1CORE 7.6 v05112020 PDF

OnGuard
Hardware & Software

Fundamentals
Welcome to LenelS2 Training

Welcome to LenelS2 Training
• Introductions
• Course Objectives and Agenda
• Course Materials
• OnGuard System Overview
Introductions
• Who ? ( You and your employer ?)
• Where ? (Are You From ? )
• What ? ( Is your Role and Experience with Regard to Access Control

Hardware and OnGuard ?)
• What are your expectations for this course?
A CARRIER COMPANY CONFIDENTIAL AND PROPRIETARY

Training Information
• LenelS2 Training Information

• Parking
• Building Access
• Badge access to the building
• Facility layout
• Bathroom location(s)
• Designated smoking area(s)
• Coffee, water, more…
• Breaks and Lunch Schedule
• Wi-Fi access

CORE Course Objectives
By the end of Identify the main components of the AccessControl database

this course,
you will be able Install OnGuard Software
to:
Login to OnGuard software using the Lenel Console
Configure OnGuard system options for a basic OnGuard system installation.
Identify different hardware components of a basic OnGuard access control system:

Access Panels, Alarm Panels, and Reader Interface Modules
Configure hardware components for a basic OnGuard system installation
Create & manage Cardholders is System Administration and in OnGuard Credentials

browser client.
Access a best practice checklist to set up an installation site for successful

implementation of OnGuard.

CORE Course Objectives
Course Use System Administration and OnGuard Users browser client to configure system
objectives settings & activate features
(continued)
Generate standard Reports
Use Alarm Monitoring & OnGuard Monitor to manage hardware and software
components
Troubleshoot the system and identify causes and solutions to common problems
Practice installing a basic OnGuard system on your own!
…as evidenced by successful completion of all course modules, active participation in

class discussions/examples, and 90% attendance to all class sessions

Course Agenda
Day Three ½ Day Four

Day One Topics Day Two Topics
Topics Topics
• Intro and Overview • Alarm Monitoring • Database Backup & • Review Questions
• Database Overview Introduction Archiving Group Activity
• OnGuard Installation • Alarm Panels & • User Accounts & • OnGuard Lab
• Help & Monitoring Permissions Practical
Documentation • Reader • Access Groups • Exam Time &
• Users Intro Configurations • Badge Types Dismissal
Monitoring • List Builder
• LS Services &
Configuration • Card Formats • Reports
• Cardholder & Options • Access Levels • Holidays and
• Access Control • Timezone Intro Timezones
overview • Cardholder Options • Timezone/Reader
• Hardware Basics • Cardholder Modes
• Access Panels Management • Masking
• Monitor Zones
• Alarm Monitoring
Features
• Site Best Practices
checklist
• Service Call Exercise
–TSG Readiness
checklist

Course Materials
All course materials are available

through your instructor
Also available at Partner Center

– Log in required
Materials to populate your Lenel

USB drive with:
• Course presentation slides
• Handouts for various courses
• This slide deck with your notes

Sticky Notes
• Sticky Notes
When you open the PDF course

documents, you will see a Comment
Right click on any slide and select Add
button. Clicking this will let you create
Sticky Note
electronic sticky notes for the material
being covered

Course topics - Index links for this document
Appendices
Section 1 topics Section 2 topics Section 3 topics
topics
• Intro and Overview • Alarm Monitoring • Database Backup & • Glossary of Terms
• Database Overview Introduction Archiving • SQL Server Installation
• OnGuard Installation • Alarm Panels & • User Accounts & & Configuration Steps
• Help & Documentation Monitoring Permissions • OnGuard Client
• Users Intro • Reader Configurations • Access Groups Installation Steps
• LS Services &
Monitoring • Badge Types • OnGuard Server
Configuration • Card Formats • List Builder Upgrade Steps
• Cardholder & Options • Access Levels • Reports • OnGuard Client
• Access Control • Timezone Intro • Holidays and Upgrade Steps
overview • Cardholder Options Timezones
• Hardware Basics • Cardholder • Timezone/Reader
• Access Panels Management Modes
• Masking
• Monitor Zones
• Alarm Monitoring
Features
• Site Best Practices
checklist
• Service Call Exercise
–TSG Readiness
checklist

System Overview

OnGuard Architecture Overview 1/2
OnGuard Hardware
Database OnGuard Server(s)
OnGuard Services
OnGuard Services
Desktop Clients Browser Clients

OnGuard Architecture Overview 2/2
OnGuard Server with Services
OnGuard’s Database provider (SQL/Oracle)
OnGuard Desktop clients
• Traditional client software for the configuration and day-to-day operation

of the OnGuard System
OnGuard Browser clients
• A series of Modules that are installed with OnGuard 7.5 and later or can
be added to OnGuard server to provide Browser-based applications
• Suitable for PC, Mac, tablet and smartphones
OnGuard Access Control hardware

Database Review
and
OnGuard Installation

Databases – Microsoft SQL Server
• AccessControl database
OnGuard database • AccessControl.mdf (data records)
components • AccessControl.ldf (log records)
Use SQL Server • Login for AccessControl database

Management Studio to • Username of Lenel
configure, manage, and • With 7.4 and later, a different Login user account can be used
administer the database • Default password of Secur1ty#
Reference Installation • Chapter 5 for installing & configuring SQL Server

document

OnGuard Installation

Basic Installation Steps for an OnGuard Server
Install and configure the database software
Install OnGuard Server software
OnGuard Setup Assistant (automatically launched)

assists in configuring the following:
• Security Utility
• Configuration Editor
• License file installation
• Database Setup
• Services Started
Note: The components of the Setup Assistant can be
run manually through OnGuard as needed

New Server Installation Supplies
Prior to starting a Server installation, the following supplies are needed:
OnGuard Software
• Available for download from Partner Center

• Log in required
OnGuard License File
• FlexNet
• Retrieve from Partner Center
• Log in required

System Recommendations
Minimum computer specifications can be found in

the OnGuard Release Notes for that specific version
• Release notes can be found in the OnGuard

installation package and under Downloads once
logged in to Partner Center
Ensure the ‘User Account Control Settings’ is set to

Never notify (not enabled)
• In the Windows Search box type in UAC to

access the computer’s UAC settings
• UAC can be restored to normal after
installation.

OnGuard Installation Software
The Installation Guide PDF is located in the OnGuard installation software package
under Program File > OnGuard > doc > en-US
• Chapter 6
Step-by-step videos are available for OnGuard Server and client installations
• In addition, SQL 2014/2017 installation and SQL 2014/2017 configuration

videos are available on Partner Center under Downloads > Training

Installing OnGuard – Server vs. Client
Installed Desktop Components Server Client

Installed Desktop Components Server Client Service and Support
OnGuard Program Menu Bulk User Tool √ √
Alarm Monitoring √ √ Communication Server √
Area Access Manager (SWG-RAMxx) √ √ Configuration Editor √ √
ID CredentialCenter (View Only) √ √ Database Setup √
ID CredentialCenter √ √ Global Output Server √
System Administration √ √ Import √
System Management Console √ √ License Server √
Linkage Server √ √
Video Viewer √ √
Login Driver √
Visitor Management (IDVM) √ √
Open Access √
PTZ Tour Server √ √
Setup Assistant √ √
Documentation √ √ Universal Time Conversion Utility √
Video Archive Server √
Comparison of desktop components System Tools

installed for a Platform Server System Badge Designer √ √
Device Discovery Console
versus Platform Client System Forms Designer (SWG-1210) √ √
Installation License Administration √ √
Map Designer √ √
Replication Administration √
Browser clients are automatically Replicator √
Security Utility √ √
installed as of OnGuard 7.5

New Installation of OnGuard
• Install OnGuard Server

• License file installation and
activation - Instructor
• Using Setup Assistant to
Goals: finalize OnGuard install
• Reference Installation Guide
- Chapter 6 -Installing
OnGuard on a Server

New Server Installation
Launch the Setup application within the OnGuard

Installation software folder
• Advisable to right click and Run as Administrator

Installation of any required software begins
• Microsoft .NET 4.6.1 is required

• A reboot may be necessary

Accept the license terms

Select the preferred installation

type
Enterprise or Standard
installation
• Choose Standard
This is a new installation window

in 7.5

Server (Choose this one for class)

• Installs all standard server components
Client
• Installs all standard client components
Monitoring client
• Installs Alarm Monitoring application
Badging/Credential Client
• Installs the Credential Center application

Installation type
• Platform Server
• Performs a full server installation
including features running on IIS for
the OnGuard Application Server
• Select this only if using legacy
browser based OnGuard products
Custom Server (Select this

one for class)
• Performs a custom server installation in
which the features to be installed may
be selected based on the system needs

New Server Installation – Database type
SQL Server (Manual)
• SQL Server and the OnGuard database to be

installed separately by the user
SQL Server/Express (Assisted)
• SQL Server already installed, and the OnGuard

database will be configured by the setup process
SQL Server/Express (Demo)
• SQL Server already installed, and the Demo

database will be configured by the setup process
Oracle Server (Manual)
• Oracle and the OnGuard database to be installed

separately by the user

Program installation location
• Location where OnGuard will be installed
Location of License Server
• Network name of License Server

workstation
• Defaults to local machine name
• Port 8189 is default
Location of the Database
• Network name of database Server

• Defaults to local machine name

Provide the database

login user:
• The database login does not have

to be ‘LENEL’
• Installation wizard offers
opportunity to provide a different
login (7.4)
• If the name is changed, make
sure to update or create the
corresponding user account in the
database application

Custom Install of
Device Discovery
Console and Service
• Device Discovery Console

discovers devices (Access
Panels, Cameras) in a network
(local subnet)
• Choose ‘This feature will be
installed on local hard drive’
from the drop down box
• Device Discovery Service can
be used to find devices on
other subnets

Starting the server installation

With OnGuard 7.5, the browser clients are installed

as part of the server installation
• Credentials, Monitor, Console, User, AccessManager, Visitor

• Previous versions the browser clients had to be installed individually
on the server
• Available on Partner Center

Completing the server installation

New Server Installation – Set Up Assistant
Once the OnGuard installation is complete, Setup

Assistant will automatically launch
• Setup Assistant was new in OnGuard 2012 (6.5)
It assists with completing the OnGuard installation
• On the Server it will assist with:

• Running the Security Utility
• Configuration Editor check
• License file installation
• Database installation (Connect to existing or Install new database)
• Running Database Setup
• Starting Services (LS Login Driver and LS License Server
automatically)

Choose Apply Settings for the Security Utility

• This utility makes the necessary Operating System
adjustments to allow OnGuard to function

Complete the License file Installation/Review

and Activation

License Configuration – Setup Assistant
System License implementation
• Use Setup Assistant to complete 3 steps for License file

installation (Browse, View, Agree to License Terms)
• If needed, run License Administration from OnGuard
Program Folder
• See release notes for supported browsers
LS License Server runs automatically as a

service on the OnGuard Server
• Controls the number of concurrent clients logged in
• Controls access to software options of the system
• Default administrator password of admin can be
changed by clicking on ‘change your password’ link

