Installation Manual
Issue 6.0.2
9600-0447
Contents
1
Preface ....................................................................................................................... iv
About this Manual .............................................................................................................................. iv
Related Documents ............................................................................................................................. iv
Chapter 2: Installing and Using the Backup and Archive Software.................... 2-1
Installing NovaBACKUP.................................................................................................................. 2-1
Configuring the Tape Drive......................................................................................................... 2-1
Using the Backup and Archive Software.......................................................................................... 2-2
About Archives............................................................................................................................ 2-2
About Backups............................................................................................................................. 2-2
Extending the Backup to Cover Other Files ................................................................................ 2-3
Log File........................................................................................................................................ 2-3
Changing the Backup/Archive Configuration .................................................................................. 2-3
System Recovery Procedures............................................................................................................ 2-4
Contents
Installation Procedure.................................................................................................................. 4-2
Checking the Service Monitor..................................................................................................... 4-7
Installing a Language Pack ............................................................................................................... 4-8
Installing the Client Software ........................................................................................................... 4-9
Starting the Client Software ........................................................................................................... 4-12
Default Login User Names and Passwords ............................................................................... 4-12
Engineer Logins......................................................................................................................... 4-12
Command-Line Logons ............................................................................................................. 4-12
Network-Locking Command-Line Switch ................................................................................ 4-13
ii
Contents
Datacard Select Class........................................................................................................................C-6
Appendix F: Scanshell 800 Card Scanner Installation and Setup ...................... F-1
Installing the Software ...................................................................................................................... F-1
Installing the Scanshell Driver..................................................................................................... F-1
Installing the idScan Software ..................................................................................................... F-1
Configuring the idScan Software...................................................................................................... F-2
Other Configuration Tasks................................................................................................................ F-4
Editing Multimax.ini.................................................................................................................... F-4
Calibrating the Scanner ............................................................................................................... F-4
Hiding the idScan Interface ......................................................................................................... F-4
Scanning a Card ................................................................................................................................ F-4
iii
1 Preface
Related Documents
The following documents provide additional information, which you may need when installing
optional modules or utilities:
iv
1 Chapter 1:
Introduction
Overview
The Business Edition Security Management System (SMS) Software is a 32-bit client/server system
used to set up, manage and monitor security management systems based on the multiNODE-1100
(M1100) and multiNODE-1200 (M1200) controllers.
Figure 1.1 shows typical components of the security management system.
Business Edition uses SQL Server databases, which are stored on the server and are managed by the
Microsoft SQL Server Desktop Engine (MSDE). With its maximum database size of 2GB, MSDE has
been designed and optimized for use with smaller systems.
The clients provide the screens that enable operators to log on, set up, manage and monitor the
security management system.
The server and clients communicate over a standard TCP/IP network, which can, if required, be used
for other purposes. The system is limited to a maximum number of clients and readers, depending on
the package purchased.
The server requires a "Base" sentinel to be fitted, and an "Options" sentinel if cost-options have been
purchased. Sentinels are not required at client computers.
1-1
System Types
Server
LAN Chain
(multiNODE-Lite
Nodes)
ENVS
Networked Clients
Encoder
Secondary
Dial-in Modem
Modem
PSTN
Hardwired Chain
(multiNODE-Lite
Nodes)
CCTV
Switcher
Unit
Dial-Up Chain
(multiNODE-Lite
Nodes)
1-2
Installation Sequence
Installation Sequence
Typically, the steps you need to take to install the software are as follows:
1. Check hardware and software requirements. Refer to the following section.
3. Install the backup and archive software (NovaBACKUP). See:
Chapter 2: Installing and Using the Backup and Archive Software.
4. Install MSDE, databases and client software, and start the system. See;
Chapter 3: SMS Quick Install Instructions.
OR:
Chapter 4: Advanced SMS Installation.
Note: An overview of the steps involved in installing the SMS software is given on page 4-1.
5. Perform various post-installation tasks, such as to load graphic files and set up modems. See:
Chapter 5: Post-Installation Tasks.
There may be other tasks you need to carry out, such as to install badge printers or video capture
cards, depending on the site requirements. These are described in the appendices.
1-3
Processor
RAM
Disk Capacity
USB Ports
Monitor
Graphics Card
Peripherals
1-4
Requirement
Windows XP Professional (with Service Pack 2), Windows Server 2003
Standard Edition (with Service Pack 1) or Windows Server 2003 R2 Standard
Edition.
Pentium 4 with Hyper-Threading, 2GHz minimum.
Note: Please refer to the Digital Video Design Guide if the PC is to display
live or recorded video using the Video Management software.
512MB minimum. Increase to 1GB if the number of card readers exceeds 256.
Note: Please refer to the Digital Video Design Guide if the PC is to display
live or recorded video using the Video Management software.
80GB minimum. Additional network storage is required if the optional "Video
Storage Management Module" is used to store video recordings from ENVS or
IP cameras (see the Digital Video Design Guide).
2 or more for SMS sentinels.
1024 x 768 or larger.
Please refer to the Digital Video Design Guide if the PC is to display live or
recorded video using the Video Management software.
See page 1-5.
Backup Tape
Drive
SCSI DAT (required if backup/archive to a SCSI tape device is used). The tape
capacity must be sufficient for the size of hard disk. Use an Adaptec 2940 Bus
Mastering PCI SCSI card.
Backup Software
Database
Browser
Microsoft SQL Server 2000 Desktop Edition (MSDE), with Service Pack 4.
MSDE and the Service Pack are installed automatically by the SMS
installation wizard. SQL Server 2005 Express Edition is not supported
Internet Explorer 6 or 7.
DirectX
File System
Drives
Network Speed
NTFS
CDROM
100/1000Mbits/s
Peripherals
Requirement
Windows XP Professional (with Service Pack 2), Windows Server 2003
Standard Edition (with Service Pack 1) or Windows Server 2003 R2 Standard
Edition.
Pentium 4 with Hyper-Threading, 2GHz minimum.
Note: Please refer to the Digital Video Design Guide if the PC is to display
live or recorded video using the Video Management software.
512MB minimum.
Note: Please refer to the Digital Video Design Guide if the PC is to display
live or recorded video using the Video Management software.
