Contents Overview 6.1.1.8 — Changing Badges ......35 6.1.2 — LED Control ......36 1 —...
Page 3
Un-Authorized A user cannot be identified when entering a space. Entry Steps to associated the Rock with the Alcatraz AI Admin Portal once physical Onboarding installation is complete and confirmed to be wired correctly. ONVIF (Open Network Video Forum to standardize IP-based video security products.
Overview The Alcatraz AI Admin Portal provides administrative functions for Alcatraz Rocks. Once the Rock has been installed on the wall, the portal is required to commission the Rocks. After the Rocks are commissioned, the portal is used to configure, monitor and administer Rocks.
1 — QuickStart Start with Configure Rock Mode — Requesting an Alcatraz AI Admin Portal login from your Account Enrollment Administrator — Submiting a request for a login at support.alcatraz.ai Generate QR Code View Security Events Enrollment Tailgating Onboard a Rock...
Page 7
The dashboard is the landing page after logging in to the Alcatraz AI Admin Portal. This page provides a summary of metrics and security events information. Recorded Security Events Hover your cursor over the graph to get metrics for the security events over time or filter on a timeframe by selecting from the drop-down menu ■...
3 — Accounts Accounts are created for each customer to manage Rocks. Only Dealer Admins can create, delete or edit Accounts. Each account should be assigned an Account Administrator to be responsible for managing the Account. This would include creating other admins or portal users as well as configuring card formats.
3.1 — Create an Account 1. Go to Accounts and click on Create an Account. 2. Complete the information in the Add Account pane. Reference Number (optional) – gives flexibility to add a number to associate with, for example, a billing account. ■...
3.2 — Edit an Account Identify the Account from the list or search for the Account in the search bar. Navigate to the far right, click on the three dots and select Edit to open up the Edit Account pane. Update Account information and click Submit.
3.3 — View an Account Identify the Account from the list or search for the Account in the search bar. Click on the Account name or navigate to the far right, click on the three dots and select View. The Account information page will be displayed. Ver.
The facility code and card number can be displayed if the size and location of the bits within the bit length are known. Companies may also have more than one card format. The Alcatraz AI Admin Portal is able to display the correct badge number and facility code as long the card formats are configured for the account.
3.5.1 — Configure a Pre-defined Card Format For convenience, some of the popular card formats have been pre-defined and can be selected for use. Click on the Account name or navigate to the far right, click on the three dots and select View. 2.
Page 14
4. Select Pre-defined for Card Type and select a format from the Pre-defined Format list 5. Click Save and the selected card format will be displayed in the list Ver. 1.01...
3.5.2 — Configure a Custom Card Type To configure a custom card format, before proceeding, retrieve the information from your Access Control System (ACS) Administrator. Information that may be part of your card format and needed as part of the configuration include: The start position and the number of bits for card number ■...
Page 16
4. Select Custom for Card Type. Give the card format a name and indicate number of bits. Please note that only one card format is allowed for a given bit length. 5. Follow the information retrieved from the ACS Administrator and toggle bits as required 6.
Permissions The Permissions section of the Alcatraz AI Admin Portal provides capability to create new system users to log into the Alcatraz AI Admin Portal. When a new system user is created, they must be assigned a role. This role will be associated with permissions to create, edit, view, or delete in the portal.
Page 20
Users are associated with an Account so the Account must be previously created in order to assign the user a role for an Account. This is important to note for Dealer Admins who must manage multiple Accounts. Note: Only Dealer Admins and Installer roles are able to Delete Rocks from Accounts. Ver.
4.1 — Create a User 1. Go to Permissions –-> Users and filter on the User to ensure that an account has not already been set up 2. To add a new user, select Create a User 3. Fill in the required information 4.
4.2 — Delete a User 1. Go to Permissions –-> Users and identify the user you wish to delete 2. Navigate to the far right, click on the three dots and select Delete 3. You will be asked to confirm before deleting Ver.
Rock under the QR code, on the outside of the box the Rock was shipped in or scrolling at the bottom of the Rock’s display. If the newly installed Rock does not show up in the Alcatraz AI Admin Portal for onboarding, it is possible that it cannot connect to the Server. Check the network information scrolling on the Rock’s display to help troubleshoot.
5.1 — Assigning the Rock an Access Group It is not necessary to create a new access group for onboarding. If none is specified during onboarding, the Rock will be assigned the default access group that can be changed after it has been onboarded. To check for an existing or default Access Group, or create a new Access Group, go to Access Groups.
3. Click on Authenticate 4. A window pops open, choose the Access Group and click Authenticate. The Rock has been successfully onboarded when the Status = Active and State = Online. Refresh the browser to see the update. 5.4 — Name the Device 1.
