SG L1-Bioscrypt (10.0)

System Galaxy Quick Guide
CONFIGURATION AND OPERATION
Bioscrypt 4G V-Flex(PROX)
SG 10|APR 2011
[4G V-Flex/V-PROX]
WIN XP
SystemGalaxyQuickGuideforBioscrypt/L1SetupandEnrollmentSystemGalaxyQuickGuide
System Galaxy
Quick Guide
BIOSCRYPT / L-1
Information in this document is subject to change without notice.

Therefore, no claims are made as to the accuracy or completeness of this document.
Galaxy Control Systems makes no claims on the requirements or limitations of
software or devices of 3rd Party Manufacturers. Every effort is made to include all
known requirements and capabilities as they relate to System Galaxy. Information
herein may not supersede requirements of 3rd party manufacturers.
Configuration &
Operation
VFlex4G,VPROX,Vers4.1.10
1st Edition Apr 2011

Revised July 2011
Copyright 2011 Galaxy Control Systems All rights reserved

No part of this document may be reproduced, copied, adapted, or transmitted, in
any form or by any means, electronic or mechanical, for any purpose, without the
express written consent of Galaxy Control Systems. Copyright protection claims
include all forms and matters of copyrighted material and information, including but
not limited to, material generated from the software programs, which are displayed
on the screen such as icons, look and feel, etc.
Trademarks
Microsoft, Windows, Windows NT, MSDN and SQL ServerTM are registered
trademarks of Microsoft Corporation in the U.S. and other countries. DbaMgr2k may
or may not be a registered trademark in the U.S. and other countries.
Bioscrypt is a trademark of Bioscrypt Inc.
Adobe, Acrobat are registered trademarks of Adobe Systems Inc.
Graphics and illustrations by Technical Writer.
Galaxy Control Systems

3 North Main Street
Walkersville MD 21793
www .galaxysys. com
Page2of40
TableofContents
1. INTRODUCTION TO THE BIOSCRYPT INTERFACE.................................................4

INFORMATION COVERED IN THIS MANUAL.......................................................................................4
TYPES OF BIOMETRIC CREDENTIALS SUPPORTED...........................................................................4
OVERVIEW OF GALAXY ENROLLMENT PROCESS ........................................................5
SYSTEM INTEGRATION VIA SHARED or LINKED SQL SERVERS ...........................................................5

HOW BIOMETRIC CREDENTIALS ARE MADE .....................................................................................5
HOW BIOMETRIC CREDENTIALS ARE STORED .................................................................................5
INTEGRATION REQUIREMENTS (order dependent) ...................................................6
2. SYSTEM INSTALLATION ............................................................................................7

INSTALL READER HARDWARE ........................................................................................................7
READER WIRING CHART ................................................................................................................7
INSTALL SYSTEM GALAXY v10.0 (or higher) .......................................................................................8
INSTALL SECURE ADMIN DATABASE SERVER ..................................................................................8
INSTALL SECURE ADMIN CLIENT ..................................................................................................13
3. REGISTER & CONFIGURE V-Flex (Prox) Device in Secure Admin ......................15

REGISTER L-1 READER IN SECURE ADMIN (SADB) ..........................................................................15
TCP/IP vs. USB ............................................................................................................................15
IF using TCP/IP to detect and register, follow the step 6 below:................................................................17
IF using USB to connect and register, follow the step 7 below:.................................................................18
To continue registering, follow the steps below:....................................................................................19
CONFIGURE L-1 DEVICE SETTINGS for V-FLEX (PROX) ....................................................................21
Configuring Device Mode: ...............................................................................................................22
Configuring Wiegand Format:...........................................................................................................23
CREATING CUSTOM 32-BIT WIEGAND FORMAT...............................................................................25
VIEW TEMPLATES IN L-1 READER .................................................................................................26
4. SYSTEM GALAXY CONFIGURATION ......................................................................27

REGISTER the L-1 READER IN SYSTEM GALAXY (SysGal database) ....................................................27
ENABLE BIOSCRYPT AS THE ENROLLMENT SYSTEM AT SG WORKSTATION......................................28
CONFIGURE THE READER PROPERTIES FOR AN L-1 READER IN SG .................................................29
5. ENROLLING & MANAGING TEMPLATES................................................................30

ENROLL FINGERPRINT [IDENTIFY MODE] IN CARDHOLDER SCREEN.................................................30
ENROLL CARD AND FINGERPRINT [VERIFY MODE] IN SG CARDHOLDER ...........................................32
SeetheAppendix(section6ofthisguide)formoreindicationsandmessagesassociatedwith
connecting,capturing,savingandloadingtemplates.LOADING ALL TEMPLATES UTILITY...................33
LOADING ALL TEMPLATES UTILITY................................................................................................34
6. APPENDIX: TROUBLESHOOTING ...........................................................................35

GALAXY MESSAGE LOGGING (Communication Control Window)...........................................................35
GALAXY USER MESSAGES - BY OPERATOR ACTION .......................................................................36
REGISTER READER with USB (private LAN/ not using DHCP) ...............................................................39
ADDING A LINKED SQL CONNECTION STRING TO SYSGAL...............................................................40
Page3of40
1. INTRODUCTION TO THE BIOSCRYPT INTERFACE

Forconvenience,thismanualincludesbasicsetupinSecureAdminforthe4GVFLEXPROXReadersoftware
thatisrequiredtointegratewithSystemGalaxy.ConsulttheBioscryptManualsforinstructionsonany
SECUREADMINfeaturesnotcoveredinthisdocument.
INFORMATION COVERED IN THIS MANUAL
Thismanualcoversthefollowing
Hardwarewiringfromthe4GVFLEXPROXreadertotheGalaxyaccesscontrolpanel
BasicinstallstepsforSecureAdminServer/Client(asexampleseeManufacturersGuideforindepth)
ConfigurationofsharedSQLServersettings
Registeringthe4GVFLEXPROXreaderwithintheSecureAdmin
Configuring4GVFLEXPROXdevicesReaderModeandWiegandSettingsinSecureAdmin
RegisteringandsettingSystemGalaxyforBiometricSupportusingL1Solutions
ConfiguringGalaxyreaderporttoworkwiththe4GVFLEXPROXreader
EnrollingcredentialsfromwithinSystemGalaxy
MassloadingtemplatestoareaderfromSystemGalaxy
TYPES OF BIOMETRIC CREDENTIALS SUPPORTED

