Borealis FAQs

Borealis FAQs

1.0 General Borealis Questions

What is Borealis?

Borealis is Keri Systems’ cloud-based access control system. Borealis gives you complete visibility and control of your system from any computer, tablet or mobile device that has a web browser and an active internet connection.

By using Borealis you will not need a local server or dedicated PC, you will not have to install any kind of software and you will never have to do any kind of software updates – but you will always be running the most up-to-date version.

What Can Borealis Do?

  • Provides complete visibility and control of your system from any PC or smart device that has a web browser and an active internet connection.
  • No dedicated PC is required.
  • No software to install and no future updates required. You will always be running the most up-to-date version.
  • Automatically backs-up and safely secured system database on the Cloud so there's no danger of ever losing the system database.
  • Multiple sites can be added to the same system and can be administered from the single interface – from anywhere in the world.
  • Works with the NXT family of hardware  – including NXT-Mercury-Powered controllers (NXT-MSC). Also works with Keri PXLs and Entraguards and True Mercury (EP, LP and MP controller types) as well as supporting sub-modules, such as the MR52, MR16IN/MR16OUT, MR51E and MR62E.
  • Borealis now supports Dual Verification when using Wiegand combination reader/keypads.
  • Borealis also supports Site Lock/Unlock allowing you to immediately lock/lockout or lockdown or unlock all doors on a site via buttons in the UI or from a dedicated hardware input.
  • Borealis also offers Automation Rules which is akin to the Local Linkage feature in Doors.NET - it allows you to setup an infinite array of custom functions that extend the capability of your system - for example; you can lockdown all readers on a controller from access granted by a specific cardholder or you can activate multiple outputs from a specific input. User groups can also be assigned to cardholders to define which Automation Rules they are allowed to trigger.


What Can Borealis Not Do?

  • The Borealis interface is not used alongside Doors.NET (like Visual Doors and the Keri Systems Client).
  • Borealis is not a replacement for Doors.NET - It is a separate stand-alone product with its own applications and feature set.
  • Certain advanced features are not available in Borealis. For example: Situation Manager, Anti-Passback (with certain controller types), Global Linkage or Allegion wireless lock integration. These advanced features still require Doors.NET. Dual Verification is an available feature.
  • Borealis is not an updated version of Doors.WEB. It is a full featured access control system.
  • Borealis does not currently support the use of Neutron controller types.


Is Borealis easy to use?

Yes. Borealis is extremely easy to setup and use. Borealis enhances the Security Application experience by simplifying previously complicated tasks, delivering global accessibility, scalability and convenience.

Is there an app that can be used with Borealis?

Yes, the main Borealis user interface is browser-based - but is accessible with any smart device or PC that has an internet connection and has a web browser installed but there is also the Borealis Connect app which allows you to add new controllers (using a QR code that is printed on the controller) and also allows you to lock, unlock or temp unlock any doors on the selected system plus masking of inputs and activating outputs.
 
Credentials can also be quickly and easily de-activated.

Can I see a demo of Borealis?

A Borealis overview video can be found on the Keri Systems YouTube channel:

https://youtu.be/smo3frrdfyU

In addition, you can contact Keri Systems Inside Sales and someone will be more than happy to arrange a remote demonstration of the system features and options.

What integrations are supported with Borealis?

 Borealis integrates with Geokey. Click here for further details about this integration.

Where do I access Borealis?

You access your Borealis system, or register for a new Borealis account at: 
keri-aetheros.net  

2.0 Borealis Hub Questions

Does the hub need to be connected to a DHCP network?

Yes, the Borealis hub MUST be connected to an internet-enabled DHCP network.

Can I use a hub to administer the system?

No, you should not use the hub as a client for administering your system. The hub is only designed as a communication device between the Cloud and the field hardware.

Can I use multiple hubs on a Borealis system?

Yes, multiple hubs are used in Borealis when the total number of doors exceeds 32 or if you will be using different controller types.

