Welcome to the WS4 Integrated Help
Before you start the configuration of your WS4, we suggest you to browse the items below to find out the characteristics and functioning of the system.
Introduction
The WS4 is a simple and powerful access control system with its own web server. There is no software to install, configuration
is done simply via an internet browser. All pages are
responsive
, which means that you can use your tablet or Smartphone,
the pages automatically adapt and use is very user friendly.
System Limits
- 20 doors.
- 10 WS4 (1 master + 9 slaves).
- 2500 users.
- 50 weekly schedules.
- 250 users categories.
- 50.000 events.
The buttons on the title bar
To return to the previous page. If you have made changes to the page, you will be asked
if you want to save them.
To save your changes and refresh the page.
To create a new item (a user, a category, a schedule, etc.).
To permanently delete the displayed or selected item.
To duplicate an element, ie create a new element with exactly the same characteristics.
To access the options.
The buttons below will appear only on tablets and smartphones:
Displays the menu to access the various pages of the WS4.
Quickly returns to the home page.
Rights of operators
You can configure up to 10 operators in your WS4. For each operator, you must choose his role: Full Control, Hardware Installation,
Access Control Management, or System Monitoring.
When an operator logs on, the WS4 analyzes his rights and will only display pages that can be viewed and the functions it can perform.
For example, the installer will be able to configure the system's doors but will not be able to see the users.
Refer to the operators chapter for more information.
Integrated Help:
To directly access the help that corresponds to the menu in which you are, simply click on the icon
. The rest of this document explains in detail each screen of your WS4...
Master / Slave principle
Since version 2.00, the WS4 system can manage up to 10 WS4 boards in the same installation (with up to 20 doors, whether single or double).
One card must be
master
, the others must be
slaves
. The master / slave selection is made with
Dip-switch 2 of the board:
Off for a master (factory setting),
On for a Slave.
The master and slaves must be connected to the same local network (intranet). The master can either be in the
Autonomous
mode or
Lan
mode,
but the slaves must be in
Lan
mode (DIP switch 1 to OFF - except during the configuration phase, see below).
Example of configuration:
All the configuration is done on the master of the installation, so it is always on this one that you must connect with your browser.
When there are slaves, the entire configuration is transferred as a background task to each of them, because each slave works in a completely autonomous way for
access management. Only events and alarms are sent in real time to the master. With this principle, a slave can become master in case of necessity, simply by
changing his Dip-switch 2.
Important restrictions:
- Slaves do not manage the Anti-passback. Access requiring the Anti-passback mode must be managed by the master.
- Each WS4 card manages its own interlock. It is not possible to do an interlock with doors managed by different WS4 cards.
- It is not possible to configure the auxiliary inputs and outputs of the slaves.
- Each slave keeps its own events in memory, but holds 5 times less than the master (see System
Options).
Add a slave in the installation
Note: It is advisable to perfrom a complete re-initialization of the card before following one of the procedures below (see explanation of the
Dip-switches).
a. Add a slave in DHCP mode
- The slave must be switched on, its Dip-switch 1 must be set to OFF (Lan) and Dip-switch 2 to ON (Slave). It must be connected to the same local network
as the master.
- Log on to the master. Change the default password if it is not already done (required to add a slave).
- Go to the
Doors
menu, click Add a slave and follow the instructions on the screen.
b. Adding a slave requiring a fixed IP address
- Set dip-switch 1 of the slave to ON (Autonomous) and dip-switch 2 to ON (Slave).
- Connect a network cable directly on a laptop.
- Enter the address http://192.168.50.100 in a browser and log on to the slave.
- In the
Network
menu, configure the fixed IP address and other TCP/IP settings, and then save.
- Switch Dip-switch 1 to OFF (Lan), disconnect the network cable from the laptop and put it on the local network.
- Follow the instructions from point 2 of DHCP mode above.
Be careful, if one of the slaves is not in the same subnet as the master, the master must have a fixed IP address, since the
slave will not be able to search for it in its subnet.
Home page
The home page lets you know the status of the system and run some important actions,
such as unlock access, stop the current alarm or put the installation into maintenance.
Notifications:
The WS4 displays this notification icon when it wants to draw your attention to an important point.
The icon appears on the left side of the top banner, and an orange box indicates the number of notifications.
By clicking on it, the WS4 displays the various messages in detail.
Alarm
icon:
This icon allows you to see if there is an alarm cycle in progress, or if alarms have occurred since the last reset.
When an alarm is in progress, you can click the icon to stop it. It is also by clicking on this icon that you can reset the alarm memory,
put the system into maintenance or view the history.
Indications under the icon:
- No new alarm: There has been no new alarm since the last memory reset.
- ALARM IN PROGRESS: An alarm cycle is in progress. The corresponding relay is switched on (if it
has been configured in the system options).
- Alarms: #: The system shows you how many alarms that have occured since the last reset. If
the
Alarm Memory
function has been assigned to one of the auxiliary relays, this relay is switched on (for connecting a flash
to indicate that an alarm has occurred).
- In maintenance : The installation is in maintenance: the system will not generate alarm and will
not send email.
Menu that appears by clicking on the icon:
- STOP current alarm: Stops the current alarm before the end of the cycle and thus, for example, turn off the siren.
- Reset alarm memory: When you have read the different alarms that have occurred, it is advisable to clear the alarm memory.
Indeed, over a period of 2 hours, the system can not generate more than 3 to 9 alarms (depends on what is configured in the
system options). When this number is reached, the alarm relay will not be activated anymore !
- Set maintenance for: You can put the installation into maintenance for a certain period of time, for example before starting a
technical intervention. During maintenance, alarms are not generated, and emails are not sent.
- Alarm events...: Opens the page with the events history, but only those affected by the alarms.
Supply
icon:
This area shows you the power status of the system. If your installation has more than one WS4, the most unfavorable state is displayed.
By clicking on it, you will be directly redirected to the
Technical Supervision window, which makes it possible
to see the module(s) actually failing.
Indications under the icon:
- Supply OK: All WS4 are connected to the mains, and their batteries are charging.
All Power LED's (on the board) are green.
- MAINS FAILURE: At least one of the WS4 is no longer connected to the mains and therefore
operates on battery power. Its Power LED is orange.
- BATTERY LOW: At least one of the WS4 is no longer connected to the mains and operates on battery
power, and this is almost flat (voltage less than 11,5V). Its Power LED is red.
- VOLTAGE TOO HIGH: The mains is present, but the supply voltage is too high (greater than 14.5V),
at least on one of the WS4. Its Power LED blinks red. The setting of the power supply must be changed,
otherwise the battery will be damaged.
Date and time
icon:
This icon displays the time of your WS4. If the difference in time from your Internet browser exceeds 10 seconds, this difference will be
displayed with a
orange frame. If the deviation is more than 1 minute, the frame will be
red.
If you have sufficient rights, clicking on the icon will take you to the
Date and time screen where you can
synchronize your WS4. But make sure your browser is on time before doing so. The slaves are automatically synchronized with the master.
Events
icon:
This icon allows you to see
all the events of the installation. If you want to see only the events of a particular item, click the icon
which corresponds to the desired element in the different pages of the WS4.
To view the latest events in real time in a separate window, press the
Shift key and click this icon.
Door icons:
Each door of your installation is represented by an icon on the home page. The icon represents the real-time status of the access, and the text
below provides additional information (refreshing about every 2 seconds). If a door is in alarm, a red frame includes the text and icon, and the
LED on the door reader(s)
is flashing red.
In the properties of the door, you can choose the type of obstacle physically installed, so that the icon best represents the actual configuration.
The different types of obstacle are: door , barrier ,
garage , bollard , tripod
and turnstile .
Here are, by way of example, the different possible icons for a door:
The door is closed and the lock is locked.
The lock is unlocked (following an authorized access or a free access period for example), but the door is not yet opened.
The door is open. In order for the WS4 to detect the opening of the door, the
door contact must of course be connected and configured.
Forbidden period. All accesses will be denied except for those users belonging to a category whose option
Allowed during forbidden periods
is checked.
Note: For the accesses configured to manage an elevator, the door icon is replaced with this icon.
List of possible states (indications under the icon):
- Normal: The door is closed and the lock is locked. No alarm.
- OFF-LINE: This door is on a WS4 slave and this slave is no longer in communication with the WS4 master.
- BREAK-IN: The door is in alarm because it has been opened without permission.
- Pre-alarm: If the door remains open for too long and a pre-alarm time is configured in the door properties, the buzzer
of the readers will operate during this time to allow to close the door before the alarm is triggered.