SystemGalaxy10(SG10)integrateswiththeBioscryptL1VFlex4G,VPROXreaderasfollows:
CURRENTLYSUPPORTEDONWINDOWSXPONLY
READERMODE
IDENTIFY(1:N)
SECUREADMIN
CARDFORMAT
SYSTEMGALAXY
CARDFORMAT
Custom32bitWiegand(a)
GalaxyStandard
26bitpassthru
26bitWiegand
HIDCorporate1000
HIDCorporate1000
CREDENTIALS
fingeronly10KTemplates
VERIFY(1:1)
Proxcard+fingerindevice
500KTemplates
CardOnly(b)
Proxcardpassthrough
SameasVERIFYmode
(a)Custom32bitWiegandmustbemanuallycreatedinSecureAdmin(i.e.isnotpredefined);Note:thecodeisrequired
foridentificationinaccesscontrolpanelaphysicalcardisnotissued.
(b)CardOnlymode,meansthereaderusesVERIFYmode,butdisablesbiometricverificationforallusers.Youmust
enrollbothcardandfingerprintsforallusers.Biometricverificationisdisabledaftertemplatesareloadedtothereader.
Allcredentialsaresenttotheaccesscontrolpanelwithoutfingerverification.
Page4of40
OVERVIEW OF GALAXY ENROLLMENT PROCESS

FingerprintsmustbeenrolledfromSystemGalaxy.SGdoesnotpulltemplatesfromSADB.Card
andTemplatedataarestoredintheSysGaldatabase(i.e.notintheSADB).
SYSTEM INTEGRATION VIA SHARED or LINKED SQL SERVERS

SystemGalaxyusesLinkedorSharedSQLservertoSecureAdmin(SADB)connectiontopulltheListofL1
DevicesandIPAddressesforenrollingandmappingreaderstodoors.SystemGalaxywarnstheoperatorat
timeofloginthatbiometricfeaturesaredisabledifSQLDatabaseconnectioncannotbeestablished.
HOW BIOMETRIC CREDENTIALS ARE MADE

TheSystemGalaxycapturesthefingerprint/sandcardcodeandassignsaccessprivileges.Thecredentialis
automaticallyloadedtothereaderwhencardholderrecordissaved.
HOW BIOMETRIC CREDENTIALS ARE STORED

ThefingerprinttemplatesarealsostoredinblobformatintheSystemGalaxydatabase.
Page5of40
INTEGRATION REQUIREMENTS (order dependent)

1. System Galaxy & SecureAdmin Databases are both compatible with SQL Server 2005 or 2008
2. System Galaxy 10.0 server/database should be installed before the SecureAdmin Server.
3. SecureAdmin software 4.1.10 is only supported on Windows XP
4. SecureAdmin server / client 4.1.10 must be installed using the setup.exe - found in the Installers/L1 folder
on the Galaxy DVD (disk 1).
5. During the SecureAdmin server install, select DEFAULT CERTIFICATE.
6. Systems must be properly configured to support SQL Server connection:
a) For shared SQL Server Instance (default option): choose to install on existing SQL server. Supply
the SysGal database connection parameters when prompted by SecureAdmin install program.
b) For Linked Server: you can install SecureAdmin on separate servers and use a connection string to link
the databases. Insert the SQL connection path in SysGals SADB_PATH column of the
L1_SADB_INFO table. You must also enter a 1 in the L1_ENABLE column.
Stringexample:[server_name\instance_name].[database_name].[owner_name]
7. Each L-1 Reader must be registered via server in the SecureAdmin software before SG can connect.
a) Secure Registration is done with the USB Cable that comes with the reader.
WhentheDeviceDriverWizardopens,youmustbrowsetothe4gserialfolder(locatedon
theSecureAdminserverinProgramFiles\Bioscrypt\SA\SecureAdminServer\4gserial.
8.
9.
10.
11.
12.
13.
14.
15.
16.
17.
b) The reader must be configured for TCP/IP communication using valid IP settings for the same
broadcast domain as the Galaxy enrollment workstation.
In SecureAdmin, each reader must be configured for the correct card format (26bit Pass-thru, HID Corp
1000, and custom Galaxy 32bit Wiegand are supported).
You must enroll fingers from the System Galaxy cardholder screen.
Templates are stored in BLOB format in the Galaxy database.
System Galaxy 10.0 supports enrollment and interoperation using IDENTIFY (finger-only) and VERIFY
(prox+finger in reader) modes with the Base and Prox models of the V-flex and V-station. SG 10.0 does not
support Smart Card enrollment. SG 10.0 does not support PIN modes or memory expansion in the Vstation.
SG must be registered for Biometric Support (Corporate or Enterprise) in System Registration.
SG must have L-1 Solutions chosen as the biometric system in System Settings screen.
SG must have L-1 Solutions chosen for the reader technology, and the specific L-1 Reader Name must be
assigned to the door in the Reader Properties screen. Load Templates must be checked.
System Galaxy must be able to connect to the SADB when it starts up and operator signs in. If unable to
connect, the software displays a warning that the L1 Features will be disabled,
You can capture from 1 to 10 prints per card. Prints are captured in the Enrollment screen and held in
memory until the APPLY button is pressed in the main Cardholder screen.
Authorized templates are sent to each reader when the Cardholder APPLY button is pressed. Likewise,
templatesareremovedfromeachreaderwhentheAPPLYbuttonispressed.
Authorizedtemplatesmusthave(a)validloopprivileges,(b)validaccessgroup,and(c)the
SendTemplatesoptioncheckedintheCardholderscreen.
NOTICE:theLoadTemplatesoptionmustbecheckedinthereaderproperties.
18. The L1 Load Utility will bulk load all authorized templates on a per reader basis.
Page6of40
2. SYSTEM INSTALLATION
INSTALL READER HARDWARE

