System Management

System Configuration

Prerequisites

License

1. Software license

   1. Genetec

      • Security Center: 1ea.

      • SDK Connection: GSC-1SDK-SUPREMA-READ (One license supports 2 connection.)

        1. Config Tool login: 2ea

        2. Security desk login: 1ea

        3. Suprema extractor plugin: 1ea per Genetec Security Center Server

        4. Suprema device plugin: 1ea per Suprema device plugin

           Información

           One device plugin supports up to 4 cloud links (256 Suprema devices), and you can add as many Suprema Device Plugin as you need.

           • Needs total 3 GSC-1SDK-SUPREMA-READ per Server.

   2. Suprema

      • Plugin license: INT_GEN_GSC

2. Device license

   1. Genetec

      • GSC-Sy-X-1R(E): 1ea per Suprema device assigned to door as reader.

   2. Suprema

      • Only devices that it's ID is registered in Server license can be registered in Plugin.

      • Sku: Device model - GEN.

Database

1. Permission for SQL database

   To ensure proper operation of the Plugin (Device Plugin and Extractor DB), please grant the SQL account the following permissions:

   1. Server roles:

      • db_creator

      • processadmin

      • public

   2. Database roles:

      • db_backupoperator

      • db_datareader

      • db_datawriter

2. Database size requirements

   The required database storage capacity varies depending on the number of users enrolled with biometric data. When face templates are enrolled, the Suprema Extractor Plugin generates and stores the corresponding templates in its Database.

   • Each face template requires approximately 104 KB of database space.

   • Ensure that sufficient storage capacity is allocated based on the expected number of biometric users.

   

RIO protocol

To ensure proper operation of the Plugin, please enable RIO protocol for Synergis Cloud Link or Softwire.

Process

1. Enter the following URL into your browser.

   https://[Unit IP]/Features/DuiRIO/Enabled/Set?value=true

   

2. Login to Synergis Cloud Link or Softwire.

3. Click a URL http://[IPaddress]/Features/DuiRIO/Enabled/Set?value=true.

   

   When the RIO protocol is enabled, the RIO tab becomes available on the Hardware page under Config Tool → Access Control → Cloud Link.

   

Profile image quality setting

If you'd like to extract face templates from cardholder profile images in GSC, please adjust picture size to ensure picture quality.

• Path: Config Tool → Access Control → General settings

  

Device setting

1. Removing all users and logs from devices.

2. Factory reset devices.

3. Set User ID type as Alphanumeric.

   Información

   Default IP and PW for device admin.

   • ID: su

   • PW: 1234

   You can change PW from Config Tool → Suprema Plugin Configuration → Superadmin Credential page.

4. Network setting.

   • Supports DHCP.

   • Network settings required according to site policy.

5. User ID type setting.

   The user ID type must be set to alphanumeric before connecting the device to the Suprema plugin.

Device Registration

1. In the Config Tool, click the Plugins under Tasks.

   

2. Click the Suprema Device Plugin.

   

3. Go to Device Management tab.

   

4. Click the Search Device button. All available devices will appear.

   If Device Communication Mode is set to Device To Server, please click the Refresh List button in the pane below.

   

5. Select the device to add by checking the Select box, and click the Add Devices button. To register all devices, click the Add All Devices button.

   

View the Device Sync Information

1. In the Config Tool, click the Plugins under Tasks.

   

2. Click the Suprema Device Plugin.

   

3. Go to Device Sync Information tab.

   

4. Synchronization information of connected Suprema devices can be checked.

   

   

   No.	Item	Description
   1	Device ID	Displays the Suprema device ID.
   2	Device Name	Displays the Suprema device name.
   3	Online Status	Displays the network status of the device. - True / False
   4	Sync Status	Displays the synchronization status of the device. - Idle /Cache loading/ Biometric downloading/ Syncing
   5	Device Model	Displays the Suprema device model.
   6	IP Address	Displays the Suprema device IP Address.
   7	Device Port	Displays the Suprema device port.
   8	Device Firmware Version	Displays the Suprema device firmware version.
   9	Failed Users	Allows checking users who failed to synchronize.
   10	Doors (syncing / failed / total)	Displays the synchronization status of the door.
   11	Schedules (syncing / failed / total)	Displays the synchronization status of the schedule.
   12	Access Levels (syncing / failed / total)	Displays the synchronization status of the access level.
   13	Access Groups (syncing / failed / total)	Displays the synchronization status of the access group.
   14	Users (syncing / failed / total)	Displays the synchronization status of the cardholder.
   15	Last Trigger Time	The time when synchronization with the device was last triggered.
   16	Last Success Time	The time when synchronization with the device was last completed successfully.

   Información

   The values displayed for each synchronization status are as follows:

   • syncing: Number of items currently being synchronized with the device.

   • failed: Number of items that failed to synchronize with the device.

   • total: Number of items that have been successfully synchronized.

Editing Device Settings and Information

Settings and information of registered devices can be edited.

1. In the Config Tool, click the Plugins under Tasks.

   

2. Open the left arrow of the Suprema Device Plugin and select a registered device. The Device Settings area will appear.

   

3. Set the desired options, then click the Apply button at the bottom to apply the edited settings.

Device Settings

Information

You can enter or edit the name and the group of a device. If a new firmware version is available, you can upgrade to it.

No.	Item	Description
	Name	Enter a device name.
	Description	View the product name, ID, and IP.
	Device ID	View the device ID.
	Firmware Version	Click Upgrade to install a new firmware version.
	Kernel Version	View the kernel version.
	Time Zone	Set the time zone of the device.
	Device Type	View the device type.
	Product Name	View the model name.
	Hardware Version	View the hardware version.
	Time Synchronization with Server	Select the option to synchronize the time information of the device with the server.
	Display Date	View the displayed time.
	Date Format	Select a date format.
	Get Time	Click the button to fetch the time set in the device.

Network

You can configure the network connection settings of the device.

No.	Item	Description
	TCP/IP	You can configure the TCP/IP connection settings of the device. Use DHCP: Select this option to allow the device to use a dynamic IP address. If this option is selected, network settings cannot be entered. IP Address, Subnet Mask, Gateway: Enter network settings of the device. Device Port: Enter a port to be used by the device. DNS Server: Enter a DNS server address.
	Server	You can enter connection settings to use in the server mode. Device → Server Connection: Select this option to configure the settings for connecting to the devices. If this option is selected, server network settings can be entered. Server Address: Enter the IP address or domain name of the server. Server Port: Enter the port number of the server.
	Serial	You can configure the connection mode, and baud rate of devices connected over RS-485. RS-485: Set a RS-485 mode. Baud Rate: Set a baud rate of the RS-485 connection.

Authentication

You can configure the user authentication settings of the device.

Face Authentication Device

No.	Item	Description
	Auth Mode	You can configure the authentication modes of the device. Use any combinations of fingerprint, ID, card, PIN and face as authentication modes. Click +Add and create an authentication mode by dragging and dropping available options.
	Auth Timeout	When using a combination of multiple credentials in Auth Mode, the system waits for this length of time to authenticate the second credential. Set a timeout period for authenticating the second credential after authenticating the first credential. If the second credential is not authenticated within this time, the authentication fails.
	Full Access	You can grant full access to users registered within the device without setting any access groups.
	Face	You can configure the detail settings concerning face authentication. 1:N Security Level: You can set a security level to use for face authentication. The higher the security level is set, the false rejection rate (FRR) gets higher, but the false acceptance rate (FAR) gets lower. Enrollment Time: If a face is not registered during the set time when registering a user’s face, the face registration will be canceled. Motion Sensor: Set the sensitivity for detecting motion near the device. Face Detect Setting: Set the environment for recognizing the user’s face during face authentication. Maximum Head Pose Angle: Set maximum angle of head rotation. Detection Distance: Set the minimum and maximum detection distance. Wide Search: Set to ON, search for a face in the entire camera image.
	Use Suprema Handler	This option enables or disables RIO communication between the Suprema device and the Cloud Link. Enable: Events generated from the Suprema device are sent to the Cloud Link through the Plugin. Disable: Events generated from the Suprema device are not sent to the Plugin. Disable this option when the Suprema device is used as a reader connected to a Mercury controller.

Fingerprint Authentication Device

No.	Item	Description
	Auth Mode	You can configure the authentication modes of the device. Use any combinations of fingerprint, ID, card, PIN and face as authentication modes. Click +Add and create an authentication mode by dragging and dropping available options.
	Auth Timeout	When using a combination of multiple credentials in Auth Mode, the system waits for this length of time to authenticate the second credential. Set a timeout period for authenticating the second credential after authenticating the first credential. If the second credential is not authenticated within this time, the authentication fails.
	Full Access	You can grant full access to users registered within the device without setting any access groups.
	Fingerprint	You can configure the detail settings concerning fingerprint authentication. 1:N Security Level: You can set a security level to use for fingerprint authentication. The higher the security level is set, the false rejection rate (FRR) gets higher, but the false acceptance rate (FAR) gets lower. Scan Timeout: If a finger is not registered during the set time when registering a user’s finger, the finger registration will be canceled. Sensor Sensitivity: Set the sensitivity of the fingerprint recognition sensor. Set the sensitivity higher to obtain precise fingerprint information. 1:N Fast Mode: You can set the speed of fingerprint authentication. Selecting Auto sets the authentication speed according to the total number of fingerprint templates enrolled on the device. Template Format: You can check the configured fingerprint template format. Matching Timeout: Set the timeout for fingerprint matching. If authentication is not completed within the specified time, it will fail. Fingerprint LFD: Set the level for fake fingerprint detection. Higher levels for fake fingerprint detection may also increase rejection rates for actual people’s fingerprints. Sensor Mode: Set the operating mode of the fingerprint sensor. Auto On: The fingerprint sensor turns on by recognizing the user's finger. Always On: The fingerprint sensor remains always on.
	Use Suprema Handler	This option enables or disables RIO communication between the Suprema device and the Cloud Link. Enable: Events generated from the Suprema device are sent to the Cloud Link through the Plugin. Disable: Events generated from the Suprema device are not sent to the Plugin. Disable this option when the Suprema device is used as a reader connected to a Mercury controller.