3 Steps for License File Installation
Step 1 – Browse to the

License file location
Step 2 – View License File

and scroll to the bottom to
click Next

3 Steps for License File Installation
Step 3 – Select Yes to Agree

to the License Agreement and
click Finish (or Activate if the
first time installing)
Note: The actual License file (.lic) does not have to

remain on the server once this process is completed

License Configuration – Setup Assistant
Activation Based Licensing – FlexNET
Software Activation required for a first time OnGuard Server installation

on a machine
Completed either in Setup Assistant as part of the License installation or

in the browser based License Administration under OnGuard
• Each license file has a unique Activation ID
License Administration default log for OnGuard 7.5 and older is:
• User name = admin
• Password = admin
Complete activation online by phone or by text messaging (SMS)

License Configuration
Reference KB article # 2269
Online
Calling Technical Support
For online activation the system will Phone via Text
attempt to contact the Lenel licensing Group
server

New Server Installation – Setup Assistant
Service Log On
Defines the logon credentials of the user account

running these services (Typically unselected)
• LS Site Publication Server Service (Used in an

Enterprise system)
• LS Client Update Server Service
• LS Event Context Provider Service (Used with
OpenAccess and browser clients)
The windows user account must have system

database access rights and read/write capabilities to
the OnGuard directory

Database Setup
• Populates the OnGuard AccessControl database with the
necessary tables
• Runs on OnGuard Server only
• A valid OnGuard license is required in order to run Database Setup

Service Startup
• Necessary LS Services will start automatically
Setup Assistant Finished
OnGuard Server installation is complete

OnGuard Installation – KB References
• kb.lenel.com references for OnGuard installations
Article Description
Number
1108 Clean uninstall of OnGuard
2269 Activate a FlexNet license file
3142 Edit ODBC on 64 bit computer
3698 OnGuard compatibility charts

OnGuard Certificates
Certificates are utilized to create a secure encrypted

connection between server and clients
• Used by LS Message Broker, LS OpenAccess, and OnGuard
browser clients like Credential, Monitor, and Console
OnGuard installation automatically installs the self-

signed certificate
• Private certificate is installed on the server
• Public certificate is sent to the client when the secure connection is
initiated
If the server name changes then the certificate may

need to be re-issued
Reference the Installation Guide Appendix E -

OnGuard and the Use of Certificates

Initial Log in

OnGuard Application Interfaces
Various OnGuard applications can be accessed through the

traditional desktop client and/or through the browser-based
Console which became available as of OnGuard 7.3

Lenel Console
To access Console, launch a web browser and type in the

address bar https://<host name>:8080 where <host
name> is the location of the OnGuard server
• For example, https://<your computer name>:8080
Log in to Console and change your SA password
Please ensure to remember your SA password; it is

case sensitive

Lenel Console
Logging into Console allows for single sign on into

individual browser based card applications starting with
OnGuard 7.5
Tiles/Cards are used to launch browser-based and any

locally installed desktop client applications
Optional to right
click or Crtl key
Desktop click on Card to
client launch in a new
icon tab or separate
window
Browser
A CARRIER COMPANY CONFIDENTIAL AND PROPRIETARY client icon
Navigational Icons
Use of icons to navigate browser

applications
Opens or closes/hides navigational menu

items
• Useful on smaller screens like mobile devices
Opens smaller inline menu forms
Returns to Console

Browser Clients
Most browser clients require a subscription license file to

be installed in order to use them
Clients and Modules that require a license component

will not be useable until that license is loaded through
license administration
• Credentials
• Monitor
• And more…
Install your subscription file for your OnGuard server

now using License Administration
• Default user name is admin and password is admin

• Restart your LS

Log in to System Administration
The pop up window indicating Database password violations

is referring to the default database password of Secur1ty#
It is highly recommended to change this default password

using LS Login Driver
• Refer to chapter 12 in the Installation Guide
• Optionally, this can be turned off in Users
• Prior to OnGuard 7.5, turn off in System Options in System Administration by
unchecking Enforce Strong Passwords

Menus - Help
Question mark
F1 key Help buttons Help menu
icon

System Administration Help Menu
The Help menu contains:
• Contents
• Search
• About

Help - About
Help – About dropdown has System

Information
• Useful to get the Dongle ID of the system
• Dongle ID is also referred to as System ID,
License ID, or Flexnet ID

Console Help files
Click on dropdown in the upper left corner to view
Account
• Allows user to change password
Help
• Access to user friendly help files
About
• Displays version of the application

• Useful as applications can be release separate from OnGuard
Log Out
• Log out to release license for re-use

• Clicking the ‘X’ to close the browser does not release the concurrent license log in
until Inactivity timeout (default is 15 minutes) is reached

Help - Documentation
All OnGuard documentation is

provided during server or client
installations by default
There are specific PDFs on Hardware,

System Administration, Alarm
Monitoring, and more
‘Search All User Guides’ is helpful to

find information throughout all .PDFs

System Management Console
Provides a snapshot of the

system
• Used for troubleshooting purposes
• Located under OnGuard folder
Displays four types of system

info
• Computer information
• OnGuard information
• OnGuard services
• OnGuard log files
Export / Import files

OnGuard Log Files
The OnGuard log files provide information

pertaining to OnGuard status and errors that have
been generated
• The logs are in C:\ProgramData\Lnl\logs as of 7.3
Previous versions of OnGuard, log files could be

found in the following location
• C:\Program Files (x86)\OnGuard\logs
Depending on the OnGuard configuration, logs will

be generated for general OnGuard, video, and
replication (Enterprise) errors

Help - Documentation
OnGuard documentation is also located in:
• Partner Center under downloads > User Guides

• Log in is not necessary
• OnGuard installation package

Users Tab &
Module
Introduction

Add a New User
Create (Add) the user

information
• First and last name
• Notes may be added
Create an internal account for

the user
• User name and password
• Passwords are case sensitive in 7.5
Be sure to uncheck Access to

the system is disabled checkbox

Lenel Services

Lenel Services
Many OnGuard services may be run interactively on

the desktop or as a Windows service (Preferred)
Most OnGuard Service names begin with an LS
Windows manages all services and allows the

administrator to set the startup of the service
To view LS Services, choose one of the following
• Search – type in services.msc

• Control Panel > Administrative Tools > Services
• Right click on Computer/This PC, select Manage
• OnGuard System Management Console

Lenel Services

Lenel Services
Please reference the LenelS2 Overview and Resources

handout for detailed information about our CORE LS services
• LS Login Driver
• LS License Server
• LS Communication Server
• LS Linkage Server
• LS Message Broker
• LS OpenAccess
• LS Web Service
• LS Web Event Bridge
• LS Badge Printing Service
• LS Event Context Provider

Lenel Services
Please ensure the following

services are automatically started
• LS Login Driver
• LS License Server
• LS Message Broker
• LS OpenAccess
• LS Web Service
• LS Event Context Provider

Cardholder
Options

Cardholder Options Configurations
Cardholder Options
• Quantity of active badges per cardholder

• PIN Generation
• Use or Lose Badge feature
• Badge ID Allocation
List Builder
• Badge Status on the Cardholder Options tab

Cardholder Options – General Tab
Options affecting all cardholders are defined here
Multiple active badges
• Sets the maximum number of active badges that can be assigned

to a cardholder
• 1-9,999 active badges per cardholder
• Default = 1

Badge PIN Code Generation options
The length of the PIN
• 4, 6, or 9 digits
• 4 is the Default value
• If the PIN number is less than these values, the # key must be pressed on the
reader keypad to signal the end of the PIN
Affects Access Panel memory
Select PIN generation method
• None (Manual Entry) or Random

• None (Manual Entry) is the default value
• PIN number is hidden by asterisks on the badge form
• If Random is selected, the PIN number is viewable only the first time when the
badge is added

Badge PIN Code Generation options
• Enabling Unique PIN code prevents duplicate

PINs in the database
• Allow Edit of PIN code
• Copy PIN code checkbox will prompt user to copy
PIN to next badge when adding a new badge to a
cardholder

Cardholder Options - Badge ID Allocation
Badge ID generation options
Automatic – the next sequential number (DEFAULT

value)
FASC-N – Federal Agency Smart Credential Number
• Refers to US Government issued badges
From ‘Cardholder ID’ – uses the cardholder ID field

(or custom defined field) value
Internal Cardholder ID – uses a system generated

value (EMP ID), which is an internal database ID
Manual Entry – operator manual entry

Cardholder Options - Badge ID Allocation
Issue Code
First issue code – the number used as

starting point for first issue of badge
Auto-increment issue code – automatically

assigns the next sequential number on re-
issue of same badge
• Zero (0) is the default and can be changed

• Automatically selected for the following choices
• From ‘Cardholder ID’
• Internal Cardholder ID

System Overview
&
Terminology

OnGuard System Overview
LS Communication Alarm Panels

OnGuard Server Server
Upstream
Communication
Downstream Communication
Readers
Locks
Input Panel
Reader 2
ISC LNL – 1100 Door
Contacts
AccessControl Exit
Database Buttons
Three main types of boards Reader 1

1. Access Panels
2. Alarm Panels
Dual Reader
3. Reader Interface Modules Single Reader
Output Panel
Interface
LNL – 1200
Interface LNL – 1320
LNL – 1300

Overview Terminology
Access Panel – Alarm Panels –

RIMs – Reader
ISC – Intelligent Input and Output
Interface Modules
System Controller Modules
LNL-500
LNL-1100 LNL-1300
LNL-1000
LNL-1200 LNL-1320
LNL-2000
LNL-2210,
LNL-2220
LNL-2220
LNL-2210
LNL-4420
LNL-X2220
LNL-X4420 LNL-1324e
LNL-X3300
LNL-4420

Overview Terminology
Upstream Downstream Devices –

Communication – Communication – Relay –
Bidirectional between ISC Bidirectional between ISC Addressable hardware
Output components
and Communication Server and downstream hardware
Input – Output –
Alarm points such as Hardware that can be Auxiliary Input/Output - Dedicated Input/Output –
motion detector, glass turned on, off, or pulsed Configurable Specific
break sensor, switches, such as lights, sounder,
panic button, door contact siren, strike
Firmware – AccessControl –
Programmed procedures the recommended
used to control hardware database name

Hardware
Basics

2-Wire RS-485 Communication
• Connect downstream devices by like terminals

• TR+ --------- TR+ Typically Blue
• TR- --------- TR- Typically Blue/White
• SG --------- SG Typically Orange
TRx TRx+
+
TRx- TRx-
SG SG
Bond one end only for Earth Ground

Always comply with local codes

Hardware Addressing
Each downstream hardware board, wired from an Access

Panel, requires an address for proper communication
Addressing is unique for each downstream hardware

board per Access Panel port
Board addressing is accomplished by using the dip

switches
• Jumpers on series 1 and series 2 LNL-1300
Addressing range is 0 – 31
• Cycling power to the board, if adjusting address, is recommended
Requires the use of dip switches 1 thru 5 (out of the 8)

located on each board

Hardware Addressing
Dip Switches 6 and 7 are used for baud rate
• Turn both of these ON for 38,400 (Fastest)
Dip Switch 8 is for downstream encryption
Dip Switch Binary Value

Addressing configurations/values can be found in
the Field Hardware Crib Notes and/or in the 1 1
Hardware Installation Guide 2 2
• Use Binary for dip switches 1 – 5 3 4

4 8
5 16
Hardware Addressing
Please take a few minutes to identify the

address of each of your hardware boards
Panel Address
LNL-1100 ?
LNL-1200 ?
LNL-1300 ?
LNL-1320 ?

