Using Duo at the Door: Protecting Physical Access Through New Partnerships – GUEST BLOG

Duo has recently partnered with two of the leading providers of physical access security: Tyco Software House and BioConnect. The partnership tells a complementary story. Duo was born in the cloud. Since our inception, we’ve focused on providing a simple, secure authentication workflow into any business application. Tyco and BioConnect live in the concrete world of building and office access.

Duo offers a broad integration portfolio that includes hundreds of cloud and on-premises applications. Thousands of customers leverage Duo to protect a diverse set of applications, from Office 365 to the AnyConnect VPN or even custom on-premises applications. Our technical integrations and partnerships have primarily focused on protecting the workforce from compromised digital credentials and data breaches.

However, we’ve come together with Tyco Software House and BioConnect to answer the question: how can we also protect physical workplaces and physical credentials?

Physical credentials can take many forms but often come as key cards or badges that are used to enter business critical facilities. Many of us are familiar with physical credentials and access control from their supporting roles in heist movies. In most cases, a ragtag group of would-be thieves includes a pickpocket whose responsibilities involve lifting a key card from an unsuspecting VIP. While this fictionalized version of credential theft is not the most common case for losing physical credentials, at its heart it still reveals a potential hole in physical access control. When the crown jewels are at stake, these partnerships and integrations can help you verify that the holder of a physical credential is the person who belongs to the card.

Tyco Software House

Tyco Software House is committed to providing a robust security and event management solution for buildings across the globe with its C•CURE 9000 platform to protect any company’s people, buildings, and assets. This solution scales to protect buildings of any age, layout, or location, whether a company is protecting one door or hundreds.

And now, C•CURE 9000 seamlessly integrates with Duo’s multi-factor authentication (MFA) solution to provide an additional layer of security at points of access. The integration is simple to set up and provides an easy and effective end-user experience at a company’s most critical locations. C•CURE 9000 customers will not have to change any infrastructure or card readers, and employees can self-enroll in Duo. When deployed, an employee simply taps their access card as they would normally, but instead of gaining direct access they are challenged with a second form of authentication on their preferred device. For more information about the integration and the Tyco Software House’s product portfolio, check out this informational video and the integration announcement.

BioConnect

BioConnect is spearheading the unification of the digital and physical access management sectors. Their previous solutions are known for leveraging biometric credentials (face, voice, fingerprint and eyeprint) to secure access to both physical assets, like data centers, and digital assets, like corporate portals. The outcome is higher identity assurance of who is accessing what and provides in-depth reporting and analysis regarding a company’s physical and digital access points.

BioConnect has realized a gap in the physical access market where certain customers’ physical access points are not equipped with biometric readers. In these cases, a BioConnect customer may need to use a badge on a door that currently does not provide a second factor of authentication. In order to address this use case, BioConnect has integrated with Duo’s MFA, adding it to BioConnect’s authentication flow. With Duo and a retro-fit solution that is integrated into 80% of the top access control system providers, it becomes easy and cost-effective for BioConnect customers to provide step-up authentication on all doors or access points.

To learn more about how this integration ensures security in every case, check out BioConnect’s documentation or their video guide to using Duo at the door.

Johnson Controls adds WaveLynx Technologies’ Ethos Multi-Tech Readers to access control portfolio

WaveLynx Technologies’ Ethos readers are equipped with a choice of credential technologies, enabling customers to choose migration paths to deploy secure credentials.

WaveLynx Ethos multi-tech contactless access readers feature a modern aesthetic and state-of-the-art feature set. All Ethos readers are capable of reading legacy Proximity credentials, MIFARE DESFire® smart card credentials, LEAF enabled smart card credentials and mobile credentials. Ethos readers simultaneously work with old and new credentials. WaveLynx Ethos Readers are integrated with the Tyco Software House C•CURE 9000 security and event management system, providing 24×7 mission-critical security and safety protection for people, buildings, and assets.

All ET-Series readers, including the ET10 Mullion Mount, ET20 Wall mount and ET25 Keypad Reader feature OSDP communication with the patented auto-detect feature. This feature allows the reader to automatically switch from the Wiegand protocol to OSDP when the panel is upgraded to OSDP, with no need to re-wire or re-configure the reader for OSDP functionality. Secure smart cards or Mobile credentials can be introduced at any time.

Key Features

  • OSDP auto-detect capable
  • LEAF Si enabled off the shelf, LEAF Cc ready
  • MIFARE DESFire® EV2/EV1 compatible
  • Mobile credential ready
  • Tristate LED Light Bar (red, green, amber) and buzzer
  • Easy install bracket (patent pending) and wiring system
  • Accelerometer-based tamper detection

Johnson Controls introduces an RS-485 input/output module offering an all-in-one solution for access controller expansion

Introducing the new Tyco Kantech RS-485 Input/ Output Module, which combines and enhances the flexibility of Kantech expansion modules into a single, cost-effective 16 terminal unit.

rs-485 input/ output module

The RS-485 Input/Output Module provides additional capacity for Kantech door controllers (up to 62 modules per), such as the KT-1 and KT-400, beyond the traditional confines of like modules. The Input/Output Module also reduces the need for installation of the module in close proximity to the controller due to conventional cable lengths, offering installers faster, easier installation up to 1.2km from the controller. This frees up valuable space inside the controller cabinet for additional equipment, such as integration alarms.

With this added capacity, installers can harness multi-functional features such as output supervision for locks, which enables supervised lock power that is configurable for each output; inputs, relays; elevator control programming and the Serial Peripheral Interface extension which allows users to configure ports as needed. The RS-485 Input/Output Module is compatible with EntraPass Security Management Software v8.10 and higher and also comes with a limited lifetime warranty. The new module is also firmware field upgradable and uses encrypted RS-485 communication for additional security and versatility.

For a detailed list of features and benefits, please refer to the New Product Announcement.

Johnson Controls announces VideoEdge integration to EntraPass go Mobile App

Introducing the integration of the Kantech EntraPass go Mobile App with the American Dynamics VideoEdge software, enabling remote management of access control, video and intrusion tasks for seamless, on-the-go security system operation from a mobile device.

EntraPass go Mobile App

The American Dynamics VideoEdge integration with the EntraPass go Mobile App provides a single easy use interface for managing, responding and controlling aspects of your Video Management System infrastructure through the use of the EntraPass go Mobile App. Video management capabilities include the ability to view live video with PTZ control, video playback with manual search and the ability to view video linked to access and/or intrusion events.

With the EntraPass go Mobile App, users can manage and create cards, lock and unlock doors, view live video, arm and disarm intrusion partitions and request reports. This free app enables you to interact with your EntraPass security management system software from anywhere, without being tied to the EntraPass workstation.

The VideoEdge platform improves the efficiency of security personnel and daily business operations by creating powerful video management solutions allowing users to leverage high-performance video streaming, analytics and video intelligence.

EntraPass go Mobile App is available on Android and Apple devices.

Johnson Controls introduces EntraPass v8.10 with audit trails and feature enhancements for more streamlined operation

The latest version of Tyco Kantech EntraPass security management software launches enabling new functionalities such as expanded audit features and other enhancements for a more streamlined experience for users.

For faster auditing and troubleshooting, EntraPass v8.10 users can run audit reports based on cards, components and operators, including a detailed report of who made changes to a card or component and when the changes were made. This will help to satisfy some of today’s corporate and regulatory requirements. Cardholder information fields have been expanded to include at least 20 editable fields (Corporate Edition), including a Unique ID for improved export/import.

Additionally, advancements in backup options in this latest version are designed to prevent any version conflicts or errors in the backup process for seamless operation.

Information at the user level is also easier to access and verify. Administrators can now easily see the most recent door, card or event access messages by cardholder, see when the cardholder’s secondary access level has expired and go paperless by saving access levels and links directly as a PDF.

EntraPass also adds support for up to eight ASSA ABLOY wireless locks through the KT-1 door controller, reducing installation costs and is compatible with Windows Server 2019 Datacenter.

For a detailed list of features and benefits, please refer to the New Product Announcement.

Kantech Releases EntraPass v8.0 with Mobile App Enhancements and a Redesigned web Interface

The latest version of EntraPass Security Management Software launches with new features relating to short range wireless technology, multi-factor authentication for mobile cardholders and an improved web client user interface.

EntraPass v8.0 software offers several enhancements to the EntraPass go and EntraPass go Pass mobile apps. EntraPass go, which allows remote use of the EntraPass software, provides support for American Dynamics network video recorders (NVRs). EntraPass go Pass mobile credential now supports Bluetooth Low Energy (BLE) capabilities in ioSmart Multi-Technology Readers. EntraPass operators can choose to ignore BLE technology, enforce BLE or use a combination of both when appropriate. Multi-factor authentication is also available for EntraPass go Pass cardholders presenting at any door with an ioSmart reader. In addition to the existing card and PIN authentication, biometric data can be used as a second form of authentication offering an added level of identity protection with more secure access to doors using a mobile phone.

In some cases, ioSmart readers in combination with EntraPass go Pass multi-factor authentication can replace the need to install an expensive biometric reader”, said Gabriel Labrecque, Product Manager, Kantech Software/ Integrations, Building Technologies & Solutions, Johnson Controls. “On a per door basis you can disable the card reader, meaning that only EntraPass go Pass will be allowed to unlock the door through the use of biometric verification from the phone itself.

EntraPass web, where Silverlight is now no longer an installation requirement, has been redesigned to provide a more efficient and user-friendly interface for an enhance user experience. For operational speed, graphical icons are more intuitive, tabs replace the dock views and the system remembers the exact position of the most recently opened screen. Setting up hardware components is simplified by a sequential column layout, while the logical visual architecture makes monitoring and changing the hardware configuration direct.

Furthermore making sure installations are cyber secure, ITV2 Type 2 encryption has been added as an integration option for use with both the DSC PowerSeries Neo and PowerSeries Pro intrusion panels.

New Product Announcement

Kantech upgrades INTEVO integrated security platform; adds LTE version

Kantech has upgraded its INTEVO Advanced (ADV) and Compact (CMP) integrated security platforms with faster processors, improved memory performance, better graphics and additional IP camera licenses, while also expanding the line with the cost-effective, streamlined LTE version.

INTEVO Advanced Compact

INTEVO unites access control, IP video and intrusion with a scalable solution aimed at small to mid-sized enterprises. Used as a standalone system or as part of complete security solution incorporating other Johnson Controls products, INTEVO comes preloaded with Kantech’s EntraPass security management software and exacqVision video management software. It also includes support for DSC PowerSeries intrusion panel integration.

”It is with much anticipation that we announce the release of the new and improved INTEVO with its hardware modifications, pre-installed and pre-configured integrated software containing EntraPass, exacqVision and intrusion,” said Brian McCarthy, Product Manager, Kantech Hardware, Building Technologies & Solutions, Johnson Controls. “It shows that Kantech presents a more modern, coherent and complete security solution which will make a large impact on the market worldwide.”

INTEVO diagram

The Advanced version now boasts 45 percent more processing power, 4K resolution on display outputs, a 128GB SSD boot drive, four USB 3.0 ports, 8 PoE ports and an update to Windows 10 IoT Enterprise 64 bit.

The Compact version’s latest improvements include 43 percent more processing power, 2TB of storage, a 128GB SSD boot drive, the addition of one USB 3.0 port to complement the two USB 2.0 ports, 4 PoE ports and an upgrade to Windows 10 IoT Enterprise 64 bit. Not available in North America.

The LTE becomes the option for integrators looking for a more cost-effective version of the existing Compact, with its 2TB of storage, a fast Intel J1900 processor and 3 USB ports. The LTE has no PoE ports or boot disk.

New Product Announcement

Kantech debuts streamlined scheduling and Windows Server 2016 Datacenter Compatibility in EntraPass v7.50

The latest version of EntraPass Security Management Software launches with new features developed to streamline scheduling for EntraPass Special Edition and installation compatibility.

Now available in EntraPass Special Edition, Action Scheduler allows operators who are managing access control to create actions and tasks on a daily, weekly or monthly basis. The actions are based on door and relay behaviors such as locking and unlocking doors, arming alarm systems and toggling relays. Once programmed, these actions are native to the KT-400 and KT-1 door controllers as long as the latest firmware is installed.

The use of KT-1 and KT-400 allows users to connect to EntraPass via the controller or to use the controller in standalone mode. The migration path from a standalone unit into a new connection in EntraPass is now simplified, with an easy-to-use import tool that will migrate all of the configurations.

With the exception of Database Access with EntraPass Global Edition, all EntraPass versions now support installation on Windows Server 2016 Datacenter.

New Product Announcement

Kantech simplifies multi-door access control with KT-400’s Standalone Mode

Kantech has introduced a new standalone mode for the Kantech KT-400 four door controller, allowing smaller access control systems of up to four doors to be controlled and managed using embedded and intuitive web based software, with no EntraPass access control software required. Used in conjunction with Kantech’s ioSmart card readers and cards, these controllers provide a unique, highly secure encrypted solution for small installations.

With no dedicated software or PC hardware to purchase and maintain, the KT-400 standalone provides an economical choice for small businesses with basic access control needs, such as assigning card access and running reports. Using a web browser, customers can configure and manage their security anywhere and at any time, via a desktop computer or a mobile device.

Used in conjunction with Kantech’s ioSmart Card Readers and Cards, KT-400 standalone controllers provide highly secure encryption measures for even the smallest systems. Communications between the ioSmart card and ioSmart reader employs AES 128-bit encryption, with RS-485 secure communication in use between the ioSmart reader and the KT-400 controller.

With an easy-plug-and play set up, the system is up and running in minutes following a simple configuration wizard, which eliminates the need for training or certification of dealers and installers.

New Product Announcement

VIDEOEDGE NETWORK VIDEO RECORDER (NVR) BECOMES FIRST PRODUCT TO ATTAIN UL 2900-2-3 LEVEL 3 CYBERSECURITY READINESS CERTIFICATION FROM UL

VideoEdge Receives the Highest UL Cybersecurity Assurance Program Certification

Resilience to cyber-attack has become an important acceptance criteria for customers to base product selection on. Until now there hasn’t been an independent validation for both product and business practices designed to address the cybersecurity readiness of physical security products. When Underwriter Laboratories (UL) introduced the UL 2900-2-3, Tyco Security seized the opportunity and became the first vendor to submit a product (namely, the VideoEdge Network Video Recorder) to undergo this new certification. On March 22, 2018, VideoEdge version 5.2 became the first product to obtain UL 2900-2-3 Level 3 (L3) certification.

For more information on the UL 2900-2-3 Level 3 Cybersecurity certification, please visit http://blog.tycosp.com/ad/.

Tyco Security Products