Support portal

Please note: The license has to be activated prior to using management software.

2. On the first software run, you have to set the password for the “Administrator” account.

Please choose a password and enter it to the relevant fields, and press “Set” button to continue.

3. After the password is set, you will need to choose a “Site name”. The “Site name” can be a company name, installation site name, building name etc..

4. After setting up the site name, the software “Login” screen will appear. Log in to the management software:

The default username: Administrator (case sensitive) and type as a password the one that was set on the first software run.

5. Click on the “Site map” icon:

Your device should appear at the “Network devices” part of the window as shown on the picture below. In case that the device does not appear on the “Network devices” tree, please refer to our support portal (http://support.identytech.com/faq ) – FAQ section for troubleshooting.

6. Drag and drop the device to the “Site map” part of the window, under the any node.

If device has a default IP address (192.168.1.1) it cannot be dragged to the map unless the IP address is changed. To change the IP address, right-click on the device and choose “Set IP” from the menu.

If the device is DHCP state, while dragging, the IP address will change to static and reboot. Please refer to the full software manual for more detailed explanation on how to change the IP address.

7. Once the site map is setup and all the relevant units are added to the site map, you can proceed to enrolling users into your system. To do so, click on the “Users” icon in the main menu.

The following window will show up:

8. Press “Add button” in the window menu. The following window will show up:

Under the “General info” tab, please type in the User ID (MUST field). You can also specify any additional user details such as User name, date of birth etc. In the Access mode field, specify the credentials that user is going to use in order to be identified in the system: Biometric only, card & biometric, Pin code etc., the default access mode is Biometric only – meaning that the user will have to present palm / or finger only (depending on the type of the terminal) in order to be identified in the system.

9. Next, navigate to “Access levels & holidays” tab. By default, there is 2 access levels specified in the system: ALWAYS (full access) and NEVER (no access). Additional access levels can be created for a custom access permissions. Please refer to the full software manual for a more detailed explanation.

Click on the “+” button next to the “Related access levels” list and choose “Always” from the list and click the “OK” button. The access level should appear under “Related access levels” list as shown on the picture below.

10. Depending on the type of the biometric you want to enroll please navigate either to “Fingerprint data” or “Palm data” tabs. In case you have a local desktop sensor connected to your PC, choose “Local enrollment” option. In case you are enrolling on the terminal, choose “Network enrollment” option, click on the “…” button and select the unit you will enroll on from the list.

Press “Enroll button”. Present your finger or palm to the terminal or desktop reader. Once enrollment complete, the green check mark will appear on the relevant picture.

Please note:

1. In case you see the zip sign instead of fingerprint image, please consider re-enrollment, unless the template is used for verification.
2. The palm enrollment on the terminal itself can be a bit “tricky”. Please use a hand guide for enrollment. Once hand presented wait until unit beeps ones and green led comes on. Then remove your hand and present it again. Wait until you hear a beep once again and both led’s turns on green. If you hear double-beep, the procedure wasn’t complete correctly and enrollment failed. It is recommended to use a local USB sensor for enrollment.

11. Press save button to save user on the unit. Before you saving make sure the unit is connected to the network. Complete the enrollment process. Please note: there is no need to click apply button after every enrolled palm or fingerprint. It is enough to click a “Save” button after all the necessary details are filled in.

12. Once user was saved, the new task will be created and appear at the bottom of the screen. The green color will represent that the user was synchronized to the units successfully, the red one – task failed, orange – represent that task was completed with errors (the user data wasn’t synchronized to all terminals).

7000                                TCP – Unit communication protocol

7001 | 7060                   UDP – Network device search

7002                                TCP – Real time monitoring notifications

7003                                TCP – PC identification service

7004                                TCP – Enrollment with local sensor

Please note: the ports cannot be changed in this version of the driver.

• The format must contain up to 4 parities. Formats with more than 4 parities are not supported by this integration.

• Proprietary Wiegand formats defined in the C-CURE 9000 or ones that contain Card data fields of: Card status | Expiration date | Fixed binary | Fixed data | Issue code | Site code | Unknown – are not supported by this integration.

• Formats defined by user must meet the following requirements:
  1. Card data fields has to be of the following types:Card number, Card facility code
  2. Parity fields has to be of the following types:Even parity, Odd parity

• IDTJade / IDTAccess units

• IDTGate units

• IDTOctopus (MiniMoac) units

On the object explorer window:

Right Click on the server name, and click “Properties”.

The following window will show up:

Make sure that “SQLServer and Windows Authentication mode” is marked if not, mark this option and press ok. Close properties window.

On the object explorer window choose:

Security -> Logins -> New Login as shown below:

The following window will open:

On the general window properties:

• Enter a login name
• Choose SQLServer authentication option
• Specify a password and confirm it
• Unmark the following: “Enforce password policy”, “Enforce password expiration” and   “User must change password on next login” options
• On “Default database” choose IdentyManage

Click on “Server Roles” on the left side of the window as shown below:

And mark “sysadmin” option in this window.

Then navigate to “User mapping” window:

On the “Users mapped to login” part mark “IdentyManage”

On the “Database role membership for: IdentyManage” part, mark “db_owner” checkbox.

Press OK and close SQLServer management studio.

Navigate to Start -> All  programs -> Microsoft SQLServer 2008 R2 -> Configuration tools -> Configuration Manager:

On the right side of the opened window click on” SQLServer Network Configuration” and choose the desired instance, for example: “Protocols for SQLEXPRESS” as shown below:

On the left side, right click on “TCP/IP” and choose “Enable” from the menu.

