Short answer: Once a card is encoded and enrolled, add it to your access control system as you would any other DESFire card, then verify it with a fingerprint match and without one. Only grant permissions to the credential after enrolment is complete.
Prerequisites:
- Encoding DESFire credentials on IDEX cards
- Supported door readers
- An IDEX card that has been encoded and enrolled
When a card is successfully read by a door reader with a biometric match, your access management system will see the credential value saved on the card. As with any other DESFire credential, this credential value must be given permissions by the access control system for it to be authorised to open a door.
This is commonly achieved either by attempting access with the credential and then checking the access control system for the credential, or by adding the credential to the system automatically or manually depending on the credential generation system.
It is generally recommended to only grant permissions to a biometric credential after biometric enrolment or after revoking biometric management rights, so a card being lost or stolen does not pose a security risk.
It is also recommended, when adding credentials by attempting access, to attempt access with both a biometric match and a biometric no-match to ensure that biometric enrolment and configuration was successful. If it was successful, the card's credential should appear only once in your access control system.
Detailed configuration documentation
Detailed documentation on how to encode door credentials on IDEX cards, how biometric protection of credentials works, and how to configure your access control system for it, is available on request. It is not published here. If you are an integrator or a customer setting up door access with IDEX cards, contact us and we will share the documentation and help you through the setup.