Johnson Controls CK721-A Installation And Operation Manual

Johnson Controls CK721-A Installation And Operation Manual

Network controller
Table of Contents

Advertisement

CK721-A
Network Controller
installation and
operation manual
version 3.3
24-10025-121 Revision A
March, 2016

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the CK721-A and is the answer not in the manual?

Questions and answers

Summary of Contents for Johnson Controls CK721-A

  • Page 1 CK721-A Network Controller installation and operation manual version 3.3 24-10025-121 Revision A March, 2016...
  • Page 2 Johnson Controls, Inc. All Rights Reserved No part of this document may be reproduced without the prior permission of Johnson Controls, Inc. If this document is translated from the original English version by Johnson Controls, Inc., all reasonable endeavors will be used to ensure the accuracy of translation. Johnson Controls, Inc.
  • Page 3 Declaration of Conformity United States: This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications.
  • Page 4 2. The CK721-A shall be mounted in subassembly S300-DIN-L or S300-DIN-S. 3. The CK721-A in combination with the S300-DIN-L or S300-DIN-S must be connected to a UL Listed Uninterruptible Power Supply that provides a minimum of 24 hours of AC emergency power.
  • Page 5: Table Of Contents

    HID pivCLASS PIV/PIV-I Readers 1-18 HID Hardware PAM (M2000) Solution 1-19 HID PIV/PIV-I Reader Connecting to RDR2S-A or RDR8S Solution 1-20 OSDP Reader Support 1-22 Chapter 2: CK721-A and S300 DIN Enclosures CK721-A 2-1 LEDs on the CK721-A 2-2 Binary Output 2-3...
  • Page 6 RS485 2-5 Binary Input 2-6 Connecting the Network 2-7 RS232 2-8 Large Enclosure (S300-DIN-L) 2-10 Wiring CK721-A and Modules 2-11 Small Enclosure (S300-DIN-S) 2-13 Verifying DC and Chassis Ground 2-14 Installing CK721-A Module 2-15 No Enclosure 2-16 DIN Rail Mounting 2-16...
  • Page 7 24-10025-121 Rev. A Basic Panel Configuration 4-11 Panel Menu 4-11 Panel 4-12 Direct Programming of the CK721-A 4-14 Panel Screen Description 4-14 Terminal 4-22 RDR8S Input Point and Output Point Disassociation 4-37 RDR2S-A Input Point and Output Point Disassociation 4-38...
  • Page 8 CK721-A Installation and Operation Table of Contents 24-10025-121 Rev. A Field Servicing 5-3 Troubleshooting 5-3 Appendix A: Expanded Address S300 Bus Appendix B: Performance Analysis Appendix C: Grounding and Connectors Cable Grounding C-1 “D-Type” Connectors C-2 Non “D-Type” Grounding Connections C-3...
  • Page 9 Figure 2-4: Large Enclosure with Installed Components 2-10 Figure 2-5: One CK721-A Module Mounted in a Large Enclosure 2-10 Figure 2-6: One CK721-A Module and Two RDR2S-A Modules Mounted in a Large Enclosure 2-11 Figure 2-7: Daisy Chain Module Wiring for S300-DIN-L 2-12...
  • Page 10 Figure E-1: CK705/CK720 Write DB to Flash Dialog Box E-1 Figure H-1: Maximum Distance Between Readers and S300 Expansion Enclosures H-1 Figure H-2: Example of a Typical CK721-A System H-2 Figure H-3: Field Installed Metal Oxide Varistor H-3 Figure H-4: Field Installed Metal Oxide Varistor H-4...
  • Page 11 Table 1-2: S300 and S300-DIN Enclosures 1-6 Table 1-3: S300-DIN Hardware Modules 1-7 Table 1-4: Additional Equipment 1-8 Table 1-5: CK721-A System Specifications 1-9 Table 2-1: CK721-A LED Functions 2-2 Table 2-2: Input Power 2-5 Table 2-3: RS232 Connectors 2-8...
  • Page 12: Table 1-1: Ck721-A

    Table 4-34: Results of Command Override on a Selection 4-102 Table 5-1: Impaired Performance Conditions 5-1 Table 5-2: Troubleshooting Guidelines 5-3 Table B-1: CK721-A Using Legacy Addressing Mode B-1 Table B-2: CK721-A Using Physical Addressing Mode B-1 Table D-1: Input/Output Linking, S300-SIO8, SW1 position 4 set ON D-2...
  • Page 13: Chapter 1: Introduction

    CK721-A Installation and Operation Introduction 24-10025-121 Rev. A NTRODUCTION This chapter provides a general description of the CK721-A panel and related equipment. The manual is divided into the following chapters: • Chapter 1: Introduction, defines the key terms and conventions used throughout the manual.
  • Page 14: Key Terms

    (for example, an ID card) that is used to gain access to physical areas of a facility. CHUID – Cardholder Unique Identifier. CK721-A System – This is a general term that refers to a combination of CK721-A terminals and expansion enclosures that communicate with the P2000 system.
  • Page 15 External Device – This general term applies to any device that is wired to the CK721-A system, such as a reader or input device. A motion sensor is one type of input device. FASC-N – Federal Agency Smart Credential Number.
  • Page 16: Unpacking The Equipment

    ThyssenKrupp Serial Elevator – ThyssenKrupp High Level Interface Elevator Access Control, serial. User Interface – The CK721-A User Interface provides access to the CK721- A panel configuration graphical user interface (GUI) via a serial connection to a laptop (or other computer) running common terminal emulation software or via a Telnet/SSH/SFTP network connection.
  • Page 17: General Description

    100Base-T hubs. The CK721-A is programmed and monitored via the P2000. The CK721-A provides its own user interface through the serial connection located on the CK721-A. This interface facilitates the initial setup, as well as commissioning and troubleshooting. The CK721-A is an advanced, intelligent controller. You can add modules to connect readers, monitor 2 or 4-state input points, and add output relays to perform manual or automatic control functions.
  • Page 18: Enclosures

    RDR2SA) and for a battery back-up unit. S300-DIN-L A large enclosure containing DIN rails, a tamper switch and a power supply. It has room for up to three modules (CK721-A, RDR2S-A, or a combination thereof), and for a battery back-up unit. S300-XL A large expansion enclosure containing a tamper switch, a power indicator light, and a power supply.
  • Page 19: S300-Din Modules

    CK721-A Installation and Operation Introduction 24-10025-121 Rev. A S300-DIN M ODULES See the following table for a description of reader and I/O modules. Table 1-3: S300-DIN Hardware Modules Model Number Description S300-DIN-RDR8S Stand-alone unit with removable connectors which can be mounted on a DIN rail or on a flat surface.
  • Page 20: Additional Equipment

    CK721-A Installation and Operation Introduction 24-10025-121 Rev. A DDITIONAL QUIPMENT See the following table for a description of batteries and their corresponding bracket kits, power supplies, transformers, and a parts accessory kit. Table 1-4: Additional Equipment Model Number Description S300-BAT Battery for uninterruptible power operation, 12 volts, 7Ah.
  • Page 21: Table 1-5: Ck721-A System Specifications

    CK721-A Installation and Operation Introduction 24-10025-121 Rev. A CK721-A S YSTEM PECIFICATIONS ANELS The following table lists specifications for the CK721-A systems. Table 1-5: CK721-A System Specifications Item Specification Ambient 32 to 122 °F (0 to 50° C) Temperature Humidity...
  • Page 22: Ck721-A Panel Configuration

    The typical response time to an access request in an idle CK721-A with 64 terminals on 8 RDR8S modules is less than 500 ms. The typical response time to an access request in an idle CK721-A with 64 terminals on 32 RDR2S-A modules is less than 1 second.
  • Page 23: Legacy Address S300 Bus Configuration

    Introduction 24-10025-121 Rev. A Legacy Address S300 Bus Configuration Each CK721-A can support up to 16 logical terminal numbers assigned to reader modules, and up to 16 logical terminal numbers assigned to I/O modules. Therefore, a CK721-A supports up to 24 hardware modules within the following parameters: •...
  • Page 24: Maximum Enclosure Distance

