Setting Up Aurora E-Plex Locks

The following article will go over the basic setup of E-Plex 5700 and 7900 locks with the Aurora software. These steps were created to assist with new installations. For more advanced installations and troubleshooting assistance, please contact the Support team

It is recommended to do a Site Survey before any installation. Site Surveys require an M-Unit (P/N 75427)

Hardware Requirements

Matching E-Plex 7900 Command Cards To Locks

Installing E-Plex Certificates

Launch the Aurora Client as an administrator. This is done by right clicking on the Launch Aurora icon and selecting Run As Administrator

Go to Application Management > Application Utilities > Security (tab)

Click Create CA root certificate

At the bottom of the screen, add 127.0.0.1 and click Create new certificate

Once this is done, two certificates will be listed

These certificates now need to be imported into the certificate store

Due to varying server user permissions, it is not recommended to use the Import Into Store button; however, this feature will function normally if the server user has all the required permissions (local and domain). If unsure, use the long method below

When exporting the certificates, it is important to save them in a safe location

A password is required for saving/adding the Private certificate only (1234 is adequate)

The first dialogue box is from clicking Export CA root certificate and the second dialogue box is from clicking Export PKCS #12 file

Open the certificate location and right click on the *.DER certificate and select Install Certificate

Select Local machine and click Next

Assign the certificate to the Trusted Root Certification Authorities Store and click Next

Click Finish to complete import

Open the certificate location and right click on the *.PFX certificate and select Install PFX

Select Local Machine and click Next

Click Next of the following screen

Click Next and then you will be prompted for the password from creation and click Next

Assign the certificate to the Personal Store and click Next

Click Finish to complete import

The imports can be verified by running certlm.msc

The personal certificate will expire after 2 years and will require updating

Updating An Expired Personal Certificate For Aurora E-Plex

Install The E-Plex Services

Now that the certificates have been installed, you will need to install the E-Plex services. These will be included with Keyscan Aurora ISO that was downloaded, or they can be downloaded from the software updates website

Once installed, dormakaba HMS and EPLEX Server will be running in services.msc

E-Plex Locks In Aurora

Aurora has some specific settings that must be addressed to successfully add and manage E-Plex locks

Some settings are not viewable until at least 1 lock is added to the system

Use the following steps to add at least 1 lock to the system

If the lock information is unknown, add an E-Plex 7900 “placeholder” lock. This can be edited or removed later

Adding A Lock To Aurora

On the Application Management > Manage System User screen, ensure that all System Users that require E-Plex access have those permissions selected

Click on Save and close Aurora

Relaunch Aurora as an Administrator

Click on Site Information and select Hardware Setup

Use the drop-down on the top left to select Door Groups and then E-Plex Door Group

On the E-Plex Door Group screen, name the group appropriately

Select the type of lock being added and name the lock appropriately. Update settings as required. Click Save

Repeat this process for any additional locks

All locks in a group will be controlled by any assigned schedule(s); therefore, it is common to add multiple door groups to a single installation, to create proper door control

Setting Up Aurora For E-Plex Locks

On the Site Information > Site Information Setup screen

On this screen you will need to add a Master PIN and a Master Credential

The Master Credential will be a working credential that will not be able to be assigned to a user and should be set aside in a safe place

Within the Application Management > Application Utilities screen, on the Application Settings tab, set your E-Plex Type for each Person Type

Use the following to determine the best match for each Person Type

Manager

• Lock programming/audit rights and 24/7 access; no expiry
• Overrides Holidays
• Overrides Privacy
• Overrides Lockdown ** can be changed if Enhanced Lockdown is registered
• Temp settings do not apply

Guest

• Schedule based access with optional privileges
• Follows schedules
• Follows temp settings
• Cannot override Lockdown ** can be changed if Enhanced Lockdown is registered

M-Unit

• Do not use this setting

On the same screen, enable Auto Generate PIN

On the Site Information > Group Setup screen, enable E-Plex Group for all groups that should have access to E-Plex locks. Do this by left clicking on No and putting an X in the box

Adding A Gateway To Aurora

To add a Gateway to Aurora, run Aurora as an Administrator. Go to the Application Management > Application Utilities window and the Gateway Setup tab. Select Legacy for a Gen1 Gateway and Multi-Segment for a Gen2 Gateway

Gen1 devices and Gen2 devices are not interchangeable, though both can be installed on the same system. Gen1 locks will only work with a Gen1 Gateway/Router and Gen2 locks will only work with a Gen2 Gateway/Router

Name the Gateway, being specific in names can assist with troubleshooting later

Leave the channels as populated or change to match the image below. Gateways and Routers can receive interference from WI-FI signals and limiting the number of channels can improve performance

Server IP Address and Server Name must be accurate

The server requires a static IP Address, as the Gateways are reverse networking devices

The port is set to 27702 for Gen1 Gateways and 28002 for Gen2 Gateways

DHCP operation is recommended

If a static IP Address is going to be assigned, all fields are mandatory for proper operation

After the required fields are completed click Save

Connect the Gateway to the server via a USB cable and click Configure

Repeat for any additional Gateways, and make sure to label each Gateway accordingly

If your Gateways are not coming online when connected to the network, refer to the following article regarding the ports used by the E-Plex services. Check your server security, as it is possible that rules may need to be implemented

What Ports Does Keyscan Aurora Use?

