pivCLASS
How to Order Guide
D00546, B.3
January 2014
The most current version of this document is available for download at http://www.hidglobal.com > Government > PIV & FIPS Solutions .
To check order status, go to: www.hidglobal.com > Support > Order Status
HID, HID Global, the HID logo, pivCLASS, iCLASS, iCLASS SE, multiCLASS SE, iCLASS Elite, OMNIKEY, Trusted
Identity Platform and Secure Identity Object are the trademarks or registered trademarks of HID Global Corporation, or its licensors, in the U.S. and other countries.
MIFARE Classic and MIFARE DESFire EV1 are trademarks or registered trademarks of NXP B.V. and are used under license.
This document is subject to change without notice.
Document History
Date
1/15/14
10/7/13
9/5/13
6/25/13
5/10/13
7/6/12
6/28/12
4/12/12
2/26/12
Author
RSD
RSD, RAT
RSD
RSD, LD
RSD, HE
LD
RSD, RP
DD, RSD
DD, RSD
Description
Removed Indala, no longer supported. Removed BIO readers.
Added Indala Prox, maintenance language, removed the MorphoTrak Biometric Sensor and the Amano McGann Plug-in
Changing part numbers
Updated for Beta Release 4.0 - BETA
Updated for Release 3.2
Corrected an error. Added the Validation Server USB option.
Removed pivCLASS Validation Server CD, 6714-306-01 and PIV Audit Card Package. Added
6714-306-04.
Corrected PIV+PIN typos; added PIV Audit Card Package Part Number, API DTK and new training
Initial release
Version
B.3
B.2
B.1
B.0
A.4
A.3
A.2
A.1
A.0
pivCLASS How to Order Guide – D00546, B.3
Contents
Introduction ................................................................................................................................................. 3
Certification ................................................................................................................................................. 3
Reader Configuration Choices .................................................................................................................. 3
Reader Part Number Configuration Aides ................................................................................................ 3
pivCLASS Readers ...................................................................................................................................... 4 pivCLASS Bundles ...................................................................................................................................... 5
Validation Workstation ............................................................................................................................... 6
Maintenance and Support ......................................................................................................................................... 6
Registration Engine and Certificate Manager .......................................................................................... 7
Maintenance and Support ......................................................................................................................................... 7
Reader Services .......................................................................................................................................... 8
Maintenance and Support ......................................................................................................................................... 8
pivCLASS Authentication Module (PAM) ................................................................................................. 9
Maintenance and Support ......................................................................................................................................... 9
pivCLASS Passage ................................................................................................................................... 10
Maintenance and Support ....................................................................................................................................... 10
pivCLASS IDPublisher .............................................................................................................................. 11
Maintenance and Support ....................................................................................................................................... 11
pivCLASS MultiPACS ............................................................................................................................... 12
Maintenance and Support ....................................................................................................................................... 12
Evaluation Kits .......................................................................................................................................... 13
Evaluation Kits ........................................................................................................................................................ 13
USB Readers & Credential Testing Aides .............................................................................................. 14
USB Reader and Biometric Sensor ......................................................................................................................... 14
Credential Testing Aides ......................................................................................................................................... 14
Certification Training ................................................................................................................................ 15
Reader Programming Cards .................................................................................................................... 16
Reader Configuration Cards .................................................................................................................................... 16
Firmware Update Cards .......................................................................................................................................... 16
Reader Accessories .................................................................................................................................. 17
pivCLASS PACS Plug-in & Connector Information ............................................................................... 18
pivCLASS Supplemental Ordering Information ..................................................................................... 19
Page 2 of 19 © 2012 - 2014 HID Global Corporation/ASSA ABLOY AB. All rights reserved. January 2014
Introduction
pivCLASS How to Order Guide – D00546, B.3
HID Global’s pivCLASS
®
Government Solutions portfolio is an extensive product family making it easy for U.S.
Federal Government, government contractors and other facilities to comply with security regulations. By using
Personal Identity Verification (PIV) and other smart cards for physical access control results in compliance, interoperability and high security.
The pivCLASS modular approach provides government agencies the ability to use their PIV identity cards for strong public key infrastructure (PKI)-based validation for physical access control. The solution enables this functionality without the need to rip and replace existing physical access control systems (PACs), reducing costs, and removing complexities to make it easy and affordable to acquire, install and maintain compliant physical access control systems. pivCLASS accomplishes this in part by communicating with an agency’s PACs and external trust authority PKIs to deliver functionality specified by National Institute of Standards and Technology (NIST) Federal Information
Processing Standards Publication 201 (FIPS 201).
