background image

Document -800-26311_Rev-B – July 2020

Access Control Unit

MPA1 User Guide

Summary of Contents for MPA1

Page 1: ...Document 800 26311_Rev B July 2020 Access Control Unit MPA1 User Guide ...

Page 2: ...Revisions Rev Date Revisions A 02 2020 Document created B 07 2020 Document updated with ULC Features ...

Page 3: ...Initial Panel Setup 27 Entering a Panel Name 28 Configuring the Network Settings 29 Configuring Time Management 30 Configuring Spaces 38 Configuring Spaces 38 Configuring Doors 42 Configuring Door Outputs 50 Configuring Panel I O and Groups 52 Configuring Card Formats 57 Managing Site Codes 61 Configuring Interlocks 63 Configuring People and Cards 66 Configuring People 66 Configuring Cards 69 Conf...

Page 4: ...7 Overview 97 Primary Secondary Panel Synchronization Hard Default 97 Synchronization Detail Chart 98 Synchronization 98 Access control behavior during synchronization 98 Restore Entire Loop Detail Chart 99 System Wide Backup Restore 99 Restoring the Panel to Factory Default Settings 100 Resetting the Panel 100 Firmware Upgrades 101 Panel Requirements 101 Overview 101 Planning for the Firmware Upg...

Page 5: ...Please visit us on the web at www honeywellaccess com to post your comments All information in this document descriptions technical specifications pictures illustrations etc are indicative only not binding and can be changed without notice Nevertheless this document remains valid Personal Data Storage Pleasebe awarethat this product can store personal data Personal data is protected by the General...

Page 6: ...n This chapter describes how to connect to the web server For hardware and wiring installation instructions please see the Installation Guide supplied The MPA1 is designed to work with most operating systems and browsers but Honeywell recommends Chrome for the best performance Note All information in this document descriptions technical specifications pictures illustrations etc are indicative only...

Page 7: ...rver Using a hub LAN connection Using a direct connection To set up an Ethernet Port 1 Connect your computer s Ethernet port to the panel s Ethernet port using one of the following two methods a Ethernet Hub connection Connect both the computer s Ethernet port and the panel s Ethernet port to an Ethernet hub with standard Ethernet patch cables b Web server direct connection Connect the computer s ...

Page 8: ...nd right click the icon to display the Local Area Connection Properties screen d Highlight the Internet Protocol TCP IP connection e Click Properties to display your system s current Internet Protocol properties TIP Keep a record of your computer s current network configuration as it appears in this screen You will need to re instate this configuration later f Select Use the following IP address g...

Page 9: ...t the entries 3 Open your browser and enter https 192 168 1 150 as the target address CAUTION When connecting to the web using a browser you must use https for a secure connection The standard http that is the default in most browsers will not work 4 Press the Enter key to display the Honeywell MPA1 login screen ...

Page 10: ...Certificates 5 Enter admin in the User Name field and enter admin in the Password field Both the user name and password are case sensitive Note If you fail to log in successfully 5 times the Retry Limit will be exceeded and the account locks for 30 minutes Any attempt to log into a locked out account within the timeout period restarts the 30 minute lock out period Note On initial signing in you wi...

Page 11: ...The MPA1 Dashboard On the MPA1 Dashboard you can see the following A list of all the panels in the loop Any offline panels The number of currently existing entries in the database Clicking on the links on the Dashboard will take you directly to the selected database page ...

Page 12: ... 11 Document 800 26311_ A April 2020 Accessing the Menu In the upper left corner is the Menu button allows you access to all of the MPA functions Figure 1 1 Main Menu ...

Page 13: ...r tual Group on page 18 Initial Panel Setup on page 27 View the Configuration Summary and the status of all the panels in the loop Navigating through MPA on page 10 View alarms and events Monitoring Alarms and Events on page 77 Table 3 1 Manage Spaces Doors and Auxiliary Connec tions such as Inputs Outputs and Output Groups Configuring Spaces on page 38 Configuring Doors on page 42 Configuring Pan...

Page 14: ... 13 Document 800 26311_ A April 2020 This page is intentionally left blank ...

Page 15: ...t be successfully configured Note Screen captures taken on a Windows 7 platform If you use another OS then the GUI might be different Table 2 1 Configuration Task Sequence To Go here Configure the System via EVL Ethernet Virtual Loop Configuring the EVL Ethernet Virtual Group on page 18 Initial panel setup Initial Panel Setup on page 27 Configuring schedules Configuring Schedules on page 34 Config...