    10/100Base-T Networking Guidelines (specific to the CK721-A) As a network device, the CK721-A can be installed in a variety of configurations based on the needs of your sites. The CK721-A communicates with the P2000 server through one or more 10/100Base-T hubs.
  • Page 25: Figure 1-2: 10/100Base-T 4X5 Rule

    • The 10/100Base-T network may contain a maximum of four hubs and five segments. Another explanation: a maximum of four hubs can be installed between the P2000 server and the last CK721-A panel in the network. • The maximum segment length is 328 ft (100 m). This is the distance between two hubs, or the distance between a hub and a network device such as the CK721-A.
  • Page 26: Network Communications

    IP address. Each networked device on a TCP/IP, 10/100Base-T Ethernet, must be assigned a unique IP address. The CK721-A is no exception. In basic terms, network communication is accomplished through the transmission and receipt of packets. Packets contain a variable length of data, along with the IP address of the device to which the packet is addressed.
  • Page 27: 10/100Base-T Ethernet

    10/100Base-T Ethernet 10/100Base-T Ethernet (also referred to simply as 10/100Base-T) is the physical network connecting the P2000 server to the CK721-A panels. 10/ 100Base-T provides reliable connections using a series of hubs to lengthen a network’s distance at a local level. Bridges, routers, and network switches increase a network’s size to greater distances across states or over continents.
  • Page 28: Ck721-A/P2000 Server Encrypted Communications

    24-10025-121 Rev. A CK721-A/P2000 Server Encrypted Communications This feature provides encrypted network communications between the CK721-A controller and the P2000 Server, using the Advanced Encryption Standard (AES256). The CK721-A Encryption is implemented using the Federal Information Processing Standards (FIPS) 140-2, validated (Certificate #1051), cryptographic module (version 1.2.3) from the Open Source Software Institute...
  • Page 29 10-20 additional minutes to complete the controller reboot. All controller functions are disabled during that time. : For the CK721-A controller to come on-line with the P2000 Server, the encryption key values at the CK721-A controller and at the P2000 server must match, and the encryption must be enabled at both sides.
  • Page 30: Piv And Piv-I Smart Card (128-Bit) Support

    (128- MART UPPORT The CK721-A controller and P2000 host support PIV and PIV-I government 128-bit smart cards per FIPS-201. The PACS management of PIV and PIV-I smart cards is split between the pivCLASS Management Station software suite and the P2000 host. The pivCLASS Management Station software also provides PAM configuration services, user credential management services, and event reporting services.
  • Page 31: Hid Hardware Pam (M2000) Solution

    128-bit badge ID. (If the CK721-A reader terminal is in Shared mode and the 128-bit badge ID is not in the CK721-A badge database or the reader terminal is in Central mode, the P2000 Server will make the access decision.)
  • Page 32: Hid Piv/Piv-I Reader Connecting To Rdr2S-A Or Rdr8S Solution

    CK721-A Installation and Operation Introduction 24-10025-121 Rev. A The result of the CK721-A controller access decision is reported to the P2000 Server. 10/100Base-T Hub 10/100Base-T Hub To additional CK721-A P2000 Server controllers or hubs CK721-A CK721-A . . . RS-485...
  • Page 33: Figure 1-5: System With P2000 And Ck721-A Controller

    The CK721-A controller performs an access decision driven by the 128-bit badge ID. (If the CK721-A reader terminal is in Shared mode and the 128-bit badge ID is not in the CK721-A badge database or the reader terminal is in Central mode, the P2000 Host will make the access decision.) The result of the CK721-A controller access decision is reported to the P2000 Host.
  • Page 34: Osdp Reader Support

    CK721-A Installation and Operation Introduction 24-10025-121 Rev. A OSDP R EADER UPPORT The OSDP Reader feature supports the use of HID OSDP Keypad Readers type and HID OSDP Reader type (no keypad). The OSDP Reader feature: • Adds Open Supervised Device Protocol (OSDP) v1.1 reader device support.
  • Page 35: Chapter 2: Ck721-A And S300 Din Enclosures

    CK721-A Installation and Operation CK721-A and S300 DIN Enclosures 24-10025-121 Rev. A CK721-A S300 DIN E NCLOSURES This chapter describes the components of the CK721-A controller and the equipment used with it. CK721-A Binary output DIN clip Lithium battery 24VDC power...
  • Page 36: Leds On The Ck721-A

    For field device communication RJ45 10/100Base-T network port for host communication Not used LEDs on the CK721-A There are nine LEDs on the CK721-A board. Their functions are shown in the following table. Table 2-1: CK721-A LED Functions Function POWER ON steady when power is applied.
  • Page 37: Binary Output

    24-10025-121 Rev. A Binary Output The CK721-A provides a relay output for connecting to an external alarm at Binary Out1. If the alarm relay is programmed for enabled, and the individual inputs are programmed to activate the relay, the relay can be activated when any input point in the system goes into alarm.
  • Page 38: Lithium Battery

    The CK721-A modules follow the same rules as other terminated device. See the figure below to determine the appropriate EOL switch setting for all CK721-A modules in your network and set the EOL switch to the appropriate position for each CK721-A.
  • Page 39: Input Power

    MPORTANT years or after extended use), ensure AC power or backup battery power is supplied to the CK721-A. If AC power or backup battery power is not supplied before you remove the lithium battery, the realtime clock will be incorrect.
  • Page 40: Binary Input

    CK721-A Installation and Operation CK721-A and S300 DIN Enclosures 24-10025-121 Rev. A • 9600 bps, even parity, 8 bit per character, and one stop bit Figure 2-1 Figure 2-2 for details on wiring between RS485B and the devices. RDR2S-A CK721-A...
  • Page 41: Connecting The Network

    Hub to CK721-A Wiring All network devices designed for 10/100Base-T networking use standard RJ45, 8 pin ports. Like other 10/100Base-T devices, the CK721-A RJ45 port is designed to connect to a hub using pins 1, 2, 3, and 6, wired straight through.
  • Page 42: Rs232

    CK721-A Installation and Operation CK721-A and S300 DIN Enclosures 24-10025-121 Rev. A RS232 CK721-A has two RS232 connectors: RS232C A and RS232C B. Table 2-3: RS232 Connectors Description RS232C A RS232C B Port use Connects to a terminal emulator Connects to serial elevator...
  • Page 43: Table 2-5: Connectors Pinout

    CK721-A and S300 DIN Enclosures 24-10025-121 Rev. A RS232 Serial Null Modem Cable Wiring The null modem cable provides an RS232 serial connection from the CK721-A RS232C A port to the computer’s COM port. Table 2-5: Connectors Pinout Connector 1 Connector 2...
  • Page 44: Large Enclosure (S300-Din-L)

    The following photo gives you an overview of the large enclosure with all components installed. The modules shown here are RDR2S-A. Figure 2-4: Large Enclosure with Installed Components The following photo depicts the CK721-A module mounted alone. Figure 2-5: One CK721-A Module Mounted in a Large Enclosure 2-10...
  • Page 45: Wiring Ck721-A And Modules

    24-10025-121 Rev. A The figure below depicts the CK721-A module mounted with the RDR2S-A modules. Figure 2-6: One CK721-A Module and Two RDR2S-A Modules Mounted in a Large Enclosure Wiring CK721-A and Modules CK721-A Cable Requirements Table 2-7: Cable Requirements...
  • Page 46: Figure 2-7: Daisy Chain Module Wiring For S300-Din-L

    Recommended Cable Type Maximum Segment Length RS232 B Listed DB9 F/F AT Null Modem 25 ft (7m). Cable must remain in the same room as the CK721-A. Ethernet Listed, Category 5, 24 AWG, 328 ft (100 m). Cable, RJ45 solid, 2 pair or 4 pair type.
  • Page 47: Small Enclosure (S300-Din-S)

    The backplate contains a power supply and a DIN rail for mounting of one CK721-A or a S300-DIN module (RDR8S, I32O16, RDR2S-A, or I8O4). The enclosure can also hold a backup battery unit composed of two 12V lead-acid batteries in one battery bracket.
  • Page 48: Verifying Dc And Chassis Ground

