Istar Edge Install Config Guide rf0 - LT - en
Istar Edge Install Config Guide rf0 - LT - en
REVISION F0
The trademarks, logos, and service marks displayed on this document are registered in the
United States [or other countries]. Any misuse of the trademarks is strictly prohibited and
Tyco will aggressively enforce its intellectual property rights to the fullest extent of the law,
including pursuit of criminal prosecution wherever necessary. All trademarks not owned by
Tyco are the property of their respective owners, and are used with permission or allowed
under applicable laws.
Product offerings and specifications are subject to change without notice. Actual products may
vary from photos. Not all products include all features. Availability varies by region; contact
your regional sales manager.
Preface
How to Use this Manual . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xii
Important Safety Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xiii
Software House Customer Support Center . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xiv
Chapter 1 Overview
Overview and Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-2
iSTAR Edge Photograph . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-3
iSTAR Edge Layout . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-5
iSTAR Edge Models. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-6
Main Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-7
Processor . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-7
Storage . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-7
Power . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-7
Readers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-8
I/O . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-9
Communications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-10
FAI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-10
Onboard Controls . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-10
Housing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-11
Compliance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-11
1-Reader Models . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-12
2-Reader Models . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-12
4-Reader Models . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-12
Accessories . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-12
Product Comparison . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-13
Chapter 9 Maintenance
Setting the LCD Message Display. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9-2
Displaying Status Messages. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9-4
Setting LCD Status Message Display . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9-4
Index
This guide is for new and experienced security system installers responsible
for installing iSTAR Edge controllers on a network.
In This Preface
How to Use this Manual . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xii
Important Safety Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xiii
Software House Customer Support Center. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xiv
Chapter 1 Overview Provides basic information about iSTAR Edge, and includes
an overview of iSTAR Edge hardware and features.
Chapter 3 iSTAR Edge Topology Provides the information that you need to set up
iSTAR Edge controllers for network communications.
Chapter 4 iSTAR Edge Power and Backup Provides details of iSTAR Edge Power and Backup.
Chapter 5 iSTAR Edge Controls and Describes the LEDs and indicators on iSTAR Edge.
Displays
Chapter 6 iSTAR Edge Connections Provides wiring details for readers, I/O modules, Aux ports,
wet and dry relay outputs, inputs, alarm inputs, and FAI (Fire
Alarm Interface).
Chapter 7 Using the iSTAR Configuration Provides instructions for configuring iSTAR Edge controllers
Utility (ICU) using the iSTAR Configuration Utility (ICU).
Chapter 8 Web Page Diagnostics Describes how to monitor controllers and observe controller
diagnostics.
NOTE Changes to the iSTAR Edge not expressly approved by the party
responsible for compliance could void your authority to operate the
equipment.
1. The iSTAR Edge device described in this manual could cause electrical
shock. Installation and maintenance should be performed only by
qualified personnel. Make sure power is removed before the system is
installed.
2. The iSTAR Edge and printed circuit boards in the reader devices are
susceptible to damage by static electricity. When handling these devices:
• Make sure your work area is safeguarded
• Transport all components in static-shielded containers
Before Calling
Ensure that you:
Are the Dealer of record for this account.
Are certified by Software House for this product.
Have a valid license and current Software Support Agreement (SSA) for
the system.
Have the system serial number available.
Have the certification number available.
Hours Normal Support Hours Monday through Friday, 8:00 a.m. to 8:00 p.m., EST. Except holidays.
Overview
This guide assumes you are a certified dealer who has attended iSTAR Edge
training and that you are familiar with networking concepts and hardware
installation.
In This Chapter
Overview and Introduction........................................................................................... 1-2
Main Features .................................................................................................................. 1-7
Product Comparison..................................................................................................... 1-13
NOTE You cannot upgrade the iSTAR Edge One Reader model to a Two or Four
Reader model, or a Two Reader model to a Four Reader model.
Power Indicator
Figure 1-2 shows a photograph of the iSTAR Edge with an optional PoE board
and with an I8 and R8 mounted on the door.
Tamper
PoE
Module
(Optional)
Ethernet
R8
I8
(I8 and R8 not included)
NOTE The 4-reader model can be ordered with 2 RM-4s mounted on the door.
4 Inputs 4 Inputs
Wiegand
Connector 1 Wiegand
Connector 2
RM Port 1 RM Port 2
Relay 1 Relay 3
Relay 2 Relay 4
Power E-net
Power Fail Tamper
In Key Latch Input (K)
Low Batt RM Port 3 FAI Input (F)
Supervised Inputs 4 8 8
Relay Outputs 2 4 4
RM Ports No 3 3
USB Ports No 3 3
Power over Ethernet (POE) Yes, optional Yes, optional Yes, optional
Field upgradeable No, requires board swap No, requires board swap N/A
Main Features
This section describes the iSTAR Edge main features.
Processor
Atmel 9260 ARM processor, @ 180 MHz
Storage
> 250k cards.
64 MB of RAM.
128 MB of onboard flash.
Power
Powered by
• Ethernet connection: PoE or PoE Plus using optional add-on board
(edgePower). A UL Listed surge protector must be used with the PoE
module. The PoE board can supply either 12VDC or 24VDC to the relay
outputs (selectable via a jumper on the PoE board).
- or -
• 12/24V DC, from UL Listed apS power source or other UL 603 Listed,
power-limited power supply with appropriate ratings and a minimum
4 hours of standby power.
Provides up to 1.5A @ 12V unswitched to external devices:
• Wiegand readers
• RM ports
• Two 2-pin Aux power connectors for PIRs and motion sensors.
Provides power to relays:
• Relays configurable to be wet or dry by jumper.
• Wet Relays provide current at main input voltage (12 or 24V on PoE, 12
or 24V with external DC supply).
NOTE On board battery backup retention was tested for 3 days but will last for
weeks in actual practice.
Readers
One Reader Model configuration supports 1 reader
2 or 4 reader models support 2 or 4 readers total.
• 2 Wiegand connectors are available.
• 2 RMs are available to be configured for the 4 reader model to provide
4 Wiegand connectors.
• 3 RM serial ports are available.
• Readers can be any combination of 2 from Wiegand ports and/or RMs
on any of 3 serial ports.
I/O
8 general purpose inputs.
4 general purpose relays:
• Dry or wet contact settable per relay by jumpers.
• 4-pin connectors to support NO/NC and dry/wet configurations.
2 reader model: 4- I8s and 4- R8s allowed to be configured on any of the
three RM ports.
4 reader model: 8- I8s and 8- R8s allowed to be configured on any of the
three RM ports or the optional 2 RM-4s.
One Reader model supports 4 general purpose inputs and 2 general
purpose relays.
One Reader model does not have RM ports.
Special purpose inputs:
• Tamper (from enclosure door)
• Main AC fail (from apS)
• Low external battery (from apS)
• FAI Signal State (J40 F input)
• FAI Key Signal State (J40 K input)
NOTE The following 2 inputs to the host are determined by the firmware. There
is no actual wiring to the iSTAR Edge board.
• 2 USB (Type A) host ports. (These are the wide and flat USB connectors
used by USB Flash Thumb drives when the iSTAR Edge is the host of
the attached devices.)
• 1 USB (Type B) device port. (This is the square connector used when the
iSTAR Edge itself is the client device.) (not currently used)
• The only use of USB in the first version is to import encryption keys.
No serial debug port. Data is available using ICU iWatch2.
Communications
One 10/100 Ethernet port.
No secondary communication path.
Full 256 bit AES (FIPS-197) encryption.
Can cluster with other iSTAR Edges.
Can cluster with iSTAR eXs.
Can cluster with iSTAR Pros and iSTAR Ultras when encrypted.
FAI
FAI (Fire Alarm Interface) - When the F (Fire) input is true, FAI activates
relays that are enabled for FAI by individual enable switches.
Latch option is available by switch control. If the selected relays are
latched, they will be cleared to normal by the K (Key) input.
Onboard Controls
LCD with backlight for diagnostics.
Rotary switch for diagnostics.
LEDs for serial, Ethernet, power and relay state.
• Two power LEDs: one super bright LED that is on when the enclosure
door is closed, and one green LED that is always on when main power
is present.
• Relay activation LEDs are not affected by enclosure door.
Housing
Enclosure is similar to RM 4E enclosure.
Mountable in existing apC/L enclosure.
Compliance
FCC, CE, EN50133, UL294, UL1076, UL60950 by CB Scheme
(International Safety) & RoHS.