Ordering information for all Release 4.0 pivCLASS components are included in this How to Order guide.
Certification
You must be a pivCLASS certified reseller to order any pivCLASS solution components except pivCLASS readers and the Validation Workstation. Achieve certification when a minimum of two staff members successfully completing the pivCLASS training program.
Reader Configuration Choices
All pivCLASS readers are transitional. Configure transitional readers to support two different operational modes.
•
Wiegand. In Wiegand mode, the reader reads the FASC-N or UUID from the card and passes this data directly to the door controller or panel over a Wiegand interface. Configure the FASC-N output to provide various output formats including 64 bit BDC, 75 bit GSA and 200 bit full FASC-N. The UUID output is always 128 bits. Custom FASC-N output formats are available, but some of these may not be supported in
PAM mode. In Wiegand mode, authentication is not completed; it is provided to enable a phased implementation approach.
• PAM. in this mode the reader is connected to a pivCLASS Authentication Module (PAM) using RS485 communication protocol. This mode supports CHUID, CAK (card authentication key), PIV+PIN,
PIV+PIN+BIO authentication, as defined in FIPS 201, depending on the capabilities of the reader (that is, contactless, contact or biometric). This mode also supports the additional TWIC authentication modes
CHUID + BIO and CAK + BIO.
Reconfigure these readers in the field to support either mode. For example, use the following two-step process to reconfigure from Wiegand to PAM mode.
• Connect the reader to the PAM
• Reconfigured the reader to PAM mode using a pivCLASS Reader Programming Card
Reader Part Number Configuration Aides
In addition to this document, HID provides an online tool for determining the part number for various pivCLASS readers. Access this tool on the PIV & FIPS 201 Solutions page at https://www.hidglobal.com > Government > PIV and FIPS Solutions and click pivCLASS, iCLASS SE, multiclass SE Configuration Guide under the Related
Documents column.
January 2014 © 2012 - 2014 HID Global Corporation/ASSA ABLOY AB. All rights reserved. Page 3 of 19
pivCLASS How to Order Guide – D00546, B.3
pivCLASS Readers
Obtaining individual pivCLASS reader part numbers requires the use of the online pivCLASS, iCLASS SE, multiCLASS SE Configuration Guide . You do not need to be pivCLASS certified to resell pivCLASS readers. Selection of Wiegand or PAM mode configurations is applied in the Specific Configuration Settings section.
Description
Base
Part No.
125 kHz
Interpreters
1
13.56 MHz
Interpreters
Controller
Part Number
Communications
2
Controller
Hardware
Connection
Product
Version
Color Security
3
Specific
Configuration
Settings
4
pivCLASS R10 & RP10
Mini-Mullion Contactless Reader
pivCLASS R15 & RP15
Mullion Contactless Reader
pivCLASS R40 & RP40
Wall Switch Contactless Reader
pivCLASS RK40 & RPK40
Wall Switch Contactless Keypad Reader Keypad
pivCLASS RKCL40 & RPKCL40
Wall Switch Contact/Contactless Keypad Reader with LCD display
900
910
920
921
923
N = Without Prox
P =With Prox
N = Without Prox
P = With Prox
H
(contactless)
P
(contact + contactless)
P = RS485 HDX
R = RS485 FDX
(See note 2)
P = RS485 HDX
R = RS485 FDX
(See note 2)
N = Pigtail
T = Terminal Strip
N = Pigtail
T = Terminal Strip
E
E
K = Black
G = Gray
0 = Standard
E = Elite
XXXX
XXXX
1
125 kHz Prox Interpreters
Order P for HID Prox, AWID, EM4102
All pivCLASS readers support high frequency 13.56 MHz technology.
2
Controller Communications
R = Default option. Supports both Wiegand out and full duplex (FDX) RS-485. Reconfigurable in field from Wiegand to RS485 using a programming card. FDX required for use with PAM.
P = Supports both Wiegand out and half- duplex (HDX) RS485 with OSDP v1 protocol. Reconfigurable in field from Wiegand to RS485 using a programming card. HDX is not supported by PAM.
Factory configuration option for Wiegand mode is determined by the Specific Configuration Settings. See note 4 below.
