AJAX Hub 2 Plus Tag and Pass Security System User Manual

: June 13, 2024
: ajax

Table of Contents

AJAX Hub 2 Plus Tag and Pass Security System
Appearance
Operating principle
States
Setting up
Use
Tech specs
Warranty
Documents / Resources

AJAX Hub 2 Plus Tag and Pass Security System

Tag and Pass are encrypted contactless access devices for managing thesecurity modes of the Ajax security system. They have the same functions anddiffer only in their body: Tag is a key fob, and Pass is a card.

Appearance

AJAX Hub 2 Plus Tag and Pass Security System
1

Pass
Tag

Operating principle

Tag and Pass allow you to manage an object’s security without an account, access to the Ajax app, or knowing the password — all it takes is activating a compatible keypad and putting the key fob or card to it. The security system or a specific group will be armed or disarmed. To quickly and securely identify users, KeyPad Plus uses the technology. DESFire® is based on the ISO 14443 international standard and combines 128-bit encryption and copy protection. Tag and Pass usage is recorded in the events feed. The system administrator can at any time revoke or restrict the access rights of the contactless identification device through the Ajax app.

Types of accounts and their rights
Tag and Pass can work with or without user binding, which affects the notification texts in Ajax app and SMS.

With user binding
The username is displayed in the notifications and events feed.

AJAX Hub 2 Plus Tag and Pass Security System 3

Tag and Pass can work with several hubs at the same time. The maximum number of hubs in the device memory is 13. Keep in mind that you need to bind a Tag or Pass to each of the hubs separately through the Ajax app. The maximum number of Tag and Pass devices connected to a hub depends on the hub model. At the same time, the Tag or Pass does not affect the total limit of devices on the hub.

Hub model	Number of Tag and Pass devices
Hub Plus	99
---	---
Hub 2	50
Hub 2 Plus	200

One user can bind any number of Tag and Pass devices within the limit of contactless identification devices on the hub. Keep in mind that devices remain connected to the hub even after all keypads have been removed.

Sending events to the monitoring station
The Ajax security system can connect to the monitoring station and transmit vents to the CMS via Sur-Gard (Contact-ID), SIA (DC-09), ADEMCO 685, and other proprietary protocols. A complete list of supported protocols is available here. When a Tag or Pass is bound to a user, arm and disarm events will be sent to the monitoring station with the user ID. If the device is not bound with the user, the hub will send the event with the device identifier. You can find the device ID in the STATUS menu.

Adding to the system

WARNING : The devices are incompatible with the hub type of HUB, third- party security central panels, and OCBRIDGE PLUS and UART BRIDGE integration modules. Pass and Tag only work with KeyPad Plus keyboards.

Before adding a device

Install the AJAX app. Create an account. Add a hub to the app and create at least one room. Ajax app account.
Make sure that the hub is on and has access to the internet (via Ethernet cable, Wi-Fi, and/or mobile network). You can do this in the Ajax app or by looking at the hub logo on the front panel — the hub lights white or green when connected to the network.
Make sure the hub is not armed nor updated by looking at its status in the Ajax app.
Make sure a compatible keypad with DESFire® support is already connected to the hub.
If you want to bind a Tag or Pass to a user, make sure that the account has already been added to the hub.

How to add a Tag or Pass to the system

Open the Ajax app. If your account has access to multiple hubs, select the one to which you want to add a Tag or Pass.
Go to the Devices tab.
Click Add Device
From the drop-down menu, select Add Pass/Tag
Specify the type (Tag or Pass), color, device name, and name (if necessary).
Click Next. After that, the hub will switch to the device registration mode.
Go to any compatible keypad with Pass/Tag Reading enabled, and activate it —the device will beep (if enabled in the settings), and the backlight will light-up. Then press the disarming key. The keypad will switch to the access device logging mode.
Put Tag or Pass with the wide side to the keypad reader for a few seconds. It is marked with wave icons on the body. Upon successful addition, you will receive a notification in the Ajax app.

AJAX Hub 2 Plus Tag and Pass Security System 4

If the connection fails, try again in 5 seconds. Please note that if the maximum number of Tag or Pass devices has already been added to the hub, you will receive a corresponding notification in the Ajax app when adding a new device.
Tag and Pass can work with several hubs at the same time. The maximum number of hubs is 13. Keep in mind that you need to bind devices to each of the hubs separately through the Ajax app.
If you try to bind a Tag or Pass to a hub that has already reached the hub limit(13 hubs are bound to them), you will receive a corresponding notification. To bind such a Tag or Pass to a new hub, you will need to reset it (all data from the tag/pass will be erased).

States

How to reset a Tag or Pass

Go to the Devices tab.
Select Passes/Tags.
Select the required Tag or Pass from the list.
Parameter| Value
---|---

User

| The name of the user to which Tag or Pass is bound.

If the device is not bound to a user, the field displays the text Guest

Active

| Displays the status of the device:

Yes No

Identifier

| Device identifier. Transmitted in events that are sent to the CMS

Setting up

Tag and Pass are configured in the Ajax app:

Go to the Devices tab.
Select Passes/Tags.
Select the required Tag or Pass from the list.
Go to Settings by clicking on the SETTING icon.

Parameter	Value
Select device type	Tag or Pass
Colour	Choice of Tag or Pass colour: black or white

Device name

| Displayed in the list of all hub devices, SMS texts, and notifications in the events feed.

The name can contain up to 12 Cyrillic characters or up to 24 Latin characters.

To edit, click on the pencil icon

---|---

User

| Select the user to which Tag or Pass is bound.

When a device is bound to a user, it has the same security management rights as the user

Learn more

Security management

| Selection of security modes and groups that can be managed by this Tag or Pass.

