Niagara Enterprise Security · – Manage a large dynamic workforce – Synchronize access in...
Transcript of Niagara Enterprise Security · – Manage a large dynamic workforce – Synchronize access in...
![Page 1: Niagara Enterprise Security · – Manage a large dynamic workforce – Synchronize access in multiple systems • Manage Large Dynamic Workforce – Hospitals – Schools – Cities](https://reader033.fdocuments.us/reader033/viewer/2022042012/5e72a8666aabc03eca0e12b1/html5/thumbnails/1.jpg)
![Page 2: Niagara Enterprise Security · – Manage a large dynamic workforce – Synchronize access in multiple systems • Manage Large Dynamic Workforce – Hospitals – Schools – Cities](https://reader033.fdocuments.us/reader033/viewer/2022042012/5e72a8666aabc03eca0e12b1/html5/thumbnails/2.jpg)
2
Niagara
Enterprise
SecurityJayashree Madanala, Tridium
Laura Kevitt, Tridium
![Page 3: Niagara Enterprise Security · – Manage a large dynamic workforce – Synchronize access in multiple systems • Manage Large Dynamic Workforce – Hospitals – Schools – Cities](https://reader033.fdocuments.us/reader033/viewer/2022042012/5e72a8666aabc03eca0e12b1/html5/thumbnails/3.jpg)
3
Speakers
Jayashree Madanala - Tridium
Technology Specialist
• 11 years in Software Industry
• Niagara Enterprise Security
developer
– LDAP integration
– PhotoID integration
– Platform Migration AX-N4
– New Technologies
Laura Kevitt – Tridium
Senior Product Manager
• 30 years in Buildings Business
– Automation
– Control
– Security
– Fire
• Manage Niagara Enterprise
Security product
![Page 4: Niagara Enterprise Security · – Manage a large dynamic workforce – Synchronize access in multiple systems • Manage Large Dynamic Workforce – Hospitals – Schools – Cities](https://reader033.fdocuments.us/reader033/viewer/2022042012/5e72a8666aabc03eca0e12b1/html5/thumbnails/4.jpg)
4
Agenda
LDAP Integration
Database Integration APIs
Replacing a Security JACE 6 with a JACE 8000
![Page 5: Niagara Enterprise Security · – Manage a large dynamic workforce – Synchronize access in multiple systems • Manage Large Dynamic Workforce – Hospitals – Schools – Cities](https://reader033.fdocuments.us/reader033/viewer/2022042012/5e72a8666aabc03eca0e12b1/html5/thumbnails/5.jpg)
5
LDAP Integration
Why LDAP Integration?
LDAP Introduction
LDAP Servers
Demo
![Page 6: Niagara Enterprise Security · – Manage a large dynamic workforce – Synchronize access in multiple systems • Manage Large Dynamic Workforce – Hospitals – Schools – Cities](https://reader033.fdocuments.us/reader033/viewer/2022042012/5e72a8666aabc03eca0e12b1/html5/thumbnails/6.jpg)
6
Why LDAP Integration?
• Single “Source of Truth” for managing Physical and Logical Access
– One point of entry
– Quickly remove access during layoffs
– Manage a large dynamic workforce
– Synchronize access in multiple systems
• Manage Large Dynamic Workforce
– Hospitals
– Schools
– Cities
LDAP
HR IT
ACS
ACS
ACS
![Page 7: Niagara Enterprise Security · – Manage a large dynamic workforce – Synchronize access in multiple systems • Manage Large Dynamic Workforce – Hospitals – Schools – Cities](https://reader033.fdocuments.us/reader033/viewer/2022042012/5e72a8666aabc03eca0e12b1/html5/thumbnails/7.jpg)
7
LDAP Introduction
dc=tridium,dc=com
ou=engineeringou=sales ou=finance
cn=Mary Smith cn=James Smith Maria Gracia
![Page 8: Niagara Enterprise Security · – Manage a large dynamic workforce – Synchronize access in multiple systems • Manage Large Dynamic Workforce – Hospitals – Schools – Cities](https://reader033.fdocuments.us/reader033/viewer/2022042012/5e72a8666aabc03eca0e12b1/html5/thumbnails/8.jpg)
8
LDAP Servers
• Microsoft Active Directory
• OpenLDAP
• Apache DS
• Oracle Internet Directory
• IBM Security Directory Server
• NetIQ eDirectory
![Page 9: Niagara Enterprise Security · – Manage a large dynamic workforce – Synchronize access in multiple systems • Manage Large Dynamic Workforce – Hospitals – Schools – Cities](https://reader033.fdocuments.us/reader033/viewer/2022042012/5e72a8666aabc03eca0e12b1/html5/thumbnails/9.jpg)
9
LDAP Integration Demo
![Page 10: Niagara Enterprise Security · – Manage a large dynamic workforce – Synchronize access in multiple systems • Manage Large Dynamic Workforce – Hospitals – Schools – Cities](https://reader033.fdocuments.us/reader033/viewer/2022042012/5e72a8666aabc03eca0e12b1/html5/thumbnails/10.jpg)
10
Integration Database APIsPurpose
What standards are considered?