1-Reader Models
Table 1-2: 1-Reader Models
ESTAR001-PoE1 Plus module 1-reader iSTAR Edge in small enclosure, with PoE/PoE+
2-Reader Models
Table 1-3: 2-Reader Models
ESTAR002-PoE1 Plus module 2-reader iSTAR Edge in small enclosure, with PoE/PoE+
4-Reader Models
Table 1-4: 4-Reader Models
ESTAR004-RM 4-reader iSTAR Edge in small enclosure with 2 RM-4s on the enclosure door
Accessories
Table 1-5: Edge Accessories
ESTAR-CAN iSTAR Edge small enclosure, 12" x 12" with tamper switch
Product Comparison
Table 1-6 compares the iSTAR Edge with other iSTAR controllers.
Table 1-6: Product Comparison Table
Win CE Version 5 5 3 3
Linux no no no no
RAM 64 MB 64 MB 64 MB 16 MB
Cards - very large > 100k > 100k > 100k 10k
card record
Cards - very small > 400k > 400k > 400k 45k
card record
External backup apS, other Other external apS, other apS, other
power supported external UPS or UPS, if wired external UPS external UPS
backup of Power correctly and our
Sourcing other hardware
Equipment still used.
Power fail data To onboard flash To CF card Sleep with To flash simm
backup memory retained
by onboard
batteries.
Onboard Ethernet 1 2 1 1
Expansion functions Encryption key Encryption key 2nd Ethernet, 2nd Ethernet,
supported transfer transfer, 8- dialup dialup.
reader (supported on
expansion the CCURE 800/
8000 only)
encryption key
transfer
Schlage (Readers/ – 16 16 16
PIMs)
General purpose 0 0 2 2
serial ports
Encryption V. Strong, FIPS- V. Strong, FIPS- V. Strong, FIPS- RSA RC4 128 bit
197, AES 256, 197, FIPS-140- 197, AES 256,
OpenSSL 2, AES 256, OpenSSL
OpenSSL
Input resistor 22 choices per 22 choices per SWH 1K dual SWH 1K dual
configuration board, including board, including range range
dual range SWH dual range SWH
1K 1K
Open collector – 4 – –
outputs onboard
FAI Yes No No No
PoE Yes No No No
Site Requirements
This chapter provides information on site planning for iSTAR Edge hardware.
In This Chapter:
Pre-Installation Planning ............................................................................................... 2-2
ISTAR Edge Wiegand and RM Reader Port................................................................ 2-7
Ethernet Requirements................................................................................................. 2-10
Wiring Requirements ................................................................................................... 2-10
Grounding Requirements ............................................................................................ 2-12
Pre-Installation Planning
Pre-installation involves the following:
Equipment Check
Verify that the contents of the shipped boxes match the packing lists. Contact
Software House if any items are missing or damaged.
The iSTAR Edge hardware does not include mounting hardware for an
installation. Mounting hardware depends upon the site and must be
approved by a structural engineer or other certified professional.
Site Check
Ensure the following:
The mounting site is ready.
• The can is 12” by 12” (30.48 x 30.48 cm)
• Upper mounting holes are 9" (22.86 cm) center to center.
• Bottom mounting holes are 10.5" (26.67 cm) below the upper mount
holes.
The site has been approved and all wiring complies with UL
requirements and other codes, as appropriate.
All preliminary site work is complete.
An appropriate power supply is accessible.
The site is clean and free of dust or other contaminants.
The iSTAR Edge supplies 12 volts at its reader connectors; however, the
amount of voltage that reaches the reader is impacted by the following:
Number of devices on the bus
Current draw of each device
Wiring length between the devices and iSTAR Edge
Wire gauge that connects the devices
State of the battery (if running on apS)
Tolerance if sourced by an external power supply.
Installation Requirements
This section describes iSTAR Edge hardware, software, environmental and
configuration requirements.
Item Specification
Environmental Requirements
Table 2-2 shows the iSTAR Edge environmental requirements.
Table 2-2: Environmental Requirements
Status Range
Power Requirements
The standard iSTAR Edge uses a UL Listed 603 External Power Supply, such
as the Software House apS or a Power Over Ethernet (PoE) injector with UL
listed surge protector.
NOTE See Chapter 4, “iSTAR Edge Power, Batteries, and Backup” for more
details about iSTAR Power.
Individual/Total Loads
Wiegand Reader Power Outputs: 10.6-12.5 VDC, 350 mA max each.
Total of Reader and AUX outputs combined (Wiegand) not to exceed 1.5A
Four (4) activated relay coils = 100 mA, 25 mA/relay
Port Rating
Reader current 350 mA max, not to exceed 1.5 A for Reader and AUX
Port Rating
Reader current 1.5 A max per port, not to exceed 1.5 A for Reader and
AUX
a. In Table 2-6, a indicates readers that have not been evaluated by UL for use with the iSTAR Edge. All other
readers in Table 2-6 are UL Listed compatible readers that can be used with the iSTAR Edge.
HID MiniProx 60 mA
NOTE The readers in Table 2-7 have not been evaluated by UL for use with the
iSTAR Edge.
Ethernet Requirements
The iSTAR Edge Ethernet connection is:
Onboard 1 Ethernet port – supports 10/100Base-T Ethernet connections.
Wiring Requirements
Table 2-8 shows general wiring requirements for an iSTAR Edge and its
components.
Table 2-8: Equipment Wiring Specifications
RS-485 Comm, iSTAR RM & I/O 9841 24 1 Yes 4000 ft. 103
two wire Edge Modules (1212 m)
Power iSTAR RM & I/O 8442/8461 22/18 1 No Range of See Note a&b
Edge Modules 600 ft. to
1500 ft.
depends
on AWG
RJ45-Ethernet iSTAR Hub, Host N/A Cat 5 or 2 N/A 328 ft. 8.4
Edge more (100 m)
24
Door contact iSTAR Contact 8442/8461 22/18 1 Yesa 2000 ft.
(DSM) Edge or (606 m)
RM4/4E
module
Reader Data iSTAR Proximity/ 9942 22 3 Yes 200 ft. 3.2
Edge or Wiegand (60.96 m)
RM-4/4E signaling
module read head 9260 20 300 ft. 3.2
(91.4 m)
a. To comply with UL requirements, use shielded, minimum 22 AWG stranded, twisted pair cable for monitor points,
DSMs, and REXs. Use Belden 9462 or equivalent.
b. Calculations are based on a single RM-4 reader with keypad and LCD (250 mA):
• Using 22 AWG, distance = 600 ft. (.0065 W / ft)
• Using 18 AWG, distance = 1500 ft. (.0065 W /ft.)
NOTE UL Listed Panic hardware shall be used to allow emergency exit from
a protected area.
For UL Listed products, burglar alarm inputs must be supervised.
For UL Listed applications, USB connections must be no more than 25
ft. from iSTAR Edge controllers.
Grounding Requirements
Grounding requirements are as follows:
Ensure that the iSTAR Edge controller is properly connected to an earth
ground at the ground stud in the cabinet. Identified by symbol.)
Use 16 AWG or larger wire.
Ensure that the shield wires for the readers, inputs, outputs, and AUX
cables are grounded to the nearest earth/ground connection at one end
only of the cable.
Disconnect the ground wire last, when servicing, to provide maximum
protection to the equipment and personnel.
)XOO'XSOH[ '6 5[ 7[
%DVH7 '6
'6 '6
50 63(&,),&$7,216
&DUULHU '6
21 5HDGHU6XSSO\WRWDORI$X[50DQG:LHJDQG3RUWV9'&$
7HUP 7[ 5[ 6:
$FWLYDWH $X[3RUWV9'&P$ :$51,1*
RQ)$, '6 '6
6: 5HPRYH%DWWHULHVLIWKH
6: 7HUP
2)) 503RUWV9'&$ SDQHOZLOOQRWEHSRZHUHG
5HOD\$FWLYH '6
IRUDQH[WHQGHGSHULRGRIWLPH
21
50 :LHJDQG3RUWV9'&P$
'5< -
'5< 5HOD\$FWLYH 2)) 5HOD\V9$&'&$PS0D['U\
'6 6: :(7 RU9'&$PS0D[:HW
- :(7 $FWLYDWHRQ)$,
(QWLUH8QLW/RFDO3RZHU9'&$PS0D[
5(/$< 5(/$< /RFDO3RZHU9'&$PS0D[
6:,7&+/2&$7,216
6+2:1$6
5HOD\$FWLYH
)$&725<'()$8/7 5HOD\$FWLYH '6 (WKHUQHW0%VHF7$&DW
'6
'5<
'5< - )$,67$1'$5'$1'/$7&+('
2))
2))
6: :(7 3R(%2$5'-803(56 .
- :(7 6: 3,1
$FWLYDWHRQ)$, 2XWSXW9ROWDJH
$FWLYDWHRQ)$, . .12
9'&
5(/$< 5(/$< - 3,1
&20021
6HH0DQXDOIRU9 . )1&
9'&
RQO\3R( 3,1
5[ 7[ 2)) .