- TOO LONG OPENED: The door is in alarm because it has been open longer than the maximum opening time.
- Reader off-line: The door is in alarm because one of the readers is off-line.
- SL12OUT offline: The access is in alarm because one of the modules for managing the elevator is not online.
- Reader TAMPER: The door is in alarm because the self-protecting contact of one of the door reader is open (available according to
the reader model). This alarm can be activated in the System Options window.
- Door contact TAMPER: The door is in alarm because the door contact - 4 states type - is short-circuited or disconnected.
- Interlocked: The door is part of an interlock and it is locked because one of the other doors of the interlock is open or unlocked.
- Emergency: The door is unlocked because the system is in
Emergency
mode (the corresponding input is active).
- Unlocked: The door was unlocked by an operator.
- Forbidden period: Period Forbidden (configured in the properties of the door). All accesses will be denied except for those users
belonging to a category whose option
Allowed during Forbidden periods
is checked. The LED of the door reader(s) is
fixed red.
- Free period: Free access period (configured in the properties of the door), the lock is unlocked. The LED on the door reader(s)
blinks green.
- Lock ON: Door in
Toggle mode
and lock free, access is therefore free.
Menu that appears by clicking on the icon (depends on the rights):
- Allow the access: Allows to generate an opening cycle, ie to give access to a person, for example following a doorphone call.
- Unlock for: Allows to unlock the door for a certain time to choose from the drop-down menu. Useful in case of delivery,
moving etc.
- Relock: Allows you to re-lock the access before the time has elapsed. Also used to cancel the current free access period.
- Events of this access: To view all events related to this access only.
Number of users present and option Everybody NEUTRAL
:
If your system has
Input / Output
doors (
see door properties), this zone allow you to see the number of
users currently present. In order for this counter to reflect the reality, it is of course necessary for each user to identify himself at the
input
AND at the output. If it does not correspond to the reality, you can put
Everybody NEUTRAL
. This function can be
configured so that it takes place automatically every day at a fixed time.
Note: Via the list of users, you can change the status of one person.
Log out:
For security reasons, when you have finished your work, consider logging out. If you do not, your session will remain active for
30 minutes after your
last action. During this time another person who accesses your system without your permission, will be able to use it fraudulently.
Choice of language:
The WS4 recognizes the language of your browser to display the pages. However, you can change the language by clicking on the flag in the
upper right corner.
Slave home page
In the WS4 system, all configuration is done on the master. It is therefore not necessary to connect to the slave. However, it may be
interesting to connect to the slave when installing the installation, or in case of a problem.
Caution: If the slave is not yet associated with an installation, you must use the default login and password (see Quick Start Guide)
to access this page. But when it is associated with an installation, the master sends it a full copy of the database, and the slave then
accepts only the logins configured on the master.
Description of the elements of the page
In the orange banner, the serial number of the slave is indicated on the first line, and the number of the master with which it is associated is indicated on the second.
The 4 icons below show the real-time status of the board. The first one indicates whether the master is on-line or off-line, the 3 others are
identical to those of the home page of the master. Attention, by clicking on Events
, you will see only the events
of this slave, not those of the master or other slaves of the installation!
Installers and administrators have access to 3 other icons:
Network
, to choose between DHCP or fixed IP address mode,
Upgrade
(only for special upgrades, the upgrade of the firmware is done automatically by the master) and
System log
.
Via the menu on the left, the Technical Supervision
option allows to control all the inputs and outputs of the card.
List of users
This list represents all the users recognized by the system in the form of a table.
You can sort the table by clicking on the header of the column of your choice (▼ indicates the sorted column).
By default, the table has only 3 columns (but you can choose which columns to display by clicking ):
- An icon symbolizing the presence ( = neutral,
= outside, = inside).
You can click on this icon to modify the user's status, for example, to reset it to neutral if he forgot to clock out.
- The name of the user. By clicking on it, you open his user form.
- If the name is grayed: the user does not have a card or PIN code. He will not be able to identify himself.
- If the name is in red strikethrough: the user has no category or is disabled.
All access will be denied.
- If the name is in red : the validity of the user is expired. All access will be denied.
- The icon . By clicking on it, you will be able to visualize all the events concerning this user.
The
edit box allows you to filter the list to quickly find a person. Type the first characters of the
item you want to search for and the system instantly filters the list. Please note that the search is only carried out on the columns that are displayed,
and only on the fields
Name
,
Card 1
,
Card 2
and the 5 free fields.
Via the buttons in the title bar, you can:
Access the
user options (depends on the rights of the operator).
Create a new user.
Switch to
Multiple selection
mode. It may be interesting to
program several users at a time, for example to configure the access category. To select multiple users, click on this icon and then click
on each user you want to select (you can also hold the
Shift
key to select all users between 2 clicks). Then you can either
Edit
the selected users or
delete them by clicking on the trash.
Refresh:
This link allows you to refresh the list to see the presence of users, or see changes made by other operators on other
workstations.
Enroll a batch of cards:
Click this link to
Enroll a batch of cards on the fly
.
Create secure cards:
Click this link to
create secure DESFire cards(2) using one of the readers of the
installation. This link is only displayed if the security options have been set in the
configuration of the readers.
Export users
You can export the list of users to a CSV file.
Simply click the icon to download the file to your computer or tablet.
The location where the file is saved depends on the Internet browser you are using.
Note: You can choose the field delimiter in the system options.
Enroll a batch of cards
You can enroll the new cards on any reader of the installation
There are 2 methods for encoding. In both cases, you can choose to encode the user's card 1 or the card 2.
- Creating new users: With each new card, the system creates a new user. The name of the user will be composed of an incremental number + the code of
the card, all in brackets, for example [001 - 6584501298]. You can also choose the category that will be assigned to the users created.
After the encoding, all new users will be in order at the beginning of the list of users, if it is sorted on the column Name
.
- Modify existing users: Each new card will be assigned to an existing user. To do this, you must define from which user the system must begin
the encoding. So, before you start, display the
ID
column in the list of users and sort on that column.
Attention, if the user already had a card, it will be replaced by the new one.
During encoding, the system indicates the ID, the name and the card number that have just been encoded. When all cards are encoded, click
OK,
return to the list
.
Import users
Import users - step 1
To facilitate encoding, you have the option of importing users from a text file, type CSV.
Start with
select the file containing the list of users you want to import.
To be supported by the WS4, this file must either use the
Unicode (UTF8)
character set or the
Western Europe (Latin1, ISO8859-1)
.
Normally, you can leave the
file encoding option on
Automatic detection
.
You must then choose from the drop-down list the
Column delimiter that is used in the file. You can choose between tab,
comma or semicolon.
To complete this first step, you must specify whether the first line of the file contains the column names. If the
Column header option
is checked, the WS4 will not import the first line.
By clicking on the
Next button, the file is sent to the WS4 to analyze it. If the content of the file is correct and matches what
you selected, you will then proceed to step 2 below. Otherwise, an error message will be displayed.
Import users - step 2
The WS4 has scanned the file and tells you how many records it contains. Attention, all records will be imported, it is not possible to
make a selection at this stage (if necessary, you must make the selection in the original file).
You must now choose which columns you want to import.
For each column of the file (left), select the corresponding field of the user
profile of the WS4 (right drop-down menu). If the first line of the file contains the name of the columns, this name is displayed and the
selection of the fields to be imported is easy to do, but if it is not, the column number is displayed. Be careful to assign the right one!
You do not need to import all the columns in the file, the only field that is required is the user name.
The last option,
Import method, changes assistant's behavior:
- If you choose
Add to existing users
, new users will be added to existing ones in your installation.
You must ensure that you do not import duplicates.
- If you choose
Replace all current users
, there is no risk of duplicates, but all users will be deleted before importing!
When all of your choices are made, click the
Import
button to start the import. If successful, a summary window shows you the
number of users imported.
User form
This form includes all the information about a user: personal data, categories of access and identifiers (card / PIN code).
General
section
Full name / Name & First name:
You can choose in the
user options if you want a single field to enter the full name of the user, or if
you prefer 2 separate fields (last name and first name). The
full name and
name fields are on max. 50 characters
(1).
The
first name field is on max. 40 characters
(1).
The name will be used in the list of users and in the events.
Free fields:
If free fields have been configured in the
user options, they will be displayed in this section.
You can have up to 5 free fields, max. 40 characters each
(1). These free fields can be displayed in the list
of users, which then allows to sort the list on this basis.
