Unlocking SAM cards in Synergis™ Softwire 10.7 - Synergis™ Softwire 10.7

Synergis™ Appliance Configuration Guide 10.7

series
Synergis™ Softwire 10.7
revised_modified
2018-03-27

Storing cryptographic keys on MIFARE SAM (Secure Access Module) AV2 cards instead of the Synergis™ key store increases security, because the keys cannot be retrieved. The SAM cards must be unlocked to interact with Synergis™ Softwire for cryptographic operations.

Before you begin

  • Configure a Synergis™ Cloud Link equipped with an optional expansion module. For more information, see the Synergis™ Cloud Link Quick Start Guide 3.1.
  • Configure SAM cards using a SAM production tool like ISLOG SAM Manager, and install up to three cards. For more information on SAM Manager, see Configuring MIFARE SAM AV2 cards.
    NOTE: If you install more than one SAM card, the cards must have the same keys. Having multiple SAM cards installed will allow for faster card reads and access decisions on units with heavy access control activity.

What you should know

SAM card key storage requires Synergis™ Softwire 10.7 GA or later and a Synergis™ Cloud Link with an optional expansion module.

Procedure

  1. Log onto the Synergis™ unit.
  2. Click Configuration > Synergis™ key store.
  3. Scroll to the bottom of the key index list and select SAM LockUnlock.
  4. Click Create new version.
  5. In the text field, enter the Lock/Unlock keys that were configured in the SAM production tool and click Add.
  6. Click Configuration > SAM Card.
  7. Enter the keyEntry number and key version of the Lock/Unlock key stored on the SAM card.
    You can have up to three SAM cards installed; expansion slots with SAM cards inserted will read "OK" if the Lock/Unlock key, key number, and version number are valid. If the values don't match those on the card, the status will read "SAM card unlock failed." Empty slots will read "No SAM card inserted."

After you finish

Enroll STid or OSDP readers, or configure enrolled readers. For more information about setting up OSDP and STid readers, see the Synergis™ Softwire Integration Guide