Security Center
Administrator Guide
5.2
Copyright notice
© 2013 Genetec Inc. All rights reserved.
Genetec Inc. distributes this document with software that includes an end-user license agreement and is furnished under license and may be used only in accordance with the terms of the license agreement. The contents of this document are protected under copyright law.
The contents of this guide are furnished for informational use only and are subject to change without notice. Genetec Inc. assumes no responsibility or liability for any errors or inaccuracies that may appear in the informational content contained in this guide.
This publication may not be copied, modified, or reproduced in any form or for any purpose, nor can any derivative works be created therefrom without Genetec Inc.’s prior written consent.
Genetec Inc. reserves the right to revise and improve its products as it sees fit. This document describes the state of a product at the time of document’s last revision, and may not reflect the product at all times in the future.
In no event shall Genetec Inc. be liable to any person or entity with respect to any loss or damage that is incidental to or consequential upon the instructions found in this document or the computer software and hardware products described herein. The use of this document is subject to the disclaimer of liability found in the end-user license agreement.
"Genetec", "Omnicast", "Synergis", "Synergis Master Controller", "AutoVu", "Federation", "Stratocast", the Genetec stylized "G", and the Omnicast, Synergis, AutoVu and Stratocast logos are trademarks of Genetec Inc., either registered or pending registration in several jurisdictions.
"Security Center", "Security Center Mobile", "Plan Manager", "Stratocast" and the Security Center logo are trademarks of Genetec Inc.
Other trade names used in this document may be trademarks or registered trademarks of the manufacturers or vendors of the respective products.
All specifications are subject to change without notice.
Document information
Document title: Security Center Administrator Guide 5.2 Document number: EN.500.003-V5.2.C1(1)
Document update date: April 19, 2013
You can send your comments, corrections, and suggestions about this guide to [email protected].
gtap.genetec.com | Security Center Administrator Guide 5.2 iii EN.500.003-V5.2.C1(1) | Last updated: April 19, 2013
About this guide
This guide provides the information you need to set up and configure your Security Center system. It explains the basic settings you must configure before your system can be used, as well as other settings you'll need to change such as adding additional users and resources (servers) to your system. This guide also provides the conceptual information and instructions on how to build and configure your Security Center video-surveillance, access control, and license plate recognition (LPR) systems. A reference section is included that provides information about each window and tab, and the related settings in the Config Tool. Last-minute updates can be found in the Security Center Release Notes.
This guide is written for users who need to configure and manage Security Center. You should be familiar with the following concepts and systems:
•
Microsoft Windows administration•
Installation, configuration, and use of Microsoft SQL Server 2008•
Video surveillance concepts•
Access control concepts•
Vehicle law enforcement and parking enforcement concepts•
Wiring of access control equipment such as door controllers and input/output modulesNotes and notices
This section explains how the following notes and notices are used in this guide:
•
Tip. Suggests how to apply the information in a topic or step.•
Note. Explains a special case, or expands on an important point.•
Important. Points out critical information concerning a topic or step.•
Caution. Indicates that an action or step can cause loss of data, security problems, or performance issues.•
Warning. Indicates that an action or step can result in physical harm, or cause damage to hardware.Contents
About this guide . . . . iii
Part I: Introduction to Security Center
Chapter 1: Welcome to Security Center
What is Security Center? . . . . 3Common/Core features . . . . 4
Omnicast – Video surveillance features . . . . 4
Synergis – Access control features . . . . 4
AutoVu – License plate recognition (LPR) features . . . . 5
Architecture overview. . . . 6
About Security Center components. . . . 6
What is Genetec Server? . . . . 7
Chapter 2: Getting started with Config Tool
Connecting to Security Center . . . . 9Log on . . . . 9
Change your password . . . . 10
Log off . . . . 10
Close the application . . . . 10
Differences between Config Tool 5.1 and 5.2 . . . . 11
Config Tool interface tour . . . . 13
How Config Tool is organized . . . . 13
Home page overview . . . . 14
Administration task workspace overview . . . . 16
genetec.com | Security Center Administrator Guide 5.2 v EN.500.003-V5.2.C1(1)
Chapter 3: Working with tasks
Adding a task . . . . 22
Create a new task . . . . 22
Load a saved task . . . . 23
Working with your current tasks . . . . 24
Task list commands . . . . 24
Close the current task . . . . 25
Reordering tasks . . . . 25
Save a task . . . . 26
Send a task to another workstation . . . . 27
Change the taskbar position . . . . 27
Set the taskbar to auto-hide . . . . 27
Chapter 4: Working with reports
Generate a report . . . . 30Export and print your report . . . . 31
Export your report . . . . 31
Print your report . . . . 31
Customize the report pane. . . . 32
Resize columns . . . . 32
Select columns . . . . 32
Change the column order . . . . 33
Part II: Security Center administration
Chapter 5: Basic principles about entities
Entities as basic building blocks . . . . 36Configuring entities . . . . 37
Create an entity manually . . . . 37
Common entity attributes . . . . 38
Entities created automatically by the system . . . . 39
Using geographical locations . . . . 40
Searching for tasks and entities . . . . 42
Search for a task . . . . 42
Search for entities by name . . . . 43
Search for entities using the Search tool. . . . 43
Delete an entity . . . . 45