The field is displayed and active if Tag or Pass is not associated with the user

Active

| Allows you to temporarily disable Tag or Pass without removing the device from the system

User Guide

| Opens the Tag and Pass User Manual in the Ajax app
Unpair device| Removes Tag or Pass and its settings from the system.

There are two options for removing: when Tag or Pass is placed nearby, or access to it is absent.

If Tag or Pass is nearby:

1. Start the device removal process.

2. Go to any compatible keypad and activate it.

3. Press the disarming key . The keypad will change to access devices removal mode.

4. Bring the Tag or Pass to the keypad reader. It is marked with wave icons on the body. Upon successful removal, you will receive a notification in the Ajax app.

When you delete a Tag or Pass in this way, they disappear from the list of hub devices in the application.

Binding a Tag or Pass to a user

When a Tag or Pass is linked to a user, it fully inherits the rights to manage the user’s security modes. For example, if a user was able to manage only one group, then the bound Tag or Pass will have the right to manage only this group. User rights and permissions are stored in the hub. After being bound to a user,Tag and Pass represent the user in the system if devices are bound to the user. Therefore, when changing user rights, you do not need to make changes to theTag or Pass settings — they are applied automatically.

To bind a Tag or Pass to a user, in the Ajax app:

Select the required hub if there are several hubs in your account.
Go to the Devices menu.
Select Passes/Tags.
Select the required Tag or Pass.
Click on the to go to settings.
Select a user in the appropriate fi eld.
Click Back to save the settings.

Temporarily deactivating a Tag or Pass

The Tag key fob or the Pass card can be temporarily disabled without removing them from the system. A deactivated card cannot be used to manage security modes. If you try to change the security mode with a temporarily deactivated card or keyfob more than 3 times, the keypad will be locked for the time set in the settings(if the setting is enabled), and corresponding notifi cations will be sent to the system users and to the security company monitoring station.

To temporarily deactivate a Tag or Pass, in the Ajax app:

Select the required hub if there are several hubs in your account.
Go to the Devices menu.
Select Passes/Tags.
Select the required Tag or Pass.
Click on the to go to settings.
Disable the Active option.
Click Back to save the settings.

Resetting a Tag or Pass

Up to 13 hubs can be bound to one Tag or Pass. As soon as this limit is reached, binding new hubs will only be possible after completely resetting Tag or Pass. Note that resetting will delete all settings and bindings of key fobs and cards. In this case, the reset Tag and Pass are only removed from the hub from which the reset was made. On other hubs, Tag or Pass are still displayed in the app, butthey cannot be used to manage the security modes. These devices should be removed manually. When protection against unauthorized access is enabled, 3 attempts to change the security mode with a card or key fob that has been reset in a row block the keypad. Users and a security company are instantly notified. The time of blocking is set in the device settings.

To reset a Tag or Pass, in the Ajax app:

Select the required hub if there are several hubs in your account.
Go to the Devices menu.
Select a compatible keypad from the device list.
Click on to go to settings.
Select the Pass/Tag Reset menu.
Go to the keypad with pass/tag reading enabled and activate it. Then press the disarming key. The keypad will change to the access device formatting mode.
Put the Tag or Pass to the keypad reader. It is marked with wave icons on the body. Upon successful formatting, you will receive a notification in the Ajax app.

Use

The devices do not require additional installation or fastening. The Tag key fob is easy to carry with you thanks to a special hole on the body. You can hang the device on your wrist or around your neck, or attach it to the key ring. The Passcard has no holes in the body, but you can store it in your wallet or phone case. If you store a Tag or Pass in your wallet, do not place other cards next to it, such as credit or travel cards. This may interfere with the correct operation of the device when attempting to disarm or arm the system.

To change the security mode:

Activate KeyPad Plus by swiping over it with your hand. The keypad will beep (if enabled in the settings), and the backlight will light up.
Put the Tag or Pass to the keypad reader. It is marked with wave icons on the body.
Change the security mode of the object or zone. Note that if the Easy armed mode change option is enabled in the keypad settings, you do not need to press the security mode change button. The security mode will change to the opposite after holding or tapping Tag or Pass.

Using Tag or Pass with Two-Stage Arming enabled

Tag and Pass can participate in two-stage arming, but cannot be used assecond- stage devices. The two-stage arming process using Tag or Pass issimilar to arming with a personal or general keypad password.

Maintenance
Tag and Pass are battery-free and maintenance-free.

Tech specs

Technology used	DESFire®
Operating standard	ISO 14443-А (13.56 MHz)
Encryption	+
Authentication	+
Protection from signal interception	+
Possibility to assign the user	+
Maximum number of bound hubs	Up to 13
Compatibility	KeyPad Plus
Operating temperature range	From -10°C to +40°C
Operating humidity	Up to 75%

Overall dimensions

| Tag: 45 × 32 × 6 mm

Pass: 86 × 54 × 0,8 mm

Weight

| Tag: 7 g

Pass: 6 g

Complete Set

Tag or Pass — 3/10/100 pcs (depending on the kit).
Quick Start Guide.

Warranty

Warranty for the Limited Liability Company “Ajax Systems Manufacturing” products is valid for 2 years after the purchase. If the device does not function correctly, please contact the Support Servicefi rst. In half of the cases, technical issues can be solved remotely.
Quick Start Guide.
Warranty obligations
User Agreement
support@ajax.systems

Documents / Resources

| AJAX Hub 2 Plus Tag and Pass Security System [pdf] User Manual
Hub Plus, Hub 2, Hub 2 Plus, Hub 2 Plus Tag and Pass Security System, Tag and Pass Security System, Pass Security System, Security System
---|---