Access Control

OnGuard
Version 8.3
Delivering enterprise-grade security
with an evolving, customer-focused
user interface

Overview
The LenelS2™ OnGuard® system version 8.3 software release Mercury M-Series controllers
includes support for the M-Series controllers, Lockdown The new Mercury M-Series controllers in OnGuard 8.3 bring
Groups, Password Management for Access Controllers, On- significant benefits with enhanced security and reliability.
Demand Status monitoring, and many more updates. Cybersecurity is bolstered with a new Linux operating
system, secure processor, Secure Boot, and built-in crypto
New Configuration options in browser client
accelerators. Additionally, the M-Series controllers offer
Offering new options for system configuration in the browser
larger and faster processors and memory configurations,
clients, OnGuard 8.3 introduces the new ‘Behaviors’ client,
providing more offline transaction storage and extending
supporting the ability to manage Timezones and Holidays,
their lifecycle for long-term use. Memory backup can now
Access Levels, and Device Groups. Allowing more accessible
operate from either a maintenance-free on-board high-
and task-focused configuration of these objects through a
capacity capacitor, or by an optional lithium coin cell battery.
browser client interface, the new Behaviors client extends the
platform and the availability of these frequently-used features.
Cloud Platform and Compatibility
Lockdown Groups
Lockdown Groups offer security administrators a more OnGuard Cloud
flexible and efficient way to specify emergency response The OnGuard Cloud service, based on OnGuard versions 8.1
behavior across facilities. This feature enables logical selection and above, provides a hosted cloud service option with the
and on-demand activation of lockdowns, streamlining security power of OnGuard. With fully redundant servers hosted on
management. Compatible with both installed and browser Amazon Web Services (AWS), this service provides the latest
monitoring clients, Lockdown Groups enhance security when software and OS updates to keep customers current with the
paired with the Lockdown Reader Override (badge) feature newest features and benefits. Full 24/7/365 monitoring helps
introduced in OnGuard 8.2. Together with OnGuard’s existing reduce downtime and alleviate potential issues with
tools, these options provide an increasingly valuable and system performance.
effective approach to safeguarding your environment
and personnel.
Password and Certificate Management for
Access Controllers
Designed to support enterprise customers with large fleets
of OnGuard / Mercury access controllers, this function of the
new OnGuard Hardware browser client allows administrators
to manage the passwords and certificates for their controllers.
Using standard filters and criteria, administrators can select
groups of controllers and choose to update the passwords of
the panel users and/or the certificates that provide security
between the controllers and the communication servers.
OnGuard Version 8.3 Access Control

Features & Functionality

New and Improved Ways to Use the OnGuard System New and Enhanced OnGuard Browser Clients and Apps
• Native support for management of Mercury M-Series controllers • NEW Behaviors client provides the ability to manage the
• Lockdown Groups allow for configuration of logical groupings of behavior of your configured system in the areas of:
readers to be managed in case of a lockdown  Timezones and Holidays
• On-Demand Status option in Alarm Monitoring streamlines  Access Levels
operation and reduces network traffic, allowing the operator to  Device Groups
focus on alarm response  Lockdown Reader Groups
• Badge Printing Management within the browser client will now • NEW Hardware client supports the management of User
allow broader access to multiple hardwired and networked Passwords within Mercury access controllers for more efficient
printers per badge type and workstations in distributed policy compliance
environments  Loading of customer certificates for communication
• Scripted Installation updates and Client Connect support to  Peer authentication via certificate
make software installation more automated and consistent
• Monitor client adds support for the operation of Device Groups
• Installation images (ISO) specific to Full or Client-Only packages (for all types) with a newly created Device Groups widget
• Installation option to install Milestone XProtect® software with • Lockdown Groups widget in Monitor client allows for activation
OnGuard clients and servers and status monitoring of lockdown operations
• Enhanced support for Milestone cameras adds event Video • Access Manager includes feedback improvements to better
options for starting / stopping recording based on an Event indicate when user is managing Active or Inactive Badges in the
• Otis Compass® elevator controller-connected readers can now client
support 16 card formats (when enabled) • Credentials client improves management of ‘inactive’
• Alarm Monitoring ‘jump to device’ right-click option takes the cardholders, allowing searches for ‘last time used’ and ‘inactive
operator directly to the device in the System Tree badges’, combined with a new action for multiple-delete to
• Alarm Monitoring updated to display OnGuard Maps in 24-bit support cleanup or privacy
full color depth, in alignment with the user experience in the • Users client adds the ability to delete multiple records on the
browser client ‘Actions’ menu for effective cleanup of old user records
• System Administration interface updates for improved usability • Credentials client offers a new Light / Dark mode option
and scale on Monitor Zones, Elevator Control Levels, and Access • Monitor client includes new options for Cardholder Verify,
Groups, along with Show / Hide Toolbar button including the ability to clear the cardholder image from the
• Support for TLS 1.3 for key encrypted communications in screen on a timed basis
OnGuard (Browser clients, Database, Hardware) • Users client now supports bulk assignment actions for deletion
• Compatibility for NEC EXPRESSCLUSTER 5.X versions for and assignment of Permissions Groups to users
Microsoft® Windows® supports redundancy on the latest • Reports client adds the option for Favorites, allowing users to
operating systems identify and quickly access the reports they use most often
• OpenAccess API bulk export updates provide up to a 30x • Publish Reports on a scheduled basis to an FTP/SFTP server
improvement in the retrieval of large data sets
• Replication transaction batching and capacity control enhances
processing speed, reduces memory usage, and improves
service stability on Enterprise systems
OnGuard Version 8.3 continues the evolution and
expansion of an already industry leading feature set

