1.0 Introduction

This document explains how to setup the Dual Verification feature when using a Wiegand keypad. Dual Verification allows the reader to only grant access following a valid card read and then entering the correct PIN. Dual Verification is supported on the Standard NXT, Keri KB controllers, NXT-MSC and True Mercury controllers.

Notes:

1. Standard NXT and KB controllers do not support Card OR PIN or the PIN Only setting.
   Card AND PIN is supported.
   
2. NXT-MSC controllers support Card AND PIN, Card OR PIN and PIN Only.
   
3. NXT-MSC controllers require unique PINs to be used. 
   
4. Keri recommends allowing the Borealis system to generate unique PINs to eliminate the possibility of using common-used PINS which are easy to guess.
   

Dual Verification can be configured to operate 24/7 or only during certain times or on certain days of the week.

This document explains how to configure and enable the Dual Verification feature, how to add a PIN to a cardholder record, and finally, the document explains how you can change the reader operating mode.

Dual Verification is enabled per site and also at the specific readers/keypads.

2.0 Enable Keypads for the Site

1. From the Borealis main menu, click on Sites.
   
2. From the Actions drop-down list for the site, select Edit.
   
3. Verify there is a checkmark against the 'Enable Keypads' option for the site.
   
   
   

3.0 Configure Dual Verification in System Settings

Next, you must configure the PIN settings for the system. 

Important Note: You will not be able to change PIN settings when there are existing cardholder records that have PINs assigned. For example, you will not be able to change from Per Cardholder to Per Credential and you will not be able to increase or decrease the Max PIN digit values when there are existing PINs in the system database.

1. From the Borealis main menu, select System Settings (near the bottom of the list).
   
2. The system settings form will appear.
   
3. For the PIN settings, set the level to either 'Per Cardholder' or 'Per Credential'.
   
   
   
   
   
   
   
   
   
   No PIN - This is essentially the same as disabling the PINs for the system.
   
   
   PINs Per Cardholder - If the cardholder has multiple credentials they will all use the same PIN - because the PIN is applied to the cardholder.
   
   
   PINs per Credential - If the cardholder has multiple credentials then each credential will be assigned its own PIN - Because the PINs are applied to each of the credentials.
   
   
   
   
4. Require Unique PINS MUST be set to True when using NXT-MSC controllers. This controller type supports the use of PIN only - and unique PINs will ensure access is accurately recorded in the system if PIN only is in use.
   
   Note: Using unique PINs is the recommended option for all hardware types as this eliminates the possibility of using common-used PINS which are easy to guess.
   
   
5. Set the maximum number of PIN digits to be used. Valid selections are 4 - 15.
   
   
   
   
6. Click the SAVE button to apply the settings to the system.

4.0 Enable the Keypad Option for the Reader(s)

1. From the Borealis main menu, select Hardware >> Readers.
   
2. The list of all readers on the system will appear.
   
3. Locate the reader that you wish to edit.
   
4. Use the reader's Action drop-down list on the right and select Edit.
   
5. The reader Edit form will appear.
   
6. Place a checkmark in the Enable Keypads option.
   
   
   
   
7. Set the Dual Verification time schedule. This is the time period during which the Card + PIN function will operate.
   
   Important Note:  A valid dual verification time schedule is a mandatory requirement when using the Standard NXT controller type. NXT-MSC controllers can use the Card + PIN function without using a dual verification time schedule. When using a dual verification time schedule with NXT-MSC controllers, this time zone will override other reader settings (such as disabling the reader). When using NXT-MSC controllers, Card + PIN will ALWAYS function within the assigned Dual Verification time schedule.
   
   
   
   
8. Click the SAVE button to save the reader settings.

5.0 Creating and Using Unique PINs

5.1 Ensure System Settings has Unique PINs enabled

1. In Borealis, click on the System Settings menu option.
   
2. Verify that PIN level is set to Per Cardholder or Per Credential.
   
3. Ensure 'Require Unique PINs' is set to Yes.
   
4. Verify the correct number of PIN digits is set.
   
   
   

5.2 Create a Unique PIN for a cardholder

1. From the Borealis main menu, click on Cardholders.
   

2. A cardholder list will display.
   
   
3. Locate the cardholder that you wish to edit (you can use the filter option to search for the cardholder first or last name.
   
   
   
   
4. For the selected cardholder, use the Actions drop-down list and select Edit.
   
   
   
   
5. The cardholder edit form will appear.
   
6. Currently, the cardholder's PIN field will be empty.
   
7. Place a checkmark in the Regenerate Unique PIN option.
   
8. Click the SAVE button to save the cardholder record. The new, unique PIN will be created.
   
9. Re-open the cardholder edit form and you will see the new, unique PIN.
   
   
   

6.0 Setting the Reader Mode

Important Note: If you are using the NXT-MSC controller type, it is also possible to set the mode to Card OR PIN or PIN only (these 2 modes are ONLY supported with the NXT-MSC controller type and require Unique PINs for all cardholders.

1. In Borealis, from the main menu, click on Hardware >> Readers to display the readers.
   
2. Place a checkmark against the reader you wish to configure.
   
3. Use the command button to set the reader to Card + PIN.
   
   
   
   
4. Click CONFIRM to go ahead with changing the reader mode.
   
5. The reader will now be in Card + PIN mode.