Chapter 6: Common administrative tasks
Managing servers and roles . . . . 47Add an expansion server to your system . . . . 47
Managing servers . . . . 48
Managing roles. . . . 49
Diagnose role problems . . . . 51
Managing databases . . . . 52
Common database settings . . . . 52
Where should the database be hosted? . . . . 53
Move a database to a different computer . . . . 53
Connect roles to a remote database server . . . . 54
Create a database . . . . 55
View information about a role’s database . . . . 56
Turn on role database notifications . . . . 57
Back up your role database . . . . 57
Restore your role database . . . . 58
Delete a database . . . . 59
Configuring Security Center for high availability. . . . 60
Configuring role failover . . . . 61
How role failover works in Security Center . . . . 61
Which roles support failover . . . . 62
Configure failover for roles . . . . 64
Troubleshooting failover . . . . 65
Configuring Directory failover and load balancing . . . . 66
How Directory failover and load balancing works . . . . 66
Directory failover and load balancing prerequisites . . . . 67
Add a server to the Directory failover list . . . . 68
genetec.com | Security Center Administrator Guide 5.2 vii EN.500.003-V5.2.C1(1)
Manually switch the main server . . . . 69
Remove a server from the Directory failover list . . . . 70
Bypass default load balancing . . . . 70
Configuring Directory database failover . . . . 71
How Directory database failover works . . . . 71
Configure database failover through backup and restore . . . . 72
Configure database failover through mirroring . . . . 74
Monitoring your system’s health . . . . 75
About the Health Monitor role . . . . 75
Configuring the Health Monitor. . . . 76
Monitoring your system’s health using maintenance tasks . . . . 81
Managing the Network view . . . . 82
What is the Network view? . . . . 82
Purpose of the Network view . . . . 82
Creating network entities . . . . 83
Managing the Logical view. . . . 85
About the Logical view . . . . 85
Configuring the Logical view . . . . 86
Managing software security . . . . 89
Introduction to software security . . . . 89
Defining partitions . . . . 90
Defining users . . . . 93
Defining user groups . . . . 96
Configuring user privileges . . . . 99
Using privilege templates . . . 101
Importing users from an Active Directory . . . 102
Automating system behavior . . . 103
Using schedules . . . 103
Using event-to-actions . . . 106
Using scheduled tasks . . . 109
Using macros . . . 110
Managing alarms . . . 111
Create an alarm . . . . 112
Testing alarms . . . . 112
Trigger alarms manually . . . . 113
Trigger alarms automatically using event-to-actions . . . . 113
Responding to alarms . . . . 115
Investigating current and past alarms . . . . 116
Managing threat levels . . . . 117
What are threat levels for? . . . . 117
Differences between threat levels and alarms . . . . 117
Create a threat level . . . . 119
Configuring threat level actions . . . . 121
Actions exclusive to threat levels . . . . 122
Threat level limitations . . . . 122
Threat level scenarios . . . . 123
Threat level related tasks . . . . 127
Federating remote systems . . . . 128
Types of federations . . . . 128
What are federated entities? . . . . 128
Federating Omnicast systems . . . . 131
Federating Security Center systems . . . . 133
Advanced settings for large federations . . . . 134
Defining custom fields and data types . . . . 136
Why use custom fields?. . . . 136
Add a custom field . . . . 136
Add a custom data type. . . . 138
Modify a custom data type . . . . 139
Integrating with Windows Active Directory . . . . 140
What is Active Directory integration? . . . . 140
What are the benefits of AD integration? . . . . 140
How does Active Directory integration work? . . . . 141
How does synchronization work? . . . . 142
What information can be synchronized with the AD? . . . . 142
Import security groups from an Active Directory . . . . 143
Select which cardholder fields to synchronize with the AD . . . . 146
genetec.com | Security Center Administrator Guide 5.2 ix EN.500.003-V5.2.C1(1)
Map custom fields to synchronize with the AD . . . 148
Resolve conflicts due to imported entities . . . 149
Modifying imported users . . . 151
Modifying imported cardholders . . . 151
Logging on with an Active Directory user . . . 153
Managing intrusion panels . . . 155
How are intrusion detection panels represented in Security Center? . . . 155
What does the Intrusion Manager role do? . . . 156
Enroll an intrusion panel . . . 156
Edit intrusion detection unit peripherals. . . 158
Create an intrusion detection area . . . 159
Managing zones . . . 160
What is IO linking? . . . 160
What is a zone? . . . 160
About zone management roles . . . 161
Creating zones . . . 161
Which type of zone works best for me? . . . 163
Supporting cross-platform development . . . 164
What does the Web-based SDK role do? . . . 164
Using the Web-based SDK . . . 164
Creating tile plugins . . . 165
Create a tile plugin that links to a Web site . . . 165
Create a tile plugin that links to a map file . . . 165
Chapter 7: Troubleshooting
Viewing system messages . . . 168Viewing system health events . . . 170
Viewing the health status and availability of entities . . . 171
System status task . . . 172
Monitoring the status of your system . . . 177
Troubleshooting entity states . . . 179
Diagnosing entities . . . 180
Investigating user related activity on the system . . . . 182
Viewing properties of units in your system . . . . 184
Part III: Omnicast IP video surveillance
Chapter 8: Deploying Omnicast
What is Omnicast? . . . . 187What are the Omnicast entities? . . . . 188
Omnicast deployment process . . . . 190
Omnicast deployment prerequisites . . . . 190
Omnicast deployment procedure . . . . 191
Configuring the Archiver role . . . . 193
What is the Archiver? . . . . 193
Configure the Archiver . . . . 193
Adding video units to your system . . . . 194
Configuring video units for trickling . . . . 197
Configuring the Media Router role . . . . 202
What is the Media Router? . . . . 202
Configure the Media Router . . . . 202
Beware of RTSP port conflict . . . . 203
Configuring the Auxiliary Archiver role . . . . 204