Feature Updates by OnGuard Version OnGuard 8.3 8.2 8.1

Behaviors client manages Timezones, Holidays, Access Levels, and Device Groups •
Hardware client supports management of User Passwords and Certificates stored within
•
access controllers
Monitor client adds support for Device Groups operation •
Credentials client filters to identify ‘inactive’ cardholders (‘last time used’ and ‘inactive badges’) •
Privacy option for Cardholder Verify in Monitor clears the photo display based on a timeout •
Users client adds ‘bulk assignment’ action to apply groups of permissions to multiple users •
Reports client adds Favorites, allowing users to prioritize reports they use most often •
OnGuard®
Scheduled reports add an option for publishing to an FTP/SFTP server •
Browser Clients
Printing Management (Badges) within the browser client now allows multiple printers per badge type •
Reporting and Dashboards client with support for OnGuard systems • • •
Reports and Dashboards updates build on client capability and support localization • •
Photo Capture and Primary / Additional Segmentation • • •
Visitor Bulk Import via imported file (csv/xls) • • •
Monitor supports Active Video pop-up of live/recorded video on alarm (with pre-roll and timeout) • • •
Active Video pop-up now respects Pre-Roll and Unattended Timeout settings • •
Monitor includes interactive Maps feature and Video Clip Export capability • • •
Subscription Upgrade and Support Plan (SUSP) and OAAP license renewal notifications • • •
Native support for the Mercury M-Series controllers •
On-Demand Status option for Alarm Monitoring •
Controller upgrade support for Mercury X-Series migration / promotion • • •
ASSA ABLOY - Aperio® AH40 IP hub support • • •
Access Hardware
Supported Invixium® IXM TITAN facial recognition reader with body temperature measurement • • •
Flexible network-connected Door I/O Module (LNL-1324e) offers onboard Ethernet connectivity • • •
Bi-directional communication with Honeywell controllers supports PW7000 Series • •
BlueDiamond allows issuance of Employee Badge in Apple Wallet and corporate badge in Google Wallet
• •
mobile credentials (availability may vary by region)
Alarm Monitoring ‘jump to device’ takes the operator directly to the device in the System Tree •
Otis Compass controller-based readers can now support 16 card formats •
Access Control
Lockdown Groups support logical grouping of readers to define emergency response •
Enhancements
Locked Reader Override support (allow access through ‘Locked’ readers) • •
IP client connection for Mercury access controllers • • •
Enhanced support for Milestone cameras adds options for starting / stopping recording based on an event •
Video
Monitor and Surveillance clients support audio, digital zoom, snapshots and playback speed control • • •
Enhancements
Monitor and Surveillance clients support Milestone XProtect® VMS and LenelS2 NVR • • •
Microsoft® Windows® Server 2022 • • •
Operating System, Microsoft® Windows® 11 • • •
Database, and Microsoft® SQL Server® 2022 • •
Interface Compatible with NEC EXPRESSCLUSTER 5.X versions for Microsoft® Windows® •
OnGuard OpenAccess Web Services API updates • • •
TLS 1.3 encryption support (database, browser clients, access controllers) •
Third-party authentication support for service authentication using client credentials flow • •
Configurable TLS-encrypted communications (communications server to ISC) • • •
SA / Delegate login added to admin tools (Setup Assistant, Database Setup, Database Translator) • • •
Cybersecurity Enhanced key management and encryption • • •
HTTPS communications for OnGuard license management • • •
Support for TLS encryption for email (1.1 / 1.2) • • •
Latest OnGuard Hardening Guide included to reduce the attack surface of OnGuard deployments • • •
Support for third-party user authentication via OpenID Connect® (OIDC) interface • • •
Scripted Installation updates and Client Connect supports automated installation and consistency •
System and Installation images (ISO) specific to Full or Client-Only package • • •
Installation Installation ‘Integration Install Package’ to support Milestone XProtect for OnGuard clients and servers •
System Administration ‘client refresh’ updates for improved usability and scaling • • •
OnGuard Cloud as a LenelS2-hosted option for customer system environments • •
Cloud Amazon RDS Database support (as alternative to SQL Server for AWS OnGuard systems) • • •
Azure SQL Database support (as alternative to SQL Server for Azure OnGuard systems) • • •
OnGuard Version 8.3

Lockdown Groups offer more flexibility to group readers for Monitor widget for Cardholder Verify adds to operator customization
configuration and activation of a Lockdown response options and supports privacy by clearing the screen on a timed basis

OnGuard Behaviors client allows browser-based management of NEW Hardware client allows OnGuard to update Passwords within
Access Level and other configurations the controllers to support customer compliance over large ‘fleets’ of
Access Control

Credentials client displays the latest support for dark mode within OnGuard 8.3 offers native and familiar configuration of Mercury’s
OnGuard’s browser client suite latest and most secure controller lineup

For more information and links to technical documents, visit the LenelS2 Connect portal.

LenelS2.com
(866) 788-5095
Specifications subject to change without notice.
© 2025 Honeywell International Inc. All Rights Reserved. All trademarks and
service marks referred herein are property of their respective owners. 2025/05