Page 26
2. The Rock’s information will be displayed. Click on Modify Device. 3. Modify the Name field 4. Click Submit at the bottom of the page. 5. View the new Name in the list Ver. 1.01...
6.1 — Devices The Rock can operate in a number of modes. Device Mode Description Demo is used for demonstrations. Similar to 1FA - requires face or badge as credential. Demo mode Auto-enrollment is enabled and requires only 2 consecutive badge swipes (instead of 4-6 badge-ins) with no wait in between to be enrolled. ...
6.1.1 — Configure Rock Mode of Operation 1. Go to Device Management and select Devices. 2. Click on the Name of the Rock to open the Rock’s info page. 3. Click on Modify Device to open up the configurations page. Ver.
Page 30
4. Scroll down the page to Device Configuration and expand the Device Mode section. 5. Select the operational mode for the Rock. 6. Click Submit when done. Low Friction, Standard, and High Security will be defaulted according to the mode but can be change. The various levels will determine if the Rock will make more/fewer checks, more/less friction and tolerance of light levels.
6.1.1.1 — Mode Setting – Demo 6.1.1.2 — Mode Setting – 1FA The Rock is shipped in Demo mode. In Demo mode, auto-enrollment is completed by swiping a badge Auto-Enrollment twice with a few seconds in between. On the third entry, you will not be required to present your badge as In 1FA, auto-enrollment is completed by swiping a badge at least 4-6 times over the period of a day or two.
6.1.1.3 — Mode Setting – 1FAF 6.1.1.4 — Mode Setting – 2FA-M This Rock is in 1FAF or Single Factor Authentication Face-only. This Rock is in Mask Enforcement mode. This mode requires that you present your face. No badge is required. This mode requires you to wear a mask and present your badge.
6.1.1.6 — Mode Setting – 2FA 6.1.1.5 — Operating in 3FA This Rock is in 2FA mode or Two Factor Authentication. Follow 2FA requirements for presenting face and badge credentials but you will also enter a PIN. This mode requires that you present you face and badge. ACS must be configured to accept Badge + PIN.
6.1.1.7 — Mode Setting – Enrollment When the Rock mode is enrollment, the Rock will only enroll users. This is referred to as manual enrollment. A Rock is designated as an enrollment station when set in enrollment mode. Start your Enrollment Every time you stand in front of the Rock, if you have a mask on, this animation shows up.
6.1.1.8 — Changing Badges Once a user is enrolled, if at any time, the user needs to switch to a new badge, they can walk up to an enrollment Rock and swipe their new badge to update their profile. Badge number Swipe your badge updated in profile Old Badge number...
6.1.2 — LED Control The Rock has a Ring of LEDs that will change color depending on what controls the color change. That is, the Rock could be configured to control the color change and ignore any color signals from the ACS, or it can be configured to change colors based on feedback from the ACS, or it could be configured so that the LED color changes are controlled by the ACS.
Page 37
4. Scroll down the page to Device Configuration and expand the LED control section 5. Select one of the LED Control setting a. ACS controls LEDs – this is the default mode of the Rock, the LEDs are controlled by the ACS so changes in the LED color seen should be checked with ACS configurations b.
6.1.3 — ONVIF The Rock can communicate with any device that is ONVIF (Open Network Video Interface Forum) compatible. The Rock is compatible for Profile S and Profile T for devices that follow the ONVIF standards. 1. Go to Device Management and select Devices.
Page 39
4. Scroll down the page to Device Configuration and expand the ONVIF section. ONVIF is enabled by default. To disable, click on the slider. Default setting To disable Submit 5. Click when done Ver. 1.01...
6.1.3.1 — Adding a Rock to the VMS (ONVIF) The Rock supports any Video Management System (VMS) that adheres to the ONVIF standard. Please use the following info to connect with the VMS: Username: admin Password: (the last 6 digits of the device ID) To locate the last 6 digits: 1.
Page 41
4. Scroll down the page to Device Configuration and expand the Hold Signal Detection 5. The Hold Signal Detection is disabled by default, click to enable. The Rock will suspend all operations when a Hold signal is asserted from the ACS. 6.
Once in the ACS, they can be used to trigger video call-ups, sound alarms, or simply for reporting purposes. TIP: Before proceeding to configure, ensure that the badge number and facility code info is displayed correctly in the Alcatraz AI Admin Portal. Swipe the badge with the card reader.
Page 43
Step 3 – Configure Alerts in the Alcatraz AI Admin Portal 1. Go to Device Management and select Devices. 2. Click on the Name of the Rock to open the Rock’s info page. 3. Click on Modify Device to open up the configurations page.
Page 44
5. Toggle to turn on Enable ACS Alerts. 6. Enter the information for the alerts (use table from Step 1). 7. Scroll down and Click Submit when done. *The badge numbers should be not associated with any cardholders and are used only for the purpose of receiving alerts from the Rock Important: If the Card Format assigned to an event is modified, you must delete and re-enter.