    CK721-A Installation and Operation CK721-A and S300 DIN Enclosures 24-10025-121 Rev. A The following photo gives you an overview of the small enclosure with all components installed. The module shown here is RDR2S-A. Figure 2-8: Small Enclosure with Installed Components...
  • Page 49: Installing Ck721-A Module

    : Do not connect the DC power cable to the CK721-A until all wiring is complete.
  • Page 50: No Enclosure

    The CK721-A modules should be mounted on a DIN rail. DIN Rail Mounting To mount an CK721-A module on a DIN rail, align it with the rail and snap on. To remove a module, pull down the white clip located on the...
  • Page 51: Vdc Connector

    CK721-A Installation and Operation CK721-A and S300 DIN Enclosures 24-10025-121 Rev. A Figure 2-10: CK721-A Module Mounted on a DIN Rail. +24 VDC C ONNECTOR Connects to the RDR8S, I32O16, RDR2S-A, I8O4 +24 VDC connector Chassis ground Figure 2-11: +24 VDC Connector (Part of the DC Power Harness)
  • Page 52: Ground Wiring

    0.11" holes located at the bottom of the plate with a #6 self-tapping screw. When connecting CK721-A to multiple S300-DIN modules, wire them in parallel following the “daisy chain” pattern as shown in Figure 2-12.
  • Page 53: Chapter 3: S300 Expansion Enclosures

    The S300 expansion enclosures (S300-XL, S300-XS, and S300-XXS) are used to host additional legacy modules in the CK721-A system. They cannot, however, be used with the CK721-A controller itself, because they do not have the DIN rails and power supply necessary for its use. Refer to the Version 3.1 CK721-A Installation and Operation manual (24-10349-8) for more information about expansion enclosures and legacy modules.
  • Page 54 CK721-A Installation and Operation S300 Expansion Enclosures 24-10025-121 Rev. A...
  • Page 55: Chapter 4: User Interface

    NTERFACE The CK721-A intelligent controller provides a text-based user interface that you must use to configure a CK721-A for operation. The user interface gives you direct access to most CK721-A operating commands and parameters from a laptop or other remote PC before it is connected to the P2000 system. These are useful when commissioning or troubleshooting the system.
  • Page 56: Notes On Encryption

    User Interface 24-10025-121 Rev. A • The CK721-A controllers have a factory default IP address. This allows the configuration of the CK721-A controller operational parameters via an Ethernet cross-over cable connected to the Ethernet port. The default values for the controller IP addresses and network mask are set at the factory or after a Clear Database/Write To Flash commands.
  • Page 57: Communicating With The User Interface

    24-10025-121 Rev. A of normal operation, only the P2000 software should be used to configure CK721-A controllers. The CK721-A user interface can be used for troubleshooting purposes during normal operation. : For identification purposes, the controller’s IP address and netmask must match the IP address and netmask in the P2000.
  • Page 58: Using Your Terminal Emulation

    5. Type your password when prompted. (The default password is master.) 6. Press <Enter>. : You have three chances to login to the CK721-A panel. After three attempts, the CK721-A disables login for about five minutes, after which time you may try again. (Both login and password are case-sensitive.)
  • Page 59: Navigating Through The User Interface

    CK721-A Installation and Operation User Interface 24-10025-121 Rev. A Navigating Through the User Interface Use the following keys to navigate throughout the user interface. • Arrow Keys: Use the arrow keys to select a menu or option, or select a parameter you wish to edit.
  • Page 60: Write Flash

    CK721-A Installation and Operation User Interface 24-10025-121 Rev. A • <Page Down>: Move to the next page of a multi-page screen. Use the arrow keys to select this option and press <Enter>. • <Execute Command>: In some cases, such as Control Output, you will want to execute a command immediately.
  • Page 61: Clearing Database

    CK721-A Installation and Operation User Interface 24-10025-121 Rev. A • Adding or deleting a non-legacy terminal to the CK721-A database configuration. • Modifying general terminal properties of an existing non-legacy terminal (with the exception of the name of the terminal).
  • Page 62: Clearing The Flash Memory

    Flash Memory. You can now download information from the P2000. Router Configuration The default CK721-A Panel Routing Information Protocol (RIP) is dynamic, that is, it regularly listens for RIP from the network. If RIP is disabled, manual route information can be added using this screen. A maximum of four addresses can be entered at one time.
  • Page 63 24-10025-121 Rev. A 5. Select Save and press <Enter>. 6. Press <Esc>. 7. Reboot the CK721-A panel. To enter other types of Static Routes: 1. From the Main menu select Route Info. 2. From the Route Configuration screen, select host or net. (Use the spacebar to toggle between Host/Net and use the enter key to move to the next column.)
  • Page 64: Figure 4-2: Static Route Examples

    Log in to the panel using “diag” (default password is master) and: - Verify that you can ping the gateway - Verify that you can ping the P2000 server - Check the CK721-A routing table using the command netstat -r - Use the command traceroute <host ip address> to...
  • Page 65: Log Out

    24-10025-121 Rev. A Log Out After configuring or viewing system parameters, always log out, and then remove the serial cable. To log out from the CK721-A user interface, select Log Out, and press <Enter>. Rebooting the Panel Reboot the CK720 from the Main menu option Reboot System, or power cycle the panel.
  • Page 66: Panel

    Priority Port Number 41012 (default value) Panel To set the CK721-A IP address and netmask, preferred primary comm path: 1. From the CK721-A Main menu, select Panel and press <Enter>. 2. Type the panel name and IP address. The IP address must be unique.
  • Page 67 User Interface 24-10025-121 Rev. A The Network Polling [LAN] value specifies the frequency (in seconds) that the CK721-A panel polls the P2000 server during LAN connections. The Network Polling [Dup] value is not currently used. 6. Configure the port numbers. The entered port numbers must match...
  • Page 68: Direct Programming Of The Ck721-A

    P2000 Software User Manual. However, most of the CK721- A parameters resemble those contained in the P2000 software. Panel Screen Description The Panel screen is used when the CK721-A panel is configured for the P2000 server. 4-14...
  • Page 69: Table 4-3: Panel Screen, Page 1

    CK721-A Installation and Operation User Interface 24-10025-121 Rev. A Panel Screen - Page 1 Table 4-3: Panel Screen, Page 1 Field Type Description Panel Name User Def. The panel name is defined at the server, and then downloaded from the server to the panel. The panel name cannot be changed from the panel.
  • Page 70 User Def. This IP address is reserved for future use in support of a IP Address secondary IP interface. Preferred Toggle Enabled (Y) by default. The CK721-A will communicate Primary via onboard network interface. Comm Path Network Polling User Def.
  • Page 71: Table 4-4: Panel Screen, Page 2

    CK721-A Installation and Operation User Interface 24-10025-121 Rev. A Panel Screen - Page 2 Table 4-4: Panel Screen, Page 2 Field Type Description History Upload User Def. If specified, saved history reports are uploaded in Time Zone time zones defined as Active.
  • Page 72 CK721-A Installation and Operation User Interface 24-10025-121 Rev. A Table 4-4: Panel Screen, Page 2 Field Type Description Always Upload User Def. Saved history reports are always uploaded when the % Full Threshold number of history records exceeds the specified “percent full”...
  • Page 73 Panel screen to (Y), the system will create an 599 output point. The system automatically associates Group 599 with the CK721-A relay. This enables you to control onboard relay by using the output group through I/O linking or card events.
  • Page 74: Table 4-5: Panel Screen, Page 3

    CK721-A Installation and Operation User Interface 24-10025-121 Rev. A Panel Screen - Page 3 Table 4-5: Panel Screen, Page 3 Field Type Description Exempt Badges Toggle If enabled (Y), then the Badge database is not saved From Archive to Flash during a Write-Flash operation...
  • Page 75 Selects and enables custom features. Configuration Number Encryption Toggle Enables encryption at the CK721-A controller. Note: When enabled, the File Transfer Protocol (FTP) and telnet services are disabled. Use the Secure Shell (SSH) client instead. See also: Key (for encryption) on page 4-21.
  • Page 76: Terminal