How does the Borealis hub use a secure Internet connection?

The Hub doesn't accept any incoming connections.  Communications between the hub and the AWS servers are established over SSL (port 443) via direct https request and SignalR.  Not accepting incoming connections and the use SSL encryption are industry standard methods of ensuring internet security.

What other security is there on the hub?

The following document outlines the Borealis system security:
  1. https://borealis.kerisys.com/portal/en/kb/articles/borealis-security-faqs

How and when is the hub updated?

The hub is automatically updated whenever a new update package is released. Within Borealis, if you click on Systems Settings from the main menu on the left you will see the 'Hub Update Period' settings. This is the times between which the hub will be scheduled to update.

How long does it take for the hub to initially update?

After successfully claiming a hub it will take approximately 3-5 minutes for the hub to complete its initial update. Once the hub status shows 'Update Completed' click the hub's name and you will see timestamps of when the hub received its initial update.

If the network has all controllers on the same subnet, do I need more than one hub?

If all controllers are of the same type and are on the same network as the hub then you would only need one hub. More than one hub will only be required in this scenario if the system exceeds more than 32 doors.

What is the correct method for powering-down the hub?

If the hub needs to be down-powered this should be done via a single press of the power-switch.

Note: You do NOT need to (and should not) keep the power-switch held down.

Why would a claimed hub keep going offline then back online?

If the hub has been successfully claimed but keeps going online/offline this indicates that the hub subscription has not been paid for. Contact Keri Systems Sales if you need to process a Cloud subscription payment.

Can hubs on different subnets be added to the same site?

Yes, hubs in different locations and different subnets can be added to the same site. The individual hubs will communicate only to the controllers on their local network/subnet.

Does each hub need its own site?

If all controllers are of the same type and located in the same world time zone then you can add hubs to the same site. A separate site should be added if the system has different controller types or if the controllers are in different geographical locations.


3.0 Borealis Controller Questions

What controller types are supported?

Borealis supports the following controller types:
  1. Standard NXT (2-door and 4-door)
  2. Keri KB (2-door and 4-door)
  3. NXT-Mercury-Powered (MSC) - (2-door and 4-door)
  4. True Mercury (EP, LP and MP series), plus their supporting sub-modules such as MR52, MR16IN, MR16OUT, MR51E and MR62E.
  5. PXL and Entraguard 

Can a USB-Serial Adapter be used to Communicate to a PXL Controller?

No, in Borealis the only supported communication method to a PXL controller is via Ethernet (so a LAN-520 module is required) which connects to the primary PXL (controller number 1).

How do I add a controller to Borealis?

The quickest and easiest way to add any controller type to Borealis is via the Scan function accessed from the Hubs screen. Click on Hubs from the main menu and then click on the Scan button location on the right. After a few seconds the detected controllers will be displayed. To add the controller, place a checkmark against the controller, enter a controller name, enter the static IP address you wish to assign (if you are adding Standard NXT or KB controllers) - other controller types will already have an assigned DHCP address, then click on the CLAIM button. The controller will be added and if you click on Controllers from the main menu you will see the controller listed.

Refer to the following documents for specific setup instructions for each controller type:

​

Will the controllers still function if they go offline? (i.e granting access and unlock the door)

Yes, once the controllers have been sent their access control database, they will continue to provide full access control functionality even even the controller goes offline. 

What can't I do if the controller goes offline?

The only system functions you will not be able to do is retrieve the controller status, lock or unlock the doors from the user interface or view system events from the controller. When the controller is back online these functions will resume and the buffered events will also be collected from the controller's memory (for running reports on the system activity while the controller was offline).

Do the controllers need to be connected to a DHCP network?

Yes, the controllers should be on the same DHCP network as the Borealis hub. However... it is only the NXT-MSC controllers that use a DHCP address. The Standard NXT controllers, in their factory state, will not have an IP address and so a static IP address will need to be assigned using the Scan feature. The Standard NXT controller's IP address will need to be on the same range as the hub's IP address (found in the hub details which are shown when you click the hub's name on the hubs page).