20GB minimum.
1024 x 768 or larger.
Please refer to the Digital Video Design Guide if the PC is to display live or
recorded video using the Video Management software.
See page 1-5.
Browser
DirectX
File System
Drives
Internet Explorer 6 or 7.
DirectX9 if Video Capturing (see Appendix C) is used.
NTFS
CDROM
Processor
RAM
Disk Capacity
Monitor
Graphics Card
1-5
Network Setup
Consider the following points when setting up the network.
Printer Setup - If scheduled reports are to be generated (Configure/History), you will need to
make sure that the printer has been set up in both the user account and in the client services
account on each client where scheduled reports are to be generated. If more than one printer is
used, they must be installed in the same order in both accounts.
Loss of Network Communications - If a client loses its network communications to the server,
the client will continually attempt to re-establish communications over a period of time (default 10
minutes, as specified by the NCCT parameter in the multimax.ini file; see page A-2). During this
period, the client may appear to be 'locked up'. If communications are not re-established, the client
reboots automatically. This process continues until network communications are restored.
This automatic reboot process should be tested thoroughly during system commissioning.
1-6
2 Chapter 2:
Read this chapter only if you have purchased the third-party NovaBACKUP v7.2 software, which is
used for the online backup and archive functions (Tools/Archive and Tools/Backup). NovaBACKUP
enables backups and archives to be sent to a device such as a SCSI tape drive or disk drive (e.g. on a
network server).
If NovaBACKUP is to be used, it is recommended that it installed prior to the installation of the SMS
software databases and database components. If it is installed afterwards, the Backup Configuration
Utility must be used as described on page 2-3.
If backups are sent to tape, the tape unit must be connected to the server. Make sure that the tape unit
is compatible with the SCSI board and NovaBACKUP.
Installing NovaBACKUP
Install and configure any required drives or adapter cards (such as a tape backup unit and
SCSI adapter card) before installing NovaBACKUP.
To install NovaBACKUP:
1. Log on with Administrator rights.
2. Insert the NovaBACKUP installation CD into the drive on the server. The installation screen
should be displayed automatically.
3. Choose to install all components.
4. Follow the installation prompts to completion. If required, you can choose the built-in System
account for the NovaBACKUP services.
If you have problems with the installation or configuration of NovaBACKUP, please refer to the
NovaBACKUP manual or online help.
Configuring the Tape Drive
Any tape drives you use should configure automatically. However, if you suspect that a tape drive is
not configured correctly, you can change the configuration settings as described in the NovaBACKUP
online help.
Business Edition Software Installation Manual: Installing and Using the Backup and Archive Software
2-1
Historical log data, i.e. alarms, transactions, etc. Producing archives may be necessary for
historical reporting purposes, since log data that is older than a specified number of days is deleted
automatically, as specified by the Purge Daily Logs After option in the
Configure/Preferences/System screen. Normally, the interval between archives should be slightly
less than the Purge Daily Logs After value. For example, if Purge Daily Logs After is set to 90
days, archives should be taken every 89 days.
Databases are restricted to a maximum size of 2GB. If the transaction database grows to within
75% of this maximum (i.e. 1.5GB), the "Transaction Log Running at Capacity" alarm/event
message is generated. The oldest data in the database is deleted automatically to keep the database
size less than 1.5GB. The additional 25% of spare capacity is required to enable database
restoration to take place from a backup.
Video recordings in the video storage folder located on the SMS server, providing that Backup
and Archive Digital Video Files is selected in the Configure/Preferences/System screen. Video
stored elsewhere cannot be archived. Purging of recordings is determined by the settings in the
Configure/Digital Video/Storage Server Settings screen.
Depending on the customer's requirements, archiving may not be required at all; data older than a
specified amount may not be of any interest. It is also important to know that if an archive is used to
produce a report, the whole archive is re-inserted into the transaction database.
Archives stored on disk have filenames in the following format (the start and end dates specify the
date range of the archive):
001multi_at_<archive date>_<archive time>_<start date>_<end date>.nb7
About Backups
A backup takes a copy of the system files, including the databases, ini files and encoder files. In the
event of some corruption of the data, the backup enables the customer's data to be recovered, although
in extreme circumstances, the whole system may need to be reinstalled (including Windows, etc.).
If the "Video Storage Management Module" is used, video recordings in the video storage folders
located on the SMS server (as defined by the Configure/Digital Video/Storage Server Settings screen)
are also included in a backup if Backup and Archive Digital Video Files is selected in the
Configure/Preferences/System screen. Video stored elsewhere cannot be backed up.
It is absolutely essential that backups are taken regularly. The recommendation is that the Timed
Backup feature in the Tools/Backup screen is enabled, with the backup time set to 04:00. This will
give enough time for processes that occur at midnight to be completed, and for any remote sites to
dial-in with the previous day's data. The backup will then have a complete record of the activity up to
the previous day. It is best to avoid a backup time of 02:00, otherwise confusion may arise when the
time is advanced or retarded according to the daylight-saving dates.
Note that when a backup is carried out to tape, there may be a delay before the tape drive is activated.
During this period, the necessary data is being extracted from the databases. The time taken depends
on the size of the databases.
2-2
Business Edition Software Installation Manual: Installing and Using the Backup and Archive Software
2. Complete the dialog, as described on page 4-5. Deselecting both options makes the
NovaBACKUP software unavailable to the Tools/Backup and Tools/Archive screens.
3. Click OK and follow any prompts.
Business Edition Software Installation Manual: Installing and Using the Backup and Archive Software
2-3
ReAssignPerms.exe
This program removes the existing user accounts from the databases and
re-adds them according to the new settings. The "AddPermissions.Log"
and "RemovePermissions.Log" log files are produced in the "Security
Management System\Scripts\DBA\Output" folder.
11. If the log files showed no errors, the server can be re-started and is ready for use.
2-4
Business Edition Software Installation Manual: Installing and Using the Backup and Archive Software
3 Chapter 3:
Introduction
In most cases, installation of the SMS software is extremely straightforward and requires selection of
the default settings. This chapter explains the normal installation of the SMS software, which covers
around 90% of cases. Follow these instructions if you want to install:
The SMS software on a Windows Workgroup network using standard database security.