Hardware RS-485 Termination
Termination of the hardware boards is needed for

effective communication on the RS- 485 cabling
Termination is achieved per board by the use of

a jumper
Default Termination of a new board is ON
• Must remove jumper(s) on hardware board(s) that are not at

each end of the RS-485 cable run
Jumpers per panel series Jumper Series 1 and 2 Series 3

J1 1100, 1200 1200, 1300
J3 1100
J4 1300 1320
J5 1320, 2220, 4420

Hardware RS-485 Termination
Two terminations to be used per line
• For increased reliability over extended distances

• Minimizes external noise and signal reflection
• Termination drawings for each component in hardware installation
guide
Device orientation
• Access Panel at beginning of line (typical)

• Access Panel in the middle of line

Hardware Basics - Inputs
Supervised | Unsupervised Inputs
Supervised input monitors wiring from hardware

panel to end component for any abnormal
resistance value
• Default resistor used is 1K Ω (two 1K Ω needed)
• Customized values can be configured in OnGuard software
Resistors are placed at the End of Line (EOL)
A package of resistors comes with all LNL-1100

panels

Hardware Basics – Normally Open
Normally Open/Supervised Circuit

Example: Panic Button
1000 ohms Alarm Contact
= 2000 ohms 1000 ohms

Hardware Basics – Normally Closed
Normally Closed/Supervised Circuit

Example: Door Contact
1000 ohms Alarm Contact
= 1000 1000 ohms

ohms

Hardware Reference Documents
Hardware Field
Installation Hardware
Guide Crib Notes
Individual
Alternative
Hardware
Reader
Board
Wiring
specification
Guide
sheets

ODBC, ACS.ini,
and Configuration
Editor

ODBC
Open Database Connectivity (ODBC) is the process

of connecting software to a database
• OnGuard uses ODBC Driver 13 for SQL Server starting with 7.4
• SQL Server Native Client 11.0 was previously used as the ODBC
driver
ODBC should be manipulated if:
• The database computer name changes or SQL has been installed

as a named instance (for example, computerName\SQLexpress)
• OnGuard database (AccessControl) location has changed
• Troubleshooting OnGuard Installation
Location of ODBC (for 32 bit applications like

OnGuard)
• 32bit OS systems = Administrative Tools > Data Sources (ODBC)
• 64bit OS systems = \windows\syswow64\odbcad32.exe

ODBC - System DSN
OnGuard uses a System DSN

(versus File or User DSN)
DSN = Data Source Name
The OnGuard installation process

creates a System DSN automatically
• The default DSN name is Lenel for Standard

Installations
The DSN is used by the OnGuard

software to connect to the
AccessControl database

Testing the Existing ODBC
Find the automatically created

System DSN on your computer
Double click or click on the

configure button
Identify the Server is your local

computer name
• Click next

Type in the database Login

ID/Password
May use either the SA or Lenel

account to authenticate
Secur1ty# is the default OnGuard

database password for the Lenel
user account in SQL
• Click Next

Verify the default database is

AccessControl in the drop down
• Note: Leave all other configurations at their

default settings
• Click Next

Click on the Finish button and Test Data

Source to ensure
• The server name is correct

• The database exists
• The ID/Password combination is correct

Create a New ODBC
Add an ODBC that points to your

Instructor’s database
• Use ODBC driver 13 for SQL Server

• Name the System DSN Instructor
• Ensure the connection tests successfully

ACS.ini Configuration File
ACS.ini file is installed during an OnGuard

installation on the server and client machines
It is an initialization file gives direction and

configuration settings to OnGuard applications
and services
ACS.ini file is located in the Windows directory
• Search ACS.ini

ACS.ini Configuration File
Please open your ACS.ini file
• Note it may be necessary to right click on Notepad and Run as

Administrator then browse to the ACS.ini file if you are not logged
in to Windows as an administrator
At the top of the file is the ODBC Connection
• Connect="ODBC;DSN=Lenel”
Near the bottom of the file is the reference to the

LicenseServer Host
• Host Name
• Port

System Administration –OnGuard Passwords
The pop up window indicating Database password

violations is referring to the default database
password of Secur1ty#
It is highly recommended to change this default

password using LS Login Driver
• Refer to chapter 12 in the Installation Guide

• Optionally, this can be turned off in the Users tile
• Prior to OnGuard 7.5, turn off in System Options in System
Administration

OnGuardConfiguration
Database Connection
Editorand License Configuration
OnGuard database connection and license server

configuration information are stored in two files:
• ACS.INI
• application.config
The application.config file is used by OnGuard

services and applications to determine where the
database is and how to authenticate
Configuration Editor is the interface used to adjust

the application.config, if needed

OnGuard Configuration Editor
Configuration Editor runs a check to ensure the

database and License Server information in the
ACS.ini and the Application.Config files are
synchronized
• A message will indicate that actions must be taken if

abnormalities are found

Access Panels

Hardware Basics – Panel Specifications
For info …. your LenelS2 Overview

and Resources Guide

Setting Intelligent System Controller (ISC)
Determine the address of your Access Panel
• Look for the address of your panel

ISC
Use Device Discovery Console to find
• Or use any discovery tool
Find IP address of your panel using its MAC

address

Network Discovery Tools
The LenelS2’s Device Discovery Console supports

discovery for several network devices such as
access panels and cameras
• A custom install of OnGuard is required to have access Device

Discovery Console on a computer
• Requires connection to an active OnGuard License File
Other network discovery tools can used
• Freeware tools found on the internet

Device Discovery Console

Series X Controller Dip Switches
Dip switches 1, 2 and 3 are utilized the same way

as Series 2 controller dip switches
On
1
Dip switch 4 when ON puts the X series board in
2
legacy (series 2) mode
3
4
• The X board will then emulate previous generation controller and
work with older versions of OnGuard
• This does not restore serial capability.
Note: Series 2 controllers (LNL-2210, LNL-2220, LNL-3300, LNL-4420)

are no longer available

Series 2 and X ISC Switches
SW 1 SW 2 Cycle board Results
Board back to factory = 192.168.0.251
On On Drop SW 1 Off and Web page configurations removed -
including any users
192.168.0.251 and all web page

Off On do not drop off either SW configurations are unchanged (users,
etc..)
New IP address acquired if DHCP

server available and all web page
On On do not drop off either SW
configurations are unchanged (users,
etc.)
New IP address acquired if DHCP
server available and Web page
On On Drop SW 2 Off
configurations are removed - including
any users
Note: All Switches should be turned off (when possible) once

the board is deployed and the appropriate User(s) for the web
pages is created

Configuration Web Page
Configuration Web Page can be launched

using any of the following methods
• OnGuard’s Device Discovery Console

• Double click on the appropriate Access Panel in the list
• Using a Web Browser
• Put in the IP address for the board
• Configuration Web Page button located on the Access
Panel > Location page

Using Microsoft Internet Explorer, launch the web

page for the access panel configuration

When switch three is off, you will see the following

screen
• You may safely select “Continue to this website”

The initial login is:

• Username: admin
• Password: password

Logon Warning
One or more of the following messages may occur

upon initial login to the access panel web pages

Logon Warning
A warning dialog will be issued during login

indicating
• No users have been added into the controller

• Dip Switch 1 is on, enabling the default admin|password login
• If additional users have been created and switch 1 is turned off, the
default user cannot login

Configuration Web Page - Network
Network Page
• The IP address settings and host name settings can be changed

here

Configuration Web Page - User
Users Page
• User password strength option is available
It is necessary to create a New User(s) to

ensure successful future logins to the web
pages once all dip switches are off
• This should be done upon initial configuration/set up of the
web pages

Configuration Web Page - User
Disable Web Server
• This disables the ability to configure the access panel

• It can be re-enabled by switching dip switch 1 to the ON position
Disable Zeroconf Device Discovery
• Disables the panel from network discovery tools such as Device

Discovery Console
• Previously called Disable Bonjour

Configuration Web Page – Apply Settings
Apply Settings
• Apply Settings and Reboot the Access Panel for web

page changes to take effect

The following warning may occur upon the

Apply Settings, Reboot process
• Ensure all dip switches are off
• Ensure a User account has been created

Access Panel
Configurations

Access Panel Configuration
Click on Add under the appropriate Access Panel tab
Access panel configuration

• Name the panel accordingly
• Online checkbox
• Communication with the LS Communication Server will be disabled if
the access panel is not online

Access Panel - Location
Location
• Workstation
• The computer running LS Communication server that is
servicing this access panel
• World Time Zone and Daylight Savings
LS Comm Server
machine name

Access Panel - Location
To select X series, select from Panel type dropdown

box on the LNL-4420, LNL-3300, LNL-2220, LNL-
2210 tab
• Note this cannot be changed once saved

Access Panel - Connection
Network Connection
• LS Communication Server uses the IP Address configured for the

access panel (2210, 2220, 3300, 4420, and X series)
• Either IP Address OR Host Name can be used
• Default port is 3001
• Network options are the only options for LNL-2210 and for all X
series panels

Access Panel - Connection
For Series 2 and X controllers, the initial IP address

is set at 192.168.0.251
Controllers also can be accessed by adding the

MAC address information into the host name field
• MAC address is found on the sticker attached to the Ethernet
connection on the access panel

Access Panel – Secondary Connection
The Secondary Connection tab is available for

Series X boards, LNL-3300, and LNL-2000
• For Series X boards, only network options are available
• For panels earlier than Series X like the LNL-3300 and
LNL-2000, modem and direct connections are also
available

Access Panel - Options
PIN Type
• Selection will allocate an appropriate amount of memory for

PIN if the access panel and/or its child boards have keypad
readers
• Select from None, 4, 6 or 9 digit
• Default is none
Cardholders
• Numeric value will allocate an appropriate amount of memory

on the access panel to store cardholder/badge data
• NOTE: Default is 500 cardholders
• Adjust accordingly to reflect number of cardholder storage
needed
Event Capacity
• An indicator of the quantity of events the access panel will

store if the upstream communication is lost to the database
• Event Capacity is fixed at 50,000 for the Series 2 and X
panels

Device count
• Controls the number of downstream devices that may be added to

the access panel
• No more than ½ of the downstream devices can be alarm panels
Series 2 X-Series

Store Expiration / Activation Date
• Stores the badge expiration and activation information on the

access panel
• The options are Not Enforced {Default} / Date Only / Date and
Time
• Time option must be configured in Cardholder Options

Notes Field
Notes field is plain text
• Limit of 1999 characters

• Multiple Selection may be used to add the same notes to many
panels
Notes can be viewed from:
• Alarm Monitoring by Right-Clicking on the device

• System reports
• Access panel report
• Reader report
• Hardware panel report

Downloading a database, upgrading the firmware or changing

Access Panel options will cause a download to the Access Panel.
This takes the Access Panel offline for a period.

