GAMANET

C4 DRIVER DOCUMENTATION

Advisor Advanced

Integration Manual

Advisor Advanced | FWK4

PRODUCTION EDITION | REVISION 1.0

Field

Document details

Document ID / revision

C4-IM-ADVISOR-ADVANCED / 1.0

Applies to

Advisor Advanced | FWK4 | Supported firmware: MR_4.7 - MR_4.13

Document status

Production edition

Document owner / author

Gamanet / Peter Kováč

Technical / QA approval

Not recorded in this manual

Edition date / language

2026-10-10 / English

Configure. Operate. Validate.

This manual applies only to the combinations and capabilities identified in its compatibility and supported-functionality sections.

Document Information

Purpose and scope

This manual describes the integration of Advisor Advanced with C4 through the Advisor Advanced driver using FWK4. It covers supported functionality, communication, configuration, credentials, profiles, operating behavior, restrictions and integration tests.

The manual is intended for system integrators, commissioning engineers, C4 administrators, technical support and integration testers. Device installation, electrical work and manufacturer-specific safety procedures remain governed by the applicable manufacturer documentation and site procedures.

Document control

Field

Document details

Integration identity

Advisor Advanced / ATS Advanced; ATSx500A(IP) main panel and associated DGP, RAS and CDC4 devices

Document revision / date

1.0 / 2026-10-10

Original technical author / date

Peter Kováč / 2026-09-18

Framework

FWK4

Supported firmware statement

MR_4.7 - MR_4.13. Earlier MR versions are retained only in explicitly version-specific operating notes.

Validation record

This manual defines test procedures and expected results. It does not record an executed test run or certify an installation.

Revision history

Revision / date

Changes and impact

Approval / evidence

1.0 / 2026-10-10

Reorganized the Advisor Advanced Integration Manual dated 2026-09-18 into the Integration Manual.Red.v02 structure. Technical tables, diagrams, operating notes and all 35 integration tests are retained.

Editorial production edition; technical test results and release authorization are separate records.

Terminology and conventions

C4 labels, device types, property names, commands, statuses and event identifiers are written exactly as shown in the applicable software. A device is the integrated equipment or external system; a driver is the C4 software component that implements the integration. An endpoint or circuit is identified using the terminology of the applicable C4 release.

Integration Overview and Supported Functionality

Device Category

Category

Selection / scope

ACS

Yes - access control

IAS

Yes - intrusion alarm

FPS

No

CCTV

No

DVR

No

Perimetry

No

Building

No

Other

No

Integration boundary and operating modes

C4 connects to the Advisor Advanced panel over Ethernet. Associated expanders, keypads and readers are represented in the C4 device tree. A CDC4 in extended mode communicates both through the internal ATS bus and directly over the LAN; it keeps a separate database of users and door groups.

For the two connection topologies and their original diagrams, see How to Connect Device to C4. For CDC4 in standard mode, use the Expander device type.

Supported Functionality

S = marked as supported. N = not marked as supported in the integration scope. The detailed chapters qualify the supported functions; a support indication is not an executed test result.

ID

Functionality

State

Documentation / integration tests

F01

Import From File

N

Not supported in the documented scope.

F02

Combined Credentials

S

Supported Identifiers; T-ID-01A/B; T-UPL-01

F03

Lift

S

Remote Device Control; Status Information Display

F04

Encrypted Communication

S

How to Connect Device to C4; Device Configuration; T-SEC-01

F05

Load Configuration

S

Configuration Transfer and Device Discovery; T-CFG-03

F06

Time Synchronization

S

Time Management; T-TIM-01A/B

F07

Time Zone Support

S

Supported; see the required Time zone setting in Time Management.

F08

Live Video Streaming

N

Not supported in the documented scope.

F09

Recorded Video Streaming

N

Not supported in the documented scope.

F10

Video Records Downloading

N

Not supported in the documented scope.

F11

Voice Transmitting

N

Not supported in the documented scope.

F12

Audio Streaming

N

Not supported in the documented scope.

F13

PTZ

N

Not supported in the documented scope.

F14

Presets

N

Not supported in the documented scope.

F15

Motion Detection

N

Not supported in the documented scope.

F16

Live Stream Snapshot

N

Not supported in the documented scope.

F17

Record Stream Snapshot

N

Not supported in the documented scope.

F18

Multiple Stream Types

N

Not supported in the documented scope.

F19

Person Data Read

N

Not supported in the documented scope.

F20

Fire Panel Networking Mode

N

Not supported in the documented scope.

F21

Card Learning

N

Not supported in the documented scope.

F22

Dynamic Upload

S

Credentials Synchronization; T-UPL-01 covers the documented upload scenarios.

F23

Access Time Restrictions

S

Credentials Synchronization; T-ACL-01

F24

Holidays Support

S

Credentials Synchronization; T-ACL-02

F25

PIN Management

S

Supported Identifiers; T-ID-01A

F26

Card Management

S

Supported Identifiers; T-ID-01B

F27

Fingerprint Management

N

Not supported in the documented scope.

F28

Reserved Memory Zones

S

Credentials Synchronization; ATS Alarm Panel configuration

F29

Antipas back Forgiveness

N

Not supported in the documented scope.

F30

Handicapped Flag

N

Not supported in the documented scope.

F31

Alarm Suppression

N

Not supported in the documented scope.

F32

Fire Alarm Counter

N

Not supported in the documented scope.

F33

Device Audit Log Retrieval

S

Events and Audit Log; T-EVT-02

F34

Remote Device Control

S

Remote Device Control; T-ACS, T-ALM and T-IO cases

F35

Wiegand Biometric Support

N

Not supported in the documented scope.

F36

Discovery

N

Not supported in the documented scope.

F37

Sending Configuration

N

Not supported in the documented scope.

Lift functions and the CDC4 Use Timing For Disabled profile are listed in their respective sections. They do not change the separate, unselected Handicapped Flag entry above.

Compatibility, Dependencies and Licensed Devices

Compatibility and dependencies

  • Supported firmware versions: MR_4.7 … MR_4.13

Component / mode

Documented applicability

Integration framework

FWK4

Main control panel

ATSx500A(IP) Advisor Advanced; ATS3500AIP is shown as an example.

Associated equipment

DGP expanders, ATS125x access controllers, ATS1260 Lifts controllers, RAS keypads/readers and CDC4 controllers.

CDC4 standard mode

Represented by the Expander device type; communication is through the ATS bus.

CDC4 extended mode

Represented by CDC4 Door Controller; internal ATS bus plus direct LAN communication.

Firmware-specific notes

X500 MR1, MR2, MR3, MR4 and MR4.1-and-later behavior is identified explicitly in Restrictions and Important Notes.

C4 / driver release qualification

Record the exact C4 release, driver build, panel model and firmware in the test-run record before acceptance testing.

Licensed Device

Alarm Panel

Licensed element / unit

Counting rule

Verification

Alarm Panel

At driver startup, C4 counts device instances marked with the Licensed attribute and requests that number from the installed license.

T-LIC-01: one licensed device node consumes one driver license.

The supported firmware statement above is not extended by the historical version-specific notes elsewhere in this manual.

Restrictions and Important Notes

Capacity and functional restrictions

  • The maximum number of credentials per user is one PIN code and one Card. If a person in C4 has multiple credentials assigned, multiple user entries are created in the device so that all credentials can be added.

Important notes

  • PIN code is mandatory for every user on X500 panels with MR1 and MR2 firmware

  • While communicating with the panel from C4, Installer account is locked out (Installer cannot login to keypad or to ATS8500 Standalone Downloader). This is valid also vice versa.

  • Advisor Advanced X500 (MR1, MR2, MR3, MR4) : All areas, DGPs an DGPs ATS 125x Access Controller couldn’t have any of alarms (e.g. Alarm, Fire alarm or Tamper) during credentials upload. Otherwise, upload will fail.

  • Advisor Advanced X500 (MR4.1 and higher) : Panel accepts credentials upload in states like: unset, alarm, exit time, set, set alarm, entry time, entry alarm, tamper zone, tamper RAS, tamper DGP, partset1, partset2.

  • During user upload, users can be denied their rightful access.

  • Maximum / minimum number of allowed users and user groups may be set in Alarm Panel’s general setting tab. It’s extremely important to remember about not exceeding the available number, keeping in mind that 2 first users are already saved for Installer and Supervisor (done automatically).

  • The maximum acceptable user number on the old panels (MR1, MR2) varies (50, 200, 1000) and depends on panel model and protocol version. The current panels (MR4) support 2000 users itself, which increase to the max (65532) only when a door controller is added. Without door controller these additional users will not be usable.

Operational warnings

Full Upload clears managed device memory positions before uploading credentials. Coordinate access, protection and monitoring impacts before uploads, resets or integration tests. Use an authorized test installation or controlled work window.

Security and safety boundaries

The retained factory-reset procedure specifies Non EN50131 mode, Duress mode and Forced Set. Confirm these settings against approved site requirements before changing an operational installation. Encryption settings are listed under Device Configuration.

How to Connect Device to C4

Topology and communication flows

The ATS Advanced system is connected through an Ethernet interface.

Figure 1. Ethernet connection between the C4 server and the ATS Advisor Advanced panel.

ATS in the diagram means ATSx500A(IP) Advisor Advanced device - Main Control Panel (e.g. ATS3500AIP) and some other DGP expanders (DGP – Data Gathering Panel, e.g. four door expander ATS1250), Keypads (RAS-es) and Readers.

To connect C4 to Advisor Advanced device, configure network connection between your machine and the panel:

  • Put the machine and the panel in the same network,

  • Configure static IP for the panel,

  • Make sure the machine and the panel are in the same subnet (subnet mask)

Connection and initial commissioning procedure

After the physical network is configured, in C4, under device manager, add Advisor Advanced Bus Controller device, under which ATS Alarm Panel. Fields that must be configured:

Bus Controller:

  • IP Address,

  • Destination port (default 32000),

  • Timeout (default 30 seconds)

  • Type Encryption Key in Encryption Key field

  • Type Encryption Key 2 in Encryption Key 2 field

ATS Alarm Panel options:

  • Password (Installer’s PIN code).

Connection and communication with CDC4 door controllers in extended mode

The CDC4 is an eight-door controller (In Standard mode only the four-door) and can operate in extended mode, which means that it is connected directly to the LAN in addition to the internal ATS bus. In the C4, the “CDC4 Door Controller” device is used for this type of connection. Each door slot can be configured as a Lift (Door type: CDC4 Lift).

The CDC4 door controllers in extended mode communicates with the C4 system via the Advanced panel (via the internal ATS bus) and also directly via the LAN. Access events are sent directly via IP to C4, while intrusion alarms are sent to the Advisor Advanced panel. The CDC4 retains its own database of users, door groups etc. separate from the Advisor Advanced panel.

Figure 2. CDC4 extended mode: direct LAN user/access traffic and ATS-bus intrusion traffic.

Device preparation and secure access

Set the panel network address and subnet before starting the circuit. The panel Password is the Installer PIN. Provision Encryption Key and Encryption Key 2 to match the panel. The factory-reset and initial-menu sequence is retained under Operation, Recovery and Maintenance.

