Page 1
CK721-A Network Controller installation and operation manual version 3.3 24-10025-121 Revision A March, 2016...
Page 2
Johnson Controls, Inc. All Rights Reserved No part of this document may be reproduced without the prior permission of Johnson Controls, Inc. If this document is translated from the original English version by Johnson Controls, Inc., all reasonable endeavors will be used to ensure the accuracy of translation. Johnson Controls, Inc.
Page 3
Declaration of Conformity United States: This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications.
Page 4
2. The CK721-A shall be mounted in subassembly S300-DIN-L or S300-DIN-S. 3. The CK721-A in combination with the S300-DIN-L or S300-DIN-S must be connected to a UL Listed Uninterruptible Power Supply that provides a minimum of 24 hours of AC emergency power.
HID pivCLASS PIV/PIV-I Readers 1-18 HID Hardware PAM (M2000) Solution 1-19 HID PIV/PIV-I Reader Connecting to RDR2S-A or RDR8S Solution 1-20 OSDP Reader Support 1-22 Chapter 2: CK721-A and S300 DIN Enclosures CK721-A 2-1 LEDs on the CK721-A 2-2 Binary Output 2-3...
Page 6
RS485 2-5 Binary Input 2-6 Connecting the Network 2-7 RS232 2-8 Large Enclosure (S300-DIN-L) 2-10 Wiring CK721-A and Modules 2-11 Small Enclosure (S300-DIN-S) 2-13 Verifying DC and Chassis Ground 2-14 Installing CK721-A Module 2-15 No Enclosure 2-16 DIN Rail Mounting 2-16...
Page 7
24-10025-121 Rev. A Basic Panel Configuration 4-11 Panel Menu 4-11 Panel 4-12 Direct Programming of the CK721-A 4-14 Panel Screen Description 4-14 Terminal 4-22 RDR8S Input Point and Output Point Disassociation 4-37 RDR2S-A Input Point and Output Point Disassociation 4-38...
Page 8
CK721-A Installation and Operation Table of Contents 24-10025-121 Rev. A Field Servicing 5-3 Troubleshooting 5-3 Appendix A: Expanded Address S300 Bus Appendix B: Performance Analysis Appendix C: Grounding and Connectors Cable Grounding C-1 “D-Type” Connectors C-2 Non “D-Type” Grounding Connections C-3...
Page 9
Figure 2-4: Large Enclosure with Installed Components 2-10 Figure 2-5: One CK721-A Module Mounted in a Large Enclosure 2-10 Figure 2-6: One CK721-A Module and Two RDR2S-A Modules Mounted in a Large Enclosure 2-11 Figure 2-7: Daisy Chain Module Wiring for S300-DIN-L 2-12...
Page 10
Figure E-1: CK705/CK720 Write DB to Flash Dialog Box E-1 Figure H-1: Maximum Distance Between Readers and S300 Expansion Enclosures H-1 Figure H-2: Example of a Typical CK721-A System H-2 Figure H-3: Field Installed Metal Oxide Varistor H-3 Figure H-4: Field Installed Metal Oxide Varistor H-4...
CK721-A Installation and Operation Introduction 24-10025-121 Rev. A NTRODUCTION This chapter provides a general description of the CK721-A panel and related equipment. The manual is divided into the following chapters: • Chapter 1: Introduction, defines the key terms and conventions used throughout the manual.
(for example, an ID card) that is used to gain access to physical areas of a facility. CHUID – Cardholder Unique Identifier. CK721-A System – This is a general term that refers to a combination of CK721-A terminals and expansion enclosures that communicate with the P2000 system.
Page 15
External Device – This general term applies to any device that is wired to the CK721-A system, such as a reader or input device. A motion sensor is one type of input device. FASC-N – Federal Agency Smart Credential Number.
ThyssenKrupp Serial Elevator – ThyssenKrupp High Level Interface Elevator Access Control, serial. User Interface – The CK721-A User Interface provides access to the CK721- A panel configuration graphical user interface (GUI) via a serial connection to a laptop (or other computer) running common terminal emulation software or via a Telnet/SSH/SFTP network connection.
100Base-T hubs. The CK721-A is programmed and monitored via the P2000. The CK721-A provides its own user interface through the serial connection located on the CK721-A. This interface facilitates the initial setup, as well as commissioning and troubleshooting. The CK721-A is an advanced, intelligent controller. You can add modules to connect readers, monitor 2 or 4-state input points, and add output relays to perform manual or automatic control functions.
RDR2SA) and for a battery back-up unit. S300-DIN-L A large enclosure containing DIN rails, a tamper switch and a power supply. It has room for up to three modules (CK721-A, RDR2S-A, or a combination thereof), and for a battery back-up unit. S300-XL A large expansion enclosure containing a tamper switch, a power indicator light, and a power supply.
CK721-A Installation and Operation Introduction 24-10025-121 Rev. A S300-DIN M ODULES See the following table for a description of reader and I/O modules. Table 1-3: S300-DIN Hardware Modules Model Number Description S300-DIN-RDR8S Stand-alone unit with removable connectors which can be mounted on a DIN rail or on a flat surface.
CK721-A Installation and Operation Introduction 24-10025-121 Rev. A DDITIONAL QUIPMENT See the following table for a description of batteries and their corresponding bracket kits, power supplies, transformers, and a parts accessory kit. Table 1-4: Additional Equipment Model Number Description S300-BAT Battery for uninterruptible power operation, 12 volts, 7Ah.
CK721-A Installation and Operation Introduction 24-10025-121 Rev. A CK721-A S YSTEM PECIFICATIONS ANELS The following table lists specifications for the CK721-A systems. Table 1-5: CK721-A System Specifications Item Specification Ambient 32 to 122 °F (0 to 50° C) Temperature Humidity...
The typical response time to an access request in an idle CK721-A with 64 terminals on 8 RDR8S modules is less than 500 ms. The typical response time to an access request in an idle CK721-A with 64 terminals on 32 RDR2S-A modules is less than 1 second.
Introduction 24-10025-121 Rev. A Legacy Address S300 Bus Configuration Each CK721-A can support up to 16 logical terminal numbers assigned to reader modules, and up to 16 logical terminal numbers assigned to I/O modules. Therefore, a CK721-A supports up to 24 hardware modules within the following parameters: •...
10/100Base-T Networking Guidelines (specific to the CK721-A) As a network device, the CK721-A can be installed in a variety of configurations based on the needs of your sites. The CK721-A communicates with the P2000 server through one or more 10/100Base-T hubs.
• The 10/100Base-T network may contain a maximum of four hubs and five segments. Another explanation: a maximum of four hubs can be installed between the P2000 server and the last CK721-A panel in the network. • The maximum segment length is 328 ft (100 m). This is the distance between two hubs, or the distance between a hub and a network device such as the CK721-A.
IP address. Each networked device on a TCP/IP, 10/100Base-T Ethernet, must be assigned a unique IP address. The CK721-A is no exception. In basic terms, network communication is accomplished through the transmission and receipt of packets. Packets contain a variable length of data, along with the IP address of the device to which the packet is addressed.
