1.0 Introduction

Allegion No Tour is supported with the Allegion Schlage® Control Smart Locks, NDE or LE Series locks. The No Tour solution allows you to manage your site and its users from virtually anywhere with Keri's Confluence cloud-based app and web portal. Credentials are programmed using the MT20W USB enrollment reader which eliminates the need to physically visit the lock(s) after enrolling and editing cardholders.

• Create and configure lock profiles
• Add new users
• Enroll no-tour credentials via MT20W reader
• Manage users and basic access privileges
• View full audit history
• Fully configurable system with roles/permissions
• No-tour staff keys for an unlimited number of doors (access groups)
• Normal activation dates, never expire or expire daily
• Configurable daily Wi-Fi call in for NDE and LE locks

2.0 Setup Summary

This document takes you through the entire process of getting your system setup in the Confluence web portal and then covers the most commonly used administrative tasks.

IMPORTANT NOTE: You must follow the setup instructions in the exact order they are defined in this document to ensure a seamless and trouble-free experience.

 The following topics are covered:

1. Download and install the Allegion ENGAGE app.
2. Setup a partner account
3. Register your account and setup a new site in the Confluence web portal.
4. Check your license settings.
5. Capture the locks in the ENGAGE app.
6. Enable the required credential types.
7. Capture and setup the MT20W.
8. Sync Devices (the locks and the MT20W) in the web portal.
9. Setup access groups (using 24/7 access).
10. Assign locks to access groups.
11. Setup time schedules
12. Adding new users (cardholders)
13. Enroll credentials using the MT20W USB enrollment reader
14. Assign access rights.
15. Using the Keri Mobile App.
16. Update the locks via Wi-Fi.
17. Update the locks using the Allegion IP Gateway.
18. Changing the lock settings.
19. Update the lock firmware.
20. Important notes and troubleshooting.
    

2.1 System Requirements

• Android Lollipop (5.0) or newer. For optimum performance a flagship device from a major manufacturer is recommended:
  - Google Nexus 5X, Pixel or newer
  - LG G6 or newer
  - Moto Droid
  - Samsung Galaxy Tab 2 or newer
  - Samsung Galaxy S6 or newer

2.2 Supported Hardware

• Schlage Control™ Smart Locks
• NDE Wireless Locks
• LE Wireless Locks
  

2.3 Supported Credentials

• 13.56MHz Smart Credentials (Schlage MIFARE Classic®, Schlage MIFARE Plus®,
  Schlage MIFARE® DESFire® EV1).

2.4 Licensing

• Your system will need to be licensed for the number of Allegion locks that will be administered using the Confluence Web Portal.
  

3.0 Download and Install the Allegion ENGAGE App

1. Go to the Google Play Store on your supported Android device or the APP Store on your iOS device.
2. Search for 'Allegion ENGAGE'.
3. Tap the INSTALL button to download.
   
   
   
   
4. Then tap OPEN to open the app.

4.0 Setup a New Allegion Partner Account

After downloading, installing and opening the ENGAGE app, you will see the login window.

1. At the bottom of the screen, tap on CREATE NEW.
   
   
   
   
2. Read through and ACCEPT the terms and conditions.
3. Enter your name and contact e-mail address >> click NEXT.
4. Enter a password for your account (and re-enter) >> click NEXT
   
5. You will now receive an e-mail to verify your new account. Please click the link and
   follow the instructions.

5.0 Account Password Reset Procedure

IMPORTANT NOTE: If you need to reset your account password this can ONLY be done using the ENGAGE app.

1. On your phone or smart device, open the ENGAGE app.
2. Click on the Forgot Password link (located beneath the LOG IN button).
3. Enter your registered ENGAGE e-mail address.
4. You will see a message stating that a password reset e-mail has been sent.
5. Go to the inbox of your registered ENGAGE e-mail.
6. Click the link to reset your ENGAGE password.

6.0 Register Your Account and Create a New Site on the Confluence Web Portal

Now that you have created an Allegion partner account you will need to register this account on the Confluence Web Portal. This can be done via web browser on your PC or smart device.

1. Navigate to http://allegion.aetheros.net
2. Click REGISTER YOUR PARTNER ACCOUNT.
   
   
   
   
3. Enter your display name, your ENGAGE email address, a new site name and select your world time zone >> click REGISTER.
4. Login to the Confluence Web Portal with your user name and password.

7.0 Check the License Settings

At this point you should contact your Keri Systems sales representative as you will need to enable the number and type of locks that will be used. You will need to specify your registered ENGAGE e-mail address and the recently registered site name.