After Load Configuration, complete the CDC4 IP Address, Port, Password and encryption properties manually. The C4 and local Installer sessions cannot be used concurrently, as described under Restrictions and Important Notes.

Device Configuration

Device tree and addressing

Add the ATS Alarm Panel below the Advisor Advanced Bus Controller. Each record below defines the represented object, allowed parent, properties and address range.

Validation: T-CFG-01 (duplicates), T-CFG-02 (missing item), T-CFG-07 (properties) and T-CFG-08 (additional nodes).

Advisor Advanced Bus Controller

  • This is the root device in the device tree.

Property

Definition

Default Value

Range

Enabled

Defines whether circuit usage is enabled

Yes

Yes/No

Default Agent

Define which Agent will run this circuit

Server Runner Manager

Time zone

Defines the Time zone of the ATS Advanced

System Time

IP Address

The IP Address of the panel TCP/IP network

Port

The TCP port of the communication module

32000

1 - 65535

Timeout

Response timeout for the communication (TCP packets)

00:00:30

00:00:30 - 01:00:00

Encryption Key

Password used for encryption, configured in the panel.

000...{12}

Encryption Key 2

Password used for encryption, configured in the panel.

000...{12}

Technical Events Enabled

Defines whether the propagation of technical events from the device to C4 is enabled

Yes

Yes/No


NOTE:

  • The time zone property must match the time zone (UTC offset) in the panel settings, otherwise time of events or time synchronization may not work properly!
    If panel’s time zone differs from the C4 time zone, the event “Invalid format of property value 'TimeZone' on device 'DEVICE'.” is stored when the driver is started.

ATS Alarm Panel

  • Represents the main panel (Central unit)

  • This device can be added under the Bus Controller

Property

Definition

Default Value

Range

Minimum Allowed User Number

Minimum user’s number allowed to be added (numbers 1 and 2 reserved for technician groups)

3

3 - 65532

Maximum Allowed User Number

Maximum user’s number allowed to be added

50

3 - 65532

Minimum Allowed Alarm Group Number

Minimum group’s number allowed to be added (numbers 1 and 2 reserved for technician groups)

3

3 - 128

Maximum Allowed Alarm Group Number

Maximum group’s number allowed to be added

16

3 - 128

Minimum Allowed Door Group Number

Minimum door group's number allowed to be added (number 1 reserved)

2

2 - 128

Maximum Allowed Door Group Number

Maximum door group's number allowed to be added

128

2 - 128

Minimum Allowed Filter Number

Minimum filter number allowed to be added (numbers 1 - 64 reserved)

65

65 - 128

Maximum Allowed Filter Number

Maximum filter number allowed to be added

128

65 - 128

Minimum Allowed Floor Group Number

Minimum floor group's number allowed to be added

1

1 – 128

Maximum Allowed Floor Group Number

Maximum floor group's number allowed to be added

128

1 – 128

Minimum Allowed Schedule Number

Minimum schedule’s (calendar) number allowed to be added (number 1 reserved for default schedule - Always)

2

2 - 24

Maximum Allowed Schedule Number

Maximum schedule’s number allowed to be added

24

2 - 24

Holiday Set

Defines the holidays set

None

Night Full Upload

Automatic Full Upload

Night Upload

Night Incremental Upload

Automatic Incremental Upload

None

Supported Credential Types

Defines the Credential Types for the device

Time Synchronization Interval

Periodic time synchronization interval

01:00:00

Password

Installer PIN (User 1 in ATS device) used for the communication with the panel

Query Interval

Periodic status / event query interval.

00:00:10

NOTES:

  • The Filters have been implemented (as time restrictions for User Groups) in driver version 2020.0.0.138

Area

  • Represents Area (Partition) on the ATS device

  • This device can be added under the Alarm Panel

Property

Definition

Default Value

Range

Address

Logical address (ID) of the area

1 - 64

Rearm delay

Delay before automatic Arm sub-command in the Reset alarm command

00:00:10

Detector

  • Represents a Zone on the ATS device

  • This device can be added under the Alarm Panel.
    Link to Detector can be added under the Area

Property

Definition

Default Value

Range

Address

Logical address of the zone

1 - 976

Virtual Door

  • Used as a parent device for RAS devices (Keypad, Card Reader or Keypad And Card Reader) not associated with a physical CU Door.

  • This device can be added under the Alarm Panel

Property

Definition

Default Value

Range

Address

Address of the RAS

1

1 - 32

CU Door

  • Represents a Door on the ATS Panel (Door type: Standard)

  • This device can be added under the Alarm Panel

Property

Definition

Default Value

Range

Address

Logical (global) address of the door

1 - 16

Time open

Opening time for Door Unlock Timed command

00:00:10

Keypad

  • Represents an LCD Keypad on the RAS bus (RAS - Remote Arming Station)

  • This device can be added under the: CU Door; Virtual Door.

Property

Definition

Default Value

Range

Address

Device address (Id of RAS)

1 – 32

Supported Credential Types

Defines the Credential Types for the device

Keypad And Card Reader

  • Represents a Card reader device with numeric keypad (on the RAS bus)

  • This device can be added under the: CU Door; Virtual Door.

Property

Definition

Default Value

Range

Address

Device address (Id of RAS)

1 – 32

Supported Credential Types

Defines the Credential Types for the device

Card Reader

  • Represents a Card reader device (on the RAS bus)

  • This device can be added under the: CU Door; Virtual Door.

Property

Definition

Default Value

Range

Address

Device address (Id of RAS)

1 – 32

Supported Credential Types

Defines the Credential Types for the device

Input

  • Represents a Zone on the ATS device (typically expander)

  • This device can be added under the: Alarm Panel; Expander; DGP Door; CDC4 Door Controller.

Property

Definition

Default Value

Range

Address

Logical address of the zone

1 - 976

Relay (Output)

  • Represents the Relay / Output on the device

  • This device can be added under the: ATS Alarm panel; Card Reader; Keypad; Keypad And Card Reader; DGP Keypad And Card Reader; Expander; CU Door; DGP Door; CDC4 Door Controller.

Property

Definition

Default Value

Range

Address

Logical address

1 – 1256

Trigger

Trigger ID used for control

1 – 255

Expander

  • Represents the DGP (Data Gathering Panel) device

  • This device can be added under the Alarm Panel.

Property

Definition

Default Value

Range

Address

Device address (Id of DGP)

1 – 30
(1 - 12)

NOTE: Maximum address for the devices ATS125x Access Controller and CDC4 (4-door controller in standard mode) is 12

DGP Door

  • Represents a Door on the Expander (DGP device – e.g. ATS1250 controller)

  • This device can be added under the Expander

Property

Definition

Default Value

Range

Address

Logical (global) address of the door

1 - 128

Time open

Opening time for the “Door Unlock Timed” command in seconds

10

1-255

DGP Lift Unit

  • Represents a Lift (Lift car) on the Expander (CDC4 controller in Standard mode)

  • This device can be added under the Expander

Property

Definition

Default Value

Range

Address

Logical (global) address of the door

1 - 128

DGP Lift Door

  • Represents a Floor

  • This device can be added under the DGP Lift Unit

Property

Definition

Default Value

Range

Address

Logical (global) address of the door

1 - 128

DGP Keypad

  • Represents an LCD Keypad

  • This device can be added under the DGP Door or DGP Lift Unit

Property

Definition

Default Value

Range

Address

Device address (Id of RAS)

1 – 384

Supported Credential Types

Defines the Credential Types for the device

DGP Keypad And Card Reader

  • Represents a Card reader device with numeric keypad

  • This device can be added under the DGP Door or DGP Lift Unit

Property

Definition

Default Value

Range

Address

Device address (Id of RAS)

1 – 384

Supported Credential Types

Defines the Credential Types for the device

DGP Card Reader

  • Represents a Card reader device (on the RAS bus)

  • This device can be added under the DGP Door or DGP Lift Unit

Property

Definition

Default Value

Range

Address

Device address (Id of RAS)

1 – 384

Supported Credential Types

Defines the Credential Types for the device

CDC4 Door Controller

  • The CDC4 door / lift controller in extended mode

  • This device can be added under the ATS Alarm Panel

Property

Definition

Default Value

Range

Account Code

Management software computer number

1 - 1024

Address

Address of DGP on the internal BUS (DGP ID)

1 - 12

IP Address

The IP Address of the panel TCP/IP network

Port

TCP Port

3001

0 - 65535

Timeout

Timeout for response from device

00:00:30

Password

Communication password

Cipher Type

Encryption cipher type

None

None, AES, Twofish

Encryption Key

Use when cipher type is different than None

Query Interval

Interval for sending regular queries to the central unit

00:00:05

Calendar Record Min Number

Minimum allowed memory position for Calendar Records

25

25 - 2000

Calendar Record Max Number

Maximum allowed memory position for Calendar Records

100

25 - 2000

Door Group Record Min Number

Minimum allowed memory position for Door Groups Records

1

1 - 10000

Door Group Record Max Number

Maximum allowed memory position for Door Groups Records

128

1 - 10000

NOTES:

  • for CDC4 in standard mode use Expander device type instead of CDC4 Door Controller

  • The minimum and maximum allowed memory position for user records is the same as for the ATS alarm panel. Also, the memory positions for the same person are the same on the panel and CDC4

  • Time synchronization is performed via the internal ATS BUS from the Advanced panel

CDC4 Door

  • Represents a Door on the CDC4 door controller in extended mode

  • This device can be added under the CDC4 door controller

Property

Definition

Default Value

Range

Address

Logical (local) address of the door

1 - 8

CDC4 Lift Unit

  • Represents a Lift (Lift car) on the CDC4 controller in extended mode (door slot configured as Lift)

  • This device can be added under the CDC4 door controller

Property

Definition

Default Value

Range

Address

Logical (local) address of the Lift

1 - 8

CDC4 Lift Door

  • Represents a Floor on the CDC4 Lift Unit

  • This device can be added under the CDC4 Lift Unit

Property

Definition

Default Value

Range

Address

Address of the Floor

1 - 128

CDC4 Keypad

  • Represents a credential device on the CDC4 door controller in extended mode

  • This device can be added under: CDC4 Door; CDC4 Lift Unit.

Property

Definition

Default Value

Range

Address

Logical (local) address

1 - 6

Supported Credential Types

Defines the Credential Types for the device

CDC4 Card Reader and CDC4 Keypad with Card Reader

  • Represents a credential devices on the CDC4 door controller in extended mode

  • This device can be added under: CDC4 Door; CDC4 Lift Unit.

Property

Definition

Default Value

Range

Address

Logical (local) address

1 - 6

Supported Credential Types

Defines the Credential Types for the device

Configuration Transfer and Device Discovery

Load Configuration

During the Load Configuration process, CDC4 door controllers in extended mode are automatically imported into the device tree, but some properties (IP address, Port, Password, encryption settings) must be configured manually for successful communication.

Field

Behavior

Direction and invocation

Device to C4. Stop the endpoint and execute the Load Configuration wizard.

Imported scope

Device nodes and properties are retrieved according to the current device configuration.

Names on first retrieval

Node names present on the device are used where possible.

Existing device-tree names

Applying changes to an existing tree must not change names of existing nodes.

Manual post-import properties

CDC4 Door Controller IP Address, Port, Password and encryption settings.