What is the Auxiliary Archiver? . . . . 204
Configure the Auxiliary Archiver . . . . 206
Associate cameras to the Auxiliary Archiver . . . . 207
Remove a camera from the Auxiliary Archiver . . . . 208
Move the Auxiliary Archiver to a different server . . . . 208
Configuring cameras . . . . 209
Recommended camera configuration process . . . . 209
Configuring video streams . . . . 210
Configure visual tracking . . . . 212
Test the video quality of your camera . . . . 213
Configure PTZ motors . . . . 214
Creating camera sequences . . . . 218
genetec.com | Security Center Administrator Guide 5.2 xi EN.500.003-V5.2.C1(1)
Configure analog monitors . . . 220
Testing your analog monitor configuration . . . 222
Chapter 9: Managing Omnicast
Managing video archives . . . 224What constitutes a video archive? . . . 224
Managing the archive storage . . . 225
Protecting your video archives. . . 227
Protecting your video archive against storage failure . . . 227
Protecting your video archive against hardware failure . . . 227
Protecting video archive against routine cleanup. . . 229
Protecting video archive against tampering . . . 229
Protecting video files . . . 231
Viewing properties of video files . . . 233
Replace video units . . . 234
Diagnosing video streams . . . 235
Troubleshooting video units that are offline . . . 236
Diagnosing “Waiting for signal” errors . . . 237
Diagnosing “Impossible to establish video session with the server” errors. . . . 239
Troubleshooting no playback video available . . . 240
Troubleshooting cameras that are not recording . . . 241
Troubleshooting video units that cannot be added . . . 244
Troubleshooting video units that cannot be deleted . . . 247
Solving H.264 video stream issues . . . 248
Investigating Archiver events . . . 249
Part IV: Synergis IP access control
Chapter 10: Deploying Synergis
What is Synergis? . . . 252How does Synergis work? . . . 252
Uniqueness of the Synergis model . . . . 254
Synergis deployment process . . . . 256
Synergis deployment prerequisites . . . . 256
Synergis deployment procedure . . . . 257
Configuring the Access Manager role. . . . 260
Configure the Access Manager role . . . . 260
Add the unit manufacturer extensions . . . . 261
Adding access control units to your system . . . . 261
Configuring access control units . . . . 267
Understanding unit synchronization . . . . 267
Synergis Master Controller’s unique characteristics . . . . 267
Configuring doors . . . . 268
Wiring doors to access control units . . . . 268
Create and configure your doors . . . . 268
Configuring a buzzer . . . . 269
Configuring readerless doors using Input/Output modules . . . . 269
Associate cameras to doors . . . . 270
Using the Walkthrough wizard . . . . 271
Why use the Walkthrough wizard? . . . . 271
Assigning doors to access control units using the Walkthrough Wizard . . . . . 272
Configuring elevators. . . . 274
Hardware for elevator control and floor tracking . . . . 274
Configuring elevator floors . . . . 275
Create an elevator . . . . 275
Configuring secured areas . . . . 278
Create an area . . . . 278
Add members to an area . . . . 279
Configure doors for an area . . . . 279
Configure antipassback. . . . 280
Configure interlock . . . . 280
Configuring access rules . . . . 281
Create and configure access rules . . . . 281
Configuring cardholders and cardholder groups . . . . 283
genetec.com | Security Center Administrator Guide 5.2 xiii EN.500.003-V5.2.C1(1)
Create a cardholder group in Config Tool . . . 284
About the maximum cardholder picture file size . . . 284
Import cardholders from a flat file . . . 284
Importing cardholders from an Active Directory . . . 284
Managing cardholders in Security Desk . . . 284
Configuring credentials . . . 285
Create a credential in Config Tool . . . 285
Import credentials from a flat file . . . 287
Importing credentials from an Active Directory . . . 287
Enrolling credentials from Security Desk . . . 287
Using custom card formats . . . 287
Defining badge templates . . . 289
Testing your configuration . . . 294
Chapter 11: Managing Synergis
Managing global cardholders . . . 296What is global cardholder management? . . . 296
How does global cardholder management work? . . . 296
Rules and restrictions regarding GCM . . . 301
Configuring global cardholder management . . . 303
Operating on global entities . . . 305
Viewing access control health events . . . 308
Investigating access control unit events . . . 309
Viewing IO configuration of access control units . . . 310
Replace access control units . . . 311
Replacing HID VertX 1000 units with SMC units . . . 312
Troubleshoot HID discovery and enrollment . . . 314
Common discovery and enrollment issues . . . 314
HID unit cannot be found with the discovery tool . . . 315
HID unit enrollment issues . . . 315
Finding out which entities are affected by access rules. . . 317
Viewing properties of cardholder group members. . . 318
How the Access troubleshooter tool works . . . . 320
Troubleshooting access points . . . . 321
Troubleshooting cardholder access rights. . . . 322
Diagnosing cardholder access rights based on credentials . . . . 323
Finding out who is granted access to doors and elevators. . . . 324
Finding out who is granted/denied access at access points . . . . 325
Troubleshoot door issues . . . . 326
Request to exit events . . . . 326
Credential issues . . . . 326
Resolution of reader issues . . . . 327
Part V: AutoVu IP license plate recognition
Chapter 12: Deploying AutoVu
Part VI: Config Tool reference
Chapter 13: Entity types
Common configuration tabs . . . . 332Identity . . . . 332
Cameras . . . . 334
Custom fields . . . . 335
Location . . . . 336
Access control unit . . . . 337
Properties (SMC) . . . . 338 Properties (HID) . . . . 340 Portal (SMC) . . . . 343 Network (HID). . . . 344 Peripherals . . . . 345 Health . . . . 346 Synchronization . . . . 347 Access rule . . . . 349 Properties . . . . 350
genetec.com | Security Center Administrator Guide 5.2 xv EN.500.003-V5.2.C1(1) Alarm . . . 351 Properties . . . 352 Advanced . . . 354 Analog monitor . . . 357 Properties . . . 358 Area . . . 360 Properties . . . 361 Members . . . 363 Access rules . . . 364 Badge template. . . 365 Badge designer . . . 366
