Openpath Install Guide
Openpath Install Guide
Openpath Install Guide
Allegion, ENGAGE technology and Schlage are trademarks of Allegion plc, its
subsidiaries and/or affiliates in the United States and other countries. Safari is a
trademark of Apple Inc., registered in the U.S. and other countries and regions. IOS is a
trademark or registered trademark of Cisco in the U.S. and other countries and is
used under license.
PDF-20230119-EN
REVISIONS
Guide Description
Other updates:
l How many entries need to be configured (e.g. doors, gates, and elevator floors)
l Whether you're using legacy wiring or new wiring
l What kind of electronic entry mechanisms, Request to Exit (REX) mechanisms,
and door contact sensors will be used and their power requirements. If your
locking hardware requires 24V, either use a Smart Hub with an .24V power
supply or use a separate 24V supply.
l Whether you're providing backup batteries for the ACUs. See SELECTING A
BACKUP BATTERY on page 7.
l Whether you're supporting a legacy access control panel for mobile gateway.
See WIRING TO LEGACY PANELS AND MOBILE GATEWAY on page 27.
Note: If using an external DNS server, the outbound UDP port 53 must also be open.
To support Wi-Fi unlocking from the mobile app, the inbound TCP port 443 of the ACU
must be available from within the LAN. Inbound port forwarding on the router, firewall,
or NAT device is not required.
The SDC also supports Wi-Fi connections. Refer to NETWORK SETTINGS on page 41.
Assuming a 24V power supply, a Core Series Smart Hub configured with four
Openpath Readers and locking hardware uses asc/bout 2 Amps. To keep the system
running for 3 hours with all entries engaged, you need 2A x 3 hours = 6AH, so two 12V
6AH sealed lead acid (SLA) or gel cell batteries wired in series.
1. Mount the 4-Port Board in the upper-corner of the enclosure by snapping board
standoffs into the holes in the back of the enclosure.
2. Mount the Core Series Controller Board below the 4-Port Board, perpendicular to
the back of the enclosure, by hooking tabs into the holes in the back of the
enclosure.
3. Mount the 16 I/O Elevator Board (if included) below the Core Series Controller
Board using 6-32 screws (insert screws from back of enclosure) with the USB
port on the left.
4. Connect the Core Series Controller Board to the 4-Port Board with the included
USB cable. Connect the Core Series Controller Board to the 16 I/O Elevator Board
with the additional USB cable.
1. Mount the 8-Port Board in the upper-right corner of the enclosure by snapping
board standoffs into the holes in the back of the enclosure.
2. Mount the Core Series Controller Board with the USB and Ethernet ports facing
up as shown in the diagram, and hook the tabs on into the holes in the
enclosure and slide to the left to lock in place.
3. Connect the Core Series Controller Board to the 8-Port Board with the included
USB cable.
l Shielded CAT6A (recommended, additional two pairs can be used for sensors)
l Shielded CAT6
l Shielded RS485 w/22-24AWG (lower gauge, thicker wire is better)
l Shielded CAT5
l Unshielded CAT6
l Unshielded CAT5
l Shielded 22/6
l Unshielded 22/6
Ideally, use one twisted pair for GND and VIN (power) and one twisted pair for +B and
-A (data).
Note: The Openpath Embedded USB Smart Reader can be wired via RS-485, or
connected using the micro USB port and the cable provided in the box. Only one
method, RS-485 or micro USB port, can be used at the same time. For more
information, see the Openpath Embedded USB Smart Reader Datasheet and the
Openpath Embedded USB Smart Reader Installation Instructions (included in the
box). The Openpath Embedded USB Smart Reader supports only Openpath Mifare
or DESFire EV3 card credentials. Mobile credentials are not supported at this time.
WIRING INFORMATION
For shielded wiring: Connect one side of the drain wire (the shield around the wires)
to the GND terminal on the ACU. Both the shield and the GND wire can share the same
GND terminal. Do not connect the other side of the shield to anything.
Note: For elevators, all relays and readers must be connected to the same ACU. If
you need more than four access controlled floors or readers, add the Openpath
Elevator Expansion Module.
WARNING: Always remove power from the ACU and locking hardware when wiring
readers and other devices. Failure to do so can damage the ACU.
PREREQUISITES
Create a Video Reader in the Control Center prior to installing and provisioning.
INSTALLATION
You can install the Video Reader Pro on a narrow surface using the mullion mount or
on a single gang box using the standard mount.