10/100Base-T Ethernet 10/100Base-T Ethernet (also referred to simply as 10/100Base-T) is the physical network connecting the P2000 server to the CK721-A panels. 10/ 100Base-T provides reliable connections using a series of hubs to lengthen a network’s distance at a local level. Bridges, routers, and network switches increase a network’s size to greater distances across states or over continents.
24-10025-121 Rev. A CK721-A/P2000 Server Encrypted Communications This feature provides encrypted network communications between the CK721-A controller and the P2000 Server, using the Advanced Encryption Standard (AES256). The CK721-A Encryption is implemented using the Federal Information Processing Standards (FIPS) 140-2, validated (Certificate #1051), cryptographic module (version 1.2.3) from the Open Source Software Institute...
Page 29
10-20 additional minutes to complete the controller reboot. All controller functions are disabled during that time. : For the CK721-A controller to come on-line with the P2000 Server, the encryption key values at the CK721-A controller and at the P2000 server must match, and the encryption must be enabled at both sides.
(128- MART UPPORT The CK721-A controller and P2000 host support PIV and PIV-I government 128-bit smart cards per FIPS-201. The PACS management of PIV and PIV-I smart cards is split between the pivCLASS Management Station software suite and the P2000 host. The pivCLASS Management Station software also provides PAM configuration services, user credential management services, and event reporting services.
128-bit badge ID. (If the CK721-A reader terminal is in Shared mode and the 128-bit badge ID is not in the CK721-A badge database or the reader terminal is in Central mode, the P2000 Server will make the access decision.)
CK721-A Installation and Operation Introduction 24-10025-121 Rev. A The result of the CK721-A controller access decision is reported to the P2000 Server. 10/100Base-T Hub 10/100Base-T Hub To additional CK721-A P2000 Server controllers or hubs CK721-A CK721-A . . . RS-485...
The CK721-A controller performs an access decision driven by the 128-bit badge ID. (If the CK721-A reader terminal is in Shared mode and the 128-bit badge ID is not in the CK721-A badge database or the reader terminal is in Central mode, the P2000 Host will make the access decision.) The result of the CK721-A controller access decision is reported to the P2000 Host.
CK721-A Installation and Operation Introduction 24-10025-121 Rev. A OSDP R EADER UPPORT The OSDP Reader feature supports the use of HID OSDP Keypad Readers type and HID OSDP Reader type (no keypad). The OSDP Reader feature: • Adds Open Supervised Device Protocol (OSDP) v1.1 reader device support.
CK721-A Installation and Operation CK721-A and S300 DIN Enclosures 24-10025-121 Rev. A CK721-A S300 DIN E NCLOSURES This chapter describes the components of the CK721-A controller and the equipment used with it. CK721-A Binary output DIN clip Lithium battery 24VDC power...
For field device communication RJ45 10/100Base-T network port for host communication Not used LEDs on the CK721-A There are nine LEDs on the CK721-A board. Their functions are shown in the following table. Table 2-1: CK721-A LED Functions Function POWER ON steady when power is applied.
24-10025-121 Rev. A Binary Output The CK721-A provides a relay output for connecting to an external alarm at Binary Out1. If the alarm relay is programmed for enabled, and the individual inputs are programmed to activate the relay, the relay can be activated when any input point in the system goes into alarm.
The CK721-A modules follow the same rules as other terminated device. See the figure below to determine the appropriate EOL switch setting for all CK721-A modules in your network and set the EOL switch to the appropriate position for each CK721-A.
MPORTANT years or after extended use), ensure AC power or backup battery power is supplied to the CK721-A. If AC power or backup battery power is not supplied before you remove the lithium battery, the realtime clock will be incorrect.
CK721-A Installation and Operation CK721-A and S300 DIN Enclosures 24-10025-121 Rev. A • 9600 bps, even parity, 8 bit per character, and one stop bit Figure 2-1 Figure 2-2 for details on wiring between RS485B and the devices. RDR2S-A CK721-A...
Hub to CK721-A Wiring All network devices designed for 10/100Base-T networking use standard RJ45, 8 pin ports. Like other 10/100Base-T devices, the CK721-A RJ45 port is designed to connect to a hub using pins 1, 2, 3, and 6, wired straight through.
CK721-A Installation and Operation CK721-A and S300 DIN Enclosures 24-10025-121 Rev. A RS232 CK721-A has two RS232 connectors: RS232C A and RS232C B. Table 2-3: RS232 Connectors Description RS232C A RS232C B Port use Connects to a terminal emulator Connects to serial elevator...
CK721-A and S300 DIN Enclosures 24-10025-121 Rev. A RS232 Serial Null Modem Cable Wiring The null modem cable provides an RS232 serial connection from the CK721-A RS232C A port to the computer’s COM port. Table 2-5: Connectors Pinout Connector 1 Connector 2...
The following photo gives you an overview of the large enclosure with all components installed. The modules shown here are RDR2S-A. Figure 2-4: Large Enclosure with Installed Components The following photo depicts the CK721-A module mounted alone. Figure 2-5: One CK721-A Module Mounted in a Large Enclosure 2-10...
24-10025-121 Rev. A The figure below depicts the CK721-A module mounted with the RDR2S-A modules. Figure 2-6: One CK721-A Module and Two RDR2S-A Modules Mounted in a Large Enclosure Wiring CK721-A and Modules CK721-A Cable Requirements Table 2-7: Cable Requirements...
Recommended Cable Type Maximum Segment Length RS232 B Listed DB9 F/F AT Null Modem 25 ft (7m). Cable must remain in the same room as the CK721-A. Ethernet Listed, Category 5, 24 AWG, 328 ft (100 m). Cable, RJ45 solid, 2 pair or 4 pair type.
The backplate contains a power supply and a DIN rail for mounting of one CK721-A or a S300-DIN module (RDR8S, I32O16, RDR2S-A, or I8O4). The enclosure can also hold a backup battery unit composed of two 12V lead-acid batteries in one battery bracket.
CK721-A Installation and Operation CK721-A and S300 DIN Enclosures 24-10025-121 Rev. A The following photo gives you an overview of the small enclosure with all components installed. The module shown here is RDR2S-A. Figure 2-8: Small Enclosure with Installed Components...
The CK721-A modules should be mounted on a DIN rail. DIN Rail Mounting To mount an CK721-A module on a DIN rail, align it with the rail and snap on. To remove a module, pull down the white clip located on the...
CK721-A Installation and Operation CK721-A and S300 DIN Enclosures 24-10025-121 Rev. A Figure 2-10: CK721-A Module Mounted on a DIN Rail. +24 VDC C ONNECTOR Connects to the RDR8S, I32O16, RDR2S-A, I8O4 +24 VDC connector Chassis ground Figure 2-11: +24 VDC Connector (Part of the DC Power Harness)
0.11" holes located at the bottom of the plate with a #6 self-tapping screw. When connecting CK721-A to multiple S300-DIN modules, wire them in parallel following the “daisy chain” pattern as shown in Figure 2-12.