Camera (video encoder) . . . 368
Video . . . 369 Recording . . . 378 Motion detection . . . 379 Color . . . 387 Visual tracking . . . 388 Hardware . . . 389 Camera sequence . . . 393 Cameras . . . 394 Cardholder. . . 395 Properties . . . 396 Picture . . . 397 Cardholder group . . . 398 Properties . . . 399 Cash register . . . 400 Credential . . . 401 Properties . . . 402 Badge template . . . 403 Door . . . 404 Properties . . . 405 Unlock schedules . . . 406 Hardware . . . 408
Access rules . . . . 409 Elevator . . . . 410 Floors . . . . 411 Access . . . . 412 Advanced . . . . 413 Hotlist. . . . 414 Properties . . . . 415 Advanced . . . . 418
Intrusion detection area . . . . 421
Properties . . . . 422
Intrusion detection unit . . . . 423
Properties . . . . 424 Peripherals . . . . 425 LPR unit . . . . 426 Properties . . . . 427 Macro . . . . 429 Properties . . . . 430
Default execution context . . . . 431
Monitor group . . . . 432 Monitors . . . . 433 Network . . . . 434 Properties . . . . 435 Output behavior . . . . 437 Properties . . . . 438 Overtime rule . . . . 439 Properties . . . . 440 Parking lot . . . . 442 Parking facility . . . . 444 Properties . . . . 445 Partition . . . . 447 Properties . . . . 448 Accepted users . . . . 449 Patroller . . . . 450
genetec.com | Security Center Administrator Guide 5.2 xvii EN.500.003-V5.2.C1(1) Permit . . . 453 Properties . . . 454 Permit restriction . . . 457 Properties . . . 458 Parking lot . . . 460 Public task . . . 461 Role . . . 462 Schedule . . . 463 Properties . . . 464
Setting the time range . . . 465
Using the ordinal pattern . . . 468
Scheduled task . . . 469 Properties . . . 470 Server . . . 471 Properties . . . 472 Server Admin . . . 473 Directory tab . . . 473
Genetec Server tab . . . 476
Tile plugin . . . 480 Properties . . . 481 User . . . 482 Properties . . . 483 Workspace . . . 485 Security . . . 486 Privileges . . . 488 User group. . . 489 Properties . . . 490 Security . . . 491 Privileges . . . 493 Video unit . . . 494 Identity . . . 495 Properties . . . 496 Peripherals . . . 498
Zone (hardware) . . . . 502 Properties . . . . 503 Arming . . . . 504 Zone (virtual) . . . . 506 Properties . . . . 507 Arming . . . . 508
Chapter 14: Role types
Access Manager . . . . 511 Properties . . . . 512 Extensions . . . . 513 Resources . . . . 514 Active Directory . . . . 516 Properties . . . . 517 Links . . . . 518 Resources . . . . 520 Archiver . . . . 521 Camera recording . . . . 522 Trickling . . . . 524 Extensions . . . . 528 Resources . . . . 533 Auxiliary Archiver . . . . 543 Camera recording . . . . 544 Cameras . . . . 546 Resources . . . . 547 Directory . . . . 551Configuring the Directory role . . . . 551
Managing the Directory role . . . . 551
Directory Manager . . . . 552
Directory servers . . . . 553
Database failover . . . . 554
Global Cardholder Synchronizer . . . . 557
Properties . . . . 558
genetec.com | Security Center Administrator Guide 5.2 xix EN.500.003-V5.2.C1(1) Health Monitor . . . 560 Properties . . . 561 Resources . . . 562 Intrusion Manager. . . 563 Properties . . . 564 Extensions . . . 565 Resources . . . 566 LPR Manager . . . 567 Properties . . . 568 Resources . . . 584 Media Router . . . 585 Properties . . . 586 Resources . . . 588 Omnicast Federation . . . 590 Identity . . . 591 Properties . . . 592 Resources . . . 593 Plugin . . . 594 Point of Sale . . . 595 Properties . . . 596 Cash registers . . . 597 Resources . . . 598 Report Manager . . . 599 Properties . . . 599 Resources . . . 600
Security Center Federation . . . 601
Identity . . . 602 Properties . . . 603 Resources . . . 604 Web-based SDK . . . 605 Properties . . . 606 Resources . . . 607
Zone Manager. . . . 608
Properties . . . . 609
Resources . . . . 610
Chapter 15: Administration tasks
Alarms . . . . 612 Logical view . . . . 613 Network view . . . . 615 Security . . . . 617 System . . . . 618 General settings . . . . 618 Custom fields . . . . 619 Events . . . . 622 Actions. . . . 624 Logical ID . . . . 625User password settings . . . . 626
Activity trails . . . . 627
Audio . . . . 628
Threat levels . . . . 629
Video . . . . 630
Access control. . . . 632
Roles and units . . . . 633
General settings . . . . 634
Intrusion detection . . . . 636
LPR . . . . 638
Roles and units . . . . 639
General settings . . . . 640
Plugins . . . . 649
Chapter 16: Tools and utilities
Security Desk . . . . 651Access troubleshooter. . . . 652
genetec.com | Security Center Administrator Guide 5.2 xxi EN.500.003-V5.2.C1(1)
Move unit . . . 655
Moving units . . . 655
Import tool . . . 657
Sample import scenario . . . 657
Fields that can be imported from a CSV file . . . 662
About entity creations and updates . . . 666
Replacing old credentials . . . 666
Copy configuration tool . . . 668
Using the copy configuration tool . . . 668
Custom card format editor . . . 670
Defining custom card formats . . . 670
Deleting a custom card format . . . 677
Options dialog box. . . 678
General options . . . 679
Keyboard shortcuts . . . 681
Visual options . . . 683
User interaction options. . . 685
Video options . . . 688
Performance options . . . 689
Date and time options . . . 690
External devices . . . 691
Adding shortcuts to external tools. . . 692
Chapter 17: User privileges
Application privileges . . . 695 General privileges . . . 696 Administrative privileges . . . 697 Logical entities . . . 697 Physical entities . . . 697 Schedule Management . . . 700Access control management . . . 701
Alarm management . . . 703
Task privileges . . . . 704
Action privileges . . . . 708
Chapter 18: Reporting task reference
Query filters . . . . 712
Report pane columns . . . . 723
Chapter 19: Events and actions in Security Center
Event types . . . . 745
Action types . . . . 758
Chapter 20: Keyboard shortcuts in Config Tool
Default keyboard shortcuts . . . . 765
Part VII: Appendices
Appendix A: License options
Viewing license information from Config Tool . . . . 769
Viewing license information from Server Admin. . . . 770
