Setting Up Aurora E-Plex Locks

The following article will go over the basic setup of E-Plex 5700 and 7900 locks with the Aurora software. These steps were created to assist with new installations. For more advanced installations and troubleshooting assistance, please contact the Support team

It is recommended to do a Site Survey before any installation. Site Surveys require an M-Unit (P/N 75427)

Hardware Requirements

Matching E-Plex 7900 Command Cards To Locks

Installing E-Plex Certificates

1. Launch the Aurora Client as an administrator. This is done by right clicking on the Launch Aurora icon and selecting Run As Administrator
2. Go to Application Management > Application Utilities > Security (tab)
3. Click Create CA root certificate
4. At the bottom of the screen, add 127.0.0.1 and click Create new certificate
   
5. Once this is done, two certificates will be listed

6. These certificates now need to be imported into the certificate store

   Due to varying server user permissions, it is not recommended to use the Import Into Store button; however, this feature will function normally if the server user has all the required permissions (local and domain). If unsure, use the long method below

   When exporting the certificates, it is important to save them in a safe location

   A password is required for saving/adding the Private certificate only (1234 is adequate)

   The first dialogue box is from clicking Export CA root certificate and the second dialogue box is from clicking Export PKCS #12 file

   

7. Open the certificate location and right click on the *.DER certificate and select Install Certificate
8. Select Local machine and click Next
   
9. Assign the certificate to the Trusted Root Certification Authorities Store and click Next
10. Click Finish to complete import
     
11. Open the certificate location and right click on the *.PFX certificate and select Install PFX
12. Select Local Machine and click Next
     
13. Click Next of the following screen
     
14. Click Next and then you will be prompted for the password from creation and click Next
15. Assign the certificate to the Personal Store and click Next
16. Click Finish to complete import
    

17. The imports can be verified by running certlm.msc

    

    

    The personal certificate will expire after 2 years and will require updating

    Updating An Expired Personal Certificate For Aurora E-Plex

Install The E-Plex Services

Now that the certificates have been installed, you will need to install the E-Plex services. These will be included with Keyscan Aurora ISO that was downloaded, or they can be downloaded from the software updates website

Once installed, dormakaba HMS and EPLEX Server will be running in services.msc

E-Plex Locks In Aurora

Aurora has some specific settings that must be addressed to successfully add and manage E-Plex locks

Some settings are not viewable until at least 1 lock is added to the system

Use the following steps to add at least 1 lock to the system

If the lock information is unknown, add an E-Plex 7900 “placeholder” lock. This can be edited or removed later

Adding A Lock To Aurora

1. On the Application Management > Manage System User screen, ensure that all System Users that require E-Plex access have those permissions selected
   
2. Click on Save and close Aurora
3. Relaunch Aurora as an Administrator
4. Click on Site Information and select Hardware Setup
5. Use the drop-down on the top left to select Door Groups and then E-Plex Door Group
6. On the E-Plex Door Group screen, name the group appropriately
7. Select the type of lock being added and name the lock appropriately. Update settings as required. 
   Click Save
    

8. Repeat this process for any additional locks

   All locks in a group will be controlled by any assigned schedule(s); therefore, it is common to add multiple door groups to a single installation, to create proper door control

Setting Up Aurora For E-Plex Locks

1. Navigate to On the Site Information > Site Information Setup screen
2. On this screen you will need to add a Master PIN and a Master Credential
   The Master Credential will be a working credential that will not be able to be assigned to a user and should be set aside in a safe place.
3. Within the Application Management > Application Utilities screen, on the Application Settings tab, set your E-Plex Type for each Person Type

4. Use the following to determine the best match for each Person Type
   Manager

   • Lock programming/audit rights and 24/7 access; no expiry
   • Overrides Holidays
   • Overrides Privacy
   • Overrides Lockdown ** can be changed if Enhanced Lockdown is registered
   • Temp settings do not apply

   Guest

   • Schedule based access with optional privileges
   • Follows schedules
   • Follows temp settings
   • Cannot override Lockdown ** can be changed if Enhanced Lockdown is registered

   M-Unit

   Do not use this setting

   On the same screen, enable Auto Generate PIN

   On the Site Information > Group Setup screen, enable E-Plex Group for all groups that should have access to E-Plex locks. Do this by left clicking on No and putting an X in the box

   

Adding A Gateway To Aurora

1. To add a Gateway to Aurora, run Aurora as an Administrator. 
2. Go to the Application Management > Application Utilities window and the Gateway Setup tab. 