1. Use the provided screws (A) to attach the mounting plate (B) to the wall.
2. Place the cradle bracket (C) on the mounting plate, angle as desired, then
secure with the provided screws (D).
3. Strip and connect the wires if necessary, then provision the device.
4. Snap in the reader (E), then secure with the security set screw (F).
*Relay not rated for locking hardware. To power locking hardware, use an Openpath
Smart Hub or third-party access control panel.
Note: You must first create a Video Reader Pro in the Control Center before
provisioning.
1See: https://support.openpath.com/how-to-set-up-a-standalone-mode-video-reader-pro-
Sy7wcDjc5
PoE access control readers, like the Video Reader Pro, require a wired network
connection installed on the unsecured side of a door. To remove the risk of an
attacker gaining access to the local network via the network connection if they’re
able to remove the reader from the wall, Openpath recommends that your IT team
place the exposed Ethernet port on a demilitarized zone (DMZ) or perimeter network.
The Core Series 24V 4 Door Smart Hub (4ENT-SYS-24V) uses the LifeSafety Power®
FPV41 to power the Core Series Controller Board and 4-Port Board.
The Core Series 12/24V 4 Door Smart Hub (4ENT-SYS-1224V) uses the LifeSafety Power
FPV42 to power the Core Series Controller Board and 4-Port Board; a LifeSafety Power
B1003 secondary power supply; and the LifeSafety Power C4 Control Module4 to power
12-24V locking hardware.
The Core Series 24V Elevator Smart Hub (20ENT-SYS-24V) uses the LifeSafety Power
FPV41 to power the Core Series Controller Board, 4-Port Board, and 16 I/O Elevator
Board.
Interrupt one of the signal wires from each button and run through the C and NC
contacts for the corresponding relay on the 16 I/O Elevator Board.
The general purpose inputs respond to voltages between 3V and 24V. The inputs will
not respond directly to a switch or relay connection to ground. To use these inputs
with a switch or relay, connect one side of the switch to the input and the other side of
the switch to a supply voltage between 3V and 24V. If desired, you can add a 1k ohm
resistor in series with the switch.
The Core Series 12/24V 8-Door Smart Hub (8ENT-SYS-1224V) uses the LifeSafety Power
FPV61 to power the Core Series Controller Board and 8-Port Board; a LifeSafety Power
B1002 secondary power supply; and the LifeSafety Power C8 Control Module3 to power
12-24V locking hardware.
Except where required by fire or safety codes, for convenience you can wire the REX in
parallel with the door strike on the same relay output.
For safety-related applications, you must wire the REX directly to the electromagnetic
lock.
Fail safe and fail secure are ways of configuring locking hardware:
ADVANCED CONFIGURATIONS
WIRING WIEGAND READERS TO OPENPATH READERS
To support additional card credentials, biometric scanners, and PIN codes, you can
wire third-party readers to the Openpath ACU by using the Smart Reader pigtail.
Simply connect the power (red), ground (black), WD0 (green), and WD1 (white) from
the Smart Reader pigtail to the Wiegand reader.
1. Install the Openpath ACU between the Openpath Readers and the legacy panel,
with the CHANGING I/O TYPES on the next page of the ACU configured as output
to the legacy panel (see Configure Wiegand Devices in the Control Center on
page 30).
In this configuration, the legacy panel controls all locking hardware and entry
mechanisms while the Openpath system lets you use the Openpath mobile app,
Smart Reader, and Wave to Unlock functionality. Refer to the OPENPATH ACCESS
CONTROL USER GUIDE FOR ADMINISTRATOR WEB PORTAL for more information on
configuring Mobile Gateway settings.
While I/Os on the 4-Port Board and 8-Port Board are labeled REX and CONTACT by
default, you can use these I/Os interchangeably or as generic inputs, by modifying
their type in the Control Center. You can also change them to Wiegand inputs, which
requires a few extra steps. For more information, see "CONFIGURING OPENPATH
CONTROL CENTER WITH LEGACY SYSTEMS" in the OPENPATH ACCESS CONTROL USER
GUIDE FOR ADMINISTRATOR WEB PORTAL.
You can wire third party Wiegand readers and panels to the ACU to support
integrations or in the case of Mobile Gateway. The extra Auxiliary I/Os on the 4-Port
Board and 8-Port Board are helpful for wiring Wiegand Devices, however any I/O pair
may be used (including Contact and REX inputs).
