U‑PROX + facial recognition terminals: step-by-step instructions

Two Wiegand devices can be connected in parallel to one reader input, for example:

• a multi-format reader of our production;
• a biometric terminal with a Wiegand output (Wiegand OUT).

U-PROX IP400 access controllers support:

• one two-way door or a turnstile;
• up to two one-way doors.

The number of U-PROX IP400 controllers in the system is not limited.

We do not produce biometric devices ourselves, but the U-PROX software integrates biometric terminals of third-party manufacturers. Detailed compatibility information is provided below.

As for voice notifications of biometric devices in Ukrainian — it is necessary to check directly with the suppliers of the relevant equipment:

• Hikvision — according to preliminary information, Ukrainian language is supported;
• ZKTeco — there is no exact information regarding Ukrainian, but it is known for sure that voice notifications can be disabled.

Regarding two-factor authentication, its implementation depends on the type of equipment and the capabilities it supports. If the corresponding mode is provided by the device, it can be used in the U-PROX system.

Example:

• For terminals like ZKTeco SpeedFace-H5, joint operation with a reader connected to a U-PROX IP400 controller is possible. In this case, Face ID and any identifiers read through the U-PROX reader are used.
• For recently integrated Hikvision terminals that support the Hikvision ISAPI protocol, starting from version U-PROX 3.057.7988, configuration of two-factor authentication is done on the terminal side, depending on the types of identifiers it supports.

Example: Hikvision DS-K1T341CM — supports authentication via Face ID and identifiers Mifare Classic / Ultralight.

Recommended version 3.57.7988 – U-PROX software for use

Download the ISO image of the U-PROX 3.057.7988 software version at the following link:
🔗 U-Prox IP v3.057.7988 ISO

Install or update the current software installation to this version. It is recommended to update the components in the following sequence:

On the server:

• Server
• Client
• Web Server
• Desktop Server

On client workstations:

• Client
• Desktop Server (required if using the web client or the U-PROX Desktop USB reader)

Configuring Hikvision terminal integration

For Hikvision terminals that support the ISAPI protocol (for example, DS-K1T341CM), the connection is performed similarly to ZKTeco SpeedFace-H5:

• The administrator account of the terminal (“admin”) and its password are specified in the U-PROX software settings.

Terminal connection:

• Via Ethernet — for event transmission.
• Wiegand output (three wires: D0, D1, GND) — connects to the reader port of the U-PROX IP400.
• Two Wiegand devices can be connected in parallel to the IP400 reader port — for example, a Hikvision terminal and a U-PROX reader.

General requirements for setting up turnstiles

For all turnstiles, except for the Forma models, the door type in the software must be set to “two-sided”.
Additionally, 2 kOhm shunt resistors must be installed on all controller zones, by which the system determines the normal/abnormal state of the zone.

Relay configuration:

• Relay 3 — lock for entry;
• Relay 4 — lock for exit;
• Relay 1 (or 2) — as “turnstile” for emergency unlocking or free passage.

The “turnstile” mode operates inversely to the “free passage” state, so it is necessary to use a relay with two contact groups to ensure logical operation.

Turnstile rotor rotation sensors

• A single sensor may be used — shared for both entry and exit;
• Or two separate sensors — one for entry, one for exit;
• Or no sensors may be used at all.
• Assignment is performed by linking to the corresponding zones in the software.

Client interfaces: classic and web

In the web client, ready-made presets for configuring inputs (zones/loops) and outputs (relays) are available.

• In the classic client, configuration is performed manually, with full access to all parameters.
• The web client is a simplified version, covering the most common settings.

Features of setting up “Form” turnstiles

МThey can be used in two modes:

• Door type – “Two-way” — for basic operation without feedback or passage sensors.
• Special mode – with wiring according to the scheme:
  “Turnstile with pulse control”
  (see separate manual: “Integration of U-PROX IP400 with pulse-controlled turnstiles”)

Try restarting the “U-PROX IP Web Service”, and check if the data is loaded into the terminal.

In the “U-PROX IP” software, in the “Biometric devices” section of the door settings – select the appropriate option.