Does Borealis support different controller types on the same system?

Yes, you can use different controller types on the same system but each controller type will require its own hub. (One hub for NXT controllers and a second hub for NXT-MSC controllers).

Can I upgrade the  firmware on a controller?

Yes, the ability to update the controller firmware is supported for both NXT and  NXT-MSC controller types. PXL and Entraguard firmware updates require a physical chip to be changed.

If I delete a controller will the events be lost?

No. If a controller is deleted you will still be able to retrieve the event history for the controller.

What happens if a controller needs to be replaced?

In the unlikely event that a controller ever needs to be replaced, there is a defined replacement procedure in the user interface that means the replacement controller will function the same as the original. You will not need to add the replacement controller's readers back into the access rights. Once the replacement controller comes online you will just need to do a memory reset.


4.0 Borealis Reader Questions

What reader types are supported?

  • Keri NXT (and NXT Exit readers when using NXT-MSC controllers)
  • Keri MS
  • Wiegand readers
  • OSDP readers (on NXT-MSC and True Mercury controllers only)


What is the maximum number of readers allowed on Borealis?

The maximum number of standard readers is 32 per hub .

Note: NXT Exit readers (supported on the NXT-MSC controllers are NOT included in this count). If your system requires in excess of 32 readers you would need to add an additional hub. Each hub supports up to 32 door and  if every door has an NXT Entry and an NXT Exit reader then up to 64 readers can be used.  An additional hub is also required if the controllers will be on different subnets or in different world timezones.
​

Can keypads be used in Borealis?

Yes, Wiegand keypads (such as the P-640H) can be used for card-only or Card + PIN functions on Standard NXT controllers or NXT-MSC controllers. In addition... if you have Card + PIN setup in Doors.NET a database conversion will include the reader and cardholder Card + PIN settings.
​

Can BioSync fingerprint readers be used in Borealis?

Yes, the BioSync readers are a type of Wiegand reader so can be used in Borealis.

Are OSDP readers supported in Borealis?

Yes, you can use a single OSDP reader per controller bus (supported with NXT-MSC and True Mercury controller types.

Can NXT Exit readers be used in Borealis?

Yes.  NXT Exit readers are fully supported in Borealis when using NXT-MSC controllers. For further details about setting up an NXT Exit reader, click here: 


5.0 Borealis Module Questions

Can 4x4 modules be used in Borealis?

Yes, NXT 4x4 modules can be used in Borealis but currently the functionality is restricted to only allowing outputs to be controlled. Very soon you will also be able to use basic I/O control and you will also be able to configure door functions on the 4x4 modules (such as a RTE input, door contact and door strike).

Can NXT GIOX modules be used in Borealis?

No, the NXT GIOX module is now an obsolete product and can only be used in on an existing system with a supported version of Doors.NET.

Can Mercury MR16 modules be used in Borealis

Yes, Borealis supports the use of Series 2 and Series 3 MR16IN and MR16OUT modules. They can be used with Mercury EP controller and LP controllers and also with Keri's NXT-MSC controllers.


5.0 Borealis System and Organization Questions


How do I create a new system?

Currently all new systems are setup by Keri Systems. Once you have registered a new account simply give Keri sales a call and a new Borealis system will be created. You will then be able to login and claim the system hub and then the controllers.

What are the client PC/device requirements?

The client PC requirements for using Borealis are as follows:

Desktop web browser (Version must be no older than three years):
  • Edge
  • Chrome
  • Safari
  • Firefox


Mobile device web browser (Version must be no older than three years):

  • Chrome from Android
  • iOS Safari
  • Firefox for Android

Is an organization needed for setting up a system?

An organization is required for all companies that are tax exempt (as are most installation companies) and organization is also useful for grouping multiple sites. However, creating an organization is NOT a requirement for setting up a new system.