3
iCLASS
®
Security Options (Factory or Field Configurable)
0 = Standard Security (Version 1) Keyset – compatible with iCLASS SE matching Elite keys. Line item on PO requires ICE reference number.
® , iCLASS SR, standard iCLASS, SE for MIFARE Classic and SE for MIFARE DESFire EV1 credentials.
E = Elite, reads only SE Elite
TM
credentials with unique matching keys – compatible with iCLASS SE, iCLASS SR, standard iCLASS, SE for MIFARE Classic and SE for MIFARE DESFire EV1 with
4
Specific Configuration Settings
Identifies all firmware configurations including Wiegand mode output settings, PAM and OSDP mode settings and audio/visual settings (for example, default setting): buzzer on, LED normally red, flashes green on read, buffer one key, no parity, 4 bit message. Use the pivCLASS, iCLASS SE, multiCLASS Configuration Guide located on the HID Global PIV & FIPS 201 Solutions web page
( https://www.hidglobal.com/government/piv ) to obtain the complete reader part number.
Page 4 of 19 © 2012 - 2014 HID Global Corporation/ASSA ABLOY AB. All rights reserved. January 2014
pivCLASS Bundles
pivCLASS How to Order Guide – D00546, B.3
Bundles consist of two (2) pivCLASS readers and one (1) pivCLASS Authentication Module (PAM). pivCLASS PKI @ Door Training required to resell these bundles. See Certification Training, page 15. To obtain the desired bundle part number first determine the individual pivCLASS reader part number and insert a B in front of the Base Part Number as shown. First year maintenance is mandatory and included with purchase.
Part Number
Description
Base
Part No.
125 kHz
Interpreters
1
13.56 MHz
Interpreters
Controller
Communications
2
Controller
Hardware
Connection
Product
Version Color Security
3
Specific
Configuration
Settings
4
Qty 2 x pivCLASS R40-H OR pivCLASS RP40-H
Contactless Smart Card Reader:
Finished Reader, Wall Switch
Qty 2 x pivCLASS RKCL40-P OR pivCLASS RPKCL40-P
Contactless and Contact Smart
Card Reader: Finished Reader,
Wall Switch, Key Pad, LCD
US Double-Gang Size
Qty 1 x
pivCLASS Authentication Module
(Model: M2000)
Authentication module hardware,
firmware and installation guides.
Includes PAM with plastic enclosure
and mounting plate.
Qty 1 x
pivCLASS Authentication Module
(Model: M2000)
Authentication module hardware,
firmware and installation guides.
Includes PAM with plastic enclosure
and mounting plate.
B920
B923
N = Without Prox
P = With Prox
N = Without Prox
P = With Prox
H
(contactless)
P
(contact + contactless)
P = RS485 HDX
R = RS485 FDX
(See note 2)
P = RS485 HDX
R = RS485 FDX
(See note 2)
N = Pigtail
T = Terminal
Strip
N = Pigtail
T = Terminal
Strip
E
E
K = Black
G = Gray
K = Black
0 =
Standard
E = Elite
0 =
Standard
E = Elite
1
125 kHz Prox Interpreters
Order P for HID Prox, AWID, EM4102
All pivCLASS readers support high frequency 13.56 MHz technology.
2
Controller Communications
R = Default option. Supports both Wiegand out and full duplex (FDX) RS485. Reconfigurable in field from Wiegand to RS485 using a programming card.
FDX required for use with PAM.
P = Supports both Wiegand out and half duplex (HDX) RS485 with OSDP v1 protocol. Reconfigurable in field from Wiegand to RS485 using a programming card.
HDX is not supported by PAM.
Factory configuration option for Wiegand mode is determined by the Specific Configuration Settings, see note 4 below.
XXXX
XXXX
3
iCLASS Security Options (Factory or Field Configurable)
0 = Standard Security (Version 1) Keyset – compatible with iCLASS SE, iCLASS SR, standard iCLASS, SE for MIFARE Classic and SE for MIFARE DESFire EV1 credentials.
E = Elite, reads only SE Elite credentials with unique matching keys – compatible with iCLASS SE, iCLASS SR, standard iCLASS, SE for MIFARE Classic and SE for MIFARE DESFire EV1 with matching Elite keys. Line item on PO requires ICE reference number.