Note: If you have configured the user name and first name to be in separate fields, you will only have 4 free fields.
Disabled
option:
This option allows you to disabled the user without deleting it from the system. The name of the user appears in red strikethrough in the list
of users, because it no longer has access to the system doors. If it uses one of his identifiers, the event
User disabled
is generated.
This user can acknowledge alarms
option:
When this option is checked, the user can acknowledge the current alarm simply by identifying (with his card or his PIN) on any reader of the
installation, even on those where he normally does not have access.
Validity:
You have 2 possibilities to define the validity of the user:
- By checking the
Always valid
option, the validity of the user will not be limited in time.
- By choosing the dates and times of beginning and end, the validity of the user will be limited to specified values.
Categories
section
A category is used to define at what times and which doors a group of people are allowed.
Categories 1, 2 and 3:
You can assign up to 3 categories for each user. Attention, for a user to be active, he needs at least 1 category.
For more information about categories, see
Categories section.
Identifiers
section
An identifier must make it possible to identify the user in a unique way. In the case of the WS4,
it is either a card, a fingerprint or a PIN code.
Card 1 & 2:
You can encode up to 2 cards per user. The card must be
unique and can include
1 to
20 characters.
To encode a card, click on the icon
and present the card on one of the readers of the installation:
the card will be automatically displayed in the field.
PIN code:
If your installation includes keypads, you can encode the user's pin code in this field. This pin code must be
unique,
and be between 1000 and 99999999 (from
4 to
8 digits).
Fingerprints
The number of fingers currently enrolled is displayed. It is possible to enroll
4 fingers per user, with a maximum
of
100 fingerprints in total in the installation.
To enroll a finger, click on
Details
and follow the instructions on screen. Please note, it is not possible to use a reader connected to
a slave to enroll.
The fingers are numbered from left to right: little finger left hand = 1, little finger right hand = 10. This number is displayed in the events when
a biometric reader is used.
Removal of his own fingerprints
A user can easily delete all his fingerprints from the system using any biometric reader of the installation, which makes it possible to comply with the
directives of the General Data Protection Regulation (GDPR). To do this, he just has to pass the same finger 3 times over one of the readers.
Please note, there can only be 4 seconds between each pass. The reader LED then flashes red and the buzzer sounds. To confirm his wish for deletion,
he must then pass the same finger one last time over the reader, which will then turn solid red to indicate that the procedure has been successful.
Multiple User Programming
This screen allows you to modify several users in a single operation. For example, if you need to change the category of multiple users, simply
select all the users concerned (see the explanation of
multiple selection in the
List of users), to check in
this screen the category to modify and to choose the new category. Several fields can be modified at the same time.
The data of each selected user is scanned before displaying this screen. If one field is identical for all users, its value is displayed.
If the fields are different, ???
is displayed.
Instuctions:
- Check the fields that you want to modify. The other fields (those not checked) will not be altered.
- Modify the value of the selected fields. Please note that the value
???
is not allowed, because it is the symbol used to indicate that the fields
are different.
- Click OK, program the users. All selected users are modified at once, then back to the list.
Categories list
The categories define the rights of users. You can create up to 250 categories in your installation.
The list has 5 columns:
- Name: The name of the category. By clicking on it, you open the properties of this category.
- Schedule: The weekly schedule used by this category.
- : If checked, the members of this category are authorized during forbidden periods.
- : If checked, the members of this category are NOT subject to Anti-passback.
- : If checked, the members of this category are allowed to ALL the doors.
To create a new category, click the
button in the title bar.
Category form
General
section
Name of the category:
Enter the name of the category, up to 50 characters
(1). For your convenience, try to be as clear as possible
when naming a category.
NOT subject to Anti-passback
option:
When this option is checked, members of this category will not be blocked by the anti-passback (neither the access APB nor the timed APB of the readers).
Schedule
section
Weekly schedule:
Choose the weekly schedule during which members of this category will have access to the doors that are checked in the section below.
Option Allowed during prohibited periods
:
If this option is checked, members of this category will still have access during
forbidden periods .
Doors
section
List of authorized doors:
Select the doors that members of this category can use. If you select
All doors
, they will have access to all the doors of the
installation, even those that will eventually be created later.
Elevators
section
For each elevator of the installation, check the floors that the members of the category can access. During authorized access, only the relays
corresponding to the checked floors will be activated. See
elevator properties for details of operation.
List of weekly schedules
You can create up to 50 different schedules in the installation. Schedules are used in the configuration of the doors and categories of users.
Each schedule represents the 7 days of the week, plus a special case for
holidays.
The list has only one column:
- Name: The name of the schedule. By clicking on it, you open the schedule details.
To create a new schedule, click the
button in the title bar.
You can also duplicate a schedule using the button
in its form.
Schedule form
Name of the schedule:
Name of this schedule, maximum 50 characters
(1).
The 2 options below are only available if the working week is set to From Monday to Friday
.
Mon. to Fri. identical
option:
Check this option if the 5 days of the working week are the same.
Sat. to Hol. identical
option:
Check this option if the schedules for Saturday, Sunday and holidays are the same.
Schedules:
Set here the active periods of the schedule for all days of the week. By default, a single period is displayed in order not to overload the screen,
but you can view the 3 periods by clicking on
. If several periods are configured and you
click
to view only one, the WS4 tells you that certain periods are no longer visible by displaying
the button
in red.
You can duplicate this schedule using the button in the title bar.
The holidays
You can configure your WS4 to behave differently on holidays. For example, do not allow access for some users, or do not unlock the front
door if the company is closed.
It is on this screen that you must configure the holidays of your system. By holidays, we consider the closure of the company and not the
individual holiday of the users.
During a day off,
weekly schedules are changed: the WS4 uses the configured days for holidays instead of current day periods.
To set the days on the calendar, first select the type of holiday to change: Normal holidays or Fixed holidays
(repetitive each year at the same date). Then click on the desired dates (one by one) to select them (or unselect them).
The normal holidays will appear in green and the fixed holidays
in red.
The system allows to program 105 holidays to come and 20 fixed holidays. The holidays whose date is exceeded are still displayed in the calendar
(for maximum 1 year), but they can no longer be modified.
The number of future holidays is indicated below the calendar, which allows a quick control of the configuration.
List of doors
Each table displayed on this page represents one card (WS4-4D or WS4-2D). The first one is usually the master
of the installation,
ie the one to which you connect with your browser. In the header of each table there is a number (#0 to #9), the indication Master
or
Slave
and the serial number of the card (which is on the label).
For the slaves, the icons below are displayed to the right of the serial number:
- : to replace this slave by another, in case of breakdown for example. The procedure is
identical to the addition of a new slave below.
- : to permanently delete this slave. This icon is displayed only if this slave has no
configured door.
The icon
located just to the right of the table allows to view the
system events that
occurred on the concerned WS4, ie events that do not concern a door, a user or an operator.
In each table, there are 4 lines (for a WS4-4D) or 2 lines (for a WS4-2D) representing the doors with some of their characteristics.
Doors with a single reader occupy only one row of the table, those with one reader on each side occupy 2 rows.
Description of columns:
- ID: It is the number of the door that corresponds to the indications on the electronic board of the WS4. A simple door
(1 reader) uses only one number, while a double door (2 readers) uses 2 and therefore extends over 2 lines.
- I/O: Indicates if the door is configured as an Input/Output, and therefore changes the area of the users.
- Name: Name of the access. Click it to open the door properties.If this access manages a elevator, the icon
is displayed to the right of the name. By clicking on it, you open the elevator properties.
- Group: Group to which this door belongs, to define the display order on the home page.
- APB: Indicates if the Anti-passback is configured.
- ILock: Indicates if the door is part of an Interlock.
- Emerg.: Indicates if the door should be unlocked in case of emergency.
- Public: If you check this option, any connected operator can open or unlock the door from the home page.
Add (or replace) a slave
Click on this link to add a new slave in the installation. Enter the serial number of the WS4 to be added (it is on the card label) and
click Search. If it finds it, the system directly adds this slave into the installation and you can configure its doors. In case of error, a
message is displayed in red.
Note: If the slave is not in the same subnet, the WS4 will not be able to find the slave based on its serial number. In this case
you must enter the current IP address of the slave, but
it is also necessary that the master has a fixed IP address so that the slave
can continue to dialogue with it later.
At the end of the
Master / Slave Principle chapter, you will find the procedure for configuring a new slave and
adding it to the installation.