Please refer to Chapter 4 if the installation does not correspond to one of the above types, or if you
require full details of the installation prompts, including the prompts needed for installations that
require NovaBACKUP, smart card readers, Data Connect (import\export) module or a Pelco DVR.
Server Installation
Note: Connect the USB sentinels only when prompted during the installation procedure.
To install the SMS server software:
1. Log in with Administrator privileges at the SMS server.
2. Insert the installation CD and click the option to install the software.
3. Follow the prompts, selecting the defaults in all cases where provided.
4. If purchased, install the optional Video Management software. Refer to page E-1 for further
details.
3-1
2. When prompted, log into the SMS software. The default username and password for the installer
are "installer" and "install" respectively.
3-2
4 Chapter 4:
Introduction
This chapter gives full details of how to install the SMS software. Use this chapter only if you have
unusual installation requirements. In most cases, the Quick Install Instructions given in Chapter 3
provide sufficient information to install the SMS software.
Overview of Installing the SMS Software
1. Install the SMS software on the server (see the next section).
2. If purchased, install the optional Video Management software (page E-1).
3. If required, install the relevant Language Pack (page 4-8).
4. For client\server systems, install the SMS client software on the relevant client PCs (page 4-9).
If you are using USB sentinels, do not connect them yet, as driver installation may fail if you
connect them now. You are prompted when to connect them (page 4-7).
4-1
Click this
3. Welcome If Microsoft SQL Server Desktop Edition (MSDE) is not already installed, the
following is displayed:
4. Software License Agreement Read the license agreement, and click Yes if you agree.
5. Setup Type Choose Typical or Custom:
If you choose Custom, you will have complete control over system configuration. Choosing
Typical will cause defaults to be used for some settings. Choose Custom if you are using
4-2
7. SMS Application Folder (Custom only) Select the folder in which to install the SMS software:
8. User Account Configuration (Typical and Custom) The settings in this dialog depend on the
system and network type, as described below.
Workgrouped network:
If standard (mixed-mode) authentication (page B-3) is to be used, select whether you want
all Windows accounts on this machine to be able to use the SMS client software, or only a
specific user. If you specify an account, it must already exist (administrator privileges are
not needed). The SMS shortcut and the ACSUsers group privileges are assigned to all
users/the selected user.
If Windows authentication is to be used (page B-3), all Windows accounts used to operate
the SMS software at clients must also exist on the server, and each account must have
ASCUsers permissions at the server and at the client. At the prompt, specify one account
using This User. This will assign the account to the ACSUsers group on the server. After
installation, log on at the server and assign all other accounts that are to be used to operate
the SMS client software to the ACSUsers group.
Domain network:
Use This User to specify the name of the Windows account that will be used to operate the
SMS client software at the server. The name should be entered in the format <Domain
Name>\<User> (e.g. Security\Alan). This installs the ACSUsers group on the specified
4-3
Note: Do not use the built-in System account if Windows authentication or Pelco DVRs are to be
used. If you specify a named account, the installation software will assign the account to the
ACSUsers and ACSAdmin groups, and to the local Administrators account.
10. Enter text (Custom only) If you have been supplied with a facility/customer code to be encoded
on your company's cards, enter it now. If you have not been supplied with a customer code, use
the default of 999999.
11. Your Computer Configuration (Custom only) Select the required options:
Run System Timed Commands on Power Up This option determines what happens to
scheduled commands stored on the server if it has been shut down, then restarted (e.g. after a
power cut). If you select this option, any overdue scheduled commands stored on the server
are actioned when the SMS services are restarted. The server stores scheduled commands if,
for example, there is insufficient memory in a node or if the timed command relates to a
reader, monitor, auxiliary output group or CCTV switcher unit.
Install Default Card Block This option is relevant only if the access cards to be used do not
have an encoded customer code. In these cases, the Configure/Card Blocks screen must be
used to define the ranges of cards being used. Selecting this option causes the Configure/Card
Blocks screen to include default card block definitions (although you may want to review
these during system configuration).
4-4
Backup to Tape Selecting this option enables data to be backed up and archived to a SCSI tape
drive using NovaBACKUP. The tape device must be connected to the server.
Backup to Disk Selecting this option enables data to be backed up and archived to a selected
folder on a disk using NovaBACKUP.
Backup Folder Click the Browse button, then select the backup folder. A UNC pathname must
be used (e.g. \\SMSServer\backups), which is typically to a folder on a different computer, but
can be to a folder on the same machine that you are currently using.
Note: You can change the backup/archive configuration settings after software installation by
using the Backup Configuration Utility (see page 2-3).
13. Data Import Configuration (Custom only) Select the appropriate option for the Tools/Data
Import screen to import card data:
Note: You will also need to install the Data
Connect chargeable option to use Data
Import or Data Export.
4-5
You can choose to disable data export, export into an SQL Server database, or export to a text file
for the transfer of card details from one system to another (the SMS software must be the same
version on both systems).
15. Smart Card Configuration (Custom only) If a GEMPLUS, Cardman 5121 or Mifare Pegoda
encoder is to be used at the client (for smart card encoding), select it next. The setting is irrelevant
if another type of encoder is being used.
Note: If a driver has been installed for a contact smart-card
reader/encoder by Windows plug-and-play, it must be disabled. After
installation, select Control Panel (Performance and
Maintenance)/System/Hardware tab/Device Manager. If "Smart
Card Encoder" is displayed, right-click on it and select Disable. This
is not necessary for a contactless reader/encoder. Switch off then
restart the PC (restarting without switching off is not sufficient).
If a Fargo HDP600 printer/encoder is to be used, choose GEMPLUS
Contactless.
16. Start Copying Files (Typical and Custom) Select Next to begin installation.
17. If disk(s) have been supplied for chargeable options (e.g. for smart card encoding and other
features), you can install them now:
Insert the disk, then select Yes. On completion,
you are given the opportunity to install another
set of chargeable options from another disk.
Mark the final options disk inserted as "Final
Options disk", and all others as "Do not
reinstall".
