Kisi Reader Pro 2
The Kisi Reader Pro 2 is Kisi’s second Pro generation access control reader for organizations of any size wishing to provide modern access control solutions to their members.
The user experience is simple yet effective: whenever a user presents an NFC card or a smartphone to the reader, information about the credential is transmitted to the Kisi Controller through the cloud or the local network. The Kisi Reader provides visual feedback through an LED circle, its colors differing depending on the result of the unlock attempt.
Decentralized, scalable network of controllers and readers
On your local network, Kisi operates as a decentralized system, distinct from traditional hardwired systems, and utilizes modern network protocols. Kisi allows for the connection of up to four doors per controller, but the number of readers per door is not limited by the doors' connection to a controller. This design enables Kisi to be scalable, ranging from configurations for a single door to systems for thousands of doors, with the flexibility to have varying numbers of readers per door.
Key features
- Credentials: Physical (LF/RFID, HF/NFC) and mobile (BLE, NFC)
- Users: Unlimited (depending on license)
- Cloud management: Cloud-based web app with cloud updates and potential local cache
- Updates: Over-the-air (OTA) updates that complete within seconds
- Offline support: Fully encrypted and authenticated offline support for both cards and phones
- Feedback: Audio-visual feedback for unlock and other events
- Security: Secure boot, Secure OTA, secure memory and secure connectivity
- Ingress protection: all-weather proof, waterproof
Credentials
- MotionSense-enabled
- Android and iOS smartphones (BLE, NFC)
- High frequency (HF/NFC) encrypted Kisi cards, fobs and tags
- Low frequency (LF/RFID) cards, fobs and tags:
- HID H10301 (26-bit card)
- HID H10302 (37-bit card)
- HID H10304 (37-bit card)
For any card formats not listed above, please contact Kisi Support.
Power connectivity
- PoE
- Low voltage (12-24 volts of direct current)
Power consumption
- PoE Class 2 powered device with 6.49 watts maximum power consumption
- Maximum 0.5 amperes at 12 volts of direct current
- Maximum 0.25 amperes at 24 volts of direct current
- Idle power consumption less than 3 watts
Frequency
- 125 kHz
- 13.56 MHz
Communication and connectivity
- Internet: Ethernet (PoE supported), Wi-Fi (2.4 GHz and 5 GHz)
- LF/RFID, HF/NFC read range: Up to 0.75 in (1.9 cm)
- BLE Tap to Unlock range: Up to 0.75 in (1.9 cm)
To connect the Kisi Reader Pro 2 to the internet, please consider the following two hardware features: a receiver that receives network credentials, and a status indicator that visualizes a reader's connectivity status.
- BlinkUp receiver: receives wired and wireless network (Wi-Fi) credentials transmitted from mobile devices encoded through changes (increases and decreases) in the mobile device's screen brightness. For most Ethernet setups, BlinkUp will not be needed as readers can just be plugged in and connect automatically.
- BlinkUp status indicator: indicates the reader's connectivity status through a multi-color LED.
For more information on connecting Kisi devices to the internet, please refer to Get Started - Connect to the internet. For more information on BlinkUp, please refer to the BlinkUp article.
As an internet protocol based access control system, Kisi does not require controllers and readers to be directly wired to each other. However, controllers and readers must be on the same local network for optimum performance, including offline support. Should local network communications be unavailable, controllers and readers will communicate through the internet.
Network access requirements
Kisi controllers and readers are able to connect to the Internet using both Ethernet and Wi-Fi. Ethernet is the preferred connection method and it will be prioritized over Wi-Fi. However, we recommend setting up Kisi to work with both networking options (Ethernet and Wi-Fi) for redundancy. If the Kisi Controller is located in an area with no Wi-Fi connection, it might be relevant to set up a dedicated 4G hotspot.
Kisi Controller Pro 2 devices with revision numbers under 553xxxxxx support both Ethernet and Wi-Fi. For higher revision numbers, only Ethernet is available. You can verify your revision number under Controller details.
Ethernet
The Kisi devices can connect to a network through a wired Ethernet connection, supporting both 10 Mbps and 100 Mbps connections.
Wi-Fi
Kisi devices can function on both 2.4 GHz and 5 GHz frequencies. They don't necessitate an open network to operate, as they can function on WPA, WPA2, and Open networks. As a best practice, we recommend installing your Kisi Controller next to the router.
Kisi devices currently do not support enterprise-level Wi-Fi authentication (802.1x), which mandates a username and password login in addition to the usual SSID. Connecting your Kisi Controller to such a network is not possible unless downgraded to 802.11n Wi-Fi operating in the 5 GHz band. Kisi devices also work seamlessly with 802.11a, 802.11b, and 802.11g networks.