Page 16: ...on one of the controllers Up to 16 controllers may be grouped into an Ethernet Virtual Loop The grouping is known as a Virtual Loop since the administration paradigm is similar to an RS 485 loop which is used in MPA2 and NetAXS 123 panels Figure 2 1 EVL System Diagram Note EVL is not evaluated by UL294 and UL60839 11 1 Network Requirements The controllers must be connected to a common IP sub netwo...

Page 17: ...Network settings time and selection fro the panel usage web MAXPRO Cloud or Win Pak are set here When web is selected the settings for the PRIMRY and SECONDARY panel can be done EVL is the only available mode for host loop communication Note if an MPA panel is set up in the Device Utility App as Secondary panel then the only way to access the panel is via web interface is to rest the panel with th...

Page 18: ... Navigate to the Network field on the Settings tab b Select DHCP or enter Static IP address assigned to Primary panel c Click Save The panel automatically reboots Note It is recommended to set the Primary panel as a static IP address that is different than the default address 192 168 1 150 such as 192 168 1 100 The Primary panel must be set to the same subnet as the Secondary panels in order for t...

Page 19: ... on page 6 7 Register Secondary EVL controllers see Figure 2 4 Note Only secondary panels can be Registered and Unregistered a Navigate to the EVL tab Menu Panel Configuration Advanced EVL Discovery Figure 2 4 EVL Discovery Panel Discovered panels appear automatically Panels in the loop appear here Panel status is indicated by color red offline green online ...

Page 20: ...MPA1 User Guide b Click REGISTER to register a panel The REGISTER buttons changes to UNREGISTER when the registration is successful Figure 2 5 Registered Secondary Controllers You have now finished creating an Ethernet Virtual Loop ...

Page 21: ...n data includes Schedules Cards Card Formats Holidays Access Group Name access group details are panel specific Configuration Site Codes Panel specific data includes Access Group Schedule Reader Assignments Space Door Reader Configuration Panel Configuration General Panel Configuration Firmware Version Panel Configuration Network IP addresses apply only to primary panel Panel Configuration Host Lo...

Page 22: ...the primary panel which has an on board PCI communications adapter It enables you to monitor the system status Web mode configure and monitor the web server connects to the panel and enables you to configure the panel and monitor system status Setting Communication Parameters for Host Mode 1 Navigate to Host Loop Communications Dashboard Panels Host Loop Communications or Menu Panel Configuration ...

Page 23: ...es a response either an acknowledgment or a non acknowledgment in a transmission between the host and panel s This is the recommended communications type Non Ack NAK Does not provide a response either an acknowledgment or a non acknowledgment in a transmission between the host and panel s Normally used in troubleshooting only Host IP Address Enter the host system or WIN PAK server IP address here ...

Page 24: ...t Loop Communications or Menu Panel Configuration Host Loop Communications 2 Click to select MAXPRO Cloud Table 2 3 Web Host Communication Mode Settings Host Setting Description Mode EVL If Primary provides access to Ethernet Virtual Loop Time Sync Synchronizes the primary s time with the secondary panels Enabled Time synchronizes the loop by automatically broadcasting the primary s time to second...

Page 25: ...Host Loop Communications Tab 3 Enter the Server URL 4 Click Save Initial Panel Setup You can access Panel configuration in two ways Click Panels in the Dashboard to access the Panels interface or Figure 2 9 Navigating to the Panels Interface Click Panel Configuration in the Menu ...

Page 26: ...1 User Guide Figure 2 10 Panels Interface Entering a Panel Name Note Panels can be configured only if the Host Communications is set to Web 1 Navigate to the Settings panel Dashboard Panels Settings or Menu Panel Configuration Settings ...

Page 27: ...Settings In the Panel Configuration page you can configure the following network related settings View the panels MAC Address Set network settings to Static or DHCP Configure the IP address of the panel Configure the Subnet Mask Configure the Default Gateway Scroll down to the Network section Note Note Only the primary panel will display network information ...

Page 28: ...tings Set the current time Scroll down to the Time Management section Figure 2 12 Time Management Section Configuring the Current Panel Time Between the Settings tab and the Host Loop Communications tab you can configure the following for the current panel time Settings Tab Specify the time format 12 hour 24 hour Set a new date Set a new time Set the geographic time zone Enable a time server and t...

Page 29: ...he calendar icon to select a year month and day Time Specifies a new time to be the current time Click to enter the time in Hours Minutes then click to select AM or PM if 12 hour format is selected Time Server Enter the IP address URL of the Time Server Time Server is enabled by default that the Primary will poll to update its time Enabled Select to enable the specified machine to be the active ti...

Page 30: ...pectively If disabled those inputs 1 and 9 can be used as general inputs Detect Duress Configures the output that triggers when a card holder enters a duress PIN at a keypad card reader A duress PIN is the PIN a user enters at a keypad when being forced for example during a robbery to open a door The card holder enters a PIN that is either one number higher or lower than the correct PIN This PIN o...