The S300 expansion enclosures (S300-XL, S300-XS, and S300-XXS) are used to host additional legacy modules in the CK721-A system. They cannot, however, be used with the CK721-A controller itself, because they do not have the DIN rails and power supply necessary for its use. Refer to the Version 3.1 CK721-A Installation and Operation manual (24-10349-8) for more information about expansion enclosures and legacy modules.
NTERFACE The CK721-A intelligent controller provides a text-based user interface that you must use to configure a CK721-A for operation. The user interface gives you direct access to most CK721-A operating commands and parameters from a laptop or other remote PC before it is connected to the P2000 system. These are useful when commissioning or troubleshooting the system.
User Interface 24-10025-121 Rev. A • The CK721-A controllers have a factory default IP address. This allows the configuration of the CK721-A controller operational parameters via an Ethernet cross-over cable connected to the Ethernet port. The default values for the controller IP addresses and network mask are set at the factory or after a Clear Database/Write To Flash commands.
24-10025-121 Rev. A of normal operation, only the P2000 software should be used to configure CK721-A controllers. The CK721-A user interface can be used for troubleshooting purposes during normal operation. : For identification purposes, the controller’s IP address and netmask must match the IP address and netmask in the P2000.
5. Type your password when prompted. (The default password is master.) 6. Press <Enter>. : You have three chances to login to the CK721-A panel. After three attempts, the CK721-A disables login for about five minutes, after which time you may try again. (Both login and password are case-sensitive.)
CK721-A Installation and Operation User Interface 24-10025-121 Rev. A Navigating Through the User Interface Use the following keys to navigate throughout the user interface. • Arrow Keys: Use the arrow keys to select a menu or option, or select a parameter you wish to edit.
CK721-A Installation and Operation User Interface 24-10025-121 Rev. A • <Page Down>: Move to the next page of a multi-page screen. Use the arrow keys to select this option and press <Enter>. • <Execute Command>: In some cases, such as Control Output, you will want to execute a command immediately.
CK721-A Installation and Operation User Interface 24-10025-121 Rev. A • Adding or deleting a non-legacy terminal to the CK721-A database configuration. • Modifying general terminal properties of an existing non-legacy terminal (with the exception of the name of the terminal).
Flash Memory. You can now download information from the P2000. Router Configuration The default CK721-A Panel Routing Information Protocol (RIP) is dynamic, that is, it regularly listens for RIP from the network. If RIP is disabled, manual route information can be added using this screen. A maximum of four addresses can be entered at one time.
Page 63
24-10025-121 Rev. A 5. Select Save and press <Enter>. 6. Press <Esc>. 7. Reboot the CK721-A panel. To enter other types of Static Routes: 1. From the Main menu select Route Info. 2. From the Route Configuration screen, select host or net. (Use the spacebar to toggle between Host/Net and use the enter key to move to the next column.)
Log in to the panel using “diag” (default password is master) and: - Verify that you can ping the gateway - Verify that you can ping the P2000 server - Check the CK721-A routing table using the command netstat -r - Use the command traceroute <host ip address> to...
24-10025-121 Rev. A Log Out After configuring or viewing system parameters, always log out, and then remove the serial cable. To log out from the CK721-A user interface, select Log Out, and press <Enter>. Rebooting the Panel Reboot the CK720 from the Main menu option Reboot System, or power cycle the panel.
Priority Port Number 41012 (default value) Panel To set the CK721-A IP address and netmask, preferred primary comm path: 1. From the CK721-A Main menu, select Panel and press <Enter>. 2. Type the panel name and IP address. The IP address must be unique.
Page 67
User Interface 24-10025-121 Rev. A The Network Polling [LAN] value specifies the frequency (in seconds) that the CK721-A panel polls the P2000 server during LAN connections. The Network Polling [Dup] value is not currently used. 6. Configure the port numbers. The entered port numbers must match...
P2000 Software User Manual. However, most of the CK721- A parameters resemble those contained in the P2000 software. Panel Screen Description The Panel screen is used when the CK721-A panel is configured for the P2000 server. 4-14...
CK721-A Installation and Operation User Interface 24-10025-121 Rev. A Panel Screen - Page 1 Table 4-3: Panel Screen, Page 1 Field Type Description Panel Name User Def. The panel name is defined at the server, and then downloaded from the server to the panel. The panel name cannot be changed from the panel.
Page 70
User Def. This IP address is reserved for future use in support of a IP Address secondary IP interface. Preferred Toggle Enabled (Y) by default. The CK721-A will communicate Primary via onboard network interface. Comm Path Network Polling User Def.
CK721-A Installation and Operation User Interface 24-10025-121 Rev. A Panel Screen - Page 2 Table 4-4: Panel Screen, Page 2 Field Type Description History Upload User Def. If specified, saved history reports are uploaded in Time Zone time zones defined as Active.
Page 72
CK721-A Installation and Operation User Interface 24-10025-121 Rev. A Table 4-4: Panel Screen, Page 2 Field Type Description Always Upload User Def. Saved history reports are always uploaded when the % Full Threshold number of history records exceeds the specified “percent full”...
Page 73
Panel screen to (Y), the system will create an 599 output point. The system automatically associates Group 599 with the CK721-A relay. This enables you to control onboard relay by using the output group through I/O linking or card events.
CK721-A Installation and Operation User Interface 24-10025-121 Rev. A Panel Screen - Page 3 Table 4-5: Panel Screen, Page 3 Field Type Description Exempt Badges Toggle If enabled (Y), then the Badge database is not saved From Archive to Flash during a Write-Flash operation...
Page 75
Selects and enables custom features. Configuration Number Encryption Toggle Enables encryption at the CK721-A controller. Note: When enabled, the File Transfer Protocol (FTP) and telnet services are disabled. Use the Secure Shell (SSH) client instead. See also: Key (for encryption) on page 4-21.
Terminal Terminal screens are used to configure the individual readers, and input/ output terminals connected to the CK721-A. You can edit an existing terminal or add a new terminal to the system. When you select the Terminal option and a new terminal number, the system automatically assumes you are adding a new record.
Terminal Enable/ Toggle Enabled (E) indicates the terminal is operational Disable and will be polled by the CK721-A. Disabled (D) means the terminal can be defined, but will not be polled. Input Terminal Toggle A (Y) indicates an input or input/output module has this terminal address.
Page 78
CK721-A Installation and Operation User Interface 24-10025-121 Rev. A Table 4-6: Terminal Screen, Page 1 Field Type Description Card Processing Toggle Choices are: • L (Local Mode) • C (Central Mode) • S (Shared Mode) Access Time User Def. Values range from 0 to 25 seconds, with 5 seconds as default.