AlsoseetheBioscryptdocumentationforadditionalwiringinformation.
WiretheL1ReadertotheDPIboardintheSystemGalaxyaccesscontrolpanel(508ior600/635)
ConnecttheL1Readertothenetwork/LAN
READER WIRING CHART
1. Thereadercomeswithapowersupply.Seethemanufacturersdocumentationforhowtocontrol
powertothereader.
2. ThereadercomeswithaUSBserialcablethatcanbeusedtoregisterthereaderintotheSADB
3. Thereaderrequirescat5enetworkcable/connectiontotheLAN.Thisisrequiredinordertointegrate
thereaderwithSystemGalaxyenrollment.
4. Thereaderalsocomeswithapigtailforwiringtoanaccesscontrolpanel.
ThereaderdataandLEDlineswireasshowninthechartbelow.
L1Pigtail(colors)
600DPI(pinout)
508i(pincolor)
7WiegandLEDIn(Grey/Black)
LED(pin1)
LED(Brown)
12WiegandDOUT0(Green)
Data0(pin2)
Data0(Green)
14WiegandDOUT1(White)
Data1(pin5)
Data1(White)
16WGND(Black/White)
GND(pin4)
GND(Yellow)
NOTES:
TheL1readercanbesettouseDHCPenabledtoacquireanIPAddress.
YoumustregisterthereaderinSecureAdminbeforeyoucanuseit.Thisisdonefromthe
SecureAdminsoftwareafterthereaderisinstalledononline.
TheL1ReaderisnotsetupfromfactorytouseWIEGANDOUTPUTthisisdonethrough
SecureAdminsoftware.
YoucanenrollfingerprintsfromtheL1Readerfingersensor(noextrascannerneeded).The
readerthatisusedforenrollmentmustberegisteredandabletoconnecttotheclientviaUSB
orviaTCP/IP.
IMPORTANT:DonotusetheSecureAdmintoenrollusers;howeverthesefingersdonottransfer
fromtheSecureAdmindatabasetotheSystemGalaxydatabase.Whenmakingcredentialsand
capturingprints,youshoulduseSystemGalaxycardholderscreen.
Thereaderusedtocapturefingersdoesnothavetobeconnectedtoanaccesspanel,butitmust
beregistered,poweredon,andonlineviathecat5networkcable.
Ifyouenrollfromareaderthatisconnectedtoapanel,itwillcausethelockrelaytoactivate
(unlockdoor)eachtimeyouenrollorverifyprints.
Page7of40
INSTALL SYSTEM GALAXY v10.0 (or higher)

SystemGalaxymustbeinstalledusingtheGalSuiteinstallerwhichislocatedonDisk1.TheGalSuiteinstaller
isdesignedtoautorunwhenDisk1isinsertedintothediskdrive.
InserttheGalSuiteDisk1andruneachpartinsequentialorder.
1. InstallPart1oftheGalSuitefromDisk1(requiredtoinstallPrerequisitesComponents)
2. InstallPart2oftheGalSuite(requiredtoinstallSQLServer/Components&Database)
3. InstallPart3oftheGalSuite(requiredtoinstallSystemGalaxysoftware&utilities)
INSTALL SECURE ADMIN DATABASE SERVER

ThissectioncoversthebasicinstructionstoinstalltheSecureAdminDatabaseServer.
1) OntheGalSuiteDVDintheINSTALLERS\L1FOLDER
2) RuntheSETUPexe
3) clickServerInstallation
Page8of40
4) Acceptthelicenseagreementandadvancetothenextscreen
5) ChoosethedefaultinstallpathinprogramfilesfolderevenonWIN7
6) ConnecttoexistingSQLEngine.
a) Tousesharedserverinstance,(installingSECUREADMINonthesameserver/instanceasSysGal
database,choosetoinstallonselectedSQLServerandchoosethesameinstancethatSysGaluses.
ProvidetheAuthenticatedloginparameters.
Page9of40
b) IFYOUAREUSINGLINKEDSQLSERVER:youwillneedtoedittheL1_SADB_PATHtable.
OpenMSSQLManagementStudioandLoginwiththeSAloginandpassword
ExpandtheSysGaldatabaseandopentheL1_SADB_PATHtable.
Typethenumericvalue1intotheL1_ENABLEDcolumn(0disablestheconnectionstring)
TypetheconnectionstringintotheSADB_PATHcolumnusingcorrectsyntax.
SYNTAXEXAMPLE:[server_name\instance_name].[database_name].[owner_name]
Note:ifyouareusingaSQLscripttoinsertthepath,youdonotneedquotemarksaroundthe
number1toenablethepath,butyoudoneedsinglequotesaroundthepathsinceitisatextstring.
7) ChooseDEFAULTCERTIFICATE.
8) EntertheAdministrativeloginandpassword(rememberthislogin,youwillberequiredtoenteritto
signintotheClientsoftwarewhentheinstallationsarecomplete)
Page10of40
9) TheInstallWizardwillinstalltheSecureAdminServer.
Page11of40
10) AfterinstallingtheSystemGalaxyandSecureAdminservers,youmustenablereadandwriteprivileges
oftheSADBintheSQLServerengine.
a) OpenManagementStudioandlogin/connecttotheSystemGalaxyinstance
b) Attheinstancebranchlevel,chooseSECURITY>LOGINS
c) Rightclickgcs_clientloginnameandselectPROPERTIES
d) ChooseUSERMAPPINGSontheleftmenu
e) ChecktheSADBdatabaseintheupperwindow
f) thefollowingrolesmustbechecked/enabled:db_datawriter,db_datareader,db_backupoperator,
andpublic
g) clickOK
SystemGalaxypullstheIPparameters,serialnumber,groupanddevicenamesofeachL1Readerfromthe
SADB.Thisdataisusedformappingreaderstodoors,andconnectingtoreadersforenrollmentoffinger
templatesandcardcodes.
Page12of40
INSTALL SECURE ADMIN CLIENT

ThissectioncoversthebasicinstructionstoinstalltheSecureAdminClient.
1) Installtheclientsoftwareatthesameworkstationthatwillbeaenrollmentstation
2) Acceptthelicenseagreementandadvancetothenextscreen
3) ChoosethedefaultinstallpathinprogramfilesfolderevenonWIN7
Page13of40
4) ChoosehowtodisplayfingerprintimageandselectDEFAULTCERTIFICATEasyouadvancethroughthe
nextscreens.
5) CheckthedesktopICONasdesired
6) ExittheInstallWizardwhencompleted
Page14of40
3. REGISTER & CONFIGURE V-Flex (Prox) Device in Secure Admin