Page 31: ...s parameter is enabled the LED should be solid red and then turn green after two seconds by default Enabled by default Web Session Timeout Activates a web session timeout after the specified time period has elapsed Define the time period either in minutes or in hours Enter the number in the box then select either minutes 3 59 or hours 1 12 Configuring Schedules The MPA1 panel controls access by us...

Page 32: ...at begins the name for the schedule and then click to select the name 2 Click to select the desired schedule 3 Click to select the rectangle that defines the schedule 4 Drag to change the shape and therefore the days and the time of the schedule 5 Click Save to accept the changes Deleting a Schedule CAUTION Do not delete a schedule that is currently in use 1 Click to select the schedule A delete i...

Page 33: ...ring that day In the Holidays configuration window you can Create a holiday Modify a holiday Delete a holiday Click Configuration Schedules Holidays Holidays to display the Holidays window Figure 2 14 Holidays Window Creating a Holiday 1 Click in the Holidays window to add a new holiday 2 Enter a new Holiday Name 3 Click to enable disable annual repetition 4 Click the calendar icon then select a d...

Page 34: ... day extending from midnight to midnight Modifying a Holiday 1 Click to select the holiday in the Holidays list Figure 2 15 Modifying a Holiday 2 Modify the holiday 3 Click Save A message appears to confirm that the charges were saved Deleting a Holiday 1 Click to select the holiday ...

Page 35: ... Delete Confirmation message appears 3 Click OK A Successfully Deleted message appears to indicate the deletion was successful Configuring Spaces Configuring Spaces Before you can configure doors you must assign doors to a space 1 Navigating to the Spaces interface Click Spaces in the Dashboard to access the Spaces interface ...

Page 36: ...figuration in the Menu 2 Click to create a new space Figure 2 18 Creating a New Space The ASSIGN DOORS TO SPACE window opens Note If all of your doors are already assigned to space then you receive a message explaining that You don t have any doors available Therefore you cannot create a new space ...

Page 37: ...ck in the AVAILABLE DOORS pane to select the door The door appears in the ADDED DOORS pane 5 Click Save A message appears confirming the new Space Note You cannot delete a door that is assigned to an access group You must first remove that door from the access group Removing a Door from an Access Group 1 Click People Access Access Group Access ...

Page 38: ...face 2 Click to select an Access Group then click EDIT Figure 2 21 Selecting an Access Group 3 Click under Entity to expand a space and reveal the doors that belong to that space 4 Click to select a door then select No schedule assigned from the Schedules drop down menu ...

Page 39: ... For each door you must configure the readers inputs and outputs Note You must assign doors to a Space before you can configure the doors See Configuring Spaces on page 38 Accessing the Doors Configurations 1 Navigate to the Configure your Spaces tab by doing one of the following Click Menu Configuration or Click Spaces in the Dashboard ...

Page 40: ...then click a Space to open it then click on a door in that space to select it Figure 2 24 Door Configurations Configuring Door Reader Settings The Reader settings tab allows you to configure the following settings for both Readers A IN and B OUT for each door Door Name Access Modes and Schedules Anti Passback enable disable Duress Output ...

Page 41: ...dule for the following settings Disable Reader Lockdown Reader Card and PIN Card or PIN PIN only Card Only Note The order of the above list is the priority order 3 Select an Access Type if desired either SUPERVISOR or ESCORT for Card and PIN Card or PIN PIN only and Card only Note Access Type selection is optional ...

Page 42: ...ED Cycle Reaction Supervisor swipes card LED turns green for the duration of the lock output plus time Supervisor gains access but does not enable general access Supervisor swipes card again within 10 seconds of initial card swipe LED turns a steady red Enables General access Supervisor swipes card again twice consecutively LED alternates red and green Disables General access for the time zone Tab...

Page 43: ... entry A second swipe of a card at the same type of reader IN OUT causes a Soft anti passback violation but the user is allowed entry Out Applies to readers located inside the anti passback controlled area Card holders use these readers when attempting to exit the anti passback controlled area Note With anti passback limited use and trace cards do not apply In Applies to readers located outside th...

Page 44: ...s set in the Access Modes and Schedules section priority is given in the following order Disable Reader Lockdown Reader Card and PIN Card or PIN PIN only Card only Therefore the Disabled schedule has highest priority and the Card Only schedule has lowest priority Note Readers must be enabled in two places in Panel Configuration and here Go to Panel Configuration Settings Behaviour Settings tab See...