Acceptance

T-CFG-03 verifies successful import and the incomplete-tree variant.

Configuration-transfer acceptance checks

Check the resulting tree and properties, complete the manual CDC4 settings and validate the addresses before starting the endpoint. Expected audit messages are retained in T-CFG-03.

Supported Identifiers

User authentication is based on PIN codes and cards.

Supported PIN Lengths

4 - 10

PIN

Each user can be authenticated with a PIN. PIN can be an n digit number string within a range defined by the central unit. Central unit must have the PIN mode property set to Custom.

Important: PIN is compulsory for X500 MR1, MR2. A person without a PIN couldn’t be send to the panel.

Card

Apart from the PIN, each user can have a card, as well. Card is not required to send credentials (this option is non-obligatory). Supported card type is for example ATS IUM.

Card + PIN (Merged)

If a person has multiple cards or PINs, the merged credentials ensures that they are stored in the same memory position on the device.

Person and identifier mapping

The device supports one PIN and one Card per user entry. Multiple credentials assigned to one person in C4 can require multiple device user entries. Review the merged-credential statement above together with this per-entry limit, and validate reassignment using T-UPL-01.

Default credentials and commissioning accounts

Memory position
(ATS Panel)

Name in C4

Name in ATS

Default PIN

1

Engineer

Installer

1278

2

Administrator

Supervisor

1122

These are factory-default credentials used by the reset procedure, not deployment-specific secrets. The C4 communication Password uses the Installer account PIN. See Operation, Recovery and Maintenance for the default-login and Installer-PIN-reset sequence.

Credentials Synchronization

Ownership and object mapping

C4 object / setting

Device object / record

Mapping

Person / credential

User record

PIN and card authentication; multiple C4 credentials can create multiple device user entries.

ATS Alarm Panel profile

Panel user

Panel profiles map to users in device memory.

Area profile / access level

User group

Area profiles map to user groups. Different settings can allocate additional groups.

CDC4 profile

CDC4 user

CDC4 profiles map to users in the controller memory.

CDC4 user-number range

Shared user positions

Minimum and maximum user-record positions are the same as the ATS Alarm Panel; the same person uses the same position on both.

Upload modes and triggers

Mode

Trigger / scope

Data impact / evidence

Full Upload

Alarm Panel command; Night Full Upload can schedule an automatic full upload.

Clears managed memory positions before uploading person credentials.

Incremental Upload

Alarm Panel command; Night Incremental Upload can schedule an automatic incremental upload.

Differential upload; verify changed access and credential ownership using T-UPL-01.

Dynamic Upload

Person command

Differential upload; only on selected persons, but on all devices

Lifecycle, access rights and exceptional conditions

T-UPL-01 preserves the access-right and credential-reassignment scenarios, including persons placed under the root, companies and departments, and access assigned to doors absent from the physical device. Check permissions on the device and verify the correct person in the C4 access event after each upload.

The panel Holiday Set and schedule/filter ranges are listed in Device Configuration. T-ACL-01 verifies access-time restrictions and T-ACL-02 verifies holiday behavior. Filters for user-group time restrictions were introduced in driver version 2020.0.0.138.

Reserved memory positions

Memory position
(ATS Panel)

Name
(Person in C4 event)

Users

1

Engineer (Installer in ATS)

2

Administrator (Supervisor in ATS)

Alarm groups (User groups in ATS)

1

Installer group

2

Supervisor group

Door groups

1

Door group 1 (all doors, always)

Calendars (Schedules)

1

Always

Verification and recovery

Observe the Uploading Credentials status and the completion or failure audit messages. A reported communication failure during upload can also mean that the central unit refused a user or user group. Validate actual permissions and person attribution rather than relying only on transport completion.

T-UPL-02 covers interruption during credential transfer. After the namespace-changing upgrade to driver version 2020.0.0.581 or later, perform Full Upload before any other upload type; see Upgrade and Migration.

Profiles (Extended Properties)

It is possible to set special settings for device or device type:

  1. ATS Alarm panel

  2. Area

  3. CDC4 door controller

Profiles on ATS Alarm Panel

These profiles are mapped to users in device’s memory

Panel profile properties mapping and description:

Property in C4

Downloader
(ATS8500 GUI)

Values

Meaning

Language

Language

English | Slovak | Czech | ...

User language

Privileged

Privileged

On / Off

Privileged user

Select Group Option

Area | Area group | All

User has right to view and control access schedules (only for models ATS4500A or ATS4500AIP)

Trace

Trace

On / Off

User Access Type

Access user type

Normal | Two Cards | Guard | Visitor | High Security User

Phone number

Mobile

Mobile phone number

Area profiles

Area profiles are mapped to user groups in device’s memory.
It is possible to set special user settings for each user group (access level).

Be careful while setting different settings for many Profiles. Modifications in Profiles for separate users may cause creation of new user group at the panel and in result cause overrun of maximum allowed alarm group number.

Area profile properties mapping and description:

Property in C4

Downloader
(ATS8500 GUI)

Values

Meaning

Arming

Full set

On / Off

Rights to arm areas in full set mode

Card And Pin Mode

Card and PIN Mode

Card | Card or PIN | PIN

User can use card or PIN for authentication

Change PIN

Change PIN

On / Off

User is allowed to change his own PIN code

Cleaner

Cleaner

On / Off

Disarm of the area does not automatically inhibit detectors in the area

CS Configuration

CS Configuration

On / Off

Flag indicating whether the user has privilege to edit CS phone or account

Disarming

Unset

On / Off

User is allowed to disarm areas

Door Control

Door Control

On / Off

User is allowed to door control

Engineer Reset

Engineer Reset

On / Off

User is allowed to enter to the Engineer reset menu

Fob Learning

Fob Learning

On / Off

Flag indicating whether the user group has privilege to program a fob.

Forced Set

Forced set

On / Off

User is allowed to arm the areas with active detectors

Installer Access

Inst. Access

On / Off

Grant the installer an access to system configuration.

Isolate

Isolate

On / Off

Users are allowed to to exclude zones in areas for multiple arm / disarm cycles

Logs Access

Logs access

On / Off

Enable access to log entries

Menu Access

Menu Access

On / Off

Menu access allowed

No OP/CL Reports

No OP/CL Reports

On / Off

Open/Close events will not be reported

Notification Control

Notification Control

On / Off

Flag indicating whether the user group has privilege to change own notification settings

Notification Reporting

Notification Reporting

On / Off

Flag indicating whether the user group has privilege to receive notifications

Part Set 1

Part set 1

On / Off

User is allowed to arm the areas in partial arm 1 mode

Part Set 2

Part set 2

On / Off

User is allowed to arm the areas in partial arm 2 mode

Pic Deletion

Pic Deletion

On / Off

User is allowed to execute picture deletion

Region Control

Region Control

On / Off

Enable to region control

Remote Connection

Remote Connection

On / Off

User is allowed to connect to the panel via PSTN, GSM, ISDN or IP communication paths

Remote Pics

Remote Pics

On / Off

User is allowed to enable/disable remote picture triggering

Reset

Reset only

On / Off

Flag indicating whether the user group has privilege to acknowledge alarm/faults when system is set.

Sheduled Access

Sheduled Access

None | View | View And Control

User has rights to view access schedules

Shunt

Shunt

On / Off

User is allowed to use extended door shunt time option

Sms Control

SMS control

On / Off

SMS control availability

Sms Reporting

SMS reporting

On / Off

SMS reporting availability

Stop Reporting

Stop report

On / Off

User is allowed to cancel reporting on voice protocol

Tests

Reporting tests

On / Off

User is allowed to perform manual test calls

Time And Date

Time and date

On / Off

User is allowed to change the system date/time

Use Of Duress Code

Duress code

On / Off

User has the right to use a duress PIN

User group area list

User group area list

On / Off

Flag indicating whether the user group has privilege display the list of areas

User Type

User group type

Normal | Supervisor | Installer | Guard | ATM | Bank Reset | Log

Determines the sequence of login

Users Adding

User adding

None | All | Restricted

Flag indicating whether the user group has privilege to create new users

Walk Test

Walk test

On / Off

User is allowed to activate the Walk test procedure

Zones Bypassing

Inhibit

On / Off

User is allowed to inhibit/uninhibit devices

Default values and restrictions depending on User (group) type

The profile settings must respect these restrictions or the upload process will fail.

User-group defaults: Normal user, Supervisor, Installer and Guard

Property name

Normal user

Supervisor

Installer

Guard

Arming

1

1

1

1

Card And Pin Mode

Card or PIN

Card or PIN

Card or PIN

Card or PIN

Change PIN

1

1

1

1

Cleaner

0

0

0

0

CS Configuration

0

1

1

0

Disarming

1

1

1

1

Door Control

0

1

1

0

Engineer Reset

0

1

1

1

Fob Learning

0

1

1

0

Forced Set

0

1

1

0

Installer Access

0

1

0

0

Isolate

0

0/1

1

0

Logs Access

0

1

1

1

Menu Access

1

1

1

1

No OP/CL Reports

0

0

0

0

Notification Control

1

1

1

0

Notification Reporting

1

1

1

0

Part Set 1

0

1

1

1

Part Set 2

0

1

1

1

Picture Deletion

0

1

1

0

Region Control

0

1

1

0

Remote Connection

0

1

1

0

Remote Pictures

0

1

1

0

Reset

1

1

1

1

Scheduled Access

View

View & Ctrl

View & Ctrl

View & Ctrl

Shunt

0

0

1

0

SMS Control

0

0/1

1

0

SMS Reporting

0

0/1

1

0

Stop Reporting

0

0

0

0

Tests

0

1

1

0

Time And Date

0

1

1

1

Use Of Duress Code

0

1

1

1

User group area list

0

1

1

1

Users Adding

None

All

All

None

Walk Test

0

1

1

1

Zones Bypassing

1

1

1

1

User-group defaults: ATM, Bank Reset and Log

Property name

ATM

Bank Reset

Log

Arming

1

0

0

Card And Pin Mode

Card or PIN

Card or PIN

Card or PIN

Change PIN

1

0

0

Cleaner

0

0

0

CS Configuration

0

0

0

Disarming

1

0

0

Door Control

0

0

0

Engineer Reset

0

0

0

Fob Learning

0

0

0

Forced Set

0

0

0

Installer Access

1

0

0

Isolate

0

0

0

Logs Access

1

1

1

Menu Access

1

1

1

No OP/CL Reports

0

0

0

Notification Control

0

0

0

Notification Reporting

0

0

0

Part Set 1

0

0

0

Part Set 2

0

0

0

Picture Deletion

0

0

0

Region Control

0

0

0

Remote Connection

0

0

0

Remote Pictures

0

0

0

Reset

1

1

0

Scheduled Access

None

None

None

Shunt

0

0

0

SMS Control

0

0

0

SMS Reporting

0

0

0

Stop Reporting

0

0

0

Tests

0

0

0

Time And Date

0

0

0

Use Of Duress Code

0

0

0

User group area list

0

0

0

Users Adding

None

None

None

Walk Test

0

0

0

Zones Bypassing

0

1

0

Legend

0 = Unchecked (OFF). 1 = Checked (ON).

Cell appearance

Meaning

White

Property can be changed.