License option descriptions . . . . 771 Security Center license options . . . . 771 Synergis license options . . . . 772 Omnicast license options . . . . 773 AutoVu license options. . . . 774 Mobile license options . . . . 774 Certificate license options . . . . 775
Appendix B: Default Security Center ports
Common communication ports . . . . 777
AutoVu-specific ports. . . . 778
Synergis-specific ports . . . . 779
gtap.genetec.com | Security Center Administrator Guide 5.2 xxiii EN.500.003-V5.2.C1(1) | Last updated: April 19, 2013
Appendix C: HID reference
Network configuration . . . . 782 Refer to HID’s documentation for initial hardware setup . . . . 782
Using the HID Discovery GUI utility . . . . 783
HID initial configurations . . . . 784
Special considerations when configuring HID units . . . . 785 For HID V1000 units . . . . 785 Other HID hardware . . . . 785 HID factory default input settings . . . . 785 Modify input configurations . . . . 786
Interpreting the Power and Comm LEDs on an HID unit . . . . 787
Supported features and models . . . . 788 Supported access control software and hardware . . . . 788
Access control unit modes of operation . . . . 791 About offline, mixed, and online modes of operation . . . . 791 Supported modes of operation per unit type . . . . 791
Access control unit configuration. . . . 799 General versus dedicated inputs . . . . 799 Configuring a door with reader . . . . 799 Configuring a door with two door sensors . . . . 799
Wiring diagrams . . . . 800 HID Edge reader & Edge Plus . . . . 800 HID VertX V1000 . . . . 801 HID VertX V2000 . . . . 802
Appendix D: Bosch reference
How Bosch intrusion panel integration works . . . . 804
Appendix E: Honeywell reference
How Galaxy Dimension control panel integration works. . . . 806
Glossary . . . .807
Index . . . .847
Part I
I n t r o d u c t i o n t o S e c u r i t y C e n t e r
Take a tour of Security Center and learn the basics of using the user interface.This part includes the following chapters:
• Chapter 1, “Welcome to Security Center” on page 2 • Chapter 2, “Getting started with Config Tool” on page 8 • Chapter 3, “Working with tasks” on page 21
gtap.genetec.com | Security Center Administrator Guide 5.2 2 EN.500.003-V5.2.C1(1) | Last updated: April 19, 2013
1
Welcome to Security Center
This section includes the following topics:
•
"What is Security Center?" on page 3•
"Architecture overview" on page 6What is Security Center?
What is Security Center?
Security Center is the unified security platform that seamlessly blends Genetec's IP security and safety systems within a single innovative solution. The systems unified under Security Center include Genetec's Omnicast IP video surveillance, Synergis IP access control, and AutoVu IP license plate recognition system.
The Security Center unified security platform provides:
•
One platform controlling and managing video/access/LPR edge devices.•
One user interface for monitoring, reporting, and managing events and alarms for video surveillance, access control, and LPR - Security Desk.•
One user interface for configuring video surveillance, access control, and LPR - Config Tool.•
Unified live video viewing with video searches and video playback.Security Center features are divided into four main categories:
•
Common/Core features•
Omnicast – Video surveillance features•
Synergis – Access control featuresWhat is Security Center?
gtap.genetec.com | Security Center Administrator Guide 5.2 4
EN.500.003-V5.2.C1(1) | Last updated: April 19, 2013
Common/Core features
•
Alarm management•
Zone management•
Federation•
Intrusion panel integration•
Report management•
Schedule and scheduled task management•
User and user group management•
Windows Active Directory integration•
Programmable automated system behaviorOmnicast – Video surveillance features
•
Full camera configuration and management (new in 5.2)•
View live and playback video from all cameras•
Full PTZ control using the PC or CCTV keyboard, or on screen using the mouse•
Digital zoom•
Motion detection•
Bookmark any important scene to ease future video archive search and retrieval•
Save and print video snapshots•
Search video by alarm, bookmark, event, motion, or date and time•
View all cameras on independent or synchronized timelines•
Visual tracking: follow individuals or moving objects across different cameras•
Export video in the Genetec G64 format, or a public ASF format•
Protect video against accidental deletion•
Protect video against tampering by using watermarksSynergis – Access control features
•
Cardholder management•
Credential management•
Visitor management•
Door management•
Access rule management•
People countingWhat is Security Center?
AutoVu – License plate recognition (LPR) features
•
Fixed and mobile (with Patroller) LPR solution management•
Automatic identification of stolen (or scofflaw) vehicles•
Enforcement of city parking regulations (not involving permits)•
Enforcement of parking lot regulations (involving permits)•
License plate inventory in large parking facilitiesArchitecture overview
gtap.genetec.com | Security Center Administrator Guide 5.2 6
EN.500.003-V5.2.C1(1) | Last updated: April 19, 2013
Architecture overview
This section provides an overview of the components in a Security Center system. The setup and configuration of these components are explained later in this guide.
This section includes the following topics:
•
"About Security Center components" on page 6•
"What is Genetec Server?" on page 7About Security Center components
Security Center’s architecture is based on a client/server model, where all system functions are handled by a pool of server computers distributed over an IP network.
Every Security Center system must have its own pool of servers. Their number can range from a single machine for a small system to hundreds of machines for a large scale system.
NOTE The icons colored in blue represent the computers where Security Center server and client components are installed.
Architecture overview
What is Genetec Server?
Genetec Server is the Windows service you must install on every computer that you want
included in the pool of servers available for Security Center to use. Every server is a generic computing resource capable of taking on any role (set of functions) you assign to it.
