AIR ID ® Software For Use with pcProx TM Proximity Readers User’s Manual www.HIDCorp.
END-USER LICENSE AGREEMENT End-User License Agreement for RF IDeas T M SOFTWARE and HARDWARE - RF IDeas’ AIR ID® , AIR ID® LT, and pcProx Proximity Activated Systems. IMPORTANT-READ CAREFULLY: This End-User License Agreement ("EULA") is a legal agreement between you (either an individual or a single entity) and the manufacturer RF IDeas ("Manufacturer") with which you acquired the RF IDeas software and hardware product(s) identified above ("PRODUCT").
SOFTWARE PRODUCT LICENSE ii SOFTWARE PORTION OF THE PRODUCT is used or to which it is distributed. A license for the SOFTWARE PORTION OF THE PRODUCT may not be shared or used concurrently on different computers. 2. DESCRIPTION OF OTHER RIGHTS AND LIMITATIONS. * Limitations on Reverse Engineering, Decompilation and Disassembly.
FOR THE LIMITED WARRANTIES AND SPECIAL PROVISIONS PERTAINING TO YOUR PARTICULAR JURISDICTION, PLEASE REFER TO YOUR WARRANTY BOOKLET INCLUDED WITH THIS PACKAGE OR PROVIDED WITH THE SOFTWARE PRODUCT PRINTED MATERIALS. Limited Warranty HID, Inc. warrants to the original buyer of this product, that the hardware and related disk(s) are free of defects in material and workmanship for a period of one year from date of purchase from HID or from an authorized HID dealer.
Limited Warranty iv reserves the right to make any modifications in either product or the manual without giving prior written notification.
Congratulations on the purchase of your pcProx system.
ID Base Unit FCC compliance statement FCC ID M9MBUPCPROX100 This device complies with Part 15 of the FCC rules. Operation is subject to the following two conditions: (1) This device may not cause harmful interface, and (2) This device must accept any interference that may cause undesired operation.
TABLE OF CONTENTS END-USER LICENSE AGREEMENT _______________ i SOFTWARE PRODUCT LICENSE__________________ i Limited Warranty________________________________ iii ID Base Unit FCC compliance statement______________1 TABLE OF CONTENTS___________________________2 Proximity Activated Products _______________________5 AIR ID ® LT (Active Badge) ____________________________ 6 pcProx TM (Passive Badge) ______________________________ 6 What’s New In Version 3___________________________6 Windows 9X Security Layer___
AIR ID Startup Screen (First Time Users) _________ 18 AIR ID Application (Standard Launch) _____________ 19 Base Unit Dialog Tab____________________________ 20 Base Unit Com Port ___________________________ 20 Get Base Version _____________________________ 21 Screensaver Wait Time (seconds) _______________ 21 Screen Saver Wait Time when no Base Unit Attached ____________________________________________ 22 Badges Dialog Tab ______________________________ 23 Overview ____________________________________ 23
Login Settings Dialog Tab_________________________40 NT GINA _____________________________________41 TROUBLESHOOTING ___________________________42 No Base Unit Attached _________________________42 Cannot Locate the Badge _______________________42 Your Password doesn’t work____________________42 TECHNICAL SPECIFICATIONS __________________43 The pcProx Base Unit_________________________________ 43 Index __________________________________________44
5 Proximity Activated Products Proximity Activated Products HID offers a variety of wireless products for hands-free or contactless identification and security. Please review the following to choose which product best fits your need. If you do not see a solution, please contact us. There are several software developers licensing our technology and the solution you are looking for may already be developed.
What’s New In Version 3 6 Product AIR ID ® LT (Active Badge) pcProx TM (Passive Badge) FEATURE - BENEFIT ♦ ♦ ♦ ♦ ♦ ♦ ♦ ♦ ♦ ♦ Enterprise Management Software AIR ID Developer’s Kit 3rd Party AIR ID Aware Products ♦ ♦ ♦ ♦ ♦ ♦ ♦ ♦ ♦ ♦ ♦ ♦ ♦ ♦ ♦ Great for multiple users sharing a computer Economical solution Badge transmits, Base Unit receives Audit Trail TD2FTM Two-Factor Authentication Great for multiple users sharing a computer Passive badges, no batteries contactless range is 1- 2 inches.
