A complete 47-section interactive handbook adapted from a full-length access control systems book — 46 chapters across 6 parts (fundamentals, components and technologies, system design and planning, installation and commissioning, 10 real-world use cases, and appendices), illustrated throughout with real wiring diagrams, floor plans, and system architecture drawings.
Part I – Fundamentals: what access control is, physical vs. logical vs. hybrid systems, authentication vs. authorization, and the DAC/MAC/RBAC/ABAC access models. Part II – Components and Technologies: controllers and panels, card readers and biometric devices, electric locks/maglocks/strikes, credential technologies (proximity, smart card, NFC, BLE), software platforms, fire alarm/CCTV/BMS integration, and wiring topologies. Part III – System Design and Planning: site surveys, risk assessment, zone- and time-based access, credential issuance policy, NFPA/ADA/UL 294/IBC compliance, and 4 full sample designs (small office, apartment building, data center, school). Part IV – Installation, Commissioning and Maintenance: wiring practices, access-level configuration, testing, troubleshooting, training, backup/recovery, and cybersecurity integration. Part V – Use Cases: 10 full case studies spanning office, hospital, school, industrial, residential, data center, retail, transportation, government, and mixed-use facilities. Part VI – Appendices: a planning checklist, sample Lenel panel programming, a drawing symbol legend, an NFPA code reference summary, an acronym glossary, and a Lenel OnGuard architecture deep dive with vendor comparison.
Use the Prev / Next buttons at the bottom, or press the arrow keys on your keyboard. Click the ☰ menu button in the top-right to open the table of contents and jump to any section. The progress bar at the top tracks your position through all 47 sections.
This guide references NFPA 101, NFPA 72, IBC, ADA, and UL 294 for general design principles. Always confirm the adopted code edition and any local amendments with your AHJ before finalizing a design — access control systems that control egress doors must never defeat free egress under NFPA 101 and local life-safety code requirements.
The handbook covers 46 chapters across 6 parts: fundamentals (physical/logical/hybrid access, DAC/MAC/RBAC/ABAC models), components and technologies (controllers, readers, locks, credentials, wiring), system design and planning (site surveys, compliance, sample designs), installation and commissioning, 10 real-world case studies (office, hospital, school, industrial, residential, data center, retail, transportation, government, mixed-use), and appendices including a Lenel OnGuard architecture deep dive.
Wiegand is a legacy one-way protocol with no encryption — credential data is sent from reader to panel in plain text with no tamper detection or reader health reporting, typically limited to 100–300 ft. OSDP v2 (Open Supervised Device Protocol) is bi-directional over RS-485, supports AES-128 encryption in Secure Channel mode, full tamper/health supervision, up to 4,000 ft at low baud rates, and up to 127 devices per bus — it is the modern standard preferred for new installs and high-security sites.
An electric strike replaces the door frame’s standard strike plate and releases the latch when energized or de-energized, and can be wired fail-safe (unlocks on power loss) or fail-secure (stays locked on power loss) depending on the model. A magnetic lock (maglock) uses an electromagnet holding force (600 lbs typical) against a metal armature plate on the door — maglocks are inherently fail-safe (they unlock on power loss) and are commonly paired with a request-to-exit device and door position switch for code compliance on egress doors.
A mantrap (or security vestibule) uses two interlocked doors where only one door can be open or unlocked at any time, preventing tailgating into a secure area. An interlock controller enforces the sequence: the outer door unlocks and closes before the inner door can unlock, and alarms trigger if both doors are forced open simultaneously. Mantraps are common at data center and server room entries, secure lobbies, and other high-security facility entrances.
DAC (Discretionary Access Control) lets resource owners grant access at their discretion. MAC (Mandatory Access Control) enforces access based on fixed security labels/clearances set by a central authority. RBAC (Role-Based Access Control) assigns permissions based on a user’s role within an organization. ABAC (Attribute-Based Access Control) grants access dynamically based on attributes like time, location, device, and user department. Most commercial access control platforms implement RBAC as their primary model, often layered with time- and zone-based rules.
Disclaimer: This handbook summarizes general access control principles and vendor product categories for educational purposes only. Product names (Lenel, OnGuard, Software House, C•CURE, Genetec, Honeywell, Bosch, Axis, HID, and others) are trademarks of their respective owners; this guide is not affiliated with or endorsed by any vendor. Always consult current manufacturer documentation, the applicable adopted code edition, and your AHJ for design, engineering, and compliance decisions.