dormakaba

Access Manager 92 00
exos Client

Technical Manual
04047404 - 06//2019
K7 exos Client / Preliminary

EN
dormakaba Schweiz AG
Hofwisenstrasse 24
8153 Rümlang
Switzerland
T: +41 (0)44 818 93 11

www.dormakaba.com

dormakaba Schweiz AG
Mühlebühlstrasse 23
8620 Wetzikon
Switzerland
T: +41 (0)44 931 61 11

www.dormakaba.com

dormakaba EAD GmbH

Albertistraße 3
78056 Villingen-Schwenningen
Germany
T: +49 7720 603-0
www.dormakaba.com
Company headquarters: Villingen-Schwenningen

Copyright © dormakaba 2019

All rights reserved.

No part of this document may be reproduced or used in any form or by any means without prior written permis-
sion of dormakaba Schweiz AG.

All names and logos of third-party products and services are the property of their respective owners.

Subject to technical changes.

04047404 - 06//2019 K7 exos Client / Preliminary

Technical Manual

1 About this document 7

1.1 Validity 7
1.2 Target group 7
1.3 Contents and purpose 8
1.4 Orientation in the document 9
1.5 Additional documentation 9
1.6 Document availability 10
1.7 Change log 10
1.8 Abbreviations/term definitions 10
1.9 Warnings 11
1.9.1 Hazard categories 12
1.9.2 Symbols 12
1.10 Notes 13
1.11 Instructions 13

2 Basic safety instructions 14

2.1 Assembly and installation 14
2.2 Service and maintenance 14
2.3 Accessories and spare parts 14
2.4 Electrical hazards 15
2.5 ESD prevention measures 15
2.6 Environmental protection 15

3 Product description 16
3.1 Overview 16
3.2 Mobile Access system overview 18
3.3 I/O extension modules 20
3.3.1 Extension module 90 30 sample application 21
3.4 Power supply 21
3.5 exos client terminal software 22
3.5.1 Areas of application 22
3.5.2 Supported readers/subterminals 22
3.5.3 Registration units 23
3.6 Supported RFID standards with possible media definitions 24
3.7 Mobile Access support 25
3.8 Technical data 26
3.8.1 Power supply 26
3.8.2 Data transmission 26
3.8.3 Interfaces 26
3.8.4 Inputs/Outputs 27
3.8.5 Mechanical system 27
3.8.6 Dimensions 27
3.8.7 Environmental conditions 27
3.9 System structure 28
3.10 Identification 29
3.11 Conformity 29
3.12 Open source information 29

4 Construction and function 31

4.1 Device layout 31
4.2 Behaviour with two registration units 32
4.3 Behaviour of readers installed next to each other 32
4.4 Behaviour when several media are present in the field (anti-collision)
32
4.5 LEDs 33

04047404 - 06//2019 K7 exos Client / Preliminary dormakaba Access Manager 92 00 3

 Technical Manual

4.5.1 Ethernet LEDs 33

4.5.2 Status display 33
4.5.3 Device status 33
4.6 Firmware 34
4.7 Access control 35
4.7.1 Principle 35
4.7.2 Components of access control 36
4.7.3 Input function 37
4.7.4 Output function 37
4.7.5 Operating states 39
4.7.6 Order of permission checks 40
4.8 Opening via smartphone 41

5 Installation 42
5.1 Installation requirements 42
5.1.1 General 42
5.1.2 Installation location 42
5.1.3 Connections 42
5.2 Installation layout 43
5.3 Installation lines 44
5.3.1 Ethernet 44
5.3.2 Power supply for reader/subterminal 44
5.3.3 Data line to reader/subterminal 44
5.3.4 Line to the door opener, the door opener key, and the door con-
tacts 44
5.3.5 Coaxial cables to registration units 44
5.3.6 RS-232 connection 44
5.4 Mounting device and extension modules 45
5.5 Connections 47
5.5.1 Overview 47
5.5.2 Connection of the readers 48
5.5.3 Detection units 50
5.5.4 Inputs 51
5.5.5 Outputs 53
5.5.6 RS-232 A and RS-232 B interfaces 54

6 Commissioning 55
6.1 Configuration 55
6.1.1 Determining the IP address 55
6.1.2 First-time network settings (addressing) 57
6.1.3 Configure/check access manager for operation 58
6.2 Preparing for commissioning 63
6.3 Configure network 64
6.4 Parameter setting 64
6.5 Commissioning the access manager 64
6.5.1 Basic configurations 64
6.5.2 Registration units (antenna A/B) 64
6.5.3 RS-485 64
6.6 Access manager status display 65
6.7 Issuing read/write authorization (launch) 66
6.8 Withdrawing read/write authorization 67
6.8.1 Withdrawing all write access issued via a write authorization
67
6.8.2 Withdrawing individual write access issued via a write authoriz-
ation 67
6.9 Initialise the device for Mobile Access 68

7 Maintenance 70
7.1 Reset key and status LED 70
7.2 Note 70
7.3 Firmware update/LEGIC OS update 71
7.3.1 Carry out updates 71

4 dormakaba Access Manager 92 00 K7 exos Client / Preliminary 04047404 - 06//2019

Technical Manual

7.4 Power Up 74
7.5 Restart (Factory Reset button) 75
7.6 Overview of reset/factory reset 76
7.6.1 Carry out reset 78
7.6.2 Carry out Factory Reset 80
7.7 Host system commands sent to the access manager 82

8 Troubleshooting 83
8.1 LED indicators 83
8.2 During installation 84
8.3 During operation 85

9 Dismantling/disposal 86
9.1 Decommissioning 86
9.2 Dismantling 86
9.3 Disposal 86

10 Packaging/return 88
10.1 Complete devices 88
10.2 Electronic component assemblies 88
10.3 Labelling 89

11 Appendix 90
11.1 Access manager configuration 90

Index 91

04047404 - 06//2019 K7 exos Client / Preliminary dormakaba Access Manager 92 00 5

Technical Manual About this document

1 About this document

1.1 Validity
This document describes the product:

Product name: dormakaba access manager 92 00

Product code: 9200-K7

Article number: 04079xxx

Device software: Firmware bundle

exos client from version BAME04.00.xxxRA.fw onwards

ACU PCU
• Firmware: • Internal reader:
BAME04.00.xxxx RA BLIB04.00R*
• Linux buildroot: 4.14.39 • LEGIC OS: 5.x.x.x
• Bootloader: 01.00

Date of manufacture: From June 2019

This document describes all product variants and all optional accessories and functions. Op-
tions are subject to a charge and are thus only available if they have been purchased. Addi-
tional accessories and functions may not be available on the date of publishing and may only
be available for purchase at a later point in time.

1.2 Target group

This quick start guide is intended for skilled persons only.

The descriptions are intended for skilled persons trained by the manufacturer. The descrip-
tions are no replacement for product training.

For reasons of equipment safety, the installation, maintenance and service measures de-
scribed in this documentation should only be carried out by skilled persons in accordance with
EN 62368-1 (Audio/Video, Information and Communication Technology Equipment – Part 1:
Safety Requirements).

Skilled person is the designation for people who have the appropriate technical training and
experience in setting up the equipment. Skilled persons are expected to use their training and
experience to identify any risks to themselves and others that may arise while carrying out
these activities, and to minimise these risks as far as possible. It is the skilled person’s re-
sponsibility to ensure that the conditions stated by the manufacturer and the applicable regu-
lations and standards are complied with when carrying out these actions.

This documentation is also used to provide information for persons with the following tasks:

• Project planning and project implementation

• Commissioning the product within the network
• Connecting the product to user software by programming customer applications
• Customer-specific adjustments with product parametrisation

04047404 - 06//2019 K7 exos Client / Preliminary dormakaba Access Manager 92 00 7

About this document Technical Manual

1.3 Contents and purpose

Contents are limited to the assembly, installation, commissioning and basic operation of the
product.

8 dormakaba Access Manager 92 00 K7 exos Client / Preliminary 04047404 - 06//2019

Technical Manual About this document

1.4 Orientation in the document

This document contains the following features to help find specific topics:

• The table of contents at the beginning of the document offers an overview of all topics.
• The header contains the associated main section.
• Cross references indicate the number of the section containing additional information.
Example [ 5.7].
• An index in alphabetical order is given at the end of the document.

1.5 Additional documentation

Details on setting specific device parameters can be found in the reference manual of the ter-
minal software used.

Document name Contents

RM_AccessManager_exosClient Access manager – Reference manual

RM_AccessManager9200 exosClient
TM_RemoteReader9115 Remote reader 91 15 – Technical manual
TM_RemoteReader9125 Remote reader 91 25 – Technical manual
TM_CompactReader9110 Compact Reader – Technical manual
TM_CompactReader9104
TM CompactReader9112
QG_9000 Registration units – Quick guide
QG_9001
QG_9002
QG_9003
QG_9004
TM_Interface9010 Interface – Technical manual
TM_Mobil-Interface9060 Mobile interface – Quick guide
QG_ExtensionModule9030 TM_ExtensionModule9030 TM_Extension-
TM_ExtensionModule9031 Module9031
PGL_Thema_Kaba_exos_9300 Planning guidelines, depending on topic, e.g
media
Internal online help and CM_Kaba_Me- Kaba Media Manager configuration manual
dia_Manager for media
CM_ARIOS_Kaba_exos_9300 Basic commissioning for Kaba exos 9300
CM_Media_Definitions Configuration manual for media definitions
Kaba exos online help Parameter setting, different door configura-
tions with the respective chronological dia-
grams

Mobile Access option

• Mobile Access planning guidelines

04047404 - 06//2019 K7 exos Client / Preliminary dormakaba Access Manager 92 00 9

About this document Technical Manual

1.6 Document availability

Additional documentation is available on the Internet at the dormakaba website. The tech-
nical manuals are located in a protected area. They can be accessed via the user account of
trained professionals. However, you can also create a temporary account.

https://www.dormakaba.com/extranet-emea-en

1.7 Change log

The most important changes to the last version of this document are listed as follows:

Version number Edition Brief description

TM_AM9200-K7-exosClient_201905 05/2019 • First edition

1.8 Abbreviations/term definitions

Abbreviations and terms used in this document:

Name used in this Explanation

document
Access manager dormakaba access manager 92 00 – exos client
Device
Host Parent system
Reader Subterminal
Subterminal Reader
Reader Remote reader 91 15
Remote reader 91 25
Compact reader 91 10
Compact reader 91 12
Compact reader 91 04
KCP Kaba Communication Protocol (RS-485)
Control device Access manager
KMM Kaba Media Manager
MRC Multi Reader Device (the parent system determines which
RFID media technology (MIFARE or LEGIC) the device sup-
ports)
Firmware Device software
Device software Firmware
ACU Application Controller Unit, see section 3.9
PCU Peripheral Controller Unit, see section 3.9
Service Tool Access Manager Service Tool
Programmer Programmer 1460

Reset button Key legend:

• 3 s -> Restart
• 10 s upon power on -> Factory/IP reset

OC8 Extension module 90 30

IC8 Extension module 90 31

10 dormakaba Access Manager 92 00 K7 exos Client / Preliminary 04047404 - 06//2019

Technical Manual About this document

Name used in this Explanation

document
Extension module • Extension module 90 30
• Extension module 90 31
Remote reader • Remote reader 91 15
• Remote reader 91 25
Compact reader • Compact reader 91 04
• Compact reader 91 10
• Compact reader 91 12
Registration unit • Registration unit 90 00
• registration unit 90 01
• Detection unit 90 02
• Detection unit 90 03
• Registration unit 90 04
• Detection unit LA-PP

Authorised access Is active till the door is closed again or the alarm time has
elapsed
Electric strike button Button that actuates a one-off authorised opening of the
door
Lever handle contact Contact in the lever handle with which an authorised open-
ing of the door is notified to the system
Door frame contact Contact in the door frame with which the door status open
or closed is reported
Locking contact Contact with which the passage way can be locked. When
this happens, any identification is rejected as not author-
ised by the detection unit and signalled accordingly
Alarm relay With this signal, the relay output is activated if there is a
forced entry through the door or if the status is ‘Door open
for too long’
Hold-open mode Door remains activated (opened) in case of authorised ac-
cess as long as the user medium is in the area of action of
the antenna (field).

