HID Global Credential Programmer How to Order Guide

Overview

Welcome to the Credential Programmer How to Order Guide. HID Global^® offers a variety of credential programmers that enable field programming of access credentials for use with HID Global's access control reader portfolio. HID Global provides credential programming for technologies ranging from 125 kHz to 13.56 MHz, including HID Prox, iCLASS^®, iCLASS SE^®, and iCLASS Seos^®. This guide details part numbers, pricing, and ordering instructions for HID Global's Credential Programmers.

Credential Programmer Ordering Basics

To ensure ongoing reliability, product updates, and compatibility with evolving contactless access control credential technology, the HID ProxSmith^® credential programmer is leased directly to the programmer user. This includes end-user badge and ID facilities at corporate campuses and HID channel partners providing card programming services. The iCLASS SE Encoder, however, is available for purchase without a renewable lease agreement, utilizing a credential credit process for encoding cards.

All programmer leases have an initial period of twenty-four (24) months, followed by successive 24-month renewal periods. Contact the factory for pricing and payment methods.

To order a programmer:

• Determine the correct programmer part number by matching technology and application.
• Select the programmer information.
• Complete the applicable programmer lease/sales request form.
• For the iCLASS SE Encoder, complete the required Credential Credit, Keyset, and Format requests.

For assistance, contact HID Global Sales at http://www.hidglobal.com/main/sales/.

Programmer Part Number - New Lease

This section applies to Indala Prox Technology Credential Programmers for new leases. For lease renewals, refer to the 'Programmer Part Number - Renewing Lease' section. Select the programmer part number by placing an 'X' in the Order column, entering the programmer format information, and proceeding to the applicable programmer request form.

Programmer Format Information - New Lease/Sale

For all ProxSmith programmers, specify the following format information:

Format Number #1

• Facility Code Range, or specific Facility Code
• Card Number Range (Start and Stop)

Format Number #2 (If required)

• Facility Code Range, or specific Facility Code
• Card Number Range (Start and Stop)

¹ For the iCLASS SE Encoder, complete the order by specifying required Encoder Credential Credits, Keysets, and Format Requirements.

² Consult the factory for a list of programmable RFID Transponders/Cards/Tags that can be programmed with this Programmer.

³ The iCLASS SE Encoder has CE and FCC approval and is for sale in all regions. Approvals may not meet requirements in some APAC countries needing individual per-country approvals. Contact your HID representative for details.

iCLASS SE Encoder Credential Credits

Use the following tables to determine the part numbers required to add credential credits to your iCLASS SE Encoder. Each technology and security combination requires a separate set of credential credits. Credential credit part numbers are allocated for Genuine HID or Third Party Credentials. The iCLASS SE Encoder determines the credential source during encoding and decrements the appropriate counter.

The CP1000 is supplied with 30 Credential Credits for the most popular technology credentials to ensure out-of-the-box operation:

• Genuine HID iCLASS Credential with Standard Encoding - CRDT-A0
• Genuine HID iCLASS Credential with SIO^® Encoding - CRDT-A3
• Genuine HID Seos Credential with SIO Encoding - CRDT-D3
• Third Party MIFARE Classic Credential with Custom Data - CRDT-F5
• Third Party MIFARE DESFire EV1 Credential with Custom Data - CRDT-G5
• Configuration Card Creation - CRDT-K0

iCLASS and iCLASS Seos Technology Credential Credits

Used to encode Genuine HID Standard iCLASS 2K, 16K, or 32K credentials, or Genuine HID/Third Party Seos credentials.

Examples:

• Genuine HID iCLASS Credential with Standard Encoding - CRDT-A0
• Genuine HID iCLASS Credential with SIO Encoding - CRDT-A3

¹ Authorization is required by the end user or owner of the iCLASS Elite Keys before these can be released. Contact customer services for information on the authorization process.

MIFARE Classic Technology Credential Credits

Used to encode Genuine HID or third party MIFARE Classic 1K or 4K credentials.

Example:

Third Party MIFARE Classic Credential with iCLASS Elite and SIO Encoding - CRDT-F4

¹ Authorization is required by the end user or owner of the iCLASS Elite Keys before these can be released. Contact customer services for information on the authorization process.

MIFARE DESFire EV1 Technology Credential Credits

Use to encode Genuine HID or third party MIFARE DESFire EV1 credentials.

Example:

Third Party MIFARE DESFire EV1 Credential with SIO Encoding - CRDT-G3

¹ Authorization is required by the end user or owner of the iCLASS Elite Keys before these can be released. Contact customer services for information on the authorization process.

HID Prox Technology Credential Credits

¹ Authorization is required by the end user or owner of the iCLASS Elite Keys before these can be released. Contact customer services for information on the authorization process.

Note: MOQ for all credential credits is 100. A maximum of 10,000 of each credential credit can be ordered at any one time.

Use the tables above to enter the final Credential Credit part numbers:

iCLASS SE Encoder Serial Number:

Serial Number can be found on the encoder or on the printer product label if installed within a FARGO card printer.

Email address where the Secure file should be sent:

¹ Authorization is required by the end user or owner of the iCLASS Elite Keys before these can be released. Contact customer services for information on the authorization process.

iCLASS SE Encoder - Keysets

Key Management is crucial for understanding how smart card applications are managed. Encoding data on an iCLASS or MIFARE Classic card typically requires at least one authentication key. Additional keys may be needed for enhanced security. For example, the HID Application requires two DES keys, while Secure Identity Objects require AES keys.