Note:
If it becomes necessary to reinstall the SMS software (e.g. due to a fault with the computer),
use only the final options disk that was installed. Failure to do this may result in some
chargeable options not being available.
You can install chargeable options that have been purchased after the main product has been
installed by inserting the diskette into the drive at the server, selecting Run from the Start
menu, then entering <drive>:options. You will then need to restart SMS Services and SMS
Transaction Service using the Security Management System Service Monitor in the System
Tray, and you will need to restart the SMS software at any clients that use the chargeable
options.
18. While you are waiting for the databases to install, remove the options disk. Installation can take
several minutes.
4-6
If this is displayed, you can obtain the ID by calling one of the telephone numbers shown next.
Write the ID on the CD case and on the base sentinel. You must quote the name and address of the
end user, and the product part no. and serial no. on the CD/sentinel to obtain the correct
registration ID. Contact numbers are also given on our Web site at http://www.amagaccess.com.
For installers in Continental America call: 1-800-889-9138 (6am to 5pm, Monday to Friday,
Pacific Standard Time).
Outside Continental America call: 44 1684 277257 (9am to 4pm, Monday to Friday,
Greenwich Mean Time).
2. After a short while, you should see that all the services have "Started". If the services have not
started, restart your computer. If you need to remove the Services Monitor for security reasons,
refer to page 6-2.
4-7
4-8
The client software is already installed on the SMS server. You can install the client software
on other machines using the separate client install CD, if you wish.
Click this.
If you choose Custom, you will have complete control over system configuration. Choosing
Typical will cause defaults to be used for some settings. Choose Custom if you are using
Windows authentication, Pelco DVRs or smart card readers.
6. SMS Application Folder (Custom only) Select the folder in which to install the client software:
4-9
Workgrouped network:
Select whether you want all Windows users of this machine to be able to use the SMS client
software, or only a specific user. If you specify an account, it must already exist (administrator
privileges are not needed). The selected user(s) are assigned the SMS shortcut and the
ACSUsers group privileges.
Domain network:
You should use only the This User field. (Selecting All Users assigns the SMS shortcut to all
users of the machine, but will not attempt to assign any domain users to the ACSUsers group.)
If you include the domain name (e.g. Security\John), the ACSUsers group is installed on the
domain and the domain user is assigned to that group (providing the user is already registered
on the domain).
If a name is specified without the domain prefix (e.g. MyName), the ACSUsers group is
installed on the local machine only, and the user is assigned to that group. You should use this
notation only if you do not want to use domain-level privileges for Windows authentication.
9. Services Account Configuration (Custom only) Specify the Windows account that will be used
to run the SMS services. You can use the built-in System account, or an account of your choice
(which must already exist):
Note: If Windows authentication or Pelco DVRs are to be used, select Use this account and make
sure that this account is the same as defined for the SMS services at the server (page 4-4).
4-10
Note: Do not install both Cieffe and Pelco DVRs. Installation for both of these at the same time is
not supported. You cannot select both Verint LVM and Verint Nextiva.
11. NICE API Installation (Typical and Custom) If you selected NICE, you are prompted to
confirm or choose the folder in which to install the NICE API (if it is not already installed).
12. Your Computer Configuration (Custom only) Select the required options:
Remove access to Windows Desktop If this is selected, the SMS client software starts
automatically when Windows starts and no desktop will appear.
Install the SMS Services Monitor Choose whether or not to install the Security Management
System Service Monitor at the client. This allows the status of SMS services to be monitored,
stopped and started.
Add ENVS 169.254.x.x IP route Select this option if ENVS devices are to be used and the
network has no DHCP server. The option adds the specified address to the routing table,
which enables the Discover option in the Install/Digital Video/ENVS/Video Server screen to
be used to discover unconfigured ENVS devices on the network. Once an ENVS has been
discovered, the device's required IP address and other configuration settings can be changed.
13. Smart Card Configuration (Custom only) If a GEMPLUS, Cardman 5121 or Mifare Pegoda
encoder is to be used at the client (for smart card encoding), select it next. The setting is irrelevant
if another type of encoder is being used.
Note: If a driver has been installed for a contact smart-card
reader/encoder by Windows plug-and-play, it must be disabled. After
installation, select Control Panel (Performance and
Maintenance)/System/Hardware tab/Device Manager. If "Smart
Card Encoder" is displayed, right-click on it and select Disable. This
is not necessary for a contactless reader/encoder. Switch off then
restart the PC (restarting without switching off is not sufficient).
If a Fargo HDP600 printer/encoder is to be used, choose GEMPLUS
Contactless.
14. Start Copying Files (Typical and Custom) Click Next to begin installation.
Business Edition Software Installation Manual: Advanced SMS Installation
4-11
3. Log into the SMS software using one of the user names described below.
Default Login User Names and Passwords
The following default login names and passwords are provided. The engineer name and password are
fixed, but for all others, you should ensure that they are changed as soon as possible.
Name
Password
Permissions Group
GUARD
GUARD
Guard Permissions
ADMINISTRATOR
ADMINISTRATOR
Administrator Permissions
MANAGER
MANAGER
INSTALLER
INSTALL
Installer Permissions
ENGINEER
INCOM
Engineer Permissions
Engineer Logins
An engineer can log in only if permitted, as specified in the Configure/Preferences/System screen. The
special engineer login disk must be inserted in the floppy-disk drive during the login process. In
addition to having access to the Install options, an engineer can clear all alarms from the currently
logged-in machine (View/Alarms).
Tools/Set Password is not available to engineers.
You can create an engineer disk by inserting a blank floppy disk in the drive and doubleclicking on Engidisk.exe, which is on the SMS install CD (use the Windows Explorer Search
option to find the file on the CD).
Command-Line Logons
It is possible to start and automatically log on to the SMS Software by specifying the username and
password in the Windows command line. This feature can be useful to allow casual users of the
Security Management System to log on easily (e.g. for visitor enrollment).
4-12
4-13
4-14
5 Chapter 5:
Post-Installation Tasks
This chapter describes tasks that you may need to carry out after installing the SMS software,
depending on the hardware installed and the customer's requirements.