Reference manual RM_AccessManager9200exosClient

NFC Near Field Communication
Bluetooth Bluetooth® Low Energy
Smartphone Device on which the DOOR by dormakaba app is installed
DOOR app DOOR by dormakaba app

1.9 Warnings
Warnings containing information/instructions and prohibitions designed to prevent personal
injury or damage are specially marked.

Please pay attention to warnings! They are intended to help avoid accidents and prevent in-
jury and damage.

04047404 - 06//2019 K7 exos Client / Preliminary dormakaba Access Manager 92 00 11

About this document Technical Manual

1.9.1 Hazard categories

Warnings are divided into the following categories:

CAUTION
Low risk
Indicates a possibly dangerous situation which may lead to minor physical injury.

NOTICE
Important information on the correct use of the product.
Failure to comply with these instructions could lead to malfunctions. It is possible to damage
the product.

1.9.2 Symbols
Symbols with the following meaning are used for warnings, depending on the source of
danger.

General hazard Danger of damage to electronic

components from electrostatic dis-
charge

12 dormakaba Access Manager 92 00 K7 exos Client / Preliminary 04047404 - 06//2019

Technical Manual About this document

1.10 Notes
Notes are indicated by an info symbol.

Tips and useful information.

These help you make the best use of the product and its functions.

1.11 Instructions
Structure and symbols of the instructions are illustrated in the following example:

ü Prerequisite
1. Step 1
ð Interim result
2. Step 2
ð Result

04047404 - 06//2019 K7 exos Client / Preliminary dormakaba Access Manager 92 00 13

Basic safety instructions Technical Manual

2 Basic safety instructions

This product has been built to state-of-the-art standards and in line with established safety
regulations. However, hazards for persons and property may arise when handling the product.

Read and observe the following safety instructions before using the product.

2.1 Assembly and installation

Check the device for visible damage caused by transport or wrong storage. Do not start up
any damaged device!

Assembly and installation of the product may only be done by skilled personnel (see chapter 1
Target group).

Mains voltage installations may only be carried out by a certified specialized company or au-
thorized electricians.

When installing/inserting the product in end-use equipment all requirements of the men-
tioned test standards must be fulfilled.

The product should only be installed in locations which fulfil the environmental and technical
conditions specified by the manufacturer.

The manufacturer is not liable for damage arising due to improper handling or incorrect in-
stallation.

2.2 Service and maintenance

Conversions and modifications to the product may only be done skilled personnel (see chapter
1 Target group). Any conversions and modifications performed by other persons will exempt
us from any liability.

The elimination of faults and maintenance work may only be performed by skilled personnel
(see chapter 1 Target group).

2.3 Accessories and spare parts

Accessories and spare parts must meet the manufacturer's technical requirements. This is
guaranteed if original dormakaba accessories and spare parts are used.

14 dormakaba Access Manager 92 00 K7 exos Client / Preliminary 04047404 - 06//2019

Technical Manual Basic safety instructions

2.4 Electrical hazards

WARNING
Live connections in the area of the DIN rail power supply units
Carelessness can result in an electric shock.

Before you carry out maintenance work on the open device, take the following measures:

• The installation area with power supply units for the device must only be accessible to
skilled persons (see chapter 1 “Target group [} 1.2]”).

• De-energize before starting maintenance work.

• Secure against being switched on again.

• Check for absence of voltage.

2.5 ESD prevention measures

NOTICE
Risk for electronic components due to electrostatic discharge.
Incorrect handling of electronic PCBs or components can result in damage which will cause a
complete breakdown or sporadic errors.

• General ESD prevention measures must be observed when installing or repairing the
product.

• Wear an anti-static wrist strap when handling electronic components. Connect the end of
the strap to a discharge box or a non-painted, earthed metal component. This way, static
discharges are channelled away from your body safely and effectively.

• Handle a PCB along its edges only. Do not touch the PCB or connectors.

• Place dismantled components on an anti-static surface or in an anti-static shielded con-

tainer.

• Avoid contact between PCBs and clothing. The wrist strap protects PCBs against an elec-
trostatic discharge voltage from the body only. However, damage can also be caused by
an electrostatic discharge voltage from clothing.

• Transport and ship dismantled modules in conductive anti-static bags only.

2.6 Environmental protection

It is prohibited to dispose of the device in your domestic waste.

Used devices contain valuable materials that should be recycled. Properly dispose of used
devices.

04047404 - 06//2019 K7 exos Client / Preliminary dormakaba Access Manager 92 00 15

Product description Technical Manual

3 Product description
3.1 Overview
The access manager enables autonomous controlling and monitoring of access control at pas-
sageways.

The device can be integrated in the Kaba exos access control system.

The installation is done in a secured indoor area on a DIN top hat rail as per EN 60715. 2 regis-
tration units can be connected to the access manager via coaxial cable and up to 15 external
readers via RS-485. This enables contactless reading and writing of RFID media.

A 10BASE-T/100BASE-TX Ethernet interface is available for communicating with the parent

host computer.

If CardLink components are being used, the access manager supports validation functions.

The device has 2 RS-232 interfaces (e.g. for badge input/badge output).

4 digital inputs and 3 digital outputs are available for the door management in the form of re-
lays. Any additional logical inputs and outputs can be provided via the external readers. The
number of inputs and outputs can be extended by using the extension modules 90 30 and
90 31. The functions of inputs/outputs can be assigned variably.

1 System software A Ethernet

2 Access manager 92 00 (exos client) B HF RFID
3 Extension module 90 30 C RS-485
4 Extension module 90 31 D Output
5 Registration unit* E Input
6 Reader F Bus for extension modules
7 Electric strike button G Ethernet
8 Door frame contact
9 Electric strike
10 Computer

16 dormakaba Access Manager 92 00 K7 exos Client / Preliminary 04047404 - 06//2019

Technical Manual Product description

11 Additional devices (reader, ...)

* Not supported at present: 90 02 (however, can be connected via remote reader)

Supported peripherals and functions

• Reader including CardLink functions and Mobile Access,
see section Mobile Access system overview [} 3.2]
• Extension modules 90 30 and 90 31
• Registration units,
see section Mobile Access system overview [} 3.2]
• Interface 90 10 (interface for Wiegand reader)
• RS-232 interface (badge input/badge output)
• Components with CardLink: Validation function
Functions that are not supported at present
• Mobile Access applications at registration units
• CardLink update
• Alarm zones
• Lift controls
The parent system determines which RFID media technology (MIFARE or LEGIC) the device
supports.

A 10BASE-T/100BASE-TX Ethernet interface is available for communicating with the parent

host computer.

If CardLink components are being used, the access manager supports validation functions.

The device has 2 RS-232 interfaces (e.g. badge input/badge output).

4 digital inputs and 3 digital outputs are available for the door management in the form of re-
lays. Any additional logical inputs and outputs can be provided via the external readers.
The number of inputs and outputs can be extended by using the extension modules 90 30 and
90 31.
The functions of inputs/outputs can be assigned variably.

Mobile Access applications

In Mobile Access applications, access is achieved by means of a smartphone. Access authoriz-
ation is signalled visually and acoustically.

Secure connection between communication hub (CH) and access manager K7

An encrypted connection must be established to increase security.

See exos documentation.

Prerequisites:
exos 4.0.80 or higher
The communication hub and the access manager must be provided with certificates.

04047404 - 06//2019 K7 exos Client / Preliminary dormakaba Access Manager 92 00 17

Product description Technical Manual

3.2 Mobile Access system overview

The device supports Mobile Access. The function must be set up in the system.

1 LEGIC Connect

A
5 6

2 B E

3 C D

4 7

A Ethernet D NFC or Bluetooth

B RS-485 E WLAN/mobile data
C Coaxial cable/HF RFID

1 System software
2 Access manager
3 Remote reader

NFC Bluetooth NFC Bluetooth

3 Remote reader* 5 Compact reader*
91 15 ● − 91 04 ● ●
91 25 ● − 91 10 ● −
4 Registration unit** 91 12 ● ●
90 00 ● −
90 01 ● −
90 02 ● −
90 03 ● −
90 04 ● −

* Function type: Access Manager

** Mobile Access applications
Registration units connected to access manager: Not supported at present
Registration units connected to remote readers: Supported

Operating system NFC Bluetooth

18 dormakaba Access Manager 92 00 K7 exos Client / Preliminary 04047404 - 06//2019

Technical Manual Product description

6 Smartphone with DOOR app Android ● ●

from version 5.0
The Mobile Access bookings are car-
ried out with it. iOS − ●
from version 10.0
7 Smartphone with VCP Installer app Android ● ●
from version 6.0
The VCP Installer initialises the Mobile
Access function. iOS − −
not available

● yes − no

04047404 - 06//2019 K7 exos Client / Preliminary dormakaba Access Manager 92 00 19

Product description Technical Manual

3.3 I/O extension modules

The access manager 92 00 has 4 binary inputs and 3 relay outputs.

The number of outputs and inputs of the access manager increases by plugging in extension
modules 90 30 (OC8) and extension modules 90 31 (IC8).

• There are 8 additional outputs available per extension module 90 30 (OC8).

• There are 8 additional inputs available per extension module 90 31 (IC8).
The configuration of the access manager and its minimum power supply determine the max-
imum number of extension modules 90 31/90 30 that can be connected to an access man-
ager.

Access man- Extension module 90 30 Extension module 90 31 Minimum

ager config- power supply
uration to access
Max. number Max. number Max. number Max. number
manager
of connect- of additional of connect- of additional
able exten- outputs able exten- inputs
sion modules sion modules
90 30 90 31
Only exten- 9 72 0 0 20 VDC*
sion module
90 30
Only exten- 0 0 5 40 As per tech-
sion module nical data:
90 31 10 VDC
Mixed opera- 2 16 2 16 As per tech-
tion (exten- nical data:
sion module 10 VDC
90 30 and
90 31)

*not standard

The extension modules are designed for installation on a DIN top hat rail as per EN 60715. The
extension modules are docked to the access manager or to another extension module. The ac-
cess manager and the extension modules are equipped with a plug connection on the sides.
OUT8

OUT7

OUT6

OUT5

IN8
GND

IN7
GND

IN6
GND

IN5
GND

Output Input
OUT1 IN1
2 Click OUT2 2 Click IN2
90 30 OUT3 90 31 IN3
DIN-Rail

DIN-Rail

OUT6 IN4
OUT6 IN5

OUT6 IN6
1 Push OUT7 1 Push IN7

OUT8 IN8
Input Monitoring
ON-OFF

Output
OUT1

OUT2

OUT3

OUT4

GND

GND

GND

GND
IN1

IN2

IN3

IN4

IN1
IN2
IN3
IN4
IN5
IN6
IN7
IN8

Extension module 90 30 Extension module 90 31

20 dormakaba Access Manager 92 00 K7 exos Client / Preliminary 04047404 - 06//2019

Technical Manual Product description

3.3.1 Extension module 90 30 sample application

Functional description: lift control
1. Assign a room zone to every floor in Kaba exos.
2. Register at the detection unit.
ð The buttons of the floors for which there is an access permission can be activated via
the outputs of the access manager or the extension module 90 30.
3. Select the desired floor on an activated button.

3.4 Power supply

A power supply unit which can be attached to a DIN rail is preferably used for the power sup-
ply of the access manager.

The following DIN rail power supply units (100-240 V AC) are available as accessories.

Order number Voltage Power

04045052 12 V DC 60 W
04043074 24 V DC 60 W

The access manager can be supplied with 12 V DC or 24 V DC, depending on whether 12-V DC
door openers or 24-V DC door openers are to be supplied with power.

The required power of the power supply unit is defined by the number and power of the door
openers connected and by the maximum power of the access manager and its extension mod-
ules, see table below.

Component Max. power

access manager 92 00 6.5 W

extension module 90 30 3.5 W
extension module 90 31 1.2 W

04047404 - 06//2019 K7 exos Client / Preliminary dormakaba Access Manager 92 00 21

Product description Technical Manual

3.5 exos client terminal software

The product is equipped with the exos client terminal software for access control.

