Tag and Pass User Manual
Posted on December 30, 2021
Tag and Pass are encrypted contactless access devices for managing the security modes of the Ajax security system. They have the same functions and differ only in their body: Tag is a key fob, and Pass is a card.
Pass and Tag only work with KeyPad Plus.
Appearance
Tag and Pass are contactless access devices. The Tag is designed as a key fob, while the Pass is a card.
1. Pass
2. Tag
Diagram Description: Two Ajax devices are shown. Device 1 is labeled as 'Pass' and appears to be a card. Device 2 is labeled as 'Tag' and appears to be a key fob. Both devices have the AJAX logo.
Operating principle
Tag and Pass allow you to manage an object's security without an account, access to the Ajax app, or knowing the password. Activation is achieved by presenting the key fob or card to a compatible keypad. The security system or a specific group will be armed or disarmed.
To quickly and securely identify users, KeyPad Plus uses the DESFire® technology. DESFire® is based on the ISO 14443 international standard and combines 128-bit encryption and copy protection.
Tag and Pass usage is recorded in the events feed. The system administrator can at any time revoke or restrict the access rights of the contactless identification device through the Ajax app.
Tag and Pass can work with or without user binding, which affects the notification texts in the Ajax app and SMS.
With user binding: The username is displayed in the notifications and events feed.
Image Description: A screenshot of the Ajax app interface showing a list of security events. Events include 'Disarmed by Amy', 'Armed by Amy', 'Pass added successfully', and 'Disarmed using SpaceControl'.
Without user binding: The device name is displayed in the notifications and events feed.
Tag and Pass can work with several hubs simultaneously. The maximum number of hubs in the device memory is 13. You need to bind a Tag or Pass to each hub separately through the Ajax app.
The maximum number of Tag and Pass devices connected to a hub depends on the hub model. The Tag or Pass does not affect the total limit of devices on the hub.
| Hub model | Number of Tag and Pass devices |
|---|---|
| Hub Plus | 99 |
| Hub 2 | 50 |
| Hub 2 Plus | 200 |
One user can bind any number of Tag and Pass devices within the limit of contactless identification devices connected to the hub. Devices remain connected to the hub even after all keypads have been removed.
Sending events to the monitoring station
The Ajax security system can connect to the monitoring station and transmit events to the CMS via Sur-Gard (Contact-ID), SIA DC-09, and other proprietary protocols. A complete list of supported protocols is available here.
When a Tag or Pass is bound to a user, arm and disarm events are sent to the monitoring station with the user ID. If the device is not bound to a user, the hub sends the event with the device identifier. The device ID can be found in the Status menu.
Adding to the system
⚠️ The devices are incompatible with the hub type of Hub, third-party security central panels, and ocBridge Plus and uartBridge integration modules. Pass and Tag only work with KeyPad Plus keyboards.
Before adding a device
- Install the Ajax app. Create an account. Add a hub to the app and create at least one room.
- Ensure the hub is online and has internet access (via Ethernet cable, Wi-Fi, or mobile network). Check the hub logo on the front panel; it lights white or green when connected.
- Verify the hub is not armed or updating by checking its status in the Ajax app.
- Ensure a compatible keypad with DESFire® support is connected to the hub.
- If binding to a user, confirm the user's account has already been added to the hub.
⚠️ Only a user or PRO with administrator rights can connect a device to the hub.
How to add a Tag or Pass to the system
- Open the Ajax app. If you have multiple hubs, select the desired one.
- Go to the Devices ?️ tab.
ℹ️ Make sure the Pass/Tag Reading feature is enabled in at least one keypad's settings.
- Click Add Device.
- From the drop-down menu, select Add Pass/Tag.
- Specify the type (Tag or Pass), colour, device name, and name (if necessary).
- Click Next. The hub will switch to device registration mode.
- Go to any compatible keypad with Pass/Tag Reading enabled. Activate it; the device will beep (if enabled) and the backlight will light up. Then press the disarming key ?. The keypad will switch to access device logging mode.
- Place the Tag or Pass with the wide side against the keypad reader for a few seconds. It is marked with wave icons ? on the body. Upon successful addition, you will receive a notification in the Ajax app.
States
The states provide information about the device and its operating parameters. Tag or Pass states can be found in the Ajax app:
- Go to the Devices ?️ tab.
- Select Passes/Tags.
- Select the required Tag or Pass from the list.
| Parameter | Value |
|---|---|
| User | The name of the user to which Tag or Pass is bound. If the device is not bound to a user, the field displays the text Guest. |
| Active | Displays the status of the device: ✔️ Yes, ❌ No. |
| Identifier | Device identifier. Transmitted in events that are sent to the CMS. |
Setting up
Tag and Pass are configured in the Ajax app:
- Go to the Devices ?️ tab.
- Select Passes/Tags.
- Select the required Tag or Pass from the list.
- Go to Settings ⚙️ by clicking on the ⚙️ icon.
⚠️ Please note that after changing the settings, you must press the Back button to save them.
| Parameter | Value |
|---|---|
| Select device type | Tag or Pass |
| Colour | Choice of Tag or Pass colour: black or white. |
| Device name | Displayed in the list of all hub devices, SMS texts, and notifications in the events feed. The name can contain up to 12 Cyrillic characters or up to 24 Latin characters. To edit, click on the pencil icon ✏️. |
| User | Select the user to which Tag or Pass is bound. When a device is bound to a user, it has the same security management rights as the user. ℹ️ Learn more. |
| Security management | Selection of security modes and groups that can be managed by this Tag or Pass. The field is displayed and active if Tag or Pass is not associated with the user. |
| Active | Allows you to temporarily disable Tag or Pass without removing the device from the system. |
Unpair device
Opens the Tag and Pass User Manual in the Ajax app.