4
Specific Configuration Settings
Identifies all firmware configurations including Wiegand output settings, PAM and OSDP mode settings and audio/visual settings (for example, default setting): buzzer on, LED normally red, flashes green on read, buffer one key, no parity, 4 bit message. Use the pivCLASS, iCLASS SE, multiCLASS Configuration Guide located on the HID Global PIV & FIPS 201 Solutions web page
( https://www.hidglobal.com/government/piv
) to obtain the corresponding reader part number extension. The bundle part number is the same as the reader part number except for the B prefix.
January 2014 © 2012 - 2014 HID Global Corporation/ASSA ABLOY AB. All rights reserved. Page 5 of 19
pivCLASS How to Order Guide – D00546, B.3
Validation Workstation
The pivCLASS Validation Workstation verifies TWIC, PIV, PIV-I, CIV, FRAC and CAC cards. It also verifies the cardholder’s PIN using the card’s contact interface.
Validation Workstation matches the cardholder's stored biometric against a live sample and validates the card's digital certificate chain using OCSP or SCVP protocols. For TWICs, Validation Workstation queries the TWIC Canceled Card List (CCL) to determine revocation status. All FIPS 201 credentials are authenticated using PKI-AUTH or PKI-CAK protocols. First year maintenance is mandatory and included with purchase.
Validation Workstation does not provide any PACS operability. You do not need pivCLASS certification to resell the Validation Workstation.
Include supplemental information for ordering this product (see pivCLASS Supplemental Ordering Information, page 19).
Description pivCLASS Validation Workstation
Only includes pivCLASS Validation Workstation software and documentation. PACS interoperability not included.
Requires a USB contact reader; OMNIKEY 3821 recommended and optional biometric sensor. See USB Readers & Credential Testing Aides, page 14.
pivCLASS Validation Workstation Audit Trail Option
Only includes Audit Trail software.
Note: The Validation Workstation requires a USB Smart Card reader, such as the OMNIKEY 3821 and optionally a USB fingerprint sensor.
Maintenance and Support
Part Numbers
PVC-D/S
PVCAT-D
Description Part Numbers pivCLASS Validation Workstation Standard Maintenance & Support
Annual subscription service. First year included with purchase. 8x5 Central M-F.
pivCLASS Validation Workstation Audit Trail Option Standard Maintenance & Support
Annual subscription service. First year included with purchase. 8x5 Central M-F.
1
Reference the Registration Engine data sheet for supported USB fingerprint sensors.
PVC-D/S-MS
PVCAT-D-MS
Page 6 of 19 © 2012 - 2014 HID Global Corporation/ASSA ABLOY AB. All rights reserved. January 2014
Registration Engine and Certificate Manager
pivCLASS How to Order Guide – D00546, B.3
The Registration Engine includes all the functionality of the Validation Workstation and the ability to interoperate with a PACS head-end collecting card information
(such as name, FASC-N or UUID, expiration date and photo) and creating a card holder record in a PACS. The Certificate Manager provides the capability of revalidating registered cardholders on an ongoing basis. If a cardholder’s certificate is invalid or revoked, Certificate Manager automatically suspends the card in the PACS and sends an email to a distribution list for notification. pivCLASS Software Training is required to resell these products. See Certification Training, page
15. First year maintenance and support is required and included with purchase.
Include supplemental information for ordering this product (see pivCLASS Supplemental Ordering Information, page 19).
Description
Part Number
Base Part No.
PACS ID pivCLASS Registration Engine
Includes software that interfaces with one (1) specific PACS and supporting documentation. One license per workstation. Requires a USB contact reader
(OMNIKEY 3821 recommended) and optional biometric sensor. See USB Readers & Credential Testing Aides, page 14.
PVCP-D/S- XX-YY
1
pivCLASS Certificate Manager
Includes software only. One license per PACS. Second license required for redundant PACS if present.
PVC-CM
Note: The registration engine requires a USB Smart Card reader such as the OMNIKEY 3821 and optionally a USB fingerprint sensor.
2
Maintenance and Support
N/A
Description Part Number pivCLASS Registration Engine Standard Maintenance & Support
Annual subscription service. First year included with purchase. 8x5 Central M-F.
pivCLASS Certificate Manager Standard Maintenance & Support
Annual subscription service. First year included with purchase. 8x5 Central M-F.
1
2
To determine the identifiers for entry, see pivCLASS PACS Plug-in & Connector Information page 18.