3.5.1 Areas of application

Access control
The access manager uses various test criteria to check whether a booking made on a reader/
subterminal is authorized or not.

Door management
• Sluice control
• Door activation
• Monitoring of door opening
• Monitoring of door opening time
• Access monitoring
Alarm Management
The access manager reports irregularities in access control or door management to the host
computer. An additional function is to activate relays.

3.5.2 Supported readers/subterminals

Reader Supported function

Compact reader 91 04 LEGIC mode:

Compact reader 91 10 LEGIC prime read + write (CardLink validation)
Compact reader 91 12 LEGIC advant read + write (CardLink validation)
Remote reader 91 15
Remote reader 91 25 MIFARE mode:
MIFARE DESFire/Classic read + write (CardLink validation)
Interface 90 10 Interface for Wiegand reader

The above-listed readers must be equipped with the firmware of functional type
“Access Manager (AM)”!

Power supply of the readers

Readers connected via the RS-485 interface require their own external power supply.

Inputs/Outputs of the readers/subterminals

The inputs and outputs of the readers/subterminals can be used, thus increasing the usable
number of inputs/outputs.

The control of the door openers by means of a readers/subterminals relay is recommended

only in secured areas.

Time-critical contacts (door frame contact) should not be queried via the inputs of readers/
subterminals.

22 dormakaba Access Manager 92 00 K7 exos Client / Preliminary 04047404 - 06//2019

Technical Manual Product description

3.5.3 Registration units

Two registration units can be connected to the access manager via coaxial cable (connections
Ant. A and Ant. B).

Supported registration units

• Registration unit 90 00
• Registration unit 90 01
• Registration unit 90 03
• Registration unit 90 04
Functional characteristics
• The registration units enable contactless reading and writing of RFID media in MIFARE or
LEGIC technology (depending on the configuration).
• The registration units can be used for CardLink validation.
• The power supply to the registration units is done through the access manager.

04047404 - 06//2019 K7 exos Client / Preliminary dormakaba Access Manager 92 00 23

Product description Technical Manual

3.6 Supported RFID standards with possible media definitions

The following table indicates the RFID standards and possible media definitions supported by
the device.

The Zutrittsmanager 92 00-K7 recognises up to 8 different media definitions at the same

time.

Media definitions Supported RFID technologies

MIFARE MIFARE LEGIC advant LEGIC

DESFire Classic prime
ISO 14443A ISO 14443A ISO 14443A ISO 15693 LEGIC RF

Unique number (UID)

Safe UID

Card ID -

Kaba Group Header - -

Kaba advant ID - - -

LEGIC access™ - - -
(advant)

LEGIC access™ pool - - - -

(prime)

CardLink Data -
1.1

Actuator -
status

Media - - -
traceback

CardLink Data in- - - - -

1.0 cluding ac-
tuator
status
Additional customer-
specific media numbers

24 dormakaba Access Manager 92 00 K7 exos Client / Preliminary 04047404 - 06//2019

Technical Manual Product description

3.7 Mobile Access support

The access manager supports Mobile Access-compatible readers.
The technical manuals of the Mobile Access devices describe the following topics:

• Operation of Mobile Access devices*

• Operation of DOOR app
• Bluetooth Low Energy settings
*Mobile Access devices are normally iOS or Android mobile phones on which the DOOR app is
installed.
The DOOR app enables access via Bluetooth Low Energy or NFC.

04047404 - 06//2019 K7 exos Client / Preliminary dormakaba Access Manager 92 00 25

Product description Technical Manual

3.8 Technical data

3.8.1 Power supply

Only power supply units that fulfil the following requirements may be used for power supply:
LPS (Limited Power Source) and SELV (Safety Extra Low Voltage) in accordance with IEC/
EN/UL/CSA 60950-1 or ES1 and PS2 in accordance with IEC/EN/UL/CSA 62368-1.

• Voltage range: 10-34 V DC

• Power consumption: typically 3.6 W; max. 6.5 W

3.8.2 Data transmission

• RFID
• Mobile access: NFC

3.8.3 Interfaces
Ethernet interface
• IEEE802.3-compatible 10BASE-T/100BASE-TX auto-sensing, auto MDIX
RS-485
• For connecting remote and compact readers
• Maximum devices that can be connected to RS-485 bus: 15
• Transmission parameters: 19200 baud, 8 data bits, even parity, 1 stop bit
• Terminal resistance for bus or star wiring
• Protocol: KCP
With the help of the service tool, a firmware/LEGIC OS update can be carried out via the ac-
cess manager at the remote and compact readers.

RS-232 A and RS-232 B interfaces

• 2 serial interfaces,
e.g. for badge input/output or system-dependent functions
• Default settings: 9600 baud, 8 data bits, no parity, 1 stop bit
• Output voltage 5 VDC, max. 500 mA per interface
See also section “Connections”.

RFID
• 2 registration units (connections Ant. A and Ant. B)
• Coaxial cable, impedance 50 ohms
• Encrypted data transfer
Extension modules
• Serial connection of extension modules, see Mounting device and extension modules
[} 5.4]

26 dormakaba Access Manager 92 00 K7 exos Client / Preliminary 04047404 - 06//2019

Technical Manual Product description

3.8.4 Inputs/Outputs

Only power supply units that fulfil the following requirements may be used for power supply
of the relay inputs: LPS (Limited Power Source) and SELV (Safety Extra Low Voltage) in ac-
cordance with IEC/EN/UL/CSA 60950-1 or ES1 and PS2 in accordance with IEC/EN/UL/CSA
62368-1.

Relay outputs (internal and extension module 90 30)

• Potential-free change-over contact
• Contact loading capacity: 30 V AC/DC; max. 2 A
• LED status display
Digital inputs (internal and extension module 90 31)
• With integrated power supply and common ground to connect potential-free contacts.
• Input voltage: 5 V DC max.
• Optional line monitoring
• LED status display

3.8.5 Mechanical system

Assembly
• On top hat rail as per EN 60715 TH 35
Housing
• Black ABS with printed connection diagram
• Flammability class: HB (UL94)
Connections
• Screw/push terminals – terminal load: max. 5 A

3.8.6 Dimensions
Access Manager 92 00
• Width: 125 mm (7 horizontal pitches)
• Height: 99 mm (with plug terminals)
• Depth: 45 mm
Extension Modules 90 30/31
• Width: 70 mm (4 horizontal pitches)
• Height: 99 mm (with plug terminals)
• Depth: 45 mm

3.8.7 Environmental conditions

• Class of protection as per BS EN 60529: IP20
• Relative humidity: 5%–85%; non-condensing
• Ambient temperature:
– Operational: –0 °C to +50 °C
– Storage: –20 °C to +65 °C

04047404 - 06//2019 K7 exos Client / Preliminary dormakaba Access Manager 92 00 27

Product description Technical Manual

3.9 System structure

Ethernet

Inputs

Outputs
Access Manager

communication
AntCom

AntCom

Serial
ACU PCU
Application Controller Unit Peripheral Controller Unit
RS-232

RS-232

I/O Extensions
RS-485

ACU Application Controller Unit

Application firmware
PCU Peripheral Controller Unit
Reader firmware

28 dormakaba Access Manager 92 00 K7 exos Client / Preliminary 04047404 - 06//2019

Technical Manual Product description

3.10 Identification
The rating plate is located on the side of the device.

The identification plate contains:

• Device name
• Item number
• Serial number
• Connection data (power supply)
• CE marking
• WEEE labeling acc. to DIN EN 50419

3.11 Conformity
This product complies with the standards

EN 300330 V2.1.1

EN 301489-1 V2.2.0

EN 301489-3 V2.1.1 (Final Draft)

EN 62311:2008

EN 62368-1:2016-05

in accordance with the regulations of the EU Directive

2014/53/EU – Radio Equipment Directive (RED)

RoHS This device complies with the regulations specified in Directive 2011/65/EU of the European
Parliament and of the Council of 8 June 2011 on the restriction of the use of certain hazard-
ous substances in electrical and electronic equipment.

You can download the original declaration of conformity in PDF format at

www.dormakaba.com/conformity.

In addition, the product also complies with the following standards

UL62368-1:2014-12

CAN/CSA-22.2 No. 62368-1:2014-12

3.12 Open source information

The firmware contains packages that are subject to open source licenses.

The following information is mentioned in the dormakaba extranet for each firmware version.

• List of open source packages

– Name and version of the packages
– Name and version of the licenses
• Detailed information on individual packages
– Detailed license texts
– Information on copyright
The information is packed in a ZIP file.
File name:

Firmware ***-Licence Information.zip

04047404 - 06//2019 K7 exos Client / Preliminary dormakaba Access Manager 92 00 29

Product description Technical Manual

Disclaimer
In accordance with the conditions of the open source licenses, dormakaba points out that the
developers of packages have excluded any liability and warranty for the packages and their
properties. The details are available in the respective license conditions.

By pointing out this exclusion of liability, dormakaba exclusively fulfils the license conditions of
the packages. Legal and contractual claims against dormakaba are not affected by this ex-
clusion of liability.

30 dormakaba Access Manager 92 00 K7 exos Client / Preliminary 04047404 - 06//2019

Technical Manual Construction and function

4 Construction and function

4.1 Device layout

1 2 3 4

13

12

11 10 9 8 7 6

1 RS-232 interfaces A + B
2 RS-485 interface for connecting readers
3 Jumper for RS-485 bus connection
4 Connections for registration units
5 LED status and state displays
6 Connector strip for extension modules
7 Connection for the power supply
8 Relay outputs
9 Inputs
10 Tamper contact
11 Ethernet interface
12 Ethernet LEDs
13 Reset button

04047404 - 06//2019 K7 exos Client / Preliminary dormakaba Access Manager 92 00 31

Construction and function Technical Manual

4.2 Behaviour with two registration units

The access manager communicates alternately via the connections “Ant. A” and
“Ant. B” (toggle) with the registration units connected to it. Hence, the access manager can-
not communicate with both registration units at the same time. This results in the following
behaviour:

• During a longer read process, the respective other registration unit is blocked.
• The fields of the two connected registration units do not influence each other. Therefore,
the two registration units can be installed close to each other.
• In case of such registration units installed close to each other, it may happen that the me-
dium is read by both registration units in succession.

4.3 Behaviour of readers installed next to each other

Readers which are installed next to each other do not influence each other during the read
process.
Minimum distance between two readers: approx. 30 cm

4.4 Behaviour when several media are present in the field (anti-
collision)
Several RFID user media (prime, ISO14443A and ISO15693) can be detected in the field simul-
taneously. Only the first user medium that corresponds to the search criteria defined in the
system is considered.

32 dormakaba Access Manager 92 00 K7 exos Client / Preliminary 04047404 - 06//2019

Technical Manual Construction and function

4.5 LEDs
The device features LEDs to indicate status and state.

State
IN1
IN2
IN3
100MBit/s IN4
OUT1
Link
OUT2
OUT3

4.5.1 Ethernet LEDs

The LEDs next to the Ethernet connection signal the Ethernet port status.

Name Status Meaning

100 MBit/s Off Transmission rate = 10 MBit/s

Lights up/flashes Transmission rate = 100 MBit/s
Link Off No connection
Lights up Physical connection to the network active

4.5.2 Status display

The LEDs labelled IN/OUT signal the current statuses of the inputs and outputs.

Name Status Meaning

IN1–IN4 Off Input is not active (open)

Solid green light Input is active (closed)
Solid orange light Short circuit*
Solid red light Open circuit*
OUT1–OUT3 Off Output is not active
Solid green light Output is active (relay is energised)

* only in case of active line monitoring.

4.5.3 Device status

The device status is indicated by the LED designated as State.

The higher-level system determines the signal issued.

04047404 - 06//2019 K7 exos Client / Preliminary dormakaba Access Manager 92 00 33

Construction and function Technical Manual

4.6 Firmware
The hardware of this product is used in various dormakaba system solutions. The functions
and possible uses of the product are determined by the firmware used.

This manual describes only Access manager 92 00 – exos client.

