Unlocking SAM cards in Synergis™ Softwire 11.2 - Synergis™ Softwire 11.2

Synergis™ Appliance Configuration Guide 11.2

Applies to
Synergis™ Softwire 11.2
Last updated
2022-01-11
Content type
Guides > Administrator guides
Language
English (United States)
Product
Synergis™ Softwire
Version
11.2

Storing cryptographic keys on MIFARE Secure Access Module (SAM) AV2 cards instead of the Synergis™ key store increases security because the keys cannot be retrieved. The SAM cards must be unlocked to interact with Synergis™ Softwire for cryptographic operations.

Before you begin

  • Configure a Synergis™ Cloud Link equipped with an optional expansion module. For more information, see the SY-CLOUDLINK-312 Quick Start Guide.
  • Configure SAM cards using a SAM production tool like ISLOG SAM Manager, and install up to three cards. For more information on SAM Manager, see Configuring MIFARE SAM AV2 cards.
    NOTE: If you install more than one SAM card, the cards must have the same keys. Having multiple SAM cards installed will allow for faster card reads and access decisions on units with heavy access control activity.

What you should know

SAM card key storage requires Synergis™ Softwire 10.7 GA or later and a Synergis™ Cloud Link with an optional expansion module.

Procedure

  1. Log on to the Synergis™ unit.
  2. Click Configuration > Synergis™ key store.
  3. At the top of the key list, click
  4. In the Create new version dialog box, do the following:
    1. Select SAM LockUnlock.
    2. In the Components field, enter the LockUnlock keys that you configured in the SAM production tool, and click Add.
    3. Click OK.
  5. Click Configuration > SAM Card.
  6. In the SAM card unlock configuration section, enter the KeyEntry number and key version of the LockUnlock key stored on the SAM card.
  7. In the SAM card status section, verify that the SAM cards were inserted and configured correctly.
    You can have up to three SAM cards installed. Each expansion slot can have one of the following statuses:
    OK
    A SAM card is inserted and the LockUnlock key, key number, and version number are valid.
    SAM card unlock failed
    A SAM card is inserted, but the LockUnlock key, key number, or version number do not match those on the card.
    No SAM card inserted
    There is no SAM card in the expansion slot.

After you finish

Enroll STid or OSDP readers, or configure enrolled readers. For more information about setting up OSDP and STid readers, see the Synergis™ Softwire Integration Guide.