• Personnel and their cards are being loaded.
• Photos of personnel entered as biometric identifiers are being loaded.

ATTENTION!

Якщо як біометричний ідIf you use an external file as the identifier, and not the photo from the personnel profile in the database, you must consider the following:

The image size must not exceed 2 MB,
as biometric terminals, especially ZKTeco, will not be able to load such files. As a result, this will lead to the inability to use Face ID for the corresponding employee.

The U-PROX IP software currently does not have a function to check the size of such files when adding them via the “Biometric Devices” menu.

In contrast, for photos added through the personnel card in the database, an automatic check and restriction applies:

• Maximum resolution — 600×800 pixels
• Recommended file size — up to 100 KB

It is recommended to prepare external photos in the appropriate format and size in advance to avoid errors when importing them into biometric devices.

Connection to U-PROX software — ZAM180_TFT platform by ZKTeco.

Perform on software version U-PROX – 3.057.7988.

You can try one more method for the ZAM180_TFT platform (this works on the 170 model):

In the “Cloud Server” settings, make the following changes:

• Enable Domain Name – enable
• Server Address – enter "http://192.168.137.1:40001"
  (instead of 192.168.137.1, you need to specify the IP address of your ACS server or its domain name)

Note:
Entering the IP address on the terminal may behave somewhat incorrectly — the interface does not always respond on the first try.
Therefore, you may need to repeat the input 2–3 times.

While entering, focus on the bottom line on the grey background, where the entered value is displayed.
If the address is displayed correctly — the connection should work.

ALSO RECOMMENDED:

Check the Wiegand output (Wiegand OUT) settings on the terminal and verify its correct connection to the U-Prox IP400 controller.

The Wiegand port settings should be as follows:

• Format: Wiegand 26-bit
• Pulse width: 100 µs
• Pulse interval: 1000 µs (card/badge code)

Ensure the physical connection is correct:

The three wires from the terminal’s Wiegand OUT:

• D0
• D1
• GND

must be connected to the corresponding contacts on the IP400 reader port.

ATTENTION:
If the D0 and D1 wires are swapped, the output will produce an inverted code. For example:

• instead of 0 — F
• 1 — E
• 2 — D
• …
• 7 — A
• 8 — 9
• A — 7

and other similar shifts.

Such signal distortion will result in incorrect identifier reading.

For MA300 of different modifications:

If it’s an older modification, it works in the “ZKTeco MA300 (Standalone)” mode, with firmware from 2015, and such an MA300 can be used as a fingerprint scanner — see description below.

If it’s a newer modification, it works in the “ZKTeco MA300 (Cloud)” mode, with firmware from 2022–2023, and such an MA300 must be connected differently, with other server settings.

They also CANNOT be used (like older modifications) for fingerprint enrollment — for this purpose, use the ZKTeco ZK9500 — a USB fingerprint scanner for enrollment.

To connect via web service (web page) to the MA300, specify not only the network settings but also the server connection parameters.

Access via web service (web page) is available by default with the following settings:

IP address: 192.168.1.201
Login: admin
Password: admin@123

Enable the “Enable URL” option.

As the Cloud Server, specify:
http://192.168.21.104:40001 — where 192.168.21.104 is the IP address of YOUR U-PROX software server.

Patch for ZKTeco ZK9500 — simply replace the files in the software directory while U-PROX services are stopped, for version 3.57.7988, on ALL PCs where the system is used.

Download link — see below.

UProxIP.Patch.ZK9500 ZIP

Below is a link to the software for zk9500, which must be installed for it to work on a PC.