This will label the subsequent input as Wiegand Device (Extended) and disable it from
editing. Inputs cannot be changed if they are already assigned to an entry.
Once the Wiegand Device is configured on the ACU, it can be assigned to an entry. Go
to Sites > Entries, and create or edit an existing entry. In the Wiegand Device
settings, configure the following:
l Port — Select the port for the Wiegand Device to which this Entry is wired.
l Mode — Select the Mode to set which direction the card credential data is sent:
o Use Input to receive data from devices such as a Wiegand reader.
panel.
n Enable Gateway Credential Pass-Through if you do not want
For more information on creating entries, refer to the OPENPATH ACCESS CONTROL
USER GUIDE FOR ADMINISTRATOR WEB PORTAL.
END-OF-LINE SUPERVISION
The 4-Port Board and 8-Port Board inputs have support for user-installed single or
double 1k ohm termination. This lets you monitor cut or shorted lines and create alerts
and rules in the Control Center. The input settings in the Control Center must match
the physical wiring configurations.
TROUBLESHOOTING
l ACU LEDS on the next page
l READER LEDS on page 35
l LEGACY WIRING on page 36
l RESETTING THE ACU on page 36
l PROVISIONING THE ACU on page 37
Openpath ACUs (Cores and Expansion Boards) have several LEDs that indicate the
following:
o The STATUS LED on the Core Series Controller Board has several states, see
CORE STATUS LED below.
l BOARD ID LEDs match the Expansion Board Number in the Control Center.
READER LEDS
The Openpath Smart Reader LEDs indicate the following:
Center dot is solid Reader has been identified via the Control
green and the outer Center.
ring is solid.
LEGACY WIRING
Sometimes legacy wiring (unshielded and straight through, rather than shielded
twisted pair, often 22-6) results in slower connections and dropped packets between
the Openpath Reader and ACU. To remedy this, you can switch GND and VIN with +B
and -A connections on the ACU and readers to ensure the data pair (+B and -A) are
using the alternate pair of legacy wires.
To soft reset the ACU, disconnect power from the ACU, wait 10 seconds, then
reconnect the power.
HARD RESET
WARNING: Only hard reset the ACU if absolutely necessary and if instructed by
Openpath. This will clear all of the data off of the ACU and will require
reprovisioning.
Note: If you're provisioning ACUs for a customer account, the customer org needs
to be created first.
REQUIREMENTS
l If using a laptop instead of the app, the laptop must be on the same network as
the ACU. If you have a VLAN, make sure the laptop is on the same VLAN as the
ACU.
l If using a laptop running Microsoft™ Windows or Linux®, you must download the
iTunes app. The provisioning process uses Bonjour software that comes with
Linux® is the registered trademark of Linus Torvalds in the U.S. and other countries.
CREATE ACU
Before you can provision an ACU using the Open Admin app, you must first create an
ACU in the Control Center.
Smart Hubs.
l Single Door Controller (SDC)
Tip: This configuration is most common with the Core Series Smart
Hubs.
d. Click Next.
5. Enter the number of readers connected to the controllers. Enter their names and
click Next.
6. Review your site details and click Confirm & Submit. It may take a few minutes
for setup to complete.
Hubs.
l Single Door Controller (SDC)
5. If your ACU also connects to an expansion board, add the appropriate types in
EXPANSION BOARDS:
l Openpath 4-Port Expansion
Tip: This configuration is most common with the Core Series Smart Hubs.
6. Click Save.
1. Log in to the Open Admin app with your Control Center credentials.
2. Locate the org to which you're provisioning hardware, either on the list or using
search, then tap on the org name.
3. Press the Admin button on the Controller Board or Core Series Controller Board.
4. In the Open Admin app, tap on the last four digits of the serial number for the
ACU.
5. Tap Test Internet Connection and wait for a green YES to appear before
proceeding with the next step.
Note: ACU will disconnect from the Open Admin app 5 minutes after first
pressing the Admin button.
Note: The laptop must be connected to the same network as the ACU.
l Incorrect: a123::b456:5a18:eb8f:7fd6%29:8080
In the Open Admin app, you can tap Test Internet Connection to check if the ACU
can ping https://api.openpath.com/health.
NETWORK SETTINGS
In the Open Admin app, you can configure network settings for the ACU. While wired
Internet connections are preferred, you can configure the Core to use Wi-Fi instead.
The default interface for the Core is Ethernet/wired connection. Ethernet and Wi-Fi
connections can be DHCP (default) or can have a static IP address.
