ASSA ARX Configuration for Accessy

This step-by-step guide will go through all the necessary configuration required to connect ASSA Arx with Accessy.

Configuration Steps

1. Hosting environment

2. System Requirements and Features

3. Create role for Accessy

4. Create operator template for Accessy

5. Create operator for Accessy

6. Configure SSL connection

7. Submit integration data

Hosting Environment

Accessy integrates with Assa Arx Server through the XML Import/Export module. Accessy communicates with the XML Import/Export module over the Integration server which expose the secure port 5003 (by default configuration). It is required to install a certificate from a trusted CA such as Thawte, Verisign etc. Self-signed certificates will not be accepted by accessy integration. See section ”Configure SSL connection” for further details.

• Connecting to SSL enabled on port 5003

• Firewall, port forward 5003

As the integration server runs on the Assa Arx server, the minimum requirement is to allow port forwarding and whitelist Accessy IP-address in the firewall. To increase security Accessy support usage of VPN tunneling. Using VPN, Accessy act as a VPN client and support OpenVPN and Cisco AnyConnect. Another alternative is Azure Application Proxy, contact Accessy support to be advised on how to achieve this.

2. System Requirements and Features

System Requirements:

• ASSA Arx Server

• XML Import/Export module version 3.1.13 or above.

Supported Features:

• Pulse Open

• Force Pulse Open – this feature will enable Accessy to open ARX-doors that are alarmed.

PLEASE NOTE: this will NOT deactivate any alarms, but will enable the user to open the door to disable the alarm by other means (for instance an ARX control panel).

1. Create Role for Accessy

Create a role for Accessy to use. Click ”System”, then ”Roles” and click the button ”New”. The role will need the following permissions:

• Access Areas – READ

• Access Categories – READ

• Hardware installation – READ

• Hardware installation – WRITE (If ”Force Pulse Open” is used)

• Export Data

• Schedule (access) – READ

• Pulse Open Door – WRITE

1. Create Operator Template for Accessy

Now create an operator template for Accessy. Click ”System”, then ”Operator Templates” and click the button ”New”.
Select the domain(s) containing the doors that Accessy should be able to control and add the Accessy role.
Add role by clicking the ”Document” button and selecting the Accessy role from the list.

1. Create Operator for Accessy

Finally we can now create the operator to be used by Accessy, this operator will represent the account that Accessy uses to login to the ASSA Arx Server. Click ”System”, then ”Operators” and click the button ”New”.
Fill out the form with User name etc. and click the button ”Add” in the ”Operator Templates” section. Select the operator template created in the previous step.

1. Configure SSL Connection

• In order for the communication to your ASSA Arx server to be secured by encryption, you need a trusted CA certificate.

• Put the jks file in the <ASSA Arx installation folder>/secrets/

• In the ASSA Arx Server Manager application, select “File” and then “Change System Properties”, scroll to the section labeled “Integration Server Settings” and select the jks file in the drop down box labeled “Java Keystore”. Also set the password for the jks file and the password for the keypair generated when creating the certificate.

• For details on how to create a certificate and jks file, see: UG905342A_ARX Skapa certifikat.pdf for details provided by ASSA, also provided here:

  • UG905342A_ARX Skapa certifikat.pdf

1. Submit Integration Data

To set up the integration in Accessy, you must choose a “home subscription” for it. Many customers will only have one subscription (for instance Company AB@Company AB), but if they have multiple subscriptions, please check with the customer or Accessy which subscription the integration should be connected to. This is important as it can not easily be changed afterwards.

1. Login to the partner portal at https://partner.accessy.se and select "submit integration"

2. Type the full name of the subscription.

3. Choose Axema Vaka.

4. Input the details required along with contact details.

5. Submit the data. Accessy will get back in touch once the integration is up and running.