Configuring HID PIV authentication on a Mercury LP4502 controller - Synergis Softwire | HID | Security Center

Personal Identity Verification (PIV) is a credential specified by the US government's Federal Information Processing Standard Publication 201 (FIPS 201), which specifies cryptographic key sizes, algorithms, biometrics, and best practices in physical access control.

1. Upload the Mercury firmware onto the Synergis unit:
   1. On the GTAP Product Download page, select the latest version of Synergis Softwire from the Download Finder list, and download the latest .sfw file listed in the Mercury Security Firmwares section.
   2. Save the .sfw file on your local drive.
   3. Log on to the Synergis unit.
   4. Click Maintenance > Softwire upgrade.
   5. Click Select upgrade file.
   6. In the file browser that opens, select the .sfw firmware file, and click Open.
   7. Click Upgrade now.
2. For Synergis Softwire 11.1 and later, change the database layout to the Ficam layout by doing the following:
   1. Log on to your Synergis unit, and click Configuration > Mercury controller settings.
   2. Expand the Database layout settings section, select Ficam from the list, and click Save.
   3. Perform a software restart on the Synergis unit.
      
3. For Synergis Softwire versions earlier than 11.1, change the database layout to the Ficam layout by doing the following:
   1. Log on to your Synergis unit, using the following URL:
      https://<IP address>/MercuryEP/UnitWide/DefaultDbSettings/Set?value=FicamLayout

      NOTE: <IP address> is the IP address of your Synergis unit.
   2. On the redirect page that opens, click the link to apply the database layout change.
   3. Perform a software restart on the Synergis unit.
4. Log back on to your unit using the following URL:
   https://<Synergis Cloud Link IP address>/MercuryEP/FirmwareVersions
5. On the FirmwareVersions page, click Install PivClass embedded auth package <version>, where <version> is the latest firmware version.
   Installing and enabling the plugin can take a few minutes.
6. Perform a software restart on the Synergis unit.
7. For Synergis Softwire 11.1 and later, enable HID pivCLASS:
   1. Log back on to your Synergis unit, and click Configuration > Mercury controller settings.
   2. Expand the Auxiliary authentication module section, select PivClass from the list, and click Save.
   3. Perform a software restart on the Synergis unit.
   
8. For Synergis Softwire versions earlier than 11.1, enable HID pivCLASS:
   1. Go to the following:
      https://<IP address>/MercuryEP/UnitWide/AAM/Set?value=HIDPivCLASSEmbeddedAuth
   2. On the redirect page that opens, click the link.
   3. Perform a software restart on the Synergis unit.
9. Configure the custom card format for Mercury.
10. In Config Tool, create a door and associate the hardware to it.
11. If you are using Security Center 5.12 or later, and if your Synergis license supports Personal Identity Verification, configure the assurance profiles assigned to your pivCLASS readers.
12. If you are using Security Center 5.11 or earlier, or if your Synergis license does not support Personal Identity Verification, create custom fields to store the assurance profiles assigned to your pivCLASS readers.