569'
569'
3R(
'6 '6
3R(
In This Chapter
iSTAR Edge Network Topology ................................................................................... 3-2
Cluster Configuration..................................................................................................... 3-6
Single Master Configurations........................................................................................ 3-8
Adding Controllers to the Cluster .............................................................................. 3-10
Configuring Communication Paths ........................................................................... 3-11
LAN 3
LAN 1 LAN 2
Switch or Router
Switch Switch
Ethernet Ethernet
Generally, the TCP/IP ports, listed in Table 3-1 on page 3-3, must be open
through a firewall.
Table 3-1: TCP Ports
1999 iSTAR, master port for incoming slave connections TCP Server
28003 iSTAR Edge/Ultra/eX, Used by the host to accept Edge/Ultra/ TCP Server
eX requests for certificate signing
28007 iSTAR Edge/Ultra/eX, For master's 2nd network connection TCP Server
28009 iSTAR Edge/Ultra/eX, is the master port for incoming slave TCP Server
connections
Example:
The example displayed in Figure 3-2 on page 3-4 shows a locked
iSTAR Edge configuration. To configure this cluster, the System Manager
is in the branch office:
• Use PING to check communication to the exposed (translated) address
from the Corporate Office.
• Use the ICU to configure the master controller and lock the exposed
C•CURE address.
• Use the ICU to configure the member controllers and lock the local
subnet addresses.
Member
213.112.60.2
213.112.60.2 (exposed)
(locked)
C•CURE
iSTAR
host
Master Firewall/ Firewall/
168.54.24.5 NAT NAT
(local) Gateway Gateway 172.54.12.6
(local)
Member
IP Management Tools
iSTAR Edge controllers can be configured to accept IP addresses and device
names from one of the following:
Local DHCP
Windows Internet Naming Service (WINS)
Domain Name System (DNS) servers
If you are not using DHCP, use the ICU to configure NetBIOS and FQDNs. If
you specify a NetBIOS or FQDN name for a C•CURE host, you must also use
the ICU to supply the IP addresses of the DNS or WINS server.
Cluster Configuration
iSTAR Edge hardware supports communications in a user-defined group
called a cluster. Clusters allow iSTAR Edge controllers to distribute
information and control actions to connected components without host
intervention.
There are two different types of clusters based on whether or not the data
transfers are encrypted or not. Encrypted clusters employ the Advanced
Encryption Standard (AES) utilizing 256-bit FIPS-197.
Cluster members can communicate with each other via the master, over an
Ethernet network. Cluster members cannot communicate with each other
directly. In Figure 3-3 on page 3-7, the diagram on the left shows how cluster
member A communicates with the host via the master. The diagram on the
right shows how cluster member A communicates with cluster member B via
the master.
Host
Host
4
Network
Hub
3 Ethernet 3
4
1 1
2 2
Host
Primary Secondary
Master
Cluster
NOTE The iSTAR Edge only has one Ethernet connection. If an iSTAR Edge
is the Master, there is no secondary communications connection.
For UL Listed products, UL has only evaluated the Primary
communications path.
Table 3-2 on page 3-8 shows the configuration options for clusters that
provide communication using a single master controller.
Primary Secondary
Network None
Network Network
Communications Path
The master controller connects to the host over a primary communication
path.
The Connection type is how the master connects to the host. Allowable types
are network and dialup/serial connections (C•CURE 800/8000 only). Cluster
members are connected to the master only via a network connection.
Figure 3-5 shows the primary path for cluster member A. In this case, the
master/host connection type is network.
Host
Network
Switch
3 Ethernet
1
2
This chapter describes the detail of iSTAR Edge Power, backup batteries, and
system backups.
In This Chapter
Power General ................................................................................................................. 4-4
Power in............................................................................................................................ 4-8
Onboard backup batteries.............................................................................................. 4-9
Backup .............................................................................................................................. 4-9
Power Out ...................................................................................................................... 4-11
NOTE If using Power Over Ethernet (PoE), be sure that the jumpers on the PoE
board are set correctly. As shown in Figure 4-1 on page 4-3, there is a
jumper position for PoE and another for PoE Plus (+).
NOTE Do not connect the Power Over Ethernet (PoE) injector to a receptacle
controlled by a switch.
Power General
The iSTAR Edge can be powered by PoE, PoE Plus, or traditional 12V or 24V
DC power supplies. PoE and PoE Plus provide a method to significantly
reduce installation costs using 100 meters of Ethernet cable for both power
and data to the controller.
PoE (IEEE 802.3af) installation is limited to 12.95W of power consumption
including the controller. This translates to about 1.1 Amps.
PoE Plus (IEEE 802.3at) installation is limited to 25.5W of power
consumption including the controller. This translates to about 2.125
Amps.
Alternate Power
For systems that exceed these limits, alternate DC supplies can be deployed,
including external PoE splitters.
Power Logic
The PoE module has a jumper that determines whether the module provides
12VDC or 24VDC.
The iSTAR Edge, along with the PoE board, treat all sources of external
power, including all flavors of PoE and external DC supplies basically the
same way: iSTAR Edge monitors the input voltage.
When that voltage moves outside of the normal operating voltage range
(10.2 V - 14.4 V for 12 V nominal systems or below 20.4 V for 24 V nominal
systems), iSTAR Edge firmware stops its internal processes and writes all data
to onboard flash, and then will cycle, continuously monitoring the input
power voltage until either of these two conditions occurs:
If the input power voltage goes below a Wake-up threshold of 7 V, the
iSTAR Edge will go to sleep;
If the voltage returns to the normal operating range, the iSTAR Edge will
reboot and restart.
If the iSTAR Edge goes to sleep, it will automatically wake-up when the input
power voltage rises above the Wake-up threshold, and the firmware will reboot
and load the backed up data into RAM.
Batteries
When onboard batteries are installed they must be fresh (they must produce
more than 5V), otherwise a too low battery-cut circuit will disconnect them.
The LCD will display information about the state of the batteries.
Other Interactions
All of iSTAR Edge's other interactions with the power system are essentially
informational in nature and do not directly affect iSTAR Edge's behavior with
regard to power loss, power saving and backup. Most of the other interactions
appear in the host as configurable inputs. This allows users to both monitor
them and allow them to trigger other actions.
For example, the user could configure both the AC / Main Fail and Low
Battery inputs to trigger a configuration backup. From the iSTAR Edge's point
of view, however, this is incidental. It does not affect how iSTAR Edge treats
power loss. iSTAR Edge still watches for input voltage to move outside of the
normal operating voltage range, and at that time will perform a full state and
configuration backup.
Indicates whether the external power source has reported loss of its main
power.
Shares connector and Ground pin with Low Battery.
Normally closed dry relay contacts are required. This signal is normally
wired to the energized NO output on the apS.
Configured automatically on host as an unsupervised input.
Indicates whether external power source, has reported its battery is low.
Wired in from external power source.
Shares connector and Ground pin with AC / Main Fail.
Normally closed dry relay contacts are required.
NOTE The Tamper, Low Battery, and AC power fail inputs must be enabled and
connected to report for compliance with UL requirements.
NOTE Shielded cable must be used for AC Fail & Low Battery Input connections.
Power in
12 / 24 V DC
iSTAR Edge can run off either 12VDC or 24 VDC power applied to the PWR
connector. Normal operating ranges include:
12V operation: 10.2 V to 14.4 V (-15/+20%)
24V operation: 20.4 to 30.0 V (-15/+25%)
The iSTAR Edge will not automatically re-adjust back from 24V to 12V. This
is because a measurement of 12V input power could indicate a 12V supply or
a 24V supply with a very low battery.
3. Connect a power supply of the desired voltage (12V or 24V) to the iSTAR
Edge.
The board will also be set back to 12 VDC if the memory is cleared using
position D on the rotary switch.
The iSTAR Edge Wiegand reader power, RS-485 serial port power and AUX
power are always configured at 12 VDC.
The Relay Wetted power is either 12 VDC or 24 VDC, depending on the input
power source.
In order to prevent voltages that partially run the processor, the iSTAR Edge
has a battery-cut circuit. When the batteries fall below 4V, they are
disconnected from rest of the board.
The user has an onboard battery low input configured in the host that will
indicate when the onboard batteries need to be changed. This input will be
active when batteries are not present, not making contact, or too low to
guarantee a backup and three days of power for the clock. The user should
replace the batteries immediately when this input is active.
Backup
When power (input voltage) drops too low to support full operation, power
usage is reduced as much as possible, processes are stopped and data is
written into flash. Processes remain stopped until the input voltage returns to
a normal operating range. At that point, iSTAR Edge reboots and reloads data
from flash to RAM and starts processing again.