Click on “SQL Server Services” on the menu at the left side, choose your instance, for example: “SQLServer (SQLEXPRESS)” and restart the service as shown below:

Now your instance will support remote connection. In case you are still unable to connect, check that your firewall is not blocking a port: 1433. In case it does, add a firewall exception for this port on both remote and target machines.

Disabling Driver Signature Enforcement on Windows 8, 8.1 & 10

Go to PC Settings and search for “Recovery” and click enter. Under Advanced Startup, You will need to click on the “Restart now” button. Remember to save all your work first before clicking it.

The computer reboots to a startup menu, in which click Troubleshoot.

And click Advanced Options at next screen.

Choose Startup Settings next,

And click Restart button.

The computer reboots and prompts another menu to choose. One of the items is to Disable driver signature enforcement. Press number 7 or F7 to continue booting to Windows 8 with digital sign enforcement disabled.

While installing a driver you will get the Windows Security warning window. Choose “Install this driver software anyway”.

Restart computer once again to re-enable the digital sign enforcement.

The Person who responsible for the biometric enrollment procedure should be patient, professional with  good personal communication,  before starting the enrollment procedure its very high important to explain the user the enrolling process and the optimal finger area that we want to record/enroll. Prior to enrollment, the person in charge has to explain the concept of enrollment of fingerprint / palm biometric key production.

We recommend to enroll at least 2 fingers (one on each hand) or more in case it is required. For the palm enrollment we recommend to enroll both hands.

The Fingerprint enrollment procedure

Correct enrollment

Placing the finger on the enrollment sensor is high important, full coverage of the finger on the enrollment surface pattern will supply good and accurate template of the enrolled person.

Try to cover the entire area of ​​the reader by the following examples:

Incorrect enrollment

DO NOT put finger on the sensor surface like that:

The Palm-Vein enrollment procedure

The following illustrations show the physical view and drawings of the palm guide. Since the palm vein technology is touch-less, it is recommended to use a hand guide for a first 2 month in order to train the users to place a hand correctly.

The following illustration is the range which signifies the vertical length of the palm and shows what part of the palm is being enrolled.

Correct enrollment

Try to cover the palm guide area from the wrist to finger by the following examples:

Incorrect enrollment

DO NOT put your hand on the guide surface area like that:

Download Enrollment Instructions

Download Usage Instructions

Click to see how to enroll on the Sapphire device

Most networks today, including all computers on the Internet, use the TCP/IP protocol as the standard for how to communicate on the network. In the TCP/IP protocol, the unique identifier for a computer is called its IP address.

How does your computer get its IP address? An IP address can be either dynamic or static. A static address is one that you configure yourself by editing your computer’s network settings. This type of address is rare, and it can create network issues if you use it without a good understanding of TCP/IP. Dynamic addresses are the most common. They’re assigned by the Dynamic Host Configuration Protocol (DHCP), a service running on the network. DHCP typically runs on network hardware such as routers or dedicated DHCP servers.

• Assigning static IP address to your computer

To change the computer’s IP address in Windows 7, type network and sharing into the Search box in the Start Menu and select Network and Sharing Center when it comes up. If you are in Windows 8.x it will be on the Start Screen itself, like the screenshot at the top of this article.

Then when the Network and Sharing Center opens, click on Change adapter settings. This will be the same on Windows 7 or 8.x.

Right-click on your local adapter and select Properties.

In the Local Area Connection Properties window highlight Internet Protocol Version 4 (TCP/IPv4)then click the Properties button.

Now select the radio button Use the following IP address and enter in the correct IP, Subnet mask, and Default gateway that corresponds with your network setup. Then enter your Preferred and Alternate DNS server addresses. Here we’re on a home network and using a simple Class C network configuration and Google DNS.

Check Validate settings upon exit so Windows can find any problems with the addresses you entered. When you’re finished click OK.

Now close out of the Local Area Connections Properties window.

Now you can open the command prompt and do an ipconfig  to see the network adapter settings have been successfully changed.

• Usefull Tools

The most useful tool is a Windows command promt (cmd).

A command prompt is an entry point for typing computer commands in the Command Prompt window. By typing commands at the command prompt, you can perform tasks on your computer without using the Windows graphical interface.

To open the Command Prompt window, click the Start button  –> All Programs –> Accessories, and then click Command Prompt.

1. To find out your current IP address settings, type “ipconfig” command and click “Enter“. The IP settings will appear.

2. To view the Address Resolution Protocol (ARP) cache, type “arp -a”. This will show all the IP and MAC addresses in your network.

3. To test and verify connectivity from the computer to some IP address, type “ping” command and then type a space and IP address you want to check connectivity to. For example: “ping 192.168.1.15“

• Finding & connecting IdentyTech terminals 

All of Identytech  are are shipped with the following IP settings:

IP address:       192.168.1.1

Subnet Mask:  255.0.0.0

Gateway:         192.168.1.1

If your network setting supports assigning of DHCP addresses, once you plug the terminal to the network, the IP address will be automatically assigned to the terminal.

In case the IP address was not assigned automatically, it has to be set manually. In order to do so, you will have to assign a “Static” IP address to your PC with the following :

IP address:       192.168.1.15

Subnet Mask:  255.0.0.0

Gateway:         192.168.1.1

(To assign a static IP please navigate to the top of the page to “Assigning static IP address to your computer” section.)

Once the address is assigned, you will be able to see the terminal in the management software and change its IP address to desired IP settings.