Cisco Physical Access Manager Appliance User Guide, Release 1.1.0

Enable LDAP

Click the checkbox to enable or disable LDAP support.

LDAP server URL

URL of LDAP server, must begin with ldap://

Example: ldap://192.168.1.1

Principle suffix

Appended to the username for authentication. See above.

Principle prefix

Prepended to the username for authentication. See above.

Search root

LDAP search root. The search root is the node in the LDAP tree, the subtree under which the user account should be found.

•For Active Directory, the 2 dc components should be changed to match the full domain name managed by the directory. The following example is for my-domain.com: cn=Users,dc=my-domain,dc=com.

•For OpenLDAP, the 2 dc components should be changed to match the full domain name managed by the directory. The following example is for my-domain.com:dc=my-domain,dc=com.

LDAP version

Advanced setting that generally should be left unchanged.

JNDI authentication type

Advanced setting that generally should be left unchanged as simple.

JNDI factory

Advanced setting that generally should be left unchanged as com.sun.jndi.ldap.LdapCtxFactory

Passwords expire after (days)

Passwords expire after this many days.

Minimum alphabetic characters

Minimum number of a to z characters or A to Z characters in the password.

Minimum password length

Minimum number of characters in the password.

Minimum uppercase characters

Minimum number of uppercase password characters.

Minimum lowercase characters

Minimum number of lowercase password characters.

Minimum numeric characters

Minimum number of numeric password characters.

Minimum special characters

Minimum number of special characters in the set specified below.

Set of "special" characters

Which characters qualify as special characters for the above.

Allow commenting of cleared alarms

Allow operators to comment on alarms that have already been cleared.

Consolidate duplicate alarms window (mins)

If duplicate alarms are being consolidated, this is the maximum time difference between the original and the duplicate. If an alarm that would otherwise be considered a duplicate occurs after this time, it becomes a new original alarm and subsequent duplicate alarms will bump up its duplicate count.

Consolidate duplicate alarms

Consolidate duplicate alarms identical other than time, into a single alarm, with an increasing alarm count. This is useful for preventing a flood of individual alarms; for example, if an armed alarm point is on an external gate which is flapping in the wind, repeatedly triggering the alarm. It is not recommended that this be unchecked without careful consideration of the possible performance impact of the increased number of individual alarms.

Duplicate alarm cache size

The size of the cache for duplicate alarms.

Length of video to display pre-event

The number of seconds of video that are included before the event occurred.

Length of video to display post-event

The number of seconds of video that are included after an event occurs.

Repeat alert sounds

Defines if alarms sounds are played only once, or repeated.

Default personnel ID specifier

The type of personnel ID specifier the field will default to. The various ID specifiers will be available in the drop-down.

Allow duplicate personnel IDs

Allow personnel to be added with duplicate personnel IDs.

Warn about duplicate personnel IDs

Warn if personnel are added with duplicate personnel IDs.

Use signature capture

Enable the ability to capture personnel signatures with a signature capture device. Signature capture devices must be configured in the application preferences before they may be used. See Enabling Signature Capture Devices, page 10-37.

Use single-screen personnel wizard

Enables a single-screen personnel wizard used for personnel data entry. All personnel information is available on one screen.

Use custom fields on personnel wizard

Enable custom fields in the single-screen personnel wizard. This makes the screen larger, but is useful if important data is being stored in the custom fields. Refer to custom fields in the Custom Personnel Fields window.

Use CSV personnel import wizard

Enable the CSV import wizard in the personnel module. The CSV import wizard allows operators to add personnel to Cisco Physical Access Manager using a CSV file. See Importing Personnel Records Using a Comma Separated Value (CSV) File, page 10-13.

Allow printing of unsaved badges

Allows printing new badges before the badge is saved. For highest security, leave this unchecked. When allowed (which may be more convenient), it is possible to print a badge without having any record of the badge.

Set 'today' as the default effective date

Uses the current date as a new badge effective date.

Use single-screen badge wizard

Enables a single-screen badge wizard for data entry. Most badge properties are on one screen.

Require PIN to be unique

Requires cardholder PINs to be unique. Useful in systems that use PIN-only access-control.

Allow null PIN

Allows badges to have null PINs. Useful in systems that do not use PIN for access-control.

Require numeric hot stamp

Requires hot stamp field to be numeric.

Disallow leading zeros in hot stamp

Prohibits users from adding hot stamps with leading zeros.

Use effective times for badges

Select this checkbox to enable the effective time constraint for badges, in addition to effective date, which is always enabled.

Use expiration times for badges

Select this checkbox to enable the expiration time constraint for badges, in addition to effective date, which is always enabled.

Use custom fields on badge wizard

Enables custom fields in the badge wizard. This makes the screen larger, but is useful if important data is being stored in the custom fields.

Max PIN Length

The maximum number of characters in a PIN.

Custom Personnel Field

Selects which of the available custom fields is to be viewed or edited.

Enabled

Select the checkbox to enable the selected custom field.

Drop down

Select the checkbox to use a drop-down for entry the selected custom field.