Page 45: ...gure the following settings for each door Define the Status Egress and Tamper input modes Specify the Status Egress and Tamper shunt time or the period of time the door s normal state will be ignored Specify the Status Egress and Tamper debounce time or the period of time the input must remain in its new state before it is recognized as being in the new state Specify the schedules for the Status E...

Page 46: ...he duration of the pulse time To enable Auto Relock de select the Disable check box and select the associated output from the drop down list Output Select an Output value for Auto Relock Configuration Description Shunt Time h m s Specifies the amount of time for which the inputs are shunted or de activated The maximum length of time is 1 hour 45 minutes 59 seconds You can express seconds in tenths...

Page 47: ...he LED of the Reader s in Green state via OSDP command The Outputs tab allows you to configure the following settings for the door 1 Select Discrete Output or Output Group and number 2 Define Output Name 3 Specify Pulse duration 4 Disable or Enable Latched output after valid card instead of pulse 5 Disable or Enable Interlocks 6 Disable or Enable Card activity outputs mode such as Time Zone Card T...

Page 48: ...e time zone period in which the doors are unlocked to take effect Note Effectively only if the output has a valid schedule for Energized in the section Scheduling Both TZ Card Toggle and First Card Rule cant be enabled at the same time Lock Operations Specifies the output to function in Fail Secure or Fail Safe mode in default Fail Secure mode output in normal state is not active A lock that needs...

Page 49: ...e that you can only view the group configuration from this screen The edit the Group configuration go to Panel Configuration Outputs Groups Figure 2 28 Door Output Group Configuring Inputs The Inputs tab enables you to Enter a name for the input Configure input modes including the state Configure shunt and Debounce settings Configure input schedules 1 Navigate to the Input tab Click Panel Configur...

Page 50: ...electrical circuit is wired in one path with alternative paths supervised by resistors Resistor Value Specifies the resistor values being used in the supervised modes The only available resistor value in supervised mode is 2 2K Auto Relock Causes the door to re lock immediately when the door status switch closes after entry The output relay that controls the door strike de energizes when the assoc...

Page 51: ...e period of time MIN 0 second MAX 6553 5 seconds the input must remain in a new state before generating an alarm For example with a 5 second debounce time selected if a Normal state is changed to Alarm the state must remain in Alarm for five consecutive seconds before an alarm is generated Configuration Description Shunt Schedule Specifies the time period during which the input will be ignored Dis...

Page 52: ...n code use interlock or manual pulse Interlocks Disable enable interlocks See Configuring Interlocks on page 63 for more about Interlocks Lock Operation Specifies the output to function in Fail Secure or Fail Safe mode in default Fail Secure mode output in normal state is not active A lock that needs to be powered to unlock a door will use the Fail Secure mode If the MPA1 is not powered the output...

Page 53: ...one or more groups Pulse time Disable Enable Latch Energized schedule selection Disable Interlock schedule selection 1 Navigate to the Output Groups tab Click Panel Configuration Outputs Groups Energized Specifies the period during which the output relay is automatically energized Select a schedule that you created in Entering a Panel Name on page 28 from the drop down list Disable Interlocks Spec...

Page 54: ...se Time Configure how long a device assumes abnormal status such as a horn sounding or a released door strike In hours minutes seconds Maximum time is 1 45 59 Latch Toggles the state of the outputs between energized and de energized status upon every activation code use interlock or manual pulse Energized Specifies the period during which the group of output relays are automatically energized Sele...

Page 55: ...nted with formats that do not match the Available Format s are then reported as an Invalid Format event Selected Formats Lists specific formats selected by the user from the Available Formats list that the reader should use to decipher card reads As soon as a single format is placed in the Selected Formats column the reader begins to use only the selected format ignoring any unselected formats in ...

Page 56: ...he Selected Formats list Note If you select no formats the reader will use all available formats up to 128 per pane as described for the Available Formats setting in Table 2 7 If you select a subset of formats for a given reader the reader will interpret only those formats and ignore formats that are not selected as described for the Selected Formats setting in Table 2 7 2 Click Save If you want t...

Page 57: ...hen add the card ID to calculate the card s new ID For example a 26 bit card has a site code of 123 and the card ID is 637 When the Concatenate Site Code is enabled with an exponent of 4 4 zeros are added to the right hand side of the site code The result is a final value of 1230000 This newly modified site code value is then added to the number that the panel has read as the card s ID that is 123...

Page 58: ...re on the card that odd parity is being observed Start First bit in the card where odd parity begins Num Number of bits to the right of the start bit including the start bit to include in the odd parity check CID A CID B CID C CID D Lists where on the card the Card ID A is listed Start First bit in the card where card ID begins Num Number of bits to the right of the start bit including the start b...