7 Understanding Wireless Identification AIR ID Windows 9x security layer, users are now required to logon using either a manual password, their proximity card, or both. Auto-Enrollment New software features include the ability to automatically enroll users already established in a Windows 9x/NT client or Windows NT server.
Understanding Wireless Identification 8 proximity cards, giving the PC the ability to detect when the user has left the area with their card. Once removed, the PC is automatically locked. When the user returns, the authenticating information is exchanged between the pcProx Base Unit attached to the PC and the proximity ID card.
9 Understanding Wireless Identification contractors are usually required to enforce an unattended PC policy. This policy is easily achieved with AIR ID. What is pcProx TM Proximity Activated Identification? pcProx (Passive Badge) is the newest addition to our line of proximity activated access control systems.
Hardware Installation 10 What are the minimum system requirements? • • • • • Pentium class PC with CD ROM drive 32 MB RAM (40 MB hard disk space available for installation overhead and AIR ID software). 1 available serial port (unused by other devices) Microsoft Windows 95, 98, NT v 4.0 SP3+ or Windows 2000 For Windows NT/2000, the installer as well as the user must have administrative rights to access and modify AIR ID files. Caution: Turn off your system prior to attaching any peripherals.
11 Hardware Installation Hardware Installation Locate an open serial port on the system. If there is a 9 pin serial port connector present, attach the Base Unit’s 9 pin connector to the PC serial port. The pcProx Base Unit is powered by either the keyboard or mouse port using the small round in-line connector. Plug this connector into the PC’s keyboard or mouse port, and then plug the corresponding keyboard or mouse cable into this adapter.
Software Installation 12 pcProx Badge (Passive badge users only) The pcProx badge is the same as your supplied passive proximity badge for your facility access control system. Since the pcProx reader is independent of bit length, it is capable of reading any existing proximity badge format. This is a passive badge and therefore requires no battery.
13 Software Setup Software Setup In this section you will: 1. Configure Windows to enable the AIR ID or other screen saver as well as set any graphical preferences. Under the Windows 9x operating system this setting is made automatically. NT NOTE: NT users may use other 3rd party screen savers provided they use the Keyboard/Mouse activation mode. Screen savers from other companies do not support the use of the Room Proximity mode unless they are “AIR ID Aware” (these activation modes are discussed later).
Software Setup 14 10. The Wait field sets the number of minutes the mouse/keyboard will be inactive before launching the screensaver. This Windows parameter value will determine how soon the system will become secure once you leave your PC. Windows defaults to a minimum of one (1) minute delay. HID Corp.
15 Software Setup NOTE: The AIR ID software provides a function to set this delay in seconds and allows settings as low as 10 seconds. This is very useful for providing a timely proximity activated system. There are two important things to be aware of when choosing to use the AIR ID delay: 1. Every time you click OK in the Control Panel’s screensaver dialog box, the Windows delay (in minutes) is sent to the operating system thus resetting the AIR ID setting.
Software Setup 16 Click the Settings button and the AIR ID setup screen will appear. This screen will allow you to modify the settings related to the graphical aspects of the screensaver. Use the slide bar to modify the size of the circles. If you prefer to have a scrolling text message displayed, click the Checkbox labeled “No Graphics - Use Text Below”. Enter the appropriate message in the field beneath the checkbox. This message is then scrolled during screensaver operation.
17 Software Setup Setting AIR ID System Parameters The AIR ID Setup software is found by using the Windows START button located on your desktop. From there select Programs and locate the AIR ID folder. In the AIR ID folder, you will find the Readme file together with the AIR ID application and other related files. Select the AIR ID application to begin setting the various AIR ID parameters.
Software Setup 18 AIR ID Startup Screen (First Time Users) If this is your first time running the application, or you have chosen not to disable the Startup Screen, you will see the AIR ID Startup Screen. This screen is intended for first time users. Step 1 - Enter the COM Port on which the AIR ID base unit is attached. This function will test the communication with the base unit. If the AIR ID software cannot communicate with the base unit, an error message will be displayed.
19 AIR ID Application (Standard Launch) Step 3 – Set Admin Password – All AIR ID systems ship with the Admin password set to ‘12345678’. For security reasons, change this password to a new value. Be sure to remember this value or store in a secure location. Step 4 – Add User – Add the username, domain (if no domain leave blank), badge address (located on back of the AIR ID badge for non-pcProx products), password and two-factor options.