The only input that controls the initiation of iSTAR Edge’s power-fail backup
process is iSTAR Edge's own onboard measurement of incoming power
voltage. iSTAR Edge measures external power voltage every 1/10 of a
second. When external power voltage moves outside of normal operating
voltage (10.2 V to 14.4 V for nominal 12 V operation, or below 20.4 V for
nominal 24 V operation), iSTAR Edge will initiate the backup process.
When the backup completes, iSTAR Edge will check whether power voltage
has returned to normal operating range.
If the voltage is within the normal range, iSTAR Edge will reboot.
The Real Time Clock inside the processor will remain powered from the
iSTAR Edge onboard batteries.
When the clock reaches the alarm time, it will restore power to the processor
core, causing it to start the reboot process. Early in the boot process, iSTAR
Edge will measure the input power voltage. If the voltage is (still) below the
hardware Wake-up Threshold the iSTAR Edge will go back to sleep.
This cycle will continue until the input power voltage is at least above the
hardware Wake-up threshold. In addition to the alarm, the iSTAR Edge has a
circuit to detect that the input power voltage has risen above the Wake-up
Threshold, in which case the circuit will trigger the iSTAR Edge processor to
begin the reboot process immediately.
If the bootloader determines the input power voltage is above the hardware
Wake-up Threshold it will load the firmware image from FLASH into RAM
and execute it. During the image startup process, the input power voltage is
measured again. If the voltage has returned to the normal operating range,
the image startup process will continue. If the input power voltage is below
the hardware Wake-up Threshold, the iSTAR Edge will put itself back into
the sleep and power down the processor. The iSTAR Edge startup process will
not continue until either of these conditions is met.
Near the end of the boot process, iSTAR Edge looks for a valid backup in
flash. If it finds one, it restores the data in that backup to RAM, and then runs
the processes that depend on that data.
If the onboard battery voltage was above the 4.6 V Onboard Battery Low
threshold (as reported to user with Onboard battery low input) before the
backup started, the iSTAR Edge onboard batteries will be able to power the
clock for at least 3 days (more when the batteries are fresh).
Data can only be restored if the clock is valid when the iSTAR boots.
Otherwise, the firmware would not be able to make valid access control
decisions. If the clock is not valid on reboot, the iSTAR will not restore any
data, and will invalidate all data, including activity history.
Power Out
The iSTAR Edge has various ways to provide power to external devices:
The following power outputs combined can provide a total of 1.5A at 12V.
• each of three serial ports
• each of two Wiegand ports
• each of two aux ports, suitable, for example, for motion sensor power.
The relays can be configured by jumper to provide wet power.
• Each relay is limited to 0.75A by an individual resettable fuse.
• If one load is shorted the individual fuse limits the shutdown to the
shorted load
• Power fed to wetted relay contacts is either 12V or 24VDC depending
on the input voltage from PoE or an external power supply.
USB provides 500mA at 5V for each device port. Each port has a resettable
fuse, this meets the USB standard and should not be exceeded by a well
functioning device.
This chapter explains the switches, buttons, jumpers, LEDs, and the LCD.
In This Chapter
Switches-Jumpers-LEDs on iSTAR Edge..................................................................... 5-2
Location on One Reader Model .................................................................................... 5-3
Visual Indicators ............................................................................................................. 5-4
Onboard controls ............................................................................................................ 5-7
Rotary switch ................................................................................................................... 5-8
RM Port Termination Switches (Not Reader One Model) ........................................ 5-9
Output Relay Wet or Dry Jumpers............................................................................... 5-9
PoE Jumpers..................................................................................................................... 5-9
Visual Indicators
LCD
LEDs
The super-bright white Power LED is illuminated when the enclosure door is
closed, i.e. when the tamper switch closes. The power LED has varying
brightness from 12V to 24V and extinguishes at ~8V.
The relay activation LEDs remain active regardless of the state of the
enclosure door.
The remainder of the indicators are illuminated when the enclosure door is
opened. The LCD backlight and all LEDs other than the power LED and the
relay LEDs are under firmware control and are extinguished when the unit
detects input power failure and enters sleep mode to minimize power
consumption.
Users have the ability, via the host, to configure LCD backlight and LEDs
other than Power LED, the Bright White external view Power LED, and the
relay activation LEDs to be always be off, regardless of tamper state.
Input
Input power power Input power Input
good, door good, door lost, backing power
Indicator closed open up/sleeping < 8V Controlled by
All other indicators, and LCD Off Off Off n/a Firmware
backlight if configured OFF
in host
NOTE The iSTAR Edge LCD display and associated diagnostic tests have not
been evaluated by UL.
DS20 Main Power - External View Super bright White LED, visible
from outside of the enclosure
when the door is closed. Off when
the door is open.
Relay Outputs
Ethernet
Onboard controls
Reset button
Rotary switch
There is an onboard 16 position rotary switch, SW1. Most of the positions are
used to control LCD diagnostics.
Table 5-4 is a reference table for iSTAR Edge rotary switch functions.
Table 5-4: iSTAR Edge Rotary Switch Functions
Position Description
1 Display card data from last card read, 7 second LCD display (slow mode)
2 Display card data from last card read, 2 second LCD display (fast mode)
5 Display manual output changes (include readers and R/8 boards), 2 second LCD display (slow mode)
6 Display output changes (does not include readers and R/8 boards), 1 second LCD display (fast mode)
A Not used
B Not used
D Restore Factory Default. Erase data backups and communication parameters from flash. (Press GCM
reset, wait for LCD instructions, set rotary switch back to 0 or F, press reset again.) Will also reset 24V
mode back to 12V mode.
PoE Jumpers
The PoE board has a set of 4 jumper locations, as shown in Figure 5-3 on
page 5-10. The right most jumper location indicates PoE+ and the one left of it
indicates PoE. Put the one jumper on the appropriate location. See Chapter 4,
“iSTAR Edge Power, Batteries, and Backup” for more detail.
There is also a jumper to select whether the PoE board supplies 12VDC or 24
VDC to the iSTAR Edge. Whichever is selected will carry through to the Wet
Relay voltage frequently used for Door locks.
In This Chapter
Connections - 1 Reader Model ...................................................................................... 6-2
Connections - 2 Reader Model ...................................................................................... 6-3
Connections - 4 Reader Model ...................................................................................... 6-8
Inputs .............................................................................................................................. 6-13
AUX Outputs ................................................................................................................. 6-19
Relay Outputs ................................................................................................................ 6-20
Wiegand Readers .......................................................................................................... 6-24
RM Readers - I/8s - R/8s ............................................................................................. 6-25
AC Fail / Low Battery .................................................................................................. 6-26
Tamper............................................................................................................................ 6-27
FAI Connections............................................................................................................ 6-28
C•CURE 9000 Status Tab............................................................................................. 6-35
Two RM Readers
Figure 6-3 shows two RM readers connected to RM1 and RM2.
RM Port Terminators
The three RM ports, shown in Figure 6-5, have an RS-485 Terminator switch
that is normally on. You will usually leave these switches in the default
position. The RM reader bus is a half duplex RS-485 connection that must
have terminators at each end of the bus. When the switch is on the iSTAR
Edge provides the 110 ohm terminators. The other end of the bus is
terminated by a switch in the RM4, RM4E, I8, I8-CSI, or R8.
3.0
0.75
NOTE Figure 6-6 shows a fully loaded 2 Reader iSTAR Edge - 2 Readers, 4 - I8s,
and 4 - R8s.
Four RM Readers
Figure 6-8 shows four RM readers connected to RM1, RM2, and RM3.
RM Port Terminators
The three RM ports, shown in Figure 6-10, have an RS-485 Terminator switch
that is normally on. You will usually leave these switches in the default
position. The RM reader bus is a half duplex RS-485 connection that must
have terminators at each end of the bus. When the switch is on the iSTAR
Edge provides the 110 ohm terminators. The other end of the bus is
terminated by a switch in the RM4, RM4E, I8, I8-CSI, or R8.
3.0
0.75
Inputs
There are eight onboard inputs, shown in Figure 6-12, available on the iSTAR
Edge.
Pin 2 Pin 2
IN1 IN5
IN2 IN6
IN3 IN7
IN4 + + IN8
Resistor placement refers to how many EOL (End Of Line) resistors are used
and where they are placed in relation to the switch. Settings are
“Non-supervised”, “Single EOL”, or “Double EOL”.
Non-supervised - the user wires no external resistors.
Single EOL - the user wires a single EOL resistor.
Double EOL - the user wires two EOL resistors, one in parallel and one in
series with the switch.
Resistor values are labeled as 1k/5k/10k (in Ohms). In the Double EOL cases,
both resistors have the same value.