Gray

Property can NOT be changed for this type of user group. Default value must be used.

CDC4 profiles

CDC4 profiles are mapped to users in device’s memory (on the CDC4 door controller).

CDC4 profile properties:

Property in C4

Values

Meaning

Card Only

On / Off

Dual Custody

On / Off

Guard

On / Off

HSU

On / Off

High Security User

Privileged

On / Off

Trace

On / Off

Visitor

On / Off

Use Timing For Disabled

On / Off

Time Management

Time source and synchronization

Field

Documented behavior

Startup

C4 sets the device time after communication is established; T-TIM-01A.

Periodic synchronization

ATS Alarm Panel Time Synchronization Interval defaults to 01:00:00; T-TIM-01B uses a temporary five-minute interval.

CDC4 time

CDC4 time synchronization is performed by the Advanced panel over the internal ATS bus.

Time-change audit

The test notes require a time-set event only when the time difference is greater than five minutes. The test offset is 60 minutes, with expected measured offset 59-61 minutes.

Historical events

Retrieved offline events retain their original device event time, not the time of retrieval; T-EVT-02.

Time zone and event-time interpretation

The Bus Controller Time zone property must match the panel time zone (UTC offset). Otherwise event timestamps or time synchronization may be incorrect.

If the settings differ, the startup audit message is: Invalid format of property value 'TimeZone' on device 'DEVICE'.

Verification

Execute the startup and periodic tests only under their documented conditions. The periodic test is restricted to devices that do not notify time changes. The startup test retains the special applicability note for devices whose time is controlled by their own NTP server or equivalent facility.

Technology-Specific Functionality

ACS - doors, access and lifts

CU Door represents a standard panel door. DGP Door represents a door on an expander; CDC4 Door represents a local door on an extended-mode CDC4. Their command and status mappings are defined in the following two chapters.

DGP Lift Unit and CDC4 Lift Unit represent lift cars; their Lift Door children represent floors. Lift-unit Arm secures all floors and Disarm provides access to all floors. Lift Door Lock and Unlock secure or allow access to the individual floor. DGP Lift Unit additionally exposes Bypass On and Bypass Off.

Door tests cover manual override, permanent unlock, forced opening, held-open alarms, remote unlock, exit-button use and access decisions. Open/closed/locked events depend on the door type and settings; the held-open event depends on Report DOTL.

IAS - alarm, bypass and walk test

Area commands include Arm, Disarm, Reset alarm, Forced arm, Rearm, Test and Finish Test. Rearm issues Disarm, waits for Rearm delay and then issues Forced Arm. All commands are disabled during area testing except Finish Test.

Alarm and bypass behavior, including the extended-mode expander Rearm restriction and device-side bypass events identifying the actor as Unknown, is preserved in T-ALM-01, T-ALM-02A and T-ALM-02B.

Inputs, outputs and equipment health

Output has to be configured in ATS downloader through Filter where you select trigger and event. Then on output you select filter you created.

Input and Relay (Output) addressing and trigger properties are listed in Device Configuration. Output activation/deactivation, tamper, mains failure and backup-power failure are covered by T-IO-01, T-ALM-03 and T-HLT-01/02.

Remote Device Control

Supported commands

The C4 system makes it possible to perform the following operations above individual elements:

Element

Operation

Meaning

Bus Controller

Start

Starts a stopped circuit

Stop

Stops a started circuit

Restart

Restarts a circuit

Load Configuration

Load configuration from device and modify device tree in C4

Alarm Panel

Incremental Upload

Starts Incremental (differential) upload of persons credentials into device

Full Upload

Starts Full upload of persons credentials into device (clear managed memory positions on the device before uploading)

Test

Starts a Walk test in all Areas

Finish Test

Stops a Walk test in all Areas

Area

Arm

Starts protecting the specific area

Disarm

Finishes the protection of the specific area

Reset alarm

Restores the previous state of the system which was present before the alarm

Forced arm

Starts protecting the specific area with bypass / isolate active and alarmed zones

Rearm

Invokes the Disarm command, waits the time specified in the "Rearm delay" property, and then invokes the Forced Arm command

Test

Starts a Walk test in this Area

Finish Test

Stops a Walk test in this Area

Expander,
Detector,

CDC4 Keypad,
Card Reader,
Keypad with card reader

Bypass On

Temporarily disables the particular detector from operation

Bypass Off

Returns the previously bypassed detector to regular operation

Relay (Output)

On

Activate output

Off

Deactivate output

Door, input and lift commands

Element

Operation

Meaning

CU Door

Lock

Doors are locked

Unlock

Doors are unlocked

Unlock Timed

Doors are unlocked for specific time

Manual Override

Doors are disabled (unknown state of door)

Manual Override Off

Doors are enabled.

DGP Door
CDC4 Door

Lock

Doors are locked

Unlock

Doors are unlocked

Unlock Timed

Doors are unlocked for specific time

Unlock permanently

Doors are unlocked permanently

Manual Override

Doors are disabled (unknown state of door)

Manual Override Off

Doors are enabled.

Input

Bypass On

Temporarily disables the particular detector from operation (events and alarm)

Bypass Off

Returns the previously bypassed detector to regular operation

DGP Lift Unit

Arm

Starts protecting the specific Lift (secure all floors)

Disarm

Finishes the protection of the specific Lift (access all floors)

Bypass On

Temporarily disables the particular Lift from operation

Bypass Off

Returns the previously bypassed Lift to regular operation

DGP Lift Door

Lock

Floors are locked (secured)

Unlock

Floors are unlocked (accessed)

CDC4 Lift Unit

Arm

Starts protecting the specific Lift (secure all floors)

Disarm

Finishes the protection of the specific Lift (access all floors)

CDC4 Lift Door

Lock

Floors are locked (secured)

Unlock

Floors are unlocked (accessed)

NOTES:

  • All commands are disabled while the area(s) are being tested, except the Finish Test command

Status Information Display

The device status information is displayed on the following components:

Bus Controller

Status

Description

Idle

Normal functioning state of a device

Disconnected

Device Is disconnected

Configuration Failure

Driver configuration is broken

Connecting in Progress

Connection to the device is in progress

Alarm Panel

Status

Description

Unknown

Device status is unknown

Idle

Normal functioning state of a device

Uploading Credentials

Access permissions are currently being uploaded to the device.

Downloading History

Upon reconnecting to a device or external system, the C4 system downloads history that has occurred during the disconnection.

Tamper

Device status is tampered

Disconnected

Device Is disconnected

Configuration Failure

Driver configuration is broken

Loading Device Configuration

This state means that the C4 System is reading the device's configuration

Failure

General technical failure on a device (panel fault or system fault status reported from the device)

NOTES:

  • The device reports a Fault status under certain circumstances even when everything is functional.

Area

Status

Description

Unknown

Device status is unknown

Not Ready to Arm

The system can not be fully secured/armed, as one or more zones are activated.

Ready to Arm

The system is not secured, meaning that intrusion or motion within this zone will not trigger an alarm.

Configuration Failure

Device configuration is broken

Alarm

Indicating an intrusion situation

Armed

The system is in a fully secured mode (intrusion will trigger an alarm)

Bypass

Temporarily out of service

Tamper

Device status is tampered

Armed Partially

The system is not fully secured, as one or more zones (detector / input) are not secured.

Rearm

This state occurs during processing of the Rearm command

Testing

This is a state in which the device health and features are being tested.

Detector

Status

Description

Unknown

Device status is unknown

Idle

Device is in deactivated mode

Failure

General technical failure on a device

Tamper

Device status is tampered

Bypass

Temporarily out of service

Alarm

Indicating an intrusion situation

Activated

The device is currently in an active state, fulfilling it's primary function

Testing

This is a state in which the device health and features are being tested.

Alarm In Test

The device is currently being tested for functionality of the alarm. This means that there is not a real alarm, but a simulation of an alarm, in order to audit the device's health.

CU Door

Status

Description

Unknown

Device status is unknown

Door Normal

The door is physically closed. The lock is locked. Entry is only possible for authorized persons.

Door Forcibly Opened

The door has been forcefully physically opened by an unauthorized access

Door Opened

The door is physically opened.

Door Opened Too Long

The door is physically opened. The door is opened longer than the maximum defined time it should be opened by the device

Door Unlocked Permanently

The door is physically closed, but can be opened at any point without any required access authorization, until it is locked again.

Door Unlocked

The door is physically closed, but can now be opened. This occurs after valid access authorization or sending a command to unlock the door. This occurs for a certain preconfigured time. This time is defined per device.

Door Unlocked Timed

The door is physically closed, but can now be opened. This occurs after sending a command to unlock the door for a user-defined time period. The user can set a shorter or longer time than is defaultly defined per device.

Failure

General technical failure on a device

Alarm

The device is currently in a general alarm state (indicating an intrusion situation)

Door Manual Override

The door is physically closed, locked and cannot be opened.

Virtual Door

Status

Description

Unknown

Device status is unknown

Door Normal

The door is physically closed. The lock is locked. Entry is only possible for authorized persons.

Keypad, Keypad And Card Reader, Card Reader

Status

Description

Unknown

Device status is unknown

Idle

Input is in deactivated mode

Tamper

Device status is tampered

Bypass

Temporarily out of service

DGP Door

Status

Description

Unknown

Device status is unknown

Door Normal

The door is physically closed. The lock is locked. Entry is only possible for authorized persons.

Door Forcibly Opened

The door has been forcefully physically opened by an unauthorized access

Door Opened

The door is physically opened.

Door Opened Too Long

The door is physically opened. The door is opened longer than the maximum defined time it should be opened by the device

Door Unlocked Permanently

The door is physically closed, but can be opened at any point without any required access authorization, until it is locked again.

Door Unlocked

The door is physically closed, but can now be opened. This occurs after valid access authorization or sending a command to unlock the door. This occurs for a certain preconfigured time. This time is defined per device.

Door Unlocked Timed

The door is physically closed, but can now be opened. This occurs after sending a command to unlock the door for a user-defined time period. The user can set a shorter or longer time than is defaultly defined per device.

Failure

General technical failure on a device

Alarm

The device is currently in a general alarm state (indicating an intrusion situation)

Door Manual Override

The door is physically closed, locked and cannot be opened.

Configuration Failure

The device has issues due to mistakes or wrong data in configuration paramaters and/or settings

DGP Keypad, DGP Keypad And Card Reader, DGP Card Reader

Status

Description

Unknown

Device status is unknown

Idle

Input is in deactivated mode

Tamper

Device status is tampered

Bypass

Temporarily out of service

DGP Lift Unit

Status

Description

Unknown

Device status is unknown

Idle

Input is in deactivated mode

Tamper

Device status is tampered

Failure

General technical failure on a device

Configuration Failure

The device has issues due to mistakes or wrong data in configuration paramaters and/or settings

DGP Lift Door

Status

Description

Unknown

Device status is unknown

Door Normal

The Floor is secured

Door Unlocked

The floor is accessed

Configuration Failure

The device has issues due to mistakes or wrong data in configuration paramaters and/or settings

Expander

Status

Description

Unknown

Device status is unknown

Idle

Input is in deactivated mode

Tamper

Device status is tampered

Failure

General technical failure on a device

Configuration Failure

The device has issues due to mistakes or wrong data in configuration paramaters and/or settings

Input

Status

Description

Unknown

Device status is unknown

Idle

Device is in deactivated mode

Failure

General technical failure on a device

Tamper

Device status is tampered

Bypass

Temporarily out of service

Alarm

Indicating an intrusion situation

Activated

The device is currently in an active state, fulfilling it's primary function

Output

Status

Description

Unknown

Device status is unknown

Activated

Input is in activated mode

Idle

Input is in deactivated mode

Bypass

Temporarily out of service

CDC4 Door controller

Status

Description

Unknown

Device status is unknown

Idle

Device is in deactivated mode

Failure

General technical failure on a device

Tamper

Device status is tampered

Downloading History

Upon reconnecting to a device or external system, the C4 system downloads history that has occurred during the disconnection.

