock operation page. Lock Management

Lock Scheduling 60 61 Click the lock icon in Public Area P

. In Operation Mode dialog, select Private and click Save

. Public Area P lock icon color will turn to light green which means it is not The normal setting

. As you can see in the previous screenshots, there is also a time control table which you can set when operation mode is in normal mode. It is used to manage a public/group area where you like it to be passage mode for some period of time of a 62 day in a weekly manner. We will not demo it here. Please see Manual for detail. MF-Admin Server User 63 Access Control Rule It is time to elaborate how access rules works. All the locks will apply the access rule when scan a card. Below is the default access rule settings :

You have to choose one of the three settings to apply to a combination of card types and area types. The three choices are :

Lock+Key : Area time control will be taken into consideration together with the settings on the card/key to decide whether lock can be unlocked or not. Lock only : The system only takes area time control into consideration and Key only : The system will take card/key setting into consideration and ignore ignore the card/key settings. the area time control. The NoPrivacy rule is a special rule for privacy locks ( the mode you set at lock scheduling features ). The card type with NoPrivacy set to yes will ignore the private mode which means the card is allowed to unlock the lock. Therefore, if you like to block all users including the staff to enter swimming pool in SIMPLE project, You have to do two things : 1. At lock scheduling function, set lockplace P to private mode. 2. At lock access rule of system parameters function, set Staffs NoPrivacy to No. Steps to shut down swimming pool completely except Master Key now. Navigate to edit page first. Private mode, so lets try Access Rule Control Previously we set swimming pools lock operation to to edit 64 System Management

System Parameters According to the document, we would want to block all users including the staff NoPrivacy to enter swimming pool in private mode. Find out the and click Save Staff to No

. field and edit Now, the swimming pool has been shut down completely except Master Key. 65 Time Control - Add/Remove Holidays Time control settings can be found in many places in the system and it is straightforward to use. There is only one thing to remind, the holiday. In addition to the settings for 7 days a week, you have another row (the bottom row) to set time control which is the holiday setting. For system to recognize which days are holiday, you have use the application parameters function to add/remove holidays. Steps to add/remove holiday Add holiday Navigate to Holidays tab in Application Parameters page. System Management Application Parameters

Click

+1 to add a holiday. Click the blank field to edit holiday assume that holiday. 2019/01/01 is a 66 Click Save to save the holiday. Remove holiday Click X to remove holiday and click Save

. The holiday setting takes precedence over weekly settings. It means if today is a holiday and Monday, then the system will check holidays settings instead of Mondays settings. 67 Advanced Setup Guide Note : Do not try this section without assistance from reseller or Pamex. Changing any of the parameters in this section to unreasonable value might lead to unexpected system behavior. Lock Report Interval Lock report interval can be changed at the Lock Operation function. The default value of this parameter is 300 secs (5 mins) for Wall reader and 900 secs

(15 mins) for deadbolt and leverset. Steps to change the report interval setting for Lock P Navigate to Lock Management lock operation page to change the report interval.

Lock Operation 68 Click lock icon to select lockplace allowed

, at parameters and set up it to Set Lock Parameters (j0) 30 mins

. Public Area P (

multiple selections is field find out Report Interval Click Schedule Job to change the report interval setting. To save the batterys life, Pamex Enkore smart lock is not always connected to MF-Admin Server. The locks will connect to the MF-Admin Server as the report interval. Also, this indicate one thing:every change to the card or lock will sync to locks in the given default secs at most if the report interval remains in default. For example, when you issue a card at 9:00 am, the card number will be downloaded to the related physical lock(s), Wall Reader, at next reporting time which could be anytime before 9:05 am depending on the last report time. There is another way to force a lock to communicate with MF-Admin server immediately. Real time events(See Appendix Lock Real Time Events) can make a lock to communicate with the MF-Admin server. Therefore, when you want to make sure the lock to sync cards or execute lock operation commands immediately without waiting for a period, just prepare an invalid Mifare card (You may issue an invalid card easily by assigning no area to it) and tap to a lock to serve this purpose. Alert Settings 69 When you login the MF-Admin Server, there are two icons showing the total number of new alerts at the navigation bar :

In the Alert tab of the system parameters, you can see there are twelve types of alert that will be generated in the system:

There is no alert enabled by default. You may check the checkbox to enable the alerts you need. You may enter valid email addresses in the Send Email To field to enable email notification for an alert. Multiple addresses can be entered delimited by semicolon. The check intervals are all realtime and can not be modified except the Dead Lock alert. Dead Lock alert checking interval can be set larger than the default(5 mins). This value is related to the lock report interval. It is unreasonable to set a dead lock checking interval smaller than the lock report interval. Note that the unit of this value is minute. For every alert types, there is a severity value config in the MF-Admin Server appConfig.json file. For the default severity setting, please see default severity of alert types in Appendix. The alerts has lower severity category (Yellow alerts on the navigation bar) and higher severity category (Red alerts on the navigation bar). 70 Appendix Lock UI Patterns (LED & Buzzer) Construction Card Programming Card beep . Leverset & Deadbolt

(Recovery Card) Crypto Card Recovery Card

(Crypto

) Lock Out Beep, , ,, , Beep

, beep, , beep, .

