For instructions to install and upgrade the Cisco PAM software and firmware, see the Cisco Physical Access Manager User Guide. This guide includes instructions to install the following software components:
•Cisco PAM appliance hardware
•Cisco PAM appliance server software
•Cisco PAM desktop client software
•Cisco VSM Video Player
•EDI Desktop Studio application
Hardware Installation
For instructions to install the Cisco Physical Access Control hardware modules, see the Cisco Physical Access Gateway User Guide. This guide includes instructions to install the following hardware modules:
•Cisco Physical Access Gateway
•Cisco Input Module
•Cisco Output Module
•Cisco Reader Module
Part Numbers for the Optional Feature Licenses
To enable optional features, or additional capacity, purchase and install the Cisco licenses listed in Table 1-1.
Table 1-1 Optional Feature Licenses and Part Numbers
Step 2 Log on with your Cisco.com user ID and password.
Step 3 To look for information about a specific problem, enter the bug ID number in the "Search for bug ID" field, then click Go.
Step 4 To look for information if you do not know the bug ID number:
a. Select Product Category: Select Security.
b. Select Product: Select Cisco Physical Access Control.
c. Software Version menu: (Optional) Select the version number.
d. Advanced Options: Select Use default settings or Use custom settings. The default settings search for severity 1, 2 and 3 bugs, open and fixed bugs, and bugs containing bug details. Use the custom settings to change the severity and status parameters, or to search for keywords within the bug headline and description.
Tip For information about how to search for bugs, create saved searches, create bug groups, etc., click Help in the Bug Toolkit page.
Open Caveats - Release 1.0.0
The following caveats describe the important defects that are unresolved for Cisco Physical Access Control Release 1.0.0. For a complete list defects including resolved defects, refer to the instructions in Using the Bug Toolkit.
Table 2 Unresolved Caveats for Cisco Physical Access Control Release 1.0.0
The iptables rule prevents outgoing https connections. Manually download the license files from the Cisco website (do not use PAK to download the license files).
Access Control Gateway: We recommended using surge supressors on all relays that turn power on/off to external circuits. If there are no suppressors present, error messages may sometimes be generated within the system indicating card read errors.
If the recovery CD is used to replace the Cisco PAM software on the active server, you must also use the recovery CD to install the software on the standby server, if installed. After the software is installed, restore the server data from a backup file.
Access granted into an anti-passback area (APB) area but not entered requires Admin override. Log into Cisco PAM ad an administrator, open the Doors:Access Policies:Anti-Passback Monitoring module, select the area in question and select the Reset command to rectify APB state for that area.
The web browser does not always respond to the Image Upgrade button in the Gateway Web Admin tool. To address this issue, close the browser, reopen it, and issue the command again. The progress bar at the bottom of the window indicate successful submission of the request.
The web browser does not always respond to the Image Activate button in the Gateway Web Admin tool. To address this issue, close the browser, reopen it, and issue the command again. The progress bar at the bottom of the window indicate successful submission of the request.
Changes to the password for the Cisco PAM Web Admin tool are not synchronized to the HA pair. If the password is changed on one server, you must log in to the second server and change the password.
Holiday schedules that span two months (for example, December 25 through January 4) should be split into two entries: one that covers the first month and the second that covers the following month. For example, one entry for December 25 through December 31, and a second schedule entry for January 1 through January 4.
A TimeEntryCollection with opposing actions (such as Permit and Deny) requires two different entries. For example, if you create Schedule S1 with Time Entry Collection TEC1 with action "Permit". If the you create another Schedule S2 with the same Time Entry Collection TEC1, but with the action "Deny", then the previous schedule S1 action changed to Deny. To resolve this, create separate Time Entry Collection instances for use in more than one schedule, even if the instances are the same definition.
EAI projects fail after a Cisco PAM upgrade from Release 1.0.0 to post 1.0.0 which was previously running fine. EDI projects must be stopped and restarted after a Cisco PAM upgrade is complete.
•Cisco Physical Access Manager Mercury Hardware User Guide
•Cisco Physical Access Manager Quick Start Guide
•Cisco Physical Access Gateway Quick Start Guide
Obtaining Documentation and Submitting a Service Request
For information on obtaining documentation, submitting a service request, and gathering additional information, see the monthly What's New in Cisco Product Documentation, which also lists all new and revised Cisco technical documentation, at:
Subscribe to the What's New in Cisco Product Documentation as a Really Simple Syndication (RSS) feed and set content to be delivered directly to your desktop using a reader application. The RSS feeds are a free service and Cisco currently supports RSS version 2.0.
This document is to be used in conjunction with the documents listed in the "Related Documentation" section.
CCDE, CCENT, CCSI, Cisco Eos, Cisco HealthPresence, Cisco IronPort, the Cisco logo, Cisco Lumin, Cisco Nexus, Cisco Nurse Connect, Cisco Pulse, Cisco StackPower, Cisco StadiumVision, Cisco TelePresence, Cisco Unified Computing System, Cisco WebEx, DCE, Flip Channels, Flip for Good, Flip Mino, Flipshare (Design), Flip Ultra, Flip Video, Flip Video (Design), Instant Broadband, and Welcome to the Human Network are trademarks; Changing the Way We Work, Live, Play, and Learn, Cisco Capital, Cisco Capital (Design), Cisco:Financed (Stylized), Cisco Store, and Flip Gift Card are service marks; and Access Registrar, Aironet, AllTouch, AsyncOS, Bringing the Meeting To You, Catalyst, CCDA, CCDP, CCIE, CCIP, CCNA, CCNP, CCSP, CCVP, Cisco, the Cisco Certified Internetwork Expert logo, Cisco IOS, Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Cisco Unity, Collaboration Without Limitation, Continuum, EtherFast, EtherSwitch, Event Center, Explorer, Fast Step, Follow Me Browsing, FormShare, GainMaker, GigaDrive, HomeLink, iLYNX, Internet Quotient, IOS, iPhone, iQuick Study, IronPort, the IronPort logo, Laser Link, LightStream, Linksys, MediaTone, MeetingPlace, MeetingPlace Chime Sound, MGX, Networkers, Networking Academy, Network Registrar, PCNow, PIX, PowerKEY, PowerPanels, PowerTV, PowerTV (Design), PowerVu, Prisma, ProConnect, ROSA, ScriptShare, SenderBase, SMARTnet, Spectrum Expert, StackWise, The Fastest Way to Increase Your Internet Quotient, TransPath, WebEx, and the WebEx logo are registered trademarks of Cisco Systems, Inc. and/or its affiliates in the United States and certain other countries.
All other trademarks mentioned in this document or website are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (0908R)
Any Internet Protocol (IP) addresses used in this document are not intended to be actual addresses. Any examples, command display output, and figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses in illustrative content is unintentional and coincidental.