Removes Tag or Pass and its settings from the system.
There are two options for removing: when Tag or Pass is placed nearby, or access to it is absent.
If Tag or Pass is nearby:
- Start the device removal process.
- Go to any compatible keypad and activate it.
- Press the disarming key ?. The keypad will change to access devices removal mode.
- Bring the Tag or Pass to the keypad reader. It is marked with wave icons ? on the body. Upon successful removal, you will receive a notification in the Ajax app.
If Tag or Pass is not available:
- Start the device removal process.
- Select the Delete without pass/tag option and follow the app's instructions.
In both cases, the hub is not deleted from Tag/Pass memory. To clear the device memory, you should reset it (all data from Tag/Pass will be erased).
Binding a Tag or Pass to a user
When a Tag or Pass is linked to a user, it fully inherits the rights to manage the user's security modes. For example, if a user was able to manage only one group, then the bound Tag or Pass will have the right to manage only this group.
ℹ️ One user can bind any number of Tag or Pass devices within the limit of contactless identification devices connected to the hub.
Temporarily deactivating a Tag or Pass
The Tag key fob or the Pass card can be temporarily disabled without removing them from the system. A deactivated card cannot be used to manage security modes.
If you try to change the security mode with a temporarily deactivated card or key fob more than 3 times, the keypad will be locked for the time set in the settings (if the setting is enabled), and corresponding notifications will be sent to the system users and to the security company monitoring station.
To temporarily deactivate a Tag or Pass, in the Ajax app:
- Select the required hub if there are several hubs in your account.
- Go to the Devices ?️ menu.
- Select Passes/Tags.
- Select the required Tag or Pass.
- Click on the ⚙️ to go to settings.
- Disable the Active option.
- Click Back to save the settings.
To reactivate Tag or Pass, turn on the Active option.
Resetting a Tag or Pass
Up to 13 hubs can be bound to one Tag or Pass. When this limit is reached, binding new hubs is only possible after completely resetting Tag or Pass.
Note that resetting will delete all settings and bindings of key fobs and cards. The reset Tag and Pass are only removed from the hub from which the reset was made. On other hubs, Tag or Pass may still be displayed in the app but cannot be used to manage security modes. These devices should be removed manually.
ℹ️ When protection against unauthorized access is enabled, 3 consecutive attempts to change the security mode with a reset card or key fob will block the keypad. Users and the security company are instantly notified. The blocking time is set in the device settings.
To reset a Tag or Pass, in the Ajax app:
- Select the required hub if there are several hubs in your account.
- Go to the Devices ?️ menu.
- Select a compatible keypad from the device list.
- Click on ⚙️ to go to settings.
- Select the Pass/Tag Reset menu.
- Go to the keypad with pass/tag reading enabled and activate it. Then press the disarming key ?. The keypad will change to access device formatting mode.
- Put the Tag or Pass to the keypad reader. It is marked with wave icons ? on the body. Upon successful formatting, you will receive a notification in the Ajax app.
Use
The devices do not require additional installation or fastening. The Tag key fob is easy to carry thanks to a special hole on the body. You can hang it on your wrist or around your neck, or attach it to a key ring. The Pass card has no holes but can be stored in your wallet or phone case.
If you store a Tag or Pass in your wallet, do not place other cards next to it, such as credit or travel cards, as this may interfere with the correct operation of the device when attempting to disarm or arm the system.
To change the security mode:
- Activate KeyPad Plus by swiping your hand over it. The keypad will beep (if enabled in settings), and the backlight will light up.
- Put the Tag or Pass to the keypad reader. It is marked with wave icons ? on the body.
- Change the security mode of the object or zone. If the Easy armed mode change option is enabled in the keypad settings, you do not need to press the security mode change button; the security mode will change to the opposite after holding or tapping Tag or Pass.
Using Tag or Pass with Two-Stage Arming enabled
Tag and Pass can participate in two-stage arming but cannot be used as second-stage devices. The two-stage arming process using Tag or Pass is similar to arming with a personal or general keypad password.
Maintenance
Tag and Pass are battery-free and maintenance-free.
Tech specs
| Parameter | Value |
|---|---|
| Technology used | DESFire® |
| Operating standard | ISO 14443-A (13.56 MHz) |
| Encryption | + |
| Authentication | + |
| Protection from signal interception | + |
| Possibility to assign the user | + |
| Maximum number of bound hubs | Up to 13 |
| Compatibility | KeyPad Plus |
| Operating temperature range | From -10°C to +40°C |
| Operating humidity | Up to 75% |
| Overall dimensions | Tag: 45 x 32 x 6 mm Pass: 86 × 54 × 0.8 mm |
| Weight | Tag: 7 g Pass: 6 g |
Complete Set
- Tag or Pass – 3/10/100 pcs (depending on the kit).
- Quick Start Guide.
Warranty
Warranty for the AJAX SYSTEMS MANUFACTURING Limited Liability Company products is valid for 2 years after the purchase.
If the device does not function correctly, please contact the Support Service first. In half of the cases, technical issues can be solved remotely!
Technical support: support@ajax.systems ?
mailto:support@ajax.systems
