Tyco iSTAR Ultra Door Controller
Overview
The iSTAR Ultra can support up to 16 traditional hard-wired readers and a clustering of up to sixteen controllers. The Ultra supports wireless lock sets up to 32 total (this includes traditional and wireless) locksets. The iSTAR Ultra controller consists of the following hardware components:
- General Controller Module (GCM)
- Access Control Module (ACM) or IP-ACM (Ethernet door module) – a maximum of two can be connected
General Control Module
The GCM is a General Purpose Module running the Linux® operating system. The GCM provides the following features:
- Two network Gigabit Ethernet ports.
- Two RS-485 Ports for Aperio™ Hubs and Wireless Readers.
- Up to 30 eight Port Aperio Hubs.
- Up to 32 wireless Aperio Readers.
- An LCD panel that displays the current status, and provides built-in diagnostics.
- Four USB ports to communicate with the Access Control Modules (ACM) and import encryption keys.
- One Micro A-B port. (For future use).
Types of Mounting
The iSTAR Ultra and its components can be installed in a wall mount enclosure or in separate rack-mount enclosures.
Wall Mount Enclosure
Figure 1-1 on page 1-4 shows a photograph of the iSTAR Ultra and its components in a wall mount enclosure.
Rack Mount Enclosures
iSTAR Ultra Photograph
Figure 1-5 on page 1-6 shows a photograph of the iSTAR Ultra enclosure. The bright power LED will shine through the Power decal when the door is closed. The bright LED will extinguish when the door is opened.
Main Features
Processor
- Freescale i.MX6 ARM processor, 1GHz
- Compare iSTAR Pro @ 60 MHz, iSTAR eX @ 400 MHz
Storage
- 2GB DDR3 RAM
- 16GB SD Card
Power
- Powered by 12 Vdc, from a listed APS power source or other UL 603 Listed, power-limited power supply with appropriate ratings and a minimum of 4 hours of standby power.
- Provides up to 1.5A @ 12Vdc unswitched to external devices:
- Wiegand signaling readers
- RS-485 ports
- Provides power to relays:
- Relays configurable to be wet or dry by jumper.
- Wet Relays provide current at the main input voltage (12 or 24V with external DC supply).
- Each wet relay is limited to 0.75A (at 12 or 24V).
- Each Primary dry relay is limited to 5.0A (at 12 or 24V).
- Each Secondary dry relay is limited to 1.0A (at 12 or 24V).
- Full operating backup power is not provided by the board itself.
- Achieved with apS or external UPS,
- Upon loss of external power, data is written to onboard flash. RM / Wiegand Signaling Readers (per ACM)
The ACM supports a total of 8 readers in any combination of the following:
- RS-485 RM Reader (8 readers across 8 ports)
- Wiegand Reader (8 readers)
There are eight basic sections, on each ACM, that support a total of eight Readers. Each section has:
- One Reader port (either)
- One RM / RS-485 Reader port*
- One Wiegand signaling port
- Three supervised Inputs
- Two relay Outputs
- One AUX output (12 Vdc)*
* The AUX power and whichever reader power is used, are limited to a total of 1.5 Amp.
Product Comparison
Table 1-1: Product Comparison Table (i2, i3, i4, i5 are firmware suffixes)
|
Feature |
iSTAR Ultra i5 | iSTAR Ultra SE (Ultra Mode) i5 | iSTAR Ultra SE (Pro Mode) i5 |
iSTAR Edge i4 |
iSTAR eX i3 |
iSTAR Pro i2 | iSTAR Classic i2 |
| Processor | Freescale i.MX6 ARM processor, 1GHz | Freescale i.MX6 ARM processor, 1GHz | Freescale i.MX6 ARM processor, 1GHz | ARM Atmel 9260 | ARM Marvell PXA255 | PowerPC Motorola MPC860 | PowerPC Motorola MPC860 |
| Speed, MHz | 1000 | 1000 | 1000 | 180 | 400 | 60 | 50 |
| Win CE Version | N/A | N/A | N/A | 5 | 5 | 3 | 3 |
| Linux | yes | yes | yes | no | no | no | no |
| RAM | 2 GB DDR3 RAM | 2 GB DDR3 RAM | 2 GB DDR3 RAM | 64 MB | 64 MB | 64 MB | 16 MB |
| Flash | 16 GB SD Card | 16 GB SD Card | 16 GB SD Card | 128 MB | 32 MB plus 256 mb on included CF Card | 16 MB | 8 MB |