How will I know when my organization has been approved?

You will receive an e-mail to notify you when your new organization has been approved. This notification should be received within 1 working day.

Can I create a new system before the organization is approved?

No, if you will be using an organization then you MUST wait for the organization to be approved before you setup a new system.

How do I update my system?

There is no manual updating required for your Borealis system. The hub contains a built-in, automatic updating service that will retrieve and install all new system updates as and when they are required.

How Do I Backup a Borealis System?

There is no need to. One of the main benefits of a cloud based-access control system is that the system a database is backed-up constantly and is stored safely and securely and backed-up multiple times. 

6.0 Borealis Credentials and Enrollment Questions

What is the maximum number of credentials in Borealis?

A Borealis system can support up to 50,000 credentials (using multiple hubs). There is a maximum capacity of 10,000 credentials per hub and 10,000 credentials per controller.

Are multiple credentials supported?

Yes,  each cardholder can be assigned multiple credentials - even credentials of different formats.

Does Borealis support MIFARE credentials?

Yes, Borealis supports MIFARE credentials – reading the Card Serial Number (CSN). It does not support the reading of MIFARE sectors. Desfire EV1 and EV2 CSN can also be used. The difference between Mifare classic and EV1 & EV2 is that the later has encryption and the CNS is harder to clone.

Does Borealis have custom Wiegand formats included?

There are several popular credential formats available by default, as well as the default supported credential formats. Including: HID 34 and 37 bits, Mifare 32 and 56 bits CSN, HID corporate 1000 formats, RAW Wiegand format and 26-bit Wiegand H10301.

Does Borealis allow custom Wiegand formats to be added?

There are several popular credential formats available by default, as well as the default supported credential formats. If you need to add a new format that isn't currently added to Borealis you will need to forward the credential details to Keri Systems tech support to evaluate and add the format. There is a form on the kerisys.com website that allows you to submit details of a new Wiegand format:

https://kerisys.com/borealis-credential-type-request/


How do I enroll NXT, Keri MS or 26-bit Wiegand credentials into Borealis?

The following document on the knowledge base explains how to enroll cardholders and credentials into Borealis. Use the knowledge base to learn more about other administrative functions.
  1. https://help.kerisys.com/portal/en/kb/articles/enrollment

How do I enroll MIFARE Credentials?

If you are enrolling MIFARE credentials and you do not know the Card Serial Number (CSN) you should first present the credential to one of the readers on the system. The unique CSN will then be displayed in live events. This unique number should be enrolled as the imprint and the select format should be ‘RAW’.

Is presentation enrollment or block enrollment supported?

Yes, credentials can be enrolled into Borealis using Manual Enrollment, Block Enrollment or Presentation Enrollment. Block Enrollment and Presentation enrollment are accessed via the Live Events screen.

Is there a cardholder or credential mass edit feature in Borealis?

Yes, Borealis does have a credential mass edit feature - this allows you to assign the same access group to a selected group of credentials.

7.0 Borealis Access Rights Questions

Why are access groups referred to as access rights in Borealis?

There is a difference in how access settings are handled in Borealis versus DNET.  Access Group in DNET covers all controller types with the same schedule.  Access Rights in Borealis is on a per site basis with different schedules and hardware per site. We chose to use Access Rights because as the access control industry evolves, so too does the terminology. The change to using access rights is reflective of what is nowadays most commonly used in the industry to reflect when and where cardholders have the rights to gain access.


Can I assign multiple access rights?

Borealis allows you to assign one access right per site. Additionally, if you have more than one site and a cardholder requires access across multiple sites ten you must therefore assign multiple access rights to the cardholder.

8.0 Borealis Operator Questions

How many concurrent system operators are allowed?

Borealis supports all registered and added operators to be logged in to a system concurrently (as long as they are all logged-in with different accounts). There is no additional charge for multiple system operators.

Is it possible to run an audit report on operator actions?