Page 59: ...Code 1 Click to enter a new site name Editable fields appear in the Name and Code columns 2 Enter a unique name for the site code in the Site code name field You can used letters numbers and some special characters 3 Enter a unique number up to five digits numbers only for the site code in the Code field Valid site codes are between 1 and 65535 4 Click on the check mark to the creation of the site...

Page 60: ...k causes an input point output point or group of output points to act in a specified manner when another input point output point or group of output points changes its state An action on the trigger pointcauses a reaction on the reacting component For example when amotion detector input detects movement it causes a horn output to sound On the Interlocks pane you can Create and delete interlocks En...

Page 61: ...oup Alarm Action and Normalcy the state to which the trigger returns Configuration Description Triggers Specifies the input output or output group for which a change of state will cause a reaction from another input output or group Use the drop down list to specify the number of the input or output Reaction Specifies the input output or output group that will react to a change of state from the tr...

Page 62: ...rst point No change of state Timed Shunt Ignores alarms from the input point for a specified amount of time Following are the available Output Reactor actions in the drop down lists De energize Remove energy from an output point or group On a system the normal state of an output point or group is de energized Energize The state of an output point or group Output points and groups are in a normal s...

Page 63: ...and Cards Configuring People The People tab on the People Cards interface allows you to do the following Create a person including assigning adding a card Modify a person Delete a person You can configure people to have one of the following card types with the appropriate available functionality Select from Supervisor Employee and VIP Navigate to the People tab on the People Cards window Click Peo...

Page 64: ...terface Creating a Person 1 Click to on the People tab to create a new user Figure 2 37 Creating a New Person 2 Enter a first and last name 3 Enter a card Number Or click Add near the bottom of the window to assign a card from an available set of cards 4 Enter a PIN numbers only ...

Page 65: ...the calendar If you select Limited then you must select the maximum number of times the card can be presented 8 Select an Access Type Employee Supervisor or VIP See User Access Types and Functionality on page 115 for more about Access Types 9 Click Save TIP You can assign attributes from an existing set of cards At the bottom of the People Cards window click Add to open a list of available cards t...

Page 66: ... a card allows the person access to certain doors during a certain time of day The Cards configuration interface allows you to Create cards encoded with the following information Card Number s Card Type Personal Identification Number PIN Trace Expiration Date Use Limit Note Note People can have more than one card associated to them Navigate to the Cards tab on the People Cards window Click Cards i...

Page 67: ...w Card 1 Click in the Cards tab of the People Cards window to open the configuration options Figure 2 41 Adding New Cards 2 Enter either a card number if adding a single card or a range if adding multiple cards 3 Enter a PIN if you re adding a single card See the note on page 67 for PIN number rules ...

Page 68: ...arm Events screen whenever a card with trace enabled is presented at a reader 5 Select a type of Usage a If you select Temporary then you must select from the calendar an end date for the temporary card b If you select Limited then you must enter the maximum number of accesses granted to the temporary card between 1 to 255 6 Select an Card Type Employee Supervisor or VIP Note Once a VIP card is ad...

Page 69: ... 42 Modifying a Card 2 Make the changes to the card then click Save Deleting Cards 1 Click the box next to the card A delete icon appears Figure 2 43 Deleting a Card 2 Click the delete icon A confirmation message appears 3 Click OK to confirm the deletion ...

Page 70: ...then the schedule drop down list for that reader will not be accessible Create an access group Modify an access group Delete an access group Set a Schedule for each door View other panels with readers in this access group Note Since an access group is defined by door and schedule configurations you must configure the door see Configuring Doors on page 42 people see Configuring People on page 66 an...

Page 71: ...ure 2 45 Access Group Configuration Page 2 Enter a name in the Access Group name field 3 Click to select People for this access group 4 Click to expand a space entity to show the doors and readers assigned to that space 5 Click the drop down menu to assign a schedule to that door and or reader 6 Click Save to save the new access group ...

Page 72: ... 75 Document 800 26311_ A April 2020 This page is intentionally left blank ...

Page 73: ...uts are terminals located on the panel the inputs are wired to input devices such as door position switches that monitor status of a door Outputs Output relays are relays located on the panel that are connected to output devices such as a door lock or a siren Reports Future release Download a CSV file of the People and Cards Report and an Alarms Web Events Report Download a Diagnostic Report as a ...

Page 74: ...m all panels in the loop on the same page The users do not have to go to each panel to see their individual transactions Figure 3 1 Alarms Events Window Table 3 1 Alarms Events Fields Field Description Event Alarm indicator Grey Event Gold Alarm Date Time Indicates the date and time of the event Time sort You can sort the events by most recent or most distant by clicking the up arrow next to Date ...