, beep Beep, , Beep, ,

, Beep

, () - <Lock Out>

(Wifi) , +beep AP

, Beep => , Beep

, beep

(), beep If , beep Else

, beep

, beep

(Wifi) , +beep AP30

() 10, Beep 10

, beep 30.

, beep 30

<Unlock> + <Lock>

71

, 600 : 10, 1 400 : 5, 1 200 : 2, 1 3, Leverset & Deadbolt Change the battery

(the first time after tapping a recovery card) Change the battery A red blink with a beep + a red blink + a green blink + a red a beep with a red blink + motor adjustment + a red blink + a green blink(finished with a latch appear) + a beep with a red blink Crypto Card Tap to lock Tap to unlock Invalid card blink + a green blink + a beep

(No motor adjustment, latch has no motion.) A green blink with a long beep. a beep with a green blink + the lock tongue in a beep with a red blink + the lock tongue out 3 red blinks + 3 beeps Red blinks between seconds lasting a minute as a default.(Lock Out) Construction Card (same as lock/unlock) Programming Card 2 green blinks with 2 beeps. Red blinks continuously till a success connect with AP along with a green blink + a long beep. Note that only when tried every nearby APs will the lock stop connecting. 3 green blinks with 3 beeps + a green blink with a long beep >

+ reboot Recovery Card Firmware upgrade 5 red blinks with 5 beeps + (5 green blinks with 5 beeps)* +

reboot

*Download success. If download failed will tell 3 red blinks with 3 beeps) green blink with a long beep for 2 secs. A red blink + a green blink + a beep + motor adjustment + red blinks continuously till a success connect with AP along with a green blink and a long beep. Note that it will last 30 secs as a default for keeping trying to Reboot Test program

(Execute by taping any card before tapping a Crypto 72 card) Lock Out connect with the APs. Red blinks for 3 mins as a default 10 red blinks + 10 beeps the latch jammed, the motor rotate continuously with 3 red blinks + 3 beeps, failed to try after 30 secs, be able to open the door by tapping the card. the latch jammed, the motor rotate continuously with 3 red blinks + 3 beeps, failed to try after 30 secs, be able to lock the door by tapping the card. Red light and beep in every 10 secs lasting for one minute. 600 : 10, 1 200 : 2, 1 Allowed to tap the card once when the power is subject to 3 months left. Key cover open Malfunction when tapping to unlock Malfunction when tapping to lock Battery low Power Cut Wall Reader Crypto Card

, beep Beep, Beep,

, Beep

, () - <Lock Out>

() Construction Card Programming Card beep . Recovery Card

(Crypto

(Wifi) , +beep AP

, Beep => , Beep

, beep

(), beep If , beep Else

, beep

, beep

(Wifi) , +beep AP30 73 Lock Out

() Wall Reader Crypto card Tap to lock Invalid card a green blink with a long beep. a green blink with a beep. Tap to unlock a red blink with a beep. 3 red blinks with 3 beeps Red blinks between seconds lasting 1 minute as a default.(Lock Out) Construction Card (same as lock/unlock) Programming Card 2 green blinks with 2 beeps. Red blinks continuously till a success connect with AP along with a green blink + a long beep. Note that only when tried every nearby APs will the lock stop connecting. 3 green blinks with 3 beeps + a green blink with a long beep

+ reboot Recovery Card Firmware upgrade 5 red blinks with 5 beeps + (5 green blinks with 5 beeps)* +

reboot

*Download success. If download failed will tell 3 red blinks with 3 beeps) green blink with a long beep for 2 secs. Reboot Test program

(Execute by taping any card before tapping a Crypto card) Lock Out A red blink + a green blink + a beep, red blinks continuously till a success connect with AP along with a green blink and a long beep. Note that it will last 30 secs as a default for keeping trying to connect with the APs. Red blinks for 3 mins as a default 74 Wifi AP Specification and Settings Wifi network is necessary for Pamex Enkore solution. The network setup is out of the scope of this manual. Please make sure your network is well configured with your system vendors. Pamex Enkore locks support most of the popular wifi APs in the market. Please make sure your Wifi AP has the features listed below :