5-1
5. In the HyperTerminal screen, recall the active profile, then send the specified initialization string
to the local/remote modem. Precede the initialization string with "AT" and finish by pressing the
Enter key; for example, ATQVXS0=2&M&N6&R1&W<Enter>.
The commands used to recall the active profile and set up the initialization string vary between
modem types. The following pages give some examples. It may be necessary to modify these
commands for other manufacturers or when different types of modem are used.
5-2
The initialization string (excluding "AT") also needs to be entered in the Install/Chains/Dial-Up
screen. Note that the initialization string for a dial-in modem is sent to the modem only when the
SMS software is started. Also, the maximum length that should be entered into the Remote
initialization String field should not exceed 21 characters. The field will allow more characters
than this to be entered, which allows for easier editing. Entering more characters than the
maximums stated may cause the remote node to malfunction.
In remote chains, the node with the lowest address (set by switches in the node) must be
closest to the modem. Nodes start from address 1.
The node can be set to a baud rate of 38K4. Analogue modems may not support this connection
speed. Therefore, 38K4 should not be used in a dial-up chain configuration.
5-3
Local
Modem
Remote
Modem
Description
off/up
on/down
on/down
on/down
on/down
on/down
on/down
on/down
off/up
off/up
off/up
off/up
off/up
off/up
on/down
on/down
With each modem recall the factory default settings and write them to the active profile,
AT&F1&W0<Enter>.
Remote modem initialization string:
QVXS0=2&M&N6&R1&W<Enter>
Local modem initialization string:
QVXS0=1&M&N6&W<Enter>
Where:
Q0 enables the modem to return result codes.
V0 displays the result codes as numbers.
S0=2 sets the modem to answer on the second ring.
X0 provides basic call progress result codes.
&M0 disables error control (having this enabled can cause significant delays between local and
remote).
&N6 sets connect speed to 9600 baud. To communicate at 1200 baud the &Nn register should be
changed to &N2.
&R1 modem ignores RTS (remote modem only).
5-4
5-5
Where:
Q0 enables the modem to return result codes.
V0 displays the result codes as numbers.
X0 provides basic call progress result codes.
S0=2 sets the modem to answer on the second ring.
E0 causes characters not to be echoed.
&Q6 sets the modem for automatic speed buffering (optionally &Q0 - async mode). (The default
&Q5 error-correction mode can cause complications in detecting the carrier; for this reason &Q6
should be used instead.)
&D0 ignore the DTR signal (remote modem only).
&D2 monitor the DTR signal (local modem only).
&W0 causes the current configuration to be written to profile 0
The above entries can then be verified by using the AT&V command.
5-6
Internet Explorer 6 or 7.
A working Internet Service Provider (ISP) dial-up/network connection (and account). If a modem
is to be used, it must be configured to autodial on the account used for the SMS services on the
server and the user account on the client.
Note that ISPs usually allow only outgoing mail through their own SMTP servers when using their
own connection accounts.
Installation at the Server
The server is used to send SMTP email alarms:
1. Log on to windows using the SMS services account on the server.
2. If using a modem, open Control Panel/Internet Options. Select the Connections tab.
3. Ensure that Always dial my default connection is selected.
4. If using a LAN to connect to your ISP, ensure that your machine/network is configured for mail to
be sent automatically by the server using the SMS services account.
Configuration at the Client Machines
On an SMS client:
1. In the Install/Alarm Routing screen, configure an alarms routing to the client E-Mail Alarms.
2. In the Admin/Alarm/Definitions screen, choose an alarm type, then open a device definition for
the alarm you wish to send via SMTP email.
3. In the Admin/Alarm/Definitions screen, choose the Email tab, and select SMTP as the Mail
Type.
4. Enter the SMTP Server address (usually of the format: username@ispname.com). This address
must be allowed to send emails by your ISP. If you wish to confirm the validity of this server
(using your current connection), click Check.
5. Enter the Mail From Address (the account displayed as the sender in any received email alarms).
6. Enter the Mail Alarm to address (any valid email address to send the email alarms to).
Validate the entered details by pressing the Test button. This will confirm the SMTP Server and
Mail alarm to addresses by attempting to send a test alarm to the account specified. If successful,
the details will be underlined and a test email should now be awaiting collection in the recipient's
email account (specified in Mail alarm to).
7. Click OK to save the details.
5-7
5-8
6 Chapter 6:
This chapter describes how to remove the software and databases, if it ever becomes necessary to do
so (e.g. when a computer is replaced).
You must log in as an Administrator to remove the software.
6-1
6-2
MainPath=\\SERVER\RootOnServer\
Program Files\Access
Control System\
MicronodeSupport=0
AIQ=1
DataImportEnabled=0
This server-only parameter specifies how the Data Import facility was
set up during software installation: 0 = Data Import disabled; 1 =
Data Import uses SQL Server database; 2 = Data Import uses text
(ASCII) database.
DataExportEnabled=0
This server-only parameter specifies how the Data Export facility was
set up during software installation: 0 = Data Export disabled; 1 =
Data Export uses SQL Server database; 3 = export to another system
(2 is not used).
DataExportAfterImport=1
ShowTimeZoneCode=0
Setting this parameter to 1 will cause all reports and alarms displayed
at the PC to be displayed with a 3-letter time zone code (e.g. "10:13
GMT") and causes the Time Zone field to be displayed in the Dial-Up
Chain and LAN Chain Definition screens. The default of 0 prevents
the time zone from being displayed.
TimeZoneCode=
This parameter specifies the 3-letter time zone code for the computer.
You can set TimeZoneCode to any 3-letter code. If TimeZoneCode is
blank (the default), the PC's own setting is used (e.g. "GMT"). Any
alarms and other transactions generated from hardwired chains
connected to this computer are appended with the specified time zone
code. Dial-Up and LAN chains use this setting as the default value for
the Time Zone field, which can be changed as required.
NoLeadingZerosOnBadge=0
Business Edition Software Installation Manual: About the .ini File Settings
A-1
Multimax.ini Settings
ImportExportAllPersonalData=0
DeleteMSMQs=0
DCOMRouter=0
BadgePrinter1=
LocalPath=C:\Program Files\
Security Management System\
ServerName=SMSServer
This is the name of the computer on which the databases are installed.
