Help Center Help Articles Professional Support Professional Integrators Community RMA & Warranty Downloads Tech Specs

Unlocking Reliability: Security with UniFi Access

In today's security landscape, trust is essential. UniFi Access offers reliable protection, built on simplicity, reliability, and security. Let’s delve deeper into how UniFi Access redefines access control, providing a comprehensive solution that ensures peace of mind through meticulous design, robust implementation, and thoughtful considerations.

Security Features

Simplicity Meets Reliability: Direct PoE Connection

UniFi Access champions the use of direct Power over Ethernet (PoE) connections to streamline and fortify power supply to security hubs and readers. This design choice eliminates the need for separate power cables, reducing installation complexity and potential points of failure. Even in challenging circumstances, PoE ensures a seamless and uninterrupted power supply.

  • Ensuring Secure Communication: The direct PoE connection between UniFi Access Readers and Access Control Hubs guarantees a secure link with no intermediary devices or network segments. This direct connection minimizes the risk of eavesdropping, ensuring that the communication between the reader and the hub is protected from potential cyber threats.
  • Enhancing Reliability: Unlike many systems that fail if the network or the UniFi Console goes down, the UniFi Access Control Hub acts independently as the brain of the operation. It stores all credential information and makes access decisions autonomously. As long as the Access Control Hub is powered, it can continue to operate and grant access even if the broader network or console experiences outages.
    • Scenario: In the event of a network outage, PoE connections maintain power to access readers and hubs, ensuring continuous operation and security. The Door Hub’s ability to function independently ensures that your security system remains resilient and reliable under adverse conditions.

Installation.png

Trusted Guardians: Fail-Secure and Fail-Safe Locks

UniFi Access incorporates both fail-secure and fail-safe locks to address various emergency scenarios effectively. Understanding these terms is crucial for appreciating how they enhance security:

  • Fail-Secure Locks: In the event of a power loss, fail-secure locks remain locked. This feature is essential for maintaining security and preventing unauthorized access when power is interrupted. These locks are ideal for securing sensitive or high-risk areas where unauthorized entry must be prevented at all costs.
  • Fail-Safe Locks: Conversely, fail-safe locks unlock during a power loss. This mechanism ensures that occupants can exit safely during emergencies, such as fire alarms. Fail-safe locks are typically used on doors that need to provide a safe egress path for building occupants.

UniFi Access offers:

  • Magnetic Lock (UA-Lock-Magnetic): Designed to be fail-safe, ensuring doors unlock during power loss to facilitate safe evacuation during emergencies.
  • Electric Lock (UA-Lock-Electric): These are fail-secure, ensuring doors remain locked to protect against unauthorized access even when power is unavailable.
    • Scenario: During a fire emergency, fail-safe locks ensure occupants can exit quickly, while fail-secure locks protect critical areas from unauthorized access despite power failures.

Setting the Standard: UniFi Access’ Proprietary Security Protocol

UniFi Access doesn't just meet industry standards; we set them. Our proprietary security protocol is the cornerstone of our commitment to uncompromising security. Below, we'll delve into what sets our protocol apart from the rest.

Data Transmission Encryption

  • Secure Communication: UniFi Access secures communication between Access Control Hubs and Access Readers using NaCl encryption with 128-bit keys. This provides a high level of security and ensures data transmission integrity, protecting against potential interception by malicious actors.
  • Request Encryption: All requests between Access Readers and Access Control Hubs are encrypted using NaCl (AES-128 bit). This encryption secures the transmission, ensuring that any data exchanged remains confidential and tamper-proof.
  • Data Encapsulation: Data exchanged between Access Control Hubs and Access Readers is encapsulated using Protocol Buffers (protobuf). This enhances security and data integrity through structured and efficient data serialization, providing an additional layer of protection.
  • Per-Site Token Encryption
  • Unique Key Generation: The per-site token mechanism generates keys specifically for encrypting tokens written into Access Cards (UA-Card) and Pocket Keyfobs (UA-Pocket). This ensures a secure and unique encryption process for each site, enhancing the overall security of the system.
  • Streamlined Cabling Solutions: Unlike conventional systems that often require complex wiring setups, our protocol simplifies installation with streamlined cabling solutions. By leveraging PoE technology, we reduce wiring complexities and potential points of vulnerability. This streamlined approach not only enhances security but also ensures easier deployment and maintenance of access control systems.
  • Enhanced Authentication Mechanisms: UniFi Access' proprietary protocol implements robust authentication mechanisms to verify the identity of users and devices. From mutual authentication between access readers and hubs to secure token exchange, every interaction is meticulously safeguarded. This multi-layered approach to authentication adds an extra layer of security, protecting against unauthorized access attempts and potential breaches.