• Go to Advanced >> License to check the correct number and type of locks are enabled:

8.0 Capture the Locks in the ENGAGE App

To manage your locks in the Confluence Web Portal and mobile app you will now need to use the Allegion ENGAGE app to capture the locks.

Note: If you are adding multiple locks of the same type and within close range, you will need to know the serial number for each lock. The serial number is printed on a white label on a new lock. Do NOT throw away this white label until you have completely setup and commissioned the lock.

1. Log in to the ENGAGE app.
2. The app will open and the devices screen will appear.
   
   Note: You can click the menu icon >> Sites to check the site is displaying.
   
   
3. On the Devices screen, tap the add (+) icon - you will see a list of all device types that can be added.
   
   
   
   
4. Select either a Control lock, NDE lock or an LE lock.
5. Select to use the default settings for the lock.
6. The app will search for any locks within range (of the lock type that you selected).
7. When detected, the lock(s) serial number(s) will also be displayed).
   
   
   
   
8. Tap on the lock and the app will connect to it.
9. Verify that the reader's LED is blinking red >> click YES.
10. Enter a name for the lock >> click NEXT.
11. The lock will be added and will be displayed on the Device screen.
12. Repeat steps 3-9 for any additional locks you need to add.
    
    Note: You should skip the step to setup Wi-Fi on the lock.

9.0 Enable the Required Credential Types in the Locks

You should now go into the lock settings and enable the required credential types:

1. Tap one of the locks displayed on the device list.
2. The app will connect to the lock. While connected to the lock, the reader LED will be flashing red.
3. Go into Settings >> Advanced >> Credential Types Accepted.
4. Select the 13.65MHz credential type that you will be using.
5. Tap the save icon (in the upper right).
6. Keep pressing the back button on your smart device.
7. When you are back on the device list, you will be automatically disconnected from the lock (and the LED will be off).

Note: The supported credential types can also be edited when using the Confluence web portal.

10.0 Capture the MT20W USB Enrollment Reader in the ENGAGE App

Important Note: The MT20W will only connect via Wi-Fi to 2.4 GHz routers. It is not compatible with 5.0 GHz routers. The router must also have a minimum data rate speed of 24Mbps.

1. In the ENGAGE app go to the device screen.
2. Tap the add (+) icon.
3. Select MT20W from the list.
4. As per the on-screen notification, ensure the reader is positioned near to your Wi-Fi router - Tap NEXT.
5. The reader will be listed (the specific MT20W reader-type will be displayed).
   
   
   
   
6. Select the reader and the app will connect to it - the LED will be flashing blue - tap YES.
7. Select the Wi-Fi network to add the reader to.
8. Enter the Wi-Fi password - tap NEXT.
   
   Note: The Wi-Fi SSID information MUST be entered exactly. Any typos will result in the MT20W not making a successful connection.
   
   
9. The reader LED will be blinking blue.
10. The LED should then go solid blue (so press the blue button in the app to confirm).
    
    Note: If the reader's LED is solid red at this point then there is a network connection issue - the Wi-Fi password may have been entered incorrectly or you may have moved outside of the range of the router. If this is the case press the red button.
    
    
11. The reader will then be listed on the device list.
    
    
    
    
12. Tap the reader name and the app will connect to it - the LED will start blinking blue.
13. Tap Settings.
14. Tap Wi-Fi.
15. In the Host Configuration section: set DNS, input the URL as :
    allegion.aetheros.net and set Unsecured.
    
    
    
    
16. Tap the save icon. Once the settings have saved, tap the back button on your smart device to return to the device list.
    

11.0 Sync the Locks (and the MT20W) in the Confluence Web Portal

Now that the locks and the MT20W reader have been added to the ENGAGE app, you are ready to add them to the Confluence Web Portal:

1. Return to the Keri Web Portal - http://allegion.aetheros.net and log in with your user name and password.
2. Go to Devices >> Devices.
3. Tap the SYNC DEVICES button.
   
   
   
   
4. Within a few seconds, all the captured locks and the enrollment reader will appear.
   
   
   
   
5. The locks can now be edited, added to access groups or deleted.
   
   
   

   IMPORTANT NOTE: If you need to delete a lock, you should delete it from the Confluence Web Portal it will then automatically be removed from the ENGAGE app.

12.0 Setup Access Groups

The next steps explain how to create access groups (using the default 24/7 time schedule):

1. Go to Users >> Access Groups.
2. Click the NEW GROUP button.
3. Enter a name for the new access group.
4. The 24/7 schedule will already be selected.
5. Tap the SUBMIT button and the new access group will be created.
   