Door properties
General
section
Name of the access:
Access name, up to 40 characters
(1). It is better to be as precise as possible for this name,
because it is the one that will be used in the events.
Group
Allows you to display the doors in a particular order on the home page. The doors of group 0 will be displayed before those of group 1 and so on.
If several doors are in the same group, they are displayed in alphabetical order.
Type of access:
Choose the type of obstacle corresponding to this access: door
, barrier
,
garage
, bollard
, tripod
ou turnstile
. This information is only used for display on the home page.
Also choose if this door uses 1 or 2 readers. The choice
2 readers
is only available for doors 1.0 and 2.0, provided that a single door
is not already configured in 1.1 or 2.1 respectively.
Location:
The WS4 can manage the presence of users. To do this, you must define the readers that allow you to enter, those that allow you to exit,
and those that do not change the area of the users. If you want to know which users are present, you must define whether this door is at the
entrance (or exit) of the building, or whether it is inside (neutral). The exact location (output or input) will be defined in the reader section below.
Incompatible with
Toggle mode
.
Lock time:
This is the time of activation of the lock relay, between 1 and 60 seconds, in case of authorized access.
You can choose, in the
Door contact
section below, at which moment the system must stop the lock relay when the door opens.
This option is grayed in
Toggle mode
.
Toggle mode:
In this mode, the state of the lock relay is reversed at each authorized access and the green LED of the reader represents the state of the relay.
Incompatible with
Anti-passback
,
Interlock
and
Input/Output
location.
Anti-passback (APB):
If this option is checked, the system will only allow access if the user is in the correct zone. For example, for a user to enter the building,
his last access should be an exit, and vice versa. A user may also be in
Neutral
, meaning that the system does not know (yet) where he is
and it will be updated during the next access to an entrance/exit doors.
Incompatible with the
toggle mode
and
Neutral
location.
Attention, the Anti-passback mode is not available on slaves, because only the master knows the situation of the users!
Interlock:
Each WS4 (master or slave) of your installation can manage only one Interlock, which may therefore contain 2 to 4 doors. In the Interlock,
if one door is unlocked or open, all others are locked and access requests will be denied. Check this option if you want this door to be part of
the Interlock.
To use the Interlock mode, you must use a door contact and the
Mode toggle
can not be activated.
Manages an elevator:
Check this option if this access has to handle an elevator. When this option is enabled, the
icon
appears to the right of the access in the
list of doors. By clicking on it, you open the
elevator properties.
Note: You can not uncheck this option. To remove elevator management, you must open the elevator properties and delete it.
Unlock if emergency:
Check this option if you want to unlock the access when the
Emergency input is activated (see
system options), in order to evacuate places for example.
Free output push button
section
A free output push button can be installed on each door.
Active period:
Choose the schedule during which the use of the free output push button is allowed. Out of the periods of this schedule, the action on the push
button will have no effect.
Record free output
events:
When this option is active, each
free output
is archived (recorded) in the event history.
Door contact
section
The door contact allows the system to know if the door is open or closed, and therefore to know if a user has actually entered after badging,
or if the door has been stay open too long. It is therefore essential for access which require a minimum of security.
Type:
Select from the list the type of door contact that is connected.
The options below are only available if a door contact is selected.
Switch off the relay:
You can choose when the system should switch off the lock relay when the door opens: After 1.5 sec. (default) / Immediately / No.
If you choose
No
, the relay will switch off at the end of the lock time defined.
Note: the lock relay is always switched off when the door closes.
Contact 4 states:
If you want to be able to detect short circuits or line breaks of the door contact, you must mount 2 resistors of 10K ohm in series, one of the
resistors of which is in parallel with the door contact. Attention, the 2 resistors must be placed
inside of the door contact !
Alarm on break-in:
If this option is activated, an alarm and an event will be generated if the door is being opened without authorization. If it is not checked,
the door can be opened at any time, even without permission, without causing an alarm.
Alarm if door too long opened:
If this option is checked and the door remains open for longer than the maximum opening time configured below, an alarm and an event will be
generated.
Max. opening time:
Set the maximum time the door can remain open. This time can be between 15 and 999 seconds. After this time, the buzzer of the readers will
activate during the pre-alarm time (if configured), then an alarm will be generated.
Pre-alarm time:
This option allows to avoid triggering an alarm for each opening too long. When this option is checked, the buzzer on the reader will activate
after the maximum opening time to warn that the door has been left open for too long. If it is closed before the end of the pre-alarm time,
everything goes back OK.
Free & forbidden periods
section
Free period:
You can configure the periods during which users do not have to identify themselves: These are the free access periods, abbreviated
free
periods
. During these periods, the lock remains active - access is permanently unlocked - and reader's LED blinks green. In
Toggle
mode
, the lock is cut off at the end of a free period. If the access manages an elevator, ALL relays are activated, so ALL floors are accessible.
Forbidden period:
Unlike free access periods, you can define periods during which even users who normally have authorized access will be denied.
Only users belonging to a category with the option
Allowed during forbidden periods
will still have access. In
Toggle mode
, the
lock is cut off at the beginning of a prohibited period.
Note: If a prohibited period overlaps a free period, the prohibited period has priority.
Note: To create or modify a weekly schedule, you need to go to the List of weekly schedules
.
Reader A / Reader B
section
Cabling:
The WS4 tells you on which terminal the reader must be connected (
LB1 or
LB2) and
to which address it must be configured (
0 or
1).
On some readers, this address is configured via a jumper: open=address 0, closed=address 1.
Location:
If the door is configured as
Input/Output
, it is important to select whether this door is to enter or leave the building, so that the
user's status is changed as a result of authorized access.
If the door is configured as
Neutral
, this field will only be visible if it is a door with 2 readers. In this case, the location will
only be used in the events.
Card:
Select the type of card reader connected:
- No: No card reader.
- 125kHz (EM4100): Proximity RFID reader 125kHz.
- 125kHz (HID compatible): Proximity RFID reader 125kHz for HID cards.
- Mifare/DESFire: Proximity RFID reader 13.56MHz for Mifare or DESFire cards.
- ISO2: Reader with ISO2 (clock & data) output connected to a WS4-CNV interface.
- Wiegand (raw): Reader with D0 & D1 output connected to a WS4-CNV interface. All bits sent by the reader are taken into account to compose
the code (even the parity bits). This code does NOT correspond to the actual code of the card, and is displayed in hexadecimal. You must
configure the number of bits that the reader generates in the readers configuration.
- Wiegand (decoded): Reader with D0 & D1 output connected to a WS4-CNV interface. The bits sent by the reader are checked (parity or LRC)
and then decoded. The resulting code is displayed in decimal and corresponds to the actual code of the card. You must select the appropriate
format of your reader in the readers configuration.
- Bar code: Reader with RS232 output connected to a WS4-CNV interface.
- Dallas: Dallas button connected to a WS4-CNV interface.
Keypad:
Check this option if a keypad is connected. A keypad allows users to enter their Personal Identification Number (PIN) code.
Fingerprint:
Check this option if a fingerprint reader is connected
(B100-RS-EH or B100-RS-MF).
Card + PIN mandatory periods:
If you have configured a card reader
and a keypad, you may decide to require users to use the two identification methods, in order to
increase the security at that door. Choose from the list the schedule forcing this dual identification. Apart from the active periods of this
schedule, the system will accept both the card or the PIN code, so users can choose what they prefer.
Detection required:
It is sometimes required to have a presence detection for authorization to access, for example in the case of a barrier with vehicle detection.
If the system does not detect a vehicle, access will not be allowed. To use this mode, you must select from the list on which input the presence
sensor is connected.
Access allowed even if out of hours:
For the output readers, it is often useful to check this option, in order to allow the users to leave the building even if they stayed later
than what is configured in their schedule. This option is not available for input readers of
Input/Output
mode.
Timed Anti-passback:
If this option is checked, when a user is allowed, this user will then be refused on this same reader for a period configurable between 1 to 99 minutes.
If the access is in
Input / Output
mode, this user will also be refused on all other readers of the same type (input or output) connected to the same
management board (WS4-2D/WS4-4D), either until the end of the configured time, either until the use of a reader of the opposite type.
Example: a 10-minute timed Anti-passback can be useful in a car park, to avoid that a user who just entered could give his card to a colleague
(since his card will be refused). But, if he leaves the parking lot, he can re-enter directly without having to wait for the end of the 10 minutes.
Incompatible with
Toggle mode
.