| Cards – average card record | 500K (Software limit) | 500K (Software limit) | 500K (Software limit) | >250K | >250K | >250K | 27K |
| Cards – very large card record | 500K (Software limit) | 500K (Software limit) | 500K (Software limit) | >100K | >100K | > 100K | 10K |
| Cards – very small card record | 500K (Software limit) | 500K (Software limit) | 500K (Software limit) | >400K | >400K | > 400K | 45K |
| Full operating backup power provided | No | No | No | No | Yes | No | No |
| External backup power supported | apS, other external UPS or backup of Power Sourcing Equipment | apS, other external UPS or backup of Power Sourcing Equipment | apS, other external UPS or backup of Power Sourcing Equipment | apS, other external UPS or backup of Power Sourcing Equipment | Other external UPS, if wired correctly and our other hardware still used. | apS, other external UPS | apS, other external UPS |
|
Feature |
iSTAR Ultra i5 | iSTAR Ultra SE (Ultra Mode) i5 | iSTAR Ultra SE (Pro Mode) i5 |
iSTAR Edge i4 |
iSTAR eX i3 |
iSTAR Pro i2 | iSTAR Classic i2 |
| Power fail data backup | To SD card flash External Battery back up is required to avoid any data loss during a power loss. | To SD card flash External Battery back up is required to avoid any data loss during a power loss. | To SD card flash External Battery back up is required to avoid any data loss during a power loss. | To onboard flash with on-board Alkaline Batteries to provide for an orderly shut down and keep the Real Time Clock running. | To CF card with SLA Battery to provide for an orderly shut down and Coin Cell battery to keep the Real Time Clock running. | Sleep with memory retained by onboard batteries. | To flash simm |
| Onboard Ethernet | 2 NICs each 1000, 100, 10 Auto-sense | 2 NICs each 1000, 100, 10 Auto-sense | 2 NICs each 1000, 100, 10 Auto-sense | 1 NIC 100, 10 Auto-sense with optional PoE Plus | 2 NICs each 100, 10 Auto-sense | 1 NIC plus PCMCIA option 10 | 1 NIC plus PCMCIA option 10 |
| Secondary Ethernet | 1000, 100, 10 Auto-sense | 1000, 100, 10 Auto-sense | 1000, 100, 10 Auto-sense | Not supported | Onboard 100, 10 | Optional PC card | Optional PC card |
| Expansion connectors | USB, 4 Hosts, 1 Client | USB, 4 Hosts, 1 Client | USB, 4 Hosts, 1 Client | USB, 2 host | USB, 1 host | 2 PCMCIA slots | 1 PCMCIA slot |
| Expansion functions supported | Encryption key transfer | Encryption key transfer | N/A | Encryption key transfer | Encryption key transfer, 8- reader expansion | N/A | N/A |
| Dialup | RRAS (future) | RRAS (future) | RRAS | no | no | yes, PC card, RRAS | yes, PC card, RRAS |
| Serial host RS-232 comm | no | no | no | no | no | yes, RRAS | yes, RRAS |
| Total non- wireless readers allowed | 8, 16 with second ACM | 8, 16 with second ACM | 8, 16 with second ACM | 2 Reader – 2 4 Reader – 4 | 4, 8 with USB key | 8, 16 with second ACM | 8, 16 with second ACM |
| Wiegand signaling readers | 8, 16 with second ACM | 8, 16 with second ACM | 8, 16 with second ACM | 1 Reader – 1 Wiegand 2 Reader – 2 Wiegand 4 Reader – 2 Wiegand | 4 | 8, 16 with second ACM | 8, 16 with second ACM |
| RMs allowed | 8, 16 with second ACM | 8, 16 with second ACM | 8, 16 with second ACM | 2 Reader – 2 RM rdrs. 4 Reader – 4 RM rdrs. | 4, 8 with USB key | 8, 16 with second ACM | 8, 16 with second ACM |
| Total Aperio Hubs/Readers allowed | 30 Hubs 32 Readers | 30 Hubs 32 Readers (Future) | N/A | N/A | N/A | N/A | N/A |
|
Feature |
iSTAR Ultra i5 | iSTAR Ultra SE (Ultra Mode) i5 | iSTAR Ultra SE (Pro Mode) i5 |
iSTAR Edge i4 |
iSTAR eX i3 |
iSTAR Pro i2 | iSTAR Classic i2 |
| I8s allowed | 16 per ACM | 16 per ACM | 8 per ACM | 2 Rdr – 4 I/8s 4 Rdr – 8 I/8s | 8 | 8, 16 with second ACM | 8, 16 with second ACM |
| R8s allowed | 16 per ACM | 16 per ACM | 8 per ACM | 2 Rdr – 4 R/8s 4 Rdr – 8 R/8s | 8 | 8, 16 with second ACM | 8, 16 with second ACM |