Security Events 4. Verify the event appears in the ACS event log Important: if the tailgating event is not seen in the Alcatraz AI Admin Portal, the ACS will not receive an alert. 6.1.6 — Configure OSDP The Rock supports independent communication interfaces for the Badge Reader and the ACS Panel.
6.1.6.1 — Select Rock to Configure OSDP 1. Go to Device Management and select Devices. 2. Click on the Name of the Rock to open the Rock’s info page. 3. Click on Modify Device to open up the configurations page. Ver.
Page 47
4. Scroll down the page to Device Configuration. 5. Expand either of the following to configure. A. Communication with Badge reader B. Communication with ACS Ver. 1.01...
6.1.6.2 — Rock Communication with Badge Reader 1. Select OSDP 2. Enter the Badge Reader’s a. Baud Rate b. Device Address c. Select Unsecure Secure OSDP channel mode d. If selecting Secure channel, confirm to proceed with setup Unsecure mode Secure mode 3.
6.1.6.3 — Rock Communication with ACS 1. Select OSDP 2. Enter the ACS’ a. Baud Rate b. Device Address c. Select Unsecure Secure OSDP channel mode d. If selecting Secure channel, confirm to proceed with setup Unsecure mode Secure mode 3.
6.1.6.4 — Changing from Secure to Unsecure Channel OSDP requires the exchange of encryption keys. To change from secure channel to unsecure channel, the keys will be deleted. Confirm to continue when changing to Unsecure mode. Ver. 1.01...
6.1.6.5 — Troubleshooting Tips Troubleshooting OLED Issue Action Rock < –-> ACS Panel Rock < –-> Badge Reader No communications between Check: Rock device and ACS Panel or Address/baud rate for mismatch ■ Badge Reader Address/baud rate is valid ■ Bad connections ■...
6.2 — Access Groups User access to doors and spaces can be managed in Access Groups. Users can belong to more than one Access Group. Access groups in turn are assigned to Rocks. When an Access Group is assigned to Rock(s), users belonging to that Access group will be able to access the door(s). Adding a user to an access group is done in Profiles.
6.2.2 — Delete an Access Group 1. Go to Device Management -–> Access Groups 2. Select the Access Group to open the Access Group Information page 3. Click on Modify Access Group 4. Click on Delete Confirm Ver. 1.01...
6.2.3 — Embedded Access Groups 1. Go to Device Management -–> Access Groups 2. Select Access Group to open the Access Group Information page 3. Click on Add embedded access group 4. Select from the drop-down. The Access Group must be created first in order to appear in the list. 5.
6.2.4 — Change Default Access Group 1. Go to Device Management -–> Devices 2. Click on the Name of the Rock to open the Rock’s info page 3. Click on Modify Device to open up the configurations page 4. In Default access group, change the Access Group to another from the drop down Note that any embedded Access Groups will also have the same access as the parent Access Group.
6.2.5 — Add Additional Access Groups 1. Go to Device Management -–> Devices 2. Click on the Name of the Rock to open the Rock’s info page 3. Click on Modify Device to open up the configurations page 4. In Access groups, add any additional Access Groups to the Rock Ver.
Tailgating Intelligence – tailgating, crossing or unauthorized entry When an event occurs at the Rock, the corresponding security event will be displayed in the Alcatraz AI Admin Portal in real time if network connections are healthy. In the case of any network disruptions, events will be queued in the Rock and will sync with the Alcatraz AI Admin Portal when connections are re-established.
6.3.2 — Security Events Summary Table The table summarizes the most common security events displayed in the Alcatraz AI Admin Portal and the sequence of icons that can be observed on the Rock’s display. Event Event Trigger Rock mode Display Icons A user swiped a badge for auto-enrollment.
Page 59
Display Icons Event Event Trigger Rock mode Also seen for 3FA using face, badge and pin A user authenticated in 2FA - face and badge match. 2FA Access Granted User then enters PIN. Badge and PIN are sent to the ACS. ACS must be configured to accept a badge and PIN.
6.4 — Generate QR Code The Rock can accept an IP address dynamically via DHCP, or be assigned a static IP address. To configure the network settings of a Rock, we use the Rock like a QR code scanner. The Admin Portal has a QR Code Generator feature that encodes network settings; First enter the network settings ■...
Page 61
A. For DHCP - Select Automatically if the Rock will acquire an IP address by DHCP, than click Next For Static IP - select Manually and enter the required information, than click Next to continue Ver. 1.01...
6.4.1 — Server Location Select a Server Location and click Next. 1. For Cloud Hosted – select Hosted by Alcatraz 2. For On-Premise – select Local Server and enter the Server IP For Cloud For On-Premise Rocks, a Server Hosted Hostname / IP Address will be required Ver.