Designation of firmware

Reader type M MIFARE

A LEGIC
N None
B MRD (Multi RFID device)
LEGIC or MIFARE
(is determined during commissioning)
Device type AM Access manager
Functional type: A E3xx or N300/T300/U300 V3
B Access manager
C Subterminal
E exos
Version number xx.xx Version
Addition 1 R Final and released version
Addition 2 A Sub-version
Addition 3 _ Reserve

Examples
Designation of the firmware for the access manager 92 00 functional type exos client:

• BAM.... (MRD)

34 dormakaba Access Manager 92 00 K7 exos Client / Preliminary 04047404 - 06//2019

Technical Manual Construction and function

4.7 Access control

4.7.1 Principle

1 Access manager
2 Host computer
3 Reader/Subterminal with badge reader, acoustic signal generator, and LEDs or display
for operator guidance
4 Door-opener key inside
5 Door frame contact
6 Door-opener, door contact

A Bookings and alarm messages

B Master data, parameters, and authorizations
C Badge data and control commands
D Signals for door opening and monitoring
E Alarm signals

04047404 - 06//2019 K7 exos Client / Preliminary dormakaba Access Manager 92 00 35

Construction and function Technical Manual

4.7.2 Components of access control

Door management
A door management system is assigned to each access. The door management system con-
trols all the functional processes.

Alarm management
The access manager reports irregularities in access control or door management to the host
computer.

A distinction is made between a technical alarm and a safety alarm.

It can be seen in the following overview when which alarm is triggered.

Event Process TA SA

Breaking into a door Door open X

Door closed again X
Tamper switch of the access man- Start X
ager and of the reader/subterminal
End X
Door open too long Time exceeded X
Door closed again X
Attack Time exceeded X
Latch actuation fault Door closed again X
Communication error Reader does not respond X
Reader responds X

TA = technical alarm
SA = safety alarm

36 dormakaba Access Manager 92 00 K7 exos Client / Preliminary 04047404 - 06//2019

Technical Manual Construction and function

4.7.3 Input function

The input function is dependent on the configuration. The following functions are possible:

Door frame contact

A door frame contact enables the access manager to determine whether the door is opened
and for how long. If the maximum permissible passage time has elapsed and the door remains
open, the access manager sends a set of alarms to the host computer. In addition, a relay can
be triggered.

Door opener key

A door opener key can be connected if no reader is installed in the internal room and the door
is not fitted with a door handle. If the door opener key is activated, the corresponding door
opener relay is triggered.

Release door opener relay permanently

The door open profile is manually overridden.
The door opener relay is permanently triggered. The access point is therefore released and
there is no checking of access authorisations.

Block
The door open profile is overridden manually.
There is no triggering of the opener relay. The access point is blocked and bookings are rejec-
ted. Door opener profiles, keys, etc. are ignored.

Deadbolt contact
The access manager is able to detect the current bolt position of the doors via the deadbolt
contact. If the bolt is not in the expected position at the end of the bolt position time, the ac-
cess manager sends a set of alarms to the host computer.

Handle contact
The access manager is able to detect the current position of the door handle using the handle
contact. If the door frame contact is activated without the door opener or the door handle
being actuated previously, the access manager sends a set of alarms to the host computer.

Passage
This input monitors whether access is actually carried out. For this purpose, a light barrier,
contact mat, etc. is connected to the input to report the passage of a person.

Sabotage
A tamper switch or tamper loop can be connected to this input. The access manager sends a
set of alarms to the host computer if the tamper switch is opened or closed.

4.7.4 Output function

The output function is dependent on the configuration. The essential functions are:

Door opener relay

A door opener can be connected to a door opener relay. The door opener relay is triggered
when the access manager approves access – for example, after an authorised booking.

Alarm relay
The alarm relay can – depending on the configuration – be triggered in the event of an alarm
(for example, if a door is forced open).

Motor bolt relay

Electrical locking elements are activated when an authorised access is triggered.

‘Access authorised’ relay

The ‘access authorised’ relay can be connected to an alarm system and is activated in the
event of an authorised door opening (access).

Safety alarm day

The relay is accessed during the day for a safety alarm, e.g. door breach, panic alarm or
tamper alarm. The relay deactivates again after a set amount of time or following a para-
metrised event.

04047404 - 06//2019 K7 exos Client / Preliminary dormakaba Access Manager 92 00 37

Construction and function Technical Manual

Time zones can be set as daytime according to requirements, e.g. Monday to Friday, from
7 a.m. until 6 p.m. Time zones that are not set as daytime are automatically defined as being
during the night.

Safety alarm night

The relay is accessed during the night for a safety alarm, e.g. door breach, panic alarm or
tamper alarm. The relay deactivates again after a set amount of time or following a para-
metrised event.

Technical alarm day

The relay is accessed during the day for a technical alarm, e.g. bolt position fault, door open
for too long, door closed again, subterminal unresponsive, subterminal responsive again. The
relay deactivates again after a set amount of time or following a parametrised event.

Technical alarm night

The relay is accessed during the night for a technical alarm, e.g. bolt position fault, door open
for too long, door closed again, reader/subterminal unresponsive, reader/subterminal re-
sponsive again. The relay deactivates again after a set amount of time or following a para-
metrised event.

38 dormakaba Access Manager 92 00 K7 exos Client / Preliminary 04047404 - 06//2019

Technical Manual Construction and function

4.7.5 Operating states

Possible operating states of the device:

• Online: The device communicates with the superior system.

• Offline: If the connection between the device and the superior system is interrupted, the
device changes to the offline mode.

4.7.5.1 Offline mode

Effects of interruption in connection:

• no room monitoring
• no persons and room balancing
• no manual image verification
• no parking management
• no CardLink update.
• no receipt of updated data from the parent system;
Reconnection
After the device is back online, the saved bookings as well as status and alarm messages are
automatically transferred to the host system.

4.7.5.2 Overview of the most important differences of the operating modes

Process Online Offline

Access manager decides if a book- X X

ing is valid
Transfer of records X X
1
Saving the records in access man- (X) (X)1
ager
Transfer of error and alarm records X -

Explanations
1 If the host computer is not reachable, the recording data is saved in the access manager.
The records are transferred as soon as the host computer is reachable.

04047404 - 06//2019 K7 exos Client / Preliminary dormakaba Access Manager 92 00 39

Construction and function Technical Manual

4.7.6 Order of permission checks

Bookings

Checking company code yes no

enabled? Company code valid?

no yes

no Customer number yes no

Master record available?
validation parametrized?

yes

yes no
Version number defined? Version number valid?

no yes

Exceptional day check no

valid?

yes

no
Weekday check valid?

yes

no
Time check valid?

yes

PIN input valid? no

(if requested)
yes

Room monitoring yes Room monitoring no

enabled? valid?
no yes

Booking valid Booking invalid

40 dormakaba Access Manager 92 00 K7 exos Client / Preliminary 04047404 - 06//2019

Technical Manual Construction and function

4.8 Opening via smartphone

For Mobile Access applications

Opening takes place on a reader connected via RS-485.

Prerequisites
• The reader has been initialized.
• The access rights were transferred to the smartphone by the parent system.
Procedure
• Start the DOOR app.

• Tap the key.

Countdown starts for time as defined in the DOOR app.

• Hold the smartphone in front of the reader.

Smartphone signalling
The smartphone shows the access authorization.

Reader signalling
The system software determines the behaviour of the reader. The reader signals the access
authorization visually and acoustically.

04047404 - 06//2019 K7 exos Client / Preliminary dormakaba Access Manager 92 00 41

Installation Technical Manual

5 Installation
5.1 Installation requirements
5.1.1 General
An accurate installation of all components is a basic requirement for a properly functioning
device. The following installation instructions must be adhered to.

5.1.2 Installation location

The product is designed for the stationary use in buildings. The product is not suitable for the
use in vehicles.

The access manager is mounted on a top hat rail in a housing or IT rack.

The access manager should be installed in a location where it is safe from tampering within
the area being secured.

The mounted height for the terminal should not be higher than 2 meters.

Electromagnetic fields
Do not install the device in the vicinity of strong electromagnetic fields caused, for example,
by switched-mode power supplies, electric power lines, phase control etc.

5.1.3 Connections
The following connections must be available at the access manager's installation location:

• Ethernet network connection for host communication

• Power supply for the access manager
• Signal lines for electric strikes and contacts
• Data lines to the readers
For start-shaped wiring an additional distributor (e.g. terminal strip) is to be provided in
order to distribute the RS-485 lines.
• Coaxial line to the detection units

The installation lines have to be flush with the surface or be laid in the vandal-proof area.

42 dormakaba Access Manager 92 00 K7 exos Client / Preliminary 04047404 - 06//2019

Technical Manual Installation

5.2 Installation layout

Access manager 92 00 with one access point, one reader and one detection unit.

1 Host computer with communication software

2 Access manager 92 00
3 Power supply unit for supplying power to the access manager and, if applicable, to the
readers
4 Reader
5 Detection unit
6 Electric strike button
7 Door frame contact

Installation cables
A Host connection, Ethernet network line
B Power supply for reader
C Data line to the reader
D Coaxial line to the detection unit
E Line to electric strike, electric strike button and door contacts

The higher-level system determines the assignment of the inputs/outputs.

The electric strike can also be activated via a relay of the reader. This is, however, only recom-
mended in secured areas.

This installation layout is to be understood as an example.

04047404 - 06//2019 K7 exos Client / Preliminary dormakaba Access Manager 92 00 43

Installation Technical Manual

5.3 Installation lines

5.3.1 Ethernet
Network cable with RJ45 plug, line requirement: CAT.5 S-UTP 4 x 2 AWG 24 oder AWG 22 (ac-
cording to EIA/TIA568) or higher quality.

5.3.2 Power supply for reader/subterminal

It is permitted to connect the reader/sub-terminal and the data line to the power supply via a
single cable over a short distance up to max. 20 m. A separate cable must be provided for the
power supply over greater distances.

Recommended cabling: 1 x 2 x 0.6 mm or 1 x 2 x AWG 24.

If long lines are used, you must take the voltage drop caused by resistance into account.

5.3.3 Data line to reader/subterminal

Connection to the readers/subterminals is performed via the subpartyline, a 2-wire RS-485 in-
terface. For this connection, you may choose a star topology or a bus topology.

No further signals or voltages may be transmitted via the data cable to the reader/subter-
minal, for example door-opener activation, door-frame contact, etc. (exception power supply
up to a line length of 20 m).

The shielding of the data line is generally connected on both sides.

The complete bus network (master lines and stubs) may be up to 1,200 m long. One stub
must not exceed 100 m.

Line requirements:

Shielded line with twisted wire pairs. Cables with wire diameter from 0.25 mm2 to 1 mm2 can
be used.

Recommended cable:

CAT.5 S/UTP 4 x 2 AWG 24 or AWG 22 (according to EIA/TIA568).

5.3.4 Line to the door opener, the door opener key, and the door contacts
Line requirements: Cable diameters from 0.5 mm to 0.8 mm.

Recommended cable: CAT.5 S-UTP 4 x 2 AWG 24 or AWG 22 (according to EIA/TIA568) or

higher.

5.3.5 Coaxial cables to registration units

Registration units are connected to the access manager via coaxial cables The coaxial cable
transfers the HF signals from the RFID antenna, keyboard data and trigger data for the op-
tical and acoustic signal generators.

Line requirements: Coaxial cable 50 ohms, type RG174/U.

Maximum cable length: 30 m

Recommended cable length: < 10 m

5.3.6 RS-232 connection

Cable type CAT.5 S-UTP 2 x 2 x AWG 24
Cable type J-Y (ST) 2 x 2 x 0.6 mm
Max. cable length 15 m

44 dormakaba Access Manager 92 00 K7 exos Client / Preliminary 04047404 - 06//2019

Technical Manual Installation

5.4 Mounting device and extension modules

Mount the devices on a 35 mm top hat rail (BS EN 60715).

Prerequisites
• The top hat rail is installed and grounded.
Click
2.

1.
Push

Procedure
1. Without tilting it, attach the device to the bottom of the DIN rail, press up and keep
pressing it.
2. At the same time, push the device up against the rail until it can be mounted on the rail.
Connect the extension modules

NOTICE
Attaching extension modules under voltage may cause damage to the devices.
Before attaching the extension modules, switch off the power supply to the device!