| Schlage Wyreless (Readers/ PIMs) | 32 PIMs 32 Readers | 32 PIMs 32 Readers (Future) | 16 PIMs 16 Readers (only one RS485 port) | N/A | Yes | Yes | N/A |
| General purpose serial ports | 0 | 0 | 0 | 0 | 0 | 2 | 2 |
| Encryption | Super Strong, FIPS-197, AES 256 ECC or RCA 1024 | Super Strong, FIPS-197, AES 256 ECC or RCA 1024 | No (Cannot use RSA RC4) | Super Strong, FIPS-197, AES 256 ECC or RCA 1024 | Super Strong, FIPS-197, AES 256 ECC or RCA 1024 | RSA RC4 128 bit | RSA RC4 128 bit |
| General purpose Inputs onboard | 24, 48 with second ACM | 24, 48 with second ACM | 16, 32 with second ACM | 8 | 16 | 16, 32 with second ACM | 16, 32 with second ACM |
| Input resistor configuration | 23 choices per INPUT, including dual range SWH 1K | 23 choices per INPUT, including dual range SWH 1K | SWH 1K dual range or non- supervised | 23 choices per board, including dual range SWH 1K | 23 choices per board, including dual range SWH 1K | SWH 1K dual range or non- supervised | SWH 1K dual range or non- supervised |
| Relays onboard | 16, 32 with second ACM 1/2 of the relays are socketed. | 16, 32 with second ACM 1/2 of the relays are socketed. | 8, 16 with second ACM All of the relays are socketed. | 4 | 4 | 8, 16 with second ACM | 8, 16 with second ACM |
| Open collector outputs onboard | – | – | – | – | 4 | – | – |
| Open collector outputs are available on RM-4s connected to the iSTAR. | |||||||
| FAI | Yes | Yes | No | Yes | No | No | No |
| PoE, PoE+ | (future) | (future) | No | Yes | No | No | No |
| Clustering (Encrypted) | 116 Total (Ultra, SE Ultra Mode, Edge, eX) | 116 Total (Ultra, SE Ultra Mode, Edge, eX) | N/A | 116 Total (Ultra, SE Ultra Mode, Edge, eX) | 116 Total (Ultra, SE Ultra Mode, Edge, eX) | N/A | N/A |
|
Feature |
iSTAR Ultra i5 | iSTAR Ultra SE (Ultra Mode) i5 | iSTAR Ultra SE (Pro Mode) i5 |
iSTAR Edge i4 |
iSTAR eX i3 |
iSTAR Pro i2 | iSTAR Classic i2 |
| Clustering (Non- Encrypted) | 116 Total (Ultra, SE Ultra Mode, SE Pro Mode, Pro, Classic) | 116 Total (Ultra, SE Ultra Mode, SE Pro Mode, Pro, Classic) | 116 Total (Ultra, SE Ultra Mode, SE Pro Mode, Pro, Classic) | N/A | N/A | 116 Total (Ultra, SE Ultra Mode, SE Pro Mode, Pro, Classic) | 116 Total (Ultra, SE Ultra Mode, SE Pro Mode, Pro, Classic) |
| Diagnostic LCD | Yes | Yes | Yes | Yes | Yes | Yes | No |
| 1The iSTAR Ultra can be clustered with other encrypted iSTAR’s (Ultra, Ultra SE Ultra Mode, eX, and Edge) using AES 256. Or, clustered with non-encrypted iSTAR’s (Ultra, Ultra SE Pro Mode, Pro, Classic). iSTAR Ultra supports up to 32 wireless readers and up to 16 RM/Wiegand readers. The RM/Wiegand readers can only exist to the extent that the wireless readers are less than 32. Note: iSTAR Ultra and iSTAR Ultra SE Ultra Mode can enable or disable Encryption with S1-1. | |||||||
Site Requirements
Pre-Installation Planning and Requirements
Pre-installation involves the following:
- Checking equipment (hardware, software, power supply, and wiring).
- Checking power, wiring, equipment clearances, and code compliance at the site.
- Ensuring the proper tools are available.
See the following additional requirements:
- Equipment Check on page 2-2
- Types of Mounting on page 2-2
Equipment Check
Verify that the contents of the shipped boxes match the packing lists. Contact Software House if any items are missing or damaged. The iSTAR Ultra hardware does not include mounting hardware for an installation. Mounting hardware depends upon the site and must be approved by a structural engineer or other certified professional. Software House recommends anchoring systems capable of sustaining a 75 lb. load (without cables).
Types of Mounting
The iSTAR Ultra and its components can be installed in a wall mount enclosure or in a separate rack mount enclosure.