• XX = PACS Product ID
• YY = PACS Version ID
Reference the Registration Engine data sheet for supported USB fingerprint sensors.
PVCP-D/S-MS
PVC-CM-MS
January 2014 © 2012 - 2014 HID Global Corporation/ASSA ABLOY AB. All rights reserved. Page 7 of 19
pivCLASS How to Order Guide – D00546, B.3
Reader Services
Reader Services provides the interface to manage and control readers and authentication modules such as the PAM. For certification training, see Certification
Training, page 15. First year maintenance is mandatory and included with purchase.
Include supplemental information for ordering this product (see pivCLASS Supplemental Ordering Information, page 19).
Part Numbers Description pivCLASS Reader Services
Includes software and supporting documentation. If used with one or more PAMs, only one copy per server is needed. If used without a PAM, one copy per reader is required.
Maintenance and Support
Description
PVC-FXRDR
Part Number pivCLASS Reader Services Standard Maintenance & Support
Annual subscription service. First year included with purchase. 8x5 Central M-F.
PVC-FXRDR-MS
Page 8 of 19 © 2012 - 2014 HID Global Corporation/ASSA ABLOY AB. All rights reserved. January 2014
pivCLASS Authentication Module (PAM)
pivCLASS How to Order Guide – D00546, B.3
Order the pivCLASS Authentication Module using the following part numbers. The PAM supports up to two (2) pivCLASS readers and requires a pivCLASS Reader
Services component for operation. pivCLASS PKI @ Door Training required to resell this component. See Certification Training, page 15. First year maintenance is mandatory and included with purchase.
Include supplemental information for ordering this product (see pivCLASS Supplemental Ordering Information, page 19).
Part Number
Description
Base Part No. Product Version Packaging
Configuration
Settings pivCLASS Authentication Module
Model: M2000
Authentication module hardware, firmware and installation manuals.
91000 A
B = Plastic Enclosure Back plate & Cover
N = No enclosure (board only) NNN = Default
Maintenance and Support
Description Part Number
PAM Firmware Standard Maintenance & Support
Annual subscription service. First year included with purchase. 8x5 Central M-F.
91000-MS
January 2014 © 2012 - 2014 HID Global Corporation/ASSA ABLOY AB. All rights reserved. Page 9 of 19
pivCLASS How to Order Guide – D00546, B.3
pivCLASS Passage
pivCLASS Passage allows a PC or a mobile reader to send a Wiegand signal to a control panel to open a door or gate after a successful card validation. Use
Passage with either pivCLASS desktop or OMNICheck mobile software. This product consists of two components, Passage software and Passage Converter
Board, both of which are required. First year maintenance is mandatory and included with purchase.
Description Part Number pivCLASS Passage Software
Software that receives the credential information (for example, from OMNICheck) and sends the identifier data to the Converter Board. PVC-PAS
pivCLASS Passage Converter Board
Hardware board that converts the received valid identifier into Wiegand format and sends it to PACS. One board per access point is required.
Maintenance and Support
Description
PVC-PCB
Part Number pivCLASS Passage Software Standard Maintenance & Support
Annual subscription service. First year included with purchase. 8x5 Central M-F.
PVC-PAS-MS
Page 10 of 19 © 2012 - 2014 HID Global Corporation/ASSA ABLOY AB. All rights reserved. January 2014
pivCLASS IDPublisher
pivCLASS How to Order Guide – D00546, B.3
This web service product enables the provisioning and de-provisioning of credentials from an IDMS, CMS or HR db into a PACS. First year maintenance is mandatory and included with purchase.
Include supplemental information for ordering this product (see pivCLASS Supplemental Ordering Information, page 19).
Description Part Number
pivCLASS IDPublisher 500
500 badge capacity
pivCLASS IDPublisher 1000
1000 badge capacity
pivCLASS IDPublisher UNL
Unlimited badge capacity
Maintenance and Support
Description pivCLASS IDPublisher 500 Standard Maintenance & Support
Annual subscription service. First year included with purchase. 8x5 Central M-F.
pivCLASS IDPublisher 1000 Standard Maintenance & Support
Annual subscription service. First year included with purchase. 8x5 Central M-F.
pivCLASS IDPublisher UNL Standard Maintenance & Support
Annual subscription service. First year included with purchase. 8x5 Central M-F.
PVC-IDPUB500
PVC-IDPUB1000
PVC-IDPUBUNL
Part Number
PVC-IDPUB500-MS
PVC-IDPUB1000-MS
PVC-IDPUBUNL-MS
January 2014 © 2012 - 2014 HID Global Corporation/ASSA ABLOY AB. All rights reserved. Page 11 of 19
pivCLASS How to Order Guide – D00546, B.3
pivCLASS MultiPACS
MultiPACS allows for the simultaneous provisioning and de-provisioning of identity and credential records into multiple and disparate physical access control systems (PACS). The MultiPACS system supports multiple Registration Engines, OMNICheck Plus with PACS Registration and IDPublishers or any combination.
It consists of multiple components, including a MultiPACS Console and one MultiPACS Connector for each PACS head-end serviced. It also requires a Certificate
Manager (sold separately). First year maintenance is mandatory and included with purchase.
Part Number
Description
Base Part No. PACS ID pivCLASS MultiPACS Console
Provides management interface to the system.
pivCLASS MultiPACS Connector
A PACS specific connector is required for each separate PACS being serviced.
Maintenance and Support
PVC-MPX-CNSL
PVC-MPX-CNX-
N/A
XX-YY
1
Description Part Number pivCLASS MultiPACS Console Standard Maintenance & Support
Annual subscription service. First year included with purchase. 8x5 Central M-F.
pivCLASS MultiPACS Connector Standard Maintenance & Support
Annual subscription service. First year included with purchase. 8x5 Central M-F.
1
To determine the identifiers for entry, see pivCLASS PACS Plug-in & Connector Information page 18.
• XX = PACS Product ID
• YY = PACS Version ID
PVC-MPX-CNSL-MS
PVC-MPX-CNX-MS
Page 12 of 19 © 2012 - 2014 HID Global Corporation/ASSA ABLOY AB. All rights reserved. January 2014
Evaluation Kits
pivCLASS How to Order Guide – D00546, B.3
Order evaluation kits using part numbers on this page. Evaluation kits provide all parts necessary to setup and evaluate a mini-pivCLASS system (including the
Registration Engine, Certificate Manager, Reader Services and PAM). Completion of pivCLASS Software Training and pivCLASS PKI @ Door Training is required to purchase these pivCLASS Evaluation Kits. See Certification Training, page 15.
Evaluation Kits
Part Number Description pivCLASS Evaluation Kit for CAK / CHUID Authentication
Includes the following
1 x pivCLASS RP40-H reader,
1 x pivCLASS Authentication Module & SD card,
1 x EDGE Solo single-door stand-alone access control system,
OMNIKEY 3821 PC contact card reader,
USB memory stick containing pivCLASS solution and documentation,
PIV test card kit,
Legacy test card kit (containing iCLASS & HID Prox cards and documentation).
pivCLASS Evaluation Kit for PIV + PIN Authentication
Includes the following
1 x pivCLASS RPKCL40-P reader,
1 x pivCLASS Authentication Module & SD card,
1 x EDGE Solo single-door stand-alone access control system,
OMNIKEY 3821 PC contact card reader,
USB memory stick containing documentation and software,
PIV test card kit,
Legacy test card kit (containing iCLASS & HID Prox cards and documentation).
D91920ANN
D91923ANN
January 2014 © 2012 - 2014 HID Global Corporation/ASSA ABLOY AB. All rights reserved. Page 13 of 19
pivCLASS How to Order Guide – D00546, B.3
USB Readers & Credential Testing Aides
USB smart card readers and biometric sensors are used during cardholder registration to ensure that the person who is presenting the card is the person to whom it was issued. The pivCLASS products are compatible with the following devices.
USB Reader and Biometric Sensor
Description Part Number
OMNIKEY Smart Card Reader
OMNIKEY 3821 USB PINPAD smart card reader. Contact reader with secure pin entry (class 2/3) with display. EMV, CCID and TAA compliant. Recommended for use with the pivCLASS Validation Workstation and the pivCLASS Registration Engine.
R38210012-1
Credential Testing Aides
Use these test card kits to ensure that your pivCLASS components have been properly set up and to verify that your system correctly detects potential compromises as the result of altered data on the smart card.
Description
PIV Test Card kit
Includes 3 cards – 2 of which are golden cards with no errors and the remaining 1 has been revoked.
The package also includes CA certificates the associated CRL. Note: This part is included in the evaluation kit – order this part additional or replacement cards.
Legacy Test Card kit containing iCLASS & HID Prox cards
Includes 1 x standard iCLASS card and 1 x HID Prox card. Note: This part is included in the evaluation kit – order this part as additional or replacement cards.
PIV Audit Card Kit
Includes a mix of 23 PIV and PIV-I cards, 21 cards have altered data that would, if not detected, result in an access control system compromise. Includes CA certificates,
CRL and a User Guide.
Part Number
01-0032-01
6712-311-01
01-0034-01
Page 14 of 19 © 2012 - 2014 HID Global Corporation/ASSA ABLOY AB. All rights reserved. January 2014
Certification Training
pivCLASS How to Order Guide – D00546, B.3
Completion of pivCLASS Software Training is required to resell the pivCLASS Registration Engine and pivCLASS Certificate Manager.
Completion of pivCLASS PKI @ Door Training is required to resell pivCLASS Authentication Modules (PAMs) and pivCLASS Bundles.
Completion of pivCLASS Software and pivCLASS PKI @ Door Training is required to purchase pivCLASS Evaluation Kits.
Part Number Description pivCLASS Software Training and Materials
Three hour Webinar covering pivCLASS Registration Engine, Certificate Manager and specific PACS Plugins.
Documentation included. Send training requests to [email protected]
This is a no charge item.
pivCLASS PKI @ Door Training and Materials – HID Facility
One day hands on class covering pivCLASS Reader Services and PAM installation, configuration and operation. Class size limited to 10 students.
Documentation included. Send training requests to [email protected]
pivCLASS PKI @ Door Training and Materials – Customer Facility
One day hands on class covering pivCLASS Reader Services and PAM installation, configuration and operation. Class size limited to 10 students.
Documentation included. Send training requests to [email protected]
pivCLASS Training T&E - Customer Facility
Covers the cost associated with Travel and Expenses for training at the Customer's Facility.
6712-921
6712-914
6712-915
PIV-TRAIN-xxxx
January 2014 © 2012 - 2014 HID Global Corporation/ASSA ABLOY AB. All rights reserved. Page 15 of 19
pivCLASS How to Order Guide – D00546, B.3
Reader Programming Cards
Reader programming cards are used to reconfigure a reader to a desired target configuration by using Reader Configuration Cards. Firmware Update Cards can be used to reload the reader with the latest version of firmware. Contact HID Technical Support ( https://support.hidglobal.com
) to ensure selecting the proper configuration card extension.
Reader Configuration Cards
Part Number
Description
Base Part No. iCLASS Security Keys Configuration Card Extension
Reader Mode and Output Configuration Settings
Use these part numbers to order configuration cards to change reader modes (for example, Wiegand to PAM) and output formats (for example, 200 bit Wiegand).
Includes reader configuration programming card and instructions
Reset Beeper / LED, Keypad and IPM to Factory Defaults
Use these part numbers to order configuration cards to reset reader settings to factory defaults.
Includes reader configuration programming card and instructions
SEC9X-CRD-
SEC9X-CRD-
0 = Standard
E = Elite
0 = Standard
E = Elite
-XXXX = Specific configuration
1
-XXXX = Specific configuration
1
1
Contact your HID Global Support representative (https://support.hidglobal.com) to determine your specific configuration extension.
2
Factory Default configuration includes: LED normally red, beep on and flashes green on read card; keypad data = buffer one key, no parity, 4 bit message, Intelligent Power Management = Off; Prox reads 125 kHz HID Prox, AWID, Indala (ASP10022), EM4102.
Firmware Update Cards
For updating reader interpreters and other functionality to the latest firmware version over an RF interface.
Description
Programming Cards – Firmware
Base Part No. iCLASS
Security Keys
Part Number
Version Update Card Extension
Firmware Update Cards
Includes latest version of reader firmware on a RF programming card and instructions.
SEF9X-UPG-
0 = Standard
E = Elite
E = Rev E Version -XXXX
1
1
Contact your HID Support Representative ( https://support.hidglobal.com
) to obtain the Firmware Update Card extension.