Page 75: ... Card Not Found Input Alarm Panel Offline Filter by Type You can filter alarms and events by the type by clicking the filter icon next to Type in the header There are 61 event types from which to choose LN Logical Device Number A unique number starting at 1 that is assigned to an alarm generating point This number is never duplicated on a Controller There is one exception to this Door Readers PN P...

Page 76: ...nt on page 30 View the current status of each output Energized De energized Pulse energize or de energize the Door Lock relay Restore the Door Lock to its schedule Navigating to the Spaces Doors tab Click to open the menu then click Device Management Card Holder Name Reports a Card Holder name on events where the Card Number is an actual card in the system Filter by Card Holder Name You can filter...

Page 77: ...t Shunt or unshunt any input Shunt an input to ignore a change of state This way you can allow a door to be held open without falsely signaling an alarm The default state of an input point is unshunted Restore the input to its schedule A schedule is a specified time period during which the input will be shunted and the alarm deactivated see Entering a Panel Name on page 28 Navigating to the Auxili...

Page 78: ... discrete outputs see Configuring Panel I O and Groups on page 52 or collectively as a group of outputs Note The Pulse and Restore to Schedule buttons only function when an output or a group has a valid pulse time or a schedule assigned On the Outputs tab you can do the following View the current status of each output in the Discrete tab Energized or De energized View the current status of each gr...

Page 79: ...page 52 and select Group when configuring the output Navigating to the Auxiliary Connections Output Groups tab Click to open the menu then click Device Management Auxiliary Connections Output Groups Table 3 2 Output Management Settings Field Description Energized Click to energize an output for an indefinite period of time De energized Click to de energize an output for an indefinite period of tim...

Page 80: ...ided In the useGround The DMU can be configured in software as Normally Closed Switched Ground is nominally closed or Normally Open Switched Ground is nominally open The Outputs tab allows you to configure the following settings Output Name Pulse time Latch and Interlock enable disable Scheduling TZ Card Toggle First Card Rule Table 3 3 Output Groups Management Settings Field Description Energized...

Page 81: ...ngs Configuration Description Pulse Specifies the duration for which the device will assume abnormal status For example it specifies how long a horn will sound or a door strike will remain released The maximum length of time is 1 hour 45 minutes 59 seconds You can express seconds in tenths of a second Latch Toggles the state of the outputs between energized and de energized status upon every activ...

Page 82: ...econd time to return the doors to a locked state Note Both TZ Card Toggle and First Card Rule cannot be enabled at the same time Appears only on door lock outputs First Card Rule Requires a valid card read within the schedule to enable the schedule period in which doors are unlocked to take effect Note Both TZ Card Toggle and First Card Rule cannot be enabled at the same time Appears only on door ...

Page 83: ...t to download filtered Alarms Events or Web Events 2 Click OK to confirm An excel spreadsheet report is generated and appears in the lower tool bar of your browser 3 Click to open the report in Excel Generating Diagnostic Reports In the File Management window you can download Card and Diagnostic reports 1 Navigate to the File Management window Click Panel Configuration Advanced File Management Fig...

Page 84: ...e saved and sent to Honeywell technical support for diagnosis 4 Click to save the file in a secure location of your choice Generating People Card Reports 1 Navigate to the People Cards page Configuration People Access People Cards Figure 3 9 Generating a People Card Report 2 Click the download button in the top right corner You see a message confirming that you want to download a People Cards repo...

Page 85: ...s Firmware Upgrades Primary Secondary Panel Replacement Use Case Scenarios Primary Secondary Panel Hard Default Use Case Scenarios Backing Up Navigate to the File Management interface 1 Select a panel from the Panel Configuration interface 2 Click Menu Panel Configuration Advanced File Management Figure 4 1 File Management Interface ...

Page 86: ...s Groups Site Codes Number of Bits Pin Info 1 Info 2 Schedules Activation Date Issue Level APB State and Control Device card values in a CSV file Note Card report short and long data is stored in a 64 bit format Microsoft Excel displays up to 32 characters Therefore you should save the report and then open it in Notepad instead of opening the report immediately in the default CSV format in Excel D...

Page 87: ...Cards Card Formats Holidays Access Group Name access group details are panel specific Configuration Site Codes Panel specific data includes Access Group Schedule Reader Assignments Space Door Reader Configuration Panel Configuration General Panel Configuration Firmware Version Panel Configuration Network IP addresses apply only to primary panel Panel Configuration Host Loop Communications applies ...

Page 88: ...ing configuration data from the Secondary panels Note The Backup file saves as a bkp file Download To Panel Following types of downloads are allowed from File Management sections Firmware bin file Card Report CSV file Backup file bkp file Firmware Download Also see Firmware Upgrades To restore or download firmware to a panel 1 Select a Panel first on which you want to download firmware from Panel ...

