# Gallagher SMB credentials

The Gallagher SMB security solution gives you the flexibility to offer your customers the access options that suit their security and operational needs.  Gallagher SMB offers four types of credentials: Mobile Credentials, SMB Key Tags, SMB Cards, and User Codes. Their different benefits are described below.

### Mobile Credentials

Gallagher SMB is a mobile-first security solution. Mobile credentials offer unparalleled convenience for both administrator and user. Using a device the user already has, an administrator need not order, purchase, or distribute physical access credentials ever again.

Gallagher SMB mobile credentials come from Gallagher’s award-winning Mobile Connect credentialing solution. Mobile credentials are provisioned using the Gallagher SMB app, meaning an administrator can invite a user into the system from anywhere, at any time. There is no limit to the number of mobile credentials that can be provisioned per site. The user will receive an email invite, download the Gallagher SMB app, and register their credential.

The user can then request access by presenting their smartphone at the door’s reader. iOS smartphones communicate with the reader using Bluetooth®. Android smartphones communicate with the reader using NFC or Bluetooth®.

**Two Factor Authentication**

Two factor authentication ensures the person is who they claim to be and is designed to prevent an unauthorised user from disarming the site.&#x20;

Two factor authentication requires two factors;&#x20;

* something the user has (smartphone), and&#x20;
* something the user has on their phone that only they know (PIN/Password) or are (biometric data) - this must be on the smartphone (not a PIN at the reader).

Gallagher SMB does not support two factor authentication with mobile credential/card and PIN at the T30 reader.  If you require two factor authentication, please use the SMB app.

Credentials are stored securely on the smartphone using FIDO open standard security.

Two factor authentication is always required to disarm. If the area behind the door is already disarmed, a user need only present their smartphone like an access card to request access at the door. The smartphone must host the Gallagher SMB app with a valid mobile credential for the site.

### Key Tags

Gallagher SMB Key Tags are a MIFARE® DESFire EV2 4K keyfob. Constructed using an overmolding process and PA6 industrial grade plastic, they are waterproof, robust, and cost-effective. Laser engraved, they offer an elegant and convenient physical credential solution. An SMB Key Tag can be attached to a key ring, lanyard, or placed in a smartphone case.

**MIFARE DESFire EV2**

The MIFARE® DESFire EV2 platform represents the highest security available in access card technology currently. It is more secure than 125kHz and MIFARE® Classic. It has evolved from the MIFARE® DESFire EV1 platform, providing a secure, flexible credential, with an improved read range compared to that of MIFARE® DESFire EV1.

**Custom Encoding**

Gallagher SMB Key Tags are encoded using an NFC enabled smartphone, running the Gallagher SMB app. A user with elevated privileges must authenticate themselves prior to encoding a tag. When encoded, a site-specific application is stored securely on the tag, meaning the tag can only be used on the site it was encoded for. Multiple layers of security prevent tag cloning. The tag’s unique serial number is available for use by third-party systems.

**A multi-site solution**

The tag can be encoded per site or per [credential group](https://help.security.gallagher.com/smb-installer-portal/installing-gallagher-smb/configuration/site-actions/credentials/credentialgroups).&#x20;

#### Product

<table data-full-width="false"><thead><tr><th width="289">Product Name</th><th width="259">Credential Technology</th><th>Product Number</th></tr></thead><tbody><tr><td>Gallagher SMB Key Tag - Black</td><td>MIFARE® DESFire EV2 4K</td><td>C500470</td></tr><tr><td>Gallagher SMB Key Tag - White</td><td>MIFARE® DESFire EV2 4K</td><td>C500471</td></tr></tbody></table>

\*MIFARE Classic, MIFARE DESFire EV1, and MIFARE DESFire EV2 are registered trademarks of NXP B.V.

### User Codes

Gallagher SMB User Codes are unique codes generated by Site Managers via the SMB app to allow access to their site. A user with Site Manager privileges can generate a code for a user during the user creation process or edit an existing user’s credential and generate a User Code. User Codes can be deleted directly from the SMB app to revoke access if required.

SMB User Codes must be used with the Gallagher T30 Keypad. They can be used for access as well as arming and disarming. When a user with disarming privileges enters their User Code at an armed area, the area disarms and access is granted.

SMB User Codes save you time and money. They remove the need to travel to your customer’s site to generate new codes or to change codes that have been compromised. Your customer has full control to create and delete User Codes independently, all via the SMB app.

If a site is in a [credential group](https://help.security.gallagher.com/smb-installer-portal/installing-gallagher-smb/configuration/site-actions/credentials/credentialgroups) then the same user code can be sued across for all the sites.