LenelS2 Overview and Resource Guide
The LenelS2 overview guide you have received

contains information about:
• Our certification program and maintaining your certification

• Database installation and configurations
• Lenel and OnGuard Resources
• And more….
As part of this course and to achieve certification,

it is necessary for you to thoroughly understand
the contents of this guide

Homework / Hotelwork
Please review the Overview Guide and

complete the quiz # 1 prior to start of Day Two
of this course
• Use the Resource Guide

• Work on your own or with a partner
We will be briefly reviewing this tomorrow

morning

END OF DAY 1

Review of Homework
• Quiz Review!

Alarm Monitoring
Introduction

Alarm Monitoring Introduction
Alarm Monitoring is the application used to view

incoming alarms and events, acknowledge alarms,
monitor hardware statuses, and view pop-ups
such as cardholder photos and video cameras
There is the traditional, desktop client interface

and starting with OnGuard 7.4, a browser-based
interface called OnGuard Monitor

Alarm Monitoring Client Logon
Log in to Alarm Monitoring
Select Default Zone

Launch the System Status Window
Displays all the system hardware assigned to the monitor

zone
Click on View > System Status
Displays graphical animated icons representing hardware

status

Troubleshooting Offline Access Panels
Software Connection Error
• LS Communication Server is not started

• Start as a Service and select Automatic is preferred
Also LS
Communication
Server can be run
as an application

Troubleshooting Access Panels
Panel Options Mismatch status
• This access panel status occurs in the system hardware tree when the
configurations on the access panel differ from what is currently configured in
the database
• To correct this situation, a database download should be issued to the Access
Panel

Download your Access Panel
There are two manual ways to download the

database to an access panel
• Right click on the access panel in Alarm Monitoring
• Right click on the access panel in System Administration under
Access Control > Access Panel program menu
Alarm System
Monitoring Administration

Controlling Access Panel Hardware
To interact with hardware items, right click on the

desired item
• Commands may be optionally activated using the left mouse
button
Right click on your access panel to view controller

notes, if configured in System Administration

System Status Tree Window
#1547
Offline indication for devices
A red X indicates that the parent

device is offline
A yellow X indicates that the

child device is offline
A black X indicates a device

has been marked offline

OnGuard Monitor
OnGuard Monitor is an easy-to-use browser-based

lightweight alarm management client designed to
allow OnGuard users to have the ability to view
and manage alarms from an 'installation-free'
workstation
• OnGuard Monitor allows viewing live and historical events,

responding to alarms, cardholder verification with photos as access
is granted, hardware tree view, and limited control of Lenel
hardware
• This is not a replacement for OnGuard Alarm Monitoring desktop
client which allows for full hardware control

OnGuard Monitor
Log in to Console and click on the Monitor tile
Click on the Hardware Tree icon located on

the left side pane to view the Access Panel(s)

OnGuard Monitor
All Alarms
Hardware Tree
History search

Alarm Panel
Configurations

Alarm Panels
Alarm
Panels
Alarm
Inputs
Alarm
Outputs

Hardware Reference Documents
Hardware Field
Installation Hardware
Guide Crib Notes
Individual
Alternative
Hardware
Reader
Board
Wiring
specification
Guide
sheets


• Hardware specifications


Add Alarm Panels
Open System Administration >

Access Control > Alarm Panel
Click on Add
Name the board accordingly
Select the Access Panel

associated with the Alarm Panel
Add a second Alarm

Panel

Alarm Panels Configurations
Communication Parameters
Select Type
• LNL-1100
• LNL-1200
Specify the Port used to communicate with

the Access Panel or network (LNL-1300e)
Enter Board address

Alarm Panels
and
Alarm Monitoring

Troubleshooting Offline Alarm Panels
Device Type Mismatch status error
• Occurs when the physical device is of a different

alarm panel type than what has been configured
• To resolve this situation, correct the device type
in System Administration
• A download to the Access Panel may be
necessary or re-add the panel

Troubleshooting Offline Child Devices
Yellow X status indicator
• Occurs when the child device is not communicating

with its Access Panel
• Some items to check to resolve this situation include:
• Power loss to the board
• Board address matches the programmed address
in OnGuard
• Panels’ RS-485 communication wiring is correct
• Jumpers set correctly on the child board (RS 485 2
wire jumper)

Alarm Panel Inputs and
Outputs

Add Alarm Inputs
Select the correct alarm panel from

the left side window pane
Name the input(s)
Select the Input Number the device

is wired to on the alarm panel

Supervision
Set the Supervision to Not Supervised,

Normally Open from the dropdown list
Add a second Alarm

Input

Add Alarm Outputs
Select the correct alarm panel from

the left side window panel
Name the output(s)
Select the Output Number the device

is wired to on the alarm panel

Alarm Outputs Configurations
Pulse duration
• By default, the pulse duration for an output is 5

seconds
Add a second Alarm

Output

Controlling Alarm Panel Hardware
To interact manually with a desired

device, right click on that device
• Outputs may be activated, deactivated, or
pulsed

Controlling Alarm Panel Hardware
Icons in System Status Tree
• Input
• Input Activated
• Output
• Output Activated
Status information is located next to

each device

Alarm Panels in Alarm Monitoring
Test the Activate Input 1 by using the Notice the Alarm(s) generated
following items physical hardware toggle in Alarm Monitoring
using the
hardware:
Pulse output 1 manually by Notice the Alarms generated
right clicking on the output in Alarm Monitoring
Right click on the parent What are the results of doing

device to Pulse Output(s) this via the parent device?
Link the Input Activate Input and observe the

and the Output results of the Output
using Input
Output Local
Linkage

Traces in Alarm Monitoring
Traces are very useful to begin to troubleshoot

hardware
Right click on any hardware device and select

Trace
Default is to perform a Live trace which starts

the moment you click OK
• View the results of Historical and Live traces of the device

Reader
Configurations


• Hardware specifications


Add Entrance Reader
Open System Administration > Access Control >

Readers and Doors
Click on the Add button
Name the reader accordingly
Select the Access Panel connected to the Reader

Interface Module for that particular card reader

Reader Configurations – General Tab
Starting with OnGuard 7.1 the board type and

reader output are now separate dropdowns
• Dynamically update based on selection of Panel and Type
Select the Type (hardware board)
Select the Output

Select the Port
• Access Panel port if using downstream RS-485

communication
• Onboard reader selected in Type dropdown will
default to Onboard for port LNL-
1300e
Address LNL-2220/2210/4420
• Downstream board address (0-31) or IP/MAC address

of LNL-1300e

Reader Number
• Select Reader number 0 for physical reader 1 on the

board or Reader number 1 for physical reader 2 on the
board
• Only available on boards that support up to two readers
• Single reader boards default to 0

Reader modes for online operation
• Locked
• Unlocked
• Facility Code
• Card Only
• PIN or Card
• Card and PIN

Reader modes for offline operation
• Locked
• Unlocked
• Facility Code
Selecting any other choice sets the

offline mode to LOCKED
A reader is considered
offline when:
Communication is lost to the Access Panel

but the reader still has power
This is sometimes also called “degraded”

mode

Card Format
• Must checkmark appropriate format(s) for the card reader

Reader Configurations – Settings Tab
The Paired Master and Paired Slave

checkboxes are located on the Settings tab
Used to control the same door using LNL-

1320, LNL-(x)2220, LNL-(x)4420
Automatically configured if using the two

onboard readers of an LNL-2210

Add Exit Reader & Server Room Reader
Add Readers
• Exit Reader to configure is Reader 1

• LNL-1320
• Server Reader to configure is Reader 0
• LNL-1300 (Server Room Reader)

Alarm Acknowledgment
Double click on any alarm in the

Main Alarm Monitoring Window
• Optionally, right click on the alarm and
choose Acknowledge
Displays information regarding

an alarm
Notes may be associated with

alarm

Alarm Acknowledgment
Elapsed time
• Displays the elapsed amount of time between when the

event was generated and when it was responded to

Fast/Group Acknowledgment
Fast/Group Acknowledgment of alarms
• Multiple selection of alarms

• Range – click the first alarm then use the shift key to select
range
• Individually – Using the control (Ctrl) key
• Ctrl key + F12 keyboard shortcut
• Ctrl key + F11 (Select All)

OnGuard Monitor
Observe how to acknowledge alarms

Reader Interface
Modules
and
Alarm Monitoring

Controlling Reader Hardware
To interact manually with a desired device,

right click on that device
• Reader modes may be changed

• Doors may be momentarily opened
• Trace the device

Readers and Alarm Monitoring
Icons in System Status Tree
• Door Forced Open

• Door Held Open
• Cabinet Tamper
Status information is located next to each reader

Readers and Alarm Monitoring
Observe the 3 notifications (icon change, status

Test the Using the door indicator, alarm generated)
following contact, activate a Notice the Door Held Open icon, status, and alarm
items Door Forced Open How long until the Door Held Open occurred?
using the How long does the door release?
hardware: Right click on a reader

and choose Open
Door(s)
What does this do?
Right click on the
parent device and
choose Open Door(s)
How long will the reader stay in this mode?
Right click on a reader
What does the ‘Default’ choice mean?
and change the
Reader Modes What are the results when choosing the Reader
Modes option on a Parent device?

OnGuard Monitor
Log in to Console and click on the

Monitor tile
Click on the Hardware Tree icon located

on the left side pane to view all hardware

OnGuard Monitor
Observe how to control hardware

OnGuard Monitor
Observe how to view All Alarms

OnGuard Monitor
Observe how to perform a Historical Trace

Card Formats

System Options - Hardware Settings
OnGuard supports up to 16 card formats as of

7.4
• Default is eight (8) card formats

• With an additional eight (8) available to be used as Asset
card formats
• Asset card formats can be used for vehicles, equipment, etc..
• No Asset card formats are available if value is set to 16

Card Formats
Access Control badges/cards store data on them
The format of that data is needed to create a card

format in OnGuard
• Card format(s) may then be enabled on a card reader(s) and/or used
to encode the information onto a badge
OnGuard supports the following card formats:

• Magnetic
• Wiegand
• Smart Card

Card Formats
26 bit Wiegand is an industry standard binary

format
• Higher bit card formats (35, 37, 48, etc..) are available
Magnetic and Wiegand formats may be

assigned to readers
Magnetic and Smart formats may be used to

encode a badge
As of 7.4, options of 8 or 16 card formats can

be selected
• Set under System Options > Hardware Settings

• Previous versions only supported 8 card formats

Card Formats
Card format structure may include
Facility Code
• Identifies a particular site or a block of badges

• Configured up to 9 digits in OnGuard
Badge ID
• Identifies the badge number

Issue Code
• Tracks reissuance of the same badge ID number

• Not used for Wiegand (Proximity) badges

Card Formats
Card formats are configured in System Administration

under Administration > Card Formats
By default, OnGuard has templates for various

formats already created
IDs 1 – up to 8 (or 1 – 16) are automatically sent to

the Access Panel(s)

Access Levels

Access Levels
Access Levels are used to control cardholder access
Access Levels are assigned to Cardholders
An Access Level may contain readers that span

across multiple Access Panels

Access Levels
Access levels are a combination of

readers and timezones
• Multiple readers may be assigned to an access level
• Individual readers may use different timezones
What is the default number of access

levels that can be created?
• What is the maximum?
What is the default number of access

levels that can be assigned to a badge?
• What is the maximum?
Where in OnGuard are these changes

made?