    Terminal Terminal screens are used to configure the individual readers, and input/ output terminals connected to the CK721-A. You can edit an existing terminal or add a new terminal to the system. When you select the Terminal option and a new terminal number, the system automatically assumes you are adding a new record.
  • Page 77: Table 4-6: Terminal Screen, Page 1

    Terminal Enable/ Toggle Enabled (E) indicates the terminal is operational Disable and will be polled by the CK721-A. Disabled (D) means the terminal can be defined, but will not be polled. Input Terminal Toggle A (Y) indicates an input or input/output module has this terminal address.
  • Page 78 CK721-A Installation and Operation User Interface 24-10025-121 Rev. A Table 4-6: Terminal Screen, Page 1 Field Type Description Card Processing Toggle Choices are: • L (Local Mode) • C (Central Mode) • S (Shared Mode) Access Time User Def. Values range from 0 to 25 seconds, with 5 seconds as default.
  • Page 79 CK721-A Installation and Operation User Interface 24-10025-121 Rev. A Table 4-6: Terminal Screen, Page 1 Field Type Description Note: Override Warning Time and Override Warning Output Group (the next two settings defined) work together: You can set up a time (Override Warning Time) before an override expires at which a warning (such as an audible beep) will be activated.
  • Page 80: Table 4-7: Terminal Screen, Page 2

    CK721-A Installation and Operation User Interface 24-10025-121 Rev. A Terminal Screen - Page 2 Table 4-7: Terminal Screen, Page 2 Field Type Description Reader Hdwr Type User Def. Selects the reader hardware module type for the addressed S300 module. The available reader hardware module types are: RDR2S-A, RDR8S, and LEGACY (RDR2S, RDR2).
  • Page 81 CK721-A Installation and Operation User Interface 24-10025-121 Rev. A Table 4-7: Terminal Screen, Page 2 Field Type Description I/O Hdwr Type User Def. Selects the I/O hardware module type for the addressed S300 module. The available I/O hardware module types are: RDR2S-A, RDR8S, and LEGACY (RDR2S, IO8, SIO8, I16, and SI8).
  • Page 82: Table 4-8: Terminal Screen, Page 3

    CK721-A Installation and Operation User Interface 24-10025-121 Rev. A Terminal Screen - Page 3 Page 3 of the Terminal screen is shown, followed by a table which contains a description of each item. Table 4-8: Terminal Screen, Page 3 Field...
  • Page 83 Log Output Toggle If enabled, will report output “set” or “reset” on the Status Message CK721-A Logger Out screen and at the Host. Facility Code when Toggle If enabled (Y), a person needs only a valid facility offline code to open a door when the terminal is offline from the panel.
  • Page 84 Description Log Reader Strike Toggle If enabled (Y), reader strike locked and unlocked Message are reported to the CK721-A logger screen and at the server. Star Feature Toggle If enabled (Y), allows all features accessible on a 16-key pad (with A, B, C and D keys) to be invoked on a 12-key pad.
  • Page 85 CK721-A Installation and Operation User Interface 24-10025-121 Rev. A Table 4-8: Terminal Screen, Page 3 Field Type Description Timed Shunt Toggle If enabled (Y), all Timed Overrides only extend the shunt time. The Access Time is not affected. This option requires the use of RDR2 module, firmware version PS-201E or later, or tan S300- DIN module.
  • Page 86 CK721-A Installation and Operation User Interface 24-10025-121 Rev. A Table 4-8: Terminal Screen, Page 3 Field Type Description ADA Relay Time (0 to User Def. Time between activation of the Assisted Access 120 s) and turning the ADA relay off. Value range: from 0 to 120s.
  • Page 87 CK721-A Installation and Operation User Interface 24-10025-121 Rev. A Table 4-8: Terminal Screen, Page 3 Field Type Description No Green Light On Toggle If enabled (Y), there is no green light on AUX Aux Access access. Note: Requires an S300-DIN module (RDR2S firmware must be revision Q or higher).
  • Page 88: Table 4-9: Terminal Screen, Page 4

    Card Type Toggle Select between available card types that use facility codes. Each reader terminal connected to a CK721-A can support up to 12 different facility codes. Terminal Screen - Page 5 Page 5 of the Terminal screen is shown below followed by a table which contains a description of each item.
  • Page 89: Table 4-10: Terminal Screen, Page 5

    CK721-A Installation and Operation User Interface 24-10025-121 Rev. A If you use a two-wire reader with a keypad, you must wire Data 0 and Data 1 wires so that the keypad produces the correct input to the panel. If this configuration causes the badge data to be reported inversely, you can check the “Invert Data”...
  • Page 90: Table 4-11: Offline Access Card Type Requirements

    CK721-A Installation and Operation User Interface 24-10025-121 Rev. A Table 4-10: Terminal Screen, Page 5 Field Type Description 26-Bit Sensor Forward Toggle Select (Y) to allow this card type. 26-Bit Sensor Reverse Toggle Select (Y) to allow this card type.
  • Page 91: Rdr8S Input Point And Output Point Disassociation

    CK721-A Installation and Operation User Interface 24-10025-121 Rev. A Table 4-11: Offline Access Card Type Requirements Priority Card Type Facility Code Offline Algorithmic PIN Mag Stripe or Custom Not Supported Not Supported Eyecam, Prox, Indala Supported Supported 26-Bit Sensor Forward Supported...
  • Page 92: Rdr2S-A Input Point And Output Point Disassociation

    CK721-A Installation and Operation User Interface 24-10025-121 Rev. A Reassignment of the special RDR8S reader terminal output points to general purpose output points is done by configuring the general purpose output points: Reader Output Point Terminal Output Point Number Red LED...
  • Page 93: Configuring Pin Codes

    CK721-A Installation and Operation User Interface 24-10025-121 Rev. A The following RDR2S-A reader terminal input points can be re-assigned: • Reader Door Contact (door is always reported closed by Soft Alarm Points 18 and 24) • Reader REX Re-assignment of the special RDR2S-A reader terminal output points to...
  • Page 94 CK721-A Installation and Operation User Interface 24-10025-121 Rev. A corresponding card number and the access decision is made based on that card’s access rights. This feature works with 5-digit algorithmic PINs only. For “PIN Only” to work, you need to configure the following parameters: 1.
  • Page 95 CK721-A Installation and Operation User Interface 24-10025-121 Rev. A 2. The terminal’s Allow PIN after Badge (see Allow PIN after Badge on page 4-28) has no effect. 3. The terminal’s PIN Suppression Timezone (see PIN Suppression Timezone on page 4-29) has no effect, i.e., you cannot use time zones to waive the requirement to enter a PIN in “PIN + Card ID”...
  • Page 96 CK721-A Installation and Operation User Interface 24-10025-121 Rev. A To use “PIN” mode when the terminal’s Allow PIN after Badge option is set, the PIN must be terminated with a # key. You can enter the PIN and the # key before, during, or after the card is presented.
  • Page 97: Assisted Access

    CK721-A Installation and Operation User Interface 24-10025-121 Rev. A 2. The PIN plus 1 Duress option is enabled (see PIN plus 1 Duress page 4-29). 3. The cardholder is required to enter a PIN at the terminal. 4. Last digit of the PIN is incremented by 1 (if the last digit is 9, enter 0).
  • Page 98: Figure 4-3: Assisted Access Timing Diagram

    CK721-A Installation and Operation User Interface 24-10025-121 Rev. A ADA Relay An external ADA Relay can be controlled by an output of the use of the RDR2 module, firmware version PS-201E or later, or an S300-DIN module. The activation can be delayed without the use of external additional hardware (unlike when using SIO8 modules).
  • Page 99: Panel Entry/Exit

    Controller Peer-To-Peer Global Entry/Exit Enforcement and Synchronization The controller Peer-To-Peer Global Entry/Exit enforcement feature allows a CK721-A controller to broadcast the entry/exit status of a badge to multiple CK721-A controllers via UDP protocol. This allows an Entry/ Exit zone to span across multiple CK721-A controllers within the same...
  • Page 100: Elevator Access Control