6.4.2 — Generate and Download QR Code 1. Review your settings and then hit Generate 2. Click Download QR Code to save to your computer, email or text. Ver. 1.01...
QR Config Accepted icon. and verify that the information is correct for the Rock to connect to the server where the Alcatraz AI Admin Portal resides. 6.4.4 — When can the Rock read a QR code? A Rock must display the QR Code Receptive icon to be able to scan a QR code. If the icon is not shown on the display, ■...
Manual enrollment is ideal for organizations that require 2FA (face and badge), installing Rocks where no badge reader is required or want a dedicated enrollment station. In summary, Profiles will be displayed in the Profiles section in the Alcatraz AI Admin Portal only when enrollment is successful. The Rock must be able to capture good quality images of the user. The user’s ■...
6.5.1 — Viewing Profiles 1. To view the list of Profiles for the Account, go to Device Management and select Profiles. 2. Hover your cursor over the Badge number to see an image of the Last Event Ver. 1.01...
Page 67
3. To view additional Profile information, click on the Badge Number Ver. 1.01...
6.5.2 — Delete a Profile – Option 1 (delete through Profiles) 1. Click on Device Management–->Profile 2. Click on a Badge Number to open the Profile 3. Click on Delete at top right to delete this Profile. Ver. 1.01...
6.5.3 — Delete a Profile – Option 2 (delete through Security Event) 1. Click on Device Management –-> Security Events 2. Click on an Event and an Edit Security Events pane will open. 3. Click on the Un-enroll button at top right of any security event panel. 4.
6.5.4 — Managing Access In some organizations, users can have multiple badges belonging to different Access Groups. Within the user profile, there is flexibility to manage badge number(s) associated with different Access Groups. Badge 12345 => Security Team ■ Badge 67890 => Employees ■...
Delete Access Group 1. Select the Badge Number to open the profile record. 2. Scroll down to the Access Details section to see the access groups the user belongs to. 3. Select Delete Access to delete all or the trash can to delete the selected Access Group.
New Rock Firmware Rock firmware can only be updated by Dealer Administrators or Installers. Login credentials to the Alcatraz AI Admin Portal must be either Dealer Administrator role or Installer role. For On-Prem Rocks, before starting — Visit support.alcatraz.ai to see current releases and download. Submit a request for any questions.
3. On-prem Only - Click Upload an artifact and select the file that was downloaded to your computer from an Alcatraz AI link. Uploading can take several minutes Ver. 1.01...
7.2 — Update the Rock Firmware 1. Go to Packages –-> Deployments – The list displays deployments that have been scheduled in the past. 2. Click Create a Deployment and the Add deployments side pane will open up. 3. Enter a Deployment name – this can be anything but best practice is to use Rock name and firmware version number.
Page 76
7. Every 5-10 minutes the update jobs will be checked and processed. View the status change of the update by refreshing the page. The Status will change as the update progresses until Deployment Status = finished. A restart will occur during this process. The Rock will be offline for approximately 60 seconds. 8.
7.3 — Verify Update is Successful 1. Click on the name to open up the Deployment job. A successful update will show success and the number in the blue circle will indicate how many Rocks got updated successfully if multiple Rocks were being updated. 2.
Page 78
3.The information page for the Rock will open. Scroll down midway and check the Firmware Release Ver. 1.01...
8 — Advanced Options Some of the most frequently used parameters are discussed here but it is recommended to check with Alcatraz AI when changing configurations in the Advanced section. 8.1 — Enabling or Disabling QR Code Receptive Icon 8.2 — Setting the Rock for Corridor Mode...
8.1 — Enabling or Disabling QR Code Receptive Icon The Rock can read a QR code when the QR Code Receptive icon is shown in the display. To enable the icon, do the following. 1. Go to Device Management –-> Devices 2.
Page 81
6. Under Manual Configuration, select device.setup_mode and set the value to qrcode. *To disable QR Code 7. The qrcode can be turned off from the display at anytime by changing the value to disabled. Note that this also removes the IP info scrolling. 8.
8.2 — Setting the Rock for Corridor Mode Corridor Mode is required for installations on where the Rock is mounted on walls that are right angle to the door. 1. Go to Device Management –-> Devices 2. Click on the Name of the Rock to open the Rock’s info page. 3.
Page 83
4. Scroll down the page to Device Configuration and on the right side of the page, slide the Advanced slider to on. 5. Scroll down to Add a Parameter. 6. Under Manual Configuration, select corridor_setup.is_corridor_setup_enabled. Slide to turn on. 7. Click Submit when done.
Need help?
Do you have a question about the AI and is the answer not in the manual?
Questions and answers