Access Levels Configuration
Go to Access Control > Access Levels
Click on Add to configure at least one Access

Level
• Note: if duplicate access levels are created, a warning box

will pop up
• For class purposes, it is OK to click Yes

Access Levels Configuration
Checkmark appropriate Reader(s) and select the

Always timezone
Click on Assign button
Click OK to save

Timezones
Introduction

Holidays and Timezones
Timezones encompass time of day, days of week,

and holidays
Timezones/Holidays are stored on the access

panels
A Timezone/Holiday may be used to:
• Control cardholder access (access level)

• Control online mode of card readers
• Mask alarm inputs

Timezones
A Timezone consists of:
• Start time of day, end time of day, days of the week, and
holidays
The number of Timezones is configurable
• Default is 255 and is configured under System Options >

Hardware Settings
• There can be up to six intervals in each Timezone

Cardholder
Options

Cardholder Options Configurations
Cardholder Options is used to specify system

wide guidelines for cardholder information
such as:
• Quantity of active badges per cardholder

• PIN Generation
• Badge ID Allocation
Click on Administration > Cardholder Options

Badge ID Allocation
Badge ID Allocation tab is used to configure the

method by which the Badge ID field will be
automatically filled in when adding a new badge
to a cardholder
Log off / on will be required when changing this

setting

Badge ID Allocation
Automatic – the badge ID will be assigned by the

system and generally, each new badge ID will be
the previous badge ID + 1
• This is the default setting and is useful with Smart or Magnetic
badges
Manual Entry – no badge ID will be automatically

assigned and a badge ID must be entered
• Useful when using Wiegand/Proximity badges

• Allow Edit of Badge ID is enabled by default when choosing this
option
Please change to Manual Entry and log off / on

Cardholder
Management

Cardholder Management
Cardholder Management is the process of

adding/modifying Cardholder data, badge(s),
photo(s), access level(s), and more to an
individual badge holder
There is the traditional, desktop client interface

and starting with OnGuard 7.3, a browser-based
interface

ID Credential Center
There are various locations to access the
cardholder form
Within System Administration

• Administration > Cardholders
Within Alarm Monitoring

• View > Badge Info
Under the OnGuard Program suite

• ID CredentialCenter
• Browser-based OnGuard Credentials

Adding a Cardholder
In System Administration, click on

Administration > Cardholders
• Notice a Cardholder program menu appears next
to the Administration program menu
Click on the Add button
• When initially adding a cardholder all tabs are

accessible
• After clicking OK to save the cardholder, it is
necessary to modify the cardholder’s
information per tab
• Last name is the only required field
Top and right sections of the

cardholder form are present on all tabs

Adding a Cardholder
Please put in Last and First name
• Notice on the Badge and Access Levels tabs no information has

been pre-populated or pre-selected

Adding a Badge
Choose the Employee badge type
A cardholder without a Badge Type assignment

will not be downloaded to an access panel

Adding a Badge
On the Badge tab, type in the Badge ID field the

badge ID number from the badge the instructor gave
you
• Notice the default status is Active and view the various list values
Put the same number in as your PIN
• Notice PIN is hidden

• If Badge ID is less than 4 digits use 00’s

Cardholder Access Level Tab
Access levels are assigned to a cardholder’s badge

via the Access Levels tab
• How many access levels can be enabled? Why?

• Where is the value configured in OnGuard? What is the maximum
value?

Save Cardholder Record
Be sure to click OK to save the cardholder record

Cardholders and Alarm Monitoring
Test the following Present your badge to a reader Granted No Entry Made vs Granted Access
items using the – what is the difference?
hardware:
Why is there a delay for the Granted No
Entry Made events?
Try your PIN on a keypad card reader Remember to press # if PIN is less than
configured maximum PIN value
Alternatively, if reader is in Card and Pin,

you can put in PIN first then present card
and the # key is not necessary
Initiate a Door Forced Open

Congratulations !!
Congratulations! You have successfully set up, configured,

and tested an OnGuard system

Review Questions Group Work -optional
Work with your group to complete assigned review

questions.
Please prepared to present the answers to the

class tomorrow morning
For each answer, what resource did you use to

find the answer?

END OF DAY 2

Review Questions Activity debrief - optional
Present the answers to the class giving:
• the answer
• where you found it?

Database Backup

SQL Database Backup
It is critical to perform backups of

the database
• Backup on a separate drive
Installation Guide – Chapter 3
• Database Backup and Restoration
Manual Database backup
• SQL Server Management Studio

• Right click on AccessControl database >
Tasks > Back Up
• Backup type
• Complete (Full Backup)
• Differential (Backup changes since the
last full backup)
• Select destination media

Archiving

Archiving
Archiving is moving older records from the

live database to an alternate storage location
• Useful for maintaining the size of the database
• Archived records can be accessed to run reports
• Scheduler feature in OnGuard should be used to
automate the process
• Requires LS Linkage Server
• Default archiving timeframe is records older than 180 days
Prior to archiving created .txt files which were

OnGuard stored in a configurable path location
7.0
For more information, use Chapter 22

System Administration User Guide

Archiving with OnGuard 7.5
OnGuard 7.5 can be configured to archive to a database rather

than .txt files
A database needs to be created in SQL or Oracle for the archived

data
• Recommended database name is AccessControl_Archival
• Archival database can be any name
• It is strongly recommended to never change the database name once activated
• SQL Management Studio is not required for SQL Express OnGuard deployments.
OnGuard will automatically create the ACCESSCONTROL_ARCHIVAL database
when the Archive to Database option is enabled
Once you enable Archive to database, you can use the Restoring
tab to restore existing archive (.txt) files into the Archival database
• This is a one-time action

Reports
Purge (Delete)
Archive
AccessControl
AccessControl
Database
Restore _Archival
Database
Text File Archive
2014_3_23_Events.txt

The Archive database should reside on the

same server instance as the Live database
Create AccessControl_Archival database in

SQL
Make Lenel Secur1ty# the database owner
• sp_changedbowner lenel;
Reference the Installation Guide PDF under

Chapter 5 – SQL Server – Determine the
Database Archive Plan

Make sure all ‘_restored’ tables are empty
In order to select Archive to database, all restored

tables in the Live database must be deleted

Once archival database is created, enable Archive

to database under Administration > Archives…
Put in the Database name
• Once Archive to database is enabled, it will not be possible to go

back to .txt archiving

Setup Assistant will automatically run at this time if

it was not previously done when creating the
archival database

Use the Restoring tab to move existing .txt archive

records to the AccessControl_Archival database
• Once the archive file has been restored into the Archival
database, it is recommended to click [Delete Archive] to delete
the archive .txt file

Use the Archive Management tab to manually Purge

(Delete) records
• Default is records older than 365 days

• Archival database connection status is monitored and displayed

Scheduling Archiving
To set up automatic archiving use

Scheduler
Select Archive/Purge Database as

an Action Type and configure the
appropriate schedule

System Administration
Features

System Administration Features
Creating Users in Desktop and Browser applications

Features
covered: User Permission Groups
Access Groups
Badge Types
List Builder
Cardholder Searches and Reports
Timezone Reader Modes
Masking
Monitor Zones
Alarm Monitoring features

User Accounts
and
Permissions

OnGuard Users
Creating OnGuard users is helpful to adjust permission

levels and for tracking user activities within the software
Unlimited Users can be created
Unlimited permission groups can be created
Permission groups are assigned to Users
User configurations can be made in the desktop client or

the browser client

Desktop and Browser features
Users feature comparisons
Features Desktop Browser

Add/Modify/Delete User(s) X X
Add/Modify/Delete Permission Groups X
Password Expiration Settings X
Password Complexity Settings X
User Searches X X
Assigning Permission Groups X X
Mass Activate/Deactivate Users X

User Permissions
Configures user accounts for OnGuard

applications
Permission Groups allow easy configuration of

OnGuard user accounts with similar permissions
Report
Permissions
System Cardholder
Permissions Permissions
OnGuard
User
Monitor Field/Page
Permissions Permissions

User Accounts – Templates
OnGuard has default Users Accounts
• System Account (SA)

• Administrator
• User
• Badge Operator
There can only be one (1) System Account (SA) and multiple
Administrators, Users, and Badge Operators accounts as needed
SA has all permissions in OnGuard and those permissions cannot be

changed
Administrator account, by default, has the 2nd highest permission

rights in OnGuard then User and lastly Badge Operator

User Permissions – Templates
OnGuard provides default Permission templates

which can be applied to an OnGuard user
• Admin
• Power User
• User
• Badge Operator
Admin has the most permissions followed up

Power User, User, and then Badge Operator
Custom permission groups can be created
• It is not recommended to alter the default permission groups as

there is no option to return to the factory default settings

Add a New User
Create (Add) the user information
• First and last name

• Notes may be added
Create an internal account for the user
• User name and password

• Passwords are case sensitive in 7.5
Be sure to uncheck Access to the system

is disabled checkbox

Add a New User
Assign “Admin” Permission Groups to your

User account
Click OK to Save

Permission Groups
The individual permission groups are

assigned to an OnGuard user
• Not all permission groups need to be assigned to a
User
• A User only needs permissions pertinent to their job
Icon Keys are shown below
Icon Key:
Icon Indicator Key:
View
Dark - Enabled
Add
White - Disabled
Modify
Partial under group
Delete

Field/Page Permission Group
Field/Page Permission group can be used to either hide or allow

view only capabilities per individual field on the Cardholder form
• Default setting for the administrator account is to View/Edit All Fields
• Double click on the field to change the Yes/No value when adding or modifying the
group

Permission Groups - Comparison
Compare checkbox can be used on System, Cardholder,

Monitor, and Report Permission group tabs
Used to compare feature set between two groups

Exporting Permission Group Data
System, Cardholder, Monitor, and Report

Permission Groups may be exported to a Comma
Separated Variable (.csv) file format
• In the Compare mode, the user can export the settings of the
permission groups being compared
• CSV files may be imported into programs such as Microsoft
Excel

User Search
Search for Users with common permissions
• Permission Group
• Selected Permission (And)
• Must have all selected permissions
• Selected Permission (Or)
• May have any selected permissions
• Results may be exported as .csv file

Users – Browser Application
Log in to Console with your newly created user account to

access the browser based Users application
• Use your computer name
• https://{computer}:8080
Users tile was added in OnGuard 7.5 and is installed

automatically
Features include:
• Adding Users
• Assigning User Permissions
• Expiration features for passwords
• Password complexity
• Forcing all users to change password on next login