Requirements
Site Requirements
Ensure that the site is ready:
- A certified installer must perform the iSTAR Ultra installation.
- The iSTAR Ultra must be installed and wired according to local and national regulations.
- The iSTAR Ultra must be installed in a restricted access, protected area.
- Non-limited power supply lines must maintain (1/2 inch (1.3 cm)) spacing from limited power supply lines and other signaling lines. Secure lines must be installed in accordance to local and national electric codes.
- The site must be approved and all wiring must comply with UL requirements and other codes, in accordance with the National Electric Code, ANSI/NFPA70-1993.
- All preliminary site work is complete.
- System power needs to be 12 Vdc. Appropriate circuit breakers must be accessible. Power supplies must be listed to UL-603 or UL-294.
- The site is clean and free of dust or other contaminants.
- Ensure that the mounting site is ready to accommodate the iSTAR dimensions.
iSTAR Ultra Wall Mount Dimensions
Table 2-1: Cabinet (Wall Mount Dimensions
| Item | Dimension/Location |
| Weight | 26.5 lb (12.02 kg) |
| Height | 21.5 in. (54.61 cm) |
| Width | 25 in. (63.5 cm) |
| Depth | 5 in. (12.7 cm) |
| Upper Mounting Holes | 10 in. (22.86 cm) center to center to center. The outer two mount holes are keyhole type. |
| Bottom three Mounting Holes | Directly below the upper mount holes. |
iSTAR Ultra Network Topology
iSTAR Ultra supports communications over 10/100/1000 Mbps Ethernet networks using TCP/IP.
LAN and WAN Configurations
The TCP/IP protocol transfers data across a number of networks. Because iSTAR Ultra controllers use the TCP/IP protocol for network communications, they can communicate with each other within a LAN or across a WAN, as shown in Figure 3-1.
Gateways and Firewalls
iSTAR Ultra configurations provide access to remote C•CURE systems across firewalls and Network Address Translators. This is because the master controller automatically accepts a translated IP address if one is assigned from a remote host, or from an attached Network Address Translator.
| Port | Description | TCP, UDP | Target |
| 1999 | iSTAR, master port for incoming slave connections | TCP | Server |
| 2001 | ICU Broadcast Port | TCP | Server |
| 2800 | iSTAR Driver | TCP | Server |
| 2801 | iSTAR Fast Download Port | TCP | Server |
| 2802 | iSTAR Fast image download host port | TCP | Server |
| 28001 | iSTAR Edge/eX/Ultra/Ultra SE Fast Download Connection | TCP | Server |
| 28002 | iSTAR Edge/eX/Ultra/Ultra SE Fast Image Download | TCP | Server |
| Port | Description | TCP, UDP | Target |
| 28003 | iSTAR Edge/eX/Ultra/Ultra SE. Used by the host to accept Edge/ Ultra/eX requests for certificate signing. | TCP | Server |
| 28004 | iSTAR Edge/eX/Ultra/Ultra SE. Used to accept a signed certificate. | TCP | Server |
| 28005 | iSTAR Edge/eX/Ultra/Ultra SE. For connection made to the host 2nd IP/Name. | TCP | Server |
| 28007 | iSTAR Edge/eX/Ultra/Ultra SE. For master’s 2nd network connections. | TCP | Server |
| 28009 | iSTAR Edge/eX/Ultra/Ultra SE. The master port for incoming member connections. | TCP | Server |
| 28010 | iSTAR Edge/eX/Ultra/Ultra SE Communications. | TCP | Server |
Local Address Management
Although it is not required, System Managers who want to maintain local address management can configure iSTAR Ultra with locked IP addresses. Locked IP addresses retain the iSTAR Ultra address that is specified locally or by a local Dynamic Host Configuration Protocol (DHCP) server. When IP addresses are locked, iSTAR Ultra communicates across gateways using only the IP address that you configure: translated addresses are not accepted. Before you lock an IP address, ensure that it is reliable (not subject to translation) and can be reached from the local network.
Example:
The example displayed in Figure 3-2 on pages 3-4 shows a locked iSTAR Ultra configuration. To configure this cluster, the System Manager is in the branch office:
- Use PING to check communication to the exposed (translated) address from the Corporate Office.
- Use the ICU to configure the master controller and lock the exposed C•CURE address.
- Use the ICU to configure the member controllers and lock the local subnet addresses.
iSTAR Ultra Power, Batteries, and Backup
Other Interactions with the Power System
All of iSTAR Ultra’s other interactions with the power system are essentially informational in nature and do not directly affect iSTAR Ultra’s behavior with regard to power loss, power saving and backup. Most of the other interactions appear in the host as configurable inputs. This allows users to both monitor them and allow them to trigger other actions.