   
   
   
6. The locks can now be assigned to access groups and the access groups can then be assigned to cardholders.

13.0 Assign Locks to an Access Groups

Now that an access group has been setup and assigned a time schedule, you can assign locks to the group.

1. Go to Devices >> Devices.
2. Locate the lock/device to add to groups.
3. From the Manage drop-down, select Add to Access Group.
   
   
   
   
4. A window will appear with all access groups on the system, so select the group to assign.
5. Click BACK to return to the device list.
6. The assigned access group will then display in the lock record.

The access groups can now be assigned to cardholders.

14.0 Setup Time Schedules

As previously mentioned, there is a default 24/7 access group. You can add up to 16 schedules with the No Tour option.

The following steps explain how to setup additional time schedules to restrict when cardholders will be able to gain access at the doors.

1. Go to Users >> Schedules.
2. Click the NEW SCHEDULE button.
3. Enter a name for the new schedule.
4. Select a time when the schedule begins (Access Begins).
5. Select a time when the schedule ends (Access Ends).
6. Select the days of the week for when the schedule will be active.
7. Click the SUBMIT button.
   
   
   
   
8. The new schedule is now available to use in access group setup.

15.0 Adding New Users (Cardholders)

The following section explains how to add new users.

1. Go to Users >> Users to open the Users screen.
2. Tap/click the New User button.
3. Enter the first name and last name for the user.
4. Enter the user's e-mail address.
5. Enter a location for the user (for example; their work location).
6. Select if the user will expire daily (it will expire at 23:59:59 on the 'Activation Date' - otherwise it will expire on the Expiration Date.
7. You can instead set the user to Never Expire.
8. Optionally the user can be set to use ADA timings which will give the user an extended amount of time to go through the door.
9. Tap the SUBMIT button to create the new user record.
10. Return to the Users screen and the new user will be listed.
    
    
    
    

16.0 Enroll Credentials Using the MT20W USB Enrollment Reader

1. Ensure the USB enrollment reader is powered-up via USB (and within range of your Wi-Fi router) - the reader's LED should be solid blue.
2. Place a new credential onto the reader and leave it on the reader - the LED should go solid green.
3. Click on the display name of a user from the users list.
4. Located beneath the user details, click the ADD CREDENTIAL button.
5. The detected card number should appear in the BADGE field.
6. Tap/click the grey square to the left of 'Badge' to select the credential.
   
   
   
   
7. Next, select the credential function:
   
   Note: When you select a credential function from the list, a short description will appear informing you of how the credential will work. The default is 'Normal'.
   
   - Normal - This mode unlocks the lock momentarily (with specified relock delay period).
   - Toggle - Changes the state of the lock from locked to unlocked, or vice versa.
   - Freeze - Freezes the lock in the current state. Lock remains frozen until Freeze credential is presented again. Disables all other credentials except for Pass Through.
   - One Time Use - Allows only one Normal access per assigned lock.
   - Pass Through - Unlocks a lock momentarily, regardless of state. Overrides a lock in Freeze and Lock Down states.
   - Lock Down - Changes the state of the lock to locked and disables all credentials except for Pass Through and Freeze. Present a Freeze to return lock to normal state.
   - Block - Denies access to the lock and records the access attempt as an audit.
   - Delete with Alarm - A delete with audit/alarm credential will log an audit entry that the credential was used. However, the credential will NOT unlock the door. If an alarm is available on the lock, then the alarm will sound. This functionality is the same as the “blocked” credential type.
   - Update from Server - Update from server credential will trigger the update from server in SF210 mode irrespective of lock state. In Sf200 mode this credential will be treated as invalid credential.
   - Update From Server + Normal - Update from server+Normal credential will behave as normal credential and then trigger the update from server in SF210 mode irrespective of lock state. In SF200 mode this credential will be treated as normal credential only.
   
   
8. Click SUBMIT to assign the credential to the user.

17.0 Assign Access Rights

There are two different methods of assigning access rights to a credential: Either 'Individual Access' where you select specifically which doors the cardholder can gain access or 'Standard Access Groups' - this is where you setup different access groups by adding certain doors and associated time schedules, you then assign these access groups to the cardholders. Access rights and sector information are related to the cardholder and not to the individual credentials. If the cardholder have multiple credentials, sectors apply to all credentials. The sectors are cleared if you delete all credentials related to an cardholder.

17.1 Using Individual Access

1. On the user list, click to reveal the 'Manage' drop-down list.
2. Select 'Assign Access'.
3. Select which locks the user will have access to.
4. The Credential Sector Usage image will display a sector being allocated for each selected lock.
   