BeforeyoucanenrolltemplatesfromtheSystemGalaxysoftware,youmustproperlyregisterandconfigure
thereaderintheSecureAdmindatabase(SADB).OncetheSecureAdminconfigurationiscompleted,you
cansetupthereaderinSystemGalaxy.
Thissectioncovers:
RegisteringanL1ReaderinSADB
ConfiguringanL1Prox(VFlex,Prox)forVERIFYmode(Card+BiometricsinDevice)
ConfiguringanL1Prox(VFlex,Prox)forIDENTIFYmode
REGISTER L-1 READER IN SECURE ADMIN (SADB)

TCP/IP vs. USB
1) ApplypowertotheL1readerandconnectyourreadertothePCorLANtoregister
a) TCP/IPConnectthereadertothenetworkusingCat5ecable.Thereadershouldbeonthe
samebroadcastdomainastheSecureAdminServer/PC.
b) USBConnectthereadertothePCusingtheUSBcablethatisprovidedwiththereader).
IftheDeviceDriverWizardopens,youmustbrowsetothe4gserialfolder,whichislocatedonthe
SecureAdminserverinProgramFiles\Bioscrypt\SA\SecureAdminServer\4gserial.
2) Start/LogintheSecureAdminsoftware
Page15of40
3) TheClientsoftwarewillopenasfollowswhentheloginiscorrect:
4) Expand(open)theNETWORKmenubyclickingontheNetworkbuttonontheleftside
5) ChooseRegisterviaServer
Page16of40
IF using TCP/IP to detect and register, follow the step 6 below:

6) ChooseEthernetoption
a) CheckSearchAutomaticallytodetectallreadersonthebroadcastdomain.
NOTE:itisalternatelypossibletoenteraspecificIPAddressoranIPRangetosearchfor
devices.Ifyousearchbyspecificorrangeofaddressesyoushouldunchecktheautomatic
searchoption.
b) Click[SCAN],thedevicewillappearintheAvailableDeviceslistview.
NOTE:theDHCPoptionmightbeenabledfromthefactory.IfyoudonothaveaDHCP
server,orsimplycannotdetectthereaderusingTCP/IP,youcanusetheUSBcableto
connecttothedevice(seestep7todetectthedeviceviaUSBCable).
c) ClicktheReadericonintheRegistrationStatuscolumn(iconshowsayellowplussignifitisnot
registered).
d) AdvancetoStep8tocontinueregistrationinstructions.
Page17of40
IF using USB to connect and register, follow the step 7 below:

7) CHECKtheSerialConnection/ComPortoptionintheleftcorner
a) SettheBaudRatetoAuto.
b) Click[SCAN],andthedevicewillappearintheAvailableDeviceslistview.
c) ClicktheReadericonintheRegistrationStatuscolumn(iconshowsayellowplussignifitisnot
registered).
Page18of40
To continue registering, follow the steps below:

8) UNCHECKtheObtainIPfromDHCPifyoudonotintendtouseDHCPaddressing
9) IfyouareusingastaticIPAddressforthedevice,thensettheIPAddress,SubnetandGatewayas
requiredtooperateonyournetwork.Datashowninthescreenshotbelowisonlyanexample.
10) ClickNEXTtocontinue
11) CreateadescriptiveDeviceNameforthereader
12) AssignthereadertoaGroup
13) ClickREGISTER
Page19of40
14) ThedevicewillbeaddedtotheSecureAdmindatabase(SADB)
15) CLICKOKtoreturntotheNETWORKscreen.
ToensurethatDHCPissetproperly,gototheDeviceSettingspageandopenthe
Communicationstab.BesurethatDHCPissetupasneeded(UNCHECKEDisoff).
16) TheREADERICONwillnowshowayellowcheckmarktoindicateitisregistered.
Page20of40
CONFIGURE L-1 DEVICE SETTINGS for V-FLEX (PROX)

1) ExpandtheDEVICESETTINGSmenu(leftpanel)
2) DoubleclickonDeviceNetworkanddoubleclickonDefaultGroup(orthegroupnameyouused)
3) Doubleclickonthereadernamethatyoujustregisteredthiswillpopulatethetabbedsetupscreens
Page21of40
Configuring Device Mode:
4) selecttheBIOMETRICStab(besidetheGeneraltab)
5) chooseVERIFYorIDENTIFYasappropriatefortheDeviceMode
a) VERIFY(1:1)thisenablesthereadertouseaccesscardsincombinationwithfingerprints
b) IDENTIFY(1:N)thisenablesthereadertousefingerprintsonly(physicalcardnotissued/used).
NOTE:WhenusingIdentifymode,SystemGalaxywillstilladdauniquecardcodetothebiometric
credentialssothattheaccessrules(schedulesanddoorprivileges)canbeassignedtotheuser.
6) ClickAPPLYtosave.
NOTE:Othersettingsmaybeadjustedasneeded.YoumustconsulttheBioscryptmanualsconcerning
optionsthatarenotdiscussedinthisdocument.
Page22of40
Configuring Wiegand Format:
7) selecttheWIEGANDtabandsettheWiegandFormat:
a) IfusingVERIFYmode,choosePREDEFINEDoption
Settheformatto26BitPassThruforstandardproxcards;orHIDCorporate35bitsfor
Corp1000cards.
b) IfusingIDENTIFYmode,choosetheCUSTOMoption
SettheformattoGalaxy32bit.Youhavetocreatethe32bitformatmanually.
SeesectionaboutCreatingCustom32BitFormat.
Page23of40
8) enable(CHECK)theActivateWiegandInputoption
9) Enable(CHECK)theActivateWiegandOutputoptionandchooseAlways
10) ClickAPPLYtosavesettings
NOTE:intheWiegandOutputSettings(button)youmusthaveVerificationPassoptionsettoNONE.
Page24of40
CREATING CUSTOM 32-BIT WIEGAND FORMAT

YoumustcreateaCustom32bitWiegandformatifyouareusingIDENTIFYmode(fingerprintonly).
(1) clickthe[CUSTOMWIEGANDSETTINGS]button(bottomoftheWiegandscreen)
(2)
(3)
(4)
(5)
clicktheEDIT(pencilicon),toopentheWiegandFormatdialog
createanameandsetthefieldLength=32
intheWiegandIDgroup,setStart=0;setLength=32
clickAPPLYtosave(nowyoucanusethecustom32bitformatinstep(7b))
Page25of40
VIEW TEMPLATES IN L-1 READER