Mode Comment
NO/NC Dual EOL 1K Wire with Parallel/Serial for NO and Serial/Parallel for NC.
Normal = 1K
NO Alert = 0.5K
NC Alert = 2K
NO/NC Dual EOL 5K Wire with Parallel/Serial for NO and Serial/Parallel for NC.
Normal = 5K
NO Alert = 2.5K
NC Alert = 10K
NO/NC Dual EOL 10K Wire with Parallel/Serial for NO and Serial/Parallel for NC.
Normal = 10K
NO Alert = 5K
NC Alert = 20K
Alert = open (∞ Ω)
Alert = short (0 Ω)
Alert = open (∞ Ω)
Alert = short (0 Ω)
NC Non-Supervised No Resistors
Normal = short (0 Ω)
Alert = open (∞ Ω)
Mode Comment
NO Non-Supervised No Resistors
Normal = open (∞ Ω)
Alert = short (0 Ω)
Alert = 2K
Alert = 0.5K
Alert = 10K
Alert = 2.5K
Alert = 20K
Alert = 5K
For the remainder of the choices, you have to select either NO or NC.
Non-Supervised
Figure 6-17: Non-Supervised
AUX Outputs
The AUX outputs can supply 350 mA for motion sensor or PIR type devices.
Wire the switch contacts of the PIR to one of the iSTAR Edge inputs, using the
proper resistor supervision.
Relay Outputs
The relays can be used as DRY or WET. There is a jumper for each relay to set
the mode.
Relay 1 Relay 4
Relay 2 Relay 3
Figure 6-20 shows DRY relay wiring. Max current is 3A at 30 VAC/VDC. Use
NO or NC as appropriate. Notice that jumper is in the Dry position.
Figure 6-21 shows WET wiring for a normal NO Latch. The iSTAR Edge will
supply either 12 VDC or 24 VDC depending on the input supply. Current is
limited to 0.75 A. Notice that the GND is used for common, not the C pin.
Notice that the jumper is in the Wet position.
Wiegand Readers
Direct Wiegand signaling read head connections are shown in Figure 6-23.
NOTE The Low Battery and AC power fail inputs must be enabled and
connected to report for compliance with UL requirements.
NOTE Shielded cable must be used for AC Fail & Low Battery Input connections.
Tamper
Tamper is NC. It is usually connected to the Tamper switch on the enclosure.
If there is no standard enclosure, be sure that there is a jumper across the two
pins.
The tamper switch controls many LEDs, to preserve power and also not blind
users with the super bright LED when the door is open. When the door is
closed the two power LEDs are the only ones on. The LCD is also off when the
door is closed.
NOTE The tamper input must be enabled and connected to report for compliance
with UL requirements.
FAI Connections
FAI Scenarios
FAI (Fire Alarm Interface) is a hardware feature that will activate all enabled
relays when the F (Fire) input of J40 opens. It is NC (Normally Closed).
The concept of activating relays when a fire is signaled can be used in two
basic scenarios:
Unlock all doors when fire is present.
Remove power from various devices when fire is present.
Magnetic Door Locks have power applied most of the time with a break in the
power to open the door. You have to be aware of NO or NC in those cases.
FAI Modes
There are two basic modes:
FAI without Latch - This method requires the F input (NC) of J40, plus
the individual enable switches for each relay (SW2 through SW5).
FAI with Latch and subsequent Unlatch - This method requires the F
input of J40 plus the individual enable switches for each relay (SW2
through SW5), plus SW6 to enable the Latch and J40 K input (NO) to reset
the Latch.
The Key input is usually a key switch that momentarily closes when the key is
inserted and rotated.
The wiring is shown in Figure 6-27. Be sure that the resistors are as close as
possible to the F (Fire) and K (Key) switches for the most security.
NOTE The following diagrams, Figure 6-28 on page 6-30 and Figure 6-29 on
page 6-31, are shown without Supervision resistors for clarity. In actual
practice, they must be supervised as in Figure 6-27.
Any resister values other than 500, 1K, or 2K ohms are treated as alarms that
are indicative of tampering with the input.
2. The Relay Drive goes true and activates all relays that have their FAI
enable switches on (SW2 through SW5).
4. The Relay Drive goes false and deactivates all relays that have their FAI
enable switches on (SW2 through SW5).
1. J40 is in its normal state with F (NC) closed and K (NO) open.
2. F (Fire) opens signaling a Fire Alarm and all enabled relays are activated
by the Relay Drive, as in “FAI without Latch” on page 6-30.
3. F (Fire) input closes indicating the Fire Alarm has been reset, BUT the
relays stay activated (Latched).
All three of the inputs support event triggers based on their active or inactive
states. These event triggers can activate alarms, send emails, run a Roll Call
Report, etc.
If F (Fire) or K (Key) have a supervision error (short, open, or line fault), that
will be reported in the normal way.
Figure 6-30 shows the FAI inputs in the C•CURE 9000 Controller dialog box.
Figure 6-31 on page 6-33 shows the FAI inputs in the C•CURE 800/8000
Controller dialog box.
Power Failure AC power fail input Indicates that the UPS (Un-interruptible
Power Supply) or apS, had an AC power
failure and is now supplying battery power
to the iSTAR Edge.
Battery Low Low battery input The UPS or apS battery has reached a
yellow warning level. Most UPS units have
about 10 to 20 minutes of run time left when
this condition occurs.Software House
recommends that you shut down the unit
being powered by the low battery. Do not
confuse this input with the Onboard Battery
Low input.
FAI Supervision State FAI State This is the F (Fire) Input State.
Indicates the state of the F (Fire) input
coming into J40 of the iSTAR Edge. In other
words, this is the fire alarm.
FAI Relay Control FAI Relay Control This pseudo input indicates the state of the
Relay Drive signal that activates or latches
the selected relays when the F (Fire) input
is true,
FAI Key Supervision State FAI Key State This is the K (Key) input state.
Indicates the state of the K (Key) switch at
J40 of the iSTAR Edge.
Onboard Battery Low Onboard Battery Low Indicates loss of external or PoE power to
the iSTAR Edge. Upon external or PoE
power loss, data is written to onboard flash.
Four onboard batteries non-rechargeable
alkaline AA batteries provide power for the
backup process and maintaining the clock
afterwards.
Onboard Battery Low also occurs when the
voltage of all four batteries in series
reaches 4.6 volts, or if a battery is missing.
Backup is valid for the period that the
onboard batteries can maintain the clock.
This period was tested for >3 days, but
should reasonably last for two weeks.
It is very important that the alkaline
batteries be replaced when they reach the
low battery state.
The State Images tab has icons defined for the various states of the panel and
the inputs. The icons can be modified as required.
This chapter describes how to use the iSTAR Configuration Utility (ICU) to
configure the iSTAR Edge controller.
In This Chapter
Overview .......................................................................................................................... 7-2
General Configuration Procedure ................................................................................ 7-4
Copying the ICU onto a PC or Laptop......................................................................... 7-7
Understanding the ICU.................................................................................................. 7-8
Starting the ICU............................................................................................................... 7-9
Refreshing Controller Information ............................................................................. 7-11
Setting ICU Options...................................................................................................... 7-11
Using the ICU Window................................................................................................ 7-14
Configuring a Controller.............................................................................................. 7-21
Configuring SNMP ....................................................................................................... 7-29
Digital Certificate Signing and Restore Options ...................................................... 7-33
Connecting to the iSTAR Web Page Diagnostic Utility........................................... 7-37
ICU Block Feature ......................................................................................................... 7-36
Sending Messages to Other ICU Users ...................................................................... 7-41
Downloading Firmware Updates ............................................................................... 7-42
Overview
The ICU provides iSTAR configuration, diagnostic, and troubleshooting
options.
Use the ICU to designate the master controller, define master IP addresses,
and define the IP address for the C•CURE host. Other configuration
information should be defined and downloaded from the C•CURE host.
However, sites that use locked IP addresses to provide local management can
use the ICU utility for local cluster configuration.
To ensure correct configuration, the information that you enter in the ICU
must match the information that you enter in the C•CURE Administration
application.
NOTES Software House recommends that you use the ICU only for initial
setup of master controller address information and for occasional
troubleshooting. This is because configuration information in the
C•CURE is downloaded to iSTAR and overwrites the values that you
specify in the ICU.
Alternate Master
The Alternate Master capability cannot be configured in newly-created iSTAR
clusters in version C•CURE 9000 version 2.20 and later.
Troubleshooting Tools
The ICU provides a set of troubleshooting tools that help you to monitor the
iSTAR network. Use the troubleshooting tools to:
PING IP addresses.
Send messages to other ICU users.
Open a Real Time Monitor Controller Diagnostic window within the
ICU and display reports and diagnostic messages.
LAN Configurations
Requirements for LAN configurations vary from site to site. The following
procedure describes most configurations.