1. 2.

1 2 3

1 Zutrittsmanager 92 00-K7
2 Extension module 90 30
3 Extension module 90 31

1. First plug in all extension modules 90 30 carefully to the device (1) or to an extension mod-
ule 90 30 (push devices together on the top hat rail).
ð All extension modules 90 30 are plugged in.
2. Then plug in the extension modules 90 31.
ð The extension module 90 31 which is closer to the device (1) is detected asModule 1.
The next is detected as Module 2.
3. Secure the device and the extension module with 2 end clamps (safety clips) to avoid slip-
ping.

04047404 - 06//2019 K7 exos Client / Preliminary dormakaba Access Manager 92 00 45

Installation Technical Manual

Removing the extension modules

NOTICE
Removing extension modules under voltage may cause damage to the devices.
Before removing the extension modules, switch off the power supply to the device!

1.

2.

1. Push the extension module away from the neighbouring module until there is no more
contact.
2. Remove the separated extension module from the rail.

2.

1.
Push

46 dormakaba Access Manager 92 00 K7 exos Client / Preliminary 04047404 - 06//2019

Technical Manual Installation

5.5 Connections
5.5.1 Overview
The following connections are supported along with the exos client device software.

1
2 3

7 6 5 4
8

1 2 RS-232 interfaces, e.g. for badge input/output or system-dependent functions

2 RS-485 interface – connection terminal for the readers
3 Connection for the registration units
A+ = inner conductor coaxial cable, AS = shield wire coaxial cable
4 2 x connection terminals for the power supply, the two terminals are connected in parallel.
5 Connection terminals for the outputs OUT1 to OUT3
6 Connection terminals for the inputs IN1 to IN4
7 Input for the tamper switch (IN5)
8 RJ45 Ethernet connection

The parent system determines the functions of the inputs/outputs.

04047404 - 06//2019 K7 exos Client / Preliminary dormakaba Access Manager 92 00 47

Installation Technical Manual

5.5.2 Connection of the readers

Communication with the readers is transmitted via an RS-485 interface. The RS-485 interface
is operated with 2-wire technology. It can have a star-shaped design or bus design.

5.5.2.1 Connection diagram

Twisted-pair cabling is used for the lines A and B. Lines are wired one-to-one, i.e., line A of the
access manager to line A of the reader and line B of the access manager to line B of the
reader.

5.5.2.2 Shielding
Access manager page:

• Insulate the drain wire (3) with an insulating hose (2).

• Connect the drain wire (3) to terminal C. The drain wire is connected only on one side.
1 2 3 4 5

1 This device 4 Data line

2 Insulating hose 5 Additional bus devices
3 Drain wire/shielding

5.5.2.3 Setting RS-485 terminating resistors

The connection architecture determines the terminating resistors.
The position of the jumper (1) determines the terminating resistance.

Bus wiring with 1 bus

1
120 Ω 3
RS-485

2
OPEN OPEN OPEN OPEN 120Ω 3

1 Access manager
2 Reader
3 Terminating resistors

1. Set the terminating resistance to 120 ohms on the access manager.

2. Set the terminating resistance to 120 ohms on the last reader of the bus wiring.

48 dormakaba Access Manager 92 00 K7 exos Client / Preliminary 04047404 - 06//2019

Technical Manual Installation

3. Set the connection resistance to Open on all the other readers of the bus wiring.

Bus wiring with 2 buses

1
OPEN 3
RS-485 RS-485

2
120Ω OPEN OPEN OPEN OPEN OPEN 120Ω 3

1. Set the terminating resistance to 120 ohms on the two end devices (readers) of the bus
wiring.
2. Set the connection resistance to Open on all the other readers of the bus wiring.
3. Set the terminating resistance to Open on the access manager.

Star-shaped wiring

1
120 Ω
2
RS-485

3
4,7kΩ 4,7kΩ 4,7kΩ 4,7kΩ 4,7kΩ

1 Access manager
2 Distributor (e.g. terminal strip)
3 Terminating resistors of the readers

1. Set the terminating resistance on the readers to 4.7 kOhm.

2. Set the terminating resistance to 120 ohms on the access manager (1).

5.5.2.4 Line lengths

The complete bus network (master lines and stubs) may be up to 1,200 m long. One stub
must not exceed 100 m.

04047404 - 06//2019 K7 exos Client / Preliminary dormakaba Access Manager 92 00 49

Installation Technical Manual

5.5.3 Detection units

The detection units are connected to the terminals labelled Ant. A and Ant. B.

Connection identification Assignment

A+ Coaxial cable neutral conductor

AS Coaxial cable shield

50 dormakaba Access Manager 92 00 K7 exos Client / Preliminary 04047404 - 06//2019

Technical Manual Installation

5.5.4 Inputs
The Access Manager has 4 inputs IN1 to IN4. The number of available inputs can be increased
by using the extension modules 90 31. See Section.

Task of the inputs

The inputs are used to read sensors such as electric strike button, door handle switch, door
frame switch, latch bolt switch, tamper switch, pass-through control (e.g. turnstile, photo-
electric barrier,) etc.

The higher-level system determines the function of the inputs.

Concept
Inputs (IN/IN+) are connected to ground (GND/IN-) by a simple switch or a relay contact. An
open input is identified as high due to an internal pull-up resistor. Earth potential equals low.

5.5.4.1 Line monitoring

The inputs can be designed as follows:

• Without line monitoring

• With line monitoring (if supported by the higher-level system and activated in the higher-
level system)
In addition to the states active (input closed) and not active (input open), the device can de-
tect the states "short circuit" and "interruption" and signal these to the higher-level system
via line monitoring.

The current states of the inputs are signalled by LEDs [} 4.5.2].

5.5.4.2 Non-line-monitored inputs

AM 92 00
+5 V DC
680

IN - IN4

GND

Example connection to door frame contact not line-monitored

Tampering to lines between access manager and door frame contact is not detected.

5.5.4.3 Line-monitored inputs

With line monitoring activated, resistors (680 Ω, 0.25 W, 2 %) must be connected in series
and in parallel to the respective contact. The resistors must be attached in a vandal secure
manner directly to the external contact.

04047404 - 06//2019 K7 exos Client / Preliminary dormakaba Access Manager 92 00 51

Installation Technical Manual

AM 92 00
+5 V DC

680
IN - IN4
680
680

GND

Example connection to door frame contact line-monitored

Tampering to lines between access manager and door frame contact is detected.

52 dormakaba Access Manager 92 00 K7 exos Client / Preliminary 04047404 - 06//2019

Technical Manual Installation

5.5.5 Outputs
The access manager has 3 outputs OUT1 to OUT3. The number of available outputs can be in-
creased by an extension module 90 30. See Section

Function of the outputs

The outputs can, for example, be used to activate motor locks, electric strikes, turnstile drives,
a technical day/night alarm, day/night safety alarm etc.

The higher-level system determines the function of the inputs

Concept
Potential-free relay outputs, each with a switching contact.

5.5.5.1 Connecting electric strikes

Fail-secure and fail-safe electric strikes can be used.

The enclosed diode (what is known as a recovery diode) must be connected in parallel to re-
duce malfunctions in electric strikes which are powered with a direct current. In doing so, you
must ensure that the diode is connected in reverse direction. Check the pole terminals are in
the right position!

An S10K30 varistor is to be connected in parallel if the strike is powered with an AC voltage.

Diodes or varistors must be connected directly to the electric strike and must not be mounted
in the access manager.

This measure is not necessary if the electric strike features an internal varistor or diode.

5.5.5.2 Example
Activation of an alternating-current (AC) door-opener. To supply the door-opener with power,
an external 12 V AC power supply is used.

NC
12 V AC
NO

34 V DC
30 V AC
C

AM 92 00

04047404 - 06//2019 K7 exos Client / Preliminary dormakaba Access Manager 92 00 53

Installation Technical Manual

5.5.6 RS-232 A and RS-232 B interfaces

The following can be connected to the RS-232 A/B interfaces:

• Badge input and badge output

The required power supply is provided through the access manager.

Terminal Meaning

5V 5 VDC
Rx RXD (receive/in)
Tx TXD (transmit/out)
0V 0V

Further information on system-dependent functions:

• System documentations

54 dormakaba Access Manager 92 00 K7 exos Client / Preliminary 04047404 - 06//2019

Technical Manual Commissioning

6 Commissioning
6.1 Configuration
6.1.1 Determining the IP address
Configuration of the device upon dispatch:

• Database: Default data

• Communication parameter: set to DHCP
If a DHCP server is available in the network, an automatically generated IP address is as-
signed to the device.

If the IP address cannot be read at the DHCP server, use the following program: Service Tool

Prerequisites
• The computer on which the above programs are executed is in the same sub-network as
the device (in the figure in Subnet 1).

Device Scanner

MAC 1 MAC 2 MAC 3

Type A Type B Type A

Ethernet

Subnet 1 Subnet n

• The necessary ports are activated on the network. See port list below.
• The devices are installed and available.
• A Microsoft Windows computer is available.
Computer requirements:
– LAN interface
– Network setting:
- Automatically get IP address (DHCP on)
- Automatically assigned, private IP address, e.g. APIPA (Automatic Private IP Ad-
dressing) or Auto-IP
With this setting, devices are found on networks without a DHCP server.

04047404 - 06//2019 K7 exos Client / Preliminary dormakaba Access Manager 92 00 55

Commissioning Technical Manual

Port designation Port no. Explanation

DNS ○ 53 1) Host name resolution by DNS server

(TCP/UDP) (in/out)
mDNS ● 5353 1) Multicast DNS
(UDP) (in/out)
HTTP/HTTPS ○ Standard: 80/443 Web server/web server secured connec-
(TCP) Range: 1–32,767 tion
(in/out) You can use a browser to open a configur-
able booking page via the web server.
SSH/SFTP ● 22 Access manager firmware download
(TCP) (in/out)
exos trace service ○ 4502 exos trace client
(TCP) (out)
TCP ○ 45031) Status service (access manager sends in-
formation about the firmware update of
the access manager)
exos firmware trans- ○ 45041) Reader firmware download
fer (in)
(TCP)
exos status service ○ 45051) Reader firmware download/update
(TCP) (out) status
Host communication/ ● 8002 or 8443 Standard port for host communication/
host communication (in/out) host communication via TLS
TLS (TCP)

● required ○ optional

1)
The port number cannot be changed.

Displayed host name and MAC address

Comments

Name / host name MAC address.local

0007CC1B7D26.local

The user can change the host name.

MAC address See device

MAC

MAC

56 dormakaba Access Manager 92 00 K7 exos Client / Preliminary 04047404 - 06//2019

Technical Manual Commissioning

6.1.2 First-time network settings (addressing)

Detailed explanations on the first-time network settings and the service tool are provided in
the RM_AccessManager_exosClient reference manual.

See Additional documentation

During dialog installation, Kaba exos 9300 copies the service tool to the relevant directory
structure. The service tool can be run in the launcher with Kaba exos 9300 4.0.0 or higher, as
long as permissions are in place.
The service tool is available on Share Point and online on the Kaba website.

SharePoint:
https://dorma.sharepoint.com/:f:/r/sites/sp-pd/products/Shared%20Docu-
ments/210_Cluster_Controller_Reader/Current%20Products/20_Firmware/AccessManager/
Tools?csf=1&e=klvm4G

Online you can find the service tool on the Kaba website (on the search screen under docu-
ment type, select “Firmware” and enter “Service Tool” into the search).
If you have access problems, please contact Support.

All access managers are delivered with the same default network settings (factory settings).
These are as follows:

• Configuration is on DHCP; access manager searches for a DHCP server or

• Automatically assigned, private IP address, e.g. APIPA (Automatic Private IP Addressing)
or Auto-IP
With this setting, devices are found on networks without a DHCP server.
The network settings must be configured individually with the web interface before commis-
sioning according to the respective network specifications of the customer (IP address etc.)
The required information can therefore be obtained from the responsible network adminis-
trator.

