Electronic Access Control Systems
Why this matters
Electronic access control replaces traditional key-based entry with credentials (cards, codes, biometrics, mobile credentials). Commercial customers increasingly demand access control for audit trails, time-zone restrictions, and rapid credential management. A locksmith offering installation and service of these systems expands beyond residential into the much larger commercial market. This reference covers the major system types and design considerations.
Access control credentials
| Credential type | Notes |
|---|---|
| PIN code | Lowest cost; can be shared / forgotten |
| Magnetic stripe card | Legacy; widely available; easily copied |
| Proximity card (125 kHz) | Most common in commercial; older technology |
| Smart card (HID iCLASS, MIFARE) | Higher security; more expensive |
| Mobile credential (Bluetooth / NFC) | Modern; phone-based; growing rapidly |
| Biometric (fingerprint, face, hand) | High security; user enrollment required |
| Combination | Multiple credentials for higher security |
Each balances convenience, security, and cost.
System types
Standalone systems
Single-door systems:
- Self-contained
- Programmed locally (at the door)
- No network connectivity
- Limited user count (typically 100-500)
- Lower cost
- No audit trail (or minimal)
- Suitable for: single back door, equipment room
Examples: Kaba E-Plex, Marlok Multilok, Schlage CO Series.
Networked systems
Multi-door systems:
- Centralized management software
- Cloud or local server
- Unlimited users (system dependent)
- Audit trail (who entered when)
- Time-zone control
- Real-time alerts
- More expensive but vastly more capability
Examples:
| Brand | Typical use |
|---|---|
| HID Global (Edge) | Standard commercial |
| Lenel S2 | Mid-to-high commercial |
| Software House (C-CURE) | Enterprise |
| Genetec | Enterprise + integrated video |
| Honeywell Pro-Watch | Standard commercial |
| Schlage Engage | Lower-cost networked |
| Salto KS | Wireless networked |
| Brivo | Cloud-based; subscription |
| Kisi | Modern cloud-based; mobile credentials |
| Verkada | Cloud-based with integrated video |
The market is large with many options. Selection depends on customer needs.
Wireless vs. wired
| Aspect | Wired | Wireless |
|---|---|---|
| Installation complexity | Higher (wire runs to each door) | Lower (no wire runs; mount and pair) |
| Reliability | Higher (no battery concerns) | Variable (battery replacement) |
| Cost (parts) | Lower | Similar |
| Cost (installation) | Higher (wiring labor) | Lower |
| Door retrofit | More invasive | Less invasive |
| Power | From the network | Battery-powered |
| Battery life | N/A | Typically 1-2 years |
Wireless systems (Salto, Aperio, etc.) increasingly attractive for retrofits where wiring is impractical.
Door hardware
Compatible hardware for access control:
| Hardware | Notes |
|---|---|
| Electric strike | Releases the strike plate when door opens; works with existing latch |
| Electric mortise lock | Mortise lock with electronic actuation |
| Magnetic lock (maglock) | Holds the door closed via magnetism; releases when power cuts |
| Electrified panic bar / exit device | Commercial; allows free egress + controlled entry |
| Electronic deadbolt | Standalone or wireless; less common in commercial |
Each hardware type fits specific applications. Maglocks for egress doors need fail-safe operation (open during fire). Strikes for general doors.
Reader types
The reader at the door:
| Reader type | Range / use |
|---|---|
| Proximity reader (125 kHz) | Wave card at 4-6 inches |
| Smart card reader (13.56 MHz) | Closer presentation; smart card |
| Long-range reader | Vehicle access (parking gates) |
| Keypad | PIN entry |
| Biometric | Fingerprint, hand, face, iris |
| Mobile reader (Bluetooth) | Phone in pocket |
| Combination | Multiple credentials |
Reader selection drives the credential type. Some readers support multiple credentials simultaneously.
Power requirements
For access control:
- 12 V DC or 24 V DC typical
- Power supply rated for total system load
- Battery backup for emergency operation
- UPS for the controller (separate from door power)
Power distribution can add complexity. Larger systems use centralized power supplies with door-level distribution.