Page 79
CK721-A Installation and Operation User Interface 24-10025-121 Rev. A Table 4-6: Terminal Screen, Page 1 Field Type Description Note: Override Warning Time and Override Warning Output Group (the next two settings defined) work together: You can set up a time (Override Warning Time) before an override expires at which a warning (such as an audible beep) will be activated.
CK721-A Installation and Operation User Interface 24-10025-121 Rev. A Terminal Screen - Page 2 Table 4-7: Terminal Screen, Page 2 Field Type Description Reader Hdwr Type User Def. Selects the reader hardware module type for the addressed S300 module. The available reader hardware module types are: RDR2S-A, RDR8S, and LEGACY (RDR2S, RDR2).
Page 81
CK721-A Installation and Operation User Interface 24-10025-121 Rev. A Table 4-7: Terminal Screen, Page 2 Field Type Description I/O Hdwr Type User Def. Selects the I/O hardware module type for the addressed S300 module. The available I/O hardware module types are: RDR2S-A, RDR8S, and LEGACY (RDR2S, IO8, SIO8, I16, and SI8).
CK721-A Installation and Operation User Interface 24-10025-121 Rev. A Terminal Screen - Page 3 Page 3 of the Terminal screen is shown, followed by a table which contains a description of each item. Table 4-8: Terminal Screen, Page 3 Field...
Page 83
Log Output Toggle If enabled, will report output “set” or “reset” on the Status Message CK721-A Logger Out screen and at the Host. Facility Code when Toggle If enabled (Y), a person needs only a valid facility offline code to open a door when the terminal is offline from the panel.
Page 84
Description Log Reader Strike Toggle If enabled (Y), reader strike locked and unlocked Message are reported to the CK721-A logger screen and at the server. Star Feature Toggle If enabled (Y), allows all features accessible on a 16-key pad (with A, B, C and D keys) to be invoked on a 12-key pad.
Page 85
CK721-A Installation and Operation User Interface 24-10025-121 Rev. A Table 4-8: Terminal Screen, Page 3 Field Type Description Timed Shunt Toggle If enabled (Y), all Timed Overrides only extend the shunt time. The Access Time is not affected. This option requires the use of RDR2 module, firmware version PS-201E or later, or tan S300- DIN module.
Page 86
CK721-A Installation and Operation User Interface 24-10025-121 Rev. A Table 4-8: Terminal Screen, Page 3 Field Type Description ADA Relay Time (0 to User Def. Time between activation of the Assisted Access 120 s) and turning the ADA relay off. Value range: from 0 to 120s.
Page 87
CK721-A Installation and Operation User Interface 24-10025-121 Rev. A Table 4-8: Terminal Screen, Page 3 Field Type Description No Green Light On Toggle If enabled (Y), there is no green light on AUX Aux Access access. Note: Requires an S300-DIN module (RDR2S firmware must be revision Q or higher).
Card Type Toggle Select between available card types that use facility codes. Each reader terminal connected to a CK721-A can support up to 12 different facility codes. Terminal Screen - Page 5 Page 5 of the Terminal screen is shown below followed by a table which contains a description of each item.
CK721-A Installation and Operation User Interface 24-10025-121 Rev. A If you use a two-wire reader with a keypad, you must wire Data 0 and Data 1 wires so that the keypad produces the correct input to the panel. If this configuration causes the badge data to be reported inversely, you can check the “Invert Data”...
CK721-A Installation and Operation User Interface 24-10025-121 Rev. A Table 4-10: Terminal Screen, Page 5 Field Type Description 26-Bit Sensor Forward Toggle Select (Y) to allow this card type. 26-Bit Sensor Reverse Toggle Select (Y) to allow this card type.
CK721-A Installation and Operation User Interface 24-10025-121 Rev. A Reassignment of the special RDR8S reader terminal output points to general purpose output points is done by configuring the general purpose output points: Reader Output Point Terminal Output Point Number Red LED...
CK721-A Installation and Operation User Interface 24-10025-121 Rev. A The following RDR2S-A reader terminal input points can be re-assigned: • Reader Door Contact (door is always reported closed by Soft Alarm Points 18 and 24) • Reader REX Re-assignment of the special RDR2S-A reader terminal output points to...
Page 94
CK721-A Installation and Operation User Interface 24-10025-121 Rev. A corresponding card number and the access decision is made based on that card’s access rights. This feature works with 5-digit algorithmic PINs only. For “PIN Only” to work, you need to configure the following parameters: 1.
Page 95
CK721-A Installation and Operation User Interface 24-10025-121 Rev. A 2. The terminal’s Allow PIN after Badge (see Allow PIN after Badge on page 4-28) has no effect. 3. The terminal’s PIN Suppression Timezone (see PIN Suppression Timezone on page 4-29) has no effect, i.e., you cannot use time zones to waive the requirement to enter a PIN in “PIN + Card ID”...
Page 96
CK721-A Installation and Operation User Interface 24-10025-121 Rev. A To use “PIN” mode when the terminal’s Allow PIN after Badge option is set, the PIN must be terminated with a # key. You can enter the PIN and the # key before, during, or after the card is presented.
CK721-A Installation and Operation User Interface 24-10025-121 Rev. A 2. The PIN plus 1 Duress option is enabled (see PIN plus 1 Duress page 4-29). 3. The cardholder is required to enter a PIN at the terminal. 4. Last digit of the PIN is incremented by 1 (if the last digit is 9, enter 0).
CK721-A Installation and Operation User Interface 24-10025-121 Rev. A ADA Relay An external ADA Relay can be controlled by an output of the use of the RDR2 module, firmware version PS-201E or later, or an S300-DIN module. The activation can be delayed without the use of external additional hardware (unlike when using SIO8 modules).
Controller Peer-To-Peer Global Entry/Exit Enforcement and Synchronization The controller Peer-To-Peer Global Entry/Exit enforcement feature allows a CK721-A controller to broadcast the entry/exit status of a badge to multiple CK721-A controllers via UDP protocol. This allows an Entry/ Exit zone to span across multiple CK721-A controllers within the same...
Subnet, or across multiple Subnets using a properly configured multicast router. In addition, by changing the controller Peer-To-Peer UDP Port Number, a new Entry/Exit zone, spanning multiple CK721-A controllers can be created. This feature requires P2000 Server Version 3.8 Build 55 or higher.
Page 101
CK721-A Installation and Operation User Interface 24-10025-121 Rev. A • ThyssenKrupp High Level Interface • OTIS Serial E.M.S - Security / B.M.S. Protocol High Level Interface • OTIS E.M.S. - Security / B.M.S. Protocol High Level Interface • OTIS Compass High Level Interface...
Page 102
CK721-A Installation and Operation User Interface 24-10025-121 Rev. A The Floor Grant Outputs (Elevator I/O-8 outputs) command the Elevator Car to travel to the selected floors. These outputs are momentarily activated (energized) for a grant, simulating an actual finger pushing on a button.
Page 103
CK721-A panels version 3.1 and higher provide the communication necessary for KONE IP elevators. In this high-level elevator integration, the CK721-A panel interfaces with the elevator control system through a communications protocol. Granting access to floors is achieved by 4-49...