Tamper

Device status is tampered

Disconnected

Device Is disconnected

Configuration Failure

Driver configuration is broken

CDC4 Door

Status

Description

Unknown

Device status is unknown

Door Normal

The door is physically closed. The lock is locked. Entry is only possible for authorized persons.

Door Forcibly Opened

The door has been forcefully physically opened by an unauthorized access

Door Opened

The door is physically opened.

Door Opened Too Long

The door is physically opened. The door is opened longer than the maximum defined time it should be opened by the device

Door Unlocked Permanently

The door is physically closed, but can be opened at any point without any required access authorization, until it is locked again.

Door Unlocked

The door is physically closed, but can now be opened. This occurs after valid access authorization or sending a command to unlock the door. This occurs for a certain preconfigured time. This time is defined per device.

Door Unlocked Timed

The door is physically closed, but can now be opened. This occurs after sending a command to unlock the door for a user-defined time period. The user can set a shorter or longer time than is defaultly defined per device.

Failure

General technical failure on a device

Alarm

The device is currently in a general alarm state (indicating an intrusion situation)

Door Manual Override

The door is physically closed, locked and cannot be opened.

CDC4 Lift Unit

Status

Description

Unknown

Device status is unknown

Idle

Input is in deactivated mode

Tamper

Device status is tampered

Failure

General technical failure on a device

Configuration Failure

The device has issues due to mistakes or wrong data in configuration paramaters and/or settings

CDC4 Lift Door

Status

Description

Unknown

Device status is unknown

Door Normal

The Floor is secured

Door Unlocked

The floor is accessed

Configuration Failure

The device has issues due to mistakes or wrong data in configuration paramaters and/or settings

CDC4 Keypad,
CDC4 Card Reader,
CDC4 Keypad with Card Reader

Status

Description

Unknown

Device status is unknown

Idle

Input is in deactivated mode

Tamper

Device status is tampered

Bypass

Temporarily out of service

Initialization, connection and restoration

On a successful connection, the endpoint children are set to their real states. The Network Connection Lost test expects all nodes below the endpoint to become Disconnected during the interruption and to return to their real states after reconnection. Missing, duplicate or additional nodes are addressed by T-CFG-01, T-CFG-02 and T-CFG-08.

The Alarm Panel may report Fault even when all equipment appears functional. State labels used by some test cases differ from the reference tables; retain those differences during review as described under Technical confirmation notes.

Events and Audit Log

Event mapping

The integration tests retain the exact expected audit-message text for each operation. Use the related case below for complete messages, placeholder definitions and conditional logging notes.

Event family

Object / context

Related tests

Driver startup and connection

Endpoint or driver name; connection establishment, loss, recovery and authentication.

T-CON-01/02; T-SEC-01

Configuration

Device retrieval, duplicated addresses and missing device context.

T-CFG-01/02/03

Time synchronization

Device and absolute difference from real time in minutes.

T-TIM-01A/B

Commands and physical changes

Command issuer, command name and target device; delivered command versus physical change.

T-IO-01; T-ALM-02A; T-ACS-01/02/05

Alarm and bypass

Nearest identifiable alarm-source device; actor supplied by C4 or the panel.

T-ALM-01/02A/02B/03

Access decisions

Person, credential type/name, reader and access-point context; unknown-card raw value where supplied.

T-EVT-01A/B/C; T-ACL-01

Credential upload

Upload type, target, duration and completion/failure.

T-ID-01B; T-UPL-02

Equipment power

Device at which mains or backup-power failure was detected.

T-HLT-01/02

Event context and interpretation

Audit messages use the device, person, credential and reader identifiers defined in each test. Missing-device events are attributed to the nearest parent or driver; alarms use the nearest identifiable source. Device-side PIN bypass may identify the actor as Unknown.

Device Audit Log Retrieval

After communication is established again, C4 retrieves events recorded while the device was disconnected. T-EVT-02 requires those events to be stored with their original device timestamps, not the time at which C4 read them. Alarm Panel and CDC4 Door Controller expose Downloading History status.

Diagnostics and evidence

The namespace-change issue described under Upgrade and Migration is recorded in the Exceptions trace log. Retain the actual event and trace evidence with the test report; protect deployment secrets and personal identifiers when distributing diagnostic material.

Operation, Recovery and Maintenance

Normal operation and connection ownership

Use the Bus Controller Start, Stop and Restart commands for circuit operation. The normal Bus Controller state is Idle. Panel status/event polling defaults to 00:00:10; CDC4 regular queries default to 00:00:05.

While C4 communicates with the panel, the Installer cannot log in through the keypad or ATS8500 Standalone Downloader. The restriction also applies in the reverse direction.

Failure and recovery behavior

Condition

Observable impact

Verification / recovery

Network loss

Nodes below the endpoint become Disconnected. The connection-loss test identifies a reconnect attempt after approximately 125 seconds.

Restore the connection, check real device states and verify recovered history; T-CON-02 and T-EVT-02.

Credentials transfer interrupted

Communication is interrupted and the upload failure is reported.

Use the failure evidence in T-UPL-02; check actual permissions before returning to service.

Mains or backup-power fault

Fault is expected during the affected power condition.

Restore the power source and verify the real device state; T-HLT-01/02.

Driver namespace upgrade

Access events cannot resolve person names until full synchronization.

Perform Full Upload first; see Upgrade and Migration.

Factory reset

Warning: use this sequence only for authorized reset/initial commissioning. A reset affects panel configuration; confirm the approved backup, safe state and restoration plan before proceeding. The listed Non EN50131, duress and arming settings require site-specific authorization.

1.Press MENU - Installer PIN - # - # - 1 - 6 - UP ARROW - #

2. How to log in using default credentials?

Press MENU - PIN - #

To reset changed Installer PIN code to default, short jumper T1 (see image) and power on the panel and wait for System failure message on the LCD keypad. Then remove jumper.

Figure 3. Advisor Advanced panel: jumper T1 used by the Installer-PIN reset procedure.

3. Configuration steps to ensure basic operation of the device

Configuration is automatically started after the panel is defaulted, this is only a list of important changes in regards to C4:

option 2 - select Non EN50131 mode

option 3 - Duress mode set to Inc Last Digit

option 6 - select Install - OK - # - # - # / Installation starts.

When installation ends and panel loads, it will ask for Auto Config - confirm Yes with # key

In Installers Menu, navigate to 8 - 4 - 3 and set Forced Set option to On.

In Installers Menu, navigate to 8 - 7 - 5 and set PIN chg mode to Custom

In Installers Menu, navigate to 9 - 3 - 4 - 4 - 1 - change IP config from Dynamic to Static

In Installers Menu, navigate to 9 - 3 - 4 - 4 - 2 - set IP address and confirm with #

In Installers Menu, navigate to 9 - 3 - 4 - 4 - 3 - set subnet mask, if non default

In Installers Menu, navigate to 9 - 3 - 4 - 4 - 4 - set IP of the gateway

Exit the menu with Clear key, until message Goodbye ? appears, then choose Yes and # key.

Upgrade and Migration

Person names are not resolved after upgrade to version 2020.0.0.581 due to a JSON serialization exception

When updating the driver to version 2020.0.0.581 or later, the driver does not determine the names of persons in access events until a full upload has been performed. After this update, a full upload must be performed before any other type of upload. This happens because from this version driver change namespaces in Device Model.

The following error is stored in the Exceptions trace log file:

Newtonsoft.Json.JsonSerializationException: Error resolving type specified in JSON 'Gamanet.C4.Driver.CarrierFSPAdvisorAdvanced.Upload.Model.Entities.UserEntity, Gamanet.C4.Driver.CarrierFSPAdvisorAdvanced'. Path '$type', line 1, position 132.

Troubleshooting, Support and References

Troubleshooting

Symptom / condition

Documented cause or condition

Action / reference

Missing person names after upgrade

Driver model namespaces changed in version 2020.0.0.581.

Perform Full Upload before any other upload type; Upgrade and Migration.

Installer cannot log in

C4 is communicating with the panel, or another Installer session owns communication.

Observe the mutual session exclusion; How to Connect Device to C4.

Upload fails on a legacy X500

MR1-MR4 alarm conditions can prevent credential upload. A communication-failure result may also be a rejected user or group.

Check firmware-specific notes, panel condition and configured ranges; Restrictions and Important Notes.

CDC4 imported but not communicating

IP Address, Port, Password and encryption settings are not retrieved automatically.

Complete these properties manually; Configuration Transfer and Device Discovery.

Invalid TimeZone property event

Bus Controller and panel UTC offsets differ.

Match the time-zone settings; Time Management.

Upload fails after profile changes

Additional area-profile variants may exhaust user-group capacity, or fixed defaults may be violated.

Check the profile restriction matrix and allowed alarm-group range.

Support and reference material

Reference / identifier

Revision / use

Advisor Advanced - Integration Manual - FWK4

Original technical author: Peter Kováč; cover date: 2026-09-18.

Integration Manual.Red.v02

Gamanet production manual structure and visual template used for this edition.

ATS8500 Standalone Downloader / ATS8500 GUI

Manufacturer tool named in connection notes, output preparation and profile mappings.

Driver version 2020.0.0.138

Introduction of filters for user-group time restrictions.

Driver version 2020.0.0.581 and later

Namespace-change knowledge-base item and required Full Upload.

Integration Tests

Test scope, environment and safety

The test set validates the documented integration scope. Record the exact environment and approved expected results before execution. Use an authorized test installation or controlled commissioning window, synthetic identities and safe stimuli. Alarm, access, output, reset, power and time-change tests require an approved method, affected-party notification and a recovery plan.

The following 35 cases are test procedures, not recorded execution results. Retain the firmware-specific conditions and notes within each case. Use an authorized installation and restore temporary settings, credentials, door states and power/alarm conditions after the run.

Test-run field

Required record

Test run / purpose

Run identifier, qualification/regression/commissioning purpose, tester and execution date.

Version combination

Actual C4 release, Advisor Advanced driver build, FWK4, panel model and firmware, controller mode and applicable dependencies.

Equipment and topology

Device types and counts, C4 communication host, ATS/CDC4 topology and network path.

Baseline and data

Configuration backup, managed and reserved ranges, synthetic persons/credentials and initial device states.

Authorizations / safety

Approved alarm, access, output, reset, power and time stimuli; notifications, work window and restore owner.

Evidence

Actual result for each expectation, event/trace captures, physical observation or read-back, defect reference and cleanup confirmation.