Code compliance
Multiple codes apply:
| Code | Relevance |
|---|---|
| IBC / IFC | Building / fire codes; egress requirements |
| NFPA 101 | Life Safety Code (fail-safe egress) |
| ADA | Accessibility requirements at controlled doors |
| HIPAA | Healthcare; audit trail requirements |
| PCI-DSS | Retail / cardholder data areas; sometimes restricted areas |
| State / local | Vary by jurisdiction |
Failed egress during fire is a documented fatality risk. Access control must allow exit always.
Egress hardware
Fail-safe vs. fail-secure:
| Mode | Behavior on power loss |
|---|---|
| Fail-safe | Releases on power loss (allows egress) |
| Fail-secure | Stays locked on power loss (door stays secure) |
Code requirements (NFPA 101):
- Exterior doors that serve as means of egress: typically must be fail-safe
- Emergency exits: must allow free egress without keys / credentials
- Interior security doors (between secure areas): may be fail-secure
For each door, the choice depends on:
- The door's role (egress required from this room?)
- The security level desired
- Code applicability
Common solution: most external doors fail-safe; high-security interior doors fail-secure.
Audit trail
The system records:
- Who entered (credential ID)
- Where (which door)
- When (date and time)
- What credential (card, PIN, mobile, etc.)
- Whether access was granted or denied
This audit trail is the key value of networked access control:
- Liability documentation
- Employee schedule verification
- Incident investigation
- Compliance reporting
Customer review of audit trails (weekly or monthly) is part of the service.
Time-zone control
Time-based access:
- Employees only enter during their shift
- Cleaning crew only at night
- Contractor only during work hours
- Public area only during business hours
Reduces unauthorized access during off-hours.
User management
For typical commercial customer:
- Add new employee → credential issued; access set per role
- Employee transfers → credential updated for new access
- Employee terminates → credential disabled immediately
- Lost credential → disable + reissue
- Periodic audits of who has what access
The administrative effort is part of the customer's responsibility. Some services include user management.
Migration from traditional locks
Common migration path:
- Door survey and audit. Every exterior and controlled opening: door and frame material, hardware type, rating label, power availability, network drop or wireless coverage, and who currently holds a key to it. This is also where you find the egress and fire-rating constraints that decide what can go on each door.
- Rank the doors. Main entrance, employee entrance, and any door with high turnover behind it (cash room, server room, stock room) go first. Interior doors with stable populations stay mechanical for now.
- Re-key the mechanical system in the same trip. Every unaccounted-for key is why the customer called. Establish a clean key baseline before layering electronics on top, and keep the mechanical override cylinders on the new key system.
- Phase one: the perimeter. Electronic readers on the doors from step 2, with mechanical key override retained. The customer gets the audit trail and instant credential disable on the openings that matter most, at a fraction of a full-building cost.
- Phase two: interior and sensitive spaces. Networked or offline-wireless locks on the interior doors, on the same credential the perimeter already uses. Offline or wireless locks are usually the right call here; interior doors rarely justify hardwired runs.
- Consolidate to one credential. The goal is one card or phone that opens everything the person is entitled to. Mixed credential populations (some card, some key, some PIN) is where administration falls apart.
- Hand off the administration. Train the customer's admin on adding, disabling, and auditing, and put the offboarding step in writing so a terminated employee's credential dies the same day. Set the recurring audit review schedule here.
- Keep the mechanical fallback documented. Override cylinders, where the keys live, who holds them, and the procedure when power or network is down. A customer who cannot get into their own building during an outage will not trust the system again.
References
- NFPA 101 (Life Safety Code)
- IBC (International Building Code)
- ADA Standards for Accessible Design
- HIPAA Privacy Rule (audit trail requirements)
- Manufacturer documentation (HID, Lenel, Salto, etc.)
- ASSA ABLOY product specifications
- Manuall internal: Smart Lock Installation, Master Key Systems, High Security Locks