Adding a fingerprint using ZK9500.pdf https://drive.google.com/open?id=1aEfOVaaBoZreYvS2uXIwR_K7sqfYyKtV&usp=drive_copy

zkfinger_sdk_v10.0-windows-lite-zk9500 ZIP

Link to the cloud folder with instructions on how to use the ZKTeco MA300 device in Cloud mode: https://drive.google.com/drive/folders/1OZ_QmR2-pm_y-nJ7cce3xcguOOts3W49?usp=drive_link

Direct links to instructions:

1. ZKTeco MA300 settings in Cloud mode.pdf https://drive.google.com/open?id=1TPT8kRpUb9gJgCg0D_bOmzzWDd7jYlw5&usp=drive_copy
2. Configuring ZKTeco MA300 in U-Prox WEB Client.pdf https://drive.google.com/open?id=1Dd_19nj579T6X94fKQhcpR3dMsg3lnfY&usp=drive_copy
3. Adding a fingerprint using ZK9500.pdf https://drive.google.com/open?id=1aEfOVaaBoZreYvS2uXIwR_K7sqfYyKtV&usp=drive_copy
4. Adding fingerprints using ZKTeco MA300 and master card.pdf https://drive.google.com/open?id=1ZH3AjH6Ee9MVspDIN5dN7pv5uy3f4Kjy&usp=drive_copy

The patch listed below is intended for software version 3.57.1 build 7283, and is also compatible with version 3.57.1 build 7988 (displayed in the web interface as 1.6.7988).

Please rename the original file “index.min.css” before replacing it.

To increase the width of the department display area, please follow these steps on the server:

1. Download the archive UProxIP.3.057.7283.WebPages.DepartmentsWidthIncreased.zip at the link: https://drive.google.com/file/d/1B8Kwm2yRPIrR0piq6GXXDAykkleuxdfk/view?usp=sharing
2. Unzip the index.min.css file from the downloaded archive to your hard drive.
3. Copy the unzipped index.min.css file to replace the existing file “C:\Program Files (x86)\A2SoftIn\UProxIP\Web Pages\css\index.min.css”.
4. In your browser, refresh the U-PROX WEB Client page and clear the cache (use the Ctrl+Shift+R key combination in Chrome).

The staff page will look like this:

Below is general information about biometrics.

On the website, on the “Programs and Instructions” page, there is information (in “Changes in the version” – the information is specified):

Installation disc images and update files

U-Prox WEB. DVD image for installation/upgrade (ISO), 1070 MB

 Changes in version

U-Prox WEB. Setup.exe file – only for updating existing installations, 167 MB

Recommended version 3.57.7988 – U-PROX software for use – the link to it was provided above.

Work is also in progress to support (to be included in future software versions):

• ZKTeco MA300 (Cloud) – new modifications – from 2022–2023,
• ZKTeco ZK9500 – USB fingerprint registration reader,
• Hikvision DS-K1T341CM (works with Face ID and Mifare Classic / Mifare Ultralight cards) and other panels that support Hikvision ISAPI.

ZKTeco MA300 (Standalone) – old modifications, with firmware from 2015–2016, manufactured up to 2022.
ZKTeco MA300 (Cloud) – new modifications – manufactured in 2022–2023, with updated software and component base.

For example – firmware of the old modification:

And also set the following settings for MA300:

A. – General information on biometric integration into our ACS

B1. – Configuration sample for “MA300”
(- old modification; – for “new” ones, recommendations are listed above).
– upd. – requires a newer software version currently undergoing testing.

– Recommended version 3.57.7988 – U-PROX software for use.

B2. – Configuration sample for “SpeedFace”

Recommended version 3.57.7988 – U-PROX software for use.

Install/update all components – Server, Client, Web Server, Desktop Server – and verify operation.
Page refresh in browser after updating to a newer version – use “Ctrl+F5” to reload with cache cleared.

A. – General information on biometric integration into our ACS

Below – what is available in our software regarding integrated biometrics (ZKTeco and others):

– Data synchronization via network, transmission to controllers – through Wiegand interface.
U-PROX software – latest version – available on the website.

page – https://access.u-prox.systems/uk/zavantazhennja/

ZKTeco biometric terminals.

