Technical Support | Suprema

Updated Date: July 13, 2023

Are you looking for training material? Please click Using OSDP with Suprema Product.

Refer to the article below to understand the OSDP protocol: 

What is OSDP?

Note: Suprema devices use 2.1.6 v of the OSDP protocol 

*Below FW files use 2.1.7 v of the OSDP protocol

BioEntry W2 v1.4.0_190708 or higher version

BioEntry P2 v1.3.0_190626 or higher version

BioLite N2 v1.2.0_190806 or higher version

BioStation 2 v1.8.0_190806 or higher version

BioStation A2 v1.7.0_190806 or higher version

BioStation L2 v1.5.0_190708 or higher version

FaceStation2 v1.3.0_190805 or higher version

FaceLite v1.1.0_190809 or higher version

XPass 2 v1.0.0 or higher version

XPass D2 v1.2.0 or higher version

XPass D2 (Rev.2) v1.4.0 or higher version

FaceStation F2 v1.0.0 or higher version

CoreStation v1.0.0 or higher version

X-Station 2 v1.0.0 or  higher version

BioStation 3 v1.0.0 or  higher version  

All official firmware for BioStar 2 devices uses OSDP protocol for RS485 by default.
* 2.x firmware for entry level devices, 1.x firmware for 2nd generation devices

Refer to the following article if you don't know what entry device or 2nd generation devices are: 1st Generation Device / 2nd Generation Device / Entry Level Device

Suprema device as an OSDP Reader

Suprema device has the following features as an OSDP reader.

Suprema device as a Slave device or Intelligent Slave device

You can use a Suprema device as a slave device with a third-party controller using OSDP with the official firmware, but in that case, the devices operate only as a dummy reader. This means that the device does not store user data.  

It does not store user information in the device's memory. Like other company's OSDP Reader, it is operated by the controller by sending the card to the controller when there is a card input in the normal state, and by scanning the fingerprint when the controller requests fingerprint input.

Suprema device as an Intelligent Slave device

,Suprema device authenticates user information and upon successful authentication, a card number or user ID is sent to the controller.  Template-on-card authentication is also possible with this function. In addition, when user authentication fails, a code can be sent to the controller, which is the most requested function by customers who want to replace the Wiegand environment.

 [BioStar 2] Intelligent Slave Support

Suprema device as a Slave device using Access on Cards

Note that you will have to issue access on cards through the BioStar 2 software. If you're not familiar with Access on Cards refer to the FAQ article

1. If the slave device is connected to a master Suprema device, the AoC matching is done on the master device.

2. If the slave device is not connected to a master Suprema device, the AoC matching is done on the slave device and the card ID (secure ID) is sent to the master device.

3. If the slave device is in factory default status, and no primary or secondary keys are used for AoC, then the slave device will match AoC without any smart card layout configured. 

This is based on BioStar 2.6 Firmware specification. Previous firmware may not behave this way. 

Suprema device as a master device 

Suprema device cannot be a master device when used with a third-party device without customization when using OSDP.

This is because there is no way to know the ID of the attached device because there isn't an established device search command with OSDP. 

Hence the search method is a manufacturer's command which means that it differs for each manufacturer.

Therefore customization is always necessary in such cases.                                                           

Case Explanation

Case A (ACU holds the user information)

In this case, the ACU should enroll the user's fingerprint and store the user information in the ACU’s memory.

The ACU should also have a feature to transfer templates to RS485 Slave device.

Relevant operation mode:

Device matching (Card+Finger)

Case B (Suprema device holds the user information)

In this case, the system administrator handles two different software for Suprema’s reader and the ACU.

The user data will be sent to the slave device, and the slave device should do the input (fingerprint) matching and send the matching result to the master device through RS485.

For more details, please visit [BioStar 2] Intelligent Slave Support.

Case C (Access on Card Matching)

* Access on Card is the Template on Card concept in BioStar 2. 

The following device types are available to transfer card ID of the Access on card though RS485.

You will have to use BioStar 2 to issue the Access on Cards and configure the device to have the smart card template format. 

Relevant operation mode:

Template On Card (Card+Finger)

FAQ

Do Suprema devices support Secure Channel and AES 128? 

Yes, the OSDP specification requires a secure channel with AES 128, which is supported with the device firmware.  

Can we add more than one Suprema device as a slave to a master controller with OSDP? 

If the master controller can send the osdp_COMSET to set OSDP ID for the slave device, you can add more than one Suprema device.  Please note that the Suprema device's OSDP ID is always 0 as default. 

(Updated) From W2 v1.6.3, OSDP ID configuration is available. You can set up the OSDP ID in BioStar 2 SW.

[BioStar 2] Intelligent Slave Support

Troubleshooting 

Device search issue. 

- Check if Device ID 0 can be searched.

If a master ACU searches a Suprema device via OSDP, the Suprema device's OSDP ID will be 0. 

- Check that the Baud rate of the ACU and Suprema device matches: 

Suprema device's baud rate default is 115200. 

If you still have issues, please let us know what OSDP commands the controller users to search the device. 

I receive "NAK reply, unsupported command" when using OSDP_Biomatch command
If the template is over 400 bytes, this response will appear. Try changing the template size to 384 bytes.