CTQ=1
Video=DX
ShowPortEncryption=0
DVMTimeout=30
Specifies the maximum period of time (in seconds) that the SMS
software will wait for a video recording to be retrieved from a digital
video recorder. A recording that takes longer than this period to
retrieve is seen as a timeout error.
NCCT=600
FRCustCode=
AllowForceInitialisation=1
magicardprinter=
datacardprinter=
fargoprinter=
CommsReceiverDateTimeSentPeriodMins= This determines the period between date and time updates at a
communications receiver. The receiver's date and time are
synchronized with the date and time at the SMS server. Set to 0 to
disable date and time updating (default is 60).
DefaultCardSearchIndex=
DefaultCardStatusIndex=
A-2
Business Edition Software Installation Manual: About the .ini File Settings
Multimax.ini Settings
DefaultVisitorSearchIndex=
DefaultVisitorStatusIndex=
ActivityAndSystemReverseOrder=0
CheckGrantedAccessCondCommand=1
When this is set to 1 (the default), the SMS software checks whether
each grant access transaction received is used in the "when" part of a
trigger command. If grant access is not required to activate trigger
commands, performance benefits are achieved by disabling this
feature (i.e. setting to 0).
UniqueOfficial=0
BACnetAlarmServerMode=2
BACnetAlarmServerStyle=769
BACnetAlarmServerID=2002
BACnetTabsEnabled=0
These are settings for the Building Control Module. Refer to the
Building Control Installation and User Guide.
DefaultConditionalCommandSearchIndex=0
Used to store the Select By Status setting in the Trigger
Commands Selection screen.
DefaultTimedCommandSearchIndex=0
UnlimitedFacilityCodes=0
[Scheduler]
DHMP=1
NSP=1
DLP=1
DTA=1
RSSPUP=0
[Comms]
DoNotLogEmptyAlarms=1
DoNotLogEmptyEvents=1
If this is set to 1, it filters out the logging of "no alarm" messages from
nodes attached to the PC, i.e. alarm messages will be logged to the
Comms Status window only if an alarm has been generated. This
parameter filters only those messages at the PC on which this
parameter is set.
If this is set to 1, it filters out the logging of "no event" messages from
nodes attached to the PC, i.e. event messages will be logged to the
Comms Status window only if an event has been generated. This
parameter filters only those messages at the PC on which this is set.
Business Edition Software Installation Manual: About the .ini File Settings
A-3
Multimax.ini Settings
DoNotLogClocks=1
ViewAllLANAlarms=1
FilterToFile=1
FactoryInitialiseModem=&F0
This parameter specifies the string that the SMS software uses to reset
the modem to the factory default settings. The string is used when the
SMS software starts the modem (see "Modem Commands", next).
Hayes usually use &F0, and US Robotics use &F1.
ModemSoftwareResetString=ATZ0
This parameter specifies the string used at the very end of the
command to disconnect a call (see "Modem Commands", next). The
string is used only if DTRControlMode is not set to 3.
IssueInstrHostinit=1
DTRControlMode=1
This parameter specifies the DTR control mode that is being used by
the modem, which affects the string used to disconnect a call (see
"Modem Commands", next). The number used must be the same as the
number used in HostModemDTRControl (e.g. if
HostModemDTRControl is 1, DTRControlMode must be 1). Supported
values are 0, 1, 2 and 3.
HostModemDTRControl=&D1
StoreModemSettings=&W0&Y0
This specifies the string that is used to store and recall the modem's
configuration settings. The string is used when the SMS software
starts the modem (see "Modem Commands", next).
Modem Commands
Command issued by SMS software to start the modem (command issued when SMS software starts):
+++ATH AT{FactoryInitialiseModem} AT{Initialization String from SMS Screen}{HostModemDTRControl} AT{StoreModemSettings}
If DTRControlMode = 0
If DTRControlMode = 1, 2 or 3
A-4
If DTRControlMode = 0
If DTRControlMode = 1 or 2
If DTRControlMode = 3
Business Edition Software Installation Manual: About the .ini File Settings
Multimax.ini Settings
[Custom]
PhoneNumberFormat=99999999999999999999
RemoteIPAddressFormat=999-999-999-999
File1=COM2
File2=COM1
[Shell]
ClearNetworkTable=0
[Transaction Service]
TimeZoneCode=
Specifies the time zone code of the transaction service. This parameter
should be set to the same value as the parameter with the same name
in the [SupportService] section.
[SupportService]
TimeZoneCode=
Specifies the time zone code of the support service. This parameter
should be set to the same value as the parameter with the same name
in the [TransactionService] section.
[Control]
[SmartCard]
EncoderType=2
This specifies the type of encoder used when encoding smart cards
that will not hold fingerprint data (the setting is irrelevant for cards
encoded using an S81x fingerprint or Bioscrypt fingerprint encoder).
-1 = None; 2 = GemPlus contactless; 3 = GemPlus contact; 4 =
Pegoda (Contactless DESFire); 5 = Cardman 5121.
UserPINEncoding=0
Reflects the last state of the User PIN Active option in the Encode a
Smart Card screen; 1=set; 0=unset.
DESFireEncoding=0
Reflects the last state of the DES Fire Encoding option in the Encode
a Smart Card screen; 1=set; 0=unset
[DXvideo]
This section records the settings made in the dxconfig utility (see page
D-2) at the client. This section is followed by a separate section for
each video camera.
Business Edition Software Installation Manual: About the .ini File Settings
A-5
Multimax.ini Settings
[Cropping]
FaceCropping=0
FaceLeft=67
FaceRight=228
FaceTop=104
FaceBottom=318
SigCropping=0
SigLeft=61
SigRight=379
SigTop=121
SigBottom=280
[Idscan]
IDDataFile=C:\cardscan\info.txt
Specifies the location of the idScan output file. This must be the same
as set up in the License text export tab in the idScan Scanner
Configuration dialog.
ImageDirectory=C:\cardscan
Specifies the location of the idScan image folder. This must be the
same as set up in the Automation tab(File naming and type) in the
idScan Scanner Configuration dialog.
IDNumber=1
For this and the remaining entries, specify the id of the SMS personal
data title to map to the scanned data item.