Page 104
(you must select the Floor Tracking function). Each CK721-A panel can connect to multiple KONE IP group controllers, each controller with up to 8 elevators, each elevator serving up to 128 floors. To define a KONE IP elevator, you must first select the KONE IP protocol type in the Panel Elevator tab.
Pair(s) of KONE IP controllers, each pair handling one elevator group One KONE KIC Controller for All Elevator Groups In this scenario, all elevator groups use the same TCP port number and are connected to a single KONE KIC controller and a single CK721-A controller. KONE KIC...
Elevator Group 4 T CP Port 3 CK721-A: TCP Port3 Note: KONE IP Controllers tend to have even numbered elevator groups: 0, 2, 4, …, 32. Figure 4-5: KONE KIC Controller with Multiple Elevator Groups and Multiple CK721-A Controllers 4-52...
CK721-A Installation and Operation User Interface 24-10025-121 Rev. A Pair(s) of KONE IP Controllers, Each Handling One Elevator Group In this scenario, one KONE IP controller of each pair becomes a primary controller, while the other becomes a backup controller. Both KONE IP controllers share the same floor layout.
Control System (LCS), which is the ThyssenKrupp side of the integration, and an Access Control System (ACS), which refers to the P2000 Server and CK721A devices. This section only describes the ACS side; Johnson Controls has no knowledge of or control over the LCS. The integration works as follows: •...
Page 109
CK721-A Installation and Operation User Interface 24-10025-121 Rev. A • The ACS sends a “permanent unlocking of floors” message to the LCS, which contains a bitmask of all unlocked floors that are in public access, and it sends a “permanent locking of floors” message to the LCS, which contains a bitmask of all locked floors that are not in public access.
CK721-A Installation and Operation User Interface 24-10025-121 Rev. A Each of these devices is mapped to a specific shaft, as well as either a front or rear door. Figure 4-8: ThyssenKrupp Building Elevator Layout 4-56...
Figure 4-9: ThyssenKrupp Serial Elevator Integration System Architecture Communication between the P2000 Server, CK721-A clients, and the CK721-A server takes place over TCP/IP. Communication between the CK721-A server and elevator control system is done over an RS232 serial interface The Server CK721-A controller function provides communications between the PACS and the elevator control system.
Page 112
CK721-A Installation and Operation User Interface 24-10025-121 Rev. A There can only be one CK721-A configured as server connected to a single elevator control system. A P2000 Server, however, may be using multiple CK721-A controllers configured as servers to connect to multiple elevator control systems.
CK721-A Installation and Operation User Interface 24-10025-121 Rev. A The 485TBLED is connected to the OTIS EMS with a 4 wire interface: • OTIS EMS’s TDA(-) to Converter’s RDA(-) • OTIS EMS’s TDB(+) to Converter’s RDB(+) • OTIS EMS’s RDA(-) to Converter’s TDA(-) •...
Page 114
When the floor tracking option is enabled, the CK721-A creates a floor tracking message for each landing number that is reported by the OTIS EMS. The CK721-A associates the reported landing number with the last person that was granted access at the elevator.
Page 115
Building Management System (BMS) through an RS422 interface. As the current CK721-A controller supports up to 16 elevator readers, multiple CK721-A may need to be connected to control access to all elevators managed by the EMS. The number of elevators, and their assignment to elevator groups determines the number of CK721-A controllers required.
Panel Configuration Panel Name Each CK721-A that takes part in the OTIS integration must follow a certain naming pattern. Enter each character of the CK721-A panel name as described in the tables below. Only characters 2, 3, and 4 must be entered as specified.
Page 117
CK721-A Installation and Operation User Interface 24-10025-121 Rev. A 3rd character: Master.This character defines the presence of groups 1 through 4 in the OTIS EMS. Slave: Must be 0. Any invalid character is likely to leave the OTIS integration not operational.
Page 118
7th character 8th character: Master & Slave. This character defines the priority of the OTIS integration within a CK721-A controller. This setting should not be changed unless after consultation with Technical Support. Any invalid character uses the default priority of 19.
Page 119
When the floor tracking option is enabled, the CK721-A creates a floor tracking message for each landing number that is reported by the OTIS EMS. The CK721-A associates the reported landing number with the last person that was granted access at the elevator.
Page 120
Access to the floor entry keypad (called a Destination Entry Computer or DEC) can be controlled by a reader connected to a CK721-A panel, if configured to do so. The OTIS system allows operation of the DECs in 4 different modes that define the availability of floors and the order in which floors and badges are presented to the system.
Page 121
Fail Safe mode. Inputs (low level interface only) – Each elevator cab’s floor buttons may be wired to an input to allow the CK721-A to create floor tracking messages. A pressed button needs to close the input, a button that is not pressed needs leave the input open.
Page 122
The elevator access time starts over with every subsequent presentation of a valid badge. At the beginning of the elevator access time certain floor buttons are enabled by CK721-A outputs per elevator access grant. Subsequent presentation of a valid badge disables the previous access grant.
Performance Considerations The more readers and input/output terminals are installed at a single CK721-A, the longer the system response time gets. Also, care has to be taken not to exceed the power supplies’ capabilities when all output relays are energized at once. The theoretical limit per CK721-A is set to 16 elevators with 128 elevator buttons combined.
CK721-A Installation and Operation User Interface 24-10025-121 Rev. A Elevator or Cabinet Terminal To display an elevator’s or cabinet’s configuration, select the terminal assigned to the elevator or cabinet by number or select <Previous Record> or <Next Record>. The following screens are then added to the base four screens used to display a terminal.
Page 125
CK721-A Installation and Operation User Interface 24-10025-121 Rev. A Table 4-12: Elevator or Cabinet Terminal Screen, Page 5 Field Type Description High Protocol User Def. A read-only field that identifies the high level (RS232) protocol in use. 0 = low level interface...
CK721-A Installation and Operation User Interface 24-10025-121 Rev. A Table 4-12: Elevator or Cabinet Terminal Screen, Page 5 Field Type Description Floor Tracking on Toggle A read-only field that identifies whether floor tracking Transitions Only messages should not be generated when an input point is already in the off-normal state* when a badge is presented.
Page 127
CK721-A Installation and Operation User Interface 24-10025-121 Rev. A Elevator or Cabinet Terminal Screen - Page 6 The elevator or cabinet configuration cannot be edited from this screen; these values are set during the P2000 system configuration Elevator or Cabinet Terminal Screen - Page 7 The elevator or cabinet configuration cannot be edited from this screen;...
Output The Output screen is used to enable output points and assign individual points to groups. To begin, select Output from the CK721-A Main menu. You will be prompted to select a previously saved terminal. 4-74...
Page 129
After selecting a terminal, select an output point number. If the output you select already exists, the system places you into edit mode. If the output record does not exist, the CK721-A assumes you want to create a new record. Any output records you have defined will appear listed here.