Integrated with facial recognition panels using VisibleLight technology:

• FaceDepot-7A
• FaceDepot-7B
• SpeedFace-H5
• SpeedFace-V5
• ProFaceX
• SpeedFace V5L

SpeedFace V5L (TI) – face + temperature
SpeedFace V5L (TD) – face + temperature
SpeedFace V4LM1

Infrared image + fingerprints:

• MultiBio 800-H

Fingerprints only:

• MA300

From the biometric devices integrated into the U-PROX software that work with facial recognition and fingerprints, these are:

• ZKTeco MultiBio 800-H
• ZKTeco SpeedFace-H5 (SpeedFace-V5, FaceDepot-7B)
• ZKTeco SpeedFace-V5L [TD] – only “face” data is uploaded from U-PROX
• ZKTeco SpeedFace-V5L [TD] – with infrared thermometer (camera) – only “face” data is uploaded from U-PROX

From the biometric devices integrated into U-PROX software that work only with fingerprints:

• ZKTeco MA300

Connection via network and Wiegand to the controller.

It is also possible to register fingerprints from ZKTeco MA300 directly in the software.

In the web part, go to Personnel, then Personnel Parameters – wait up to 10 seconds after opening for the “Biometric Identifiers” button to appear.
From there (according to settings described in section III of this letter), fingerprint registration can be performed.

All four components of the U-PROX software must be installed on the server, and on remote client machines – if the web client is used – the “Desktop Server” must also be installed.

General information on integrated biometric devices.

U-PROX Web is the “U-PROX IP” software with support for both the classic and web interfaces.
The web interface is a simplified version of the classic interface and includes some functionality absent in the classic version.

• Photo-video verification – available in the classic interface
• Photo-only verification – available in the web interface

Biometric readers can be connected to our access controllers (NDC-F18 or U-PROX IP400) via the Wiegand interface, if the reader supports it.

In current versions of “U-PROX IP” software, the following biometric devices are supported:

• Anviz U-Bio USB fingerprint reader (for enrollment)
• Anviz T5 series IP fingerprint readers (T5PRO, T5S, W2)
  • Supports “Card + Fingerprint” authentication mode for Anviz devices
• BioSmart DCR-PV USB palm-vein reader (for enrollment)
• BioSmart PV-WTC IP palm-vein readers
• Integration with ZKTeco:
  • Models supported: ZKTeco MultiBio 800-H, SpeedFace-H5 (SpeedFace-V5, FaceDepot-7B), SpeedFace-V5L[TD]
  • ZKTeco MA300 fingerprint-only reader

Biometric device configuration is performed only via the web interface.
Detailed instructions are provided in the web-client manual (“U-PROX IP WEB.pdf”) found on the installation disc and in the installed software under \Documentation.

and can also be downloaded from the website – “https://u-prox.systems/downloads/acs/uk/U-Prox_WEB_ukr.pdf“

(Settings for Anviz/ZKTeco integration and biometric identifier registration are described in pages 33, 62–63, 78–80.)

In the document, use quick search (Ctrl+F) for information related to biometrics by the keyword “biometric”

Biometric data can be either primary or additional identifiers for existing personnel.

We have listed the devices that are integrated into our system and work with cards and fingerprints from our software database.

Other biometric reader models can be connected according to the scheme shown below:

Any biometric reader that has a Wiegand output interface and contains its own fingerprint memory is suitable for operation within the system — therefore it can be connected to our controllers.

There are no more specific recommendations, as the reader market is constantly being updated.

Operational Logic
– Enroll a set of fingerprints (or fingerprint groups) on a primary reader. The reader assigns each a code that it can output over the Wiegand interface. You then import that code into the ACS as card credentials.
– Dump the data from this “primary” reader to your other readers and, if needed, edit the list. This results in a bit of “double work,” but there is no alternative. Then proceed with the standard access provisioning workflow in the ACS.

Example Deployments
In systems integrated with our hardware, the following fingerprint readers have been used:

• Sagem MA100 (discontinued 2017)
• F10 (discontinued 2017)
• …
  Or any other third-party biometric readers that provide a Wiegand output.

Using the supplied software, you enroll fingerprints on these readers, which assigns each a corresponding code. You then connect these readers via Wiegand to an NDC-F18 or U-PROX IP400 controller and import their codes into the software as card credentials—either manually or using the GGDataExchange.exe / ACSDataExchange.exe utilities from the distribution.