Properties of an elevator
The WS4 can handle up to 2 elevators in the installation, and each elevator can have from 2 to 24 floors. The elevator is managed by means
of 12 relays modules (1 or 2 modules depending on the number of floors). These modules are connected to the same bus as the access reader (LB1
or LB2). The choice of the authorized floors is configured in the
categories: for each elevator of the installation,
it is necessary to check the floors authorized by the members of the category. Then, during authorized access to the reader that manages the
elevator, the relays corresponding to the authorized floors are activated, during the activation time below, which allows the person to choose
the floor where he wants to go.
General
Number of floors:
Choose the number of floors of this elevator, between 2 and 24.
Activation time:
During authorized access, the relays of the floors that the person can reach will be activated during this time (between 2 and 60s).
Relays modules
Wiring:
The WS4 shows you on which connector you should connect the modules 12 relays.
SN of module 1:
Enter the serial number of the first 12 relays module.
SN of module 2:
If the elevator has more than 12 stages, enter the serial number of the second 12 relays module.
Name of the floors
Rel 01 to Rel 24:
Enter a name for each floor (on max. 18 characters
(1)) to simplify the configuration of the categories.
Operators list
An operator is a person authorized to connect to the WS4 (via a web browser), and can perform certain actions that depend on his rights.
A maximum of 10 operators can be created in the WS4.
Note: The first operator is always an Administrator, his rights can not be modified.
The list has 2 columns:
-
Operator : The name of the operator, preceded by an icon representing his rights:
Full control (Administrator)
Installation of the hardware
Management of access control
Monitoring of the installation
Login FORBIDDEN
Click on the name of the operator to open his detailed properties.
If the icon is displayed on the right, this operator is currently logged in.
- Ev. (events): Click the icon to view all the events of this operator.
Change password:
To ensure the security of your system and data from your users and operators, it is advisable to change the default password. Also change the
password if you suspect it has been seen by a third party.
As an administrator, if you want to change the password of another operator, you must make this change in the
operator
form.
Operator form
Operator
section
Name:
The full name of the operator, as it will appear in the events (maximum 40 characters
(1)).
Login:
This is the
login
that the operator must use to log into the system (minimum 2 and maximum 15 characters
(1)).
Password / Confirm password:
The initial password of the operator, on minimum 6 and maximum 15 characters
(1). Once logged in, the operator
can change his password from the
Operators list.
Change password
button:
This button allows you to change the password of an existing operator. To change your own password, you must do so from the
Operators list.
Note: The password policy is shown at the bottom of the page.
Rights
section
The system must know what this operator has the right to do. You can choose one of the following rights:
- Full control (Administrator): An operator with this right can access all the functions
of the system. Only administrators can create or modify other operators.
- Installation of the hardware: Intended for operators who are responsible for the
installation of the equipment and the technical part of the system.
- Management of access control: This right allows you to manage the entire system
EXCEPT the technical part.
- Monitoring of the installation: This right allows maintenance of the installation, but
can not change anything.
- Login FORBIDDEN: Used to temporarily prevent an operator from logging.
Detailed table of authorized actions for each type of operator:
Action |
|
|
|
|
Stop the current alarm |
V | V | V | V |
Reset alarm memory / put in maintenance |
V | V | V | - |
Open / Unlock doors |
V |
V (*) |
V |
V (*) |
Put everybody in neutral |
V | - | V | - |
View events and export them |
V | V | V | V |
See users list + choices of columns to display |
V | - | V | V |
Change the Status IN / OUT / Neutral |
V | - | V | - |
View the user properties |
V | - | V | - |
Create / modify / delete a user |
V | - | V | - |
Enroll a batch of card / Create secure cards |
V | - | V | - |
Import / export users |
V | - | V | - |
See the list of categories |
V | - | V | V |
View the category properties |
V | - | V | - |
Create / modify / delete a category |
V | - | V | - |
View the list of schedules |
V | - | V | V |
View the schedule properties |
V | - | V | - |
Create / modify / delete a schedule |
V | - | V | - |
View the holidays |
V | - | V | V |
Add / delete holidays |
V | - | V | - |
View the list of doors |
V | V | V | V |
View the properties of a door or an elevator |
V | V | V | - |
Modify / delete a door or an elevator |
V | V | - | - |
Choose the doors that can be opened / unlocked by & |
V | - | V | - |
Add, modify or delete a slave |
V | V | - | - |
View the network properties |
V | V | V | - |
Modify the network properties |
V | V | - | - |
Modify the date and time + NTP |
V | V | V | - |
View the system options and the configuration of the readers |
V | V | V | - |
Modify the system options and the configuration of the readers |
V | V | - | - |
View the users options |
V | - | V | - |
Modify the users options |
V | - | - | - |
View / modify the emails |
V | V | V | - |
Make a backup |
V | - | V | - |
Restore a backup |
V | - | - | - |
Update the firmware |
V | V | - | - |
View the system log |
V | V | V | - |
View the list of operators |
V | V | V | V |
View the operators properties |
V | - | - | - |
Modify / delete an operator |
V | - | - | - |
View supervision |
V | V | V | V |
Reprogram the readers |
V | V | - | - |
Restart the board |
V | V | V | - |
(*) Note: Operators with the rights Installation of the hardware
or Monitoring of the installation
can only open/unlock
the doors if the Public
option is checked in the list of doors.
Forgot password?
You forgot your login or password? If you have access to the box of the WS4, you can log in with the default login and password by following the
procedure described in the
DIP switches section below.
As a reminder, the default login is
admin and the default password is
WS4-XXXXXX (replace the Xs with the serial number of the product.
This number is indicated at the bottom of the login page).
Technical supervision window
This page allows you to quickly view the status of all inputs and outputs of your WS4. The status is displayed in real time, the refresh
rate is about 1 second.
General
section
Mains:
OK = The WS4 is connected to the mains and the battery is charging.
DEFAULT = No mains voltage, the WS4 operates on battery.
Voltage:
Indicates the voltage measured by the board. This voltage may come from the power supply or from the battery if there is a power failure. Below
11.5V, the system considers the battery to be low, and above 14.5V, too high.
Box:
Indicates if the box is open or closed. This indication comes from the tamper switch connected to the
Tamper
connector on the board.
DIP switches:
Indicates the status of the DIP Switches on the board:
For the WS4-4D
- SW1: In the OFF position (factory setting), the WS4 is in Network mode. In the ON position, the WS4 is in Autonomous mode.
- SW2: In the OFF position (factory setting), the WS4 is a Master. In the ON position, the WS4 is a Slave.
- SW3: Not used.
- SW4: Allows to perform these 2 operations:
- Allow to log into the system as an administrator if login or password is forgotten. Toggle the dip switch for about 15 seconds,
then return it to its original position. The system will then allow, for 5 minutes, to connect (from the local network only) with
the default login and password. During this time, the Power LED (or the COMM LED if WS4-1D or WS4-2D) flashes green to indicate
that the procedure is effective.
- Allow a complete re-initialization of the system: make 3 round trips with the dip switch within 10 seconds.
The Power LED (or the COMM LED if WS4-1D or WS4-2D) flashes green quickly for a few seconds to indicate that the data are erased.
For the WS4-1D and the WS4-2D
- SW1 : Same as SW1 of WS4-4D above.
It is also this dip switch which allows the default login for 5 minutes or the complete re-initialization of the system:
unplug the network cable (RJ45) and follow the SW4 procedure of the WS4-4D above. Then reconnect the network cable.
- SW2 : Same as SW2 of WS4-4D above.
RAM usage:
Indicates the percentage of system RAM used.
Auxiliary Inputs & Outputs
section
This screen allows you to see the status and functionality of the auxiliary inputs and outputs of the board. The functionality must be
configured in the
system options.
Input 1 & Input 2:
Indicates the function assigned to the input (in parentheses) as well as the status of the input, in real-time.
By default, input 1 is configured in
Emergency
mode, but input 2 is not used.
Output 1, Output 2 (and Output 3 for WS4-2D):
Indicates the function assigned to the output (in parentheses) as well as the state of the output, in real time.
By default, output 1 is configured in
Alarm
mode, and output 2 is in
Attendance
mode.
Door x.y
section
Push Button:
Indicates the status of the
Push button
input of the board, either OFF or ON.
Door contact:
Indicates the status of the
Door contact
input of the board. The state is either ON / OFF if it is a simple door contact that is
configured, or the resistance value in Ohm if it is a 4-state door contact (or if no door contact configured).