4 Door Controller 1A
Assuming a 12V power supply, a Smart Hub configured with four Openpath Readers
and locking hardware uses 4 Amps. To keep the system running for 3 hours with all
entries engaged, you need 4A x 3 hours = 12AH, so a 12V 12AH sealed lead acid (SLA) or
gel cell battery.
Note: The 12V Smart Hub (OP-4ESH-12V) supports up to 2A for 12V locking
hardware.
WARNING: Only connect the Controller Board to 12V. Over voltage can damage the
board.
If you purchased the Controller Board separately and are using 24V locking hardware,
we recommend using the LifeSafety Power E1 enclosure, FPV4 power supply, B100
secondary power supply, and C4 power control module.
1. Follow all LifeSafety Power instructions for installing the FPV4, B100, and C4 in the
enclosure.
2. Mount the Controller Board using the provided back plate.
3. Connect the B100 secondary supply to the Controller Board.
The 12/24V Smart Hub ACU (OP-4ESH-24V) uses the LifeSafety Power® FPV41 to power
24V locking hardware, a LifeSafety Power B1002 secondary power supply to power the
ACU Board, and the LifeSafety Power C4 Control Module3 to power 12V locking
hardware.
All of this is configured as one Entry in the Openpath Control Center. We recommend
matching port numbers (READER 1 with CONTACT 1, for example). When setting up
Sites in the Control Center using Quick Start, Entries will default to matching READER 1
with CONTACT 1, RELAY 1, and so on. For more complex Entry setups, you'll need to
manually add Controls to the Entry. For the example above, you'd need to add an
additional entry or exit Hardware Control to the Entry. For more information, refer to
the Openpath User Guide.
WARNING: Do not connect 12V out on the Wiegand port to the legacy panel; doing
this will cause voltage backfeeding, potentially damaging one of the supplies.
UL 294
The following performance levels are defined for the Openpath Core Series hardware
and 4 Door Controller, as per UL 294:
Attack: Level I
Endurance: Level I
Line Security: Level I
Standby: Level I
FCC
This device complies with part 15 of the FCC Rules. Operation is subject to the
following two conditions: (1) This device may not cause harmful interference, and (2)
this device must accept any interference received, including interference that may
cause undesired operation. To comply with FCC RF exposure compliance
requirements, a separation distance of at least 20 cm should be maintained between
the antenna of Openpath Smart Reader(s) and persons during operation.
NOTE: This equipment has been tested and found to comply with the limits for a Class
A digital device, pursuant to part 15 of the FCC Rules. These limits are designed to
provide reasonable protection against harmful interference when the equipment is
operated in a commercial environment. This equipment generates, uses, and can
radiate radio frequency energy and, if not installed and used in accordance with the
instruction manual, may cause harmful interference to radio communications.
Operation of this equipment in a residential area is likely to cause harmful
interference in which case the User will be required to correct the interference at his
own expense.
IEC 62368-1
l This equipment is intended only for use in a restricted access area.
l Securely fasten the equipment according to LifeSafety Power mounting
instructions. See FlexPower Vantage Standard Power System - Installation
Manual1.
l PROTECTIVE EARTHING: For safety, the Smart Hub must only be plugged into a
grounded 3-prong outlet, wired with a minimum of 16 gauge wire to ground.
Installez l'appareil en veillant à conserver une distance d'au moins 20 cm entre les
éléments rayonnants et les personnes. Cet avertissement de sécurité est conforme
aux limites d'exposition définies par la norme CNR-102 at relative aux fréquences
radio.
1See https://lifesafetypower.com/docs/im_fpv-standard.pdf.
Le présent appareil est conforme aux CNR d'Industrie Canada applicables aux
appareils radio exempts de licence. L'exploitation est autorisée aux deux conditions
suivantes : (1) l'appareil ne doit pas produire de brouillage, et (2) l'utilisateur de
l'appareil doit accepter tout brouillage radioélectrique subi, même si le brouillage est
susceptible d'en compromettre le fonctionnement.
WARNINGS
l Disconnect power before servicing.
l Do not plug into an outlet controlled by an on/off switch.
l Powering the power supply with 230V requires jumper modification. See the
power supply data sheet for more information.
SPECIFICATIONS
Note: For the Openpath hardware specifications, refer to the product datasheets
on page 6.
Smart Hub with 12/24V Supply (OP- 120V, 0.7A or 230V, 0.3A, 50/60 Hz
4ESH-24V)