During normal system operation, Holidays can replace a standard time zone. At approximately one minute before midnight, the P2000 (and CK721-A) verify that the following day is a holiday. If so, the appropriate time zone is substituted. To define holidays, select Holiday from the CK721-A Main menu. You will be prompted for a holiday number.
CK721-A Installation and Operation User Interface 24-10025-121 Rev. A The Holiday screen is shown and the table that follows describes each field. Table 4-16: Holiday Screen, 1 Page Only Field Type Description Holiday Month User Def. Enter a value where 1 equals January and 12 is December.
(s). To enable or disable particular reader terminals in an Access Group, select Access Group from the CK721-A Main menu. You can add an access group number as 1 or greater, or select a previously defined group to edit.
CK721-A Installation and Operation User Interface 24-10025-121 Rev. A Elevator Access Group To display an access group that includes elevator access, select the group by number or select <Previous Record> or <Next Record>. The following screen is displayed. The Elevator ID and Floormasks/Doormasks cannot be edited from this screen.;...
24-10025-121 Rev. A Control Door Door Control allows you to manually lock or unlock a door immediately or for a specified period of time. Select Control Door from the CK721-A Main menu. Table 4-19: Control Door Screen, 1 Page Only...
If enabled ( Y ), this type of soft alarm will be reported on the specified point. Enable Set Panel Relay ( Y ) to activate the CK721-A’s alarm relay. In this case the panel's Alarm Latch Output flag should be set ( Y ).
Panel Soft Alarm User Def. The actual terminal number associated with the soft Address (1-16) alarms (for panel soft alarms). Password Change Use this option to change the login password for the CK721-A. Select Password Change from the CK721-A Main menu. 4-82...
The following screen is displayed. Type the system password and press <Enter>; the CK721-A will reboot. : If you are connected to the CK721-A panel via the serial port, the boot up messages will be displayed. The reboot process is complete when the Login prompt appears.
CK721-A Installation and Operation User Interface 24-10025-121 Rev. A Badge Cardholder badge records may be entered into the system either individually or in batches. To access an individual badge that is residing in the database, enter its number value in the Start Badge field. An individual badge may also be created by entering a badge number value in the first submenu, and then by saving its data in the second submenu.
Page 139
CK721-A Installation and Operation User Interface 24-10025-121 Rev. A To delete a previously created badge, enter the badge number in the Start Badge field and select <Delete>. The next example shows the creation of 10 badges with numbers 25 to 35...
CK721-A Installation and Operation User Interface 24-10025-121 Rev. A Table 4-22: Badge Screen, Page 1 Field Type Description Executive Privilege Toggle If enabled ( Y ), the cardholder has unlimited access to all controlled doors. Badge Type Toggle Choices are Standard and Override. Override allows the cardholder to bypass normal access through keypad override.
CK721-A Installation and Operation User Interface 24-10025-121 Rev. A Table 4-22: Badge Screen, Page 1 Field Type Description Security Level User Def. Value range: 0 to 99. The Security Level for a badge must be equal to or greater than the Security Level set up at the terminal and the panel.
CK721-A Installation and Operation User Interface 24-10025-121 Rev. A Badge Parameters Screen - Page 3 Table 4-24: Badge Screen, Page 3 Field Type Description Access Group User Def. A single badge can be assigned up to 32 access (17-32) groups (for access groups 1-16 see...
Page 143
CK721-A Installation and Operation User Interface 24-10025-121 Rev. A To begin, select Input from the CK721-A Main menu, and then select a previously defined terminal from the displayed list. After selecting a terminal, type in an input point number to define. If the point has already been defined, the record is displayed for editing.
Toggle When an input point goes into alarm, it can trigger When Set the CK721-A panel output relay. Enable this option by selecting ( Y ). Note: Changes to the Panel Output Relay setup (includes Output Latching and Alarm Relay Linking...
Page 145
CK721-A Installation and Operation User Interface 24-10025-121 Rev. A Table 4-25: Input Screen, 1 Page Only Field Type Description In-Out Link Type Toggle You can choose an input point to link to an output group. Select the appropriate type of linkage from the...
To define or edit time zones, select Time Zone from the CK721-A Main menu. If records have been previously defined, they will be displayed. If you enter a time zone number not previously created, the system will add it as a new record.
CK721-A Installation and Operation User Interface 24-10025-121 Rev. A When you enter a Timezone number, the Timezone window is displayed. Table 4-26: Time Zone Screen, 1 Page Only Field Type Description Time Zone Name User Def. Enter up to 25 alphanumeric characters as a descriptive name for the time zone.
If the server performs the access transaction processing (in central or shared mode), the card event will not occur. Following is the summary of the CK721-A card event processing capability: Table 4-27: Card Event Overview...
Page 149
To configure a new event or edit an existing one, select Card Event from the CK721-A Main menu. Next, select a previously saved event or type in a new event number to create a new card event record. The Card Event window appears. It is a two-page screen, described below.
CK721-A Installation and Operation User Interface 24-10025-121 Rev. A Table 4-28: Card Event Screen, Page 1 Field Type Description Card Event Name User Def. Type in a descriptive event name up to 25 alphanumeric characters long. Door (1 - 64)
Page 151
Also, events with trigger type “Any Void Card” never unlock the door. Alarm Ack Toggle If enabled ( Y ), the CK721-A’s alarm relay is reset. Input Group Toggle If enabled ( Y ), an input group specified by the Input Group Enable field will be enabled.
System Information This screen provides information regarding the CK721-A. This includes items such as reader status, IP addresses, MAC number, and current time zone status. To access this information, select System Information from the CK721-A Main menu.
Primary Network MAC Number This is a hard-coded (cannot be changed) Media Access Control number. Each network device (CK721-A) must have a unique MAC number assigned at the factory. Controller Secondary IP Address This IP address is reserved for future use in support of a secondary IP interface.
CK721-A Installation and Operation User Interface 24-10025-121 Rev. A System Information Screen - Page 2 (Terminal and Security Level Status) System Information Screen - Page 3 (Time Zone Status) Table 4-31: System Information Screen, Page 2 Field Description Security Level (0 to 99) To grant access, the terminal’s Security Level must...
64 time zones can be defined. Status of each is shown as E (nabled), D (isabled), or ( -- ) undefined. Control Output This option allows you to manually control an output. Select Control Output from the CK721-A Main menu to access Control Output options. 4-101...
CK721-A Installation and Operation User Interface 24-10025-121 Rev. A Table 4-33: Control Output Screen, 1 Page Only Field Type Description Terminal Number User Def. Enter the number of the terminal containing the output you wish to control. Output Point Number User Def.
Enter the date in month/day/year format as shown above. Enter the time in 24-hour format as shown above. : This screen is only used when the CK721-A panel is the operating standalone. If the CK721-A panel is communicating with a server, then the server time will be downloaded and overwrite the settings made here.
Page 158
CK721-A Installation and Operation User Interface 24-10025-121 Rev. A 4-104...