Measurable acceptance limits

Parameter / condition

Value defined by the procedures

Time synchronization stimulus

Move the device time 60 minutes back; expected measured offset is 59-61 minutes.

Periodic synchronization test

Temporarily set Time Synchronization Interval to 5 minutes and wait 5 minutes.

Time-set audit threshold

Event required only for a difference greater than 5 minutes, subject to the notes in the time tests.

Connection-loss retry observation

The connection-loss procedure identifies a reconnect attempt after approximately 125 seconds.

Device history stimulus

Wait 1 minute before and 1 minute after the offline operation.

Other time / capacity acceptance limits

Approve values and conditions in the execution record before relying on them. No additional performance limit is claimed by this manual.

Coverage and selection rules

Run each applicable procedure for the relevant device types and supported modes. Repeat the stated address, property, tamper and power variants. A capability without a dedicated procedure here, such as Card Learning, is not automatically considered validated. Record any additional qualification coverage separately.

Test result and execution record

Each case uses a description, prerequisites, paired Test Steps and Expected Results, expected audit evidence and cleanup. Complete the execution record with actual results and evidence. PASS means every applicable expected result met its limit; FAIL means at least one did not; BLOCKED means a prerequisite or dependency prevented execution; NOT RUN means no execution; NA means an approved, documented non-applicability decision. A waiver or known defect does not turn a failed test into a pass.

Record test ID and variant, requirement, purpose, risk authorization, tester/date, actual results, result, evidence, defect/deviation reference and cleanup confirmation in a separate versioned test report. A dash in a test table means no separate intermediate result is stated for that step; use the later expected result and audit evidence.

Test catalog

Test ID

Procedure

License attribute

Driver Copyright

Download Configuration

DNS Name Resolving

Duplicated Addresses

Missing HW Item

Unified Time Management - Time Synchronization on Driver Startup

Unified Time Management - Periodical Synchronization

Network Connection Lost

Property Value Validation

Output Activation and Deactivation

Intrusion Alarm

Detector Bypass On and Bypass Off Remotely from C4

Detector Bypass On and Bypass Off from Device

Personal Management - PIN Management

Personal Management - Card Management

Upload Scenarios

Door Manual Override On/Off

Door Unlocked Permanently

Door Forced Open

Door Open Too Long

Door Remote Unlock

Request to Exit Button

Personal Management - Handling Access Granted Event

Personal Management - Handling Access Denied Event - No access

Personal Management - Handling Access Denied Event – Unknown Credential

Disconnection During Sending Credentials To Device

Personal Management - Access Time Restriction

Personal Management - Holiday Support

Tamper

Device Tree Configuration Validation

Connection Authentication Failure

Device Audit Log Retrieval

Mains Failure

Battery Failure

T-LIC-01 | License attribute

This test verifies correct implementation of licensed attribute in driver.

Step

Test Steps

Expected Results

1

Create device tree with one licensed device node.

—

2

Check License bus controller.

When one licensed device node is present, one license is consumed for this driver.

Notes

When driver is started, system calculates number of instances marked with Licensed attribute and requests that amount from the currently installed license.

Cleanup: Return the device tree to the approved licensed configuration.

T-CFG-03 | Download Configuration

This test verifies correct implementation of retrieving configuration from device. Standard behavior is that the plugin retrieves all device nodes and properties with respect of the current device configuration.

Step

Test Steps

Expected Results

1

Stop the endpoint

—

2

Execute ‘Load Configuration’ wizard.

—

3

Wait until configuration from device is downloaded.

Device tree and properties will be successfully imported

Expected audit / evidence

'PERSON' sent command 'Load Configuration' to 'DEVICE'.

Configuration retrieval from 'DEVICE' started.

Configuration successfully retrieved from 'DEVICE'.

Where

DEVICE represents the name of the device

PERSON represents the name of person who executed the commands on device

Notes

Variation of this test is to execute the command "Load Configuration" on incomplete device tree configuration. When this functionality is supported, the test is considered as passed only when both ways work correctly.

When creating new device tree from device, plugin will apply node names present in the device if possible. When applying changes to already existing device tree, node names of existing devices should not change.

Some properties of CDC4 Door controller (IP Address, Port, Password, encryption setting) cannot be automatically obtained from the device – these properties must be entered manually for communication to be successful.

Cleanup: Complete manual CDC4 connection properties and validate the resulting tree before starting the endpoint.

T-CON-01 | DNS Name Resolving

This test verifies behavior of the driver in a case IP address is set as DNS name.

Step

Test Steps

Expected Results

1

Set DNS name of device in IP address field.

—

2

Start the endpoint.

Endpoint will successfully connect to device.

All device nodes under the endpoint are set to their real state.

Expected audit / evidence

'DEVICE' started.

'DEVICE' successfully connected to the device.

Where

DEVICE represents driver name.

Cleanup: Restore the approved endpoint address setting.

T-CFG-01 | Duplicated Addresses

This test checks the presence and behavior of the duplicated address check for particular device types. Purpose of the test is to ensure, there’s no duplicated items in device configuration tree, representing the same object (e.g. the same detector created twice in configuration).

Step

Test Steps

Expected Results

1

Stop the endpoint

—

2

Create two devices of the same type that are identified by the address, in the device configuration tree.

—

3

Set the same address value for both devices.

—

4

Start the endpoint.

Both items with the same address value have their status set to “ConfigurationFailure”.

Endpoint will not finish initialization and stops.

Expected audit / evidence

Duplicated address 'NUMBER' between 'DEVICE1' and 'DEVICE2'.

Where

DEVICE1 and DEVICE2 represents the names of devices that shares the address value.

NUMBER represents address value.

Notes

Test must be repeatable on each addressable node that can be created in a device tree.

When 'Address' of the device is consisted of multiple parts, change these parts accordingly to achieve the duplication of addresses in between devices

Cleanup: Remove duplicate test nodes and restore valid addresses before restarting.

T-CFG-02 | Missing HW Item

This test verifies behavior of the driver in case the device configuration tree is incomplete. In that situation the driver must, whenever it receives an event from device, log the missing Device event on the nearest parent node of the device configuration or the driver node itself.

Step

Test Steps

Expected Results

1

Stop the endpoint

—

2

Create an incomplete configuration tree with missing device.

—

3

Start the endpoint.

—

4

Generate some activity on the missing device.

Endpoint continues to work.

Expected audit / evidence

Configuration failure 'PARENTDEVICE': Missing device of category 'DEVICETYPE' with address: 'ADDRESS'. Detail: 'EVENT_DESCRIPTION'

Where

PARENTDEVICE represents the expected nearest parent device or the highest driver node.

DEVICETYPE represents the probable type of missing device.

ADDRESS represents the address/identifier of the missing device.

EVENT_DESCRIPTION represents untranslated text from the driver that should describe the event that appear in the audit log in case of correct device tree configuration - for example "AC - AreaAccessedEvent".

Notes

Test must be repeatable on each node type that can be created in a tree and that can be removed from device tree configuration without harming the core functionality (e.g. it doesn’t make sense to remove the driver node itself or panel node when only one panel is allowed in configuration, but it’s perfectly valid for detectors, contacts, etc.).

Cleanup: Restore the complete device tree and verify normal event attribution.

T-TIM-01A | Unified Time Management - Time Synchronization on Driver Startup

This test verifies correct implementation of the unified time management in driver. Driver is required to set up the time on the device after the communication is established.

Step

Test Steps

Expected Results

1

Stop the endpoint

—

2

Set the device time 60 min back.

—

3

Start the endpoint

—

4

Wait until driver is fully started

—

5

Check the time on device

Device time is synchronized with C4 server current time.

Expected audit / evidence

Time set to 'DEVICE'. Offset with real time was '60' minutes

Where

DEVICE represents the name of the device

OFFSET is an absolute value of the time difference in minutes. Here it is expected to have value 59-61, depending on the exact timing and measurement precision

Notes

Event is stored only when the time difference is greater than 5 minutes

When the device has its own NTP server (or similar facility) and the driver itself does not set the time on the device, this test is considered not supported. Option of using NTP server to synchronize time should be stated in the integration manual

Test is considered as passed also in case the event is not logged due to impossibility to retrieve device time

Cleanup: Restore the approved time and confirm normal synchronization.

T-TIM-01B | Unified Time Management - Periodical Synchronization

This test verifies correct implementation of the unified time management in driver. Driver is required to keep the device time synchronous with C4 server time.

This test can be executed only on the devices that do not support the time change notification, as this feature collides with test execution.

Step

Test Steps

Expected Results

1

Stop the endpoint

—

2

Set the value of property Time Synchronization Interval to 5 minutes.

—

3

Start the endpoint

—

4

Set the device time 60 min back

—

5

Wait 5 minutes

—

6

Check the time on device

Device time is synchronized with C4 server current time

Expected audit / evidence

Time set to 'DEVICE'. Offset with real time was 'OFFSET' minutes

Where

DEVICE represents the name of the device

OFFSET is an absolute value of the time difference in minutes. Here it is expected to have value 59-61, depending on the exact timing and measurement precision

Notes

Event is stored only when the time difference is greater than 5 minutes

Test is considered as passed also in case the event is not logged due to impossibility to retrieve device time

Cleanup: Restore the approved Time Synchronization Interval and device time.

T-CON-02 | Network Connection Lost

This test verifies behavior of the driver in a case of connection drop between C4 server and the device. Device is the nearest IP point where C4 communicates to.

Step

Test Steps

Expected Results

1

Start the endpoint

—

2

Wait for connection establishment.

—

3

Drop the connection on the switch or router, in such a way that the Windows system still detects the Ethernet connection.

—

4

Wait until the disconnection is signaled.

During a disconnection, all device nodes under the endpoint are set to "Disconnected" state.

5

After circa 125 seconds, the driver attempts to reconnect. Wait until the attempt is finished.

—

6

Recover the connection.

—

7

Wait for connection reestablishment.

After the connection is recovered, all device nodes under the endpoint are set to their real state.

Expected audit / evidence

'DEVICE' network connection interrupted.

'DEVICE' network connection restored. Number of retries: RETRYCOUNT.

Where

DEVICE represents driver name.

RETRYCOUNT represents a number of retries until the connection was reestablished.

Cleanup: Restore the network path and verify real device states and recovered history.

T-CFG-07 | Property Value Validation

This test verifies behavior of the driver in case the configuration value is out of the defined range. It also verifies that driver detects such an error during its starting sequence. Particularly, it is important to check the validity on device addresses and communication timing settings.

Step

Test Steps

Expected Results

1

Stop the endpoint

—

2

Change the property value outside allowed limit or set it to invalid format.

—

3

Start the endpoint.

Property with invalid value has red frame around it, in case driver implements Regex validation for property.

Notes

Test must be repeatable for every property of each device type that can be created in a device tree except the properties like account, password where the validation process is not take in to the account.

Test must be repeatable with values outside of limit or otherwise invalid.

For newly created devices, try not to set the value at all.

Cleanup: Restore valid property values before restarting.

T-IO-01 | Output Activation and Deactivation

This test verifies behavior of the driver implementation for output contact monitoring and controlling support.

Output has to be configured in ATS downloader through Filter where you select trigger and event. Then on output you select filter you created.