1) ExpandtheTEMPLATESmenu(leftpanel)
2) ChooseTemplates
3) expandDeviceNetworkbranch
4) expandtheDefaultGrouporthegroupyouthatassignedtoyourreader
5) Doubleclickthereadername;thelistoftemplateswillpopulatethelistviewthesearecurrently
storedinthereadermemory.
TIPtheREFRESHbuttonwillrenewthelist.
TIPtheyellowcheckmarkiconwillallowyoutoverifyaprintwhenyouclickit.
TIPtheTemplateIDfieldshowstheWiegandcardcodethatwasassignedinSystemGalaxy
TIPifyoucheckthecheckboxinthelefthandcolumn,andclickDELETEyoucanremovea
templatefromthereader.
Page26of40
4. SYSTEM GALAXY CONFIGURATION
REGISTER the L-1 READER IN SYSTEM GALAXY (SysGal database)
Start/LogintheSystemGalaxysoftwareasamasteroperatoratthemainCommunicationServer
GototheCONFIGUREmenutostartregistration
~ chooseConfigure>Options>Registration>System
1. ChoosetheappropriateProductLevel(perpurchaseorder)
2. SettheWorkstationCount(perpurchaseorder)
3. EntertheCustomerandDealernameandphone
4. SetthecorrectExpirationDate(perpurchaseorder)
5. CHECKtheBiometricInterfaceSupport
6. setanyotheroptionsaspurchased
7. SettheMaximumReadersANDtheMaximumNo.ofBiometricReadersaspurchased
8. EntertheRegistrationCodeyoureceivefromCustomerService
9. clickAPPLYtosavechanges
Page27of40
ENABLE BIOSCRYPT AS THE ENROLLMENT SYSTEM AT SG WORKSTATION
YoumustbeloggedintoSystemGalaxyasamasteroperatorattheworkstation
GotoConfigure>Options>SystemSettings
~ choosetheGeneralTab
1. SettheBiometricSystemtouseL1Bioscrypt
2. SettheprogrammingreadersourceasControllers
3. youcansetupanyothersystemoptionsasappropriateifthisisthefirststartup
4. clickAPPLYtosavechanges
5. shutdownandrestarttheSystemGalaxysoftware
Page28of40
CONFIGURE THE READER PROPERTIES FOR AN L-1 READER IN SG
YoumustbeloggedintoSystemGalaxyasamasteroperatoratthemainCommunicationServer
YoumusthavealreadyaddedyourLoopandController(s)inSystemGalaxysoftware/database
GototheCONFIGUREmenutoconfigureReaderProperties
~ chooseConfigure>Hardware>Doors/Readers
1. SelecttheLoopName
2. SelecttheControllerName
3. selecttheReaderName(editthedefaultnametomakeitmorelogical)
4. settheReaderTypetoL1IdentitySolutions
5. selecttheGeneraltab
6. selectthenameoftheDeviceGroupthattheL1isregisteredtoinSecureAdminsoftware
7. selectthenameoftheReaderthattheL1isregisteredasintheSecureAdminsoftware
8. checktheLoadBiometricTemplatesoption;(uncheckedwillstoptemplatesfrombeing
loadedtothereaderduringenrollmentorloadutility)
9. clickAPPLYtosave
Page29of40
5. ENROLLING & MANAGING TEMPLATES
ENROLL FINGERPRINT [IDENTIFY MODE] IN CARDHOLDER SCREEN
YoumustbeloggedintoSystemGalaxyasanoperatoratthemainEnrollmentWorkstation
YoumusthavealreadyenabledtheL1BioscryptSystemattheworkstation
ThisissupportedwithGalaxyStandardformatthatmusthavealreadybeenconfiguredatthe
reader.
GototheCONFIGUREmenutoopencardholderscreen
~ chooseConfigure>Cards>Cardholder
1.
2.
3.
4.
5.
clicktheADDNEWbutton
enteracardholdername
selecttheCard/BadgeSettingstab
addaLoop(youmayaddmorethanoneloop)
selectanaccessgroupforeachloopyougavetothiscard
6. settheCardTechnology
GalaxyStandardifusingIDENTIFY/FINGERONLYMODE
26bitWiegandifusingVERIFYMODE(PROXCard+fingerindevice)
7. enterthecardcode(manuallyorselectnextcode);cardcodemustbeuniqueinthesystem
8. checktheSendtoReadersoption;uncheckedwillstopprintsfrombeingloadedtoreaders
Page30of40
9. click[ScanFingers]buttontoopentheL1EnrollmentScreen
a. selecttheDeviceGroup
b. selecttheL1Device
c. clickthe[Connect]button
d. clickthefingerbuttonabovethefingeryouwishtoenroll
e. clickthe[Enroll]buttononthesamefingeryouhavechosen
f. whenprompted,youmustplaceyourprintonthesensoroftheL1Reader
g. whenprompted,youmustremoveyourfingerfromthereader
h. repeatstepsdthruguntilyouhavecapturedalldesiredfingers
i. click[OK]toexittheEnrollmentscreen
10. click[APPLY]onthecardholderscreentosavethetemplatestotheSGdatabaseandsend
thecardidandtemplatestothereadersatthepanels(basedontheloopsyouassigned)
Place Finger on Sensor
NOTEifthefingerisnotcleanortoodry,theL1mayreportbackthatthefingerprintcouldnotpassandwill
notbecaptured.
Iffingercapturessuccessfully,theL1willreportbackthatthefingerprintpassedandtheprintwillbeheld
inthetemporarymemoryatthecomputeruntiltherecordisfullysaved.Ifyoucancelordonotsavethe
entirecardholderrecord,thefingerprintwillhavetoberecaptured.
NOTE:ablackdotwillappearonthetipofthefingerimagetoindicateatemplateissavedforthatfinger.
NOTE:youcanverify(compare)printsfromthisscreenalsobyclickingonthewhitedotabovethefinger
andclickingtheVERIFYbutton.Enrolleemustplacetheirfingeronthereadersensorwhenpromptedto
makeacomparison.
Page31of40
ENROLL CARD AND FINGERPRINT [VERIFY MODE] IN SG CARDHOLDER
YoumustbeloggedintoSystemGalaxyasanoperatoratthemainEnrollmentWorkstation
YoumusthavealreadyenabledtheL1BioscryptSystemattheworkstation
Thisissupportedwith26bitWiegandandCorporate1000formats
GototheCONFIGUREmenutoopencardholderscreen
~ chooseConfigure>Cards>Cardholder
1. clicktheADDNEWbutton
2. enteracardholdername
3. selecttheCard/BadgeSettingstab
4. addaLoop(youmayaddmorethanoneloop)
5. selectanaccessgroupforeachloopyougavetothiscard
6. checktheSendtoReadersoption;uncheckedwillstopprintsfrombeingloadedtoreaders
7. click[ScanFingers]buttontoopentheL1EnrollmentScreen
a. selecttheDeviceGroup
b. selecttheL1Device
c. clickthe[Connect]button;amessageappearsindicatingconnectionestablished
Page32of40
d. clickthe[ReadWiegandID]ButtonandquicklypresenttheHIDcardattheL1Reader
e. theCardIDandFACarecapturedandpopulatedintheappropriatefields
f. selecttheFingerradiobutton(abovethefingerimage)ofthefingeryouwishtoenroll
g. clickthe[Enroll]buttononthesamefingeryouhavejustchosen
h. whenprompted,youmustplaceyourfingeronthesensoroftheL1Reader;the
readerwillscanthefinger
i. whenprompted,youmustremoveyourfingerfromthereader;Galaxywilldisplaya
pass(orfail)messagebasedonreplyfromreader.Ifthefingerqualityfails,youwill
needtoretrythecapture.Ifthefingerqualitypassesablackdotwillappearonthetip
ofthefingerimageandafingerprintwillappearinthegrayboxontherightside.
j. repeatstepsfthruitoscananadditionaladditionalfinger
k. click[OK]toexittheEnrollmentscreen
8. click[APPLY]onthecardholderscreentosavethetemplatestotheSGdatabaseandsend
thecardidandtemplatestothereadersatthepanels(basedontheloopsyouassigned)
9. TheCommunicationControlWindow(messagetab)willdisplaythemessagesthat
connectionwasestablishedwitheachauthorizedreaderandtemplatesstoredsuccessfully.
IfyouseeaTemplateformaterror/corrupttemplatemessageinComm.ControlWindow,checktheoffendingreaders
templateformat.Theerroroccursforanyreaderwhosetemplateformats(BUR,VUR,etc.)isdifferentthanthe
enrollmentreader.Toresolvethis,eitherusethesameformatatallreadersorenrollanadditionalfinger(s)directly
fromthereaderwhosetemplateformatdiffers.
SeetheAppendix(section6ofthisguide)formoreindicationsandmessagesassociatedwithconnecting,
capturing,savingandloadingtemplates.
Page33of40
LOADING ALL TEMPLATES UTILITY