CK721-A system. OUTINE AINTENANCE Perform the following routine maintenance on the CK721-A: 1. Periodically check the continuity of the grounding circuit. 2. Perform operational testing monthly (see Testing Procedure page 5-2).
Check for proper operation of the CK721-A as follows: 1. Verify POWER LED on the CK721-A. 2. Verify that the FAULT LED on the CK721-A is not on. 3. Verify that the RS485B LED is flashing to show activity on the bus.
IELD ERVICING Troubleshoot the CK721-A by substituting the suspected defective panel with a new component. All replaceable parts are available from Johnson Controls, Inc. Consult your Customer Success Center representative at (800) 482-2778 for domestic orders or for instructions on how to obtain replaceable parts.
Page 162
CK721-A Installation and Operation Maintenance 24-10025-121 Rev. A Table 5-2: Troubleshooting Guidelines Problem Possible Causes Red light or no reader light Invalid Time zone/Reader/Issue Level/Facility Code illuminates when card is used Card no longer in database at reader, and access is not Incorrect card type granted.
S300 B XPANDED DDRESS The CK721-A firmware supports an Expanded Address S300 Bus feature. This feature increases the number of logical terminals allowed on the S300 bus from 16 to 64. The terminals are addressed Logical Terminal 1 to 64.
Page 164
- OTIS E.M.S. - Security / B.M.S. Protocol High Level Interface - OTIS Compass High Level Interface The Expanded Address S300 Bus allows a CK721-A controller to communicate with up to 32 modules on the RS485 bus. New modules (RDR2S-A, I8O4, RDR8S, I32O16) allow greater flexibility in the mapping of the logical terminal number (1-64) to a physical device (0-31) through the use of physical addressing mode.
Page 165
CK721-A Installation and Operation Expanded Address S300 Bus 24-10025-121 Rev. A The following table contains several examples for mapping a logical terminal number to a physical device: Hardware Module Reader Terminal Logical Terminal Number (Physical Device Type Index, Number, Address), Value...
Page 166
CK721-A Installation and Operation Expanded Address S300 Bus 24-10025-121 Rev. A...
RS-485 bus. The test measured the response time between reading two badges by two readers on the same module and unlocking two doors. Table B-1: CK721-A Using Legacy Addressing Mode Number of modules Average response time in ms...
Page 168
CK721-A Installation and Operation Performance Analysis 24-10025-121 Rev. A Response time in milliseconds 1800 1600 1400 1200 1000 Number of modules Legacy addressing mode Physical addressing mode Figure B-1: CK721-A Access Time Performance Graph...
CK721-A Installation and Operation Grounding and Connectors 24-10025-121 Rev. A ROUNDING AND ONNECTORS This appendix gives instructions for grounding cable shields at data and low voltage installations, and at grounding card reader units. Follow these guidelines for electromagnetic compatibility (EMC) conformity, and to improve system reliability.
CK721-A Installation and Operation Grounding and Connectors 24-10025-121 Rev. A • The drain wire that extends from the shield shown in the illustrations must be kept as short as possible (typically, 2.5 cm or 1 inch). Connect a lug to the end of the wire, as shown, and screw securely to the wall of the enclosure or nearest stud.
CK721-A Installation and Operation Grounding and Connectors 24-10025-121 Rev. A The two curved parts of the shroud make contact with the flat plate of the shroud. Tighten the two remaining screws to ensure a firm fit. Do not remove the drain wire from the shield.
CK721-A Installation and Operation Grounding and Connectors 24-10025-121 Rev. A UNIT1 Separated wires of cable are not shielded Short wire is connected The screen-type shield is from shield to inside the enclosure, no enclosure of more than 2" (5cm) unit 1...
CK721-A Installation and Operation Grounding and Connectors 24-10025-121 Rev. A UNIT1 Separated wires of cable are not shielded Short wire is connected The screen-type from shield to shield is inside the enclosure of enclosure, no more than 2" (5cm) unit 1...
Page 174
CK721-A Installation and Operation Grounding and Connectors 24-10025-121 Rev. A...
Normal operation of the modified output relays (five through eight) is disabled. Specifically, the relays will no longer respond to output control and output control status messages from the CK721-A. The modified outputs will always be reported as reset. •...
Open or short circuit conditions at the four-state inputs will be reported to the CK721-A by the SIO8 module without affecting the reader module’s inputs. As a result, the relay contacts will appear to the RDR2 module exactly as if two- state contacts were being used.
CK721-A Installation and Operation Door Open/Aux Access Supervision 24-10025-121 Rev. A The following page shows the wiring from the SIO8 output relays to the RDR2 module. NO C NC NO C NC NO C NC NO C NC Figure D-1: Input/Output Contact Wiring...
Page 178
CK721-A Installation and Operation Door Open/Aux Access Supervision 24-10025-121 Rev. A...
1. Verify that the CK721-A panel is online. 2. From the P2000 Main menu, select System>CK705/CK720 Write DB To Flash. The CK721-A Write DB to Flash dialog box appears. Figure E-1: CK705/CK720 Write DB to Flash Dialog Box 3. Select the Panel To Write from the drop-down list.
Page 180
CK721-A Installation and Operation Database Flash Backup from the Host 24-10025-121 Rev. A...
CK721-A Installation and Operation Using a Keypad Reader on a Panel 24-10025-121 Rev. A SING A EYPAD EADER ON A ANEL The following sections describe how to invoke access requests, Air Crew access requests, Timed Overrides, and Panel Card Events using a keypad reader.
CK721-A Installation and Operation Using a Keypad Reader on a Panel 24-10025-121 Rev. A 2. The terminal’s Card ID flag must be set. 3. Make sure the terminal’s PIN Only flag is not set. 4. Make sure the terminal’s PIN + Card ID flag is not set.
CK721-A Installation and Operation Using a Keypad Reader on a Panel 24-10025-121 Rev. A 2. The respective Air Crew PIN must be enabled for the terminal. 3. To request Air Crew access: Without the Star Feature, press the B key followed by the Air Crew PIN number and the # key.
Page 184
CK721-A Installation and Operation Using a Keypad Reader on a Panel 24-10025-121 Rev. A 3. The terminal’s PIN Only flag must be set. PIN Only works exclusively with 5-digit algorithmic PINs. 4. Set the panel’s PIN Code Type to Algorithmic.
Page 185
CK721-A Installation and Operation Using a Keypad Reader on a Panel 24-10025-121 Rev. A With the Star Feature, enter the Card ID number, press the star (*) key followed by number 0, enter the number of minutes, and press the # key.
Page 186
CK721-A Installation and Operation Using a Keypad Reader on a Panel 24-10025-121 Rev. A 3. The terminal’s PIN Suppression Timezone must be set to an inactive zone. 4. Make sure the terminal’s Allow PIN After Badge flag is not set.
CK721-A Installation and Operation Using a Keypad Reader on a Panel 24-10025-121 Rev. A With the Star Feature, enter PIN, press the star (*) key followed by number 0, present the badge , and press the # key. The badge can be presented at any time before the # key is pressed.