    Subnet, or across multiple Subnets using a properly configured multicast router. In addition, by changing the controller Peer-To-Peer UDP Port Number, a new Entry/Exit zone, spanning multiple CK721-A controllers can be created. This feature requires P2000 Server Version 3.8 Build 55 or higher.
  • Page 101 CK721-A Installation and Operation User Interface 24-10025-121 Rev. A • ThyssenKrupp High Level Interface • OTIS Serial E.M.S - Security / B.M.S. Protocol High Level Interface • OTIS E.M.S. - Security / B.M.S. Protocol High Level Interface • OTIS Compass High Level Interface...
  • Page 102 CK721-A Installation and Operation User Interface 24-10025-121 Rev. A The Floor Grant Outputs (Elevator I/O-8 outputs) command the Elevator Car to travel to the selected floors. These outputs are momentarily activated (energized) for a grant, simulating an actual finger pushing on a button.
  • Page 103 CK721-A panels version 3.1 and higher provide the communication necessary for KONE IP elevators. In this high-level elevator integration, the CK721-A panel interfaces with the elevator control system through a communications protocol. Granting access to floors is achieved by 4-49...
  • Page 104 (you must select the Floor Tracking function). Each CK721-A panel can connect to multiple KONE IP group controllers, each controller with up to 8 elevators, each elevator serving up to 128 floors. To define a KONE IP elevator, you must first select the KONE IP protocol type in the Panel Elevator tab.
  • Page 105: Figure 4-4: Kone Kic Controller With Multiple Elevator Groups

    Pair(s) of KONE IP controllers, each pair handling one elevator group One KONE KIC Controller for All Elevator Groups In this scenario, all elevator groups use the same TCP port number and are connected to a single KONE KIC controller and a single CK721-A controller. KONE KIC...
  • Page 106: Figure 4-5: Kone Kic Controller With Multiple Elevator Groups And Multiple Ck721-A Controllers

    Elevator Group 4 T CP Port 3 CK721-A: TCP Port3 Note: KONE IP Controllers tend to have even numbered elevator groups: 0, 2, 4, …, 32. Figure 4-5: KONE KIC Controller with Multiple Elevator Groups and Multiple CK721-A Controllers 4-52...
  • Page 107: Figure 4-6: Primary And Backup Kone Ip Controllers

    CK721-A Installation and Operation User Interface 24-10025-121 Rev. A Pair(s) of KONE IP Controllers, Each Handling One Elevator Group In this scenario, one KONE IP controller of each pair becomes a primary controller, while the other becomes a backup controller. Both KONE IP controllers share the same floor layout.
  • Page 108: Figure 4-7: Thyssenkrupp Touch Screen

    Control System (LCS), which is the ThyssenKrupp side of the integration, and an Access Control System (ACS), which refers to the P2000 Server and CK721A devices. This section only describes the ACS side; Johnson Controls has no knowledge of or control over the LCS. The integration works as follows: •...
  • Page 109 CK721-A Installation and Operation User Interface 24-10025-121 Rev. A • The ACS sends a “permanent unlocking of floors” message to the LCS, which contains a bitmask of all unlocked floors that are in public access, and it sends a “permanent locking of floors” message to the LCS, which contains a bitmask of all locked floors that are not in public access.
  • Page 110: Figure 4-8: Thyssenkrupp Building Elevator Layout

    CK721-A Installation and Operation User Interface 24-10025-121 Rev. A Each of these devices is mapped to a specific shaft, as well as either a front or rear door. Figure 4-8: ThyssenKrupp Building Elevator Layout 4-56...
  • Page 111: Figure 4-9: Thyssenkrupp Serial Elevator Integration System Architecture

    Figure 4-9: ThyssenKrupp Serial Elevator Integration System Architecture Communication between the P2000 Server, CK721-A clients, and the CK721-A server takes place over TCP/IP. Communication between the CK721-A server and elevator control system is done over an RS232 serial interface The Server CK721-A controller function provides communications between the PACS and the elevator control system.
  • Page 112 CK721-A Installation and Operation User Interface 24-10025-121 Rev. A There can only be one CK721-A configured as server connected to a single elevator control system. A P2000 Server, however, may be using multiple CK721-A controllers configured as servers to connect to multiple elevator control systems.
  • Page 113: Figure 4-10: Otis Serial E.m.s.server-Client Elevator Configuration Layout

    CK721-A Installation and Operation User Interface 24-10025-121 Rev. A The 485TBLED is connected to the OTIS EMS with a 4 wire interface: • OTIS EMS’s TDA(-) to Converter’s RDA(-) • OTIS EMS’s TDB(+) to Converter’s RDB(+) • OTIS EMS’s RDA(-) to Converter’s TDA(-) •...
  • Page 114 When the floor tracking option is enabled, the CK721-A creates a floor tracking message for each landing number that is reported by the OTIS EMS. The CK721-A associates the reported landing number with the last person that was granted access at the elevator.
  • Page 115 Building Management System (BMS) through an RS422 interface. As the current CK721-A controller supports up to 16 elevator readers, multiple CK721-A may need to be connected to control access to all elevators managed by the EMS. The number of elevators, and their assignment to elevator groups determines the number of CK721-A controllers required.
  • Page 116: Figure 4-11: Otis E.m.s. Master-Slave Elevator Configuration Layout

    Panel Configuration Panel Name Each CK721-A that takes part in the OTIS integration must follow a certain naming pattern. Enter each character of the CK721-A panel name as described in the tables below. Only characters 2, 3, and 4 must be entered as specified.
  • Page 117 CK721-A Installation and Operation User Interface 24-10025-121 Rev. A 3rd character: Master.This character defines the presence of groups 1 through 4 in the OTIS EMS. Slave: Must be 0. Any invalid character is likely to leave the OTIS integration not operational.
  • Page 118 7th character 8th character: Master & Slave. This character defines the priority of the OTIS integration within a CK721-A controller. This setting should not be changed unless after consultation with Technical Support. Any invalid character uses the default priority of 19.
  • Page 119 When the floor tracking option is enabled, the CK721-A creates a floor tracking message for each landing number that is reported by the OTIS EMS. The CK721-A associates the reported landing number with the last person that was granted access at the elevator.
  • Page 120 Access to the floor entry keypad (called a Destination Entry Computer or DEC) can be controlled by a reader connected to a CK721-A panel, if configured to do so. The OTIS system allows operation of the DECs in 4 different modes that define the availability of floors and the order in which floors and badges are presented to the system.
  • Page 121 Fail Safe mode. Inputs (low level interface only) – Each elevator cab’s floor buttons may be wired to an input to allow the CK721-A to create floor tracking messages. A pressed button needs to close the input, a button that is not pressed needs leave the input open.
  • Page 122 The elevator access time starts over with every subsequent presentation of a valid badge. At the beginning of the elevator access time certain floor buttons are enabled by CK721-A outputs per elevator access grant. Subsequent presentation of a valid badge disables the previous access grant.
  • Page 123: Cabinet Access Control

    Performance Considerations The more readers and input/output terminals are installed at a single CK721-A, the longer the system response time gets. Also, care has to be taken not to exceed the power supplies’ capabilities when all output relays are energized at once. The theoretical limit per CK721-A is set to 16 elevators with 128 elevator buttons combined.
  • Page 124: Elevator Or Cabinet Terminal

    CK721-A Installation and Operation User Interface 24-10025-121 Rev. A Elevator or Cabinet Terminal To display an elevator’s or cabinet’s configuration, select the terminal assigned to the elevator or cabinet by number or select <Previous Record> or <Next Record>. The following screens are then added to the base four screens used to display a terminal.
  • Page 125 CK721-A Installation and Operation User Interface 24-10025-121 Rev. A Table 4-12: Elevator or Cabinet Terminal Screen, Page 5 Field Type Description High Protocol User Def. A read-only field that identifies the high level (RS232) protocol in use. 0 = low level interface...
  • Page 126: Table 4-13: Setting Flags For Generating Floor Tracking Messages