AlsoseetheBioscryptdocumentationforadditionalwiringinformation.
GototheUTILITYmenutoopencardholderscreen
~ chooseUtility>L1/Bioscrypt>LoadTemplatestoDevice
1. SelecttheDefaultGroup(orallgroups;orthegroupyoudesire)
2. SelecttheL1Device(thereaderyouneed);notethatonlythereaderthatareconnected
areshown.Readerswhosepropertiesaresettonotload(SGReaderPropertyscreen)will
notappearinthelist.
3. clickOK
4. thetemplateswillloadandtheCommunicationControlwindowwillopentoshowlogs
5. clickHIDEtoclosetheCommunicationControlwindow
Page34of40
6. APPENDIX: TROUBLESHOOTING
GALAXY MESSAGE LOGGING (Communication Control Window)

OpenaCommunicationControlWindowfromtheViewmenuinSystemGalaxyandselecttheMessagetab.
Youcanmovethewindowtothesideordownward,soyoucanaccessthedataentryfieldsinthe
Cardholderenrollmentscreen.
Table 1: Communication Control Message Log

Comm.ControlMessageLog
CommunicationClosed
Communicationestablishedsuccessfully
Devicetimedoutwilewaitingforuseraction
ErrorTCP/IPSocket
Fingernotdetected
Noresponsefromdevice
Templatewaserasedondevicesuccessfully
Templatewasstoredondevicesuccessfully
Unabletoaccesscomport.
Meaning
Thismessageindicatesthecurrentlyopenconnection
tothereaderisclosed.ThisoccurswhentheSG
operatorexitstheL1Enrollmentscreen
ThismessageindicatesthatSGhassuccessfully
connectedtotheL1readeroverTCP/IP.Thisoccurs
whentheSGoperatorCONNECTStothereaderfrom
theL1Enrollmentscreen;andwhenthetemplates
areloadedtothereader(eitherwhenCardholder
APPLYbuttonisclickedortheLoadUtilityissending)
Thismessageindicatesthatthereadertimedout.
TimeOutoccurredbecausecardwasnotpresented
tothereadercorrectlyorwithinthetimeallotted;or
thewrongcardformat/typecardwaspresented.
Thismessageindicatesthatthereaderwasnotonline
totheSADBwhenSystemGalaxywassignedinand
connectedtotheSADB.RestartSGafterrestoring
readertoonlinestatus.
Fingerwasnotplacedonthesensorintimeoratall.
Thismessageindicatesthatthereaderisnotonline.
RestorereaderpowerorIPconnectiontorecover.
Thismessageindicatesthatatemplatewasdeleted
throughtheSGEnrollmentscreen.
Thismessageindicatesthatatemplatewascapture
andsaved/loadedfromSGCardholderorLoadUtility.
Thismessageindicatesthatthespecificreaderhas
notbeenselectedbeforetheoperatorclicksthe
CONNECTbutton.
Page35of40
GALAXY USER MESSAGES - BY OPERATOR ACTION
ThefollowingmessagesappearintheSystemGalaxyapplicationandtheCommunicationControlwindow
duringintegratedoperation.(theComm.ControlwindowopensfromtheViewmenu)
Table 2: Connecting to L1 Reader in SG Enrollment