Adding A Router To A Gateway

Sometimes there is no network availability to add additional Gateways, and extended coverage is required. In this case, a Router can be setup to extend the coverage area

Go to the Status Window by clicking on System Status and Control and selecting Status

Open the Gateway Status widget

The intended Router must be in a factory state

Ensure that the Router is not powered on

Set the target Gateway into Join On

Holding the green button in, power up the Router

The LED’s on router (green & red) will flash at the same time. Wait for the LEDS to stop sequence blinking and the green LED blinks only

Once this happens, release the green button and press the reset on the Router

Set the target Gateway into Join Off

Verify that the Router has joined the Gateway in Application Utilities and Gateway Setup

ZACing a 5700 Lock To Aurora

From the Site Information > Hardware Setup screen, go to the Door Group that the lock was assigned to

Select the lock that is going to be joined to the Gateway/Router

Take note of the ZAC number on this screen

In the Status Window and Gateway Status, put the target Gateway into Join On

At the lock enter the following  ##088#ZAC#

The lock will flash the red & green LEDs 3 times, followed by a single green flash, on success

If the lock fails to ZAC to the Gateway, factory reset the lock and try again

Repeat these steps for any additional locks being assigned to this specific Gateway

In the Status Window and Gateway Status, put the target Gateway into Join Off

Resetting Aurora E-Plex 7900/5700 Locks

ZACing A 7900 lock To Aurora

From the Site Information > Hardware Setup screen, go to the Door Group that the lock was assigned to

Select the lock that is going to be joined to the Gateway/Router

Click the Default ZAC button and hit save

In the Status Window and Gateway Status, put the target Gateway into Join On

Present the ZAC command card to the lock

The LEDs on the lock will flash red and green a few times

A successful ZAC with result in a single green flash

If the lock fails to ZAC, it will indicate with a single red LED flash

If the lock fails to ZAC to the Gateway, factory reset the lock and try again

Repeat these steps for any additional locks being assigned to this specific Gateway

In the Status Window and Gateway Status, put the target Gateway into Join Off

E-Plex 7900 Command Cards User Guide

Adding An E-Plex Schedule

To add a schedule to Aurora for Group Access Levels or door operations, open the Site Information menu and select Schedule management

At the top left, use the drop-down and select E-Plex Schedule

Name your schedule appropriately and add the required time blocks

E-Plex schedules cannot overlap, so plan accordingly

Click Save and repeat the process for any other schedules

Adding A Schedule To A Door Group

From the Site Information > Hardware Setup screen, go to the Door Group that will have scheduled operations

On the Schedule Assignment tab, select the schedules that will apply to this door group

For Group Access Level use only, select the desired schedule(s) and click Save

If the schedule is to be used for door operations, select the desired schedule(s), update the door operations (Schedule On Mode & Passage Mode) and click Save

Updating Group Access Levels

Now that locks have been added, you will need to set the appropriate access levels

Open Manage People > Group Access Levels

Click on the E-Plex Group Access Levels tab

Select the E-Plex group to be updated (drop-down near top center)

Select the Group Access Level to be updated from the left

Adjust the access levels to the group on the right and click Save

Repeat these steps for all groups that require updating

Adding Credentials With E-Plex Access

When adding credentials, it is imperative that the credential format is accurate

Go to the Manage People > Add Person screen

On the Credential Information screen, select the correct format from the top left

If the credentials are Keysan 36bit, select Keyscan. If the credentials are 26bit and added as Keyscan 36bit, then they will fail to function on the lock(s)

The following information is required

• Given Name
• Surname
• Batch/Facility Code
• Credential Number
• PIN (for E-Plex 5700 locks)
• Group Access level(s)

Add additional information as desires and click Save

Updating E-Plex Locks

Go to the Status Window by clicking on System Status And Control and selecting Status

Open the E-Plex Door Status widget

Select the door group requiring an update

Any locks out of synchronization will display Sync Required

Right click on the lock and select Full Sync

Properly communicating locks will synchronize at 4am server time

Repeat for any locks requiring synchronization