   
   

Note: As there are 11 available card sectors per cardholder you will be able to use Individual Access for up to 11 locks. If the cardholder will have access to more than 11 locks then Group Access should be used instead. One sector is then assigned per group, not per lock.

17.2 Using Group Access Assignment

1. On the user list, click to reveal the 'Manage' drop-down list.
2. Select 'Add to Access Group'.
3. A window will appear allowing you to select the access group for the user.
4. Select an access group then click the SUBMIT button.
   
   
   
   
5. The access group will now be assigned to the user.
6. In the Pending column you will see an exclamation mark within an amber circle - this indicates that the user data needs to be written to the card - so place the users credential back onto the USB enrollment reader.
7. Then present the card to one of the readers that the user has access to. The first time the card is presented the access rights will be written to the reader.

17.3   Editing Access Rights

Certain changes to access rights will be updated simply by placing the credential onto the MT20W USB reader, whereas other changes will result in a change to the database and therefore a database download will be required for each locks that are affected. Here is a list of common administrative changes that are made to access rights and whether on not the change requires a database download (lock update).

When an administrative change requires a database download the locks can be updated in one of three different methods:

1. Using mobile app (section 15)
2. If the lock has Wi-Fi, it can be scheduled for automatic updates (section 21)
3. Linking the lock to a Gateway. Update can be initiated directly from the web portal.

Note: If you remove a cardholder's access group and you are in possession of the card, you can present the credential to the MT20W reader and the credential access rights will be updated. If you do NOT have the credential you will need to visit the lock to perform an update using the mobile app.

18.0 Using the Confluence Mobile App

The Keri Mobile App can be downloaded from the Apple App Store or from Google Play (Search for 'Aetheros').

The Confluence Mobile app is used to update the locks when certain changes have been made to your system (adding or modifying access groups, credential types or time schedules).

19.0 Updating the Locks via Bluetooth

1. Once downloaded and installed, log into the app with your ENGAGE user name and password.
2. When you log in for the first time, you may get a notification that Location is disabled. If this is the case, go to the Confluence app settings on your smart device >> Set Permissions then enable Location.
   
   
   
   
3. Select your site.
4. As soon as you select the site the Mobile app will immediately scan for all locks.
5. Any locks within Bluetooth range will be listed in the app.
6. The locks that need to be updated will have a update indicator against them (orange icon).
   
   
   
   
7. To update a lock, simply connect to it and the new database settings will be sent.
   
   
   
   
8. Once updated you will be on the device information screen.
   
   Note: With the Mobile app you will only be able to change the name of the lock (all other settings are read-only).
   
9. You can now disconnect from the lock to return to the device list. The disconnect icon is in the top right corner.  
   
   
   
   
10. Connect to any other locks that also need to be updated.

20.0 View the Lock Information via Bluetooth

Once you have connected to a lock you will be on the device information screen. On this screen you will be able to view information such as; Bluetooth signal strength %, battery voltage level, firmware version, model and serial number, etc. You can also unlock the lock from this screen.

21.0 Unlocking the Doors via Bluetooth

Perform the following steps to perform an unlock:

1. From the device list tap the lock you wish to unlock.
2. You will have 2 options to chose from: Unlock and Connect, select Unlock.
3. The Mobile app will connect to the lock and will unlock it.
   
   Note: as mentioned in the previous section you can also unlock from the device information screen.

22.0  Update the Lock via Wi-Fi

Once the lock has been configured with a Wi-Fi connection you can configure the lock in the web portal to be updated twice a day. The following steps explain how you can setup a lock to be updated at 09:00 and again at 19:30. Refer to the Allegion ENGAGE app user manual for information about configuring a lock with a Wi-Fi connection.

1. From the web portal, go to Devices >> Devices to display the device list.
2. From the lock's Action drop-down list select Edit.
   
   
   
   
3. The lock settings screen will appear.
4. In the lower-right side of the screen, locate the Database download time section.
   
   
   
   
5. Select 09:00 as option #1 (time of the first download).
6. Select 19:00 as option #2 (time of the second download).
   
   
   
   
7. Click the SUBMIT button.
8. The changes will be written to the database but you will still need to do an update to initially send this change out to the lock. See previous and next sections for the manual download methods.