WAN Configurations
NOTE The ICU can connect to an iSTAR across a WAN provided you know the
IP address of the remote iSTAR.
Because the ICU cannot detect an iSTAR address beyond the local subnet, you
must do the following:
3. Connect the PC or laptop with the ICU to the subnet on which the target
iSTAR resides.
NOTE The ICU only sees iSTARs in the local subnet because ICU uses a
broadcast to awaken iSTARs.
To use the ICU to configure an iSTAR that is not in the subnet, you must know
the IP address.
Copy the ICU folder on the C•CURE DVD to a C•CURE server or client. The
ICU folder contains the following:
ICU.exe – The executable that runs the ICU.
iWatch.exe – An executable that provides real-time monitoring of iSTAR
controllers.
iWatch2.exe – An executable that provides real-time monitoring of iSTAR
controllers.
iSTARDiagConnection.dll - Dynamic link library to establish
connections.
icu.chm – The help file for the ICU.
ICU Release Notes
Be sure to record the location of the ICU folder on the PC or laptop so you can
find it later.
2. In the Open field, enter the path and filename for ICU.exe.
3. Click OK. The ICU password dialog box opens, as shown in Figure 7-3.
4. Enter the default password and click OK. The default password is
manager. Software House recommends that you change the default
password for the ICU. For information about setting up passwords, see
“Changing the ICU Password” on page 7-13.
The ICU starts and the main window opens, as shown in Figure 7-4 on
page 7-10. See “Using the ICU Window” on page 7-14.
1. In the Auto-Refresh section of the Options dialog box, select the Enable
option.
2. Enter the refresh interval (in minutes) or use the up/down arrows to the
right of the Refresh Interval box to select the time.
3. Click OK.
NOTE Software House recommends that you change the default ICU password.
1. In the ICU User Password section of the Options dialog box, enter the
new password in the Password field.
3. Click OK.
To specify another firmware download port, enter the port number in the
Download TCP/IP Firmware field on the Options dialog box.
To determine if port 2801 is in use, and to determine which ports are in use on
the PC, enter the following command in a DOS command prompt window:
netstat -n
NOTE Generally, it is best practice to configure the master controller using the
ICU and then use the C•CURE Administration application to configure
the members.
Menu Bar
Toolbar
iSTAR
Display Area
Status Bar
The Toolbar
The toolbar contains icons of frequently used ICU commands.
To display the toolbar, select Toolbar from the View menu. To hide the
toolbar, select the Toolbar command again.
Place the cursor over each toolbar button to display a tip on the button’s use.
Table 7-1 on page 7-15 describes toolbar buttons.
NOTE All of the functions described in Table 7-1, with the exception of Ping, are
available on the right-click context menu for each controller.
Button Description
Refreshes the controller list. The ICU broadcasts a query across the
subnet, and controllers respond with their configuration information,
which is then updated in the window.
Select a controller and click this button to open the Controller window for
the selected controller. This window lets you configure the controller. See
“Configuring a Controller” on page 7-21 for more information.
Select a controller and click this button to open a Ping window for the
selected controller.
Icons
Table 7-2 describes the icons in the ICU Window used indicate the status or
type of controller.
Icon Description
Connected to Master.
Connected to Master.
Icon Description
Connected to Master
Not Connected
Connected to Master
Not Connected
Connected to Master
Not Connected
Comm Fail
The controller is in a Communication Failure state, and the ICU is
unable to communicate with the controller.
This can be a transient state when you refresh the ICU display,
and is replaced by one of the other states when the ICU receives
a response from the controller.
Display Area
The Display Area lists controllers that respond to the ICU broadcast. The ICU
displays the information described in Table 7-3 for each controller.
Column Description
MAC Add Displays the last six nibbles of the controller’s MAC address.
MAC addresses are unique hardware addresses for the iSTAR controller. A MAC address cannot be
changed. The iSTAR MAC address is indicated by a label on the iSTAR GCM board. The first six nibbles
of the MAC address are fixed for all controllers (set at 00-50-F9).
Name Displays the name of the controller as it was configured in the C•CURE Controller dialog box.
Parent IP If the controller is a cluster member, displays the IP address of the controller’s master.
Address
If this controller is a master, displays the IP address of the host.
If “0.0.0.0” is displayed in this field, a master is not assigned to the controller or the master IP address is
not configured.
FW Version Displays the controller’s firmware version. ICU Version 3.3.0 and higher recognize any firmware version
higher than Version 2.1. Earlier firmware versions are listed as “Unknown”.
Update Time The Update Time column shows the last date\time the ICU received a message from iSTAR. The Update
Time column also displays information about a controller.
Column Description
Connected to Master – the member controller is configured and communicating with its master
controller.
Beaconing for Host – the master is configured, but is not in communication with the host.
Beaconing for Master – the controller is broadcasting a query across the subnet for the master’s IP
address. The master responds by sending the controller the IP address. If the master does not
respond in a set amount of time, the ICU responds by sending the controller the master’s IP address
as specified in the utility’s controller database.
Beaconing for IP Address – the member is broadcasting a query across the subnet for its own IP
address. Since the controller is a member, the master can respond with the IP address information.
Rebooting – the controller is rebooting.
Comm Fail – the controller did not receive the latest ICU refresh message, and may be in
communication failure.
Menu Bar
The Menu bar provides options that activate dialog boxes. See the ICU online
help for specific information about ICU dialog boxes.
Status Bar
The Status Bar provides helpful information about the current operation the
ICU is performing.
The Status Bar also displays the number of active ICUs and the number of
controllers responding to the utility’s broadcast.
Configuring a Controller
The Controller dialog box contains options that configure and edit iSTAR
controllers.
Information Description
Host connection type Master controllers support Ethernet connection to the host.
Member controllers support one network connection.
C•CURE or master For master controllers, this is the IP address of the C•CURE
address system.
For member controllers, this is the IP address of the master
controller.
NOTE To use the ICU, connect a PC or laptop to the same subnet as the cluster.
The ICU window opens, as shown in Figure 7-7 on page 7-22, and
displays controllers and their configuration information.
3. Use one of the following methods to open the Controller dialog box for
the controller:
• Double-click on the controller.
• Highlight the controller, right-click, and choose Edit Controller
Information from the drop down menu.
• From the Main Menu bar, select Edit and choose Controller.
Field Description
MAC address Displays the last six nibbles of the controller’s MAC address. You
cannot edit this field.
MAC addresses are unique hardware addresses that identify
controllers and other Ethernet devices. They are built into the iSTAR
GCM at production time. A controller’s MAC address is printed on a
label attached to the iSTAR GCM.
The first six nibbles of the MAC address are fixed for all controllers (set
at 00-50-F9).
Master controller Select this option to indicate that the controller is a master.
If you select this option, the Master tab changes to a Host tab. You can
then use the Host tab to specify the host with which the controller
communicates and the type of connection to the host (see Table 7-7 on
page 7-26).
If you do not select this option, it indicates that the controller is a
member controller communicating with a master controller. You can
then use the Master tab to specify the master controller with which the
controller communicates and the type of connection to the master
controller.
Field/Option Description
Use this as the If checked, uses the Ethernet adaptor specified on this tab as the
Primary Ethernet primary Ethernet connection. Use the Host tab to configure
Adaptor secondary Ethernet connections (master controllers only).
Field/Option Description
Obtain an IP address Select this option to tell the controller to use the IP addresses
from a DHCP Server assigned by the DHCP server you specify.
Software House recommends that you select this option.
Specify an IP address Select this option if you want to use a specific IP address for the
controller.
When you select this option, the following fields become active:
IP Address – Enter the controller’s IP address. All controllers
need an IP address to communicate on a TCP/IP network.The IP
address must match the IP address you enter for the controller in
the C•CURE Administration application.
Subnet Mask – Enter the subnet mask.
Default Gateway – Enter the IP address of the default gateway
for the controller. This field is required for an iSTAR that
communicates across a WAN configuration.
Obtain Domain Name Select this option to tell the controller to automatically obtain
Server addresses Domain Name Server addresses.
automatically
Software House recommends that you select this option.
Use the following Select this option if you want to specify the Domain Name
Domain Name Server Server(s) that the controller should use. Then enter the IP
addresses addresses of the Primary and Secondary DNS Servers in the
provided fields.
Optionally, you can also enter a DNS Query Suffix (for example,
“yourcompany.com”).
Section Description
Connection Type Defines the primary connection to the C•CURE host or the
master controller.
Options for the iSTAR eX/Ultra include:
Primary Ethernet
Secondary Ethernet
IP Address or Name Enter the IP address or name of the Primary connection to the
C•CURE host or to the Master controller for the cluster. When
configuring a Master controller, you can enter the NetBIOS or
DNS name of the C•CURE host. When configuring a member
controller, you can only enter the IP address of the Master
controller.