Column header

Changes the name of the column header of the selected custom field. The column header is displayed in list view columns. To be consistent with the rest of the application, this would be capitalized like the title of a book, for example: Driver's License Number.

Form label

Changes the name of the form label of the selected custom field. The form label is displayed in detail window fields. To be consistent with the rest of the application, this would be capitalized like the a sentence, for example: Driver's license number.

Custom Device Fields

Selects which of the available custom fields is to be viewed or edited.

Enabled

Select the checkbox to enable the selected custom field.

Drop down

Select the checkbox to use a drop-down for entry the selected custom field.

Column header

Change the name of the column header of the selected custom field. The column header is displayed in list view columns. To be consistent with the rest of the application, this would be capitalized like the title of a book, for example, Serial Number.

Form label

Change the name of the form label of the selected custom field. The form label is displayed in detail window fields. To be consistent with the rest of the application, this would be capitalized like the a sentence, for example, Serial number.

Custom Badge Fields

Selects which of the available custom fields is to be viewed or edited.

Enabled

Select the checkbox to enable the selected custom field.

Drop down

Select the checkbox to use a drop-down for entry the selected custom field.

Column header

Changes the name of the column header of the selected custom field. The column header is displayed in list view columns. To be consistent with the rest of the application, this would be capitalized like the title of a book, for example: Serial Number.

Form label

Changes the name of the form label of the selected custom field. The form label is displayed in detail window fields. To be consistent with the rest of the application, this would be capitalized like the a sentence, for example: Serial number.

Enabled

Enables the personnel ID number generator. New personnel entries will have randomly generated ID numbers entered in the field.

Length

The digit length of generated IDs.

Is Present

Enable the personnel ID number generator. Adding new personnel will have randomly generated ID numbers entered in the field.

Length

The amount of digits in the generated PIN.

Is Present

Enables the card number generator. Adding new badges will have randomly generated card numbers entered in the Card # field.

Maximum

Maximum amount of card digits.

Minimum

Minimum amount of card digits.

Company

Support company's name.

Contact name

The name of the contact person.

Contact person's email address

The contact person's email address.

Contact person's phone number

The contact person's phone number.

Company's website

Support company's company website address.

Load all strings from database

Loads all text strings from the database. Used in conjunction with the advanced Text Strings module. Normally there is no reason to check this, as any strings that have been changed or customized since the time of install will be automatically loaded from the database.

Always open new modules in same window

If checked, opening a new module simply replaces the module in the same window, rather than opening a new window.

Enable Window>New Window

Allows modules to be opened in multiple windows. Adds an additional New Window button to the toolbar.

Prevent force quit (Command-Q) on Mac OS X

Blocks the force quit command.

Allow deletion of items that normally may only be disabled

Enables a true delete option in some modules. Normally, important items should be disabled, not deleted. Even with this option enabled, only items that are not referenced by other items may be deleted. For example, if a device has an event occur for it, it may no longer be deleted, as the event references the device. This is because true deletion in this case would result in the inability to correctly report on any such events.

Allow deletion of devices with events

Deletes events associated with a device when a device is deleted.

Note Cisco recommends that you do not delete devices. Events that are associated with the device will be deleted if the device is deleted.

Restrict new devices to wizards only

All new devices added to the Hardware module will use an add wizard.

Default max rows

Limits the number of visible rows in list-based modules such as Events and Badges. For example, if the default max rows is set to 100, the badges module displays a maximum of 100 rows.

Enter a number between 1 and 5000.

Change queue buffer size

Enter a new buffer size.

Enable Credential Watch

Enables the Credential Watch feature which places color borders around photos in the Event Photos module. See Adding a Color Border to Event Photos (Credential Watch), page 12-16.

Use cross-platform page setup dialog for badge printing

Select this option to use the cross-platform Java page dialog if the badge image is truncated. This occurs when using the default printer dialog on some printers (such as the Zebra printer).

Truncate imageable area values used to initialize cross-platform page dialog

If the image is still truncated using the cross-platform Java page dialog, select this option to apply .01 inch margins.

Use Pageable print interface for badge printing

The Java Printable printing interface is used by deafult. If printing problems occur (such as with the Evolis printer), select this option to use the Java Pageable printer interface.

Stroke text before printing badges

If problems occur printing text, such as on a Mac, select this option to apply a stroke when printing.

Default discovered gateway time zone

Defines the time zone for all discovered Gateways. This time zone is configured on all discovered Gateways.

Credential download frequency (mins)

Defines how often (in minutes) credential information is downloaded to the Gateways.

Note You can also download credential changes immediately. Select Hardware from the Doors menu, right-click on the Access GW Driver, and select Apply Credential Changes. See Configuring Personnel, page 10-2 for more information.

Display soft commands on default module

Displays the soft commands for the default m01 (Gateway) module.

Display "Delete All Cameras" command on the camera driver

Displays the Delete All Cameras command for the Cisco VSM Video Driver in the Hardware module. See Deleting the Cisco VSM Cameras, page 15-18.