Storing cryptographic keys on MIFARE SAM (Secure Access Module) AV2 cards instead of the Synergis™ key store increases security, because the keys cannot be retrieved. The SAM cards must be unlocked to interact with Synergis™ Softwire for cryptographic operations.
Before you begin
- Configure a Synergis™ Cloud Link equipped with an optional expansion module. For more information, see the Synergis™ Cloud Link Quick Start Guide 3.1.
- Configure SAM cards using a SAM production tool like ISLOG SAM Manager, and install up
to three cards. For more information on SAM Manager, see Configuring MIFARE SAM AV2
cards.NOTE: If you install more than one SAM card, the cards must have the same keys. Having multiple SAM cards installed will allow for faster card reads and access decisions on units with heavy access control activity.
What you should know
- Log onto the Synergis™ unit.
- Click .
- Scroll to the bottom of the key index list and select SAM LockUnlock.
- Click Create new version.
In the text field, enter the Lock/Unlock keys that were configured in the SAM
production tool and click Add.
- Click .
Enter the keyEntry number and key version of the Lock/Unlock key stored on the SAM
You can have up to three SAM cards installed; expansion slots with SAM cards inserted will read "OK" if the Lock/Unlock key, key number, and version number are valid. If the values don't match those on the card, the status will read "SAM card unlock failed." Empty slots will read "No SAM card inserted."