Enter the C•CURE host IP address if the panel is a Master.
Section Description
Secondary Connection
Section Description
NAT IP Address Enter the Network Address Translator (NAT) address for the
server used to download firmware to the controller.
Section Description
SNMP Select the Enabled option to enable SNMP. You can then
define security levels for up to two community names.
Clear the Enabled option to disable SNMP.
Configure Click Configure to open the SNMP dialog box to set the SNMP
options that you want. See “Configuring SNMP” on page 7-29.
Web Diagnostics Select the Enabled option to allow viewing of Web Diagnostic
pages for the selected controller.
Clear the Enabled option to prevent viewing of Web
Diagnostic pages for the selected controller.
See “iSTAR Web Page Diagnostic Utility” on page 6-1 for more
information on Web Diagnostics.
eX 8 Reader USB Displays the status of the iSTAR eX eight reader USB key. Status
Key can be Installed, Removed, or N/A.
Configuring SNMP
You can enable and configure Simple Network Management Protocol (SNMP)
communication on the iSTAR controller.
To Configure SNMP
1. In the ICU controller list, select the iSTAR controller for which you want
to enable SNMP.
4. Click the Configure button. The SNMP dialog box appears, as shown in
Figure 7-10 on page 7-31.
NOTE The Configure button is available only if the Enabled check box is
selected.
5. See Table 7-9 for information about the fields in the dialog box.
Field Description
Community Name Set the SNMP communities to which this Controller belongs. An
SNMP device or agent can belong to more than one SNMP
community. A device does not respond to requests from SNMP
management stations that do not belong to one of its communities.
Obtain this information from your Network Administrator.
Rights Set the access right for the specified community. When an SNMP
message is received by the Controller, it is evaluated based on these
rights.
No Access – The SNMP message from a management system in
this community is discarded.
Read Only – Only GET, GET-NEXT, and GET-BULK requests are
processed. SET requests are not processed from this community.
Read Create – SET, GET, GET-NEXT, and GET-BULK requests are
processed.
Field Description
SNMP Trap Enter the IP address or host name of the SNMP Trap Manager for
Manager IP this iSTAR Controller.
Address or Host
Name
SNMP Hosts Accept SNMP packets from any host – Select this option if you want
the iSTAR controller to accept SNMP messages from any host.
Only accept SNMP packets from this Host – Select this option if
you want the iSTAR controller to accept SNMP messages from a
specified host only.
IPAddress or Host Name – Specify the IP address or host name of
the SNMP Host for this iSTAR Controller.
NOTE The iSTAR Pro or Ultra cannot cluster with Edges or eXs that do not
have ≥ C•CURE 9000 version 2.20 and firmware version ≥ 6.0.
iSTARs configured at ≥ C•CURE 9000 version 2.20 and running
firmware version ≥ 6.0 can be configured to use RSA, but it is not the
first choice. (See Table 7-10 entries with Y)
The Digital Certificate menu items are available only if the selected controller
is an encrypted iSTAR.
Table 7-10: Digital Certificate AES256 Support
RSA ECC RSA ECC RSA ECC RSA ECC RSA ECC
1. Select the iSTAR controller and right-click to display the context menu, as
shown in Figure 7-11 on page 7-35.
3. Enter the IP address of the C•CURE system host you are requesting a
signing from. The OK button will not be available if the “Host IP address
or name” field is empty.
4. Click OK.
Selecting OK will change the mouse icon to the wait icon, as this
operation may take up to 30 seconds to complete. The system validates
the “Host IP address or name” field to be an existing Host. The controller
will try three times to connect to the designated host, 10 seconds apart if a
connection attempt fails.
This menu item will not be available if the selected controller does not support
advanced encryption.
1. Select the iSTAR controller and right-click to bring up the context menu,
as shown in Figure 7-11 on page 7-35.
Table 7-11: ICU Block and Unblock Settings - with LCD Status Display Messages
SW1 F 0
NOTE To achieve maximum security when iSTAR controllers are not running in
FIPS 140-2 mode, Software House strongly recommends that you block
the ICU configure feature on the controllers.
Example:
http://121.12.123.12.
NOTE You must use Internet Explorer v6.0 or higher to run the Diagnostic
Utility.
To Start the iSTAR Web Page Diagnostic Utility from the ICU
NOTE If there is no Controller password, you can configure one in the Options
and Tools/System Variables/iSTAR Driver section, by entering up to 16
characters.
5. If a Network Controller password was not configured for the utility, the
Controller Status web page opens in the default web browser, as shown in
Figure 7-15 on page 7-39. Internet Explorer displays the status of the
selected controller in the main Diagnostic System window.
4. In the Web Diagnostics box, clear the Enabled check box and click OK.
2. Type your message and click Send. The ICU sends the message to all
other ICU users in the subnet.
NOTE Use the User Message dialog box to notify other users that you are
configuring an iSTAR Classic, iSTAR Pro, iSTAR Edge/eX, or iSTAR Ultra
within a specific cluster. This “good practice” procedure prevents other
users from configuring the same iSTAR unit and maintains control over
iSTAR addresses.
1. In the ICU window, select the controller(s) that you want to update. You
can select multiple controllers by pressing the Ctrl key while you are
selecting them.
2. After selecting the controller(s), right-click in the ICU window and select
Download Firmware from the pop-up menu, as shown in Figure 7-12 on
page 7-37.
NOTE You can also start the download process by clicking the icon on the
toolbar.
3. The Download Firmware dialog box appears, listing all of the controllers
you selected, shown in Figure 7-17 on page 7-43.
4. Click Browse and navigate to the directory in which you stored the
firmware image file.
5. Select the firmware image file and click Open. The selected file is
displayed in the Firmware Image File to Download box.
The iSTAR Web Page Diagnostic Utility uses a web page interface that is
included in the iSTAR Edge firmware. Use the Diagnostic Utility to view
diagnostic and status information for a controller or cluster in an Internet
Explorer browser window.
In This Chapter
Starting the Diagnostic Utility....................................................................................... 8-2
Navigating the Diagnostic Utility................................................................................. 8-3
Viewing the Status Screen.............................................................................................. 8-4
Viewing the Cluster Information Screen ..................................................................... 8-7
Viewing the Object Store Database Screen.................................................................. 8-8
Diagnostic Screens ........................................................................................................ 8-10
iWatch2 Network Diagnostic Tool ............................................................................. 8-14
NOTE The Web Page Diagnostic Utility has not been evaluated by UL.
Use the following procedure to start the Diagnostic Utility and connect to a
controller.
NOTE You can also start the Diagnostic Utility from the ICU.
2. In both the User Name and Password fields, enter the password you
configured in the C•CURE Administration application.
After the login information has been verified, the Controller Status
window appears, as shown in Figure 8-2 on page 8-3.
NOTE The password that you enter for the Diagnostic Utility is different from the
one used for the ICU.
Figure 8-3 shows a portion of an iSTAR Edge master controller status screen.
The information that is displayed for a member controller is slightly different.
Menu
The menu in the left-side frame is the entry point to all the other screens. It
remains fixed in the left-side frame while the right-side frame changes
according to the menu selection.
Notice the drop-down list at the top of the menu. The MAC address of the
selected controller appears in the rectangular box. Once connected to a
controller, all of the cluster members associated with that controller are
accessible. Connect to them by selecting them from the drop-down list box.
Click the down arrow to expand the list. The numbers shown in the list
correspond to the associated controllers’ MAC addresses.
Figure 8-3 shows a portion of an iSTAR Edge master controller status screen.
The information that is displayed for a member controller is slightly different.
Status information varies and depends on the controller type and firmware
version. Table 8-1 on page 8-5 lists status information for the different iSTAR
controller types: iSTAR Classic, iSTAR Pro, iSTAR eX, iSTAR Edge and iSTAR
Ultra.
Item Meaning
MAC Address The last six nibbles of the Media Access Control (MAC)
address of the controller. The first six nibbles of the MAC
address are the vendor portion, and are always 0050F9.
Master (or Host) IP The IP address or network name assigned to the cluster
address master controller or to the host.
Master MAC address The MAC address assigned to the cluster master controller.
This field is not displayed if the current controller is a master
controller.
Local Date/Time The local date, time, and time zone at the controller. This value
is reported each time the controller is queried, and it is
necessary to click the browser’s Refresh button to update it.
Item Meaning
GMT Date / Time The date and time expressed in Greenwich Mean Time or
Universal Time. This value is reported each time the controller
is queried, and it is necessary to click the browser’s Refresh
button to update it.
Boot Date / Time The GMT date and time at which the controller was last booted.
