Expiration and validity of users and keys
Overview
In Salto Homelok there are two broad ways of defining the validity of users and their keys:
- User validity: giving users time-limited access to the system.
- Key validity: either through the Key renewal duration option or the Card key updater option.
This section of the user guide explains these options in more detail.
User validity
You can give users time-limited access to the system using the Activation and Expiration fields on the individual user's profile page.
You can either set users to be valid until a specified day, or to be always valid
See the section on creating users for more detailed information.
Key renewal duration
The key renewal duration option allows you to define the maximum time a key is valid before requiring an update. For this option, "key" can refer to different types of keys. For example, it could be a physical key such as a keycard, fob or wristband, or a digital key, like an Apple Wallet key or an app key. This duration defines the effective lifespan of a key, after which it must be updated to maintain access privileges.
This option improves overall security as it makes sure users have to present their key at an online door within the defined period to keep having access to an installation. At the same time, whenever their key is presented to an online door, their access rights and other associated data are updated to reflect the latest changes in the system.
For example, if key renewal duration is set at seven days, access rights are extended for another seven days every time the user presents their key at an online door, even if the key has been updated the day before.
Key renewal duration is set by default to seven days, but you can change this to 14 days, if required.
Key renewal duration is crucial for ensuring security in the system, as it determines how frequently keys need to be renewed. Be aware of the security implications of extending the duration to 14 days. For example, if a key is lost or stolen and not reported, it will continue to be valid until the key renewal duration time ends.
Key renewal duration allows you to define the maximum time keys are valid before requiring an update
This is a global setting which applies to the entire installation. You can find it in the Settings > General section of Homelok.
As it's a global setting, Key renewal duration applies to all active keys in an installation. It cannot be applied on a per user or per door basis.
Card key updater
Card key updater is an option that can be enabled or disabled on specific doors in the system. It refers to SVN-Flex updates that are activated by an electronic lock when a user presents a physical key like a keycard, fob or wristband.
SVN-Flex
Before detailing the card key updater feature, it's important to have some understanding of Salto's SVN-Flex system. Based on Salto's BLUEnet wireless communications technology and SVN core technology - which was introduced in the Salto Space platform, the SVN-Flex functionality extends and increases the number of updating points to any door in the system.
This means that any online door in your installation can be an updater point, so that users can use them to update their keys. For example, an employee presents their keycard at a staircase door, this gives them new access rights to use a meeting room on that floor.
This option is not applicable to doors where their associated devices are offline.
For example, a user who passes through an online perimeter door (a controller with a reader) updates their key. If a manager then disables this option, when the user passes through the same online point again, the system won't launch an SVN-Flex update again on that specific lock.
When the SVN-Flex process is turned off, the user experience when unlocking doors is improved. For example, users don't need to wait for the process to complete when they hold their physical keys at the reader on the lock. See also the section on unlocking best practices.
However, you should be aware of the security implications when disabling this option on specific doors. Also, in a number of cases, updates to an installation's access plan are not continuous, so the SVN-Flex update process has no effect.
Disabling card key updater
The Card key updater option is enabled by default in Homelok. To disable it, go to Devices and select the individual device that you want to apply it to in the door section of the associated device. Uncheck the option.
You can enable or disable the card key updater option from the individual device screen
Note that every time you enable or disable the Card key updater option, the associated lock will be marked with Update required. It may take a short amount of time for the change to propagate to the online device.
Be aware that the more doors that have the Card key updater option disabled, the more insecure your system can become. While the door will continue to report activity in real-time, and allow remote unlocking, it will not update access permissions that are written on the physical key.
This option is useful in those cases where property managers still need real-time monitoring of some common doors and amenities in their installation, but do not need updating capabilities for those specific doors because users always have to pass through a main entrance or perimeter door first.