Lock relay:
Indicates whether the door lock relay is activated or not. On the board, the 3 contacts (C/NO/NC) are available, allowing to connect both types
of lock (fail open or fail close).
Reader 1 & 2 :
Indicates the status of the connected reader(s). If a reader is online, the reference of the reader is displayed, followed by its version and
serial number in parentheses. The area is red if the reader is offline, orange if the reader's tamper is open.
Depending on the type of reader and operator's rights, the icon
allows to reprogram the reader
with a new version of the firmware if necessary.
For fingerprints readers, the icon
allows to send all the templates to the reader.
Reboot the WS4
The restart of the board takes about 20 seconds, and you will have to re-log afterwards.
State of the slaves
If the installation has slaves, their status is displayed in a summary table to quickly see if there is a fault.
- Slave: Indicates the slave number, followed - in parentheses - by its serial number. If the slave is online, click the serial
number to open the slave home page in a new browser window.
- State: Indicates whether the slave is on-line, off-line, or in version error.
- Voltage: Displays the power status, with the voltage value in brackets. If there is a fault, the area is displayed in red.
- Box: Display if the box is open or closed.
- : Enables the sending of all the configuration to this slave. This operation is in theory never
necessary but can be useful if a slave seems not to react as it should.
The WS4 events
The WS4 displays events as a table with 5 columns :
- Date & time: The date and time at which the event occurred.
- Users: The name of the user or operator who made the action. This field is empty if the event is not linked to a user or an operator.
- Description: Description of what happened.
- Location: Name of the access where the event occurred. The name of the access is followed by a letter specifying the reader used
for the doors equipped with 2 readers. If the event does not originate from a door and the installation contains several WS4,
this column contains the number of the WS4 (#0 to #9).
- Details: Additional information for some types of events.
System informations
Application started
The WS4 has started, after a power-up or a reboot of the board. The
Details
column indicates whether it is running in master or slave mode.
Application stopped
The WS4 has stopped following a power failure or an operator request (Rebooting the board, software upgrade etc.).
Time set by NTP
Indicates that the time of the WS4 has been synchronized with the NTP server. The value of the correction is given in the
Details
column.
Reset attendance
All the users who were inside were put back in
neutral
. The
Details
column shows the number of users affected.
Emergency ON / Emergency OFF
Start / end of the
emergency
mode. The doors that must unlock in case of emergency will create an
Door unlocked
event.
Action of operators
Log-in
The operator has logged in. The IP address of his computer is indicated in the
Details
column. If the same operator opens multiple sessions simultaneously,
the WS4 indicates a session number behind his name in brackets, for example
Guardian[1]
.
Log-out
The operator's session was closed either following a request from the operator, or after a timeout (30 minutes without action), or because the application has
stopped. The reason for the closure is showed in the
Details
column.
Login ERROR #
A login attempt failed. The IP address of the computer is listed in the
Details
column.
Login DENIED (account disabled)
The operator who wanted to log in is denied because his rights are on
Login FORBIDDEN
.
Time set
Indicates that the WS4 time has been changed by the operator. The event is created before changing the time and the
Details
column
contains the value of the correction.
Ask to REBOOT
Indicates that the operator has requested to restart the board.
Changing user status
Indicates that the operator has changed the status (inside / outside / neutral) of a user. This event is always followed by a second which specifies the name of the user
and the name of the zones.
Everybody NEUTRAL
The operator has reset all users to the
neutral
state.
Door relocked
The door was unlocked and has been relocked by the operator.
Backup sent to browser / Backup on USB stick
The operator has made a backup of the system (on his computer or on a USB key). This event is always followed by a second with the name of the backup.
Backup RESTORED
The operator has restored a backup. This event is always followed by a second with the name of the backup.
System UPGRADED
The operator has installed a new version of the firmware. The version is specified in the
Details
column.
Creation / Modification / Deletion
Indicates that the operator has created / modified or deleted an element of the installation. If the text is underlined, it is possible to click
on it to see the modified element.
ALL USERS DELETED
Indicates that, when importing users, the system has deleted all the users before importing.
# users imported
Indicates the number of users imported.
Events DELETED
Indicates that the operator has deleted ALL the events of the system.
The access allowed
Access allowed
The user had authorized access. If the access has a door contact, this event is saved only when the door opens.
Lock ON / Lock OFF
Corresponds to authorized access for a door in
toggle
mode. The
User
column indicates whether the action originates from a user,
an operator or the free output push button.
Free output PB
Indicates a free output via the push button.
Allowed by operator
The access has been authorized by the operator.
Door unlocked
The door is unlocked either by the operator (the unlocking time is indicated in the
Details
column) or because the
Emergency
mode
is activated.
The access denied
UNKNOWN PIN/CARD
The card or keypad code (PIN) does not belong to a user of the installation. The code of the card is displayed in the
User
column.
USER DISABLED
The access is denied because the user is (momentarily) disabled.
OUT OF VALIDITY PERIOD
The access is denied because the validity period of the user is exceeded or has not yet begun.
DENIED: DOOR
The access is denied because the user does not have access to this door.
DENIED: DAY
The access is denied because the user does not have access this day to this door.
DENIED: HOLIDAY
The access is denied because the system is on a day off.
DENIED: HOUR
The access is denied because the user has no access to this door at that hour.
DENIED: FORBIDDEN PERIOD
The access is denied because the door is in a
Forbidden period
.
DENIED: NO DETECTION
The access is denied because there is no detection of the corresponding input.
BAD COMBINATION
The access is denied because the combination of the card and the keypad code (PIN) does not match.
DENIED: TIMED APB
The access is denied because there has not been enough time since the last access.
DENIED: APB
The access is denied because the Input/Output cycle has not been respected.
DENIED: INTERLOCK
The access is denied because the door is part of an Interlock and it is locked by another door.
The alarms events
The events below relate to alarms. Some of them always cause an alarm, while others can be configured according to the needs of the installation.
The events that signal the return to the normal state or the end of the alarm are also included in this list.
ALARM CYCLE STARTED
Indicates that an alarm cycle has been started, following the preceding event. The
Details
column shows the cycle number (see the explanation of the
alarm cycles on the home page, section
Reset alarm memory
).
Alarm cycle STOPPED
The alarm cycle has been interrupted by the operator or by the user.
End of alarm cycle
Normal end of the alarm cycle.
ALARM MEMORY RESET
The operator resets the alarm memory.
TOO MANY ALARM CYCLES
The maximum number of successive alarms is exceeded, so the alarm cycle could not be started. The
Details
column shows the number of alarms.
BOX OPENED / Box closed
The box of the WS4 has been opened / closed.
BREAK-IN
The door was opened without authorization.
TOO LONG OPENED
The door remained open longer than the maximum allowed time.
Door OFFLINE / Door ONLINE
The Slave who manages this door is passed offline / online.
Module OFFLINE / Module ONLINE
The module whose serial number is in the
Details
column is passed offline / online. The 12-output modules are used for elevator
management.
Master OFFLINE / Master ONLINE
The slave whose number is in the
Location
column has lost / restored its connection with the master.
Reader OFFLINE / Reader ONLINE
The reader whose name is in the
Details
column is passed offline / online.
Reader TAMPER
The tamper protection circuit of the reader has been opened.
DOOR CONTACT SABOTAGE
The door contact circuit - which is of the
4 states
type - has been short-circuited or has been opened.
BATTERY LOW
The battery voltage is less than 11.5V.
Battery OK
The battery voltage is greater than 11,9V.
MAINS FAILURE
The mains voltage is absent and the system is running on battery.
Mains OK
The mains voltage is back (and the supply voltage is greater than 13.6V - the battery is charging).
VOLTAGE TOO HIGH
The supply voltage exceeded 14.5V.
End of overvoltage
The supply voltage returned below 14.4V.
Power PANIC
The system is stopped due to a power failure.
BREAK GLASS
Indicates that the
Break glass
input was activated.
PREVIOUS INSTANCE CRASHED
The WS4 has stopped unexpectedly. It will be restarted automatically by the system.
Other access events
Free period / End of free period
Specifies the start / end of a
free period to this door.
Forbidden period / End of forbidden period
Specifies the start / end of a
forbidden period to this door.
Door NOT opened
The user has been authorized access but did not open the door. The system therefore considers that he/she did not enter (or leave).
BAD format
The number of bits or the format of the card does not match what is configured in the
configuration of the readers.
Settings menu
Network
TCP/IP configuration
The WS4 can manage its network connection in 3 different ways:
- DHCP mode: This is the default mode to use if your WS4 is connected to your company or home network. In this mode, it's the DHCP server that
automatically configure the WS4. You can not change the settings.