The IP address can be set in the following ways:

• Using the service tool and a DHCP server in the network

• Using the service tool without a DHCP server in the network
• In the web interface of the access manager via the host address

6.1.2.1 Determining the IP address with the service tool

The IP address can be determined in the following ways with the service tool:

Variant 1
• With a DHCP server present in the network.
The access managers receive an IP address, which are listed in the access manager service
tool under Company Network mode.
Variant 2
• Without DHCP server in the network.
In Own DHCP Network mode, the DHCP server integrated into the access manager ser-
vice tool assigns the IP addresses.

04047404 - 06//2019 K7 exos Client / Preliminary dormakaba Access Manager 92 00 57

Commissioning Technical Manual

The above variants are very efficient if multiple access managers must be configured at the
same time

6.1.3 Configure/check access manager for operation

Configure the device with its known IP address via the web interface (browser) for operation
(if not statically configured yet).

Prerequisites
• The IP address of the device is known.
Procedure
1. Enter the IP address of the device in a browser.

2. Enter the default password “admin” and log in with “Login”.

ð “State” view of the web interface opens.
Configure access manager for operation
(Example)

1. Enter, note and save definite network parameters in accordance with the project specific-
ation
2. Trigger a restart – do not switch off access manager (Tasks -> Restart system)
3. Check connection to the parent system.
4. If required, run firmware update with WinSCP.

58 dormakaba Access Manager 92 00 K7 exos Client / Preliminary 04047404 - 06//2019

Technical Manual Commissioning

All tabs of the web interface are explained in detail in the RM_AccessManager9200 docu-
mentation.

To protect the access manager from unauthorised access, the default password in the host
should be changed (at least five alphanumeric characters/special characters, capitalisation
matters).

6.1.3.1 Configuring network settings for the host system

Kaba exos fills the below screen with default values.

1. Choose communication settings and configure the communication settings for the parent
system in accordance with the project specification.
2. Enter host service address (IP address)

Different ports are used for communication with and without encryption:

• Communication with encryption: TLS port

• Communication without encryption: Port

In case of a reset (see Overview of reset/factory reset [} 7.6]), the following settings remain
unchanged: IP address, subnet mask, default gateway
That is, they are not reset to factory settings. During a factory reset, these and additional
settings are reset to the factory settings.

Host Service Address

• If the field is empty: host service address (IP address) is entered automatically after
download.
• If the field is not empty: host service address (IP address) is not overwritten after down-
load.
Host service port Host TLS service port
• Port number at which the host receives • Port number at which the host receives
data data when encryption is activated
Access Manager service port Access Manager TLS service port

04047404 - 06//2019 K7 exos Client / Preliminary dormakaba Access Manager 92 00 59

Commissioning Technical Manual

• Port number at which the access man- • Port number at which the access man-
ager receives data ager receives data when encryption is ac-
tivated
Identifier Save
• Display address of the access manager in • Save changed values:
parent system; see RM_AccessMan- Restart -> System (function like Restart
ager9200 documentation button)

1. The port numbers of the parent system and the access manager are generally set to 8002
in the access manager and in the parent system. If they are changed, they must be
identical to the corresponding system values of the parent system and access manager.

Without TLS encryption:

With TLS encryption:

The configuration of the DHCP server in the network is explained in detail in the RM_Access-
Manager_exosClient documentation.

60 dormakaba Access Manager 92 00 K7 exos Client / Preliminary 04047404 - 06//2019

Technical Manual Commissioning

6.1.3.2 Encryption
The communication between the access manager and the parent system can be encrypted.

The encryption is configured in exos 9300 with the “FSServiceConfiguration” program that
creates the certificates. For details see IM_Kabaexos9300-System-and-Dialog

Prerequisites
• In the web interface, “TLS” is activated for the access manager under “Security set-
tings” (Figure A).
• The “FSServiceConfiguration” program is installed (Figure B).
• A secure environment is available for transferring the certificates and the configuration.
Variants available for selection:

• “User”: The user loads the certificate on the access manager using an input screen (Figure
C).
• “Device”: The access manager creates the certificate (Figure D).
A separate configuration screen appears for each variant.

Figure A

Figure B

04047404 - 06//2019 K7 exos Client / Preliminary dormakaba Access Manager 92 00 61

Commissioning Technical Manual

Figure C (User) Figure D (Device)

62 dormakaba Access Manager 92 00 K7 exos Client / Preliminary 04047404 - 06//2019

Technical Manual Commissioning

6.2 Preparing for commissioning

Reset device
Recommended: Reset the access manager before commissioning.

• In case of already existing network settings: Execute reset, see Carry out reset [} 7.6.1]
• In case of network settings that are not existing already: Execute factory reset, see Carry-
ing out a factory reset

Check reading behaviour without system configuration

1. Connect a reader to the access manager.
2. Present a badge.
ð If the badge can be read, after a successful reset, the badge is rejected with red flash-
ing 4 times and 4 beeps at the same time.

Requirements for the commissioning

• The access manager is installed.
• The Ethernet cable is connected.
• The readers are connected, parametrised, addressed and connected to the RS-485 bus.
• The inputs are connected.
• The relay outputs are connected.
• If available: Additional devices are connected to the RS-232 bus and put into operation.

04047404 - 06//2019 K7 exos Client / Preliminary dormakaba Access Manager 92 00 63

Commissioning Technical Manual

6.3 Configure network

1. Connect the power supply to the access manager.
ð The LED state glows green – access manager is in operation (offline).
2. Configure the network setting of the access manager.
3. Configure the network setting for the host, see Configuring network settings for the host
system.
4. Register the access manager in the host, load the parameters, persons and profiles with
the corresponding commands and execute a restart.
ð For details see section Restart (Factory Reset button) [} 7.5].
5. Check the connection of the access manager to the parent system. Under System State
(in web interface – State), Running (for the access manager) and Online (to the host)
should be displayed; see reference manual.

6.4 Parameter setting

Parametrize the access points and the respective devices (e.g. access manager, reader, etc.)
in the parent system.

6.5 Commissioning the access manager

• Ensure that the system configurations for the host system have actually been transmit-
ted to the corresponding access manager. A connection between the host and the access
manager is sufficient for this to occur.
• A customer badge should be used for a function test to ensure that the parameter set-
tings are correct.
• The required tests should be carried out in online and offline mode.

6.5.1 Basic configurations

Basic configurations such as PINENTER, CODEENTER, LEDBASESTATE, SERIALINTERFA-
CEASETTINGS, COMMUNICATIONPROTOCOL, etc. can be changed in the corresponding
table of the Kaba exos 9300. These values are described in the coordinating technical docu-
mentation.

6.5.2 Registration units (antenna A/B)

1. Connect the power supply to the access manager.
ð Signalling, see section Maintenance [} 7].
2. Book at the connected registration unit.
3. Check door process with all its components.

6.5.3 RS-485
1. Connect the power supply to the access manager.
ð The status LED lights up green – access manager in operation (offline).
ð The status LED flashes green – access manager in send or receive mode (online); see .
2. Check the function of the connected peripheral devices.

64 dormakaba Access Manager 92 00 K7 exos Client / Preliminary 04047404 - 06//2019

Technical Manual Commissioning

6.6 Access manager status display

04047404 - 06//2019 K7 exos Client / Preliminary dormakaba Access Manager 92 00 65

Commissioning Technical Manual

6.7 Issuing read/write authorization (launch)

(Only LEGIC RFID media technology)

Write/read authorisation is required in the following cases:

• If writing should take place on a write-protected segment of a medium, e.g. validate

write-protected CardLink segments for CardLink applications.
• If a read-protected segment of a medium should be read.

The term "Write authorisation" is used in this section for the terms "Write authorisation" and
"Read authorisation".

Write authorisation with a LEGIC prime SAM 63 card is only valid for LEGIC prime.

Write authorisation with a LEGIC advant SAM 63 card is valid for LEGIC prime and LEGIC
advant 15693 and 14443A.

The designation "Security card C2" is used in this section for the card designations "SAM 63"
and "Security card C2 (SC-C2)".

Signalling takes place via the reader to which the card is presented.

Prerequisite
• A Security Card C2 with the appropriate segment area is needed for write authorisation.
• ISO standard 14443A must have been activated with the Security Card C2.
• The ISO standard of the SAM 63 card must match the parametrised ISO standard.
• The device is in normal mode and is waiting for RFID input.
Procedure
1. Present the Security Card C2 to the reader without interruption (approx. 15 s).
ð The reader glows green during this process.
ð Signalling after successful write authorisation:
3x beeps

Green flickers
If write authorisation has already been granted earlier to the reader with the same
Security Card C2, this is signalled immediately via 3x beeps.

ð Signalling after unsuccessful write authorisation:

"Access not authorised"
- No reaction

Possible reasons
- The Security Card C2 was taken out of the RFID field too early.
- If no reaction: ISO 14443A is not activated in the system
- When using SAM+ media: no credits are present

2. Remove the Security Card C2 from the field.

The data of the write authorisation can be checked via the web interface (browser) of the ac-
cess manager in the tab (State) LEGIC; see RM_AccessManager92xx.

66 dormakaba Access Manager 92 00 K7 exos Client / Preliminary 04047404 - 06//2019

Technical Manual Commissioning

6.8 Withdrawing read/write authorization

Read/write authorisation must be withdrawn in the following cases:

• If no more data will be written to write-protected segments on a medium.

• If no more data will be written to read-protected segments on a medium.

In this chapter, the term ‘write authorisation’ shall be used to refer to both ‘write authorisa-
tion’ and ‘read authorisation’.

6.8.1 Withdrawing all write access issued via a write authorization

1. Return the reader to its basic state (see Maintenance).

6.8.2 Withdrawing individual write access issued via a write authorization

Delete the relevant stamp using the SAM 64 card.

Requirement
• A SAM 64 card with the relevant segment range is required in order to withdraw write au-
thorisation.
• The reader is in normal operation and is awaiting an RFID input.
Procedure
1. Present the SAM 64 card to the reader and hold it there for approx. 15 seconds.
ð The green light on the reader will flash during this procedure.
ð 3x beep: write authorisation has been withdrawn

If the write authorisation has already been withdrawn with the same SAM 64 card,
this will be signalled immediately by way of 3 beeps.

ð No signal: write authorisation has not been withdrawn.

Possible reasons
- The SAM 64 card was removed from the RFID field too soon
- ISO 14443A is not enabled in the system
- If using SAM+ media: no credits are available

2. Remove the SAM 64 card from the field.

04047404 - 06//2019 K7 exos Client / Preliminary dormakaba Access Manager 92 00 67

Commissioning Technical Manual

6.9 Initialise the device for Mobile Access

See also:
- Mobile Access system overview
- Planning guideline, Mobile Access

Initialisation depends on the readers used.

Reader Initialisation
Registration unit The access manager is initialised via a registration unit.
(Mobile Access not
supported at
present)
Compact reader Every compact reader must be initialised.
Remote reader Every remote reader must be initialised via a registration unit.

Prerequisites

General • The access control system is set up by dormakaba for Legic Connect

System software • See the chapter System requirements

• A connection has been set up to Legic connect

Reader • The reader is configured in the system software for Mobile Access and
the configuration is transmitted.
• The reader is installed and ready for operation.

Smartphone • The VCP Installer is installed and registered with the telephone num-
ber with Legic Connect.
The registration code received via SMS is entered.
• Access to the Internet is possible (WLAN or mobile data).
• The password for the VCP file is known.

Procedure
• On the smartphone:
– Start the VCP Installer.
– Ensure that the method of transmission of the smartphone and the device is identical
Select the transmission type NFC or Bluetooth.
– Select the VCP file.
If the desired VCP file is not present, select ‘Update’. Then, the smartphone down-
loads the VCP file.
– Select ‘Send’.
– Input the password for the VCP file.
– Transmission type:

NFC Bluetooth
Hold the smartphone in Keep the smartphone
front of the reader. within Bluetooth range of
the device.

If a device other than the

one desired flashes: In the
system software, match
the ‘RSSI filters’ of the
devices.

68 dormakaba Access Manager 92 00 K7 exos Client / Preliminary 04047404 - 06//2019

Technical Manual Commissioning

• Reader to which the smartphone is held:

– After successful initialisation: Three signals are sounded.
– After a failed initialisation: no signalling
– Then, the device signals the base state defined in the parent system.
• Smartphone:
– After successful initialisation: display of the serial number of the device.