CONNECTINGtoREADERL1Enrollmentscreen
OPERATORACTION
clicktheCONNECTbuttonwhena
{reader}isselected
clickCONNECTbuttonwhena
{reader}isselected

clickCONNECTbuttonwhena
{reader}isselected
clickCONNECTbuttonwhen
readerisnotselected
SGINDICATION
MESSAGELOG
(L1ENROLLMENTscreen)
(COMMCONTROLscreen)
Confirmation{Reader}Communication Communication
establishedsuccessfully.
establishedsuccessfully
Error[!]ErroropeningTCP/IPsocket.
ErroropeningTCP/IP
socket.
Reason:readerwasofflineinSADBatthe
timeSystemGalaxywasstarted.
Resolution:restorereaderpower&
Ethernetconnection.RestartGalaxy.
Error[!]Noresponsefromdevice.
Noresponsefromdevice.
Reason:readerhasgoneoffline,lost
powerorEthernetconnectionafter
SystemGalaxywasstartedorsignedin.
Resolution:restorereadertoonline
status(power/Ethernetconnection).
RestartGalaxy.
Error[!]Unabletoaccesscomport.
Possiblyinusebyanotherapplication.
Reason:readerisnotselected.
Resolution:selectreaderbefore
connecting.
Page36of40
Unabletoaccesscomport.
Possiblyinusebyanother
application.
Table 3: Capture Card Code (VERIFY MODE)

READ/CAPTURECARDCODEL1Enrollmentscreen
Select[ReadWiegandID]button
SGINDICATION
Cardcodeandfacilitycodearecaptured
andpopulateEnrollID&FACfield.
Nosystemmessagegenerated.
Error[!]Thedevicetimedoutwhile
waitingforuseraction.
Reason:
1. Cardwasnotpresented/orread.
2. Cardisthewrongformat/type
Resolution:
1. Presentcardwithintimeallotted
2. Presentthecorrectcardtype
Error[!]Cardcodeisaduplicate.The
n/a
cardisassignedtoothername.
OPERATORACTION

Reason:cardisalreadyenrolledforthe
cardholdernamethatisshown.
Resolution:getanewcardordeletethe
existingcardfromtheothercardholder.
Error[!]NoResponse.
MESSAGELOG
(COMMCONTROLscreen)
n/a
Thedevicetimedoutwhile
waitingforuseraction.
Noresponsefromdevice.
Reason:readerhasgoneoffline.
Resolution:restorereaderconnection.
Table 4: Enroll Finger Template (IDENTIFY OR VERIFY MODE)

ENROLLFINGERL1Enrollmentscreen
SGINDICATION
OPERATORACTION
Prompt3=EnrollPassed
ClickaFingerENROLLbutton
(blackdotappearsonenrolledfinger)
(afterconnectingtoreader(alsoafter
PROMPT3=EnrollFailed
enrollingcardcodeifinVERIFYmode))
(noblackdotortemplateimage)
Prompt1=PlaceFingeronSensor
Reason:poorqualityofprint.
Prompt2=RemoveFinger
Resolution:retry;usebetterfinger;
makesuresensorisclean,etc,
Error[!]NoFingerDetected.
MESSAGELOG
(COMMCONTROLscreen)
n/a
whenEnrollIDisempty/blank.
Reason:fingernotplacedonsensor.
Resolution:retry;
Error[!]PleasesupplynumericEnrollID
largerthan0.
Reason:readerisinVERIFYmode.
Resolution:enroll/readcardcodebefore
youtrytoenrollafinger.
Page37of40
n/a
FingerNotDetected
n/a
Table 5: Verify Finger Template

VERIFY/COMPARETEMPLATEL1Enrollmentscreen
SGSYSTEMMESSAGES
OPERATORACTION
Prompt3=VerifyPassed
(fingerpassestheverificationcheck)
Select[VerifyTemplate]button
Prompt1=PlaceFingeronSensor PROMPT3=VerifyFailed
(fingerfailstheverificationcheck)
Prompt2=RemoveFinger

Reason:poorqualityofprint.
Select[VerifyTemplate]button

Resolution:retry;ensuresensorisclean.
Error[!]Timedoutwaitingforuser.
L1MESSAGELOG
(COMM.CONTROLscreen)
n/a
n/a
n/a
Reason:fingernotpresentedorread.
Resolution:retry;ensuresensorisclean.
Table 6: Closing Enrollment

CLOSEL1Enrollmentscreen
OPERATORACTION
Click[Close]button
SGINDICATION
OperatorreturnstothemainCardholderscreenwhenL1
Enrollmentscreencloses.
MESSAGELOG
(COMMCONTROLscreen)
Communicationwas
closed.
NOTE:Atthistimetemplatesareheldinmemory.
NOTE:Templatesaresenttoreader*andstoredinGalaxydatabaseasblobdatawhentheoperatorclickstheAPPLYbuttonin
themaincardholderscreen.
*Load/sendtemplatesoptionmustbecheckedintheCardholderscreenandinthereaderpropertiesscreen,reader
mustbeonlineandabletoreceivedataoverIP;cardmusthaveloopandaccessprivilegesassigned.
IMPORTANT:ifyouCanceloutofthemainCardholderscreenafterenrolling,thedatabeingheldinRAMwillbe
dumpedandnothingwillbesaved/senttoreader.
Table 7: Save/Apply Cardholder and Send Templates to Reader

APPLYEDITS/SENDTEMPLATESCardholderScreen
SGINDICATION
OPERATORACTION
Click[Apply]button
NOTE:Atthistime,templatesaresenttoreader(s)and
(afterenrollingcard
storedasBlobdatainGalaxydatabase.
and/ortemplates)
[!]
MESSAGELOG
(COMMCONTROLscreen)
Templatewasstored
successfully.
TemplateformaterrormessageinComm.ControlWindowoccursforanyreaderwhosetemplateformats(BUR,VUR,
etc.)isdifferentthantheenrollmentreader.Toresolvethis,eitherusethesameformatatallreadersorenrollan
additionalfinger(s)directlyfromthereaderwhosetemplateformatdiffers.
Click[Apply]button
(afterdeleting
templates)
NOTE:Atthistime,templatesareremovedfromreader(s)
andGalaxydatabase.
Page38of40
Templatewaserasedon
devicesuccessfully.
REGISTER READER with USB (private LAN/ not using DHCP)