- Fix IP address mode: In this mode, the WS4 is also connected to your company or home network, but you configure all the information about
connecting to the network by yourself.
- Autonomous mode: The WS4 automatically switches to this mode when the DIP switch 1 is set to ON. This mode must be used when
the WS4 is not connected to an existing network, and you are connecting to it with a laptop. Your laptop must be in
Get an IP address
mode, and
the WS4 will assign its address at each connection. The WS4 is always at the same address in this mode: http://192.168.50.100 (or https if you checked
the Secured connection
option).
This mode also allows you to easily configure your WS4 : configure one of the other 2 modes above, and when everything seems right, switch Dip-switch 1 to
the OFF position to support these new settings.
WEB server
Secured connection (HTTPS)
Check this option if you want to encrypt the data transmitted between your browser and the WS4. Attention, the WS4 uses a security
certificate
auto-certified. With this certificate, the data is encrypted, so it is not possible that someone else intercepts these data
during transit across the network. However, since the WS4 is not registered with an official organization, your browser will probably ask
for confirmation when you log in. Depending the browser used, you may need to
Add exception...
or open the
Advanced Settings
before
Continue to the site...
.
Web Service API
This option is available only if you checked the
Secured Connection (HTTPS)
option. When checked, the WS4 runs a web service that
allows an external system (a supervisor for example) to know the state of the WS4 and also to configure it. For further information, please
contact your distributor.
Password :
A password of minimum 6 characters is required to ensure the security of the web service.
DynDNS
This option is available only if you checked the
Secured Connection (HTTPS)
option. It is only useful if you have a dynamic IP address
and want to connect to your WS4 from the Internet.
If the option is checked, the WS4 communicates regularly with a DynDNS server, so that it knows, at any time, the IP address of your WS4.
Then, to connect to your WS4 from anywhere in the world, first connect to
http://www.xprgroup.com/my-ws4 and enter the
serial number of your WS4: you will be automatically redirected to the login page of your WS4.
Attention : The router that manages the Internet connection on your network must also be configured so that it redirects requests to the
WS4. You must either ask the network administrator to configure the router, or use the UPnP mode below to have the WS4 configure the
router itself. In both cases, you must choose a unique port number below. This port number allows the router to know which incoming messages it
must redirect toward the port 443 of the WS4.
Status :
Indicates the status of the connection between the WS4 and the DynDNS server.
Warning The WS4 must be on time (maximum an offset of 2 minutes) to communicate with the DynDNS server.
External IP address (WAN) :
It is the current IP address of your Internet connexion. Attention : Some IP addresses are shared among multiple subscribers, because
to reduce the number of IPv4 addresses, Internet service providers (ISP) use Carrier Grade Nat (CGN) or NAT444. In this case, it will not be
possible to connect, you will need to request a public IP address from the ISP. Unfortunately, the WS4 can not know if it is a shared IP
address unless both options (DynDNS and UPnP) are checked and working.
Configure the router to access the WS4 from the Internet (UPnP)
This option is available only if you checked the
Secured Connection (HTTPS)
option. If you enable it, the WS4 will attempt to
configure the router that bridges your local network and the Internet so that you can connect to your WS4 from anywhere in the world. For
this automatic configuration to be possible, your router must support
UPnP mode, and it must be enabled.
Attention: If you have a dynamic IP address (which is the most common case), don't forget to activate the option
DynDNS
above.
Status :
Indicates the status of the UPnP communication between the WS4 and the Internet Gateway Device.
Port:
If you checked one of the 2 options above (DynDNS or UPnP), you must choose a port number between 1 and 65535.
Date & time
Date & time
Time zone:
Choose from the list the time zone that the WS4 should use. It is with the time zone that the WS4 determines on which dates it must execute the switch to
summer time and winter time.
Working week :
Choose from the list the option that corresponds to your working week. The display of calendars and schedules will be adapted accordingly.
Date & time of the WS4:
Shows the
Local date and time of the WS4 in real time.
Date & time of your browser:
Shows the
local date and time of your browser in real time.
GMT time difference:
Indicates the difference between the
GMT time of the WS4 and the
GMT time of your browser, in real time. Comparing the GMT
time allows you to set the system time even if you are connected remotely and are not in the same time zone.
Click
Synchronize
to set the WS4 to the same time as your browser (while maintaining the time difference between
time zones).
Clock adjustment:
This option is displayed by clicking
Show advanced options
. It allows to change the calibration of the WS4 clock to make it more
precise.
NTP server
Synchronize with a time server (NTP):
Check this option to have the WS4 synchronize periodically on a NTP server (Network Time Protocol).
Enter the URL or the IP address of the NTP server and click on the
Test
button to verify that it is accessible.
User form
Separate fields for Name & First name:
You can choose if you want to have only one field to encode the full name of the users, or if you prefer 2 separate fields (name and first name).
In the latter case, the first free field will automatically be used for the first name and will therefore no longer be available.
Field 1 to 5:
Encode the names of the free fields that you want to use, for example
Phone
and
Registration
, up to 25 characters. These fields
will then be available in the
User form, and you can also view them in the
list
of users.
Attendance
Reset time:
You can choose the time at which you want to reset all users to
Neutral
. The attendance relay - if configured - will be switched off, even if some users have
forgotten to clock out at the output.
Reset code:
This code is used to reset to neutral state all the users still inside. It can be used from any access having a keypad.
Buzzer when the last person leaves:
If this function is activated, all readers of the installation will emit an intermittent sound when the last person leaves the building or when
all present users are reseted in neutral. If the relay
attendance
is used to control a burglar alarm system, this signal warns users
that could possibly still be inside that the alarm will soon be armed. They must then quickly identify themselves on one of the readers of the
installation. At the end of the selected time, if no one has manifested, the presence relay is switched off.
Emails
Your WS4 must have access to the Internet to send e-mails. This is an in-system service that can send up to 100 emails per month.
When this quota is reached, a last e-mail alert is sent to the first recipient of group no. 1, then no more e-mail will be sent during the month.
The number of e-mails sent during the current month is indicated in the blue area in the center of the page (the zone turns orange at 80%, then red
when the quota is reached).
If it can not send an email, the WS4 will continue for 24 hours. Then the message is deleted and an error event is created.
Attention, in an installation with slaves, it is always the master who sends the e-mails. If a slave is offline, its alarms will no longer be sent,
but the master will send an e-mail to indicate that the doors of this slave are offline.
Note: During
installation maintenance (see
home page), emails are not sent.
Name of the site (sender)
Enter a name that characterizes the installation (on max. 50 characters
(1)). This name will be displayed in the
sender
area when the email is received. This field is also displayed in the home page, which makes it possible to control that one is on the good
installation (very useful if one manages several installations remotely).
Group of recipients No.1, 2 and 3
The system has 3 groups of recipients, and each group can contain up to 3 recipients and up to 120 characters. The same recipient may be in more than one
group. Email addresses must be separated by a semicolon.
Language
Messages will be formatted in the selected language.
Type of event
For each type of event, you can choose whether to send an e-mail, and choose to which group. The list of events concerned is indicated in parentheses.
Attention, some alarms can be deactivated in the
system options: it is necessary that the option is checked so that the e-mail is sent.
If the same alarm is repeated in a period of less than 2 hours (15 minutes for identification alarms), the system sends an e-mail only for the
first alarm.
Connection test
The system can send an email to report that it is still alive and connected to the Internet. Select the days and time you want it to send the
Connection Test
email.
System options
Alarms
Time of an alarm cycle:
When an alarm occurs, the WS4 switch the dedicated alarm relay (see below) for a time between 5 and 180 seconds.
Maximum number of successive cycles:
The WS4 can not trigger alarms at infinity: If the configured maximum number (which must be between 3 and 9) is exceeded over a period of 2 hours, the relay
will not be activated. It will be necessary to wait until the end of the 2 hours, or to make a
Reset alarm memory
on the home page to reactivate the process.
- Alarm if box opened: If this option is checked, an alarm will be generated if the WS4 box is open.
- Alarm if reader tamper: If this option is checked, an alarm will be generated if the tamper protection of one of the readers is activated.
- Alarm if mains failure: If this option is checked, an alarm will be generated on failure of the power supply. Of course, a battery must be connected
to the WS4.
- Alarm if battery low: If this option is checked, an alarm will be generated if the system is running on battery and the battery is
below 11.5V.