Kisi devices do not support networks that require users to enter login details before granting network access (Captive Hotspot networks). This is commonly encountered in public hotspots and some guest networks in office environments.
Network address specifications
Kisi devices must have internet connectivity and initiate outbound connections only, meaning that no ports have to be open from the outside. Kisi devices will resolve DNS names for the following domains: *.electricimp.com
.
Network ports
For Kisi devices to initiate outbound connections, it is necessary for specific TCP and UDP ports to be allowed through your firewall. Below is a list of specific ports that need to be allowed.
Port | TCP | UDP | Usage |
---|---|---|---|
31314 | ✓ | Initial device-server connection | |
993 | ✓ | Fallback device-server connection | |
443 | ✓ | Fetch device firmware | |
80 | ✓ | Fallback fetch device firmware | |
53 | ✓ | Allow DNS lookups |
A Kisi device will first attempt to connect via TCP port 31314. If this fails, it will attempt to use TCP port 993, which is typically open by default for email traffic. Ports 443 and 80 are used to request and transfer firmware updates. This port is typically open by default for HTTP/HTTPS.
By default, Kisi devices will use whichever DNS server is referenced by the local network’s DHCP server. If that DNS server is external, the firewall must allow access to it through port 53. Wi-Fi- and Ethernet-compatible Kisi devices only make outbound connections, so firewall configuration is only required if the firewall stops outbound connections.
Offline support
For offline support, Kisi devices will send messages over the local network using the User Datagram Protocol (UDP) port 62435.
Feedback
This section outlines the various front LED feedback colors of the Kisi Reader Pro 2.0, grouped by events and scenarios.
When connecting the Kisi Reader Pro 2.0 to the internet, please refer to additional feedback states of other LEDs here.
Access attempt
Scenario | MotionSense Enabled | MotionSense Disabled | |
---|---|---|---|
Idle | White | White | |
No phone around | Breathing > Idle | No reaction | |
Phone is too far | Breathing > Blinking White > Idle | No reaction | |
Phone is close enough | Irrelevant user (wrong organization, not signed in, ...) | Breathing > Idle | No reaction |
No access rights | Breathing > Red > Idle | Breathing > Red > Idle | |
Has access rights | Breathing > Green > Idle | Breathing > Green > Idle | |
Kisi/3rd party HF card | Not enrolled | Breathing* > Idle | No reaction |
No access rights | Breathing* > Red > Idle | Breathing > Red > Idle | |
Has access rights | Breathing* > Green > Idle | Breathing > Green > Idle | |
RFID card | Not enrolled | Breathing* > Red > Idle | Breathing > Red > Idle |
No access rights | Breathing* > Red > Idle | Breathing > Red > Idle | |
Has access rights | Breathing* > Green > Idle | Breathing > Green > Idle |
* When a card triggers the proximity sensor under the LED, the "breathing" light indicates the reader is searching for a phone, not detecting the card. For consistent feedback, hold the card in place until you receive feedback.
Configuration
Scenario | Reaction |
---|---|
Reader offline and can connect to its controller | See Idle |
Reader offline and cannot connect to its controller | Red |
Reader assigned to a resource | Bright White |
Reader not assigned to a resource | Dim White |
Alarms
Scenario | Reaction |
---|---|
Door held open alarm | Alternating Green And Yellow |
Intrusion detection | Alternating Blue And Red |
Defects
Scenario | Reaction |
---|---|
Bluetooth failing | Solid Blue |
Dimensions, color, material
- Height: 4.84 in (12.3 cm)
- Width: 1.97 in (5.0 cm)
- Depth: 0.61 in (1.5 cm)
- Reaction: black
Optional backplate:
- Height: 5.83 in (14.8 cm)
- Width: 2.95 in (7.5 cm)
- Depth: 0.12 in (0.3 cm)
- Reaction: black
Environmental specifications
- Operating temperature: –4°F to 122°F (-20°C to 50°C)
- Storage temperature: –4°F to 185°F (-20°C to 85°C)
Controller compatibility
- Kisi Controller Pro 1
- Kisi Controller Pro 2
Compliance
- CE
- FCC
- NDAA
- RCM
Mounting
- Ships with an aluminum mounting frame
- Can be mounted both on LV1 Mounting Bracket and on metallic profile
Tamper protection
The Kisi Reader Pro 2 is equipped with a magnetic sensor that detects if the reader is removed from the wall. Removal should not occur during normal operations, as it indicates tampering. Whenever tampered with, the reader will send a tamper event to the Kisi Cloud. Additionally, if the door assigned to the reader is part of an intrusion detection zone, the zone will turn on its alarm.
- Tamper protection can be enabled or disabled when configuring reader permissions.
- Tampered readers can be reset from the readers' overview page.