Page 89: ...te is successful this message appears Update Successful Restarting Access Control If the database update is not successful a message states the error condition Backup file Download Process to Restore the Entire Loop 1 Navigate to Primary Panel s Download option Panel Configuration Advanced File Management Download To Panel 2 Click Browse to locate the backup file 3 Click Download 4 Click Restore E...

Page 90: ...tion data for the specific panel and the Restore Entire Loop option will restore Card Common and Panel Configuration data to each panel in the loop Off line panels while taking back ups or restores will not be serviced Restoring any panel whose back up info is not available in the bkp file will not be restored Restoring Downloading Entire Loop 1 Click Browse to locate the firmware file 2 Click Imm...

Page 91: ...cted to the Ethernet Virtual Loop EVL The System Wide Restore in the Primary is required with an existing backup Primary Panel Replacement and System Wide Restore IMPORTANT Ensure a System Wide Backup is performed prior to replacing the Primary Panel Step 1 Power up the New Primary panel and log into the Web Interface Step 2 Hard Default the Secondary panels as they are bound to the original Gatew...

Page 92: ...Secondary panel to be synchronized Refer to the System Detail Chart Step 4 Program and add the new Secondary panels doors into the Spaces Step 5 Program the custom settings for Readers Input Points and Output Points Step 6 Perform a System Wide Backup when programming is complete Hard Default a Primary in an Existing Loop Web Mode Overview Details the synchronization process of a MPA1 Primary Seco...

Page 93: ...ondary Panel Synchronization Hard Default Step 1 Perform a System Wide Backup Step 2 Perform a hard default of the Secondary panel Step 3 Un register the original Secondary panel in the Primary panel Navigate to EVL Tab Menu Panel Configuration Advanced EVL Discovery Step 4 Navigate to the Advanced Tab of the primary panel EVL Installations Requires Manual Registration of the Secondary Panel Navig...

Page 94: ... and reboot 3 The 3rd Secondary panel will receive the backup and reboot Common data includes Schedules Cards Card Formats Holidays Access Group Name access group details are panel specific Configuration Site Codes Access control behavior during synchronization Primary Panel access control not affected Newly registered secondary panels will show online in Web Interface and will keep its existing c...

Page 95: ...data includes Schedules Cards Card Formats Holidays Access Group Name access group details are panel specific Configuration Site Codes Panel specific data includes Access Group Schedule Reader Assignments Space Door Reader Configuration Panel Configuration General Panel Configuration Firmware Version Panel Configuration Network IP addresses apply only to primary panel Panel Configuration Host Loop...

Page 96: ...ress the Reset button continuously for 30seconds While Pressing the reset button the Run LED flickers fast b Once the reset operation is complete Run LED will turn OFF and turns ON again The turn OFF and turn ON will indicate the reset operation is complete c Once it is turns ON release the Reset button d The panel is now reset to the original factory default values Resetting the Panel 1 Navigate ...

Page 97: ... release notes for more information Note The secondary downstream EVL panels should be upgraded first and then the primary MASTER Overview The following procedures provide step by step instructions for upgrading the MPA1 controller Upgrading the firmware can involve the following actions Backing up the database from each panel IMPORTANT Recommend to back up the database before and after the firmwa...

Page 98: ... return their configuration back to a downstream panel once the upgrade has been successfully completed The firmware and Operating System OS can be downloaded from the Honeywell Download Center at the following site https mywebtech honeywell com Updating the MPA1 Panel Using the Web Interface Step 1 Installing the new File 1 Navigate to the web server Panel Configuration Advanced File Management U...

Page 99: ...atest OS version 3 If you notice any communication issues and the upgrades are complete typically this means there is more than one panel set up as a primary on the active loop from the cycle power on all the panels on the loop 4 After upgrading a MPA1 panel you must clear your browser s cache See Clearing the Cache and Cookies in the Internet Browsers Used by the MPA1 Web Server for details ...

Page 100: ...www honeywell com security 104 MPA1 User Guide This page is intentionally left blank ...

Page 101: ...sers Used by the MPA1 Web Server TheMPA1 supports Google Chrome It is recommended that the cache be cleared following a successful upgrade Note After upgrading a MPA1 panel you must clear your browser s cache 1 Open your Chrome browser and click the menu button three vertical dots in the top right corner of the browser window ...

Page 102: ...ck CLEAR DATA Generating and Installing Certificates Section 1 Generating sign in request and installing certificates In order to have Google Chrome display the panel as secure it s necessary to 1 Generate a signing request 2 The Certificate Authority provides two types of certificates 3 Certificate to be installed in the panel 4 Master certificate to be installed in the browser s 5 Install the ce...