- Alarm if glass broken: If this option is checked, an alarm
Break glass
will be generated if the input is activated. See explanation in the
paragraph on auxiliary inputs below.
Auxiliary Inputs & Outputs
The WS4 board has
2 auxiliary inputs and
2 auxiliary outputs. On the master, they can each be configured via this page. On
slaves, they are not usable, except for the field
detection required
(in the properties of a door).
Aux IN 1 & 2:
Note: The contact connected to these inputs can be either Normally open (NO) or Normally closed (NC).
- Emergency: Allows to activate the
Emergency
mode, which will unlock all the access having the option Unlock if
emergency
checked.
- Break glass: Allows to generate an alarm
Break Glass
. This function is only useful when using an electromagnetic lock.
In this case, it is recommended, for security reasons, to place a glass break button to be able to interrupt the supply voltage of the lock
in case of need. This input allows the WS4 to be informed that the glass has been broken, and then generate an alarm. Attention, a
two-circuit glass breakage system must be used: one to turn off the power of the lock, the other to inform the WS4. Furthermore, if
several electromagnetic locks are used, the contacts for the detection must be wired in serie.
- Note: It is also possible to use the auxiliary inputs as vehicle detection. See Detection
required in the
reader
section of the door properties.
Aux OUT:
- Alarm: The relay will activate in case of alarm, for the Time of an alarm cycle.
- Alarm memory: The relay will activate from the first alarm and will remain active until the alarm memory is reset, which can only
be done via the home page.
- Attendance: This function is only useful if the installation has access in
Input / Output
. The relay will activate as soon
as the first user enters in the building and will switch off when the last user goes out. The fact of setting everybody in neutral also
switches off the relay.
- Bell: The relay will activate for 1 sec. when pressing the bell button on one of the keypads of the installation.
- Schedule : The relay will activate during the active periods of the selected schedule.
Other options
Number of events to keep in memory
The WS4 can hold up to 50,000 events in its internal memory. But since the events are saved in the backups, if you do not need to retain
so many, you can choose a smaller number here, to reduce the size of the backups.
Note: Slaves also keep their events in memory, but they keep 5 times less than what is configured for the master.
Delete ALL
This button allows you to delete
all events from the system. This function is useful if you have restored a backup from another
installation, or after putting into service.
In the events, delete the name of the users
In the context of respect for private life, it is sometimes obligatory to no longer be able to identify the movements of users after a certain period of time.
This option allows you to delete the name of the users for all the events which are older than X days (configurable between 1 and 3650).
Field separator (CSV files)
You can choose the field separator that will be used when exporting users or events to CSV format.
You must choose the separator that is supported by your
spreadsheet
software. For example, for Excel, the supported separator depends
on the language of the product: semi-colon in French version, comma in English version.
Check for updates weekly
When this option is checked, the system checks - in the night from Sunday to Monday - if a new version of the software is available.
If this is the case, a notification will be displayed on the home page when an operator logs on.
Log debug messages
Check this option only if requested by the technical service.
Configuration of the readers
Wiegand / HID formats
If you use HID readers or readers with a
Wiegand output, you must configure the number of bits that these readers generate to be accepted
by the WS4. You can configure up to 4 different formats. If the number of bits of the card does not match any of the configured formats, an
event
BAD format
will be created with the number of bits in the
Details
column.
Format 1 to 4:
Choose the format(s) that match the cards/readers used in your installation.
Note that the WS4 can read the bits of Wiegand readers in 2 different ways, depending on the type of card configured in the
door properties:
- Wiegand (raw): The WS4 checks only the number of bits that the reader sends, and if it corresponds to the number of bits in one of the formats,
it composes a hexadecimal code based on all the bits (even the parity bits). The WS4 does not use other format information.
- Wiegand (decoded): The WS4 will decode the bits sent by the reader and extract the code from the card according to what is
specified in the format corresponding to the number of bits received.
For formats with Site code, you can either accept any site code by leaving the field empty, or imposing a particular site code
(from 0 to 65534).
Warning: If there is a parity, LRC, or site code error, the card is rejected and a Bad Format
event is generated.
Explanation of the format |
P[e:2-16] | Even parity on bits 2 to 16 |
Site:8b | Site code (facility code) on 8 bits |
Code:22b | Card code on 22-bits |
X:1b | Unused zone of 1 bit |
P[o:17-31] | Odd parity on bits 17 to 31 |
LRC:4b | Control character on 4 bits |
Mifare/DESFire security
If there are Mifare readers
(3) in the installation, you can set a security level that suits your needs.
The higher the level, the more difficult it will be to defraud by copying a card. Securing cards is usually a complex operation,
but to simplify it as much as possible, the system allows you to create very secure DESFire cards
(2) using
one of the readers of the installation. To do this, you simply need to choose an application number and an authentication key. This key must be kept
secret and archived in a safe place, because it guarantees the confidentiality of the data written on the card. When these parameters are defined,
you can create secure cards from the
list of users, and directly use these cards on all Mifare
readers
(3) of the installation.
Security level
- Low: All types of cards are accepted, there is no restriction.
- High:
The WS4 ONLY accepts secure DESFire cards(2) that have been created by the system.
Application ID (AID)
As the DESFire cards
(2) can be used by several different systems, this number identifies the area of the card
reserved for your WS4. You can choose any value between 1 and 16777215.
Authentication key
Key on 32 hexadecimal characters (0 à 9 et A à F). You can enter the key of your choice or have the system generate one.
This key is used to authenticate at the card level, and also to encrypt the data between the card and the reader.
Warning, without this key, it would not be possible to read cards already created! Remember to archive it
(for example by making a backup and saving it in a safe place).
Note: To ensure a maximum level of security, the key is diversified: it is used in a complex algorithm to create another key,
different for each card.
Other options
Keypad code of fixed length
If the installation has keypads, you can choose whether users should end their code by pressing
B
,
or if all codes must be of fixed length (4 to 8 digits).
Caution, if the length of a user's code is
smaller than the one chosen here, it should precede his code with
0
. On the
other hand, if the length of his code is
greater, it will not be able to identify!
Backlight
This function only applies to certain types of readers. In
Default
mode, the backlight flashes
green once per seconde, which indicates that the
reader is in communication with the WS4.
Create secure cards
This screen allows you to create secure DESFire cards
(2) using one of the Mifare
readers
(3) of the installation.
You can create a batch of cards on the fly. Then, these cards will have to be attributed to the users of the installation via
the
user form or the
enroll a batch of cards.
Once created, a secure card
contains a zone (called Application), itself containing an encrypted file protected
by an AES key. The file contains a unique identifier which corresponds to the unique ID of the card (UID)
preceded by '10'. For example, if the card has the unique ID 36070309779090948, the secure zone will contain the identifier
1036070309779090948, and it is this identifier that will be read by the Mifare readers(3)
and which must therefore be attributed to the card holder.
Backup & upgrade
This screen allows you to make a backup of the installation, to restore a backup or to update the WS4 software.
Create a backup
You have 2 possibilities to create a backup of the installation:
- Download backup: Your browser will save it in
Download
or ask you to choose where you want to save it.
- Backup on USB stick: Insert a USB key into the WS4's
USB Key
slot and click this button.
Note : Since version 2.00, the events are included in the backup. By default, the name of a backup consists of the name WS4
followed by the
serial number
, followed by the date and time
. For example: WS4-SN100006-20161124-1716.bak
The extension of a backup file is .bak
Restore a backup
You can either restore a backup that you previously saved on your computer or restore a backup that the WS4 made automatically (internally).
In both cases, choose the backup to restore, click the
Restore button and confirm your choice. The WS4 restarts with the backup data
and then asks you to re-login.
Upgrade firmware
If you have obtained a new version of the WS4 (for example, from
www.xprgroup.com),
you can update the system via this screen.
Select the file containing the update then click
Upgrade
and confirm your choice.
The WS4 restarts and asks you to re-login: the system is updated.
Note 1 - Field Size: For text fields, the system reserves a certain amount of memory. In general, a character corresponds to one memory location, but some characters - such
as accents and special symbols - take up to 2 or 3 memory locations. The encoding used is UTF-8 encoding, and the full list of characters is available
online at http://www.utf8-chartable.de.
Note 2 - DESFire card: Card or Tag Mifare DESFire, preferably in version EV2 which improves the reading distance.
Note 3 - Mifare reader:
This Mifare reader is currently under development.
© XPR Group
The manufacturer reserves the right to modify, at any time, the characteristics of this document. This document is not contractual.