Sample examples on how to use API’s
Demonstration on 3rd Party HID Integrator
for Visitor Management – Easy Lobby
![Page 11: Niagara Enterprise Security · – Manage a large dynamic workforce – Synchronize access in multiple systems • Manage Large Dynamic Workforce – Hospitals – Schools – Cities](https://reader033.fdocuments.us/reader033/viewer/2022042012/5e72a8666aabc03eca0e12b1/html5/thumbnails/11.jpg)
11
Purpose
• Integration with third party application
databases
• Single application to manage
workforce
• Remove employees from logical AND
physical access
• Example integrations
– Visitor Management
– Human resource databases
Enterprise Security Supervisor
REST APIs
REST APIs
![Page 12: Niagara Enterprise Security · – Manage a large dynamic workforce – Synchronize access in multiple systems • Manage Large Dynamic Workforce – Hospitals – Schools – Cities](https://reader033.fdocuments.us/reader033/viewer/2022042012/5e72a8666aabc03eca0e12b1/html5/thumbnails/12.jpg)
12
Enterprise Security Database API Examples
• Create Person
• Create Badge
• Associate Badge to Person
• Associate Access Rights to Person
• Delete Person
![Page 13: Niagara Enterprise Security · – Manage a large dynamic workforce – Synchronize access in multiple systems • Manage Large Dynamic Workforce – Hospitals – Schools – Cities](https://reader033.fdocuments.us/reader033/viewer/2022042012/5e72a8666aabc03eca0e12b1/html5/thumbnails/13.jpg)
13
Easy Lobby
• Check In/Out Visitors
• Track Visitor Status
• Manage Blacklists
• Options
– Advanced Registration
– License/Passport Scanners
– Government Checklists
– Special K-12 Pricing
![Page 14: Niagara Enterprise Security · – Manage a large dynamic workforce – Synchronize access in multiple systems • Manage Large Dynamic Workforce – Hospitals – Schools – Cities](https://reader033.fdocuments.us/reader033/viewer/2022042012/5e72a8666aabc03eca0e12b1/html5/thumbnails/14.jpg)
14
Visitor Management – Database API’s Integration Demo
![Page 15: Niagara Enterprise Security · – Manage a large dynamic workforce – Synchronize access in multiple systems • Manage Large Dynamic Workforce – Hospitals – Schools – Cities](https://reader033.fdocuments.us/reader033/viewer/2022042012/5e72a8666aabc03eca0e12b1/html5/thumbnails/15.jpg)
15
Replacing a Security JACE 6
![Page 16: Niagara Enterprise Security · – Manage a large dynamic workforce – Synchronize access in multiple systems • Manage Large Dynamic Workforce – Hospitals – Schools – Cities](https://reader033.fdocuments.us/reader033/viewer/2022042012/5e72a8666aabc03eca0e12b1/html5/thumbnails/16.jpg)
16
Typical Security JACE 6x,2x Installation
15 VDC
120 VAC
RS-485, Power,
Battery to Modules
Enclosure Door,
Aux Power Monitor
Door Status,
Request to ExitBattery Charger
Card Readers Locks Features:
• 15 VDC Power to JACE
• On-board I/O for 2 security doors, 2 add’l security inputs, 2 add’l relay outputs, 3 DI
• Power and battery backup output to security modules
• On-board battery charger
• Battery and Power monitor service
NPB-PWR-UN
![Page 17: Niagara Enterprise Security · – Manage a large dynamic workforce – Synchronize access in multiple systems • Manage Large Dynamic Workforce – Hospitals – Schools – Cities](https://reader033.fdocuments.us/reader033/viewer/2022042012/5e72a8666aabc03eca0e12b1/html5/thumbnails/17.jpg)
17
Typical JACE 8000 used for Security
15 VDCRS-485, Power,
to Modules
Card Readers
Locks
Door Status,
Request to Exit
RS-485 from JACE
24 VDC from UL 294 listed
Power Supply with batteries
SEC-R2R
NPB-PWR
Features:
• 24 VDC battery-backed Power to the JACE.