You can increase the computing power of your Security Center system at any time by adding more servers to your pool of resources.
What is the main server?
The main server is the only server on your system that hosts the Directory role. The Directory is the role that gives your system its identity. All other servers on the system must connect to the main server in order to be part of the same system.
You can have only one main server on any Security Center system.
What is an expansion server
An expansion server is any computer other than the main server that you add to your system to increase its total computing power. An expansion server must connect to the main server and can host any role in Security Center, except the Directory role.
You can add expansion servers at any time. For more information, see "Add an expansion server to your system" on page 47.
What is a role?
A role is a software module that performs a specific job within Security Center. For example, you can assign roles for archiving video, for controlling a group of units, or for synchronizing Security Center users with your corporate directory service.
You create and configure roles using Config Tool. You can assign one or more roles to a single server, or assign multiple servers to the same role to provide load balancing and failover. For more information, see "How role failover works in Security Center" on page 61.
For each role you create, you can specify its parameters. After you’ve configured a role, you can move it to any server on your system (for example, one with a faster processor or more disk space) without having to install any additional software on that server.
For a list of role types available in Security Center and what they are used for, see "Role types" on page 510.
gtap.genetec.com | Security Center Administrator Guide 5.2 8 EN.500.003-V5.2.C1(1) | Last updated: April 19, 2013
2
Getting started with Config Tool
This section provides you with basic knowledge about Config Tool, the main application an administrator needs to configure Security Center. Once you’ve learned the basic concepts described in this section, you can refer to the "Config Tool reference" on page 330 for specific information on Config Tool topics.
This section includes the following topics:
•
"Connecting to Security Center" on page 9•
"Differences between Config Tool 5.1 and 5.2" on page 11•
"Config Tool interface tour" on page 13Connecting to Security Center
Connecting to Security Center
This section describes how to connect to Security Center. This section includes the following topics:
•
"Log on" on page 9•
"Change your password" on page 10•
"Log off " on page 10•
"Close the application" on page 10Log on
Before you begin: You need your username, password, and Directory name.
1 To open Config Tool, click Start > All Programs > Genetec Security Center 5.2 > Config Tool.
2 In the Logon dialog box, enter the required information.
If you have just installed Security Center, log on with the default administrative user Admin with a blank password. The Directory name is the name or IP address of your main server. If you are running Config Tool on your main server, you can leave the Directory field blank. 3 Click Log on.
The Home page appears. For more information, see "Home page overview" on page 14. After you are done: Change the Admin user’s password if it hasn’t been changed yet.
IMPORTANT If active directory integration has been set up by your system administrator, and you are connecting over a VPN connection, you must clear the Use Windows credentials check box and type your username in the format DOMAIN\Username.
NOTE More logon options are available when an Active Directory is integrated to Security Center. For more information, see "Logging on with an Active Directory user" on page 153.
Connecting to Security Center
gtap.genetec.com | Security Center Administrator Guide 5.2 10
EN.500.003-V5.2.C1(1) | Last updated: April 19, 2013
Change your password
Best practice: It is recommended to change your password regularly. 1 From the Home page, click About.
2 In the About page, click Change password. The Change password dialog box appears.
3 Enter your old password, then enter your new password twice. 4 Click OK.
Log off
You can log off from Security Center without closing Config Tool. Logging off disconnects you from the Directory. Use this command when you plan to log on again using a different username and password.
•
From the Home page, click Log off.Close the application
1 In the upper-right corner of the Config Tool window, click Exit( ). If you have unsaved tasks in your workspace, you are prompted to save them.
Differences between Config Tool 5.1 and 5.2
Differences between Config Tool 5.1 and 5.2
The following table highlights the differences between Config Tool 5.1 and 5.2.
Item Config Tool 5.1 Config Tool 5.2
Home page Access the Home page by clicking the Home button.
Access the Home page by clicking the Home tab.
Favorites Favorite items displayed in the Favorites tab in the Home page.
Favorite items listed in the Tasks tab in the Home page.
Recently used Recent items displayed in the Recently
used tab in the Home page.
Recent items listed in the Tasks tab in the Home page.
Private/public tasks
Private and public tasks are saved in the
Saved tasks tab in the Home page.
Private and public tasks are saved as separate tabs in the Home page.
License options All license options are displayed in the
About page.
Some license options displayed in the About page can be turned on or off.
Task organization Tasks in the Tasks tab listed by task category (Administration, Operation, and Maintenance), and solution type (access control, video, intrusion investigation, and LPR).
Tasks in the Tasks tab listed by task category (Administration, Operation, and Maintenance). The solution types are indicated by a colored line under the task icons; red for access control, green for video, and yellow for LPR.
Notification tray Can hide some of the notification tray items.
All notification tray items can be shown or hidden.
Selector Selector contains different tabs, such as Logical view and Query tab.
The Logical view and Query tab are displayed, but the selector is not indicated in the user interface.
Report commands Report commands grouped in the Report tab (export and print report) in
Maintenance tasks.
Report commands found at the top of the report pane (export and print report) in Maintenance tasks.
Select columns Select which columns to display from the
Report tab in Maintenance tasks.
Select which columns to display by right-clicking a column heading in the report pane in
Maintenance tasks.
Configuring alarm entities
Alarm entity configuration pages found in the System task
Alarm entity configuration pages found in the new Alarms task.
Credential enrollment task
Allows you to enroll credentials. Renamed to Credential management task. Allows you to enroll credentials, create and assign credentials, and respond to credential card printing requests.
Cardholder management
Three tabs for configuring cardholders: Identity, Credentials, and Access rules.
Two tabs for configuring cardholders: Identity and Access rules. Credentials tab is merged into the Identity tab.