04047404 - 06//2019 K7 exos Client / Preliminary dormakaba Access Manager 92 00 69

Maintenance Technical Manual

7 Maintenance
7.1 Reset key and status LED
The device includes a reset key, designated Factory Reset and a status LED, designated
State.

The reset key allows a system start with execution of the start options described below. The
status LED signals the current phase of the execution.

Factory State
Reset

7.2 Note
The RM_AccessManager_exosClient document contains detailed instructions and information
on the following topics among others:

• Web interface
• First-time network settings (addressing)
• Restart, reset, factory reset
• Firmware/LEGIC OS update
• Expanded troubleshooting, etc.

70 dormakaba Access Manager 92 00 K7 exos Client / Preliminary 04047404 - 06//2019

Technical Manual Maintenance

7.3 Firmware update/LEGIC OS update

7.3.1 Carry out updates
7.3.1.1 Firmware/LEGIC OS update on the access manager
The “Firmware/LEGIC OS update” replaces the parts of the firmware bundle that are no
longer current.
Current parts of the firmware bundle are not updated.

Content of the firmware bundle:

• ACU firmware
• LEGIC OS
• Linux
• PCU firmware
Prerequisites
• An SFTP client (e.g. WinSCP) is available.
Link to WinSCP download: https://winscp.net/eng/index.php
• The IP address of the device is known. See section Commissioning [} 6].
• The new firmware bundle with the file name “BAME04.0x.xxxRA.fw” is available.
• The date and time on the device are correct.
Procedure
• Start WinSCP.

• Select the transmission protocol “SFTP”.

• Enter the computer name.
• Select the port number.
• Enter the user name “update_user”.
• Enter the password “secret”.
• Select “Login”.
• Drag the “BAME.xx.xxxRA.fw” file in the “update” folder.

04047404 - 06//2019 K7 exos Client / Preliminary dormakaba Access Manager 92 00 71

Maintenance Technical Manual

Left: PC Right: Access manager

• After approx. 45–90 s, the Ethernet connection is interrupted by a reboot of the access
manager.
– -> The device is restarted.
– -> Signalling: “Restart”
– -> PCU is restarted.
– -> During the start, OUT3 glows red (approx. 3 s).
• The update is completed.
Signalling during firmware update

LED display

State OUT1
(PCU) (ACU)*
Start firmware update Off
Firmware update runs Yellow
Red
Possible signalling during firmware update:
PCU is not polled by the ACU Red Red
PCU is polled by the ACU Red Off
The firmware update is completed Green
The access manager has a confirmed connection to the parent Green
system flashing

* OUT1 signals the communication between ACU and PCU.

The dormakaba access manager 92 xx reference manual includes a detailed description of sig-
nalling.

72 dormakaba Access Manager 92 00 K7 exos Client / Preliminary 04047404 - 06//2019

Technical Manual Maintenance

7.3.1.2 Firmware/LEGIC OS update for the connected readers

Options for carrying out updates: See section Carry out updates

Effects of the firmware/LEGIC OS update

NOTICE
Data loss
• The device is restored to its factory settings (basic state).

• The parametrisation is deleted.

• The data are deleted.

• The stamps are deleted.

• For updates with Programmer: The write authorisation (launch data) is deleted.

NOTICE
Blocked passageways
All passageways are blocked during the firmware update and during the LEGIC OS update.
Duration of blocking: see table below

Duration of the updates

Number Duration Duration

of connected of firmware update of firmware update
readers and
LEGIC OS update
2 approx. 3 min approx. 8 min
4 approx. 3.5 min approx. 13-15 min
6 approx. 4 min approx. 18-22 min
8 approx. 5 min approx. 20-30 min

No signalling takes place on the access manager.

During a firmware update, the following is also updated, if necessary:

• LEGIC OS
• If available: Bluetooth Low Energy chip (Bootloader and Bluetooth Low Energy OS)
Procedure
See dormakaba access manager 92 xx reference manual

04047404 - 06//2019 K7 exos Client / Preliminary dormakaba Access Manager 92 00 73

Maintenance Technical Manual

7.4 Power Up
The Power Up restarts the following programs:

• Bootloader
• Linux operating system of the access manager
• ACU of the access manager
• PCU of the access manager
Effects of the Power Up

NOTICE
Blocked access points
All access points are blocked during the Power Up. Duration of blocking: approx. 2 minutes

• The saved parameter settings and data remain in place.

Duration of Power Up
The Power Up takes approx. 1 minute; after 1 more minute the system is available again.

Procedure

LED display

State OUT1
(PCU) (ACU)*
The device is in operation. Green
or
Green
flashing
Disconnect the access manager from the power supply. - -
The access point is blocked during the Power Up. -
Connect the access manager to the power supply. Yellow
The bootloader starts/runs Yellow
The Linux operating system starts/runs Red
Possible signalling during Power Up:
PCU is not polled by the ACU Red Red
PCU is polled by the ACU Red Off
The application runs Green
The access manager has a confirmed connection to the Green
parent system. flashing

* OUT1 signals the communication between ACU and PCU.

The dormakaba access manager 92 xx reference manual includes a detailed description of sig-
nalling.

74 dormakaba Access Manager 92 00 K7 exos Client / Preliminary 04047404 - 06//2019

Technical Manual Maintenance

7.5 Restart (Factory Reset button)

The restart restarts the ACU and PCU of the access manager.

Effects of a restart

NOTICE
Blocked access points
All access points are blocked during the restart. Duration of blocking: approx. 2 minutes

• The saved parameter settings and data remain in place.

Duration of the restart
The restart takes approx. 1 minute; after 1 more minute the system is available again.

Procedure

LED display

State OUT1
(PCU) (ACU)**
The device is in operation. Green
or
Green
flashing
Press Reset button for more than 1* second. Red
The access point is blocked during restart.
The restart starts ... Red

• upon releasing the Reset button or

• if the Reset button is pressed for more than 5 seconds.
Possible signalling during the restart:
PCU is not polled by the ACU Red Red
PCU is polled by the ACU Red Off
The restart is completed: the application, ACU and PCU Green
run.
The access manager has a confirmed connection to the Green
parent system. flashing

* If the Reset button is pressed for less than 1 second, the restart does not take place.

** OUT1 signals the communication between ACU and PCU.

The dormakaba access manager 92 xx reference manual includes a detailed description of sig-
nalling.

04047404 - 06//2019 K7 exos Client / Preliminary dormakaba Access Manager 92 00 75

Maintenance Technical Manual

7.6 Overview of reset/factory reset

With a reset or factory reset, some of the parameter settings and data are deleted in the ac-
cess manager or reset to their original settings.

To start a reset, the Reset button must be pressed during Power Up for at least 1 second, see
section.
To start a factory reset, the Reset button must be pressed during Power Up for 10 seconds,
see section.

Effects of the reset/factory reset

NOTICE
Blocked access points
All access points are blocked during the reset or factory reset.
Duration of blocking: approx. 2 minutes

Data loss
If, while connecting the power supply (Power Up), the Reset button is pressed until State
glows red, a reset or a factory reset takes place. A Factory Reset deletes part of the paramet-
risation and data or resets them to their original settings. See table below.

Effects of the reset

• The database is deleted.
• The network settings remain unchanged.
Effects of the factory reset
• The database is deleted.
• The network settings are deleted.
The table below shows which parameter settings and data remain unchanged and which are
reset during a reset/factory reset.

Effects

Parametrisations and data Reset Factory Reset

Write and read authorisation Remain unchanged Reset to original settings:

(launch data), only for Ac- empty
cess Manager LEGIC
MAC address Remains unchanged Remains unchanged
Hostname Remains unchanged Reset to original settings:
MAC address.local
IP address Remains unchanged Reset to original settings:
empty
Subnet mask Remains unchanged Reset to original settings:
empty
DHCP Remains unchanged Reset to original settings: en-
abled
Default gateway Remains unchanged Reset to original settings:
empty
DNS server, preferred Remains unchanged Reset to original settings:
empty
DNS server, alternate Remains unchanged Reset to original settings:
empty
Identifier Reset to original settings: Reset to original settings:
empty empty

76 dormakaba Access Manager 92 00 K7 exos Client / Preliminary 04047404 - 06//2019

Technical Manual Maintenance

Effects

Parametrisations and data Reset Factory Reset

Host Service Address Reset to original settings: Reset to original settings:

empty empty
Current firmware Remains unchanged Remains unchanged

Procedure
• Carry out reset [} 7.6.1]
• Carry out Factory Reset [} 7.6.2]

04047404 - 06//2019 K7 exos Client / Preliminary dormakaba Access Manager 92 00 77

Maintenance Technical Manual

7.6.1 Carry out reset

Effects of the reset
Section Overview of reset/factory reset [} 7.6] contains a description of the reset and its ef-
fects.

NOTICE
Blocked access points
All access points are blocked during the reset.
Duration of blocking: approx. 1 minute

Data loss
If, while connecting the power supply (Power Up), the Reset button is pressed until State
glows red (steps 4/5), a factory reset takes place. A Factory Reset deletes part of the para-
metrisation and data or resets them to their original settings. For details see table in section.

• The network settings remain unchanged.

Duration of the reset
Approx. 1 minute

Procedure

LED display

State OUT1
(PCU) (ACU)*
The device is in operation. Green
or
Green
flashing
Note down the current network settings (Web Interface –
Configuration Display -> Network Settings).
Disconnect the access manager from the power supply. - -
The access point is blocked during reset. - -
Connect the access manager to the power supply. Yellow
When State glows yellow, press the Reset button and keep Red Red
it pressed for a minimum of 1 second and a maximum of
9 seconds.
If State is again yellow: Release the Reset button. Yellow
Upon releasing the Reset button: Red
Reset is carried out. Red Red

• Reset goes on for a couple of seconds.

• Some of the parametrisation and data have been de-
leted and/or reset to their original settings.
• The network settings remain unchanged.
The access manager restarts:
The bootloader starts/runs Yellow
The Linux operating system starts/runs Red
After successful start, State glows green Green

Identifier and host service address have been reset.

Initialise the access manager.
Load the current parameters, persons and profiles from
the parent system to the access manager.

78 dormakaba Access Manager 92 00 K7 exos Client / Preliminary 04047404 - 06//2019

Technical Manual Maintenance

LED display

State OUT1
(PCU) (ACU)*
Carry out a boot/restart in the parent system.

* OUT1 signals the communication between ACU and PCU.

The dormakaba access manager 92 xx reference manual includes a detailed description of sig-
nalling.

04047404 - 06//2019 K7 exos Client / Preliminary dormakaba Access Manager 92 00 79

Maintenance Technical Manual

7.6.2 Carry out Factory Reset

Effects of the factory reset
Section Overview of reset/factory reset [} 7.6] contains a general description of the factory
reset and its effects.

NOTICE
Blocked access points
All access points are blocked during the factory reset.
Duration of blocking: approx. 2 minutes

Data loss
A Factory Reset deletes part of the parametrisation and data or resets them to their original
settings. For details see table in section.
The network settings are deleted.

Duration of the Factory Reset

Approx. 1 minute

Procedure

LED display

State OUT1
(PCU) (ACU)*
The device is in operation. Green
or
Green
flashing
Note down the current network settings (Web Interface –
Configuration Display -> Network Settings).
Disconnect the access manager from the power supply. - -
The passageway is blocked during the factory reset. - -
Connect the access manager to the power supply. Yellow
If State glows yellow, press the Reset button and keep it Red then Red
pressed for a minimum of 10 seconds. Yellow
If State flashes red: Release the Reset button. Red Red
flashing
Upon releasing the Reset button: Red Red
flashing
The Factory Reset is carried out. Red flash- Red
ing
• The factory reset goes on for a couple of seconds.
• Some of the network settings, the parametrisation
and data have been deleted and/or reset to their ori-
ginal settings.
The access manager restarts:
The bootloader starts/runs Yellow
The Linux operating system starts/runs Red
After successful start, State glows green Green

Identifier and host service address have been reset.