Base Unit Dialog Tab entry of program options and more detailed options for the application. These options are described in the next section. 20 Base Unit Dialog Tab The Base Unit tab allows all Base Unit options to be set. The Range and sensing options are greyed out since these apply to only the active card/reader solutions. The COM Port setting, WAIT times, and version described in detail in this section.
21 Base Unit Dialog Tab You may verify this communication is correct by reading the version of the Base Unit. Press the button labeled Get Base Version. The three boxes to the right of the button will display the version of firmware located within the Base Unit. If you receive an error message, you will need to verify the connection between the PC and Base Unit and make sure you are selecting the proper COM port.
Base Unit Dialog Tab 22 AIR ID checks the defined proximity area for a valid authorized Badge. If one is found, the screensaver execution is terminated immediately and control is returned to the user. In Windows 95/98 you will notice the cursor turns to an hourglass briefly during this checking procedure.
23 Badges Dialog Tab Badges Dialog Tab The Badge(s) Tab allows the adding, deleting and editing of users. This function also allows the badges to be tested for proper operation. Functions within this tab help the user adjust the orientation of the base. All functions are described in this section. Overview All AIR ID screensaver systems have a database that holds user information.
Badges Dialog Tab The “admin” user may also have proximity badge capability if initialized with the [Admin Tools]-[Admin Badge] facility. 24 Non-Badge Users You are permitted to add other users to the system who are not yet using AIR ID badges. AIR ID Badge Users These users may gain access to the system using either their badge or manual password entry. If the two-factor option is selected then the badge and password, or password-only is required in order to gain entry.
25 Reading a Badge Badges Dialog Tab 1. Select a user from the database using the record selectors, on both sides of the field AIR ID Users (the record selectors look similar to those found on your VCR). 2. Once you have the user’s name shown in the User field, click on the Check button. This will cause the Base Unit to request the ID from the selected user’s Badge. Once you select the Continuous checkbox, the Base will read at approximately once every two seconds.
Badges Dialog Tab 26 Administrative Functions To gain access to the administrative buttons you need to enter the AIR ID admin password. Press the [Admin Tools] button and enter the admin Password. A valid admin password yields the following screen: NOTE: Since all AIR ID system ship with the same ‘ADMIN’ user’s password (12345678), make sure you change this password in order to maintain the security of the system. HID Corp.
27 Badges Dialog Tab Add User There are two methods available for adding users to the system. The user may auto-enroll themselves provided they know their username, password, and optionally domain. This is done automatically at boot-up provided they have their proximity card on the reader, and use a valid logon credential. Once the user enters this information, they will see a dialog box which asks if they would like to be added to the AIR ID database.
Badges Dialog Tab 28 NOTE: For 95/98NT Users, make sure that the Username and Password entries are identical to those used for the respective operating system. The new user added to the AIR ID system will not be detected (logon or screensaver) until the PC is rebooted. If you want to add a temporary user or user without a Badge, leave the Badge Address field empty. AIR ID includes a provision for Two-Factor Authentication.
29 Badges Dialog Tab Edit User The Edit User screen is used to modify Two-Factor Authentication parameters or the default Domain used by NT users. Once the parameters are modified, use the Modify User button to register the changes.
Badges Dialog Tab 30 Delete User Select the User you want to delete by using the VCR style buttons and then click on Delete User. Another dialog box will appear stating, “You are about to Delete a user, do you want to continue?” Make your selection. NOTE: If you feel an authorized badge is lost or stolen, simply have the administrative user remove the lost badge user from the system by using the Delete button. HID Corp.
31 Badges Dialog Tab Audit Log The Audit Log button provides the administrator with the ability to track user activity on the system, including the auditor’s activity. Pressing this button brings up the Audit Log screen as shown below. The audit information may be listed by Machine or by User. Choosing the appropriate pull down button makes the selection. You may export the log information by first typing in the path and file name, and then selecting the “Export to file” check box.