Before acceptance, confirm the state-label or command-description difference listed under Technical confirmation notes.

Step

Test Steps

Expected Results

1

Execute command “On” on output.

When output is activated, its status is Activated.

2

After the output is opened, execute command “Off” on it.

When output is deactivated, its status is Idle.

Expected audit / evidence

'PERSON' sent command 'On' to 'DEVICE'.

Command 'On' from 'PERSON' was delivered to 'DEVICE'.

'DEVICE' turned on.

PERSON' sent command 'Off' to 'DEVICE'.

Command 'Off' from 'PERSON' was delivered to 'DEVICE'.

'DEVICE' turned off.

Where

PERSON represents the name of person who executed the commands

DEVICE represents the output name

Cleanup: Restore the approved output state.

T-ALM-01 | Intrusion Alarm

This test verifies behavior of the driver when handling the alarm events and taking respective actions related to the current state of the alarm handling. This test applies for Alarm systems or systems with similar functionality.

Step

Test Steps

Expected Results

1

Set the detector to the armed mode (e.g. arming the corresponding area)

—

2

Issue an alarm on detector

The detector state is set to the Alarm.

The corresponding areas states are set to the Alarm.

3

Restore the alarm on detector

—

4

Confirm the alarm from C4 UI

After the alarm confirmation the Alarm state is finished.

Expected audit / evidence

Alarm on 'DEVICE'.

Alarm restored on 'DEVICE'.

Where

DEVICE represents a name of detector where the alarm was generated.

Notes

User shall use Reset command on the detector in alarm. On some devices this is not possible and it is necessary to issue another sequence of commands to confirm the alarm (for instance disarming the area on Alarm systems). If the sequence can be issued from the C4 UI and resembles the sequence of operations done on the device keypad, this test is considered as passed.

In C4 alarm events are stored always for device that is “nearest” to the real alarm source. This is usually detector. In case the device or its protocol doesn’t provide the information with that precision, for example provides only information about the alarmed area, the test can be considered as passed with remark in test notes

In extended mode with expander, only way to reset alarm is with Rearm command

Cleanup: Restore the approved alarm/protection state using the documented device-specific sequence.

T-ALM-02A | Detector Bypass On and Bypass Off Remotely from C4

This test verifies behavior of the driver implementation for detector bypass support. This test is applied to Alarm systems and Fire alarm systems or systems with similar functionality. In Fire alarm systems it is usually known as detector disable.

Step

Test Steps

Expected Results

1

Execute command “Bypass On” on detector.

State of the detector is bypass after Bypass On command is issued.

2

Execute command “Bypass Off” on detector

State of the detector is idle after Bypass Off command is issued.

Expected audit / evidence

'PERSON' sent command 'Bypass On' to 'DEVICE'.

Command 'Bypass On' from 'PERSON' was delivered to 'DEVICE'.

'DEVICE' was bypassed by user 'PERSON'.

'PERSON' sent command 'Bypass Off' to 'DEVICE'.

Command 'Bypass Off' from 'PERSON' was delivered to 'DEVICE'.

'DEVICE' bypass was canceled by user 'PERSON'.

Where

DEVICE represents the detector name

PERSON represents the name of person who executed the command from C4

Notes

For Fire alarm systems it is considered as acceptable when the zone/area is automatically inhibited when all detectors in the zone/area are inhibited.

Cleanup: Cancel temporary bypasses and restore the approved protection state.

T-ALM-02B | Detector Bypass On and Bypass Off from Device

This test verifies behavior of the driver implementation for detector bypass support. This test is applied to Alarm systems and Fire alarm systems or systems with similar functionality. In Fire alarm systems it is usually considered as detector disable.

Before acceptance, confirm the state-label or command-description difference listed under Technical confirmation notes.

Step

Test Steps

Expected Results

1

Bypass the detector using keypad or device panel.

State of the detector is Idle when not inhibited and Inhibit when detector is inhibited

2

Cancel bypass of detector using keypad or device panel

—

Expected audit / evidence

'DEVICE' was bypassed by user 'PERSON'.

'DEVICE' bypass was canceled by user 'PERSON'.

Where

DEVICE represents the detector name

PERSON represents the name of person who executed the command from device

Notes

For Fire alarm systems it is considered as acceptable when the zone/area is automatically inhibited when all detectors in the zone/area are inhibited.

When bypassed from device, by user with pin, event says bypassed by Unknown in audit log

Cleanup: Cancel temporary bypasses and restore the approved protection state.

T-ID-01A | Personal Management - PIN Management

This test verifies behavior of the driver implementation for transferring the PIN credentials into the device memory, allowing to define access permissions based on them.

Step

Test Steps

Expected Results

1

Create new person.

—

2

Grant the person access to the access point

—

3

Assign valid PIN to this person

—

4

Send credentials to the device

—

5

Check, whether the definitions were transferred correctly – either by reading the device memory directly or by proving operation on the device

Person has correctly defined permissions in a device.

Notes

Some devices might have some limitations in PIN length or some rules to define valid PIN.

Cleanup: Remove synthetic credentials/access after testing and verify the approved access baseline.

T-ID-01B | Personal Management - Card Management

This test verifies behavior of the driver implementation for transferring the card credentials into the device memory, allowing to define access permissions based on them.

Step

Test Steps

Expected Results

1

Create new person

—

2

Grant the person access to the access point

—

3

Assign valid Card to this person

—

4

Send credentials to the device

—

5

Use the credential to access the access point

Person has correctly defined permissions in a device

Expected audit / evidence

'UPLOAD_TYPE' upload to 'DEVICE' successfully completed (duration'TIME').

Access granted to 'PERSON1' at 'DEVICE1'.

Where

UPLOAD_TYPE type of issued upload

DEVICE represents the device where the credentials are sent into

PERSON1 represents a name of person who used credentials on access point

DEVICE1 represents a name of access point

Cleanup: Remove synthetic credentials/access after testing and verify the approved access baseline.

T-UPL-01 | Upload Scenarios

This test verifies upload behavior. It provides example scenarios to be performed when testing upload.

Tables on the left show first upload and tables on the right show second incremental upload

After each test, access permissions should be verified on the device and access event checked in C4. Access event has to contain correct person.

During testing add also access for some fake doors (door not present on the device). It should not cause any issues for driver upload.

During testing create some persons under root, company, departments, etc..

Test Steps

Follow the Test Scenarios section.

Example case 1

Step

Test Steps

Expected Results

1

Create 2 persons. Add valid credentials to both persons.

—

2

Add access to both persons on both doors.

—

3

Perform credential upload.

—

4

Change access so Person A has access only to Door 1 and Person B only to door 2.

—

5

Perform incremental credential upload.

—

6

Verify that persons only have access to expected access point.

Persons have correct access to expected access points with expected credentials.

7

Verify that access events contain correct person name.

Access events contain correct person which accessed the access point.

Example case 6

Step

Test Steps

Expected Results

1

Create 2 persons.

—

2

Add Card 1 to person A. Add card 2 to person B.

—

3

Add access to access points.

—

4

Perform credential upload.

—

5

Change credentials, so Person A has Card 2 and Person B has Card 1.

—

6

Perform incremental credential upload.

—

7

Verify that persons only have access to expected access points, with correct card.

Persons have correct access to expected access points with expected credentials.

8

Verify that access events contain correct person name.

Access events contain correct person which accessed the access point.

Expected Results

All upload scenarios finish successfully. Upload does not fail in any case.

Persons have correct access to expected access points with expected credentials.

Access events contain correct person which accessed the access point.

Test Scenarios

Figure 4. Upload scenarios 1-8: access changes and credential reassignment.
Figure 5. Upload scenarios 9-14: splitting, transferring and merging card assignments.

Cleanup: Restore the approved person, credential and access-right baseline after all scenarios.

T-ACS-01 | Door Manual Override On/Off

This test verifies behavior of the driver implementation for controlling of manually overridden doors.

Manually overridden doors doesn't allow to enter the person, even when it has valid credential with proper access rights.

Step

Test Steps

Expected Results

1

Execute command “Door manual override” on door

Status of the door is DoorManualOverrideOn when overridden.

2

Try to open the door using valid credential

During door lockout door ignores any attempt to open it with valid credentials

3

Execute command “Door manual override off” on door

—

Expected audit / evidence

'PERSON' sent command 'Door Manual Override Off' to 'DEVICE'.

Command 'Door Manual Override Off' from 'PERSON' was delivered to 'DEVICE'.

'DEVICE' manual override finished.

'PERSON' sent command 'Door Manual Override' to 'DEVICE'.

Command 'Door Manual Override' from 'Support' was delivered to 'Door 1'.

‘DEVICE' manual override started.

Where

DEVICE represents the door name

PERSON represents the name of person who executed the command

Cleanup: Turn off temporary manual override and restore the approved door state.

T-ACS-02 | Door Unlocked Permanently

This test verifies behavior of the driver implementation for remote controlling of doors.

This test focuses on handling events and states when door is unlocked permanently.

Step

Test Steps

Expected Results

1

Execute command “Door unlock permanently” on door

After issuing the command "Door unlock permanently ", the door status is set to Unlocked Permanently.

2

When door contact is present, simulate real door opening

During real door opening, the door contact is activated and the door status is set to Opened.

3

Execute command “Door lock” on door

After issuing the command " Door lock ", but door contact is still opened, door status remains Opened.

4

When door contact is present, simulate real door closing

After real door closing, the door contact is deactivated or the door relay timer expires, the door status returns to Locked (normal) state.

Expected audit / evidence

'PERSON' sent command 'Door Unlock Permanently' to 'DEVICE'.

Command 'Door Unlock Permanently' from 'PERSON' was delivered to 'DEVICE'.

'DEVICE' unlocked permanently.

'PERSON' sent command 'Door Lock' to 'DEVICE'.

Command 'Door Lock' from 'PERSON' was delivered to 'DEVICE'.

'DEVICE' locked.

Where

DEVICE represents the door name

PERSON represents the name of person who executed the command.

Notes

Based on the door controller type, the event 'DEVICE' unlocked instead of 'DEVICE' permanently unlocked may be stored in the audit log.

Cleanup: Restore the approved door-locking state.

T-ACS-03 | Door Forced Open

This test verifies behavior of the driver implementation for remote controlling of doors.

This test focuses on handling events and statuses during the unauthorized opening of the door in a protected system.

Step

Test Steps

Expected Results

1

Activate door contact when door is locked

Door status is set to Forcibly open

Expected audit / evidence

Door 'DEVICE' forced open.

Where

DEVICE represents the door name

Cleanup: Close the door and restore the approved protection state.

T-ACS-04 | Door Open Too Long

This test verifies behavior of the driver implementation for remote controlling of doors.

This test focuses on handling events and states during the held open alarm on the door.

Step

Test Steps

Expected Results

1

Use the credential to access the access point

After successful credential authorization, the door status is set to Unlocked.

2

Activate door contact

Door status is set to Open when the door contact is activated.

3

Keep the contact activated longer than the predefined time

After predefined open time expiration, the door status is set to Open Too Long.

Expected audit / evidence

Door 'DEVICE' open too long.

Where

DEVICE represents the door name

Notes

The event "Door 'DEVICE' open too long." depending on the "Report DOTL" setting in Device

Cleanup: Close the door and restore the approved access baseline.