23.0 Update the Locks using the Allegion IP Gateway

Certain database changes will require a 'door file update', for example, changes to access rights or removing access rights from a cardholder. The following steps explain how to update the locks via the Gateway:

1. From the device list in the web portal, click on the Gateway entry.
2. Click on the Allegion Gateway.
3. The device screen will appear and the linked devices will be listed.
4. Use the drop-down list for a lock that requires an update.
   
   
   
   
5. Select Sync Database from the list. Status indicators will inform you of when the update has completed.
6. Once update is complete the pending update indicator will disappear.

24.0 Change the Lock Settings

There are various locks settings available but the available settings are determined by the lock type you are using. Perform the following steps to change the NDE lock settings:

1. Go to Devices >> Devices to display the full list of locks on your system.
2. From the drop-down list to the right of the lock, select Edit from the drop-down list.
3. The lock settings screen will appear.
   
   - Name - Allows you to change the name of the lock.
   - Location - Allows you to enter a location for the lock.
   - Model - Displays the exact model of the lock.
   - Serial Number - Displays the specific serial number of the lock.
   - Lock Function - Displays the current operating mode for the lock.
   - Relock Delay - Specifies the unlock time.
   - Relock Delay (ADA) - Specifies the unlock time for ADA-enabled credentials.
   

25.0 Update the Lock Firmware

To update the firmware on the lock you will need to use the ENGAGE app and the lock will need to be configured with a Wi-Fi connection.

1. Log into the Allegion ENGAGE app.
2. Tap on 'IN RANGE' and all devices within Bluetooth range will appear.
3. Tap the lock that you wish to firmware upgrade.
4. Click on SETTINGS.
5. The app will connect to the lock via Bluetooth.
6. Locate the GENERAL section and tap Wi-Fi.
   
   
   
   
7. Enable Wi-Fi for the lock.
8. Use the Add Network drop-down list to select your local Wi-Fi network.
9. Ensure Security is set to WPA2.
10. Enter the password for the Wi-Fi network.
11. Save the lock settings (icon in the top right corner).
12. Press back to return to the previous screen.
13. Click the Update Firmware option.
14. The current firmware version will be displayed.
15. Tap the UPDATE button.
16. You will see a notification that the firmware file is too big to send over Bluetooth, so click YES to update via Wi-Fi.
17. The app will connect to the lock via Wi-Fi... tap the SEND button when it becomes available.
18. The firmware file will then download. It should take approx. 2 minutes for the firmware upgrade to complete.

26.0 Deleting a Lock

Important Note: If you need to delete a lock you should delete it from the web portal and NOT from the ENGAGE app. The ENGAGE app is only requires for initially capturing and commissioning the locks.

27.0 FAQs and Troubleshooting

27.1 The MT20W is not connected via Wi-Fi

If the MT20W is displaying a red LED this indicates that it is not connected to the Wi-Fi network. If this is the case, check the following:

• Ensure the Wi-Fi password has been entered exactly. Note that the Wi-Fi password is case-sensitive.
• Ensure you are connecting to a 2.4GHz Wi-Fi network. The MT20W is NOT capatible with a 5.0GHz Wi-Fi network.
• Check that the reader is within range of the Wi-Fi network.
  

27.2 The Update Indicators in the Web Browser are not Clearing

• If you update locks or a credential but the update indicator is not clearing in the web browser, try using a different web browser. The recommended Web Browsers for the web portal are: Mozilla Firefox and Google Chrome.

27.3 What is the Correct Procedure for Deleting the Hardware?

• If you are deleting a lock or the MT20W reader, you should delete it on the Web Portal and not from the ENGAGE app. If you delete the lock via the ENGAGE App it will not be deleted from the Web Portal. Deleting the lock or the MT20W via the web portal will delete it from the Web Portal AND from the ENGAGE app.
  

27.4 How is the Firmware Updated on a Lock?

• The firmware on a lock can only be updated using the ENGAGE mobile app and via a Wi-Fi connection to the internet.

27.5 The Cardholder is Not Gaining Access

• Verify that the cardholders is assigned a valid access group.
• If the credential is temporary, ensure that it is not past the expiry date.
• Ensure that the credential has been updated. After enrolling a credential or modifying it you must present it to the MT20W reader and wait for the reader to beep 3 times.
• Does the lock require an update? Certain administrative changes, such as: creating new access groups will require you to update the locks - see section 19.3 for a full list of changes that require the locks to be updated.

27.6 I am Being Prompted to Sync my Locks After Updating the Mobile App

If you have updated your app and you are then getting a notification that the locks are out of sync with the database you do NOT need to manually visit the locks to update them. You simply need to re-open the app and sync the lock database with the database on the Cloud.

• Click here to download a standalone PDF of this article.