Advanced

You can set the display/sound and wiegand.

No.	Item	Description
	Language	Sets the display language of the device.
	Device Volume	Controls the device’s default volume.
	Menu Timeout	Sets the timeout for the menu screen.
	Intercom Speaker Volume	Sets the speaker volume when using the Intercom function.
	Intercom Microphone Volume	Sets the microphone volume when using the Intercom function.
	Backlight Timeout	Sets the timeout for the backlight.
	Msg. Timeout	Sets the timeout period for various messages to disappear automatically.
	Screen Saver	Sets this option to use the screen saver feature. It reduces unnecessary energy consumption by lowering the brightness of the LCD screen when the device is not in use.
	Use Voice	Enables voice guidance.
	Sound	Configures the sound effect for boot, authentication success, and authentication failure events. Click Find and select a *.wav file (less than 500 KB).
	Input/Output	You can select input/output mode.
	Wiegand I/p Format	You can set a format for Wiegand.
	Output Mode	You can set the Wiegand signal output mode. If it is set to Normal, a card will be scanned in the set Wiegand format. If it is set to ByPass, CSN will be sent regardless of Wiegand authentication. ByPass should be set when using the device without an entrance door control function. If it is set to Normal mode, it is possible to set Fail Code, and select a value to be transmitted when Wiegand card authentication fails.
	Pulse Width(μs)	You can set the pulse width of the Wiegand signal.
	Pulse Interval(μs)	You can set the pulse interval of the Wiegand signal.
	Output Info	You can select the information output to the device when the user authenticates.

Mask

You can set the detailed settings of mask detection.

Face authentication devices can detect masks and restrict access to users without masks.

No.	Item	Description
	Mask Detection	You can set whether to use mask detection or not. If you select Use (Deny access when failed to detect mask), it refuses authentication of users who are not wearing a mask and saves event logs. If you select Use (Allow access after leaving log when failed to detect mask) users who are not wearing a mask can authenticate but event logs still be saved.
	Mask Detect Level	You can set sensitivity for mask detection.
	Check Mode	Check after authentication: Authenticate and then detect whether the user is wearing a mask. Check before authentication: Detect whether the user is wearing a mask and then authenticate. This mode does not attempt to authenticate a user’s identity if they do not wear masks. Check without authentication: Detect whether a user is wearing a mask without authentication. When this mode is activated, any user wearing a mask can access it regardless of authentication.

Intercom

You can set the detailed settings of SIP Intercom.

No.	Item	Description
	SIP Server Address	Enter SIP server address.
	SIP Server Port	Enter SIP server port.
	SIP Username	Enter username of your SIP account.
	Password	Enter password of your SIP account.
	Authorization ID	Enter authorization ID of your SIP account.
	Registration Duration(sec)	Enter Registration Duration in seconds. The device (SIP endpoint) tries to register to the SIP server every set Registration Duration. - Registration Duration can be set between 60 to 600 secs.
	Open Door Button(DTMF)	Set a button to open the door on the phone.
	Outbound Proxy Server	If your SIP service has a separate (outbound) proxy server, set this to Use.
	Outbound Proxy Server Address	Enter the outbound proxy server address.
	Outbound Proxy Server Port	Enter the outbound proxy server port.
	Display Extension Number	If you mind the device displaying extension numbers on the screen, set this to Not Use.
	Extension Number	Register extension numbers up to 128. Click Edit to add or delete. - Add: Add an extension number. - Delete: Delete an extension number.

Assign Device to Cloud Link

1. In the Config Tool, click the Access Control under Tasks.

   

2. Go to Manage Suprema Devices tab at the top of the screen.

   

3. Enter the Cloud Link Host (IP address), Cloud Link Username (ID), and Cloud Link Password, and then click the Validate Login button.

   

4. Click the View Devices To Add button.

   

5. Select the device to assign by checking the Select box, and click the Assign or Assign Selected button. To assign all devices, click the Assign All button.

   

Door Configuration

1. In the Config Tool, click the Area view under Tasks.

   

2. Select the door and go to the Hardware tab.

3. Assign Suprema devices to Reader, Request to exit, and Entry sensor.

   

Input Configuration Limitation

In Suprema architecture, input types (e.g., REX, Door Contact) can only be configured after the device is mapped to a Door.

Root Cause:

• Suprema SDK requires inputs to be assigned at the Door level, not at the device level.

• Therefore, there is no way to pre-configure input types before assigning the device to a Door in Genetec.

---

Caution

Any input type changes made via:

Config Tool → Access Control → Cloud Link → Peripherals Tab will not apply to the Suprema device directly.

---

Plugin’s Auto Assignment Logic

Input Number	Input Type Assigned by Plugin
Odd Numbers	NO (Normally Open)
Even Numbers	NC (Normally Closed)

This automatic assignment helps ensure compatibility when mapping inputs post-Door configuration.