Installation Manual | IM-20210727-RK-01

Access Control | Controllers | Apollo(N) Network Controllers |

This manual represents the knowledge at the above-mentioned time. TKH security works non-stop to improve her products. For the most recent technical information please contact your consultant or dealer.

2 This document

This document contains all the information that is required for the installation of the ApolloN controller. The details and recommendations will be described in the chapters below.

2.1 ApolloN Smart cabinet security controller

ApolloN is a site management controller and has been specially developed by TKH Security for so-called active locations. For example, street cabinets, where power- and network connection are available.
ApolloN combines access control, security and monitoring of environment at such a location. In addition, it enables managers of critical infrastructures to remotely check the status of a location. For example, ApolloN measures the temperature and humidity in the cabinet, checks whether the cabinet is still standing in the upright position and monitors the position of the door(s). If desired, smoke detectors, intrusion detection and water detection can be added to the location.
Monitoring the installation is essential to increase the service life of the equipment in the cabinet and helps to prevent malfunctions or further damage. By using an ApolloN you can therefore save on operational cost.
The site manager has full control over the technical location (street cabinet) when using iProtect.
iProtect is ideal for monitoring many buildings, locations and unmanned sites. If iProtect is not used, SNMP (Simple Network Management Protocol) is standard available in the ApolloN.

The office network, technical network and video network must be structured separately to ensure sufficient
bandwidth for the various connections.

3 General

3.1 Wiring

This document assumes standard T-568 color coding of the cables.

NOTE The Apollo can be ordered with standard, ready to use cables!

3.2 Tools and equipment

When installing the Apollo, we recommend the installer the following tools and materials:

T-568B cable
o Advised color: Blue, Yellow, Red and green
RJ45 plugs
Wire side cutter
Crosshead Philips Screwdriver
Screwdriver

4 Installation start-up

To ensure proper functioning of the equipment, the environment of the hardware must be compliant with certain conditions.

4.1 Mounting brackets

Use this procedure to mount the brackets onto the housing.

Unpack the carton box
Mount the brackets on both sides at the front of the 19-inch housing.
Use three M3x6 screws per bracket (see picture below).

4.2 DIP-Switch settings extension module

Before installing the ApolloN into a 19-inch rack, please set the DIP-Switches of the extension board(s) into the correct position. Please read chapter 7 for further information.

4.3 Rack installation

Position the ApolloN horizontal into the 19-inch rack.
Insert the correct mounting screws through the brackets and into the threaded holes but do not tighten the screws completely.
When all screws are inserted, keep the Apollo horizontal and tighten all screws.

4.4 Power cord

When using a 110/230V AC-DC ApolloN, the inlet for connecting the power cord is placed at the backside of the housing. The ApolloN will start-up immediately when the power is connected. At the front, status LED’s will become active.
A locking wire saddle can be placed at the back of the housing for guidance of the power cord.

5 ApolloN

The ApolloN is an powerful controller with a multicore processor, a secure bootloader, and a Linux Operating System.

5.1 Applications

Depending on the situation, the ApolloN can be used in a range of different ways.

The ApolloN can be used if:

More flexibility is required
More redundancy is required
End-to-End security is required
Maximum security is required
19-inch rack installation is required

5.2 Required software versions

The ApolloN is supported in iProtect version 10.0 and higher.

5.3 Power budget

In the ApolloN we use a power budget. The maximum of this power budget is determined by the type of ApolloN (e.g. 110/230VAC|DC or 48VDC|24VDC). This maximum must not be exceeded. If the maximum is exceeded, the condition of the device can be compromised. For further information, see chapter11.

5.4 Flexible hardware setup

The ApolloN is very flexible in many ways. The ApolloN consists of a motherboard and one, two or three Extension boards.
When only a few monitoring functions and access control is necessary, you can opt for the use of one Reader- and IO Extension module (RIO). If more connection points (or card readers) are desired, a second or a third extension module can easily be added.

5.5 Interfaces

5.6 Status LED

With the RGB status LED, the current mode of the ApolloN can be determined at a single glance. The meaning of the status LED colors is described in the table below:

5.7 Support in offline situation

When an ApolloN no longer has a network connection with the server, an offline situation arises. In order to guarantee autonomous operation, local data storage is necessary (including cards with valid access rights). And in this offline situation, the events of inputs, (lock control) outputs and cards may not be lost.
The maximum storage amount is described in the table below:

5.8 Connections

All hardware connections are described in the chapters below. For technical drawings, see chapter 12.

5.8.1 Serial connection (USB-to-RS232)

When a serial RS232 connection is required, a USB-to-RS232 converter (recommended by TKH-Security, part number 503-1805) must be used. Only one USB-to-RS232 converter can be used per ApolloN.