1.
DonotconnectL1tothenetworkcableyet(factorymayhaveDHCPon)
2.
powerupL1reader(waitforallbeepstosoundthistakesacoupleofmins)
3.
connectbyUSBcablefromL1devicetothePC
4.
whendevicewizardopens,browsetothe4gserialfolder
ProgramFiles\Bioscrypt\SA\SecureAdminServer\4gserial
NoteifyouareusingWindows7youmayneedtocopythe4gserialdrivertothe
Windows\System32folderandthenupdatethedriverpathtothatlocation.
5.
completethePCdevicedriversetup
6.
lookinthePCDeviceManagertofindoutwhichCOMportthe4gserialdeviceisusing
7.
startup(loginto)SecureAdminsoftware
8.
choosetheNETWORKmenuandselectREGISTERVIASERVER
9.
checktheCOMportthattheDeviceManageridentifiedasthe4gserialdevice
(SecureAdminwillnotfilteroutotheractivecomports)
10. selectAUTOforthebaudrate
11. clicktheSCANbutton;thedevicewilldisplayinthelistwithayellowplussymbol
12. doubleclickonthedeviceiconthatshowstheyellowplussymbol
13. clickNEXT(donotprogramIPAddressatthistime)
14. enteradevicenameandassignthedefaultgroup
15. clickREGISTERtocompleteregistration;clickOKandclosetoexit.
16. gotoDEVICESETTINGSmenu,expandthedefaultgroupanddoubleclickthereader
17. selecttheCOMMUNICATIONTABandmakesureDHCPoptionisunchecked
18. nowcheckETHERNEToptionandaddthenetworkaddressparametersyoudesire
19. clickAPPLYtosavenetworksettings
20. gotoNETWORKTREEandrightclickthereader,chooseChangeConnection
21. selecttheETHERNEToptionandputintheIPAddressandclickUPDATE
Readershouldbecorrectlyconnectedandabletotalk.ThisprocessistheoneL1TechSupport
walkedmethrough
Page39of40
ADDING A LINKED SQL CONNECTION STRING TO SYSGAL
After you install the Galaxy database server and the SecureAdmin Server, you must enable the linked SQL
connection and add the connection string in the SysGal database.
Open SQL Server Management Studio.
Use the SA login to connect to the GCSSQLEXPRESS instance
INSERT a 1 in the L1_ENABLED column and the correct SQL connection string into the SADB_PATH
column of L1_SADB_INFO table in SysGal database
ExamplesyntaxofSQLconnectionstring:
[server_name\instance_name].[database_name].[owner_name]
NOTE - if you are using a shared (same) SQL instance, the connection string and L1 enabled value will be
automatically inserted when you follow the database installation and configuration steps in this manual.
Page40of40

SG L1-Bioscrypt (10.0)

Încărcat de

Informații document

Drepturi de autor

Formate disponibile

Partajați acest document

Partajați sau inserați document

Opțiuni de partajare

Vi se pare util acest document?

Este necorespunzător acest conținut?

Drepturi de autor:

Formate disponibile

SG L1-Bioscrypt (10.0)

Încărcat de

Drepturi de autor:

Formate disponibile

System Galaxy Quick Guide

CONFIGURATION AND OPERATION

Information in this document is subject to change without notice.

1st Edition Apr 2011

Copyright 2011 Galaxy Control Systems All rights reserved

Galaxy Control Systems

1. INTRODUCTION TO THE BIOSCRYPT INTERFACE.................................................4

SYSTEM INTEGRATION VIA SHARED or LINKED SQL SERVERS ...........................................................5

2. SYSTEM INSTALLATION ............................................................................................7

3. REGISTER & CONFIGURE V-Flex (Prox) Device in Secure Admin ......................15

4. SYSTEM GALAXY CONFIGURATION ......................................................................27

5. ENROLLING & MANAGING TEMPLATES................................................................30

6. APPENDIX: TROUBLESHOOTING ...........................................................................35

1. INTRODUCTION TO THE BIOSCRYPT INTERFACE

INFORMATION COVERED IN THIS MANUAL

TYPES OF BIOMETRIC CREDENTIALS SUPPORTED

OVERVIEW OF GALAXY ENROLLMENT PROCESS

SYSTEM INTEGRATION VIA SHARED or LINKED SQL SERVERS

HOW BIOMETRIC CREDENTIALS ARE MADE

HOW BIOMETRIC CREDENTIALS ARE STORED

INTEGRATION REQUIREMENTS (order dependent)

INSTALL READER HARDWARE

READER WIRING CHART

INSTALL SYSTEM GALAXY v10.0 (or higher)

INSTALL SECURE ADMIN DATABASE SERVER

INSTALL SECURE ADMIN CLIENT

3. REGISTER & CONFIGURE V-Flex (Prox) Device in Secure Admin

REGISTER L-1 READER IN SECURE ADMIN (SADB)

IF using TCP/IP to detect and register, follow the step 6 below:

IF using USB to connect and register, follow the step 7 below:

To continue registering, follow the steps below:

CONFIGURE L-1 DEVICE SETTINGS for V-FLEX (PROX)

Configuring Device Mode:

Configuring Wiegand Format:

CREATING CUSTOM 32-BIT WIEGAND FORMAT

VIEW TEMPLATES IN L-1 READER

4. SYSTEM GALAXY CONFIGURATION

REGISTER the L-1 READER IN SYSTEM GALAXY (SysGal database)

ENABLE BIOSCRYPT AS THE ENROLLMENT SYSTEM AT SG WORKSTATION

CONFIGURE THE READER PROPERTIES FOR AN L-1 READER IN SG

5. ENROLLING & MANAGING TEMPLATES

ENROLL FINGERPRINT [IDENTIFY MODE] IN CARDHOLDER SCREEN

Place Finger on Sensor

ENROLL CARD AND FINGERPRINT [VERIFY MODE] IN SG CARDHOLDER

LOADING ALL TEMPLATES UTILITY

GALAXY MESSAGE LOGGING (Communication Control Window)

Table 1: Communication Control Message Log

GALAXY USER MESSAGES - BY OPERATOR ACTION

Table 2: Connecting to L1 Reader in SG Enrollment

Table 3: Capture Card Code (VERIFY MODE)

Table 4: Enroll Finger Template (IDENTIFY OR VERIFY MODE)

Table 5: Verify Finger Template

Table 6: Closing Enrollment

Table 7: Save/Apply Cardholder and Send Templates to Reader

REGISTER READER with USB (private LAN/ not using DHCP)

ADDING A LINKED SQL CONNECTION STRING TO SYSGAL

Open SQL Server Management Studio.

Use the SA login to connect to the GCSSQLEXPRESS instance

S-ar putea să vă placă și