Short answer: IDEX Total Access comes as two cards: a contactless card with DESFire and FIDO2, and a contact-and-contactless card with FIDO2. Most of what makes them secure is the same for both and cannot be changed after delivery. What you choose when ordering is the card, whether FIDO2 sign-in is included, and the artwork. Door credentials are configured by your integrator after delivery, and each user sets their own PIN at first use.
The two cards
The choice is normally decided by one question: do you need a contact interface? The contactless card is the standard for physical access and digital sign-in. The contact-and-contactless card is for contact readers, and does not carry DESFire.
| Contactless card – DESFire and FIDO2 | Contact and contactless card – FIDO2 | |
|---|---|---|
| Product code | IDX5102 | IDX5101 |
| Typical use | Contactless physical access and digital sign-in | Digital sign-in where a contact reader is used |
| Secure element | NXP P71 | Infineon SLC38 |
| Interfaces | Contactless | Contactless and contact |
| Door credentials | MIFARE DESFire EV3 | – |
| Digital sign-in | FIDO2 – optional, included by default | FIDO2 |
| Enrolment | Up to 2 fingers, 6 touches per finger | Up to 2 fingers, 4 touches per finger |
| False rejection rate (FRR) | 0.2% | <1.5% |
The product code on your order sheet or delivery note tells you which card you have.
Same for both cards
These are set when the cards are produced and cannot be changed after delivery.
| Property | Both cards |
|---|---|
| Passkeys the card can hold | Up to 50 |
| AAGUID | 49a15c1c-3f63-3f51-23a7-b9e00096edd1 |
| False acceptance rate (FAR) | <1:20 000 |
| Verification time | <250 ms |
| Secure element certification | CC EAL6+ |
| Power | Reader-powered, from 1.3 A/m – no battery |
| Fingerprint attempts before block | 19 in a row |
| PIN attempts before block | 30 in a row |
The PIN limit applies to cards enrolled with the IDEX Card app; on station-enrolled cards, fingerprint management is protected by the station's master key instead. See: Forgotten PIN or too many wrong attempts, Set your PIN and Supported door readers.
Chosen when ordering
- Card – the contactless card unless you need a contact interface. Sales will help you establish which applies.
- FIDO2 sign-in – included by default. Cards can be ordered without it.
- Artwork – IDEX-branded by default, with the IDEX logo on the back. If you print your own cards, order them blank. IDEX does not offer photo, name or number personalisation.
Configured after delivery
- Door credentials are encoded and registered on the card by your integrator, before fingerprints are enrolled. See: How do I register an application to use biometrics? and What happens when there is no biometric match?.
- The PIN is set by the user the first time the card is used. See: Set your PIN.
- Fingerprints are enrolled by the user in the app, or at an enrolment station. See: Fingerprint enrolment options.
Next step
If you know what you need, Get a price quote. If you want help choosing, Contact Sales. See: Ordering cards.