Fortifying Your Defense: Access Credential Encryption

UniFi Access Cards and Keyfobs employ multi-layer encryption, including AES 128-bit and ECDSA, to prevent unauthorized duplication. This approach ensures that each credential is uniquely encrypted, offering high levels of security without added complexity.

  • Scenario: Attempted duplication of an access card is thwarted by the advanced encryption, ensuring that cloned cards cannot compromise the access system.

Resilience Features

Confidence in Contingencies: Power Redundancy and Manual Override

UniFi Access prepares for the unexpected by integrating power redundancy and manual override mechanisms. Solutions like the Switch Mission Critical (USW-Mission-Critical) provide backup power, ensuring that access hubs remain operational during power outages. Additionally, the Enterprise Access Hub (EAH-8) offers an interface for an external backup battery. Backup power for the Enterprise Access Hub can be achieved by utilizing its 32-48V DC supply to connect to a lead-acid battery, offering a versatile backup power solution. The battery, rated at 36V, accepts a range of 32-48V. Learn more in the Enterprise Access Hub’s Installation Guide. Furthermore, the UniFi Rescue KeySwitch (UA-Rescue) provides a manual override, allowing physical access when electronic systems fail.

  • Scenario: During a prolonged power outage, Mission Critical ensures that access hubs continue to function, while the Rescue KeySwitch provides a manual means to unlock doors if needed.

Vigilance in Every Detail: Instant Access Event Notifications and Recordings

Integrated cameras in UniFi Access Readers, such as the G2 Reader Pro (UA-G2-Pro), record each door unlock event. This feature provides real-time surveillance and detailed event tracking, enhancing security monitoring. In addition to the cameras on the G2 Pro reader, UniFi Access can pair with UniFi Protect cameras at specific locations. When any activity, such as someone entering or exiting, is detected, the paired camera will also record the event.

The UniFi Access Hub (UA-Hub) functions similarly, connecting to door position sensors (DPS) to monitor door status. These sensors detect whether a door is open or closed, alerting administrators to unauthorized or abnormal openings, which could pose potential risks (e.g., fire doors that should remain closed). Admins can monitor door status remotely using the UniFi Access application and mobile app. For a cost-effective solution that eliminates the need for additional DPS installation, consider using Magnetic Locks (UA-Lock-Magnetic-270kg or UA-Lock-Magnetic-540kg), which come with built-in DPS.

By integrating these advanced monitoring and alert systems, UniFi Access ensures comprehensive security vigilance and immediate response capabilities.

  • Scenario: In case of unauthorized access, the recorded footage can be reviewed to identify the intruder, providing valuable evidence for security personnel.

Compliance and Assurance

Certified Assurance: UL 294 Compliance

At UniFi Access, we prioritize not just meeting industry standards, but exceeding them. That's why our devices undergo rigorous testing and certification to ensure they meet the highest standards of security and reliability. Let's delve into what UL 294 compliance means and why it matters:

  • Understanding UL 294: UL 294 is a certification standard established by Underwriters Laboratories (UL), a globally recognized independent safety science company. This standard specifically addresses access control systems, setting requirements for various aspects, including functionality, performance, and safety.
  • What UL 294 Compliance Entails: Compliance with UL 294 signifies that our access control devices have undergone thorough testing and evaluation by accredited laboratories. This testing covers a range of criteria, including destructive attack resistance, line security, endurance, and standby power. By meeting these stringent requirements, our products demonstrate their reliability and suitability for use in commercial and industrial settings.
  • Clarifying Certification Labels: Users may encounter various certification labels, such as UL, ETL, MET, and NRTL (Nationally Recognized Testing Laboratory), and wonder what they mean. UL and ETL are both NRTLs accredited by the Occupational Safety and Health Administration (OSHA) to perform safety testing and certification. MET Labs is another NRTL that conducts testing and certification in compliance with UL standards. These labels indicate that a product has been tested and certified by an accredited laboratory, providing assurance of its safety and quality.
  • Where to Verify Certification: Users can easily verify the UL 294 compliance of UniFi Access products by visiting the certification body's website. UniFi Access devices have been tested and certified by Eurofins MET Labs as UL 294 compliant, meeting Level 1 testing requirements for destructive attack, line security, endurance, and standby power. To find UL 294-compliant UniFi Access products, visit the Eurofins MET Labs link, select "Applicant" in the "Search by" field, and enter "Ubiquiti." This allows users to confirm the certification status of specific products and ensure they meet the highest standards of safety and reliability. Note that UL 294 compliance information for UniFi Access products can be found on MET's website rather than on UL Solutions' website.

Was this article helpful?