Secure, Reliable, and UL 294-Compliant Door Access Control with UniFi Access
UniFi Access delivers a secure, reliable, and easy-to-use access control system, designed for seamless installation and robust protection in commercial and industrial environments. For a quick start guide to UniFi Access, click here.
| Update your UniFi OS, Access application, and Access devices to the latest versions for the newest features and optimal performance. |
UL 294 Compliance
UL 294 is a security certification, developed by UL Solutions, that ensures access control systems meet strict safety, performance, and reliability standards. All UniFi Access Control Hubs and Access Readers are UL 294-certified by Eurofins MET Labs1, meeting Level 1 standards for destructive attack resistance, line security, endurance, and standby power.
To find UL 294-compliant Access devices, visit:
- techspecs.ui.com
- Eurofins MET Labs (search "Ubiquiti" under "Applicant")2
Notes:
- Eurofins MET Labs is an OSHA-accredited Nationally Recognized Testing Laboratory (NRTL). It certifies products to UL standards, ensuring compliance with industry safety regulations.
- UL 294 certification for UniFi Access is listed on Eurofins MET Labs' website, not UL Solutions.
Secure and Encrypted Data Transmission
UniFi Access ensures secure communication between Access Control Hubs and Access Readers with:
- 128-bit NaCl encryption to prevent data interception.
- AES-128 encrypted requests for confidential, tamper-proof transmissions.
- Protocol Buffers (protobuf) for structured encryption and data integrity.
Additionally, UniFi NFC cards and keyfobs, including the Access Card (UA-Card) and Pocket Keyfob (UA-Pocket), feature multi-layer encryption (AES-128 and ECDSA) to prevent unauthorized duplication and enhance security.
PoE-Based Architecture For Reliable Power & Ease-of-Use
UniFi Access simplifies installation and reduces complexity by leveraging standard Power over Ethernet (PoE), unlike traditional access control systems that rely on proprietary power and communication wiring. This approach streamlines deployment, lowers costs, and enhances system reliability.
- Simplified Wiring: PoE eliminates the need for separate power cables, reducing installation time and potential failure points.
- Encrypted Direct Connection: PoE links Access Readers directly to Access Control Hubs over a secure network connection, minimizing cyber risks.
- Resilient Power Supply: PoE ensures continuous power delivery, keeping hubs and readers operational even if the connected console malfunctions or loses internet connection.
Power Redundancy for Continuous Security
UniFi Access is designed for uninterrupted security, even in unexpected situations.
- The Mission Critical (USW-Mission-Critical) switch provides battery-backed power, keeping Access Control Hubs operational during power outages. Installation Guide
- The Enterprise Access Hub (EAH-8) supports an external backup battery (32-48V DC, 36V lead-acid), ensuring reliable power continuity. Installation Guide
Manual Override for Emergency Access
If the lock or Access Control Hub fails, the Access Rescue KeySwitch (UA-Rescue) provides a manual override for physical access.
Fail-Secure and Fail-Safe Locks
UniFi Access also supports both fail-secure and fail-safe locks to address various emergency scenarios. Learn more
Instant Security Monitoring & Event Recording
UniFi Access provides real-time monitoring, event recording, and instant alerts to enhance security and prevent unauthorized access.
- Paring with Access Readers and UniFi Protect cameras: Monitor live door activity and review unlock event recordings captured every time a door is accessed. Learn more
- Door Position Sensors (DPS): Detect door status (open/closed) and alert admins to unauthorized access. Learn more
FAQs
Can doors still unlock if the console is offline or malfunctions?
Yes. Access credentials are stored locally on the Access Control Hub. As long as the credentials (e.g., NFC cards, face data, QR codes, or PINs) have already been synced to the hub, users can continue unlocking doors even if the connected console malfunctions or loses internet connection.
Can I add new access credentials if the hub loses connection to the console?
No. New access credentials must first be saved to the UniFi Access backend and then synced to the Access Control Hub. If the hub loses connection to the console before syncing, the credentials will not take effect until the connection is restored and synchronization is complete.
If the hub loses connection to the console, will it sync automatically after reconnecting?
Yes. Once the connection between the Access Control Hub and the console is restored, the hub will automatically sync all pending updates, including unlock events and any new access credentials.
How do I replace an Access device, and will my access configurations be lost?
To replace an Access Control Hub or Access Reader, simply remove the old device and connect the new one. All access policies and access credentials are stored in the Access application, so replacing a device will not affect your existing access policies or credentials.
However, any settings stored locally on the device must be configured again on the new device:
- For hubs: Reconfigure terminal settings, unlock schedules, and paired devices in Access application > Devices > select the hub > Settings.
- For readers: Reconfigure door unlock methods and other reader settings in Access application > Devices > select a reader > Settings.
What happens if the input voltage to the Enterprise Access Hub's backup battery port exceeds 48V DC?
The Enterprise Access Hub supports an external backup battery with an input range of 32–48V DC (typically 36V lead-acid). To ensure safety, the hub includes overvoltage protection (OVP).
If the input voltage exceeds 52.5V DC, the OVP circuit will automatically cut off the battery input, disabling the backup function. If it exceeds 60V DC, an additional protection mechanism will clamp the voltage at 60V DC to prevent damage.
This built-in protection ensures the hub remains safe even when input exceeds the recommended range.
Can I connect Access devices using 4-wire PoE?
No. Access devices require a full 8-wire (4-pair) Ethernet connection for PoE. For best results, we recommend using Cat6 cabling.
- Using only 4 wires for connection may cause the Access device to malfunction.
- Using the remaining 4 wires to power a door lock may result in severe electrical interference.
What are the maximum power requirements and cable distances for Access devices using PoE over 2-Wire?
The PoE Over 2-Wire Retrofit Extender (UACC-Retrofit-PoE-2Wire) extends PoE over twisted-pair or coaxial cables, modernizing existing systems without new wiring.
The following tables show the maximum power requirements and maximum supported cable distances for UniFi Access devices when using the PoE Over 2-Wire Retrofit Extender. Distances are based on Cat5e (24 AWG UTP) cabling under standard installation conditions.
When connecting the PoE Over 2-Wire Retrofit Extender to only one Access device
| Access Device | Max Power Required (Watt) | Max Cable Distance (Meter) |
| G3 Intercom / Intercom | 13 W | 100 m |
| G3 Reader Pro / G2 Reader Pro | 7 W | 150 m |
| G3 Reader / G2 Reader | 5 W | 200 m |
| Reader Flex | 5 W | 200 m |
| Access Ultra | 18 W | 50 m |
| Intercom Viewer | 5 W | 200 m |
When connecting the PoE Over 2-Wire Retrofit Extender to an Access Starter Kit
The maximum cable distances listed below are based on connecting the PoE Over 2-Wire Retrofit Extender to the Access devices included in each kit.
For kits that do not include a PoE Over 2-Wire Retrofit Extender or PoE++ adapter, one was added during testing to ensure enough power was supplied.
If you add more devices to the same cable run, the maximum supported cable length will decrease due to increased power demand.
| Starter Kit | Test Setup | Max Power Required (Watt) | Max Cable Distance (Meter) |
|
Devices included in the kit
|
0 W | 550 m | |
|
Devices included in the kit
Additional device
|
0 W | 550 m | |
|
Devices included in the kit
Additional devices
|
0 W | 550 m | |
|
Devices included in the kit
Additional devices
|
0 W | 550 m |
- This kit does not include a PoE++ adapter; one was added during testing.
- This kit does not include a PoE Over 2-Wire Retrofit Extender; one was added during testing.