Elapsed Time Since Boot The amount of time that has passed since the system was
booted.
Total Program Memory The total amount of controller flash ROM memory, in bytes.
Free Program Memory The number of bytes of controller flash ROM memory not in
use.
Percent Free The percentage of controller flash ROM memory not in use.
Total Storage Memory The total amount of SDRAM available for C•CURE 800/8000
access control data.
Free Storage Memory The amount of free SDRAM available for C•CURE 800/8000
access control data.
Master (or Host) The status of the connection to the master controller (for
Connection Status members) or to the host (for masters).
PCMCIA Ethernet Card The IP address of the PCMCIA Ethernet card, if the controller
Address has one. N/A if the controller does not have a PCMCIA
Ethernet card.
Modem N/A
Controller SDRAM
Memory (in bytes)
Table 8-2 describes the controller SDRAM memory status that displays at the
top of the window.
Item Meaning
Total Object Store Indicates the total SDRAM memory that is available for
the Object Store Database.
Total Object Store memory is based on the total system
memory minus the 8 MB of memory that is used for the
iSTAR driver processes.
In the database table, you can click the following database names to display
more details about the selected database:
Personnel – Displays personnel records.
Tracking – Displays anti-passback information.
ACMClearanceDB – Displays all clearances that have been configured.
EventLinkDB – Displays the Link ID, State, Activation Time, Start Time,
and Link time for event links.
TimeSpecDB – Displays all time specifications that have been configured.
Phone Number – The RAS telephone number.
ConnectionPath – Displays all connection path information for the
current controller.
Diagnostic Screens
Diagnostic screens display information about the following:
iSTAR network
Readers and I/O devices connected to iSTAR Edge
SID (Subsystem ID) diagnostic level controls
Network Diagnostics
The Network Diagnostics section displays diagnostic information about
iSTAR networks, addresses, data transmissions, protocols, and routing.
Figure 8-6 shows a portion of the Network Diagnostics screen.
Each subsystem (General Controller I/O, Comm Server, etc.) has several
report categories. To display or log any or all of these, click the appropriate
check boxes.
2. Click OK to display the message levels you selected in the Web Page
Diagnostic Utility
- or -
Select new levels by checking items on the Set Diagnostic Level dialog
box.
Installation
The iWatch2 utility is installed with C•CURE 9000 into the following
locations:
If you upgraded from C•CURE 9000 v2.02 (or lower) to v2.10 and above,
the location is
Program Files \Software House\SWSystem CrossFire\ServerComponents\
iSTAR \ICU.
Starting iWatch2
To Start iWatch2
NOTE For iSTAR panels with firmware less than 5.0.0, the normal iWatch will
open.
The iWatch2 screen contains the fields shown in Figure 8-10 on page 8-16.
iWatch2 Screen
Figure 8-10: Watch2 Screen
Config
Control
Info
Connection State
Type
Output File
Commands
Reconnect
Info
Output
Directory
Output file
name
Display
Output
iWatch2 Fields
The following iWatch2 fields appear on the screen:
IP - IP address of the iSTAR controller.
Port - Read-only field that shows the port being used to connect.
Password - Password of the iSTAR controller, if it is configured from
C•CURE Administration application.
State - Status of the iWatch utility (connected, disconnected).
Stream msgs - Number of messages being streamed.
Bytes in - Size of inbound messages in bytes.
Bytes out - Size of outbound messages in bytes.
Last msg time - Time when last message was received.
Reconnect in - Number of seconds left until next automatic re-connection
attempt.
Connection type:
• Upload and stop - Upload whatever data is on the panel, and then stop
the capture.
• Live - Capture the live data.
• Upload and stay live - Upload whatever data is on the panel, and then
continue to capture live data.
Attempt reconnect - If this check box is checked, iWatch2 will continue
trying to reconnect to the iSTAR if the connection is unsuccessful.
Reconnect Wait - Specify the time to wait before iWatch2 tries to
reconnect to the panel.
Output file - By default, the output data file is stored in this folder:
• If you upgraded from C•CURE 9000 v2.02 (or lower) to v2.10 and
above, the location is Program Files\Software House\SWSystem
CrossFire\Server Components\iSTAR \ICU.
1. Select the “Net Diag" check box at the bottom of the iSTAR webpage.
Maintenance
The iSTAR Edge includes an LCD message display. For normal operations,
configure the LCD to display status messages. For troubleshooting
operations, configure the LCD to display diagnostic messages about readers,
card data, inputs, outputs, network ports and devices.
In This Chapter
Setting the LCD Message Display ................................................................................ 9-2
Displaying Status Messages .......................................................................................... 9-4
iSTAR Edge Diagnostic Tests ........................................................................................ 9-5
NOTE The iSTAR Edge LCD display and associated diagnostic tests have not
been evaluated by UL.
Figure 9-1 shows the location of the rotary switch SW1. See Table 9-1 on
page 9-3 for a summary of SW1 settings.
Rotary
Switch
SW1
LCD Contrast Adjustment
Table 9-1: Rotary Switch SW1 Diagnostic Tests for iSTAR Edge
0 Displays general status messages. Users can Read, Write, ICU Block off
and Update ICU configuration.
3 Tests and displays information about manual inputs for 1 Slow Mode Input Test
second
4 Tests and displays information about manual inputs for 2 Fast Mode Input Test
seconds
5 Activates output change display tests for manually Slow Mode Output Test
activated outputs and displays information for 2 seconds
6 Activates and tests all outputs attached to an iSTAR Edge Fast Mode Output test.
through readers and R/8 boards for 1 second LCD does not display all info
7 Activates and tests all outputs attached to an iSTAR Edge, Displays results on LED
one by one. Test results are indicated by the LED
associated with each output.
8 Tests and displays diagnostic information about Ethernet #1 Ethernet Port and CF Slot
and Ethernet #2 ports. Test
NOTE Diagnostic tests add overhead to iSTAR Edge processing, and may
degrade system performance. When the diagnostic tests are complete,
deactivate the test by resetting SW1 to display status information.
To set the mode for card reader diagnostics, set the SW1 rotary switch to the
positions shown in Table 9-3.
You can also use the iSTAR Web Page Diagnostic Utility to view reader
diagnostic information. For information about this utility, see “Diagnostic
Screens” on page 8-10.
Output Diagnostics
To activate the output change display test, set rotary switch SW1 to the
position shown in Table 9-4.
Switch
Position Function
SW1 set to 5 Activate output change display for two seconds (slow mode)
To activate the output change display test, set rotary switch SW1 to the
position shown in Table 9-5.
Switch
Position Function
SW1 set to 6 Activate output change display test for one second (Fast
mode)
To activate the output test, set switch SW1 to the position shown in Table 9-6.
Switch
Position Function
SW1set to 7 Output Test Mode activates and tests all outputs one by one
Information displays on the LED for either one second (Position 4, On) or two
seconds (Position 3, On).
To activate input change display tests, set the SW1 rotary switch to the
positions shown in Table 9-7.
To test the Ethernet port, set switch SW1 to the position shown in Table 9-8.
Switch
Position Function
1. When the test is complete, set SW1 back to 0 or F to display status messages.
The LCD displays only success messages. If no message displays, the circuit is
defective or the port is not communicating.
A C
AC / Main Fail input Card data diagnostic tests 9-5
4-6 Cluster members
AC power fail input 6-33 about 3-7
assigning IP addresses to 7-18
Active ICUs, showing, via status bar 7-20
primary path and 3-9
Alternate Master 7-3 using C•CURE Administration Application
Alternate master to configure 7-4, 7-6
connections between host and 3-10 Clustering 1-15
Alternate Power 4-4 Clusters 3-10
Anchoring Systems 2-2 about 3-6
Attempting connection status message Cluster Information screen
for host 7-19 displaying 8-7
for master 7-19 Object Store Databases screen
Automatic output diagnostic test 9-7 displaying 8-8
obtaining information about, using ICU 7-8
AUX power ports 4-9
specifying master 3-11
B Comm Fail 7-17
Comm Fail status message 7-19
batteries 4-9
Communications 1-10
Battery Low 6-34
modem 2-6
Beaconing paths
for Host status message 7-19 Primary communications path. See
for IP Address status message 7-19 Primary Path
for Master status message 7-19 specifying methods 3-11
supported by iSTAR Pro 3-2
V
Version
Win CE 1-13
Viewing
controller diagnostics 8-12
W
Wakeup Threshold 4-10
Wakeup threshold 4-5
WAN Configurations 7-5
Web based iSTAR Diagnostic Utility screen 8-3
Web diagnostics 7-40
controller status screen (also see Diagnostic
Utility) 8-4
Wet relay 6-20
WET relays 4-9
Wet Relays 1-7
Wiegand
ports, power ratings of 2-7