Configure the network settings.
Initialise the access manager.
Load the current parameters, persons and profiles from
the parent system to the access manager.

80 dormakaba Access Manager 92 00 K7 exos Client / Preliminary 04047404 - 06//2019

Technical Manual Maintenance

LED display

State OUT1
(PCU) (ACU)*
Carry out a boot/restart in the parent system.

* OUT1 signals the communication between ACU and PCU.

04047404 - 06//2019 K7 exos Client / Preliminary dormakaba Access Manager 92 00 81

Maintenance Technical Manual

7.7 Host system commands sent to the access manager

Download commands may differ depending on the host system. Consult the corresponding
system documentation and/or online help.

82 dormakaba Access Manager 92 00 K7 exos Client / Preliminary 04047404 - 06//2019

Technical Manual Troubleshooting

8 Troubleshooting
8.1 LED indicators

LED desig- LED signalling Meaning Measures

nation
State • Red or • After switching on Replace access manager
during the boot phase
• Yellow
(no longer than
5 minutes)
• Access manager de-
fective (glows longer
than 5 minutes)
Ethernet • Off • Network inactive, no • Check network cable
(“Link”) data transfer
• Check network configura-
tion
IN1–IN4 • Orange per- • Short circuit interrup- • Check lines
manent tion
• Check line monitoring
• Red per-
• Check resistors
manent
OUT1 • Red • PCU is not polled by Do not carry out a restart dur-
the ACU ing the following situations:
Power Up/restart/reset/fact-
ory reset or firmware update.
All other cases:

• Carry out restart, see 7.5

OUT2 • Red • PCU firmware update • No measures, wait
runs
OUT3 • Red • LEGIC OS update • No measures, wait
runs

04047404 - 06//2019 K7 exos Client / Preliminary dormakaba Access Manager 92 00 83

Troubleshooting Technical Manual

8.2 During installation

Fault Possible cause Measures

Higher-level system Communication between access Check communication via the

does not recognise manager and higher-level system LED Ethernet (Link) and adjust it
the access manager faulty
Check and adjust settings of ex-
ternal network components
(Firewall, Router, etc.)
The address of the access man- Check the address setting in the
ager is incorrect higher-level system
Interruption Check/repair cables and connec-
tions
Access manager is Interruption Check/repair connection to the
not reading or is in- readers
correct
Wrong customer medium used Check whether the right cus-
tomer medium was used during
commissioning
Medium does not match defini- Check whether the medium
tion in the system present and its definitions are
correctly parametrised in the sys-
tem
Multiple devices connected to the Assign a unique address to each
RS485 bus have the same ad- of the devices connected to the
dress RS-485 bus

84 dormakaba Access Manager 92 00 K7 exos Client / Preliminary 04047404 - 06//2019

Technical Manual Troubleshooting

8.3 During operation

Error Possible cause Measures

Host system some- Site changed by user Adjust site

times does not de-
New sources of interference (e.g. Reduce the influence of the
tect the access
new or replaced hubs, cash ma- sources of interference (increase
manager, or not at
chines or other security systems) distance, shielding)
all
Cabling changed Adjust the cabling
Configuration of the access point Adjust and reload configuration
has been changed in the host sys- of the access point in the host
tem system. Then run a reboot.
Host system some- Several devices connected to the Assign a unique address to every
times does not de- RS-485 bus have the same ad- device connected to the RS-485
tect the readers, or dress bus
not at all
Access manager is Site changed by user Adjust site
not reading data
New sources of interference (e.g. Reduce the influence of the
correctly
new or replaced hubs, cash ma- sources of interference (increase
chines or other security systems) distance, shielding)
Cabling changed Adjust the cabling
Medium used incorrectly Inform users about how to cor-
rectly use the medium and the
reader unit
RF standard not set correctly
Structure of the medium or its Adjust structure of the medium
structure in the system is not or its structure in the system
correct
The timeline for ac- Configuration of the access point Adjust and reload configuration
cess point control is has been changed in the host sys- of the access point in the host
incorrect tem system. Then run a reboot.
Access manager memory deleted Adjust and reload the times in
by factory reset and host system the host system.
data has not been written to the
Check whether the control unit
access manager yet
data has been loaded onto the
access manager after a factory
reset.
Check whether the desired times
have been defined in the host
system.
Cabling changed Adjust the cabling
Access manager not Access manager has no write au- Issue write authorisation
writing to media thorisation
CardLink settings in the parent Adjust the configuration of the
control unit are incorrect parent control unit

04047404 - 06//2019 K7 exos Client / Preliminary dormakaba Access Manager 92 00 85

Dismantling/disposal Technical Manual

9 Dismantling/disposal
9.1 Decommissioning
For taking the device out of operation in an access control system, the following steps have to
be performed:

1. In the parent system, set the device to inactive or delete.

2. Disconnect the device from the power supply.
3. Disconnect Ethernet to parent system.
4. Disconnect RS-485 connection to the parent system.
5. Disconnect RS-232 connection to the device.

9.2 Dismantling
ü The device was de-commissioned.
1. If present, unplug extension module
2. Disconnect relay outputs from the device
3. Disconnect inputs from the device
4. Disconnect RS-232 interface/keyboards, biometrics or system-dependent functions from
the device
5. Disconnect detection units and readers from the device
6. Disconnect device from the top hat rail

2 Click

Push
1

9.3 Disposal
This product compliance with the WEEE Directive and is labelled with the "crossed-out
wheelie bin" WEEE symbol as German Industrial Standards (DIN) EN 50419.

The symbol indicates that electrical and electronic devices must be returned separately in EU
member states.

You must not dispose of the device in the household waste as per the European WEEE Direct-
ive.

The device's integral components must be separated before they are taken for recycling or
disposal. Old and used devices contain valuable recyclable materials which must be recycled.
Toxic and hazardous components may cause long-term damage to the environment if you dis-
pose of them incorrectly.

Legislation (such as the Electrical and Electronic Equipment Act [ElektroG] in Germany) dic-
tates that facility operators are obliged to return electrical and electronic devices to their
manufacturer, point of purchase or designated public collection points at the end of their life
cycle.

86 dormakaba Access Manager 92 00 K7 exos Client / Preliminary 04047404 - 06//2019

Technical Manual Dismantling/disposal

Disposal in Germany:
dormakaba EAD GmbH will take responsibility for correct disposal of supplied goods once
they are no longer in use as per statutory regulations (ElektroG in Germany). The owner of
the used electrical appliance bears any costs incurred for transport to the manufacturer's
plant.

Disposal in Switzerland:
the device is to be returned to an electrical appliance return point as per Regulation on Re-
turning, Taking Back and Disposing of Electrical and Electronic Equipment (VREG).

In the EU, electrical appliances should be taken for disposal in accordance with the country's
respective disposal and environmental guidelines.

The owner/operator is responsible for deleting their personal data.

Dispose of packaging in an environmentally responsible fashion.

The packaging materials are recyclable. Do not dispose of packaging in the household waste;
take it to a recycling point instead.

04047404 - 06//2019 K7 exos Client / Preliminary dormakaba Access Manager 92 00 87

Packaging/return Technical Manual

10 Packaging/return
Improperly packed assembly groups and devices may produce extra costs due to damage dur-
ing transport.

Please observe the following instructions when sending dormakaba products.

dormakaba is not liable for damage to products which is due to inadequate packaging.

10.1 Complete devices

The original packaging is specially made for the device. It provides optimum protection
against transport damage.

Always use the original packaging to return the device!

If this is not possible, you must provide packaging which will prevent any damage to the
device.

• Use a sturdy, thick-walled transport case or a box. The transport case should be large
enough to allow 8–10 cm clearance between the unit and container wall.
• Wrap device in a suitable foil or place in a bag.
• Pad heavily around the device with foam padding or air bags, for example. The device
must not be able to move around within the packaging.
• Use dust-free, environmentally friendly fill material.

10.2 Electronic component assemblies

ESD-sensitive electronic component assemblies such as PCBs and readers should be stored,
transported and shipped in suitable anti-static packaging. Electronic component assemblies
must be packed at ESD-protected workstations. This should be carried out by persons who
are familiar with and comply with general ESD protection regulations.

Electronic component assemblies must be returned in packaging with sufficient ESD protec-
tion to

• make warranty claims in the event of malfunctions of any type.

• Delivery of replacements for electronic PCBs and components in replacement procedure.
Electronic components shipped in packaging without adequate ESD protection will not be
analysed or repaired to maintain a high quality standard; they will be taken directly to dis-
posal instead.

88 dormakaba Access Manager 92 00 K7 exos Client / Preliminary 04047404 - 06//2019

Technical Manual Packaging/return

10.3 Labelling
Including all returns paperwork and labelling the package correctly enables us to process your
case quickly. Please ensure that a delivery note is enclosed in each package. The delivery note
should contain the following information:

• Number of devices or components in each package.

• Article numbers, serial numbers, designations, order number.
• Address of your company/contact person.
• Reason for return, e.g. repair exchange.
• Accurate description of fault.
Returns from countries outside the EU also require a customs invoice with an accurate cus-
toms value and customs tariff number.

04047404 - 06//2019 K7 exos Client / Preliminary dormakaba Access Manager 92 00 89

Appendix Technical Manual

11 Appendix
11.1 Access manager configuration
Customer/location:

Commissioning by

Name/company: Date:

TCP/IP settings

MAC address: IP address:

Host IP: Gateway IP:
Net mask: UDP port:

Reader

Location Address Inputs Outputs Note

Save directory + sop.ini

Carried out: Date:

Back-up retained at: Tel.:

90 dormakaba Access Manager 92 00 K7 exos Client / Preliminary 04047404 - 06//2019

Technical Manual Index

Index
Ethernet LEDs 33
Icons
exos client 22
‘Access authorised’ relay 37
Extension modules 20

A F
Access manager 18
Flammability class 27
Alarm management 36
Alarm relay 37
H
Ambient temperature 27
Handle contact 37
Housing 27
B
Basic safety instructions 14
I
Bluetooth 18
Bus termination 48 I/O extension modules 20
Identification plate 29
Input function 37
C
Inputs 27, 47, 51
CE Conformity 29
Installation layout 43
Class of protection 27
Installation lines 44
Coaxial cable 44
iOS 19
Conformity 29
Connections 47
L
Labeling 29
D
LED display 83
Deadbolt contact 37
LEDs 33
Detection unit 43
Legic Connect 18, 68
Device layout 31
Line lengths 49
Device status 33
Line monitoring 51
Digital inputs 27
Dimensions 27
M
DIN rail power supply units 21
Disposal 86 Master line 49

DOOR 19 Mobile Access 18

Door frame contact 37, 43 Motor bolt relay 37

Door management 36
Door opener key 37 N
Door opener relay 37 Network cable 44
NFC 18
E
Electric strike 53 O
Electric strike button 43 Offline operating state 39
Electromagnetic fields 42 Online operating state 39
Environmental conditions 27 Operating states 39
ESD prevention measures 15 Output function 37
Ethernet connection 47 Outputs 27, 47, 53
Ethernet interface 26

04047404 - 06//2019 K7 exos Client / Preliminary dormakaba Access Manager 92 00 91

Index Technical Manual

P W
Packaging 88 Waste electrical and electronic equipment legislation
Passage 37 86

Power consumption: 26 WEEE Directive 86

Power supply 21, 26

R
Radio Equipment Directive 29
Rating plate 29
Registration units 23
Relative humidity 27
Relay outputs 27, 47, 53
Reset button 31
Reset key 70
Return 88
RJ45 Ethernet connection 47
RoHS 29
RS-232 interface 26, 31, 47
RS-485 26
RS-485 interface 31, 47

S
Sabotage 37
Safety alarm day 37
Safety alarm night 38
Safety Instructions 14
Smartphone 19, 68
Star-shaped wiring 49
Status LED 33, 70
Stub line 49
System software 18, 68

T
Tamper contact 31
Tamper switch 47
Technical alarm day 38
Technical alarm night 38
Terminal load 27
Terminals 47
Terminating resistance 48

V
VCP file 68
VCP Installer 19
VCP Installer App 68

92 dormakaba Access Manager 92 00 K7 exos Client / Preliminary 04047404 - 06//2019