---

Additional Notes on Supported Devices

• SpeedFace-H5: supports visible-light face photos and v12 fingerprint templates.
• SpeedFace-V5: supports visible-light face photos and v12 fingerprint templates.
• FaceDepot-7B: supports only visible-light face photos.
• MultiBio 800-H: supports infrared face photos and v10 fingerprint templates.

---

Mixing Modalities in One System

• Visible-light face photos: you may combine SpeedFace-H5, SpeedFace-V5, and FaceDepot-7B in the same system.
  • You may also include MultiBio 800-H units, but you must re-enroll those devices’ infrared face templates separately.
• Infrared face photos: only MultiBio 800-H devices can operate on this modality.
  • You may also have SpeedFace-H5, SpeedFace-V5, and FaceDepot-7B in the same system, but they will require re-enrollment of their visible-light face templates.
• v12 fingerprint templates: only SpeedFace-H5 and SpeedFace-V5 support v12.
  • MultiBio 800-H does not support v12, so concurrent use of v12-capable and non-v12 readers in one system is not recommended to avoid confusion.
• v10 fingerprint templates: only MultiBio 800-H supports v10.
  • SpeedFace-H5 and SpeedFace-V5 do not support v10, so mixing v10 and non-v10 devices in one system is not recommended.

---

SDK-Based Integration

Current U-PROX versions support ZKTeco terminals via:

• Standalone SDK
• Time Attendance Push SDK
• Access Control Push SDK

Tested compatible ZKTeco models:

• MultiBio 800-H (Standalone SDK)
• SpeedFace-H5 (TA Push SDK, AC Push SDK)
• SpeedFace-V5 (TA Push SDK, AC Push SDK)
• FaceDepot-7B (TA Push SDK, AC Push SDK)
• MA300 (Standalone SDK)
• SpeedFace-V5L[TD] (AC Push SDK) – only devices running the Access Control firmware.

---

MA300 Fingerprint Enrollment in Desktop Service

The Desktop Server component must be installed.
A new feature allows registering fingerprints from a ZKTeco MA300 Ethernet-connected reader.
To enable this mode, add the string registry parameter ZKTecoReaderAddress under the Desktop Server’s registry key, specifying the reader’s IP address (or IP:port), for example:

[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\A2SoftIn\UProxIP\2.00]

“ZKTecoReaderAddress”=”192.168.1.201” or

[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\A2SoftIn\UProxIP\2.00]

“ZKTecoReaderAddress”=”192.168.1.201:4370”

• After adding to the registry, restart your PC or stop the three U-Prox software services and then restart them.

After resetting to factory defaults, ZKTeco MA300 biometric readers are set to port 4370. Data exchange with these readers occurs over the UDP/IP protocol.

After enabling this mode, in the Web client’s personnel management profile, within the biometric identifiers edit window for an employee or visitor, on-screen interface elements for fingerprint registration become available.

B1. – Sample settings for “MA300”
(– old modification; – recommendations for the “new” modification will follow later [in development].)

All U-PROX software components of the same version must be installed:

• Server
• Client
• Web Server
• Desktop Server

1. The IP400 controller must be connected; for normal operation, it must transmit data to the server.

To configure the equipment, please refer to the information on the website, on the “Blogs” – “Questions/Answers” page.

• https://access.u-prox.systems/uk/putannia/ – point No. 1.

зPlease pay attention to the ports and ensure that the “U-PROX IP Equipment Service” is running.

In the classic interface, the added biometric device is displayed—but you do not need to modify or manage it from the classic interface!

The ZKTeco MA300 must be connected via Wiegand OUTPUT (three wires: GND, D0, D1) to the corresponding port on the IP400 controller, and powered on over Ethernet.

For the MA300 — CONFIGURATION ONLY THROUGH THE WEB under Biometric Devices & Identifiers.

Using the classic interface you may still add cards for a regular reader or import configuration.

RECOMMENDED U-PROX software version 3.57.7283

• configured for use of the external MA300 for fingerprint enrollment

Ensure that the “U-PROX IP Equipment Service,” “U-PROX IP Web Service,” and “U-PROX IP Desktop Service”are all running.

