Skip to main content

Kisi Controller Pro 1

The Kisi Controller Pro 1 is Kisi’s second generation of professional grade access controllers. It offers significant improvements to robustness, making the controller safer and more stable:

  • Short circuit protection: the controller detects and cuts short circuits in connected locking hardware (e.g. magnetic locks, strikes)
  • Overvoltage protection: the controller does not break if incorrect power supplies are attached to the power input

The Controller Pro 1 works with any existing electronic locks, such as mortise locks, electric strikes, magnetic locks ("maglocks"), and panic bars.

The administrator experience benefits include Plug & Play connectivity and allow for an efficient management and programming of in- and outgoing connectors through the Kisi dashboard.


The previous version of the Controller Pro 1, Kisi Controller Pro 1.0 is no longer sold, but it is still just as well-supported and will continue to be receiving firmware updates.

Decentralized, scalable network of controllers and readers

On your local network, Kisi operates as a decentralized system, distinct from traditional hardwired systems, and utilizes modern network protocols. Kisi allows for the connection of up to four doors per controller, but the number of readers per door is not limited by the doors' connection to a controller. This design enables Kisi to be scalable, ranging from configurations for a single door to systems for thousands of doors, with the flexibility to have varying numbers of readers per door.

Inputs and outputs

  • Four dry or wet relays wiring to door security hardware: dry, 12/24 volts direct current; wet: max 0.25 ampere x 24 volts or 0.5 ampere x 12 volts per relay
  • Contact sensors: four door contact sensor inputs
  • Request to exit (REx): four request to exit inputs

Required power input

  • 24 volts direct current at 2.5 amperes

Operating current

  • Idle current less than 0.12 ampere
  • Total power depends on the number of wet relays used

Surge protection

  • Up to 30 volts on 24 volts direct current input (including reverse polarity)
  • Up to 60 volts on relay outputs

Communication and connectivity

  • Internet: Ethernet (10BASE-T/100BASE-TX) and Wi-Fi (2.4 GHz and 5 GHz)

To connect the Kisi Controller Pro 1 to the internet, please consider the following two hardware features: a receiver that receives network credentials, and a status indicator that visualizes a controller's connectivity status.

  • BlinkUp receiver: receives wired and wireless network (Wi-Fi) credentials transmitted from mobile devices encoded through changes (increases and decreases) in the mobile device's screen brightness. For Ethernet setups, BlinkUp will not be needed as controllers can just be plugged in and connect automatically.
  • BlinkUp status indicator: indicates the controller's connectivity status through a multi-color LED.

For more information on connecting Kisi devices to the internet, please refer to Get Started - Connect to the internet. For more information on BlinkUp, please refer to the BlinkUp article.


As an internet protocol based access control system, Kisi does not require controllers and readers to be directly wired to each other. However, controllers and readers must be on the same local network for optimum performance, including offline support. Should local network communications be unavailable, controllers and readers will communicate through the internet.

Network access requirements

Kisi controllers and readers are able to connect to the Internet using both Ethernet and Wi-Fi. Ethernet is the preferred connection method and it will be prioritized over Wi-Fi. However, we recommend setting up Kisi to work with both networking options (Ethernet and Wi-Fi) for redundancy. If the Kisi Controller is located in an area with no Wi-Fi connection, it might be relevant to set up a dedicated 4G hotspot.

Controller Pro 2 devices with revision numbers under 553xxxxxx support both Ethernet and Wi-Fi. For higher revision numbers, only Ethernet is available. You can verify your revision number under Controller details.


The Kisi devices can connect to a network through a wired Ethernet connection, supporting both 10 Mbps and 100 Mbps connections.


Kisi devices can function on both 2.4 GHz and 5 GHz frequencies. They don't necessitate an open network to operate, as they can function on WPA, WPA2, and Open networks. As a best practice, we recommend installing your Kisi Controller next to the router.

Kisi devices currently do not support enterprise-level Wi-Fi authentication (802.1x), which mandates a username and password login in addition to the usual SSID. Connecting your Kisi Controller to such a network is not possible unless downgraded to 802.11n Wi-Fi operating in the 5 GHz band. Kisi devices also work seamlessly with 802.11a, 802.11b, and 802.11g networks.

Kisi devices do not support networks that require users to enter login details before granting network access (Captive Hotspot networks). This is commonly encountered in public hotspots and some guest networks in office environments.

Network address specifications

Kisi devices must have internet connectivity and initiate outbound connections only, meaning that no ports have to be open from the outside. Kisi devices will resolve DNS names for the following domains: **\***.

Network ports

For Kisi devices to initiate outbound connections, it is necessary for specific TCP and UDP ports to be allowed through your firewall. Below is a list of specific ports that need to be allowed.

31314Initial device-server connection
993Fallback device-server connection
443Fetch device firmware
80Fallback fetch device firmware
53Allow DNS lookups

A Kisi device will first attempt to connect via TCP port 31314. If this fails, it will attempt to use TCP port 993, which is typically open by default for email traffic. Ports 443 and 80 are used to request and transfer firmware updates. This port is typically open by default for HTTP/HTTPS.


By default, Kisi devices will use whichever DNS server is referenced by the local network’s DHCP server. If that DNS server is external, the firewall must allow access to it through port 53. Wi-Fi- and Ethernet-compatible Kisi devices only make outbound connections, so firewall configuration is only required if the firewall stops outbound connections.

Offline support

For offline support, Kisi devices will send messages over the local network using the User Datagram Protocol (UDP) port 62435.


  • Secure over-the-air (OTA) updates

Web based management

Dimensions, enclosure color and material

  • Board height: 4.6 in (11.7 cm)
  • Board width: 4.1 in (10.5 cm)
  • Board depth: 0.7 in (1.7 cm)
  • Enclosure height: 12 in (30.48 cm)
  • Enclosure width: 9 in (22.86 cm)
  • Enclosure depth: 3 in (7.62 cm)
  • Color: White
  • Material: ABS


  • CE
  • FCC
  • NDAA
  • RCM


Fire safety

  • Works with any off-the-shelf alarm panel, e.g. the Bosch FPA-1000 Fire Panel
  • If you’re installing the fire alarm control panel (FACP) yourself, we recommend introducing an external power supply with FACP input to override access control