Yes, Borealis does have the ability to run a report on the actions that were performed by an operator while they were logged into the Borealis user interface. Further details can be found in the following document:
  1. https://borealis.kerisys.com/portal/en/kb/articles/operator-audits
    ​

9.0 Borealis User Interface Questions

Is it possible to edit the dashboard in the new user interface?

No, currently it is not possible to custom-design the layout of the dashboard in the new user interface - but this is scheduled to be part of a future release.

How do I find out more about using Borealis?

The best place to begin is on Keri's Borealis knowledge base:kjjh
  1. borealis.kerisys.com

10.0 Borealis Conversion Questions

Can I convert a Doors32 system to Borealis?

Yes, there is now the ability to convert a Doors32 PXL and/or Entraguard system to Borealis. The conversion will successfully import all your controllers and door information, cardholders and credentials, access rights, time schedules and holidays. The main thing to be aware of is that Borealis only supports an Ethernet connection to the PXL and Entraguard primary controllers (secondary controllers still communicate to the primary controller via an RS-485 network). Serial connections are not supported in Borealis. If your system currently uses a Serial connection then a LAN-520 will need to be purchased to enable an Ethernet connection to the controller.

Note: Some of the much older Entraguard controllers do not support a LAN-520 module.
​

Can I convert a Doors.NET system to Borealis?

Yes, there is a conversion procedure that allows a Doors.NET system to be converted to a Borealis  system.  Further details can be found here:

https://help.kerisys.com/portal/en/kb/articles/doors-net-to-borealis-database-conversion-procedure

Note: Borealis does not currently support each and every feature and settings that is in Doors.NET (mainly due to the length of time Doors.NET has been in development) - features such as Photo ID, Global and Local Linkage and Emergency Global Lock and Unlock. So please check with Keri's sales team if you are unsure which system features are currently in use.

What is included in a database import from Doors.NET to Borealis?

The database import will include the cardholder names and assigned credentials, PIN numbers (if Card + PIN is used), active/inactive card status and temp card settings - plus access group names and assignments (as long as the cardholders in Doors.NET are not assigned more than 1 access group). The database import also includes controllers and controller settings, readers and reader settings, time schedules, access groups, holidays and custom credential formats.

How long is the access control system down during a Doors.NET-to-Borealis conversion?

During a Doors.NET to Borealis conversion the actual system downtime is exceptionally minimal (a few minutes at the most). This is aided by the fact that the controllers are fully functional even when they are not connected to Doors.NET or the Borealis Cloud application.

What is the correct procedure for upgrading a Doors.NET system to Borealis

Here is a video on our YouTube channel that explains the steps that are taken when converting a Doors.NET system to Borealis.

  1. https://youtu.be/KjHf_l-LYMQ


    • Related Articles

    • Borealis Security FAQs

      Frequently Asked Borealis Security Questions What security software is enabled/pre-installed on the hub? A Firewall is installed and enabled on the hub. · What is the transport security for a Borealis system? Borealis Cloud is fully deployed under an ...

    • Borealis Troubleshooting Guide

      1.0 Borealis System Troubleshooting Cannot view the System - This is most likely caused by the registered account not being added as a system operator. Once an e-mail has been registered and verified, that e-mail address should then be added as a new ...

    • Borealis Overview

      1.0 Introduction The new Borealis Cloud user interface is a completely new and re-designed front end for Borealis. It is extremely easy to learn and operate and allows you to quickly and easily find all your access control data - all in one place. ...

    • Borealis - System Configuration

      Configure the Borealis System The following sections explain how to perform common administration tasks in Borealis, such as cardholder editing and enrollment, setting up and assigning access rights, setting up and editing time schedules and editing ...

    • Entraguard Compatibility With Borealis

      1.0 Introduction When using an Entraguard controller as a primary controller (addressed as number 1), the communication method must be ethernet. Borealis does not support a serial or modem connection to any controller types. The Entraguard ...