The following article will go over the basic setup of E-Plex 5700 and 7900 locks with the Aurora software. These steps were created to assist with new installations. For more advanced installations and troubleshooting assistance, please contact the Support team
It is recommended to do a Site Survey before any installation. Site Surveys require an M-Unit (P/N 75427)
Hardware Requirements
| Device | Minimum Firmware | Recommended Firmware |
| Gateway/Router (P/N 75425 & 75428) | 2.076 | 2.078 |
| E-Plex 5700 (Legacy) | 3.75 | 3.90 |
| E-Plex 7900 | 1.29 | 1.31 |
Matching E-Plex 7900 Command Cards To Locks
| RFID # | RFID Description | Command Cards |
| 1 | MiFare | K-E79MIF |
| 2 | 125khz Prox | K-E79PRX |
| 3 | HID iCLASS SEOS Public | K-E79CSEOS |
| 5 | HID iCLASS SE and classic Keyscan Elite Key | K-E79CSELT |
| 6 | HID iCLASS classic and SE/SR Public | K-E79CSCLS |
Installing E-Plex Certificates
Launch the Aurora Client as an administrator. This is done by right clicking on the Launch Aurora icon and selecting Run As Administrator
Go to Application Management > Application Utilities > Security (tab)
Click Create CA root certificate
At the bottom of the screen, add 127.0.0.1 and click Create new certificate
Once this is done, two certificates will be listed
These certificates now need to be imported into the certificate store
Due to varying server user permissions, it is not recommended to use the Import Into Store button; however, this feature will function normally if the server user has all the required permissions (local and domain). If unsure, use the long method below
When exporting the certificates, it is important to save them in a safe location
A password is required for saving/adding the Private certificate only (1234 is adequate)
The first dialogue box is from clicking Export CA root certificate and the second dialogue box is from clicking Export PKCS #12 file
Open the certificate location and right click on the *.DER certificate and select Install Certificate
Select Local machine and click Next
Assign the certificate to the Trusted Root Certification Authorities Store and click Next
Click Finish to complete import
Open the certificate location and right click on the *.PFX certificate and select Install PFX
Select Local Machine and click Next
Click Next of the following screen
Click Next and then you will be prompted for the password from creation and click Next
Assign the certificate to the Personal Store and click Next
Click Finish to complete import
The imports can be verified by running certlm.msc
The personal certificate will expire after 2 years and will require updating
Updating An Expired Personal Certificate For Aurora E-Plex
Install The E-Plex Services
Now that the certificates have been installed, you will need to install the E-Plex services. These will be included with Keyscan Aurora ISO that was downloaded, or they can be downloaded from the software updates website
Once installed, dormakaba HMS and EPLEX Server will be running in services.msc
E-Plex Locks In Aurora
Aurora has some specific settings that must be addressed to successfully add and manage E-Plex locks
Some settings are not viewable until at least 1 lock is added to the system
Use the following steps to add at least 1 lock to the system
If the lock information is unknown, add an E-Plex 7900 “placeholder” lock. This can be edited or removed later
Adding A Lock To Aurora
On the Application Management > Manage System User screen, ensure that all System Users that require E-Plex access have those permissions selected
Click on Save and close Aurora
Relaunch Aurora as an Administrator
Click on Site Information and select Hardware Setup
Use the drop-down on the top left to select Door Groups and then E-Plex Door Group
On the E-Plex Door Group screen, name the group appropriately
Select the type of lock being added and name the lock appropriately. Update settings as required. Click Save
Repeat this process for any additional locks
All locks in a group will be controlled by any assigned schedule(s); therefore, it is common to add multiple door groups to a single installation, to create proper door control
Setting Up Aurora For E-Plex Locks
On the Site Information > Site Information Setup screen
On this screen you will need to add a Master PIN and a Master Credential
The Master Credential will be a working credential that will not be able to be assigned to a user and should be set aside in a safe place
Within the Application Management > Application Utilities screen, on the Application Settings tab, set your E-Plex Type for each Person Type
Use the following to determine the best match for each Person Type
Manager
- Lock programming/audit rights and 24/7 access; no expiry
- Overrides Holidays
- Overrides Privacy
- Overrides Lockdown ** can be changed if Enhanced Lockdown is registered
- Temp settings do not apply
Guest
- Schedule based access with optional privileges
- Follows schedules
- Follows temp settings
- Cannot override Lockdown ** can be changed if Enhanced Lockdown is registered
M-Unit
- Do not use this setting
On the same screen, enable Auto Generate PIN
On the Site Information > Group Setup screen, enable E-Plex Group for all groups that should have access to E-Plex locks. Do this by left clicking on No and putting an X in the box
Adding A Gateway To Aurora
To add a Gateway to Aurora, run Aurora as an Administrator. Go to the Application Management > Application Utilities window and the Gateway Setup tab. Select Legacy for a Gen1 Gateway and Multi-Segment for a Gen2 Gateway
Gen1 devices and Gen2 devices are not interchangeable, though both can be installed on the same system. Gen1 locks will only work with a Gen1 Gateway/Router and Gen2 locks will only work with a Gen2 Gateway/Router
Name the Gateway, being specific in names can assist with troubleshooting later
Leave the channels as populated or change to match the image below. Gateways and Routers can receive interference from WI-FI signals and limiting the number of channels can improve performance
Server IP Address and Server Name must be accurate
The server requires a static IP Address, as the Gateways are reverse networking devices
The port is set to 27702 for Gen1 Gateways and 28002 for Gen2 Gateways
DHCP operation is recommended
If a static IP Address is going to be assigned, all fields are mandatory for proper operation
After the required fields are completed click Save
Connect the Gateway to the server via a USB cable and click Configure
Repeat for any additional Gateways, and make sure to label each Gateway accordingly
If your Gateways are not coming online when connected to the network, refer to the following article regarding the ports used by the E-Plex services. Check your server security, as it is possible that rules may need to be implemented
What Ports Does Keyscan Aurora Use?