5.8.2 kpSensor bus connection

The ApolloN is fitted with a kpSensor bus port. When connecting a kpSensor (maximum 10) it allows the ApolloN to measure the temperature and humidity in a certain area.

The ApolloN only supports one type of kpSensor with part number 571-1013.

5.8.3 Serial port connection

The ApolloN is provided with a General purpose communication port (RS232/RS422/RS485).

6 Network connection

6.1 Network socket overview

The following network sockets can be used when connecting an ApolloN to the network. The use of this depends on active applications.

6.2 Maintenance page

The ApolloN has its own maintenance page. This maintenance page includes assistance with network settings as well as system testing.
The default IP address is 192.168.1.195. In order to access the maintenance page, enter the following into your browser: https://192.168.1.195
When the page opens, it will display a login screen. Once the right username and corresponding password have been entered, the system status page will be displayed.

Default login:
• Username: controller
• Password: Pluto

The following page is displayed:

When iProtect connects to the device, the default password will be changed. The new login password (can be customized) will be displayed in iProtect ➔ Installation | Hardware | Line. It is only available to the root system user.

6.3 Network settings

Network settings, e.g. IP address settings, can be manually configured.
To do so, click on the ‘Network settings’ button and enter the desired settings into the ‘device’ field.

Once saved, the new settings will take immediate effect and the device will only be accessible using the new IP address.

7 Extension boards

7.1 Reader and IO (RIO)

This extension board provides a Reader and I/O interfaces (RIO) to the ApolloN system.

7.1.1 DIP-Switch settings

If a Reader and IO (RIO) module is used, this module is equipped with DIP switches. These DIP-Switches are placed at the bottom of the housing. See figure Figure 13 : RIO front (bottom side).
The correct setting of the DIP-Switches is important for the correct operation of the system.

If a card reader is used, the communication must be set using DIP-Switch 1
If equipment is connected to the ApolloN (for example a smoke detector or burglary detector) the voltage of this port must be set using DIP-Switch 2

If the settings of the DIP-switches are not made correctly, it can lead to a defect of the connected equipment.

7.1.1.1 Card reader communication setting

The correct setting of DIP-switch 1 is important for the operation of the card reader.

If the setting of DIP-switch 1 is not set correctly, wrong card numbers (00000000) or no communication at all.

7.1.2 Connections

7.1.2.1 Port overview

All hardware connections are described in the chapters below. For technical drawings, see chapter 12.

7.1.2.2 Default reader inputs and outputs (RIO)

The default reader inputs- and outputs are described in the table below.

7.1.2.3 Monitored inputs (A1 – A3)

When using monitored inputs (ADC), a certain state of the input can be determined by one or more resistance values. This includes a detection of tampering or intrusion detector sabotage.
Default input types are:
• NO - Normally open
• NC - Normally closed
• Blocked
• EOL (End Of Line)*
• DEOL (Dual End Of Line)*
• DEOL inverted*
• TEOL (Triple End Of Line)*

• TEOL inverted*

*Recommended resistor values: EOL: 4k7Ω or 5k6Ω and Masking 22KΩ

7.2 Power and IO (PIO)

This extension board provides power (48 VDC) and I/O’s (PIO) to the ApolloN system.

7.2.1 Connections

All hardware connections are described in the chapters below. For technical drawings, see chapter 12.

7.2.1.1 Port overview

7.2.1.2 Monitored inputs (A1 – A3)

See paragraph 7.1.2.3 for the explanation on the monitored inputs and the resistor values.

8 Diagnostics

The ApolloN can be fully tested before communicating with iProtect ™ through a diagnostic program on the device.

Before connecting hardware to the ApolloN, please check the DIP-Switch settings accordance with Chapter 7.1.1.1

8.1 Initiating ApolloN diagnostics

NOTE System diagnostics are only possible if there is no communication between the ApolloN and iProtect™.

If the ApolloN has never been connected to an iProtect system the diagnostics mode is readily available.

When the ApolloN has been connected to an iProtect system, the following steps must be taken to make the diagnostics available:

Deactivate the line of the ApolloN in iProtect. After approx. 1 minute the status led will be blue indicating that the connection with iProtect is lost.
Now the ApolloN can be rebooted using the Reboot option in the Advanced menu of the ApolloN Maintenance page.

Navigate to the IP address of the device and perform the following steps:

Click on the ‘Hardware’ button and activate diagnostics. Three addition diagnostics options will appear.

8.1.1 Node manager

When the Node Manager tab is selected, the connected extension board(s) will automatically be retrieved and a list will appear.

The list shows the location, type, serial number, firmware and hardware revision of the extension boards.
Detailed diagnostics of the extension boards can be obtained by selecting a board in the list. A number of tables with diagnostic info regarding that extension board is opened.