T-ACS-05 | Door Remote Unlock

This test verifies behavior of the driver implementation for remote controlling of doors.

Step

Test Steps

Expected Results

1

Execute command “Unlock” on door

After issuing the command "Unlock", the door status is set to Unlocked.

2

When door contact is present, simulate real door opening

During real door opening, the door contact is activated and the door status is set to Opened.

3

When door contact is present, simulate real door closing

After real door closing, the door contact is deactivated and the door status is set to Unlocked. If the door relay timer also expires, the door status returns to Locked (normal) state.

Expected audit / evidence

'PERSON' sent command 'Unlock' to 'DEVICE'.

Command 'Unlock' from 'PERSON' was delivered to 'DEVICE'

'DEVICE' unlocked.

'DEVICE' opened.

'DEVICE' closed.

'DEVICE' locked.

Where

DEVICE represents the door name

PERSON represents the name of person who executed the command

Notes

Opened, closed and locked events may not be stored in the audit log, depending on door type and door settings in the Device

Cleanup: Restore the approved door state.

T-ACS-06 | Request to Exit Button

This test verifies behavior of the driver implementation for manual controlling of doors.

This test focuses on handling events and statuses during the use of Request to Exit Button.

Step

Test Steps

Expected Results

1

Activate Exit Button.

After activation of Exit Button, the door status is set to Unlocked.

2

When door contact is present, simulate real door opening

During real door opening, the door contact is activated and the door status is set to Open.

Expected audit / evidence

Exit button pushed 'DEVICE'.

Where

DEVICE represents the door name

Cleanup: Restore the approved door state.

T-EVT-01A | Personal Management - Handling Access Granted Event

This test verifies behavior of the driver when receiving the access granted event from the device.

Step

Test Steps

Expected Results

1

Create new person

—

2

Assign the person a valid credential

—

3

Grant the person access to the access point

—

4

Send credentials to the device

—

5

Use the credential to access the access point

Person got access to specific access point

Access point status is set to Unlocked

Expected audit / evidence

Access granted to 'PERSON' at 'DEVICE' using ' CREDENTIAL_TYPE' 'CREDENTIAL_NAME' at reader 'READER'.

Where

DEVICE represents the door name

PERSON represents the name of person who used authorized credential

CREDENTIAL_TYPE represents credential type used to get access

CREDENTIAL_NAME name of credential used to get access

READER represents reader where credentials where read

Cleanup: Remove synthetic persons and access rights; restore the approved baseline.

T-EVT-01B | Personal Management - Handling Access Denied Event - No access

This test verifies behavior of the driver when receiving the access denied event from the device.

Step

Test Steps

Expected Results

1

Create new person

—

2

Assign the person a valid credential

—

3

Grant the person access to the access point

—

4

Deny the person access to another access point

—

5

Send credentials to the device

—

6

Use the credential to access another access point

Person did not get access to specific access point

Expected audit / evidence

Access denied to 'PERSON' at 'DEVICE' using credential 'CREDENTIAL_NAME' on reader 'READER'. Reason: Door not allowed

Where

PERSON represents the name of person who did not get access to device

DEVICE represents the device name.

CREDENTIAL_NAME name of credentials used to get access

READER name of reader where was credential read

Cleanup: Remove synthetic persons and access rights; restore the approved baseline.

T-EVT-01C | Personal Management - Handling Access Denied Event – Unknown Credential

This test verifies behavior of the driver when receiving the access denied event from the device.

Step

Test Steps

Expected Results

1

Revoke all access rights for Persons

—

2

Issue Full Upload command

—

3

Slide a card on correct reader

Card will be recognized as unknown

Expected audit / evidence

Access denied for unknown credential "CARD_NUMBER (CREDENTIAL_NAME)" at 'DEVICE'.

Where

CARD_NUMBER is unknown card number in raw format.

CREDENTIAL_NAME name of credentials type

DEVICE represents the device name.

Cleanup: Restore the approved credentials and access-right baseline.

T-UPL-02 | Disconnection During Sending Credentials To Device

This test verifies behavior of the driver’s handling of communication disconnection during sending credentials to device.

Step

Test Steps

Expected Results

1

Send credentials to the device

—

2

During credentials sending, interrupt the connection.

Communication is interrupted and credentials are not sent to device.

Expected audit / evidence

'Support' sent command ' UPLOAD_TYPE' to 'DEVICE'.

Command 'UPLOAD_TYPE' from 'PERSON' was delivered to 'DEVICE'.

'UPLOAD_TYPE ' upload to 'DEVICE' started.

'UPLOAD_TYPE ' upload to 'DEVICE' failed due to communication failure (duration'UPLOAD_DURATION').

Where

UPLOAD_TYPE type of upload which was issued

DEVICE represents a name of device where the credentials are sent into.

PERSON represents a name of person who is executing the command.

UPLOAD_DURATION time period from the point when upload started to its interruption

Cleanup: Restore communication and verify actual device permissions before returning to service.

T-ACL-01 | Personal Management - Access Time Restriction

This test verifies behavior of the driver implementation for time limited access scenarios, allowing to update the device configuration in that a way, that the access can be limited to some specific hours and/or days of the week.

Step

Test Steps

Expected Results

1

Create new person

—

2

Assign the person a valid credential

—

3

Grant the person access to the access point

—

4

Restrict the access permission with time restriction

—

5

Send credentials to the device

—

6

Check whether the restriction is applied correctly

The assigned time restriction is correctly applied

When person has no limitation in access it gets access granted event. When person has limited access by time restriction it gets access denied event.

Expected audit / evidence

Access granted to 'PERSON' at 'DEVICE' using 'CREDENTIAL_TYPE' 'CREDENTIAL_NAME' at reader 'READER'.

Access denied to 'PERSON' at ''DEVICE' using credential 'CREDENTIAL_TYPE' on reader 'READER'. Reason: Door not allowed

Where

PERSON represents a name of person who used credentials on access point

DEVICE represents a access device where person requested access out of time restriction

CREDENTIAL_TYPE represents credential type used to get access

CREDENTIAL_NAME name of credential used to get access

READER name of reader where was credential read

Notes

Some devices might impose limits on the complexity and/or amount of available time restrictions. These limits must be enumerated in test notes and validated during this test.

Cleanup: Restore the approved access-time restrictions and test identities.

T-ACL-02 | Personal Management - Holiday Support

This test verifies behavior of the driver implementation for manipulation with a list of holidays in the device, allowing to define the different rules for holidays than for normal working days or weekends.

Step

Test Steps

Expected Results

1

Create new person

—

2

Assign the person a valid credential

—

3

Create holiday set, containing the todays date

—

4

Send credentials to the device

—

5

Check whether the restriction is applied correctly

The assigned time restriction is correctly applied

6

Modify holiday set that it doesn't contain todays date

—

7

Send credentials to the device

—

8

Check whether the restriction is applied correctly

The assigned time restriction is correctly applied

Notes

Some devices might impose limits on the complexity and/or amount of available time restrictions. These limits must be enumerated in test notes and validated during this test.

Cleanup: Restore the approved holiday set and test identities.

T-ALM-03 | Tamper

This test verifies behavior of the driver when processing the events about the device tampers on Access systems, Alarm systems or devices with similar functionality.

Step

Test Steps

Expected Results

1

Issue a tamper on detector, while detector is in disarmed state

Until the alarm confirmation, the detector has tamper status.

2

Restore the tamper

—

3

Confirm the alarm from C4 UI.

—

Expected audit / evidence

Tamper on 'DEVICE'.

Tamper completed on 'DEVICE'.

Where

DEVICE where tamper was issued

Notes

Variation of this test is to confirm the tamper alarm from device keypad

Test must be reproducible on all devices that are capable of generating the tamper alarm

In case the device ends the tamper state automatically, there is no need to confirm the tamper from C4 UI and the test is also considered as passed.

Cleanup: Restore the tamper circuit and approved alarm state.

T-CFG-08 | Device Tree Configuration Validation

This test verifies behavior of the driver in case the device configuration tree is complete and contains additional nodes that are not present on device.

Step

Test Steps

Expected Results

1

Stop the endpoint

—

2

Create an complete configuration device tree with additional nodes of each type that are not presented on device.

—

3

Set address of additional nodes to fictive value.

—

4

Start the endpoint.

Driver starts.

5

Check the status of all nodes in device tree.

Nodes that are presented on device have equal status to real status of device.

Nodes that are not presented on device have unknown status (black).

Cleanup: Remove fictitious test nodes and restore the approved tree.

T-SEC-01 | Connection Authentication Failure

This test verifies behavior of the driver during communication establishment process, when an invalid connection password, user name or encryption key is defined in device tree configuration.

Step

Test Steps

Expected Results

1

Stop the endpoint

—

2

Set the wrong password, username or encryption key or other properties related to the connection establishing.

—

3

Start the endpoint.

Endpoint did not connect to device.

Expected audit / evidence

Authentication to 'DEVICE' failed.

'DEVICE' failed to start.

Where

DEVICE represents the name of the device.

Cleanup: Restore the approved communication credentials and keys before restarting.

T-EVT-02 | Device Audit Log Retrieval

This test verifies behavior of the driver when transferring events from the device audit log after establishing communication. Standard behavior is that the driver reads all events from the device audit log, even events that happened during periods of disconnection.

Step

Test Steps

Expected Results

1

Stop the endpoint

—

2

Wait for 1 minute

—

3

Execute operation on device that leads to the entry in the device audit log

—

4

Wait for 1 minute

—

5

Start the endpoint.

All events from the device that happened during disconnection are stored in audit log with original time of the events on device, not with the time when they were read out from the device.

Expected audit / evidence

'DEVICE' started.

Where

DEVICE is a name of driver that was started

Cleanup: Restore the approved circuit state and retain the recovered-event evidence.

T-HLT-01 | Mains Failure

This test verifies behavior of the driver in case of mains failure of the device that is backed up by battery or other additional power source.

Step

Test Steps

Expected Results

1

Disconnect the mains power

—

2

Wait until the disconnection is signaled

When mains power is disconnected device status is set to Fault state

3

Reconnect mains power

—

4

Wait until the reconnection is signaled.

After mains power is reconnected device status is set to real status of device.

Expected audit / evidence

'DEVICE' mains failed.

Restore 'DEVICE' after a mains failure.

Where

DEVICE represents the device where the power failure was detected.

Notes

Test must be replicable on all types of devices that have independent powering and are backed up by battery or another power source

Cleanup: Restore mains power and verify the approved device state.

T-HLT-02 | Battery Failure

This test verifies behavior of the driver event handling in case of battery or other backup power fault.

Step

Test Steps

Expected Results

1

Disconnect the backup power

—

2

Wait until the disconnection is signaled

When backup power is disconnected device status is set to Fault state

3

Reconnect the backup power

—

4

Wait until the reconnection is signaled

After backup power is reconnected device status is set to real status of device.

Expected audit / evidence

'DEVICE' – low battery.

'DEVICE' – low battery missing

'DEVICE' – low battery restored.

Where

DEVICE represents the device where the power failure was detected.

Notes

Test must be replicable on all types of devices that have independent power and are backed up by battery or another power source.

Cleanup: Restore backup power and verify the approved device state.