Adding A Router To A Gateway
Sometimes there is no network availability to add additional Gateways, and extended coverage is required. In this case, a Router can be setup to extend the coverage area
Go to the Status Window by clicking on System Status and Control and selecting Status
Open the Gateway Status widget
The intended Router must be in a factory state
Ensure that the Router is not powered on
Set the target Gateway into Join On
Holding the green button in, power up the Router
The LED’s on router (green & red) will flash at the same time. Wait for the LEDS to stop sequence blinking and the green LED blinks only
Once this happens, release the green button and press the reset on the Router
Set the target Gateway into Join Off
Verify that the Router has joined the Gateway in Application Utilities and Gateway Setup
ZACing a 5700 Lock To Aurora
From the Site Information > Hardware Setup screen, go to the Door Group that the lock was assigned to
Select the lock that is going to be joined to the Gateway/Router
Take note of the ZAC number on this screen
In the Status Window and Gateway Status, put the target Gateway into Join On
At the lock enter the following ##088#ZAC#
The lock will flash the red & green LEDs 3 times, followed by a single green flash, on success
If the lock fails to ZAC to the Gateway, factory reset the lock and try again
Repeat these steps for any additional locks being assigned to this specific Gateway
In the Status Window and Gateway Status, put the target Gateway into Join Off
Resetting Aurora E-Plex 7900/5700 Locks
ZACing A 7900 lock To Aurora
From the Site Information > Hardware Setup screen, go to the Door Group that the lock was assigned to
Select the lock that is going to be joined to the Gateway/Router
Click the Default ZAC button and hit save
In the Status Window and Gateway Status, put the target Gateway into Join On
Present the ZAC command card to the lock
The LEDs on the lock will flash red and green a few times
A successful ZAC with result in a single green flash
If the lock fails to ZAC, it will indicate with a single red LED flash
If the lock fails to ZAC to the Gateway, factory reset the lock and try again
Repeat these steps for any additional locks being assigned to this specific Gateway
In the Status Window and Gateway Status, put the target Gateway into Join Off
E-Plex 7900 Command Cards User Guide
Adding An E-Plex Schedule
To add a schedule to Aurora for Group Access Levels or door operations, open the Site Information menu and select Schedule management
At the top left, use the drop-down and select E-Plex Schedule
Name your schedule appropriately and add the required time blocks
E-Plex schedules cannot overlap, so plan accordingly
Click Save and repeat the process for any other schedules
Adding A Schedule To A Door Group
From the Site Information > Hardware Setup screen, go to the Door Group that will have scheduled operations
On the Schedule Assignment tab, select the schedules that will apply to this door group
For Group Access Level use only, select the desired schedule(s) and click Save
If the schedule is to be used for door operations, select the desired schedule(s), update the door operations (Schedule On Mode & Passage Mode) and click Save
Updating Group Access Levels
Now that locks have been added, you will need to set the appropriate access levels
Open Manage People > Group Access Levels
Click on the E-Plex Group Access Levels tab
Select the E-Plex group to be updated (drop-down near top center)
Select the Group Access Level to be updated from the left
Adjust the access levels to the group on the right and click Save
Repeat these steps for all groups that require updating
Adding Credentials With E-Plex Access
When adding credentials, it is imperative that the credential format is accurate
Go to the Manage People > Add Person screen
On the Credential Information screen, select the correct format from the top left
If the credentials are Keysan 36bit, select Keyscan. If the credentials are 26bit and added as Keyscan 36bit, then they will fail to function on the lock(s)
The following information is required
- Given Name
- Surname
- Batch/Facility Code
- Credential Number
- PIN (for E-Plex 5700 locks)
- Group Access level(s)
Add additional information as desires and click Save
Updating E-Plex Locks
Go to the Status Window by clicking on System Status And Control and selecting Status
Open the E-Plex Door Status widget
Select the door group requiring an update
Any locks out of synchronization will display Sync Required
Right click on the lock and select Full Sync
Properly communicating locks will synchronize at 4am server time
Repeat for any locks requiring synchronization