Differences between Config Tool 5.1 and 5.2
gtap.genetec.com | Security Center Administrator Guide 5.2 12
EN.500.003-V5.2.C1(1) | Last updated: April 19, 2013 Access control unit
configuration report
Access control maintenance report, where you can view the configuration of access control units in your system.
Renamed to Hardware inventory report. A general maintenance report, where you can view the configuration of access control, video, intrusion detection, and LPR units in your system.
Config Tool interface tour
Config Tool interface tour
This section describes the main components of the Config Tool user interface. This section includes the following topics:
•
"How Config Tool is organized" on page 13•
"Home page overview" on page 14•
"Administration task workspace overview" on page 16•
"Maintenance task workspace overview" on page 19How Config Tool is organized
Config Tool is organized by tasks. All tasks can be customized, and multiple tasks can be carried out simultaneously. You might not see all the tasks and commands described in this guide, depending on your license options and user privileges. There are user privileges for each Config Tool task, and for many commands in Config Tool.
Tasks in the Home page are organized into three categories:
•
Administration. Administration tasks used to create and configure the entities required to model your system.•
Operation. Tasks related to day-to-day Security Center operations.•
Maintenance. Tasks related to maintenance and troubleshooting. Under each major category, the tasks are further divided as follows:•
Common tasks. Tasks that are shared by all three Security Center software modules. These tasks are always available regardless of which modules are supported by your software license.•
Access control. Tasks related to access control. Access control tasks are displayed with a red line under their icons. They are only available if Synergis is supported by your software license.•
Intrusion detection. Tasks that let you manage intrusion detection areas and units.•
LPR. Tasks related to license plate recognition. LPR tasks are displayed with a yellow lineunder their icons. They are only available if AutoVu is supported by your software license.
•
Video. Tasks related to video management. Video tasks are displayed with a green lineConfig Tool interface tour
gtap.genetec.com | Security Center Administrator Guide 5.2 14
EN.500.003-V5.2.C1(1) | Last updated: April 19, 2013
Home page overview
This section describes the Home page, and key components of the Config Tool user interface. The Home page is the main page in Config Tool. You can open the Home page by clicking Home ( ). It is also shown if the task list is empty.
A Home tab • Click to show or hide the Home page.Right-click for a list of commands (for example, save the workspace, close tasks, and so on).
B Current tasks Lists the tasks you currently have open and are working on. • Click a task tab to switch to that task.
• Right-click a tab for a list of commands. See "Working with your current tasks"
on page 24. C Notification
tray
Displays important information about your system. Hold your mouse pointer over an icon to view system information, or double-click the icon to perform an action.
You can choose which icons to show in the notification bar from the Options dialog box. See "Notification tray" on page 684.
D List all tasks Click to view a list of all open tasks. This button only appears if the task tabs take up the width of the taskbar.
G K N A B C J I H F E L M D
Config Tool interface tour
E Search box Type the name of the task, tool, or entity you are looking for. All tasks, tools or entities containing that text in their category, name, or description, are shown. F Tasks Lists your recent items, favorites, and all the task types that are available to you.
Select a task to open from this tab. G Private/
public tasks
Click to view the saved tasks that are available to you.
• Private tasks. Tasks that you saved that are only available to you.
• Public tasks. Tasks that you or someone else saved that are available to the general public.
To save a private or public task, see "Save a task" on page 26.
H Tools Click to view the tools that you can start directly from your Home page. The Tools page is divided into two sections:
• Tools. This section shows the standard Security Center tools. • External tools. This section shows the shortcuts to external tools and
applications. See "Adding shortcuts to external tools" on page 692. I Options Click to configure Config Tool options. See "Options dialog box" on page 678. J About Click to view information regarding your Security Center software, such as your
license, SMA, and software version. From the About page, you can also view the following:
• Help. Click to open the online help.
• Change password. Click to change your password. See "Change your password" on page 10.
• Contact us. Click to visit GTAP or the GTAP forum. You need an Internet connection to visit these Web sites. See "Technical support" on page 869.
• Installed components. Click to view the name and version of all installed software components (DLLs).
• Copyright. Click to display software copyright information.
For information about your software license, see "License options" on page 768. K Log off Click to log off without exiting the application.
L Favorites Right-click any task or tool to add or remove it from your Favorites list. You can also drag a task into your favorites list. Tasks listed in favorites no longer appear in the Recent items list.
M Recent items Lists your recently opened tasks and tools.
N Browse tasks Click to view all the tasks available to you. Click a task icon to open the task. If it is a single-instance task, it will open. If you can have multiple instances of the task, you are required to type a name for the task. If the task has multiple entity views, you need to select an entity. See also, "Adding a task" on page 22.
Config Tool interface tour
gtap.genetec.com | Security Center Administrator Guide 5.2 16
EN.500.003-V5.2.C1(1) | Last updated: April 19, 2013
Administration task workspace overview
Administration tasks used to create and configure the entities required to model your system. This section takes you on a tour of the administration task layout, and describes the common elements of most administration tasks. The Security task was used as an example. You can open the Security task by typing its name in the Search box on the Home page.
For more information about administration tasks, see "Administration tasks" on page 611.
A Entity views You’ll typically find one view for each entity type managed by the task. B Entity filter Enter a string in this field and type Enter to filter the entities in the browser by
name. Click Apply a custom filer ( ) to hand pick the entities you want to show in the browser.
C Entity history Use these buttons to browse through recently used entities within this task. D Entity browser Click an entity in the browser to show its settings on the right.
E Current entity The icon and name of the selected entity is displayed here. F Configuration
tabs
The entity settings are grouped by tabs. For more information about the configuration tabs for each entity type, see "Entity types" on page 331. A B C D F G E I H
Config Tool interface tour
Contextual command toolbar
The commands pertaining to the selected entity in the browser are displayed at the bottom of the task workspace, in the contextual toolbar. The following table describes them all in alphabetical order.
G Configuration page
This area displays the entity settings under the selected configuration tab.