    CK721-A Installation and Operation User Interface 24-10025-121 Rev. A Table 4-12: Elevator or Cabinet Terminal Screen, Page 5 Field Type Description Floor Tracking on Toggle A read-only field that identifies whether floor tracking Transitions Only messages should not be generated when an input point is already in the off-normal state* when a badge is presented.
  • Page 127 CK721-A Installation and Operation User Interface 24-10025-121 Rev. A Elevator or Cabinet Terminal Screen - Page 6 The elevator or cabinet configuration cannot be edited from this screen; these values are set during the P2000 system configuration Elevator or Cabinet Terminal Screen - Page 7 The elevator or cabinet configuration cannot be edited from this screen;...
  • Page 128: Output

    Output The Output screen is used to enable output points and assign individual points to groups. To begin, select Output from the CK721-A Main menu. You will be prompted to select a previously saved terminal. 4-74...
  • Page 129 After selecting a terminal, select an output point number. If the output you select already exists, the system places you into edit mode. If the output record does not exist, the CK721-A assumes you want to create a new record. Any output records you have defined will appear listed here.
  • Page 130: Holiday

    During normal system operation, Holidays can replace a standard time zone. At approximately one minute before midnight, the P2000 (and CK721-A) verify that the following day is a holiday. If so, the appropriate time zone is substituted. To define holidays, select Holiday from the CK721-A Main menu. You will be prompted for a holiday number.
  • Page 131: Table 4-16: Holiday Screen, 1 Page Only

    CK721-A Installation and Operation User Interface 24-10025-121 Rev. A The Holiday screen is shown and the table that follows describes each field. Table 4-16: Holiday Screen, 1 Page Only Field Type Description Holiday Month User Def. Enter a value where 1 equals January and 12 is December.
  • Page 132: Access Group

    (s). To enable or disable particular reader terminals in an Access Group, select Access Group from the CK721-A Main menu. You can add an access group number as 1 or greater, or select a previously defined group to edit.
  • Page 133: Elevator Access Group

    CK721-A Installation and Operation User Interface 24-10025-121 Rev. A Elevator Access Group To display an access group that includes elevator access, select the group by number or select <Previous Record> or <Next Record>. The following screen is displayed. The Elevator ID and Floormasks/Doormasks cannot be edited from this screen.;...
  • Page 134: Control Door

    24-10025-121 Rev. A Control Door Door Control allows you to manually lock or unlock a door immediately or for a specified period of time. Select Control Door from the CK721-A Main menu. Table 4-19: Control Door Screen, 1 Page Only...
  • Page 135: Panel Soft Alarm

    If enabled ( Y ), this type of soft alarm will be reported on the specified point. Enable Set Panel Relay ( Y ) to activate the CK721-A’s alarm relay. In this case the panel's Alarm Latch Output flag should be set ( Y ).
  • Page 136: Password Change

    Panel Soft Alarm User Def. The actual terminal number associated with the soft Address (1-16) alarms (for panel soft alarms). Password Change Use this option to change the login password for the CK721-A. Select Password Change from the CK721-A Main menu. 4-82...
  • Page 137: Reboot

    The following screen is displayed. Type the system password and press <Enter>; the CK721-A will reboot. : If you are connected to the CK721-A panel via the serial port, the boot up messages will be displayed. The reboot process is complete when the Login prompt appears.
  • Page 138: Badge

    CK721-A Installation and Operation User Interface 24-10025-121 Rev. A Badge Cardholder badge records may be entered into the system either individually or in batches. To access an individual badge that is residing in the database, enter its number value in the Start Badge field. An individual badge may also be created by entering a badge number value in the first submenu, and then by saving its data in the second submenu.
  • Page 139 CK721-A Installation and Operation User Interface 24-10025-121 Rev. A To delete a previously created badge, enter the badge number in the Start Badge field and select <Delete>. The next example shows the creation of 10 badges with numbers 25 to 35...
  • Page 140: Table 4-22: Badge Screen, Page 1

    CK721-A Installation and Operation User Interface 24-10025-121 Rev. A Table 4-22: Badge Screen, Page 1 Field Type Description Executive Privilege Toggle If enabled ( Y ), the cardholder has unlimited access to all controlled doors. Badge Type Toggle Choices are Standard and Override. Override allows the cardholder to bypass normal access through keypad override.
  • Page 141: Table 4-23: Badge Screen, Page 2

    CK721-A Installation and Operation User Interface 24-10025-121 Rev. A Table 4-22: Badge Screen, Page 1 Field Type Description Security Level User Def. Value range: 0 to 99. The Security Level for a badge must be equal to or greater than the Security Level set up at the terminal and the panel.
  • Page 142: Input

    CK721-A Installation and Operation User Interface 24-10025-121 Rev. A Badge Parameters Screen - Page 3 Table 4-24: Badge Screen, Page 3 Field Type Description Access Group User Def. A single badge can be assigned up to 32 access (17-32) groups (for access groups 1-16 see...
  • Page 143 CK721-A Installation and Operation User Interface 24-10025-121 Rev. A To begin, select Input from the CK721-A Main menu, and then select a previously defined terminal from the displayed list. After selecting a terminal, type in an input point number to define. If the point has already been defined, the record is displayed for editing.
  • Page 144: Table 4-25: Input Screen, 1 Page Only

    Toggle When an input point goes into alarm, it can trigger When Set the CK721-A panel output relay. Enable this option by selecting ( Y ). Note: Changes to the Panel Output Relay setup (includes Output Latching and Alarm Relay Linking...
  • Page 145 CK721-A Installation and Operation User Interface 24-10025-121 Rev. A Table 4-25: Input Screen, 1 Page Only Field Type Description In-Out Link Type Toggle You can choose an input point to link to an output group. Select the appropriate type of linkage from the...
  • Page 146: Time Zone

    To define or edit time zones, select Time Zone from the CK721-A Main menu. If records have been previously defined, they will be displayed. If you enter a time zone number not previously created, the system will add it as a new record.
  • Page 147: Table 4-26: Time Zone Screen, 1 Page Only

    CK721-A Installation and Operation User Interface 24-10025-121 Rev. A When you enter a Timezone number, the Timezone window is displayed. Table 4-26: Time Zone Screen, 1 Page Only Field Type Description Time Zone Name User Def. Enter up to 25 alphanumeric characters as a descriptive name for the time zone.
  • Page 148: Card Events

    If the server performs the access transaction processing (in central or shared mode), the card event will not occur. Following is the summary of the CK721-A card event processing capability: Table 4-27: Card Event Overview...
  • Page 149 To configure a new event or edit an existing one, select Card Event from the CK721-A Main menu. Next, select a previously saved event or type in a new event number to create a new card event record. The Card Event window appears. It is a two-page screen, described below.
  • Page 150: Table 4-28: Card Event Screen, Page 1

    CK721-A Installation and Operation User Interface 24-10025-121 Rev. A Table 4-28: Card Event Screen, Page 1 Field Type Description Card Event Name User Def. Type in a descriptive event name up to 25 alphanumeric characters long. Door (1 - 64)
  • Page 151 Also, events with trigger type “Any Void Card” never unlock the door. Alarm Ack Toggle If enabled ( Y ), the CK721-A’s alarm relay is reset. Input Group Toggle If enabled ( Y ), an input group specified by the Input Group Enable field will be enabled.
  • Page 152: System Information

    System Information This screen provides information regarding the CK721-A. This includes items such as reader status, IP addresses, MAC number, and current time zone status. To access this information, select System Information from the CK721-A Main menu.
  • Page 153: Table 4-30: System Information Screen, Page 1

    Primary Network MAC Number This is a hard-coded (cannot be changed) Media Access Control number. Each network device (CK721-A) must have a unique MAC number assigned at the factory. Controller Secondary IP Address This IP address is reserved for future use in support of a secondary IP interface.
  • Page 154: Table 4-31: System Information Screen, Page 2

    CK721-A Installation and Operation User Interface 24-10025-121 Rev. A System Information Screen - Page 2 (Terminal and Security Level Status) System Information Screen - Page 3 (Time Zone Status) Table 4-31: System Information Screen, Page 2 Field Description Security Level (0 to 99) To grant access, the terminal’s Security Level must...
  • Page 155: Control Output

