Genetec ACS Integration Configuration Guide

* Cloud-hosted Platforms require an ACS Integration Proxy application to be installed on the same network as the access control system server. Contact AAI Support to obtain this software.

Notes on Operation

In the current implementation, the ACS Integration will delete profiles that do not have at least one badge that is also present in the ACS. Profiles will be deleted if all associated cards are deleted in the ACS. This includes the scenario whereby a cardholder's 'lost' card is deleted before a replacement card is added.

Genetec User Creation

The following procedure describes creating a User in Security Center that the Alcatraz Platform will use for syncing with the Genetec system via the WebSDK.

Role Creation

1. In the Genetec Config Tool, navigate to "System" and then "Roles"
2. Click Add an entity, give it a name, select a partition, and click Next.
3. Review the Role and click Create to continue.
4. Finally, you will see the default port and URI settings.

User Creation

1. In the Genetec Config Tool, under "User Management," create a User and assign them the role created above.

Alcatraz Proxy Service Installation (Cloud-Hosted Only)

Cloud-hosted Platforms require an ACS Integration Proxy application to be installed on the same network as the access control system server. Contact AAI Support to obtain this software.

1. In the Alcatraz Admin Portal, download the certificate in PEM format, as shown in the "Genetec Integration Configuration" section below.
2. Copy the certificate to the server where the Proxy Service will be installed. In the screenshot below, the certificate was placed in the "C:\Program Files\Certificate" directory.
3. Run the Alcatraz Proxy installation file 'as an administrator'.
4. Configure the following directory items and click Next:
   1. Installation Directory:  C:\Program Files\Alcatraz AI\Proxy (default)
   2. Data Directory:  C:\ProgramData\Alcatraz AI\Proxy (default)
   3. Certificate Directory:  C:\Program Files\Certificate (default)
   4. Certificate Name:  "acs_public_certs.pem" (default)
5. Click Next on the "Certificate Settings" screen.
6. Enter the hostname or IP address and the port number (3300) that the ACS Integration service will use to connect to the Alcatraz Platform. For example, "acs.us.alcatraz.ai:3300".
7. Click Next to complete the installation.

Genetec Integration Configuration

Main Settings

Click Enable ACS Integration and followed by Edit ACS Configuration:

Enter the following details:

• ACS Integration: Genetec
• Host URL:
  • (new installation) https://<DNS_or_IP_of_Genetec>:4590/WebSdk
  • (existing profiles) https://badURL (IMPORTANT! - SEE WARNING ABOVE)
• Username: {the Security Center User created previously}
• Password: {the Security Center User created previously}
• Custom Field: {unused}
• Schedule Full Sync: {daily time for full sync}
• Send Security Events: {Optionally send Alcatraz Security Events to Security Center}
• Use Proxy: {Enable for Cloud-hosted*, Disable for On-Prem}

Notes:

• Click Test Connection to verify communications with Genetec. If the integration comes ‘online’, click Save. If a false URL was entered, just click Save and confirm communications later in the process.
• ACS Integration status can be seen at the top of the “Account” page and in the “ACS Integration” section under “Account.”
• ^*Cloud-hosted systems will need to download a PEM certificate. This certificate is required during the installation of the Proxy Service to secure the communications between the Proxy and the Cloud Platform. See earlier in this article for more details regarding installing the Proxy service.

Facility Code Mapping

Assign facility codes to card formats for the badges that the Alcatraz Platform should sync with Genetec.

ACS Integration Logs

The ACS Integration section contains ACS Integration logs and a button to initiate a full sync.

Map Genetec Card Readers to Rocks

Click Add Reader and map each Rock to a reader in Genetec.

Update the "False" URL (if needed)

This step is only required if a "False" URL was entered above for the WebSDK to prevent profiles from being deleted.

Once all configurations are completed, update the WebSDK URL to the proper address and click Save:

• Host URL: https://<DNS_or_IP_of_Genetec>:4590/WebSdk