Page 188
CK721-A Installation and Operation Using a Keypad Reader on a Panel 24-10025-121 Rev. A 5. The panel’s 5 Digit Pin Code must be set to 5. 6. To activate event: Without the Star Feature, enter PIN, press A, enter the keypad code, and press the # key.
Page 189
CK721-A Installation and Operation Using a Keypad Reader on a Panel 24-10025-121 Rev. A With the Star Feature, enter the Card ID number, press the star (*) key followed by number 4, enter the keypad code, and press the # key.
Page 190
CK721-A Installation and Operation Using a Keypad Reader on a Panel 24-10025-121 Rev. A Without the Star Feature, enter PIN, press A, enter the keypad code, and present the badge. With the Star Feature, enter PIN, press the star (*) key followed by number 1, enter the keypad code, and present the badge.
CK721-A Installation and Operation Using a Keypad Reader on a Panel 24-10025-121 Rev. A UICK UIDE TO SING EYPAD EADERS Use the following quick guide to determine the key sequence at a keypad reader required for a particular action. This section assumes all terminal’s and panel’s settings have already been configured for this action.
Page 192
CK721-A Installation and Operation Using a Keypad Reader on a Panel 24-10025-121 Rev. A Legend Enter the Keypad Code. Present the badge. Keypad Code badge Enter the PIN number. Press the specified key. Card ID Enter the Card ID numb er.
Page 193
CK721-A Installation and Operation Using a Keypad Reader on a Panel 24-10025-121 Rev. A Invoking Timed Overrides from a Keypad With Badge To start override without Star Featu re: Minutes badge badge To stop override without Star Feature: badge To start override with Star Feature:...
Page 194
CK721-A Installation and Operation Using a Keypad Reader on a Panel 24-10025-121 Rev. A Invoking Panel Card Events from a Keypad With Badge Keypad Code badge To activate event without Star Feature: To deactivate event without Star Feature: Keypad Code...
SFTP C ONFIGURING LIENTS On the CK721-A controller, the FTP and Telnet services are disabled when encryption is turned on. You can use the PuTTY or WinSCP client software to log into the CK721-A controller via remote connections (see Chapter 4: User Interface).
Page 196
CK721-A Installation and Operation Configuring SSH and SFTP Clients 24-10025-121 Rev. A 3. The PuTTY Session configuration window opens up. To configure PuTTY session before loading it for the first use: 1. In the Putty Configuration window, with Session selected in the left window pane, configure the following in the right window pane: •...
Page 197
CK721-A Installation and Operation Configuring SSH and SFTP Clients 24-10025-121 Rev. A • Enter name for the configuration in the Saved Sessions field (in the example below, “CK721-A”):...
Page 198
CK721-A Installation and Operation Configuring SSH and SFTP Clients 24-10025-121 Rev. A 2. Select Kex selected in the left window pane. In the right window pane, select the Diffie-Hellman group 14 for Algorithm selection policy. Use the Up button to move it to the top of the list.
Page 199
CK721-A Installation and Operation Configuring SSH and SFTP Clients 24-10025-121 Rev. A 3. Select Data in the left window pane. For Terminal type-string enter value vt100. 4. Click Save to save the session. To open communication to the panel at this point, click Open.
Page 200
CK721-A Installation and Operation Configuring SSH and SFTP Clients 24-10025-121 Rev. A 2. Select the saved session configuration (in this example, “CK721-A”) and click Load. 3. To open communication to the panel, click Open. The login screen appears.
CK721-A Installation and Operation Configuring SSH and SFTP Clients 24-10025-121 Rev. A 4. Proceed with login as you would using the TeraTerm. 5. To the see menu options, at the prompt type in the “/apps/sid” command and press the Enter key.
Page 202
CK721-A Installation and Operation Configuring SSH and SFTP Clients 24-10025-121 Rev. A 2. The Setup – WinSCP window opens. Verify that the Typical installation is selected and click Next. 3. Select Commander interface. This will allow you to display both the...
Page 203
CK721-A Installation and Operation Configuring SSH and SFTP Clients 24-10025-121 Rev. A 4. Click Install. Desktop location for the installation is recommended. 5. Verify that the Launch WinSCP button is selected and click Finish. To configure WinSCP session before loading it for the first use:...
Page 204
CK721-A Installation and Operation Configuring SSH and SFTP Clients 24-10025-121 Rev. A 2. In the WinSCP Login screen appears. 3. With Session selected in the left window pane, configure the following in the right window pane: • Host name - the IP address of the controller panel •...
Page 205
CK721-A Installation and Operation Configuring SSH and SFTP Clients 24-10025-121 Rev. A Do not close the window yet. 4. Select the Advanced options radio button to access the SSH key exchange settings. 5. Select Key exchange in the left window pane. In the right window pane, select the Diffie-Hellman group 14 for Algorithm selection policy.
Page 206
CK721-A Installation and Operation Configuring SSH and SFTP Clients 24-10025-121 Rev. A • Remote directory - location to which the files will be transferred • Local directory - location that contains the files to be transferred over to the controller Leave remaining settings at their default values.
Page 207
CK721-A Installation and Operation Configuring SSH and SFTP Clients 24-10025-121 Rev. A 2. Select the saved session configuration (in this example, “diag@159.222.109.253”) and click Login. 3. Specify Password and click OK. G-13...
Page 208
CK721-A Installation and Operation Configuring SSH and SFTP Clients 24-10025-121 Rev. A The WinSCP commander interface opens, providing access to the source and destination folders, with the files to be transferred. G-14...
CK721-A Installation and Operation Wiring Concepts 24-10025-121 Rev. A IRING ONCEPTS This appendix described wiring concepts that apply to the CK721-A. IRING EADERS The following figure shows the maximum cable distances allowed between a S300 expansion enclosure and a reader.
Door Strike Power Supply reader Door Strike Figure H-2: Example of a Typical CK721-A System Door Strike Wiring Some door strikes are fail-secure or fail-locked. These door strikes energize to unlock the door and de-energize to lock the door. These strikes must be connected to the strike power source through the normally-open contacts of the strike relay (NO and C).
(RDR2S-A or RDR8S STRIKE), the contacts should be protected by an external protection circuit. This protection circuit is application- specific as configured in the field. Johnson Controls would advise, at a minimum, a Metal Oxide Varistor (MOV) at the rated voltage relative to the application across the power source and power load interrupted by the mechanical relay.
This protection circuit is application-specific as configured in the field. Johnson Controls would advise, at a minimum, a Metal Oxide Varistor (MOV) at the rated voltage relative to the application across the power source and power load interrupted by the mechanical relay.
Page 213
Security Solutions (805) 522-5555 www.johnsoncontrols.com We welcome your comments at BE-techpubs-security@jci.com.
Need help?
Do you have a question about the CK721-A and is the answer not in the manual?
Questions and answers