H Apply/cancel changes
You must Cancel or Apply any change you make on the current page before you can move to a different page.
I Contextual commands
Commands pertaining to the selected entity are displayed in the toolbar at the bottom of the workspace. See "Contextual command toolbar" on page 17.
Icon Command Applies to Description
Activate role All roles Activates the selected role.
Add a cardholder Access rules and cardholder groups
Creates a cardholder and assigns it to the selected entity.
Add a credential Cardholders Creates a credential and adds it to the selected cardholder.
Add an entity All entities See "Create an entity manually" on page 37.
Assign to new door Access control units
Creates a door and assigns it to the selected access control unit.
Audit trails All entities Creates an Audit trails task for the selected entity. See "Finding out who made changes on the system"
on page 181.
Conflict resolution Active Directory role
Opens the Active Directory conflict resolution dialog box. See "Resolve conflicts due to imported entities" on page 149.
Copy
configuration tool
All entities See "Copy configuration tool" on page 668.
Create an access rule
Areas, doors, elevators
Creates an access rule and assigns it to the selected entity.
Deactivate role All roles Deactivates the selected role.
Delete All entities Deletes the selected entity from the system. Discovered entities can only be deleted when they are inactive.
Config Tool interface tour
gtap.genetec.com | Security Center Administrator Guide 5.2 18
EN.500.003-V5.2.C1(1) | Last updated: April 19, 2013
Diagnose All roles, and some entities
Performs a diagnosis on the selected role or entity.
Enable
maintenance mode
Roles and physical devices
Set a role or a physical device in maintenance mode so its down time will not affect its availability calculation by the Health Monitor. See "Set an entity in maintenance mode" on page 80.
Health statistics Roles and physical devices
Creates a Health statistics task for the selected entity. See "Viewing the health status and availability of entities" on page 171.
Identify Video units Flashes an LED on the selected unit to help locate it on a rack.
Live video Cameras Opens a dialog box showing live video from the selected camera. See "Test the video quality of your camera" on page 213.
Move unit Access control and video units
Opens the Move unit tool, where you can move units from one manager to another. See "Move unit" on page 655.
Ping Video units Pings the video unit to check if you can communicate with it. This is helpful for troubleshooting purposes.
Print badge Cardholders and credentials
Allows you to select a badge template and print a badge for the selected cardholder or credential.
Reboot Video and access control units
Restarts the selected unit.
Run macro Macros Runs the selected macro. See "Using macros" on page 110.
Trigger alarm Alarms Triggers the selected alarm so it can be viewed in Security Desk. See "Testing alarms" on page 112.
Unit discovery tool Access control and video units
Opens the Unit discovery tool, where you can find IP units connected to your network. See "Unit discovery tool" on page 653.
Unit’s Web page Video units Opens a browser to configure the unit using the Web page hosted on the unit.
Walkthrough wizard
Cardholders A tool that enrolls doors into Synergis in bulk, by having a cardholder present his credential at the doors to be enrolled. See "Using the Walkthrough wizard" on page 271.
Config Tool interface tour
Maintenance task workspace overview
Maintenance tasks are where you generate customized queries on the entities, activities, and events in your Security Center system for maintenance and troubleshooting purposes. This section takes you on a tour of the maintenance task layout, and describes the common elements of most maintenance tasks. The Access rule configuration task was used as an example. You can open the Access rule configuration task by typing its name in the Search box on the Home page.
A Number of results
Displays the number of returned results. A warning is issued when your query returns too many rows. If this happens, adjust your query filters to reduce the number of results.
B Query filters Use the filters in the query tab to set up your query. Click on a filter heading to turn it on ( ) or off. Invalid filters display as Warning or Error. Hover your mouse over the filter to view the reason it is invalid.
For a list of query filters available in Security Desk, see "Query filters" on page 712.
C Export/print report
Click to export or print your report once it is generated. See "Generate a report"
on page 30. B E A F C D
Config Tool interface tour
gtap.genetec.com | Security Center Administrator Guide 5.2 20
EN.500.003-V5.2.C1(1) | Last updated: April 19, 2013
D Select columns
Right-click a column heading to select which columns to display. For a list of report columns available in Security Desk, see "Report pane columns" on page 723.
E Report pane View the results of your report. Drag an item from the list to a tile in the canvas, or right-click an item in the list to view more options associated with that item, if applicable.
F Generate report
Click to run the report. This button is disabled if you have not selected any query filters, or when you have invalid filters. While the query is running, this button changes to Cancel. Click on Cancel to interrupt the query.
3
Working with tasks
This section includes the following topics:
•
"Adding a task" on page 22gtap.genetec.com | Security Center Administrator Guide 5.2 22 EN.500.003-V5.2.C1(1) | Last updated: April 19, 2013
Adding a task
There are two ways you can add tasks to your workspace:
•
"Create a new task" on page 22•
"Load a saved task" on page 23Create a new task
1 From the Home page, do one of the following: Type the task name in the Search box.
Click the Tasks tab, and then click Browse all tasks.
2 Click the task.
3 Depending on the task type you select, do one of the following:
If only one instance of the task is allowed, the new task is created. Single-instance tasks cannot be renamed.
(Only Administration tasks) If the task contains more than one entity view, select a view to configure.
This option is only available for administration tasks. Tasks that allow you to configure more than one entity are indicated with a plus sign on the task icon.
If more than one instance of the task is allowed, you are prompted to provide a task name. Enter the task name, and click Create.
Adding a task
NOTE This behavior can be changed in the User interaction tab in the Options dialog box. For more information, see "User interaction options" on page 685.
The new task is added to your task list.
Load a saved task
You can load tasks that you have previously saved as private or public tasks.
•
Private tasks. Tasks that you saved that are only available to you.•
Public tasks. Tasks that you or someone else saved that are available to the general public. 1 From the Home page, click the Private tasks or Public tasks page.2 Click a task.