Click on your user account to view your

profile on the side panel
• Features are similar to the desktop version
Change on next login option is enabled by

default under the Account section when
adding a user
• Useful if the user forgets password or needs to be

reset
Never expire option is useful for service

accounts which are used intermittently

Click on the plus icon to Add additional users
Checkmark multiple users to mass Activate

or Deactivate using the Action dropdown in
the lower right corner

Click on the 3 dots icon within the user profile to

delete
Slide the button icon to make the user Active or

Inactive

To deselect user, hold down the Ctrl key then click

the checkbox or click on the edges of the checkbox
or use the group selection checkbox at the top Select
ALL
checkbox

Users Password Settings
Click on the Users tile and select

Password Settings on the left side
panel
• Optionally, right click on Users tile to ‘Open link in

new tab’
Uncheck Inactivity timeout and

Lockout after failed logins checkboxes
Click on the SAVE button in upper

right corner

OnGuard Passwords
With OnGuard 7.5, password complexity and

expiration features such as minimum length,
password strength, and inactivity rules can be
configured through the User browser application
• The User browser application does not require a subscription license

file

Users – Password Settings
Various password settings can be utilized for

enhanced security
• Only available in Users application not in System Administration

• Case-sensitivity is now enforced

Expiration features include:
• Inactivity timeout in minutes

• Enabled by default and set for 15 minutes
• Password expiration in days
• Maximum is 730 days

Expiration features include:
• Expiration reminders
• Number of days before password
expiration occurs when the user will
receive the first reminder
• Number of days before password
expiration occurs that the user is
reminded each time they log into
OnGuard
• Lockout after failed logins for
specified number of minutes after x
failed attempts within a specified time
frame
• Enabled by default for 5 minutes after 3
failed attempts in 60 minutes

The user profile will indicate if locked out
An administrator can unlock the user

under the profile section

Complexity features include:
• Minimum password length

• Maximum is 127 characters
• History prevents reuse of recent passwords
• Range is 1 - 1000
• Require numeric characters
• Requires at least one numeric character in the
password
• Require special characters
• Requires at least one special character
(!@#$%^&*) in the password
• Require uppercase and lowercase
characters
• Requires at least one uppercase and one
lowercase character in the password

Complexity features include:
• Cannot change password sooner than x days

after the last time it was changed
• Control how soon the user can change their
password and then enter the number of days that
the user must wait
• Password can be the same as username
• Prohibited password list
• To add or modify the list, click in the list and add
new keywords, or change or delete any existing
keywords

Remember to click on Save button
• Changes will take affect for future additions or

modifications
Requirements will be viewable on the user

profile under Account > Change password
section

Access Groups

Access Groups
An Access Group is a collection of Access Levels
A default Access Group may be assigned to a badge type to

allow for automatic assignment of access levels to a
cardholder
• For example, general access to a building(s)
A group may also be used in assigning multiple access levels

to badge
• Access Levels are assigned to the cardholder not the Access Group
Unlimited Access Groups can be created
• Creating Access Groups is optional

Access Groups
Click on the Access Groups tab under Access Control

> Access Levels
Click on Add and Name the Access Group
Checkmark the necessary Access Level(s)
• What is the maximum you can checkmark and why?
Click OK to save the Access Group

Badge Types

Badge Types
A Badge Type is simply a mechanism to

automatically assign key features to a
Cardholder’s Badge such as:
• Deactivation date of the badge
• Default Access Group (Access Levels) assigned to the
badge
A Badge Type must be assigned when a

badge ID is added to a cardholder
Click on Administration > Badge Types

Badge Types
There are three default badge types in

OnGuard
• Employee
• Temporary
• Visitor
Unlimited number of Badge Types may be

created to customize badge features
• Useful for contractor / temporary badges

Badge Types
Classes of Badge Types
• Standard badge type is typically used for Employee

badges and is a permanent badge
• Temporary badge type is typically used for Contractors /
Temporary badges
• A badge with a Temporary Badge Type assigned to it can
be moved from one cardholder to another

Badge Types
A Badge Type may be used to automatically create

a deactivation date for a badge
The deactivation choices are:

• After X many days, months, or years
• On a specific date
• Manual entry of the date
Default time is 12:00am

• This may be changed after enabling Use Time feature under
Administration > Cardholder Options

Badge Types
A Badge Type may be used to

automatically assign access Cardholder
levels via an access group to a
cardholder’s badge
Badge Type
Add a Badge Type to reflect a Access Group

deactivation date and a Default
access group
Access level Access level

1 2

List Builder

List Builder
There are various dropdown fields within

OnGuard that allows the user to select a value
from a pre-configured list
Many of those dropdown fields such as

Department, Building, and Location are on the
Cardholder form

List Builder
Prior to adding a cardholder, let’s add

some values to those dropdown lists
Go to Administration > List Builder
Please add one (1) value to each of the

following lists and click close
• Badge Status
• Building
• Department

List Builder
The Badge Status dropdown is used to activate or

deactivate a badge for a cardholder
Active is the only choice that allows a badge to be

activated and is the default when adding a badge
• Active is the status that puts the badge on the panel(s)
• Active cannot be deleted or modified in List Builder
• Any other Badge Status choice may be applied to deactivate a
badge thus removing it from the panel(s)
• Useful to search for cardholders with a particular deactivated
badge status like fired or terminated employees
The cardholder form will need to be closed and re-

opened to view the dropdown list values

Cardholder Searches
and Report

Add Cardholders
Please add 2 more cardholders
Use your existing access level on 4
Add 1 cardholder with no access levels

Cardholder Access Level Tab
Access group assignment
• Assigns access levels in the group to a badge
Temporary access level assignment
• Sets the activation and deactivation dates for an access

level

Double click on Access Level
Double click on any Access Level on the Access

Level tab to view the associated Readers and
Timezones

Show Unassigned Levels
Deselect the checkbox ‘Show unassigned

levels’ to observe the change in the Access
Levels form

Adding Cardholders Photos
To add a cardholder photo, let’s use Credentials
Launch and log in to Console
Open Credentials
Please add a photo to your existing cardholder

• “Fun Photos” are available from your instructor as needed

Adding Cardholders Photos
Be sure to click on Done then Save

Cardholder Photos
Observe in System Administration the newly added

cardholder photos by clicking on Search and OK in
the Cardholder form
• Use the arrow keys in the lower right corner to move through the
cardholders

Cardholder Photos
To add/modify photos on the Cardholder form, click

on modify and then the Capture button
• Photos can be exported

Credentials
Observe in Credentials how to add/modify a

badge

Credentials
Observe in Credentials how to add/modify an

access level

Printing Badges
Within the Cardholder form, click on Print after

you have searched for the necessary
cardholder(s)
• Click on Print Preview button to view the badge layout

Printing Badges
With OnGuard 7.5, printing badges from

Credentials is available
• Configuration of LS Badge Printing Service in System Options

is necessary to print from Credentials
• Start the service

Cardholders Searches
Various Searches can be done to assist with

running cardholder related reports
Multiple fields can be populated to refine

searches

Cardholders Searches
Click on Search and try the following searches:
• By partial last name

• By department
• Use < or > in the Badge ID field, Activate/Deactivate, Last Changed
fields to search for data less than or greater than a value or date
• Use % if looking for data that ‘contains’ specific characters
• Access Level searches to include some, all, or none of the selected
access levels

Credential Searches
Searches in Credentials
• By partial last name
• By department
• Use % if looking for data that ‘contains’ specific characters
• Access Level searches to include some, all, or none of the
selected access levels

Reports

Cardholder Reports
Cardholder reports
• Cardholder reports can be run based on a cardholder search

• ‘Limit report to current search’ checkbox is enabled by default

Cardholder Reports
Only reports assigned to the user via Reports

Permission Group will be initially viewable in the
Report list
• ‘Display unauthorized reports’ checkbox can be enabled to view all

reports

Cardholder Reports
Cardholder reports
• Select report and click on Print

• Select Preview, Export, or Print

System Reports
Reports are available from System

Administration or Alarm Monitoring
Approximately 150 default reports in

OnGuard

System Reports
System Reports include the following:
• The ability to search within a report

• The ability to export reports to other file formats
• A customizable report description
• Reports may be run against live data or restored data separately
• Enable checkbox at the bottom to ‘Use restored records’
Through User Permissions, displaying specific reports

can be limited
• Reports Permission Group

Reports Types
Reader Alarm Panel Anti-Passback
Alarm
Date/Time Event
Acknowledgements
Receiver Account
NGP
Zone

Report Filtering
Each report tab has filtering capabilities to refine

the desired report
Filtering options include
• Date and Time

• Cardholder
• Reader, Alarm Panel, Access Panel
• Text
• Events

Previewing Reports 101
Find
Export Stop report

from loading
No longer in
Page OnGuard 7.0
Forward/Back

Report Output
Exported
• Data may be exported to
• .PDF
• .XLS (.XLSX)
• .CSV
• .DOC
• .RTF
• .XML
Printed
• Output to the system default printer

User Transaction Report
Test the following in Alarm

Monitoring:
• Run the User Transaction Log report

for today’s date under the Date/Time
tab by clicking on View > Reports
• This is a useful report(s) to monitor
OnGuard User activities

Customizing Reports
To customize reports, the full version of Crystal

reports is required
• OnGuard supports Crystal Reports XI (11 and 11.5) release 2,

Crystal Reports 12 and Crystal Reports 14
Crystal Reports usage is covered in one of our

Advanced courses

Holidays and
Timezones

Timezones encompass start time of day, end

time of day, days of week, and holiday type
Timezones/Holidays are stored on the access

panels
A Timezone/Holiday may be used to:
• Control cardholder access (access level)

• Control online mode of card readers
• Mask alarm inputs
• And more….

Holidays
Holidays can be configured in OnGuard to manage

cardholder and hardware status changes
• Mask/UnMasking inputs on a holiday
• Cardholder access into a facility on a holiday
A holiday may be of Type 1-8 or multiple types
• Used for ease of maintaining and managing holiday categories

• All Holidays can be placed in one Type or split between multiple Types
(1-8)

Holidays
A single Holiday duration may be up to 366 days
Holiday type names may be customized
Holidays consist of type, date, and duration
• The number of Holidays is configurable:

• 20 to 255
• Default is 255 and configured under System Options > Hardware
Settings

Timezones
Timezones
• A Timezone consists of: Time of day, days of the week, and holidays
• The number of Timezones is configurable
• Default is 255 and is configured under System Options > Hardware
Settings
• There can be up to six intervals in each Timezone

Timezones
12 Hour 24 Hour
Time Time
12.00 AM 0:00
Never and Always are default Timezones
01.00 AM 1:00
02.00 AM 2:00
• Can not be modified or deleted 03.00 AM 3:00
04.00 AM 4:00
05.00 AM 5:00
06.00 AM 6:00
A Timezone may be activated on
07.00 AM 7:00
holidays by type (H1, H2, H3…H8) 08.00 AM 8:00
09.00 AM 9:00
10.00 AM 10:00
11.00 AM 11:00
12.00 PM 12:00
An interval may not cross a date change 01.00 PM 13:00
02.00 PM 14:00
03.00 PM 15:00
• Two intervals must be used 04.00 PM 16:00
05.00 PM 17:00
06.00 PM 18:00
24-hour clock is used for Start and End 07.00 PM 19:00
08.00 PM 20:00
times 09.00 PM 21:00
10.00 PM 22:00
11.00 PM 23:00

Timezone Rules
A Timezone activates on the leading edge of the minute
08:00 17:00
08:00 Configure timezone 16:59
Start End
A Timezone deactivates on the trailing edge of the minute

(when the minute no longer exists)

Timezones/Holidays
A holiday is treated as an exception in the activation of a

timezone
• Example: An access level that uses an 8:00-5:00 timezone will not work if
the day is a holiday
A timezone may be configured to activate on a holiday, if

desired, by enabling the appropriate holiday type
checkbox for the timezone
A newly created Timezone will work on the next Start or

End time configured
• Example: if an 8am – 5pm timezone is created and applied to an input at

10am, the input will change status at 5pm
• A download to the Access Panel will be required if immediate action is
required or manually adjust via Alarm Monitoring

Holidays and Timezones – Hands On
Add the following Timezones
• Ensure proper naming of each timezone

• Monday – Friday 8am to 5pm
• Monday – Friday 10pm to 6am
Add a Holiday(s) and apply appropriately to each

Timezone

Timezone Reader
Modes

Controls the reader mode during the start and end

of a timezone
The start and end reader mode will override the

current online mode of the reader
• Example: at 08:00 set the reader mode to unlock and at 16:59 re-
secure the reader to card only mode
A newly created Timezone Reader mode will work

on the next Start or End time configured
• Example: if an 8am – 5pm timezone is assigned to a reader at

10am, it will work next at 5pm and continue as configured
• A download to the Access Panel will be required if immediate action
is required or manually changing the reader to desired mode
(preferred option)

To test this feature we are going to create a one

minute Timezone to Unlock the reader at the
start and set the reader to Card Only at the end
of the Timezone
Go to Access Control > Timezones
On the Timezones tab, click on the Add button

and configure a one minute Timezone starting
approximately 5 minutes into the future for
today
• Set start time to 10:45. What is the end time?

On the third tab, click on the Modify button
Select Reader and your one minute

Timezone
Set the Start Reader Mode to Unlocked

and End Mode to Card Only
Click on the Assign button and then OK

button

Alarm Monitoring
Go to Alarm Monitoring to view the automatic change

of the reader from one mode to the other
• Notice the events generated in the Main Alarm Window
To test again, simply change the Timezone start and

end mode to a future time

Masking

Masking
Masking is a command issued to a hardware

device to conceal the event
• Input events like Alarm Active will not be sent to Alarm Monitoring
or to the database
By default OnGuard never masks input events

however a Timezone can be selected to
automatically mask during a time frame

Masking Door Held or Forced Opens
Specify a Timezone to automatically mask a Forced

Open and/or Held Open on the Settings tab of the
reader
• When alarms are masked, they are not reported to either alarm
monitoring or stored in the database for later event reporting
• With the correct User permissions, Door Forced and Door Held can be
manually masked within Alarm Monitoring

Masking
Activate Input 1 by using Notice the Alarm(s)

Test the the physical hardware
generated in Alarm
toggle
following Monitoring
items Mask Input 1 manually by Activate the input Was there an alarm generated?
right clicking on the input
using the toggle to see the
results of masking
Right click to manually unmask
the input
hardware: Pulse output 1 manually Notice the Alarms
by right clicking on the
output
generated in Alarm
Monitoring
Right click on the parent What are the results
device to Mask/UnMask
Input(s) or Pulse Output(s)
of doing this via the
parent device?

Monitor Zones

Monitor Zones
Monitor Zones are used to allow for filtering of

hardware and events/alarms in Alarm Monitoring
• Monitor Zones can contain all hardware from an Access Panel or
specify individual hardware components such as the Front door
reader or specific motion detectors (inputs)
• Timezones give added control to configure which events during
what timeframe
Default Monitor Zone exists automatically
• Can contain all hardware
Unlimited quantity of Monitor Zones can be

created
Monitor Zones can be assigned to a workstation

and/or to an OnGuard User

Monitor Zone – Hands On
Click on Add and name the Monitor Zone
Select the Access Panel(s) with checkmark
Assign to the right and click OK

Monitor Station
A monitor zone may be assigned to a workstation

running alarm monitoring
• Example for Guard station

Monitor Station Event Queue
Queue events when logged out
• LS Communication Server continues to send

events to the database
• Events are stored in a queue until the Monitor
Station logs in
• There is a separate queue for each Monitor
Station
• The limit for the number of days is set in
General System Options

Monitor Zone User Assignment
A Monitor Zone may be assigned to an OnGuard

user
A user assignment overrides a workstation

assignment

Monitor Zone Assignment
When logging on to Alarm

Monitoring the following options
are available
• Save as monitoring station assignment

• The selection is stored on the Monitor
Station Tab
• Save as user assignment
• The selection is stored under Monitor
Zone Assignment in Users

Monitor Zone Assignment
Any new Access Panels that are

added to the system should be
assigned to a monitor zone(s)
The system may also be

configured so that new Access
Panels are not added to a monitor
zone (System Options)
• User will be prompted to assign the Access

Panel to a monitor zone
• The user has the option not to add the
Access Panel to any monitor zones by
pressing Cancel
• An Access Panel can belong to multiple
monitor zones

Alarm Monitoring
Features

Access Panel Firmware Versions
The System Status Window shows the firmware

version for the Access Panel(s)
Check Partner Center Center for firmware versions

under Downloads > Compatibility chart for Access
Control Hardware

Firmware Revision Check and Download
Alarm Monitoring will perform a check of the access

panel firmware to confirm the panel is up to date
[Not Current] will be displayed if an update is needed
If needed, firmware may be updated manually by

right clicking and choosing Download Firmware
• The panel will eventually go offline briefly to reboot the panel once
the firmware download is complete

Firmware Versions
System Status Window can be set to

display firmware for Reader and Alarm
Panels under Options > Display Device
Firmware Revisions
• Board/module Series is indicated in status of Alarm

Monitoring Hardware System Tree
Check Partner Center for firmware versions

under Downloads > Compatibility chart for
Access Control Hardware

Floating Alarm Monitoring Windows
Floating Mode
The display mode of most Alarm Monitoring

internal windows can be toggled between standard
and floating behavior
• Accessed from the upper left System Menu window icon
When a window is in the floating display mode, it

can be positioned outside the Main Alarm
Monitoring window or onto another monitor
Floating windows can be individually managed

from the Windows Task Bar

Reports in Alarm Monitoring
Reports may be run in Alarm Monitoring

with the correct User permissions assigned
Click on the View program menu and

select Reports
Preview the Alarm Input Events report

Alarm Monitoring Features
Test the following in Alarm Monitoring:
• Enable Cardholder Verification pop-up under View >Cardholder

Verification
• Select one of your readers and then present your badge to that
reader to observe the results
• Present another cardholder’s badge to the same reader

Test the following in Alarm

Monitoring:
• Enable the cardholder pop-up under Options >

Auto Cardholder Display for Access Alarms
• Present your badge to any of your readers and
observe the results
• Present another cardholder’s badge to any of
your readers

• Click on Configure > Alarm Filter by unchecking Access Granted

• Present your badge to test this feature
• Does the event still go to the database?

• Click on View > Pending Alarms

• Cause door forced open alarms and granted access events to
observe the outcomes in the Pending Alarms vs Main Alarm
Windows

• Select Configure > System Status Options

• Select Specified devices and checkmark Active devices to view
only Active alarms
• Choose to display in List View
• Cause a door forced open or alarm active to observe the results

OnGuard Site
Installation Completion
Best Practices

OnGuard Installation Completion Checklist (page 1)

OnGuard Installation Completion Checklist (page 2)

Service Call Exercise “Something’s wrong with my OnGuard system?”
• Scenario 1 • Scenario 2

Calling Lenel OnGuard Tech Support? (page 1)
“I need assistance…”

Calling Lenel OnGuard Tech Support? (page 2)
“I need assistance…”

Review Questions Group Work
Please prepared to
Work with your group For each answer,
present the answers to
to complete assigned share where you found
the class tomorrow
review questions. it (which resource).
morning

END OF DAY 3

Review Questions Activity debrief
Present the answers to

the answer you found where you found it?
the class giving:

OnGuard Core Practice Lab
Use the OnGuard Core Practice You have from _____________

Lab handout to complete to to ____________ to complete
practice installing the OG the practice lab.
system.

Expectation Review
Thank you for your attendance and participation
Please take the time to complete the survey that

will be emailed to you. We value your feedback
and use it to improve our training classes.
Did we meet your expectations for this course?

Upon Completion of Class
After passing the VAR Training

After passing the
course exam, VARs licenses can be Please leave
course exam, Direct Please make sure to
will automatically be renewed/upgraded, classroom training
Support Users will take all personal
registered for provided your items such as
be able to call Lenel items with you when
access to the tech certification is hardware and
Technical Support finished
support secure web current, at Partner badges at your desk
Group
page Center

Student Transcripts and Certificates
Student transcripts and certificates are available

online through the Training Portal at Partner Center
and can be viewed, downloaded, or emailed at any
time

OnGuard
Glossary of Terms
Link to Glossary in Lenel Knowledge Base

SQL Server
Installation and
Configuration

SQL Server Installation – Hands on
• Install SQL Server Express
• For SQL 2014, the ADV version will install SQL Management Studio
along with Database Engine
• For SQL 2016 and SQL 2017, SQL Management Studio is a
separate installation
• Step-by-step Captivate Videos are available for SQL installation and
configurations necessary for the OnGuard database
• Reference the Installation Guide PDF, Chapter 5, for written step-by-step
installation assistance
• PDF is located in the OnGuard installation software package under
Program File > OnGuard > doc > en-US

SQL Server 2017 Installation – Hands on
• For information on installing SQL 2017 and specific feature selections,
refer to:
• https://docs.microsoft.com/en-us/sql/database-engine/install-
windows/installation-for-sql-server?view=sql-server-2017
• Select SETUP application under the SQLEXPRADV_x64_ENU folder and

Run as administrator

• Select New SQL Server stand-alone installation

• Accept the license terms and click Next

• Click Next through the Microsoft Update and/or Product Updates

• Click Next through the Install Rules if this window appears

• Select necessary Feature Components and click Next
• At a minimum select
• Database Engine Services
• Full-Text and Semantic Extractions for Search

• Select Default Instance and click Next

• Select dropdown for SQL Server Database Engine and click Browse

• Click on Advanced button
• Change location to local machine name if necessary
• Necessary if computer is on a network

• Click on Find Now button and select SYSTEM from the list
• Click OK

• Ensure NT AUTHORITY\SYSTEM is selected and click Next

• Select Mixed Mode
• Enter (and Confirm) an SA account password

• Click on Add button
• Set Locations… to local machine name and click Advanced button

• Click on Find Now button and select Administrators from the list
• Click OK

• Click OK
• BUILTIN\Adminstrators should now be added to list
• Click Next

• Installation of SQL will begin

SQL Server Management Studio Installation
• Double click on the SSMS-Setup-ENU file