All available ports are displayed, and the values can be monitored
When an output is selected, controls appear to test the output
The on-board sensors will be displayed
When an access card is presented to a reader, the card number will be displayed

8.1.2 Reader manager

When the Reader manager tab is selected, the connected RS485 card readers will automatically be retrieved and shown in a list. The ID, serial number, type and firmware version of the reader will be displayed.

8.1.3 1-Wire

When the 1-Wire tab is selected, a list of connected 1-wire devices is displayed. For each sensor the sensor ID and the measured value are displayed.

9 SNMP Support

It is possible to monitor the states of the ApolloN and the sensors that are connected to it via thee SNMP protocol (besides the use of iProtect).
The ApolloN supports SNMP v3 for the monitoring of data and it can send out SNMP v3 informs when certain events occur.

9.1 SNMP configuration

The SNMP service can be configured in the ApolloN Maintenance Page. Via the menu item Services on the tab Configuration, the relevant configuration parameters can be set.

The following parameters can be used:

User name: This is the name of the SNMPv3 user that will be used to get the data from the ApolloN via an SNMPv3 connection
Authentication method: Choices: None, MD5 or SHA.
Authentication passphrase: the secret that is used in the authentication, must be at least 8 characters long.
Privacy: The encryption method that is used for the communication: Choices: none, DES, AES.
Priv. passphrase: the secret that is used in the encryption, must be at least 8 characters long.
SNMPv3 Traps enabled: Should the ApolloN send out traps.
Trap destination: When SNMPv3 traps are enabled, the destination address of the traps should be given. Note: only 1 destination address is supported at the moment.

When the correct settings are made on the configuration tab, the SNMP service can be started from the General tab.

9.2 Monitored parameters

The SNMP parameters that can be queried via the SNMP service of the ApolloN are determined by the MIB’s that are installed on the system. Many standard MIB’s are supported and can be queried.
For the specific ApolloN features an APOLLON-MIB has been designed. This MIB supports the following data items (only through the GET method, no SET method is supported).

Main:
o Reset button
o Processor Temperature
o Hardware version
o Fan speed
o Type of SDD (Solid State Disk)
o Number of connected 1-wire sensors
o For each 1-wire sensor:
Address
Type
Value
o Number of extension boards
Extension Board:
o Device ID
o Device Type
o Number of Green inputs
Input state
o Number of Green outputs
Output state
o Number of Green lock controls
Lock control state
o Number of Reader power outputs
Reader power output state
o Number of Red analog inputs
Analog input value
o Number of Red output power
Output state
o Number of Blue outputs
Output state
o Number of Blue inputs
Input state
o Number of Relay outputs
Output state

The number of inputs/outputs etc refers to the total number of inputs, outputs on all extension boards. The RIO and PIO extension boards have I/O ports that can be configured as input or output by the iProtect system. Whether a port will show up in SNMP as input or output will be determined by the setting in iProtect.

9.3 SNMPv3 Traps

The ApolloN supports SNMPv3 traps in the form of informs. This means that the ApolloN SNMP service expects the traps that are sent out, to be acknowledged by the receiving system.
The trap mechanism uses the same authentication and privacy methods as are defined for the SNMPv3 GET operations.

In the following situations a trap/inform is sent:

The reset button is pressed
The processor temperature is above 85oC
A Blue input is triggered
The ReaderManager process is not present
The NodeManager process is not present.

10 How to

Before connecting hardware to the ApolloN, please check the DIP-Switch settings accordance with chapter 7.2.1.

10.1 Installation ApolloN

Configuring the ApolloN:

Make sure all connections are in accordance with the technical drawing and connect the ApolloN to the network. See chapter 12.
Open the a browser and browse to the following address: https://192.168.1.195. The login screen appears.
Enter “controller” as username. The default password is “Pluto”.
On the maintenance page select “Network settings” and enter the desired information like IP address and IP address gateway.
Select “Hardware” and activate “Diagnostics”. Diagnostics enables automatic detection of devices connected to the ApolloN and testing of it. Deactivate diagnostics after successful test.
Select “Tools” and verify the connection with iProtect™ by entering the IP address of the iProtect™ server together with port number 20100 at Netcat and press the “Test” button.

Configuration in iProtect™:

Open menu “Installation” > “Hardware” > “Line”
Click on the “Search” button.
Make a right mouse click in the tree view (left side). “Add line” appears and click on this pop-up. The line dialog will be opened.
Enter a logical description of the line in the field “Name”.
Select as Host type “ApolloN”.
Enter the correct IP address in the field “IP address”.
Under communication select “Active” and “Active (with nodes)”.
Click on the “Save” button.

When having the connection between iProtect™ and the ApolloN in place, automatically the latest software update will be installed on the ApolloN. This may take a few minutes. When finished, the “Current status” will be “Idle”.

After the ApolloN has communicated with iProtect™, the standard password will be changed. The new password will be displayed (for the root user) in the “Line details” screen.