Page 103: ...Go to Advanced Menu Security Certificate tab Create Request will be selected at the top of the pane Fill in the fields as shown above Make sure that the panel IP address is in the common name field Select Create TLS Certificate Signing Request ...

Page 104: ...User Guide You will then note that there is text in the Certificate Signing Request field Copy all of the text out of this field and send it to the signing authority of your choice You will receive a signed certificate also in text format ...

Page 105: ...rtificate When the save is complete you will notice that the text at the bottom of the page reports Currently using User Certificate Section 2 Installing the master certificate into the browser When using a self signed certificate it is necessary to install the matching master certificate into all computer s browsers that access the MPA panels ...

Page 106: ...d the certificate file onto the panel but before you install the master certificate the browser will still display the broken lock Open Internet Explorer and select Tools gear icon Internet options Select the Content tab then select Certificates button in center of window ...

Page 107: ... 111 Document 800 26311_ A February 2020 Select the Trusted Root Certificate Authorities tab then select Import The Certificate Import Wizard will appear ...

Page 108: ...www honeywell com security 112 MPA1 User Guide Select Next and Browse Change the file type to All Files Then select the master signed certificate from its location on your machine ...

Page 109: ... 113 Document 800 26311_ A February 2020 Click Open to load the file Confirm Yes when this warning comes up Success ...

Page 110: ...l down the list of Trusted Root Certificate Authorities you should see the signed certificate in the list Close any Chrome windows that were open Navigate to the URL MPA Address and the login screen will appear The address bar will indicate a Lock Icon with Secure ...

Page 111: ...s View the user s current login status logged in or out There are three types of user accounts which all include different abilities and functions Table 6 1 User Access Types and Functionality Function Operator Service Administrator View alarms events Acknowledge alarms View panel I O status Control I O status Generate reports View card database Create modify delete cards View all configurations C...

Page 112: ...ounts Configuration Interface Note When creating passwords they must meet the following minimum requirements Consist of letters numbers and symbols Contain at least one character from each of the following four types lower case letters a z UPPER CASE letters A Z numbers 0 9 and symbols Contain a minimum of 8 and a maximum of 16 characters Not contain the name of the user s account type admin servi...

Page 113: ... 9 Enter a name 10 Enter a Password 11 Select an Account Type either Administrator Service or Operator See Table 6 1 on page 115 for more about these accounts 12 Enable disable the Account Status 13 Select a language 14 Click Save Modifying a User Account 1 Click to select an account in the Manage Accounts interface ...

Page 114: ...ser Guide Figure 6 3 Modifying a User Account 2 Make the changes and then click Save Deleting a User Account 1 Click to select an account in the Manage Accounts interface A delete icon appears 2 Click then click OK to confirm the deletion ...

Page 115: ...ST Following are the tech support E mail IDs of different countries USA 1 800 323 4576 Technical Support Option 2 Access Control ITALY 390399301301 UK 441344238266 SPAIN 37911238038 FRANCE 33366880142 THE NETHERLANDS 31108080688 Technical Support Option 2 Access Control EMEA ITALY hsgittechsupport honeywell com UK hsguktechsupport honeywell com SPAIN hsgestechsupport honeywell com FRANCE hsgfrtech...

Page 116: ...ide Web Support Technical Assistance https honeywellaccess com MyWebTech Customer Support https mywebtech honeywell com Schedule Support https honeywellsystems com ss schedulesupport index html Online Training https honeywelldiscovertraining com ...

Page 117: ...s Display Alert Loggin g Indication Yes No Grade 1 OP M Visual and or audible indication required when access is granted Indication Yes M Table 7 3 Access levels Yes No Grade The minimum ratio between number of possible user codes and number of allocated codes shall be at least 1 000 to 1 when system is using recognition of a valid user by memorized information only e g up to 10 users 4 digits up ...

Page 118: ... the ability of the operators to perform different functions in the system Minimum number of logical access levels is Yes M The minimum number of required characters for logical access by memorized information only shall be as indicated N numeric A alphanumeric Yes M Either failure or restoration of the communication channel shall not result in the release of an access point Yes M Failure of commu...

Page 119: ... 125 Document 800 26311_Rev B July 2020 ...

Page 120: ...is subject to change without notice Revisions or new editions to this publication may be issued to incorporate such changes For patent information see www honeywell com patents Please be aware that this product can store personal data Personal data is protected by the General Data Protection Regulation 2016 679 in Europe and therefore the owners of personal data have obtained certain rights thanks...

Reviews: