C·CURE 9000

Technical Training

iSTAR Family

Company Confidential
 Objectives

• By the end of this module delegates will be able to:

− Know the iSTAR models available
− Know how the iSTAR controllers communicate with the Server and
Between each other
− Describe the Hardware from the iSTAR PRO, Edge and Ultra
− Reset the iSTAR to factory Default
− Interpreting LED and LCD indications
− Configure the iSTAR to communicate to the Server
− Check the Controllers communications status
iSTAR
Controllers

Overview

Company Confidential
 General Overview

• There are Three iSTAR models available:

a) iSTAR/Pro Wall or Rack Mount
b) iSTAR Edge
c) iSTAR Ultra Wall or Rack Mount
• The iSTAR/Pro is a 8 or 16 readers controller, based on a
GCM (General Controller Module) and up to two ACM
(Access Control module).
• The iSTAR Edge is available as 1, 2 or 4 readers controller.
• The iSTAR Ultra support up to 32 readers of which 16 may
come from traditional Wiegand or Magnetic Wired readers
and the rest can be made up of wireless lock sets and
devices.
General Overview
iSTAR Portfolio – A Quick Comparison
 Cluster

• The iSTAR’s are organized in groups called Clusters:

– Each Cluster can have from 1 to up to 16 controllers. If the system
has a very high activity it’s recommended to keep the number at 10.
– The number of clusters is unlimited.
– One Controller will be assigned as Master. This controller holds
primary connection to the server, with a secondary connection
available for redundant communications.
– All members communicate with the Master.
– Each controller will be connected to the network with its own IP
address.
– You can group iSTAR PRO and Ultra if the encryption is disable on
the second one.
– You Can’t group iSTAR PRO with iSTAR Edge.
– You can Group iSTAR Edge and Ultra if encryption is enable on the
second one.
 Cluster
Features

• Cluster Features:
− Allows operation without connection to the host computer.
− Hierarchical Host/Master/Member relationship.
− Redundant communication path between Master and Host
possibility.
− Supports AntiPassback in a cluster and across clusters.
− Supports complex event actions in the cluster.
− Supports DHCP and DNS.
− New improved fast download.
 Master Member Member Member
Cluster Topologies

Site 2 LAN2
Site 1 Redundant Cluster 3
LAN2 Site 2
WAN Remote
C•CURE
Server
Member Member Member Member
Member
Site 2 LAN1
Site 1 LAN1

WAN

Cluster 1

Master Master Member

Cluster 2
 Cluster Topologies
Alternate Master for V2.10 and below
From v2.20 the option of one member
assigned for the secondary communication
path (Alternate Master), it is not supported Master Member Member Member
anymore.

TCP/IP network
LAN/WAN

C•CURE
Server
Member Member Alternate Member
Master
iSTAR Pro

Company Confidential
 iSTAR Pro

a. 8/16* reader ports >

Wiegand or RS485 reader
bus
b. 16/32* Supervised Inputs
On-board
c. 8/16* Relay Outputs On-
board
d. NIC 10 Mbit
e. PCMCIA Slot for secondary
NIC or memory backup
f. 1 Serial Port for Modem
Connection
g. Each ACM supports 8 I/8
(Input) and 8 R/8 (Output)
Modules

• * You can have two ACM

cards
 Memory of 64 MB SDRAM
iSTAR/Pro GCM Expandable to 128 MB using standard DIMM

Data Memory Backup optional

PCMCIA
Diag

RS485

RS232
LCD

Ethernet

Backup battery
iSTAR/Pro GCM
 iSTAR/Pro GCM
Power Requirements

• The iSTAR Pro

Input Power rating
is 100 – 240VAC,
2.3A max. The
system current
draw is 2.3 A @
100VAC or 1.1 A @
240VAC.
iSTAR/Pro GCM
S4 Restricted Switches
 iSTAR/Pro GCM
LCD Panel – Factory Default
• When the iSTAR Pro is booting, the • When DIP switch S4 is set to the
following sequence will be displayed default, the following pattern will be
on the LCD: repetitively displayed on the LCD:
iSTAR/Pro GCM
S4 Diagnostic and Status Messages
iSTAR
Configuration
Utility

ICU

Company Confidential
 ICU (iSTAR Configuration Utility)
Objectives

• By the end of this module delegates will be able to:

− Describe all hardware elements that can be configured.
− Initialize an iSTAR controller using ICU
− Create an iSTAR Cluster
− Connect and Configure an iSTAR Pro controller
 ICU

• The ICU provides iSTAR configuration, diagnostic and

troubleshooting options.
• You can use ICU to designate the controller IP address and
define the IP address from the C•CURE host.
• The ICU can connect to an iSTAR across a WAN provided you
know both the MAC address and the remote IP address.
• You can copy the ICU folder to any PC and configure the
remote units in the local subnet.
 ICU

• The ICU files are placed on the C•CURE server and Client in
this folder C:\Program Files 86\ Tyco\CrossFire\
ServerComponents\ istar\ICU, but from this version there is
also a shortcut under the Options & Tools Menu
ICU
 ICU

• By default all iSTAR are delivered with DHCP enabled, if no

DHCP server available the NIC will assign an IP like this:
169.254.xxx.xxx
• All detected units will be listed so:
− MAC: Last 6 digits
− Name: NetBIOS default (normally istar and the 6 digits from the
MAC address)
− IP Address: any with 169.254.xxx.xxx ore assigned from DHCP
− Parent IP Address: 0.0.0.0
− FW Version: depends on the unit
− Type: Member
− Status: Not connected
ICU
ICU Options – File Menu
 ICU - Master/Member

1. Select the iSTAR controller.

2. Right Click and select Edit Controller.
3. Set it to be a Master (All C•CURE 9000 iSTAR clusters must have a
Master Controller)

Master to Host Member to Master

 ICU - TCP/IP Information

4. Specify the IP
address
(Instructor will
indicate whether
to use static or
DHCP.)
5. Specify the
C•CURE 9000
Host (Use either
IP or FQDN.)
6. Click OK.

iSTAR Controller IP Settings Host or iSTAR Master IP

address
 Downloading Settings

7. A popup Window appears when it is finish.

8. Ping controller from computer.
Status Information
 Workshop

a) Configure your iSTAR PRO using the ICU with the

parameters given to you by the Instructor.
b) Check if the new settings are store on the Controller.
C·CURE 9000
Administration

iSTAR Pro
Configuration

Company Confidential
 iSTAR C·CURE 9000 Configuration
Step 1: Hardware Folder

1. Open the Administration

Application and from the
left Pane Choose
Hardware, right click on
top of the Hardware
Folder and Click “New
Folder”.
 Step 1: Hardware Folder

2. Give it a meaningful name, inside this folder you will

configure the controllers of your installation
3. Click Save and Close

Note: if the folder you’ve created should not show up, right click on Hardware and
select “Refresh tree”.
 Step 2: Cluster Setup

4. Right click on the

Folder and Select
iSTAR Cluster/
New.
 Step 2: Cluster Setup - Non Encrypted

5. Assign a name to
the cluster. From
the drop down
menu, select the
Cluster type as
Non – encrypted.
6. Save and close.
 Step 3: Create the iSTAR Controller

• In a Non-encrypted
Cluster you can
configure iSTAR Pro,
Classic or Ultra.
7. Select the Proper
Controller Type and
click on New.
 Step 3: Create the iSTAR Controller
Enter the Controller Data
8. Fill the needed
information: Name,
MAC Address, IP
Address (either static
or DHCP) and Time
Zone. The Controller
type drop down menu
is grayed out
because it
automatically pick the
kind of iSTAR you’ve
chosen when created
the cluster.
9. Click “Enable”.
10. Click Save and
Close.
 Step 4: Edit the Cluster and assign the Master Controller

10. Edit the Cluster. All the iSTAR’s created under this cluster
would be listed here, in the General Tab.
 Step 4: Edit the Cluster and assign the Master Controller

11. Go to the
Communication
tab.
12. From the drop
down menu in the
primary section,
select the Master
controller of this
Cluster.
13. From the drop
down menu in the
secondary
section, select
the Alternate
Master of the
Cluster (if you
don’t have it,
leave the field
blank).
 Step 4: Edit the Cluster and assign the Master Controller

15. The Cluster Tab is used to set communications options

between the Server and the Cluster. Enable the Cluster
and “Save and close”.
 Step 5: Check the Communications Status

From the Monitoring Station you can view the controller and cluster
activity.
 Step 5: Check the Communications Status

16. Go to Hardware Status Menu and select Controllers.

 Workshop

a) Go to the Hardware Menu and create a New Hardware

Folder.
b) Create a New Controller and Cluster as shown before.
c) Check the Communication status.
 Summary

1. What is the “ENABLE” field of the iSTAR configuration used

for ?
2. What functions are available with the ICU ?
3. What’s a Cluster ?
4. How many iSTAR’s can be organized in a Cluster ?
5. How many Clusters can be configured with the C•CURE
9000 software ?
6. What is a Master Controller ?
7. How can I create a Cluster with redundant Communication ?
8. Where can you find the iSTAR MAC Address ?
10. What means the lock icon in the ICU configuration ?
11. Name the steps needed to bring an iSTAR online
iSTAR Edge

Company Confidential
 Objectives

• By the end of this module delegates will be able to:

− Describe the iSTAR Edge Capabilities
− Identify the iSTAR Edge Hardware
− Know how to install the iSTAR Edge
− Configure the iSTAR Edge to communicate to the Server
− Check the Controllers communications status
 iSTAR Edge - Overview

• Three models to choose from: 1, 2 or 4 readers.

• One 10/100 Ethernet port.
• No secondary communication path.
• Optional PoE plug-in module features PoE Plus, with
enough power for two doors
• Storage for up to 400,000 personnel records
• Local LCD and LEDs provide clear startup and
troubleshooting information
• Onboard 256-bit AES encryption; FIPS 197 listed
• Jumper/selectable 12 or 24 VDC for lock power
• Rotary switch for diagnostics
iSTAR Edge

Two and Four Readers Model.

One Reader Model.

iSTAR Edge
Layout
 iSTAR Edge - Power Requirements

• To ensure adequate power, calculate the total power

requirements of iSTAR Edge and its related hardware. Add the
total current power for components in the system (modules,
relays, optional modules, readers, and wire resistance). The
following are power specifications

• iSTAR Edge Entire Unit:  RM Ports 12 VDC, 1.5 Amp

each (but the max. is also 1.5
− Local Power 12 VDC, 3.8 Amp for all)
Amp Max.  Wiegand Ports, 12 VDC, 350
− Local Power 24 VDC, 3.1 mA each
Amp Max. • Relays
• Reader and I/O Module − 30 VAC/DC 1.0 Amp Max.
Supply (Total of AUX, RM, (Dry) each
and Wiegand Ports) − 12 or 24 VDC 0.75 Amp
− 12 VDC, 1.5 Amp Max. (Wet) each
 AUX Ports 12 VDC 350 mA
each
 iSTAR Edge - Power Requirements - PoE

• The iSTAR Edge can be

powered by PoE, PoE Plus,
or traditional 12V or 24V DC
power supplies
– PoE (IEEE 802.3af)
installation is limited to
12.95W of power
consumption including the
controller.
– PoE Plus (IEEE 802.3at)
installation is limited to
25.5W of power
consumption including the
controller.
• New PoE Board will supply
either 12 VDC or 24 VDC,
selectable by Jumper. Select
either PoE or PoE+ with the
other jumpers.
iSTAR Edge - Power Requirements - PoE

Rule of thumb
• Power one lock with PoE
• Two locks with PoE Plus
 iSTAR Edge
Power Requirements – Standard Power Supplies
• The iSTAR Edge can be powered
with traditional 12V or 24V DC power
supplies. Traditional power supplies
supported:
–An apS
–Any external UPS (12/24 VDC)
iSTAR Edge
SW1 Rotary Switch
 Summary

1. Can I mix on the same Cluster iSTAR PRO and Edge’s ?

2. How can I clear the memory of an iSTAR Edge ?
3. How many readers, inputs and outputs are supported by
each iSTAR Edge model ?
4. What switch inhibits or allows ICU on the iSTAR Edge ?
5. How can you Power the iSTAR edge ?
6. If you are powering the iSTAR Edge with 24V and you want
to change to 12V, what do you need to do ?
7. How many I/8 and R/8 cards does the iSTAR Edge
supports ?
iSTAR Edge
Configuration

Encrypted
Cluster and iSTAR
Edge Configuration

Company Confidential
 Encrypted Cluster

• Right click on the

Folder and Select
iSTAR Cluster/
New.
 Encrypted Cluster

• Assign a name
to the cluster.
From the drop
down menu,
select the
Cluster type as
Encrypted.
• Save and
close.
 Encrypted Cluster - iSTAR Controller Options

• In a Encrypted Cluster
you can configure Edge,
eX or Ultra.
• For the Encrypted Cluster
we are going to show the
iSTAR edge as example.
• Select the iSTAR Edge
Controller and then New.
 Encrypted Cluster - iSTAR Edge Controller Configuration

• Fill the needed

information: Name,
MAC Address, IP
Address (either static
or DHCP) and Time
Zone. The Controller
type drop down menu
is grayed out because
it automatically pick
the kind of iStar you’ve
chosen when created
the cluster.
• Click “Enable”.
• Click Save and Close.
 iSTAR Edge Controller Configuration
Edit the iSTAR Cluster
• Edit the Cluster. All the iSTAR controllers created under this
cluster would be listed here, in the General Tab.
 iSTAR Edge Controller Configuration
Edit the iSTAR Cluster
• Go to the
Communication
tab.
• From the drop down
menu in the primary
section, select the
Master controller of
this Cluster.
• From the drop down
menu in the
secondary section,
select the Alternate
Master of the
Cluster (if you don’t
have it, leave the
field blank).
• Enable the Cluster
and “Save and
close”.
Communications iSTAR Edge
 Workshop

a) If available, configure your iSTAR Edge:

a) Use ICU to configure the IP settings to the controller.
b) Go to the Hardware Menu and create a New Hardware Folder.
c) Create a New Encrypted Controller and Cluster as shown before,
using the IP address given by the Instructor.
d) Check the Communication status.
iSTAR Ultra

Company Confidential
 Objectives

• By the end of this module delegates will be able to:

− Identify the iSTAR Ultra Hardware
− Know how to install the iSTAR Ultra
− Configure the iSTAR Ultra to communicate to the Server
− Check the Controllers communications status
 iSTAR Ultra - Overview

• The iSTAR Ultra

consists of the following
hardware components:
− General Controller
Module (GCM)
− Access Control
Module (ACM) - a
maximum of two can
be connected
 iSTAR Ultra - General Control Module

• The GCM is a General Purpose Module running the

Linux® operating system. The GCM provides the
following features:
− Two network Gigabit Ethernet ports.
− Two RS-485 Ports for Hubs and Wireless Readers.
 Up to 30 eight Port Hubs.
 Up to 32 wireless Readers (16 wired & 16 wireless or 32 wireless).
− An LCD panel that displays the current status, and provides
built-in diagnostics.
− Four USB ports to communicate with the Access Control
Modules (ACM) and import encryption keys.
− One Micro A-B port. (For future use)
 iSTAR Ultra - General Control Module

Connect a CAT 5, or better, RJ45

cable to either J5 or J6 (or both for
redundancy).
 iSTAR Ultra - General Control Module

• SW2 - Hard Processor Reset - (SW3 - Position D)

− SW2 is a serious reset that can be used to Reset to Factory
Default by changing the Rotary Switch (SW3) to ‘D’ and pressing
SW2.
− To Clear Memory and Reboot the Unit:
1. Set rotary SW3 to D.
2. Press and release switch SW2 - follow instructions
3. Set rotary SW3 back to 0 or F.
4. Press and release SW2, and observe the LCD panel. The unit will
reboot, the memory will be cleared, and the unit will need to be
completely re-configured. In addition to clearing memory, SW2
can be used to restart the Linux operating system and possibly
clear up an error or hang situation.
 iSTAR Ultra - General Control Module

• SW7 - Soft Reset (Reboot)

− The SW7 push button saves all data in non-volatile memory and
then reboots the unit. It may take several minutes for the formatting
and saving of the data. The iSTAR Ultra is fully capable of
operating without contact with the Host after the reboot.
• SW2 - Hard Processor Reset - (SW3 - Position A)
− Selecting SW2 will erase DB files from flash. (Press SW2 GCM
Hard reset, wait for LCD instructions, set rotary switch back to 0 or
F, press reset again.) This is similar to position D, but leaves the
basic Comm setup of IP, etc. (Ultra only)
iSTAR Ultra
General Control Module – SW3 Rotary Switch
 iSTAR Ultra - Encryption

• S1-1
• The Encryption switch enables FIPS 197 AES 256-bit
encryption. The switch setting must match the software
configuration of the cluster and the controller.
• If encrypted, the iSTAR Ultra controller can cluster with:
− iSTAR Edges
− Other iSTAR Ultras with the Encryption Switch set to ON
• If non-encrypted, the iSTAR Ultra controller can cluster
with:
− Other iSTAR Ultras with the Encryption Switch set to OFF
− iSTAR Pro

Note: By default, iStar Ultra are shipped in non-encrypted mode

 iSTAR Ultra - Other Connectors

• J14 SD Card
− Located on the back of the GCM to the left of the SOM, near the
Hard Reset switch. This non-volatile memory is where backups are
stored.
• RS-485 1 and 2 (J26 and J27)
− Each Port can support up to fifteen Aperio Hubs. Each Hub can
support either one Aperio Reader or eight Aperio Readers.
 iSTAR Ultra - Power Requirements

• GCM
− Input: 12 Vdc , 1.5 - 4.5A max.
− Output: RS485: 11-11.14 Vdc , 1.5A max. each
• ACM
− Input
 Vreader: 12 Vdc , 12.5A max.
 Vlock1: 0 - 30 Vdc , 12A max.
 Vlock2: 0 - 30 Vdc , 12A max.
− Output
 RS485/Wiegand/AUX: 11.64 Vdc , 1.5A max. each
 Primary Wet Relay Out: 0 - 30 Vdc , 0.75A max. each
 Primary Dry Relay Out: 30 Vdc/Vac, 5A max. each
 Secondary Wet Relay Out: 0 - 30 Vdc , 0.75A max. each
 Secondary Wet Relay Out: 30 Vdc/Vac, 1A max. each
iSTAR Ultra

Mount Options

Company Confidential
 iSTAR Ultra - Wall Mount option

• The wall mounted iSTAR

Ultra has stand-off’s on the
enclosure door that can
support up to four RM Bus
components.
• The I/8, I/8-CSI, and R/8
boards are supported.
• There can be any
combination of the three
boards including:
− All I/8’s, all I/8-CSI’s or all
R/8’s
− Two I/8’s and two R/8’s
− Three I/8’s and one R/8
− Etc.
 iSTAR Ultra - Rack Mount Considerations

• Rack Mount ACM's need to located close enough so that the 3

foot USB supplied cable can be routed and still have a proper
service loop.
• Elevated Operating Ambient - If installed in a closed or multi-
unit rack assembly, the operating ambient temperature of the
rack environment may be greater than room ambient. Verify that
0º to 49º is maintained.
• Reduced Air Flow - Installation of the equipment in a rack
should be such that the amount of air flow required for safe
operation of the equipment is not compromised. Verify that 0º to
49º is maintained.
• Reliable Grounding - Reliable earth ground of rack-mounted
equipment should be maintained. Grounding needs to follow
NEC Codes or the applicable Local code.
iSTAR Ultra
Rack Mount

GCM in a rack mount enclosure GCM Rear Rack Mount Enclosure

ACM Rack Mount Enclosure

 Summary

1. How can I clear the memory from the iSTAR Ultra ?

2. What switch inhibits or allows ICU on the iSTAR Ultra ?
3. How many Wireless locks supports the iSTAR Ultra ?
4. How many inputs does each Ultra ACM has on-board ?
5. How many I/8 are supported on each Ultra ACM board ?
C·CURE 9000
Administration

iSTAR Ultra
Configuration

Company Confidential
 Step 1: ICU

1. Use the ICU to

configure the following:
a. Define the master.
b. Specify the IP address
of the master.
c. Obtain the Domain
Name Server
addresses
automatically.
d. Define the host IP
address or FQDN
(Fully Qualified
Domain Name) with
which the master will
communicate.
 Step 1: ICU

• When is time to
download the
network settings
into the Ultra, ICU
asks for username
and password: see
beside for details
 Step 2: New Cluster

2. Right click on the Folder

and Select iSTAR Cluster/
New.
3. The iSTAR Ultra can work
in encrypted or non
encrypted state.
 Step 2: New Cluster - Encryption

4. Assign a name to the

cluster. From the drop
down menu, select
the Cluster type.
5. The Ultra can work as
Encrypted or Non-
encrypted.
6. Check the Setting on
the iSTAR Ultra GCM.

7. Save and close.

It must match the
S1-1 Setting on the
iSTAR Ultra GCM.
 Step 3: New Controller

8. Right Click on the Cluster

to display the iSTAR
types options.
9. Select the iSTAR Ultra
Controller and then
New.
 Step 3: New Controller
iSTAR Ultra Configuration
10. For each controller you
must configure the Name,
the MAC Address, the
Controller IP address
assigned with the ICU,
the secondary IP settings
if in use and the Time
Zone.
11. Mark the “Enable” tick
box.
12. Save and Close
 Step 4: Edit the Cluster
Assigning the Primary communication path

13. Edit the Cluster. In the General Tab shall be listed all the
controllers configured under the Cluster.
 Step 4: Edit the Cluster
Assigning the Primary communication path

14. Move to the

Communications
Tab.
15. Assign the Controller
used as the Primary
cluster
communication (AKA
the Cluster
MASTER).
16. Enable Cluster
17. Save and Close.
18. Check the
Communication
Status in the
Monitoring Station.
 Workshop

a) Configure your iSTAR Ultra

a) Use ICU to configure the iSTAR Ultra settings
b) Go to the Hardware Menu and Create a New Encrypted Controller
and Cluster as shown before, using the IP address given by the
Instructor.
c) Check the Communication status.
 Summary

1. Can I have redundant communication with an iSTAR ultra ?

2. How many I/8 can I connect to the iSTAR Ultra with 2 ACM
boards ?
3. Can I mix in the same Cluster iSTAR PRO with iSTAR
Ultra?
4. How do I set the Encryption on the iSTAR Ultra ?