The Takeover Panel With the Locked Installer Code

Why this matters

A homeowner switched to a new dealer for monitoring and the takeover visit stopped at the keypad: the panel would not accept its factory default installer code, and the previous dealer had enabled the feature that blocks the usual reset. The tech could not program the communicator, so the account could not be monitored. Takeovers are cheap acquisitions until one of them turns into an install, and the way to keep that from becoming a surprise argument is to know the reset paths, try them in order, then lay the choices out for the customer in hours and days rather than in reassurance.

What was on the wall

A hardwired hybrid panel about fourteen years old, in a basement utility room, with two keypads, twelve hardwired zones and a wireless receiver serving nine wireless sensors. It reported over a landline through a line-seizure jack. The homeowner owned the equipment outright: she had the purchase agreement from the original installation, which the tech photographed for the file. Whether a previous dealer's equipment or contract terms bind a customer is a question for her and, if needed, her attorney. The dealer's part was to confirm she believed she owned it and had cancelled the old service, and to record what she showed him. See related: How to Take Over an Existing Alarm System.

The old monitoring had been cancelled the week before, effective the previous Friday. She had the confirmation email. That mattered for safety: had the old account still been active, every power cycle and test signal in the next two hours would have gone to the previous dealer's central station, which would have treated them as real.

The codes the tech tried

The default installer code. Every panel ships with a default installer code, printed in its installation manual. The keypad gave the error tone. That told him only that someone had changed it, which most dealers do.

Common dealer codes. Some dealers set a standard installer code across their accounts. The tech's company keeps no list of other dealers' codes and does not guess at them, which on many panels just adds lockout delays. He stopped there.

The previous dealer. The homeowner had already asked them for the installer code by email, twice, and received no reply in nine days. Some previous dealers supply it promptly, some charge for it, and some do not respond. Her contract with them, not the new dealer, decided whether they owed her anything.

The documented reset, and why it failed

The panel's installation manual describes a power-up reset: remove all power, restore it, and within a short window after power-up enter a key sequence at the keypad that restores the default installer code. It exists for exactly this situation. The same manual also describes an installer lockout option which, when enabled, disables that power-up reset so only a code holder or the manufacturer can get back into programming.

Before powering anything down, the tech told the homeowner the siren might sound on power-up and asked her to keep the dog in another room, and he pulled the bell output connector so the siren could not sound during the attempts. He unplugged the panel's transformer and disconnected the battery leads, keeping each lead clear of the metal cabinet and of the other terminal, and waited for the keypads to go dark.

He restored battery, then AC, and entered the reset sequence at the keypad inside the window. The keypad showed it had accepted the keystrokes and then rejected programming entry with the default code. He repeated it once more, timing the window against the manual. Same result. That is what installer lockout looks like on this panel: the reset path is there in the manual and does nothing.

He reconnected the bell output, confirmed the keypads showed ready, and left the system running locally, so the house still had a working siren while the customer decided what to do next.

The three ways forward

He did not decide this himself. The panel and the money were the customer's, so he wrote the options out on the tablet and walked her through them at the kitchen table.

Option A was the cheapest if the code ever came, and there was no sign it would. Option B depended on whether the maker still offered a lockout reset for a board that old, which the tech could not confirm that day, and it left the house without even its local siren while the panel was away. Both A and B also ended with the same problem the takeover had planned to fix anyway: a landline-only communicator, one phone-company visit away from going silent. The new dealer's standard for a takeover was a cellular communicator, and this board's family did support one, but the tech would still need programming access to add it.

Option C cost the most tech time, about 5 hours against 1.5 for A, more than three times the labor, plus a board and a communicator in parts; option A would have needed the communicator too. It also replaced a fourteen-year-old board whose backup battery terminals were corroded and whose cabinet had rust at the bottom edge, which the tech showed her.

She chose C. The tech booked it for the next morning with a full half day.

The replacement

Account on test before power. The new account had been created at the central station. Before the first signal from the new board, the tech called the station and placed the new account on test, with the operator reading back the window. See related: How to Put an Alarm Account on Test and Take It Off.

Power off, photograph, label. Transformer unplugged, battery disconnected, keypads dark. Before lifting a single wire he photographed the terminal strip and labeled every zone pair with its zone number and location from the homeowner's old zone list. The transformer, a plug-in unit, was 120 V on its primary side and he did not open it; it plugged into a dedicated outlet beside the panel, which he confirmed was not switched.

Board swap. The new board went into a new cabinet on the same backboard. The two keypads were on the new board's compatibility list per its documentation, so they stayed. The wireless sensors used a protocol the new board's receiver supported, so they could be re-enrolled rather than replaced.

Each hardwired zone measured before it landed. The new board's documentation called for the same end-of-line resistor value as the old one. He measured each zone pair at the new terminals before connecting it. Eleven read the resistor value plus a few ohms of wire with their devices closed. Zone 5, the den windows, read a few ohms: closed contacts and no resistor anywhere on the run. At the old terminal strip, the resistor for zone 5 had been sitting at the panel terminals, not at the last window. With the resistor at the panel, the run could be jumpered anywhere along its length, cutting every den window out of the loop, and the panel would still see its resistor and read normal. A cut would still have shown, but a short, the defeat an intruder uses, would not. He traced the run to the last window contact in the den and fitted the resistor there, then re-measured at the panel: the resistor value plus wire, and open when he opened a den window. See related: How to Wire a Hardwired Zone With the Resistor at the Last Device.

Wireless sensors re-enrolled one by one. For each of the nine sensors he put the board in enrollment mode, triggered the sensor, assigned its zone and type, and then read the signal level the board reported for that sensor in its installed position. Eight were well above the board's stated minimum. The back bedroom window sensor was marginal. Its battery read low on the sensor's own status, and after a fresh battery its signal improved enough to pass, which he confirmed with three trips in a row. See related: How to Enroll a Wireless Sensor and Confirm Its Signal.

Communicator. He fitted a cellular communicator, checked its signal reading in the basement, and programmed reporting to the new station with a daily test.

New installer code, recorded. He changed the installer code from the default and recorded it in the dealer's code system for that account, per the company's procedure. See related: The Installer Code and Customer Passcode Handling SOP. The dealer does not enable installer lockout on equipment a customer owns, and told her so.

The finish test

With the account still on test, he walked every zone and confirmed each one at the station by zone number and description: twelve hardwired, nine wireless, plus the panel tamper and a test report over the cellular path. He confirmed AC loss and restore by unplugging the transformer for two minutes. The station's list matched his own, 21 zones, with no zone reporting under the wrong number. See related: How to Walk Test Every Zone with the Central Station.

He then asked the station to take the account off test and confirmed with the operator that it was in normal service. The old board went back to the homeowner, since it was hers; she asked the dealer to dispose of it.

What the file now says

The ticket recorded the old installer code as unknown and locked out, the reset attempts and their result, the option table with her choice and signature, the zone 5 resistor relocation, the per-sensor signal readings, and the walk-test list. If the previous dealer's reply ever arrives, it no longer matters. If the customer moves to another dealer one day, the code is on record and she can be given it.

References

• See related: How to Take Over an Existing Alarm System
• See related: How to Wire a Hardwired Zone With the Resistor at the Last Device
• See related: How to Enroll a Wireless Sensor and Confirm Its Signal
• See related: The Installer Code and Customer Passcode Handling SOP
• Panel manufacturer installation manual for the power-up reset and installer lockout options