• Alternatively, right click and Run as administrator is preferred

• Select Install

• Restart if necessary

SQL Server
Configuration

SQL Server Management Studio Logging In
• Log in to SQL Server Management Studio to create the AccessControl
database and Lenel user account
• Use SQL SA password under SQL Server Authentication or
Windows Authentication if logged in to computer as an
Administrator

Configuring SQL Standard Server
• Limit the Server Memory SQL will
utilize to half of the RAM on the
computer
• The SQL service must be restarted
after this change
• Right Click on Server Name at the
top and select Properties

Configuring SQL Standard Server
• Select the Memory page and set the Maximum server memory (MB) to
half of the computer RAM

Creating the AccessControl database
• Right click on the Databases folder
• Select New Database…

Creating the AccessControl database
• The OnGuard database name needs to be AccessControl
• The database has two major components:
• Database file (*.mdf)
• Repository of configuration and data
• Transaction Log file (*.ldf)
• Log file of database transactions processed by SQL

Database and Log File
• 50MB is the recommended initial size of the database file
• The default behavior is to automatically grow the database file
• The file size will increase by 1% when required
• Unrestricted file growth
• The initial size is less important if this feature is used
• The recommendation is to set the growth to 10%
• 10MB is the recommended initial size of the Transaction Log file
• The default behavior is to automatically grow the log file
• The file size will increase by 1% when required
• The maximum recommended log file size is 2048 MB

Database Options
• Database Recovery Model
• Simple - May only be restored to the point of the last backup
• Full - Provides complete protection against media failure
• Bulk-logged - Takes less space, but does not offer as many
recovery options
• Compatibility Level
• Compatibility level allows the behavior of the database to be
compatible with the specific version of SQL Server it is running on
and generally should be adjusted if upgrading SQL versions
• Set to appropriate version of SQL
• SQL 2017 (140)
• SQL 2016 (130)
• SQL 2014 (120)

Database Options
• Database Options – set to TRUE
• Auto shrink
• Automatically shrinks database to remove unused
space
• Recursive triggers
• A procedure to update any necessary table(s) based
on an event to a table. Used to ensure data integrity
throughout the database’s tables.
• Auto create statistics
• Specifies that any missing statistics needed by a
query for optimization are built automatically during
optimization
• Auto update statistics
• Specifies that out-of-date statistics needed by a
query for optimization are built automatically during
database optimization
• Click OK to save the database

OnGuard Database Login
• The default database login for OnGuard needs to be created
• Open the Security folder
• Right click on the Logins folder and select New Login

• The login can be configured as follows:
• Login Name ‘LENEL’
• With 7.4 and later, a different Login
user account can be used
• Choose the SQL Server authentication
option
• Password ‘Secur1ty#’
• Prior to OnGuard 7.0 the password was
MULTIMEDIA
• It is recommended to deselect the password
checkboxes
• Enforce password policy
• Enforce password expiration
• User must change password on first login

• The Lenel account should have the following
server roles
• Database Creator (dbcreator)
• Server Administrator (serveradmin)
• The Lenel account should also be mapped to
these databases
• master
• tempdb
• DO NOT select the AccessControl database
at this time
• The Lenel account cannot become the owner
of the database if AccessControl is chosen at
this step
• Click OK to save the Lenel login

OnGuard Database Owner
• The Lenel account needs to be the owner of the AccessControl
database
• Run this stored procedure from the SQL New Query
sp_changedbowner lenel;
• This will make the Lenel login account the owner of the database
• Press the F5 key or the Execute button to run the procedure
• Not necessary to save Query once command completed successfully

OnGuard Database Owner
3. Click Execute or press F5
1. Select
new
2. Type
query or
the query
right
as shown
click on
the
database
and
select
new
query
4. Success
message

SQL Database Backup
• It is critical to perform backups of the
database
• Installation Guide – Chapter 3
• Database Backup and Restoration
• Manual Database backup
• Right click on AccessControl database
> Tasks > Back Up
• Backup type
• Complete (Full Backup)
• Differential (Backup changes since the
last full backup)
• Select destination media

SQL Database Backup
• Automatic Database backup
• Standard SQL backups can be automated by using a SQL
Maintenance Plan

SQL Database Backup
• Maintenance Plan Wizard

SQL Database Restoration
• Database Restoration
• All OnGuard database connections must be terminated prior to
attempting to restore
• It is recommended to delete the current AccessControl database
prior to the restore if it exists
• Right click on the Databases folder
• Restore Database…

SQL Database Services and Port 1433
• There are several SQL Server services, but only two are utilized
as part of an OnGuard system
• SQL Server (MSSQLServer) Service
• This service must be running for database interaction
• SQL Server Agent (MSSQLServer) Service
• Must be running for SQL Server Maintenance Plans (backups)
• SQL defaults to port 1433 for remote connections to the
database

Client Installation
• OnGuard Installation Software (or ISO file)
• OnGuard Server should be configured first
• Database
• License Server
• Install OnGuard by Selecting one of the Client install choices

Client Installation
• Select System Type Information
• Typical or Custom
• Database

Client Installation
• Select License Server and Database location

Client Installation
• Next steps….

Client Installation – Setup Assistant
• Follow Setup Assistant for Client install

Server Upgrade Process
• The OnGuard installation will detect an instance of a previous version
of OnGuard
• Upgrades OnGuard from previous release or build
• Upgrade the Server first, then client machines
• If using OnGuard 6.5 or newer client workstations can be
automatically upgraded via the LS Client Update Service
• Must have been Client installation not Server installation for automatic
upgrade to work
• Install updated License file after upgrade
• Using Setup Assistant within OnGuard 6.5 or newer
• Manually through License Administration as needed
• Database Setup must be run after upgrade
• Using Setup Assistant within OnGuard 6.5 or newer
• Manually using Database Setup program menu

• .Net 4.6.1 will auto install, if required

• Accept License terms, click next

• Verify Lenel DSN

• Upgrades preserve the existing database password
• It may be necessary to synchronize the database Lenel password via
LS Login Driver if the current password is not the default
(MULTIMEDIA or Secur1ty#)
• Change the default database user from Lenel, if needed for
security compliance

• Mandatory to return FLEXnet license file prior to upgrading to

OnGuard 7.5

• Click Install and reboot machine if necessary

Server Upgrade Mode – Setup Assistant
• Follow Setup Assistant to complete upgrade

Server Upgrade – LS Login Driver
• If upgrading to OnGuard 7.0 or newer the default database

password for Lenel user account is now Secur1ty#
• Previously MULTIMEDIA
• When logging into any OnGuard application the standard
Login error may occur
• To resolve Change/Update the password via LS Login
Driver procedure (preferred method)
• See next slide

Client Upgrade - LS Client Update Service
• LS Client Update Service

• Allows the OnGuard server workstation to automatically update client
workstations
• When a client workstation opens an OnGuard application, the application
detects that the software version does not match the Server
• The application then allows the user to either cancel the login or upgrade
the client software

• Two 6.5 services enable this functionality and are only used to update
client workstations
• LS Client Update Server Service is installed on the server
• LS Client Update Service is installed on each client workstation

Make sure previous OnGuard version license file is

still installed on the server
– Both the new and old license files need to be present in
License Administration
Make sure to configure, in OnGuard, and start
automatically the LS Client Update Server service

Windows Administrator rights are not required for

the client update to occur

OnGuard Server Updates
• OnGuard Update Packages
• Available at Partner Center
• Log in required
• Specific to build
• STOP ALL LENEL SERVICES before
installing
• Must be installed on all OnGuard
machines
• LS Client Update Service will detect
• Microsoft Windows Security Patches
• Only install if approved by Lenel
• https://partner.lenel.com/

1CORE 7.6 v05112020 PDF

Загружено:

Сведения о документе

Исходное описание:

Оригинальное название

Авторское право

Доступные форматы

Поделиться этим документом

Поделиться или встроить документ

Параметры публикации

Этот документ был вам полезен?

Это неприемлемый материал?

Авторское право:

Доступные форматы

1CORE 7.6 v05112020 PDF

Загружено:

Авторское право:

Доступные форматы

OnGuard

Hardware & Software

Welcome to LenelS2 Training

• Who ? ( You and your employer ?)

• Where ? (Are You From ? )

• What ? ( Is your Role and Experience with Regard to Access Control

• What are your expectations for this course?

A CARRIER COMPANY CONFIDENTIAL AND PROPRIETARY

• LenelS2 Training Information

A CARRIER COMPANY CONFIDENTIAL AND PROPRIETARY

By the end of Identify the main components of the AccessControl database

Configure OnGuard system options for a basic OnGuard system installation.

Identify different hardware components of a basic OnGuard access control system:

Configure hardware components for a basic OnGuard system installation

Create & manage Cardholders is System Administration and in OnGuard Credentials

Access a best practice checklist to set up an installation site for successful

A CARRIER COMPANY CONFIDENTIAL AND PROPRIETARY

Practice installing a basic OnGuard system on your own!

…as evidenced by successful completion of all course modules, active participation in

A CARRIER COMPANY CONFIDENTIAL AND PROPRIETARY

Day Three ½ Day Four

A CARRIER COMPANY CONFIDENTIAL AND PROPRIETARY

All course materials are available

Also available at Partner Center

Materials to populate your Lenel

A CARRIER COMPANY CONFIDENTIAL AND PROPRIETARY

When you open the PDF course

A CARRIER COMPANY CONFIDENTIAL AND PROPRIETARY

A CARRIER COMPANY CONFIDENTIAL AND PROPRIETARY

A CARRIER COMPANY CONFIDENTIAL AND PROPRIETARY

Desktop Clients Browser Clients

A CARRIER COMPANY CONFIDENTIAL AND PROPRIETARY

OnGuard Server with Services

OnGuard’s Database provider (SQL/Oracle)

OnGuard Desktop clients

• Traditional client software for the configuration and day-to-day operation

OnGuard Browser clients

OnGuard Access Control hardware

A CARRIER COMPANY CONFIDENTIAL AND PROPRIETARY

A CARRIER COMPANY CONFIDENTIAL AND PROPRIETARY

Use SQL Server • Login for AccessControl database

Reference Installation • Chapter 5 for installing & configuring SQL Server

A CARRIER COMPANY CONFIDENTIAL AND PROPRIETARY

A CARRIER COMPANY CONFIDENTIAL AND PROPRIETARY

Install and configure the database software

Install OnGuard Server software

OnGuard Setup Assistant (automatically launched)

A CARRIER COMPANY CONFIDENTIAL AND PROPRIETARY

Prior to starting a Server installation, the following supplies are needed:

• Available for download from Partner Center

OnGuard License File

A CARRIER COMPANY CONFIDENTIAL AND PROPRIETARY

Minimum computer specifications can be found in

• Release notes can be found in the OnGuard

Ensure the ‘User Account Control Settings’ is set to

• In the Windows Search box type in UAC to

A CARRIER COMPANY CONFIDENTIAL AND PROPRIETARY

• In addition, SQL 2014/2017 installation and SQL 2014/2017 configuration

A CARRIER COMPANY CONFIDENTIAL AND PROPRIETARY

Installed Desktop Components Server Client

Comparison of desktop components System Tools

A CARRIER COMPANY CONFIDENTIAL AND PROPRIETARY