• Software object for monitoring power automatically backs up the station. Power source must be monitored by an external module.
• 12-15 VDC power required for modules may be sourced from NPB-PWR connected to battery-backed 24 VDC power supply or 12 VDC battery-backed power supply.
• Special JACE platform for security no longer required. Security is a license option on the powerful, universal JACE 8000 platform.
Enc Door,
Aux Pwr Mon.
![Page 18: Niagara Enterprise Security · – Manage a large dynamic workforce – Synchronize access in multiple systems • Manage Large Dynamic Workforce – Hospitals – Schools – Cities](https://reader033.fdocuments.us/reader033/viewer/2022042012/5e72a8666aabc03eca0e12b1/html5/thumbnails/18.jpg)
18
Upgrade steps: preparation
1. Backup security JACE 6 station.
2. Note which access rights the readers on the BASE Board modules are
mapped to.
3. Install the Security Application on the JACE 8000.
4. Copy the backed-up station to the JACE 8000.
5. Add an R2R module to the JACE 8000 offline.
![Page 19: Niagara Enterprise Security · – Manage a large dynamic workforce – Synchronize access in multiple systems • Manage Large Dynamic Workforce – Hospitals – Schools – Cities](https://reader033.fdocuments.us/reader033/viewer/2022042012/5e72a8666aabc03eca0e12b1/html5/thumbnails/19.jpg)
19
Upgrade steps: points and readers
1. Map the physical points from the security JACE base board to the R2R
modules.
2. If additional points are needed, map these to spare points that exist in
other system modules, or add another module if needed.
3. Delete the base reader module from the JACE 8000 station.
4. Map the newly programmed readers to the appropriate access rights.
![Page 20: Niagara Enterprise Security · – Manage a large dynamic workforce – Synchronize access in multiple systems • Manage Large Dynamic Workforce – Hospitals – Schools – Cities](https://reader033.fdocuments.us/reader033/viewer/2022042012/5e72a8666aabc03eca0e12b1/html5/thumbnails/20.jpg)
20
Upgrade steps: power
1. Add a “Power Panel” software object to the module whose physical points connect for monitoring the battery and primary power supply used for the JACE.
2. Remove the Security JACE, NPB-PWR-UN, and batteries from the enclosure.
3. Install the JACE 8000, NPB-PWR, and SEC-R2R in the enclosure. (There will be additional room in the enclosure where the batteries used to be.)
4. Install a 24 VDC battery-backed UL 294 listed power supply for the JACE and modules in the enclosure. Make sure to estimate the max power used by the JACE and modules, and allow 25% overhead.
5. Connect the NPB-PWR module to the 24 VDC power supply for the modules in the enclosure. NOTE: Modules are powered from 12-15 VDC. Powering the modules from the 24 VDC power supply will damage the modules and may damage connected card readers!
![Page 21: Niagara Enterprise Security · – Manage a large dynamic workforce – Synchronize access in multiple systems • Manage Large Dynamic Workforce – Hospitals – Schools – Cities](https://reader033.fdocuments.us/reader033/viewer/2022042012/5e72a8666aabc03eca0e12b1/html5/thumbnails/21.jpg)
21
Upgrade steps: IO
1. Connect the I/O that was wired to the security JACE to the SEC-R2R (and
others if used).
Depending on cable length, you may be able to remount the connectors on
the new module(s).
2. Discover new modules and match to the modules that were added off line.
3. Update the module firmware if needed.
![Page 22: Niagara Enterprise Security · – Manage a large dynamic workforce – Synchronize access in multiple systems • Manage Large Dynamic Workforce – Hospitals – Schools – Cities](https://reader033.fdocuments.us/reader033/viewer/2022042012/5e72a8666aabc03eca0e12b1/html5/thumbnails/22.jpg)
22
Sample Layouts
Installed in Large Security Enclosure
Top Rail Installation options
![Page 23: Niagara Enterprise Security · – Manage a large dynamic workforce – Synchronize access in multiple systems • Manage Large Dynamic Workforce – Hospitals – Schools – Cities](https://reader033.fdocuments.us/reader033/viewer/2022042012/5e72a8666aabc03eca0e12b1/html5/thumbnails/23.jpg)
23
Thank You