Each technology has unique key requirements. The iCLASS SE Encoder includes utilities for managing individual keys and grouping them into Keys sets for easier deployment. Order Keysets appropriately to ensure your iCLASS SE Encoder is equipped with the correct keys.

Media Keyset

Media keysets provide the cryptographic keys needed to set up and encode cards. Part numbers vary based on technology needs. For example, CKEYMED-ICL-n provides the iCLASS media Keyset with Standard or iCLASS Elite keys, encryption keys for PACS data, and keys for accessing the SE application area. It also includes transport keys for unconfigured cards and public keys for other application areas.

• CKEYMED-MIF-n: Provides Key A and Key B for accessing the HID application on a MIFARE Classic card, plus transport keys for the MAD (MIFARE Application Directory).
• CKEYMED-DES-n: Provides keys for accessing the HID application on a MIFARE DESFire EV1 card, including the PICC master key, application master key, and application read/write keys.

Reader Configuration Keyset

This keyset provides the privacy and authentication keys necessary to create configuration cards, which are used to update readers with new keys or configuration data.

SIO Keyset

The SIO Keyset provides the privacy and authentication keys for HID's Secure Identity Objects (SIOs). Since SIOs are technology-independent, their keys are ordered separately.

The iCLASS SE Encoder is pre-loaded with the following standard Keysets:

• iCLASS Media Keyset: iCLASS and Seos (Standard: CKEYMED-ICL & CKEYMED-SEOS)
• MIFARE Keysets: MIFARE Classic & MIFARE DESFire EV1 (Standard: KEYMED-MIF-0 & CKEYMED-DES-0)
• Reader Configuration Keyset: Standard (CKEYCFG-0)
• SIO Keyset: Standard (CKEYSIO-0)

Enter the final iCLASS Encoder Keyset part numbers below:

iCLASS SE Encoder Serial Number:

Serial Number can be found on the encoder or on the printer product label if installed within a FARGO card printer.

Email address where the Secure file should be sent:

iCLASS SE Encoder - Formats

The iCLASS SE Encoder comes preconfigured with the basic HID Open 26 Bit Wiegand format (H10301). Additional formats can be loaded to support extended credential requirements. To order additional Open non-tracked Proprietary¹ and Open Tracked² formats, use the following form:

Common HID Open Tracked Formats:

• H10304 (HID 37-bit with tracked facility code and ID number)²
• H10302 (HID 37-bit with tracked ID number only)

iCLASS SE Encoder Serial Number:

Serial Number can be found on the encoder or on the printer product label if installed within a FARGO card printer.

Corporate 1000, Format Credits

Corporate 1000^® formats are available for the iCLASS SE Encoder and must be ordered separately to ensure number uniqueness. Order Corporate 1000 number ranges using the indicated base part number and by completing the form below: FRMT- J2 (Corporate 1000)¹

Quantity | Format Number | Start Number | End Number

iCLASS SE Encoder Serial Number:

Email address where Secure file should be sent:

¹ Authorization is required. If you are not authorized to use the format, contact customer services for information on the authorization process.

² H10304 facility codes are automatically registered to the first user of that facility code. If you are not authorized to use the requested facility code, contact customer services. Alternatively, state "new" to be automatically assigned an unused facility code.

³ Facility Code, Start Number, End Number, and quantity do not apply to Open non-tracked formats but do apply to proprietary and Open-tracked formats.

iCLASS SE Supplementary Cards

The following lists blank iCLASS credentials for use with the iCLASS SE Encoder. Note: To encode iCLASS SE (Secure Object only with no Standard iCLASS data), blank iCLASS SE cards must be used. These cards can be ordered separately from the kit.

Programmer Sale/Lease Request - with Established Terms

For direct HID Global providers with established terms, send Programmer Part Number, Programmer Format Information, and the following details directly to your HID Global Customer Service Representative. For additional contact information, see www.hidglobal.com > Support > Customer Service.

Return this form to your HID Global Sales or Customer Service Representative.

Programmer Sale/Lease Request - without Established Terms

For customers without established terms (e.g., end users), send Programmer Part Number, Programmer Format Information, and the following details directly to your HID Global Sales Representative. This information is used to process a one-time lease for the selected programmer. For additional contact information, see www.hidglobal.com > Support > Worldwide Sales.

Authorization

The undersigned confirms that all information provided is true and accurate to the best of their knowledge and that they are an Officer of the company submitting the application ("Applicant"). The Applicant acknowledges receipt of a copy of the HID Global Corporation's Worldwide Sales Policy (www.hidglobal.com) and agrees that all transactions are governed by its terms and conditions, unless otherwise agreed in writing. Selling terms are Cash in Advance only. Payment for the initial contract, subsequent renewals, and leased programmers will be made by Credit Card, Wire Transfer, or Check.

A COMPANY OFFICER MUST SIGN THIS APPLICATION.

Return this form to your Customer Service Representative.

For internal use only:

Programmer Part Number - Renewing Lease

Determine the programmer part number for renewing a programmer lease. This process is done bi-annually, starting two years after the initial lease. Select the programmer part number by placing an 'X' in the Order column and completing the applicable programmer request form.