To enable MA300 mode, add the string registry parameter “ZKTecoReaderAddress” under the Desktop Server key, specifying the reader’s IP or IP:port, for example:
ZKTecoReaderAddress = "192.168.1.50:4370"

[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\A2SoftIn\UProxIP\2.00]

“ZKTecoReaderAddress”=”192.168.1.201” or

[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\A2SoftIn\UProxIP\2.00]

“ZKTecoReaderAddress”=”192.168.1.201:4370”

• After adding to the registry, restart your PC or stop the three U-PROX software services, then restart them.

After resetting to factory settings, ZKTeco MA300 biometric readers are configured to port 4370. Data exchange with these readers occurs via the UDP/IP protocol.

After enabling this mode, screen interface elements for registering fingerprints will become available in the Web client in the personnel management profile in the window for editing the biometric identifiers of an employee or visitor.

Additional MA300 Capabilities (as recommended by support to streamline and clarify the MA300 workflow—what exists in the database is exactly what is on the MA300, and nothing extra):

To use it in the system’s web clients, the U-PROX component “Desktop Server” must also be installed, and the following Windows registry setting must be applied for system operation.

It is also ADDITIONALLY recommended to enable the program server on the PC, and the PC from which the registration of fingerprints will take place with MA300.

If you do not plan to use on-site batch enrollment of new users via a master card (in which you present the master card to the terminal, then present each user’s card and fingerprint one after another), we recommend disabling the merging of identifiers from the ACS database with the identifiers stored in the internal memory of the ZKTeco terminals.

– disabling the reading of identifiers available in MA300:

To do this, launch the Registry Editor (the system utility “regedit.exe”) and go to the section

[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\A2SoftIn\UProxIP\2.00]

Add the parameter “ZKTecoStandaloneSDKReadingDataEnabled” of type “DWORD (32 bits)” with a value of zero:

[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\A2SoftIn\UProxIP\2.00]

“ZKTecoStandaloneSDKReadingDataEnabled”=dword:00000000

-Enabling MA300 memory clearing before loading the configuration:

To enable the clearing of identifiers from the memory of MA300 biometric terminals, you must add a non-zero value “ZKTecoStandaloneSDKClearingDataEnabled” of type “DWORD (32 bits)” to the system registry:

[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\A2SoftIn\UProxIP\2.00]

“ZKTecoStandaloneSDKClearingDataEnabled”=dword:00000001

After adding the specified parameter to the system registry, restart the service, delete the mixed-up fingerprints from the database, re-register them, load the controllers, and verify that there is no confusion with the fingerprints.

B2. – Sample settings for “SpeedFace”

The ZKteko SpeedFace-V5L (TI) model works the same as the ZKteko SpeedFace-V5L (TD) and is compatible with it.

Biometric data and device configuration is performed only via the U-PROX web client in current software versions (3.52.1 build 6833 and above).
On the web client’s “Installer” page, within the door properties, click the “Biometric Devices” button.

Configuration is similar to the following. Example for SpeedFace:

All U-PROX software components of the same version must be installed:

• Server
• Client
• Web Server
• Desktop Server

In the web client, under the “Installer” section, in the door properties, via the “Biometric Devices” button, specify the appropriate ZKTeco type—for example, ZKTeco SpeedFace-H5 (for all SpeedFace or FaceDepot models)—and enter its serial number, which can be found in the menu, the documentation, or on the device housing:

Specify the IP address of the ZKTeco device and its port (default 4370); then choose the operating mode from the “Output Interface” list:

• “Wiegand” – for operation via Wiegand on the U-PROX IP400 reader port, regardless of connectivity to the U-PROX software server;
• “Server” – without Wiegand port connection, but dependent on connectivity to the U-PROX software server.

The date and time on the ZKTeco device must be synchronized with the date and time of the U-PROX software server.

Next, on the ZKTeco itself, configure the following in the Cloud Service settings:

Server Port – enter 40001

Server Type – ADMS

Server Address – enter the IP address of the U-PROX software server

ZKTeco’s own network settings, which are entered into the U-PROX software, as mentioned above:

biometric settings, sample at our stand:

access settings:

має бути встановлено Wiegand 26

налаштування роботи протоколу Wiegand 26