    64 time zones can be defined. Status of each is shown as E (nabled), D (isabled), or ( -- ) undefined. Control Output This option allows you to manually control an output. Select Control Output from the CK721-A Main menu to access Control Output options. 4-101...
  • Page 156: Table 4-33: Control Output Screen, 1 Page Only

    CK721-A Installation and Operation User Interface 24-10025-121 Rev. A Table 4-33: Control Output Screen, 1 Page Only Field Type Description Terminal Number User Def. Enter the number of the terminal containing the output you wish to control. Output Point Number User Def.
  • Page 157: Change Date

    Enter the date in month/day/year format as shown above. Enter the time in 24-hour format as shown above. : This screen is only used when the CK721-A panel is the operating standalone. If the CK721-A panel is communicating with a server, then the server time will be downloaded and overwrite the settings made here.
  • Page 158 CK721-A Installation and Operation User Interface 24-10025-121 Rev. A 4-104...
  • Page 159: Chapter 5: Maintenance

    CK721-A system. OUTINE AINTENANCE Perform the following routine maintenance on the CK721-A: 1. Periodically check the continuity of the grounding circuit. 2. Perform operational testing monthly (see Testing Procedure page 5-2).
  • Page 160: Testing Procedure

    Check for proper operation of the CK721-A as follows: 1. Verify POWER LED on the CK721-A. 2. Verify that the FAULT LED on the CK721-A is not on. 3. Verify that the RS485B LED is flashing to show activity on the bus.
  • Page 161: Field Servicing

    IELD ERVICING Troubleshoot the CK721-A by substituting the suspected defective panel with a new component. All replaceable parts are available from Johnson Controls, Inc. Consult your Customer Success Center representative at (800) 482-2778 for domestic orders or for instructions on how to obtain replaceable parts.
  • Page 162 CK721-A Installation and Operation Maintenance 24-10025-121 Rev. A Table 5-2: Troubleshooting Guidelines Problem Possible Causes Red light or no reader light Invalid Time zone/Reader/Issue Level/Facility Code illuminates when card is used Card no longer in database at reader, and access is not Incorrect card type granted.
  • Page 163: Appendix A: Expanded Address S300 Bus

    S300 B XPANDED DDRESS The CK721-A firmware supports an Expanded Address S300 Bus feature. This feature increases the number of logical terminals allowed on the S300 bus from 16 to 64. The terminals are addressed Logical Terminal 1 to 64.
  • Page 164 - OTIS E.M.S. - Security / B.M.S. Protocol High Level Interface - OTIS Compass High Level Interface The Expanded Address S300 Bus allows a CK721-A controller to communicate with up to 32 modules on the RS485 bus. New modules (RDR2S-A, I8O4, RDR8S, I32O16) allow greater flexibility in the mapping of the logical terminal number (1-64) to a physical device (0-31) through the use of physical addressing mode.
  • Page 165 CK721-A Installation and Operation Expanded Address S300 Bus 24-10025-121 Rev. A The following table contains several examples for mapping a logical terminal number to a physical device: Hardware Module Reader Terminal Logical Terminal Number (Physical Device Type Index, Number, Address), Value...
  • Page 166 CK721-A Installation and Operation Expanded Address S300 Bus 24-10025-121 Rev. A...
  • Page 167: Appendix B: Performance Analysis

    RS-485 bus. The test measured the response time between reading two badges by two readers on the same module and unlocking two doors. Table B-1: CK721-A Using Legacy Addressing Mode Number of modules Average response time in ms...
  • Page 168 CK721-A Installation and Operation Performance Analysis 24-10025-121 Rev. A Response time in milliseconds 1800 1600 1400 1200 1000 Number of modules Legacy addressing mode Physical addressing mode Figure B-1: CK721-A Access Time Performance Graph...
  • Page 169: Appendix C: Grounding And Connectors

    CK721-A Installation and Operation Grounding and Connectors 24-10025-121 Rev. A ROUNDING AND ONNECTORS This appendix gives instructions for grounding cable shields at data and low voltage installations, and at grounding card reader units. Follow these guidelines for electromagnetic compatibility (EMC) conformity, and to improve system reliability.
  • Page 170: D-Type" Connectors

    CK721-A Installation and Operation Grounding and Connectors 24-10025-121 Rev. A • The drain wire that extends from the shield shown in the illustrations must be kept as short as possible (typically, 2.5 cm or 1 inch). Connect a lug to the end of the wire, as shown, and screw securely to the wall of the enclosure or nearest stud.
  • Page 171: Non "D-Type" Grounding Connections

    CK721-A Installation and Operation Grounding and Connectors 24-10025-121 Rev. A The two curved parts of the shroud make contact with the flat plate of the shroud. Tighten the two remaining screws to ensure a firm fit. Do not remove the drain wire from the shield.
  • Page 172: Installations In Europe

    CK721-A Installation and Operation Grounding and Connectors 24-10025-121 Rev. A UNIT1 Separated wires of cable are not shielded Short wire is connected The screen-type shield is from shield to inside the enclosure, no enclosure of more than 2" (5cm) unit 1...
  • Page 173: Card Reader Unit Grounding

    CK721-A Installation and Operation Grounding and Connectors 24-10025-121 Rev. A UNIT1 Separated wires of cable are not shielded Short wire is connected The screen-type from shield to shield is inside the enclosure of enclosure, no more than 2" (5cm) unit 1...
  • Page 174 CK721-A Installation and Operation Grounding and Connectors 24-10025-121 Rev. A...
  • Page 175: Appendix D: Door Open/Aux Access Supervision

    Normal operation of the modified output relays (five through eight) is disabled. Specifically, the relays will no longer respond to output control and output control status messages from the CK721-A. The modified outputs will always be reported as reset. •...
  • Page 176: Configuring The S300-Sio8

    Open or short circuit conditions at the four-state inputs will be reported to the CK721-A by the SIO8 module without affecting the reader module’s inputs. As a result, the relay contacts will appear to the RDR2 module exactly as if two- state contacts were being used.
  • Page 177: Figure D-1: Input/Output Contact Wiring D

    CK721-A Installation and Operation Door Open/Aux Access Supervision 24-10025-121 Rev. A The following page shows the wiring from the SIO8 output relays to the RDR2 module. NO C NC NO C NC NO C NC NO C NC Figure D-1: Input/Output Contact Wiring...
  • Page 178 CK721-A Installation and Operation Door Open/Aux Access Supervision 24-10025-121 Rev. A...
  • Page 179: Appendix E: Database Flash Backup From The Host

    1. Verify that the CK721-A panel is online. 2. From the P2000 Main menu, select System>CK705/CK720 Write DB To Flash. The CK721-A Write DB to Flash dialog box appears. Figure E-1: CK705/CK720 Write DB to Flash Dialog Box 3. Select the Panel To Write from the drop-down list.
  • Page 180 CK721-A Installation and Operation Database Flash Backup from the Host 24-10025-121 Rev. A...
  • Page 181: Appendix F: Using A Keypad Reader On A Panel

    CK721-A Installation and Operation Using a Keypad Reader on a Panel 24-10025-121 Rev. A SING A EYPAD EADER ON A ANEL The following sections describe how to invoke access requests, Air Crew access requests, Timed Overrides, and Panel Card Events using a keypad reader.
  • Page 182: Invoking Air Crew Access Requests From A Keypad

    CK721-A Installation and Operation Using a Keypad Reader on a Panel 24-10025-121 Rev. A 2. The terminal’s Card ID flag must be set. 3. Make sure the terminal’s PIN Only flag is not set. 4. Make sure the terminal’s PIN + Card ID flag is not set.
  • Page 183: Invoking Timed Overrides From A Keypad