LicenseNumber=2
Name=3
Address=4
City=5
State=6
Zip=7
IssueDate=8
ExpiryDate=9
BirthDate=10
Sex=11
LicenseClass=12
SocialSecurity=13
MiddleName=14
NameSuffix=15
[GraphicsAlarmView]
Treewidth=180
[AppSize]
[BadgeDesign]
CustomColours=
[Graphics]
GraphicsNameEqualsFileName=0
[G4TDigitalVideo]
Matrix.DisableLoadLastView=0
A-6
Business Edition Software Installation Manual: About the .ini File Settings
A user group named ACSUsers. This contains the privileges necessary for a user to run the SMS
software. The following rights are assigned: access this computer from the network; bypass
traverse checking; log on locally; shut down the system.
A user group named ACSAdmin. This user group has the standard ACSUsers group rights, plus
full MSDE administrative rights.
A user group named ACSGuest. This group gives read-only privileges to the transaction
database. It enables Windows users to run third-party applications, such as reporting applications,
which need to read the contents of the database. Assigning this group to an account does not
enable the account to log into the SMS software.
The SMS user accounts. The Windows account of any user who needs to use the SMS client
software must be assigned to the ACSUsers group. This is achieved through the "All Users/This
User" prompt displayed during software installation:
Note: Users can also be assigned to the ACSUsers group after installation (see page B-3).
For further information, see pages 4-3 (server installation) and 4-10 (for client installation).
B-1
An account for the SMS services. During the installation of the SMS software at the server and at
clients, you are prompted for the name of a Windows account in which to run the SMS services.
You can use the built-in local System account, or an account of your choice (which must already
exist):
Note: The built-in System account must not be used if Windows authentication (across PCs) or
Pelco DVRs are to be used.
If you specify an account, it is recommended that you use the same account at the server and
clients. If you are using Windows workgroup authentication, the account must be the same at the
server and clients.
The installation software assigns the account to the ACSUsers and ACSAdmin groups, and to the
local Administrators account.
An account for digital video (if used). During the installation of the optional Video Management
software, you specify the account to be used for ENVS communications and video archiving. You
can choose an existing account, or specify a new account (which will be created for you). This
account should have simple user rights; for security reasons, it should not be an administrator or a
member of ACSUsers, ACSAdmin or ACSGuest.
B-2
Authentication
By default, the SMS software uses mixed-mode (Windows and SQL) authentication to the SMS
database, which makes it easy to set up a networked system. However, some high-security
establishments prefer to use Windows-only authentication to provide a higher level of protection.
With mixed-mode authentication, if a client cannot gain access to the SMS database through normal
Windows authentication, SQL authentication is used instead. In a workgrouped environment,
Windows authentication requires that the same Windows accounts and passwords used by SMS users
on client machines also exist on the SMS server. However, with mixed-mode authentication, this is
not necessary.
The choice of mixed-mode or Windows authentication can affect the choices made in the User
Account Configuration (page 4-3) and Services Account Configuration (page 4-4) dialogs during
software installation at both the server and clients.
Note: With a standalone machine, the choice of mixed-mode or Windows-only authentication is not
relevant, and the default mixed-mode authentication can be used.
Changing the Authentication Mode
By default, the SMS software uses mixed-mode authentication. If you want to change to Windowsonly authentication, please contact Product Support.
B-3
B-4
This appendix describes how to set up the printer drivers for badge printers.
C-1
C-2
C-3
C-4
Magicard Tango
Magicard Tango
To install a Magicard Tango printer:
1. Download the driver (e.g. from www.ultramagicard.com).
Note: The following procedure is for driver version 3.00. Later drivers may also operate correctly
with the SMS Software, but these have not been tested.
2. Double-click on the downloaded exe file and follow the prompts.
3. Double-click on the setup.exe file and follow the prompts.
4. After installation, open the Printer Preferences (Start/Printers and Faxes for Windows XP),
and set the following:
Choose Hopper.
In the Advanced Options,
choose Rio/Tango Edge to
Edge, otherwise a printed
badge may not be a true
reflection of the badge design.
Choose No Flip.
C-5
4. You will see the Select Class printer selected in the Add Printer Wizard. Click Next and follow
the prompts.
5. Restart the computer. If you see the Hardware Update Wizard, choose Install the Software
Automatically (Recommended), then Next. Choose Don't prompt me again to install this
software and follow the prompts.
C-6
Any client at which Video Capturing is to be used (for the capture of card holder pictures and
signatures to be printed on a badge) must be fitted with a card that supports DirectX 9 or later.
Card Setup
If the video capture card is being used in a computer with an integrated display adapter, then
this adapter should be disabled on the motherboard, if possible. See the computer
manufacturer's literature for guidance.
Visual effects such as Enable Pointer Shadow in the mouse Control Panel properties must
be switched off.
D-1
2. Select the video camera that you want to use for Video Imaging from the Capture Device menu.
You should see the video image in the dialog.
3. If necessary, adjust the video settings using the options displayed by the Format and Source
buttons.
4. Select OK. The selected camera and settings are stored in the multimax.ini file.
5. Restart the SMS software at the client if the software was running while you configured the
DirectX settings or changed the ini file.
D-2
Security Management System Software Installation Manual: Digital Video Management Software
E-1
7. Digital Video Storage Location (server only) The following dialog is relevant only if the SMS
server is also to be used as a Video Storage server. It enables you to specify the folder in which to
store video recordings. You can choose to save recordings on the current machine, or on a
different machine (Remote Storage). If you choose Remote Storage, you need to specify an
existing Windows account that the storage server can use to log in to the remote machine. The
account must have simple user rights and its password should not be able to expire.
To ensure availability of space, it is recommended that you select a folder on a partition dedicated to
storing the video recordings. If possible, you should not, for example, choose a folder on the partition
used by the Windows paging file (normally c:). If this is unavoidable, open the Configure/Digital
Video/Storage Server Settings screen after installation, and ensure that no more than 80% of the
partition is reserved for recordings.
8. ENVS User Account Configuration (server only) Enter the username and password of a local
Windows user account to use for ENVS communications. If the username does not already exist,
it will be created for you automatically. The account will also be used to archive video, if
applicable. If you use an existing account, it must have simple user rights.