9. The nodes (extension boards) and readers connected to the ApolloN can be automatically detected and configured in iProtect™ by clicking on the “Discover” button at the “Line details” screen.

10. To activate the readers, an access card needs to be presented twice at each reader. As soon as the LED of the reader is blinking when the card is presented, the correct card data will be stored in iProtect™.

11. Assign a reader group, e.g. All card readers to the new card reader.

12. Finally assign a card, having the correct access profile to a person and verify if access in granted. In case of access, the LED on the reader turns green for a period of 5 seconds.

10.2 New RS485 reader on RIO board

Configuring the RS485 reader:

Make sure all DIP-Switch settings are accordance with Chapter 7.1.1.1
Make sure all connections are in accordance with technical drawing, See chapter 12.

Configuration in iProtect™:

Open menu “Installation” > “Hardware” > “Line”
Click on the “Search” button.
Select the correct ApolloN.
The nodes and readers connected to the ApolloN can be automatically detected and configured in iProtect™ by clicking on the “Read in” button at the “Line details” screen.
To activate the readers, an access card needs to be presented twice at each reader. As soon as the LED of the reader is blinking when the card is presented, the correct card data will be stored in iProtect™.
Assign a reader group, e.g. All card readers to the new card reader.
Finally assign a card, having the correct access profile to a person and verify if access in granted. In case of access, the LED on the reader turns green for a period of 5 seconds.

10.3 New Clock/data- Wiegand reader on RIO board

Configuring the Clock/Data- Wiegand reader:

Make sure all DIP-Switch settings are accordance with Chapter 7.1.1.1
Make sure all connections are in accordance with technical drawing, See chapter 12.

Configuration in iProtect™:

Open menu “Installation” > “Hardware” > “Line”
Click on the “Search” button.
Select the correct ApolloN.
The nodes and readers connected to the ApolloN can be automatically detected and configured in iProtect™ by clicking on the “Read in” button at the “Line details” screen.
To activate the readers, an access card needs to be presented twice at each reader. As soon as the LED of the reader is blinking when the card is presented, the correct card data will be stored in iProtect™.
Assign a reader group, e.g. All card readers to the new card reader.
Finally assign a card, having the correct access profile to a person and verify if access in granted. In case of access, the LED on the reader turns green for a period of 5 seconds.

10.4 ApolloN - Make factory default

When it is necessary to bring the ApolloN back to Factory default, complete the following steps:

Configuration in iProtect™:

Open menu: “Installation” > “Hardware” > “Line”.
Click on the “Search” button.
Select the correct ApolloN.
Under communication deselect “Active”.
Copy or set the password of the line.
Save this record.

Configuration in ApolloN:

Browse to the maintenance page of the ApolloN.
Login with username “controller” and the line password, generated/set in iProtect.
Select the menu “Advanced”.
Press on “Reboot”. Login into the maintenance page of the ApolloN after 2 minutes.
Select the menu “Advanced”.
Press on “Make factory default”. The ApolloN will automatically reboot after 5 minutes
Login into the maintenance page of the ApolloN. Login with username “controller” and the password “ApolloN”.

The password, the O.S. settings and IP address will be set to default. The configurations and iProtect data will not be removed

10.5 ApolloN – Removing iProtect data

When it is necessary to remove the iProtect data, complete the following steps:

Configuration in iProtect™:

Open menu: “Installation” > “Hardware” > “Line”.
Click on the “Search” button.
Select the correct ApolloN.
Under communication deselect “Active”.
Copy/Set the password of the line.
Save this record.

Configuration in ApolloN:

Browse to the maintenance page of the ApolloN.
Login with username “controller” and the line password, generated/set in iProtect.
Select the menu “Advanced”.
Press on “Reboot”. Login into the maintenance page of the ApolloN after 2 minutes.
Select the menu “Advanced”.
Press on “Make clean”. The following message appears: "enabling apache"
The ApolloN can be linked with iProtect again.

The password and ip-address will not be changed. Configurations and iProtect data will be removed.

11 Datasheet

11.1 General

General
Type	19 inch, 1HE powder coated Zincor housing
Dimensions (W x H x D)	436 x 44,2 x 245 mm
Weight	3.0 Kg
IP-rate	IP22
Power (unloaded) with 3x RIO extension board	25 Watt
RIO board	3,2 Watt
Mother board
CPU type	Cortex - A9 MPCore
SD	SDHC
SSD	Format: M.2 (optional)
RTC	Yes
Cooling FAN	AXIAL FAN, 40 mm
Indicator	RGB LED
Connections
Console (OTG)	1x USB (micro)
Display connection	1x HDMI (micro)
Network connection	1x 10Mb/100Mb/1Gb
Sensor	1x Max. 10x kpSensor (T/H)
General purpose	1x RS232/RS422/RS485
Communication port	2x USB version 2.0 Type A