    CK721-A Installation and Operation Using a Keypad Reader on a Panel 24-10025-121 Rev. A 2. The respective Air Crew PIN must be enabled for the terminal. 3. To request Air Crew access: Without the Star Feature, press the B key followed by the Air Crew PIN number and the # key.
  • Page 184 CK721-A Installation and Operation Using a Keypad Reader on a Panel 24-10025-121 Rev. A 3. The terminal’s PIN Only flag must be set. PIN Only works exclusively with 5-digit algorithmic PINs. 4. Set the panel’s PIN Code Type to Algorithmic.
  • Page 185 CK721-A Installation and Operation Using a Keypad Reader on a Panel 24-10025-121 Rev. A With the Star Feature, enter the Card ID number, press the star (*) key followed by number 0, enter the number of minutes, and press the # key.
  • Page 186 CK721-A Installation and Operation Using a Keypad Reader on a Panel 24-10025-121 Rev. A 3. The terminal’s PIN Suppression Timezone must be set to an inactive zone. 4. Make sure the terminal’s Allow PIN After Badge flag is not set.
  • Page 187: Invoking Panel Card Events From A Keypad

    CK721-A Installation and Operation Using a Keypad Reader on a Panel 24-10025-121 Rev. A With the Star Feature, enter PIN, press the star (*) key followed by number 0, present the badge , and press the # key. The badge can be presented at any time before the # key is pressed.
  • Page 188 CK721-A Installation and Operation Using a Keypad Reader on a Panel 24-10025-121 Rev. A 5. The panel’s 5 Digit Pin Code must be set to 5. 6. To activate event: Without the Star Feature, enter PIN, press A, enter the keypad code, and press the # key.
  • Page 189 CK721-A Installation and Operation Using a Keypad Reader on a Panel 24-10025-121 Rev. A With the Star Feature, enter the Card ID number, press the star (*) key followed by number 4, enter the keypad code, and press the # key.
  • Page 190 CK721-A Installation and Operation Using a Keypad Reader on a Panel 24-10025-121 Rev. A Without the Star Feature, enter PIN, press A, enter the keypad code, and present the badge. With the Star Feature, enter PIN, press the star (*) key followed by number 1, enter the keypad code, and present the badge.
  • Page 191: Quick Guide To Using Keypad Readers

    CK721-A Installation and Operation Using a Keypad Reader on a Panel 24-10025-121 Rev. A UICK UIDE TO SING EYPAD EADERS Use the following quick guide to determine the key sequence at a keypad reader required for a particular action. This section assumes all terminal’s and panel’s settings have already been configured for this action.
  • Page 192 CK721-A Installation and Operation Using a Keypad Reader on a Panel 24-10025-121 Rev. A Legend Enter the Keypad Code. Present the badge. Keypad Code badge Enter the PIN number. Press the specified key. Card ID Enter the Card ID numb er.
  • Page 193 CK721-A Installation and Operation Using a Keypad Reader on a Panel 24-10025-121 Rev. A Invoking Timed Overrides from a Keypad With Badge To start override without Star Featu re: Minutes badge badge To stop override without Star Feature: badge To start override with Star Feature:...
  • Page 194 CK721-A Installation and Operation Using a Keypad Reader on a Panel 24-10025-121 Rev. A Invoking Panel Card Events from a Keypad With Badge Keypad Code badge To activate event without Star Feature: To deactivate event without Star Feature: Keypad Code...
  • Page 195: Appendix G: Configuring Ssh And Sftp Clients

    SFTP C ONFIGURING LIENTS On the CK721-A controller, the FTP and Telnet services are disabled when encryption is turned on. You can use the PuTTY or WinSCP client software to log into the CK721-A controller via remote connections (see Chapter 4: User Interface).
  • Page 196 CK721-A Installation and Operation Configuring SSH and SFTP Clients 24-10025-121 Rev. A 3. The PuTTY Session configuration window opens up. To configure PuTTY session before loading it for the first use: 1. In the Putty Configuration window, with Session selected in the left window pane, configure the following in the right window pane: •...
  • Page 197 CK721-A Installation and Operation Configuring SSH and SFTP Clients 24-10025-121 Rev. A • Enter name for the configuration in the Saved Sessions field (in the example below, “CK721-A”):...
  • Page 198 CK721-A Installation and Operation Configuring SSH and SFTP Clients 24-10025-121 Rev. A 2. Select Kex selected in the left window pane. In the right window pane, select the Diffie-Hellman group 14 for Algorithm selection policy. Use the Up button to move it to the top of the list.
  • Page 199 CK721-A Installation and Operation Configuring SSH and SFTP Clients 24-10025-121 Rev. A 3. Select Data in the left window pane. For Terminal type-string enter value vt100. 4. Click Save to save the session. To open communication to the panel at this point, click Open.
  • Page 200 CK721-A Installation and Operation Configuring SSH and SFTP Clients 24-10025-121 Rev. A 2. Select the saved session configuration (in this example, “CK721-A”) and click Load. 3. To open communication to the panel, click Open. The login screen appears.
  • Page 201: Winscp Client

    CK721-A Installation and Operation Configuring SSH and SFTP Clients 24-10025-121 Rev. A 4. Proceed with login as you would using the TeraTerm. 5. To the see menu options, at the prompt type in the “/apps/sid” command and press the Enter key.
  • Page 202 CK721-A Installation and Operation Configuring SSH and SFTP Clients 24-10025-121 Rev. A 2. The Setup – WinSCP window opens. Verify that the Typical installation is selected and click Next. 3. Select Commander interface. This will allow you to display both the...
  • Page 203 CK721-A Installation and Operation Configuring SSH and SFTP Clients 24-10025-121 Rev. A 4. Click Install. Desktop location for the installation is recommended. 5. Verify that the Launch WinSCP button is selected and click Finish. To configure WinSCP session before loading it for the first use:...
  • Page 204 CK721-A Installation and Operation Configuring SSH and SFTP Clients 24-10025-121 Rev. A 2. In the WinSCP Login screen appears. 3. With Session selected in the left window pane, configure the following in the right window pane: • Host name - the IP address of the controller panel •...
  • Page 205 CK721-A Installation and Operation Configuring SSH and SFTP Clients 24-10025-121 Rev. A Do not close the window yet. 4. Select the Advanced options radio button to access the SSH key exchange settings. 5. Select Key exchange in the left window pane. In the right window pane, select the Diffie-Hellman group 14 for Algorithm selection policy.
  • Page 206 CK721-A Installation and Operation Configuring SSH and SFTP Clients 24-10025-121 Rev. A • Remote directory - location to which the files will be transferred • Local directory - location that contains the files to be transferred over to the controller Leave remaining settings at their default values.
  • Page 207 CK721-A Installation and Operation Configuring SSH and SFTP Clients 24-10025-121 Rev. A 2. Select the saved session configuration (in this example, “diag@159.222.109.253”) and click Login. 3. Specify Password and click OK. G-13...
  • Page 208 CK721-A Installation and Operation Configuring SSH and SFTP Clients 24-10025-121 Rev. A The WinSCP commander interface opens, providing access to the source and destination folders, with the files to be transferred. G-14...
  • Page 209: Appendix H: Wiring Concepts

    CK721-A Installation and Operation Wiring Concepts 24-10025-121 Rev. A IRING ONCEPTS This appendix described wiring concepts that apply to the CK721-A. IRING EADERS The following figure shows the maximum cable distances allowed between a S300 expansion enclosure and a reader.
  • Page 210: Door Strike Wiring

    Door Strike Power Supply reader Door Strike Figure H-2: Example of a Typical CK721-A System Door Strike Wiring Some door strikes are fail-secure or fail-locked. These door strikes energize to unlock the door and de-energize to lock the door. These strikes must be connected to the strike power source through the normally-open contacts of the strike relay (NO and C).
  • Page 211: Figure H-3: Field Installed Metal Oxide Varistor H

    (RDR2S-A or RDR8S STRIKE), the contacts should be protected by an external protection circuit. This protection circuit is application- specific as configured in the field. Johnson Controls would advise, at a minimum, a Metal Oxide Varistor (MOV) at the rated voltage relative to the application across the power source and power load interrupted by the mechanical relay.
  • Page 212: Output Wiring

    This protection circuit is application-specific as configured in the field. Johnson Controls would advise, at a minimum, a Metal Oxide Varistor (MOV) at the rated voltage relative to the application across the power source and power load interrupted by the mechanical relay.
  • Page 213 Security Solutions (805) 522-5555 www.johnsoncontrols.com We welcome your comments at BE-techpubs-security@jci.com.

Table of Contents

Save PDF