Page 16 of 19 © 2012 - 2014 HID Global Corporation/ASSA ABLOY AB. All rights reserved. January 2014
Reader Accessories
Part No. Description
Mounting Plates, Spacers, Screws and Accessory Kits
R10 (or equivalent size model) Mini-Mullion Reader Mounting Plate, Any Color
6303-104-01
6309-103-01
6403-109-01
6132AKB
6132AGB
6132AKC
6132AGC
6132AKE
6132AGE
6132AK
6132AG
6132AKK
6132AKL
6132AKK
6132AKL
6714-119-01
6714-305-01
400-2D71-06
6700-300-02
6714-306-04
R15 (or equivalent size model) Mullion Reader Mounting Plate, Any Color
R40 (or equivalent size model) Wall Switch Reader Mounting Plate, Any Color
R10 (or equivalent size model) Reader Spacer, Black
R10 (or equivalent size model) Reader Spacer, Gray
R15 (or equivalent size model) Reader Spacer, Black
R15 (or equivalent size model) Reader Spacer, Gray
R40 (or equivalent size model) Reader Spacer, Black
R40 (or equivalent size model) Reader Spacer, Gray
RK40 (or equivalent size model) Reader Spacer, Black
RK40 (or equivalent size model) Reader Spacer, Gray
RKCL40 (or equivalent size model) Reader Spacer, Angle Right, Black
RKCL40 (or equivalent size model) Reader Spacer, Angle Left, Black
RKCLB40 (or equivalent size model) Reader Spacer, Angle Right, Black
RKCLB40 (or equivalent size model) Reader Spacer, Angle Left, Black
RKCL40 Wall Plate, two piece, Black
RKCL40 Mounting Plate for two piece Wall Plate, Black
Security Screw
Reader Accessory Kit (includes terminal blocks, screws and installation guide)
Reader Accessory Kit (includes terminal blocks, screws and installation guide for reader with side car) pivCLASS How to Order Guide – D00546, B.3
January 2014 © 2012 - 2014 HID Global Corporation/ASSA ABLOY AB. All rights reserved. Page 17 of 19
pivCLASS How to Order Guide – D00546, B.3
pivCLASS PACS Plug-in & Connector Information
Use this table to complete the Registration Engine PACS ID part number extension and to complete the MultiPACS Connector PACS ID part number extension.
Vendor
HID MultiPACS
AMAG
Amano McGann
AMT
Brivo
Continental Access
Datawatch
DSX
Gallagher
Hirsch-Identive
Honeywell
Honeywell
Identicard
Johnson Controls
Kantech
Keyscan
Lenel
Matrix Systems
Open Options
Quintron
RedCloud
RS2 Technologies
S2
Sielox
Siemens
Software House
Software House
UTC
UTC
Product Name
MultiPACS Proxy
Symmetry
AmanoNet
WebBrix
ACS Aparato
CA 3000
D3000
WinDSX
Command Centre
Velocity
EBI
Pro-Watch
PremiSys
P2000
EntraPass
System VII
OnGuard
Frontier
DNA Fusion
AccessNsite
Express, Enterprise, Virtual
Access It!
Netbox
Pinnacle
SiPass
CCURE 800
CCURE 9000
Facility Commander Wnx
Picture Perfect
Product Version
6,7
3.1
R410
3.7, 3.8, 4.0
V3.1, V4.0
Global Edition, Corporate Edition
5.10, 5.12, 6.0, 6.1, 6.2, 6.3, 6.4, 6.5
Universal
2.5
9.0 through 10.0
1.93 through 2.20
7.5, 7.6
4.0, 4.6
Product Part #
00
01
25
02
22
23
23
18
19
20
21
24
24
08
09
09
10
11
12
03
04
05
06
07
13
14
15
16
17
Version Part#
00
00
00
00
00
01
02
00
00
00
00
01
02
00
01
02
00
00
00
00
00
00
00
00
00
00
00
00
00
Page 18 of 19 © 2012 - 2014 HID Global Corporation/ASSA ABLOY AB. All rights reserved. January 2014
pivCLASS Supplemental Ordering Information
Include the following information with your order for all pivCLASS products.
Integrator/Installer Contact Information
Company Name
Company Contact Name
Company contact email for software download instructions
End User Information
End User Company Name
End User location where product will be deployed
Access Control System used at this location
Access Control System version
Type of IDMS, CMS or HR database if IDPublisher is being ordered
January 2014 © 2012 - 2014 HID Global Corporation/ASSA ABLOY AB. All rights reserved. pivCLASS How to Order Guide – D00546, B.3
Page 19 of 19