3. Select Legacy for a Gen1 Gateway and Multi-Segment for a Gen2 Gateway

   Gen1 devices and Gen2 devices are not interchangeable, though both can be installed on the same system. Gen1 locks will only work with a Gen1 Gateway/Router and Gen2 locks will only work with a Gen2 Gateway/Router

4. Name the Gateway, being specific in names can assist with troubleshooting later
5. Leave the channels as populated or change to match the image below. Gateways and Routers can receive interference from WI-FI signals and limiting the number of channels can improve performance
6. Server IP Address and Server Name must be accurate. The server requires a static IP Address, as the Gateways are reverse networking devices. The port is set to 27702 for Gen1 Gateways and 28002 for Gen2 Gateways. DHCP operation is recommended. If a static IP Address is going to be assigned, all fields are mandatory for proper operation
7. After the required fields are completed click Save.
8. Connect the Gateway to the server via a USB cable and click Configure
9. Repeat for any additional Gateways, and make sure to label each Gateway accordingly
10. If your Gateways are not coming online when connected to the network, refer to the following article regarding the ports used by the E-Plex services. Check your server security, as it is possible that rules may need to be implemented. What Ports Does Keyscan Aurora Use?

Adding A Router To A Gateway

Sometimes there is no network availability to add additional Gateways, and extended coverage is required. In this case, a Router can be setup to extend the coverage area

1. Go to the Status Window by clicking on System Status and Control and selecting Status
2. Open the Gateway Status widget
3. The intended Router must be in a factory state
4. Ensure that the Router is not powered on
5. Set the target Gateway into Join On
6. Holding the green button in, power up the Router
7. The LED’s on router (green & red) will flash at the same time. Wait for the LEDS to stop sequence blinking and the green LED blinks only
8. Once this happens, release the green button and press the reset on the Router
9. Set the target Gateway into Join Off
10. Verify that the Router has joined the Gateway in Application Utilities and Gateway Setup

ZACing a 5700 Lock To Aurora

1. From the Site Information > Hardware Setup screen, go to the Door Group that the lock was assigned to
2. Select the lock that is going to be joined to the Gateway/Router
3. Take note of the ZAC number on this screen
4. In the Status Window and Gateway Status, put the target Gateway into Join On
5. At the lock enter the following  ##088#ZAC#
6. The lock will flash the red & green LEDs 3 times, followed by a single green flash, on success
7. If the lock fails to ZAC to the Gateway, factory reset the lock and try again
8. Repeat these steps for any additional locks being assigned to this specific Gateway

9. In the Status Window and Gateway Status, put the target Gateway into Join Off

   Resetting Aurora E-Plex 7900/5700 Locks

ZACing A 7900 lock To Aurora

1. From the Site Information > Hardware Setup screen, go to the Door Group that the lock was assigned to
2. Select the lock that is going to be joined to the Gateway/Router
3. Click the Default ZAC button and hit save
4. In the Status Window and Gateway Status, put the target Gateway into Join On
5. Present the ZAC command card to the lock
   The LEDs on the lock will flash red and green a few times 
   A successful ZAC with result in a single green flash
   If the lock fails to ZAC, it will indicate with a single red LED flash
   If the lock fails to ZAC to the Gateway, factory reset the lock and try again
6. Repeat these steps for any additional locks being assigned to this specific Gateway
7. In the Status Window and Gateway Status, put the target Gateway into Join Off

E-Plex 7900 Command Cards User Guide

Adding An E-Plex Schedule

1. To add a schedule to Aurora for Group Access Levels or door operations, open the Site Information menu and select Schedule management
2. At the top left, use the drop-down and select E-Plex Schedule
3. Name your schedule appropriately and add the required time blocks
   E-Plex schedules cannot overlap, so plan accordingly
4. Click Save and repeat the process for any other schedules

Adding A Schedule To A Door Group

1. From the Site Information > Hardware Setup screen, go to the Door Group that will have scheduled operations
2. On the Schedule Assignment tab, select the schedules that will apply to this door group
3. For Group Access Level use only, select the desired schedule(s) and click Save
4. If the schedule is to be used for door operations, select the desired schedule(s), update the door operations (Schedule On Mode & Passage Mode) and click Save

Updating Group Access Levels

1. Now that locks have been added, you will need to set the appropriate access levels
2. Open Manage People > Group Access Levels
3. Click on the E-Plex Group Access Levels tab
4. Select the E-Plex group to be updated (drop-down near top center)
5. Select the Group Access Level to be updated from the left
6. Adjust the access levels to the group on the right and click Save
7. Repeat these steps for all groups that require updating

Adding Credentials With E-Plex Access

1. When adding credentials, it is imperative that the credential format is accurate
2. Go to the Manage People > Add Person screen
3. On the Credential Information screen, select the correct format from the top left
   If the credentials are Keysan 36bit, select Keyscan. If the credentials are 26bit and added as Keyscan 36bit, then they will fail to function on the lock(s)
4. The following information is required
   • Given Name
   • Surname
   • Batch/Facility Code
   • Credential Number
   • PIN (for E-Plex 5700 locks)
   • Group Access level(s)
5. Add additional information as desires and click Save

Updating E-Plex Locks

1. Go to the Status Window by clicking on System Status And Control and selecting Status
2. Open the E-Plex Door Status widget
3. Select the door group requiring an update
4. Any locks out of synchronization will display Sync Required
5. Right click on the lock and select Full Sync
   Properly communicating locks will synchronize at 4am server time
6. Repeat for any locks requiring synchronization