Support 802.11 bgn, 2.4 G WAP2 encryption 75 Factory default settings - Wall Reader Model No:KA-WR1S/KA-WR1N Operation Mode:Normal Lock Parameters a. Volume:3 (high) b. Enabled Locking Mode:Auto lock c. Auto Lock Delay:10 secs d. Report Interval:300 secs Lockout Settings a. Time to count fail(secs):60 b. Fail Try(times):3 c. Time to Shutdown(secs):180 76 Factory default settings - Deadbolt Model No:

a. D1:KA-D7P1S b. D2:KA-D7P1A Operation Mode:Normal Lock Parameters a. Volume:3 (high) b. Enabled Locking Mode:

D1:Auto reset turnpiece D2:Scan lock c. Auto Lock/Reset Turnpiece Delay (secs) D1:5 D2:N/A d. Report Interval:900 secs Lockout Settings a. Time to count fail(secs):60 b. Fail Try(times):4 c. Time to Shutdown(secs):180 77 Factory default settings - Leverset Model No:KA-LNP5C Operation Mode:Normal Lock Parameters a. Volume:3 (high) b. Enabled Locking Mode:Auto lock c. Auto Reset Turnpiece Delay(secs):5 d. Report Interval:900 secs Lockout Settings a. Time to count fail(secs):60 b. Fail Try(times):4 c. Time to Shutdown(secs):180 78 Factory default settings - Interconnect Model No:

a. b. I1:KA-INP35S I2:KA-INP35A Operation Mode:Normal Lock Parameters a. Volume:3 (high) b. Enabled Locking Mode:

I1:Auto reset turnpiece I2:Scan lock c. Auto Lock/Reset Turnpiece Delay (secs) I1:5 I2:N/A d. Report Interval:900 secs Lockout Settings a. Time to count fail(secs):60 b. Fail Try(times):4 c. Time to Shutdown(secs):180 79 MF-Admin Server Parameters default settings Application Parameters Please see MF-Admin Server User Manual. System Parameters Please see MF-Admin Server User Manual. 80 Mifare Card Specification You may purchase Mifare Card or Key fob from 3rd party.

-owned trademark of a series of chips widely used in MIFARE is the NXP contactless smart

. The MIFARE brand name covers proprietary solutions based and proximity cards Semiconductors cards upon various levels of the ISO/IEC 14443 Type A 13.56 standard. It incorporates and proprietary encryption algorithm. DES/Triple-DES AES MHz contactless smart card encryption standards, as well as an older Pamex Enkore supports only MIFARE DESFire EV1

/EV2 compatible cards/key fobs. 81 Card Types Pamex Enkore defines below card types :

Card Type Crypto Card (CRC) Construction Card (COC) Programming/Registration Card (PRC) 1 2 3 4 Residential Card (RSC) sub-typed into five different residential card : Tenant card, Staff card, Vendor card, Guest card, and Temp card depending how you issue the card using MF-Admin server 5 Master Card (MAC) Crypto Card

Construction Card

Programming Card

Residential Card

To recognize any other types of card, a lock has to read Crypto card. Crypto card is not issued from MF-Admin server. It should be provided by Pamex and is unique to your project. Before the wifi network is ready, the only way to unlock the door locks will be using the construction cards. Construction cards can not be issued from MF-Admin Server. It should be provided by Pamex and is unique to your project. Once your wifi network is ready and MF-Admin server is installed, programming card can be used to register lock to the MF-Admin Server. Programming card can be created/issued using MF-Admin Server. In a large project, you may create several programming cards to speed up the registration process. There are five types of residential card : Tenant, Staff, Vendor, Guest and Temp. Residential cards are issued using MF-Admin Server by property owner or administrator when project goes live. Master Card

82 Master Card is an unrestricted access card to any door locks in the project. It is created using MF-Admin server. Master Card is only valid to the locks which has registered to MF-Admin server. 83 Area Types There are three types of area you may create in MF-Admin Server :

Group Area

Group area is like a folder. It is used to group together the units and public areas in the same floor/building for example. Unit Area

An unit area represents an unit for one family. Public Area

A public area represents a shared facility like swimming pool. These areas will be organized into a single root area tree to represent your property. All the areas can be programmed to grant access to residential cards by time control and area control in the MF-Admin Server. 84 Lock Real Time Events 1. Battery Change 2. Battery Low 3. Card space 90% full 4. Card# limitation reached 5. Firmware upgrade completed 6. Force to Normal 7. 8. Key Cover Open 9. Lock Out 10. Lock Schedule activated by staff 11. One Time Pass Success Invalid Key 85 Default Severity of Alert Types No. Alert Name Battery Change Battery Low Card space 90% full Card# limitation reached Dead Lock Firmware upgrade completed Force to Normal Invalid Key Key Cover Open 10 Lock Out 11 Lock Schedule activated by staff 12 One Time Pass Success 1 2 3 4 5 6 7 8 9 Severity 10 100 90 100 100 100 20 10 80 50 10 10 86 FCC Statement FCC Statement:

This device compile with part 15 of the FCC Rules. Operation is subject to the following two conditions:

(1)This device may not cause harmful interference, and

(2)This device must accept any interference received, including interference that may cause undesire d operation. NOTE: This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one or more of the following measures:

Reorient or relocate the receiving antenna. Increase the separation between the equipment and receiver. Connect the equipment into an outlet on a circuit different from that to which the receiver is connected. Consult the dealer or an experienced radio/TV technician for help. Changes or modifications not expressly approved by the party responsible for compliance could void the users authority to operate the equipment This equipment complies with FCC radiation exposure limits set forth for an uncontrolled environment. This equipment should be installed and operated with a minimum distance of 20 cm between the radiator and a human body. 87 NCC Statement NCC Statement:

Taiwan Regulatory Information(NCC) 88

Er FCC ID 2AQ8A-KEI-Dnl-A Auto Interconnect Enkore KEIINP3SA

[ eesenipenr on Te cad ee ay eee en 25 mm I 2AQ8A-KE1-DNI-A

Residential Locks Commercial Hardware # Bath Accessories Misc. Door Hardware Authority to Act as Agent Date: 2020-02-12 TUV Rheinland Group 762 Park Avenue Youngsville, NC 27596 To Whom It May Concern:

I appoint TUV Taiwan to act as our agent in the preparation of this application for equipment certification. I certify that submitted documents properly describe the device or system for which equipment certification is sought. I also certify that each unit manufactured, imported or marketed, as defined in the FCC or Industry Canadas regulations will have affixed to it a label identical to that submitted for approval with this application. For instances where our authorized agent signs the application for certification on our behalf, I acknowledge that all responsibility for complying with the terms and conditions for Certification, as specified by TUV Rheinland Group, still resides with Pamex Inc. / 4680 Vinita Court, Chino, CA, United States. For TCB applications, We certify that we are not subject to denial of federal benefits, that includes FCC benefits, pursuant to Section 5301 of the Anti-Drug Abuse Act of 1988, 21 U.S.C. 862. Further, no party, as defined in 47 CFR 1.2002 (b), to the application is subject to denial of federal benefits, that includes FCC benefits. Thank you, Agency Agreement Expiration Date: 12 months By ; Z Charles Chen A <

(Signature) (Print Name) Title : Dir. Of Product Telephone : 909-606-4168 On behalf of : Pamex Inc.

(Company Name) PAMEX INC. 4680 Vinita Court, Chino, CA 91710 Tel: (909) 606-4168 (800) 621-6869 Fax: (909) 606-4358 (800) 838-8307 E-Mail: sales@pamexinc.com Website: www.pamexinc.com

Confidentiality Letter Date: 2020-05-28 Subject: Confidentiality Request for FCC ID: 2AQ8A-KE1-DNI-A Pursuant to FCC 47 CRF 0.457(d) and 0.459, the applicant requests that a part of the subject FCC application be held confidential. Type of Confidentiality Requested Short Term Short Term Short Term Short Term Short Term Short Term Short Term Short Term Permanent Permanent Permanent Permanent Permanent Permanent Exhibit Block Diagrams External Photos Internal Photos Operation Description/Theory of Operation Part List/Tune-Up Procedure Schematics Test Setup Photos Users Manual Pamex Inc. has spent substantial effort in developing this product and it is one of the first of its kind in industry. Having the subject information easily available to "competition" would negate the advantage they have achieved by developing this product. Not protecting the details of the design will result in financial hardship. Permanent Confidentiality:

The applicant requests the exhibits listed above as permanently confidential be permanently withheld from public review due to materials that contain trade secrets and proprietary information not customarily released to the public. Short-Term Confidentiality:

The applicant requests the exhibits selected above as short term confidential be withheld from public view for a period of 180 days from the date of the Grant of Equipment Authorization and prior to marketing. This is to avoid premature release of sensitive information prior to marketing or release of the product to the public. Applicant is also aware that they are responsible to notify TUV Rheinland in the event information regarding the product or the product is made available to the public. TUV Rheinland will then release the documents listed above for public disclosure pursuant to FCC Public Notice DA 04-

1705. Sincerely,

) Charles Chen

(Print name)

15-Jul-20 Federal Communications Commission 7435 Oakland Mills Road Columbia, MD 21046 FCC ID: 2AQ8AKE1DNIA Models: KE1D7P1A, KE1INP35A Declaration on Similarity ___________________ Charles Chen

(Signature)

(Printed) We herewith confirm that for the models listed above the RF Transmitter Module is Electrically Identical. The differences are in the model numbers and in the digital data interface.