For example, the user could configure the AC / Main Fail and Low Battery inputs to both trigger a configuration backup. From the iSTAR Ultra’s point of view, however, this is incidental. It does not affect how iSTAR Ultra treats power loss. iSTAR Ultra still watches for input voltage to move outside of the normal operating voltage range, and at that time will perform a full state and configuration backup.
AC / Main Fail Input
- Indicates whether the external power source has reported a loss of its main power.
- Shares connector and Ground pin with Low Battery.
- Normally closed dry relay contacts are required. This signal is normally wired to the energized NO output on the APS.
- Configurable on the host as an unsupervised input.
Low Battery Input
- Indicates whether the external power source has reported its battery is low.
- Wired in from an external power source.
- Shares connector and Ground pin with AC / Main Fail.
- Normally closed dry relay contacts are required.
- Configured on the host as unsupervised input.
General Control Module (GCM)
General Control Module
Network Connections
Connect a shielded CAT-5E, or better, RJ45 cable to either J5 or J6 (or both for redundancy).
- J5 Ethernet up to 1 Gbps (10, 100, 1000)
- J6 Ethernet up to 1 Gbps (10, 100, 1000)
There are built-in LEDs in the connectors that indicate the Ethernet Link and Receive Data signals.
J3 Battery Backup
Not available, for future use.
Switches
SW7- Soft Reset (Reboot)
The SW7 push button saves all data in non-volatile memory and then reboots the unit. It may take several minutes for the formatting and saving of the data. The iSTAR Ultra is fully capable of operating without contact with the Host after the reboot. SW7 should be used to Reset to Factory Default by changing the Rotary Switch (SW3) to ‘D’ and pressing SW7. See Table 5-1 on page 5-4 for Rotary Switch descriptions.
To Clear Memory and Reboot the Unit
- Set rotary SW3 to D.
- Press and release switch SW7. Instructions appear on the LCD in approximately ten seconds.
- Follow the instructions.
- Set rotary SW3 back to 0 or F.
- Press and release SW7, and observe the LCD panel. The unit will reboot, the memory will be cleared, and the unit will need to be completely re-configured.
SW3 Rotary Switch
SW3 is an onboard 16-position rotary switch. Most of the positions are used to control LCD diagnostics. Table 5-1 on page 5-4 provides descriptions of the iSTAR Ultra rotary switch functions.
| Position | Description |
| 0 | ICU Block Off (Read/Write/Update) Display General Messages |
| 1 | Display card data from last card read, 7 second LCD display (slow mode) |
| 2 | Display card data from last card read, 2 second LCD display (fast mode) |
| 3 | Display supervised input changes, 2 second LCD display (slow mode) |
| 4 | Display supervised input changes, 1 second LCD display (fast mode) |
| 5 | Display manual output changes (include readers and R/8 boards), 2 second LCD display (slow mode) |
| 6 | Display manual output changes (include readers and R/8 boards), 1 second LCD display (fast mode) |
| 7 | Reserved |
| 8 | Hardware Test (Onboard Ethernet 1 and 2, USB ports) NOTES: n Ethernet tests require a good IP (Static or DHCP, and a good network link) and at least one ICU running on the same subnet. n USB port tests require the thumb drive to be formatted to a FAT32 file format. |
| 9 | Reserved |
| A | Erase DB files from flash. (Press GCM reset, wait for LCD instructions, set rotary switch back to 0 or F, press reset again.) This is like position D, but leaves basic Comm, IP unchanged. |
| B | MFG-ATE (Automated Test Equipment) (Software House only) |
| C | Disable watchdog (Software House only) |
| D | Restore Factory Default. Erase data backups and communication parameters from flash. (Press GCM reset, wait for LCD instructions, set rotary switch back to 0 or F, press reset again.) |
| E | Boot to previous image (Software House only) |
| F | ICU Block On (Read only) – Display General Messages |
Common LCD displays are:
- Firmware version and Date/Time loaded.
- Indication of whether a CFG Restore occurred.
- FIPS self test.
- Master Connected or Host Connected
- IP address of Host or Master
- Name of the iSTAR Ultra and MAC address of the NIC
- IP address of iSTAR Ultra
- Voltage
- Member or Master with Date and Time
- Configured Power and Measured Power
- Cluster Connected or Fragmented
- Indication of whether a database has been restored
- Indication of whether the iSTAR is encrypted
- Results of diagnostics
For more manuals by Tyco, visit ManualsLibraryy
Tyco iSTAR Ultra Door Controller-FAQs