E-2
Security Management System Software Installation Manual: Digital Video Management Software
Note: Do not install both Cieffe and Pelco DVRs. Installation for both of these at the same time is
not supported. You cannot select both Verint LVM and Verint Nextiva.
10. NICE API Installation If you selected NICE, you are prompted to confirm or choose the folder
in which to install the NICE API (if it is not already installed).
11. Start Copying Files Click Next to begin installation.
12. When installing at the SMS server, a dialog displays an activation request code and provides space
for an activation code to activate the software, as shown next.
13. Go to the Web site to register, and enter the username and password provided. Under exceptional
circumstances if you do not have internet access, call the telephone number shown on the dialog.
You will be asked for the serial number and activation request code. In return, an activation code
will be given to you. Enter the activation code in the space provided, then click Register Now.
If you click Register Later, the activation code can be entered using the Install/Licensing/System
Licenses screen. The software will not be available until you have entered the activation code.
E-3
15. If the SMS client software has already been installed, insert the CD at each client to be used to
control or replay video from a DVR, repeating the procedure from step 3.
E-4
Security Management System Software Installation Manual: Digital Video Management Software
4. Click Install Video Storage Management, then Next at the Welcome screen.
5. Software License Agreement Read the license agreement, and click Yes if you agree.
6. Licensing Information Enter the serial number supplied with the CD. Each server you install
requires a different serial number.
7. Choose Destination Location If displayed, select the folder in which to install the software:
E-5
9. Digital Video Storage Location The following dialog enables you to specify the folder in
which to store video recordings. You can choose to save recordings on the current machine, or on
a different machine (Remote Storage). If you choose Remote Storage, you need to specify an
existing Windows account that the storage server can use to log in to the remote machine. The
account and its password should not be able to expire.
To ensure availability of space, it is recommended that you select a folder on a partition dedicated to
storing the video recordings. If possible, you should not, for example, choose a folder on the partition
used by the Windows paging file (normally c:). If this is unavoidable, open the Configure/Digital
Video/Storage Server Settings screen after installation, and ensure that no more than 80% of the
partition is reserved for recordings.
10. ENVS User Account Configuration Enter the username and password of a local Windows user
account to use for ENVS communications. If the username does not already exist, it will be
created for you automatically. The account will also be used to archive video, if applicable. If you
use an existing account, it must have simple user rights.
E-6
CCTVware ComServer - Used by the SMS software to notify the recorder to archive event
footage.
CCTVware PlaybackServer - Provides recorded video feedback for the SMS software.
CCTVware DataServer - Used by the SMS software to retrieve the camera names from the
Verint unit.
E-7
A Scanshell 800 optical character recognition card scanner, used with the idScan software, enables
data on driver licenses to be transferred to the Security Management System. The scanner and
software are available from Card Scanning Solutions (www.card-scanner.com).
The transfer process is extremely easy: you simply open a card holder or visitor record in the SMS
software, then insert the license card. The person's photograph and signature automatically populate
the appropriate areas in the card holder or visitor record. Personal data such as the person's license
number and address populate pre-defined personal data fields. Entries in the multimax.ini file
determine the mapping between the scanned data and the SMS personal data titles.
Business Edition Software Installation Manual: Scanshell 800 Card Scanner Installation and Setup
F-1
3. Select the Detect state checkbox near the top-right corner of the window.
4. Click the View scanner configuration button in the main window:
5. Set up the four tabs in the Scanner Configuration dialog as shown next.
F-2
Business Edition Software Installation Manual: Scanshell 800 Card Scanner Installation and Setup
Business Edition Software Installation Manual: Scanshell 800 Card Scanner Installation and Setup
F-3
2. Add IDScanOCR to the Windows startup folder, so that it starts automatically when you start the
computer. To do this:
a) Use Windows Explorer to select Documents and Settings\All Users\Start
Menu\Programs\Startup.
b) Select File\New\Shortcut.
c) Browse to select IDScanOCR.exe.
Scanning a Card
To scan a license card and transfer details to the SMS software:
1. Make sure that the idScan software is running.
2. Open a new or existing card holder or visitor record.
3. Insert the card face down into the scanner, top edge first. The card is scanned automatically.
Approximately 10 to 20 seconds later, the card details are displayed in the Card Holder or Visitor
screen.
If scan does not start, make sure that Paper auto detection is selected in the Automation tab of
the Scanner Configuration dialog.
F-4
Business Edition Software Installation Manual: Scanshell 800 Card Scanner Installation and Setup
Password
Install/Clients
Install/Client Ports
Install/Chains/Hardwired
Install/Chains/LAN
Install/Chain/Dial-Up
Install/Default Settings
Install/Companies
Install/Access Control/Node
Install/Access Control/Reader
Install/CCTV
Install/Digital Video
Configure/Facility/Customer Codes
Install/Alarm Routing
Install/Graphics
Configure/Graphics
Configure/Card Blocks
Tools/Encode Cards
Configure/Preferences
Tools/Backup
Permissions
Configure/Company Groups
Configure/User/Roles
Configure/User/Accounts
Access
Rights
Configure/Holiday
Admin/Times/Hours
Admin/Times/Time Codes
Admin/Group/Readers
Admin/Group/Floor/Output
Personal
Data
Identity/Personal Data/Settings
Identity/Personal Data/List
Badge
Formats
Tools/Badge Designer
Card
Details
Identity/Card Holders
Badge
Printing
Identity/Print Badges
The following screens should be set up in the order shown. This may be
your responsibility or the customer's.
Controls
Admin/Controls
Auxiliary
Groups
Admin/Group/Auxiliary Outputs
Monitor
Groups
Admin/Group/Monitor Points
Commands
Admin/Commands/Scheduled
Admin/Commands/Trigger
Configure/Area Occupancy
Alarm
Handling
Admin/Alarm/Instructions
Admin/Alarm/Comments
Admin/Alarm/Definitions
Admin/Alarm/Commands
Patrol
Tours
Admin/Patrol Tours
Reports
Configure/History
Configure/Muster
Set up predefined
reports.