Badges Dialog Tab 32 Audit The AIR ID system currently logs the following events: 1. 2. 3. 4. 5. 6. 7. 8. 9. 10. 11. 12. 13. 14. 15. 16. 17. Change Password Change Password: Failed Logon Badge Logon Badge Fail Logon Pwd Logon Pwd Failed Logoff Shutdown User Auto-assignment Manual Lock Manual Unlock Manual Unlock Failed Badge Unlock Badge Unlock Failed Assignment [of a user to a machine] Admin Badge Override Admin Manual Override HID Corp.
33 Badges Dialog Tab Assignment This screen allows you to assign user access rights to various PCs throughout the organization. Select and highlight the username using the drop down select box. Shown in the Machine Assignment box are the available machines (standard PC naming convention used) to which this user can be assigned access. A check indicates this user has access to this particular PC. Once you have all the selections made, press the Modify User button to register the changes.
Badges Dialog Tab 34 Machines This button allows the administrator to delete PC machines in the organization to the AIR ID system. The AIR ID system will automatically add your machine name to the list when the AIR ID software is installed. Each PC will show its Machine Name in the box labeled: Current Machine Name. HID Corp.
35 Badges Dialog Tab Admin Badge Use this dialog to associate a Badge ID with the ADMIN user. Once the ADMIN is associated with an AIR ID badge, this badge may be used to override locked workstations. Be aware, this allows access to the locked desktop without actually logging off the user. The access is logged as a AdminOverride event in the Audit Log. Passive badge users should use the 'Learn' button to enter the Badge ID.
Badges Dialog Tab 36 Screensaver Lock AIR ID permits the administrator to lock the Control Panel’s access to the screensaver tab. This prevents the user from deselecting screensaver operation or modifying the WAIT time. HID Corp.
37 Badges Dialog Tab Common Logon The Common Logon feature allows several users to share applications using a single logon account. This is efficient since there is no need to close applications and re-logon each time a different user needs access to the machine. The admin enters established W9x/NT user account credentials into the fields shown above. All users who logon to this machine will actually logon using this shared account.
Initial Steps Dialog Tab 38 About Dialog Tab This screen allows you to re-enable the initial Start-up screen and perform a User License Upgrade. It also displays valuable version information that is required for technical support. HID Corp.
39 Initial Steps Dialog Tab Initial Steps Dialog Tab This screen displays a summary of the initial Start-up steps that appeared when the AIR ID application was first launched.
Login Settings Dialog Tab 40 Login Settings Dialog Tab AutoDetect During Welcome - This permits hands-free badge detection at the initial login session by not stopping at the 'Welcome' screen if a badge is present. AutoDetect Badges- Allows polling of the badge for complete hands-free (contact-less for pcProx users) operation at the first logon screen (after the Welcome screen). Disabling this feature will force a manual credential entry at Logon.
41 Login Settings Dialog Tab NT GINA Under NT, HID does not replace the system GINA. Rather the HID GINA uses a threading GINA which works with the GINA specified to the operating system. This threading preserves the functionality intended by the originating GINA. Some vendors supply a replacement GINA and this removes the functionality of an existing GINA. Should you install an application that removes the AIR ID GINA you will need to uninstall AIR ID and reinstall it again.
TROUBLESHOOTING 42 TROUBLESHOOTING If your system is not working it could be for one of the following reasons: No Base Unit Attached 1. Check to be sure the base unit is plugged in. 2. Verify the COM Port selected agrees with the connector on the PC. Refer to the section labeled Get Base Version and review this step. 3. Verify no application has taken control over the COM Port. Applications such as Palm Pilot’s Hot Sync program will take over the COM Port and not release it until you terminate them.
43 TECHNICAL SPECIFICATIONS TECHNICAL SPECIFICATIONS The AIR ID System was developed with an open architecture designed to allow for further integration. The API Software will be provided to system integrators via the AIR ID Developer Kit. The pcProx Base Unit Proximity reader compatible with HID badges. Microprocessor DB9 Connector Approximately 3.75”x2.
Index 44 Index A About .............................. 19 Add User......................... 27 admin.........................24, 26 ADMIN................. 23, 25, 26 Administrative.............23, 26 Allow Anonymous Logout ................................... 40 Assignment ..................... 33 Audit Log......................... 31 AutoDetect Badges........ 40 AutoDetect during Welcome .................... 40 B Badge Address................ 28 Badge Sense................... 25 Badges Dialog Tab ........
45 W AIR ID Index Wait .....................