Gallagher SMB Base Kit

System overview

SMB hardware

SMB credentials

The SMB hardware components

Using the links below, refer to each hardware component's installation note for technical specifications and installation procedures.

• SMB Base Kit - NZ/AUS

• SMB Base Kit - North America

• Permaconn PM54 (NZ/AUS only)

• SMB Monitoring Kit (North America only)

• Gallagher SMB HBUS I/O 8In Board

• Gallagher SMB HBUS I/O 8In 4Out Board

• Gallagher SMB T11 Reader

• Gallagher SMB T15 Reader

• Gallagher SMB T30 Reader

• Gallagher SMB Controller

• Gallagher SMB Power Supply

The following hardware components are compatible with the SMB solution:

• Gallagher HBUS 16 In 16 Out Board (C300688)

• Gallagher HBUS 8 Port Hub (C300698)

Installing the hardware

Pull cables

Installing the hardware

Bring Controller online

Installer Portal overview

Configuring the site

Create a Site or Demo Site

Default configuration overview

Enable Guarding

Assign a controller to a site

Configure inputs and outputs

Configure readers

Configure monitoring

Configure Areas

Configure Doors

Door status, history, and overrides

Site Actions

Activating the site

Activate Site

Onboard users

Installer Mode

The front optical tamper detector will sense when the cabinet door has been opened. The rear optical tamper detector will sense when the cabinet is removed from its mounting surface.

Initialising the tampers should be the last thing you do before you leave the site.

• If you will be completing the Installer Portal (configuration app) configuration on-site, initialise the tampers just before you activate the site.

• If you will be leaving the site and completing the Installer Portal configuration off-site, initialise the tampers now.

When you have finished wiring the devices and no longer need to access the cabinet:

1. Close and lock the cabinet door using the key provided.

2. Within the SMB Installer Portal, open the site and click the Controller at the top of the hardware tree.

3. Within the Controller lightbox, select RESTART.

Introduction

This section covers the configuration of the Gallagher SMB system, including:

• Create a Site or Demo Site

• Default configuration overview

• Enable Guarding

• Assign a Controller to a site

• Configure inputs and outputs

• Configure readers

• Configure monitoring

• Configure areas

  • Configure Entry Delay

  • Configure Exit Delay

• Configure Doors

• Door status, history, and overrides

• Site Actions

  • Publish configuration to Controller

• Activation

Why third-party monitoring?

In situations where organisations or Site Managers are apprehensive about managing their own alarms and don’t want to take on this responsibility outside of work hours, Third-Party Monitoring can be configured for the site.

About third-party monitoring stations

Alarm messages are sent from the Controller at the site to the nominated monitoring station in a standard format in accordance with a set of rules. Monitoring stations will have software that interprets messages received. The software will send notifications to nominated personnel at the site or display details on a workstation at the station in a form that is easy for an operator to action.

The monitoring company can notify relevant parties in accordance with an agreed action plan. This could be people from your site, your security technician, or a guarding company who will send someone to check your premises.

If Third-Party Monitoring is enabled, the Site Manager will not receive alarm incident notifications.

How monitoring stations respond to alarms

Actions taken by the monitoring station will depend on the response plan defined by the customer.

Possible actions are:

• do nothing

• monitoring station software sends an automated notification to nominated people at the site

• telephone nominated personnel at the site one by one in an escalation sequence

• call a guard out

• contact police.

The required response by the monitoring station may depend on:

• the day of the week and/or time of day

• what happened

• the value of property at the site

• the level of trust the business owner has in the people who have access to the site

• how much the business owner is prepared to pay monitoring for the service

• whether the system is police graded and/or the alarm has been verified. The rules and requirements for calling the police vary by country and jurisdiction. If required, verification could be by someone at the premises, video verification, or following dual activation.

Message format

Messages are sent from the SMB system to the monitoring station in Contact ID format. This is a standard protocol used worldwide to communicate what is happening on a site to a monitoring station.

The message format is: ACCT MT Q XYZ GG CCC

Code mappings and the rules for formatting and determining which messages to send are fixed. The need or ability for a Technician to configure anything has been minimised.

The Gallagher SMB security solution gives you the flexibility to offer your customers the access options that suit their security and operational needs.  Gallagher SMB offers four types of credentials: Mobile Credentials, SMB Key Tags, SMB Cards, and User Codes. Their different benefits are described below.

Mobile Credentials

Gallagher SMB is a mobile-first security solution. Mobile credentials offer unparalleled convenience for both administrator and user. Using a device the user already has, an administrator need not order, purchase, or distribute physical access credentials ever again.

Gallagher SMB mobile credentials come from Gallagher’s award-winning Mobile Connect credentialing solution. Mobile credentials are provisioned using the Gallagher SMB app, meaning an administrator can invite a user into the system from anywhere, at any time. There is no limit to the number of mobile credentials that can be provisioned per site. The user will receive an email invite, download the Gallagher SMB app, and register their credential.

The user can then request access by presenting their smartphone at the door’s reader. iOS smartphones communicate with the reader using Bluetooth®. Android smartphones communicate with the reader using NFC or Bluetooth®.

Two Factor Authentication

Two factor authentication ensures the person is who they claim to be and is designed to prevent an unauthorised user from disarming the site.

Two factor authentication requires two factors;

• something the user has (smartphone), and

• something the user has on their phone that only they know (PIN/Password) or are (biometric data) - this must be on the smartphone (not a PIN at the reader).

Gallagher SMB does not support two factor authentication with mobile credential/card and PIN at the T30 reader. If you require two factor authentication, please use the SMB app.

Credentials are stored securely on the smartphone using FIDO open standard security.

Two factor authentication is always required to disarm. If the area behind the door is already disarmed, a user need only present their smartphone like an access card to request access at the door. The smartphone must host the Gallagher SMB app with a valid mobile credential for the site.

Key Tags

Gallagher SMB Key Tags are a MIFARE® DESFire EV2 4K keyfob. Constructed using an overmolding process and PA6 industrial grade plastic, they are waterproof, robust, and cost-effective. Laser engraved, they offer an elegant and convenient physical credential solution. An SMB Key Tag can be attached to a key ring, lanyard, or placed in a smartphone case.

MIFARE DESFire EV2

The MIFARE® DESFire EV2 platform represents the highest security available in access card technology currently. It is more secure than 125kHz and MIFARE® Classic. It has evolved from the MIFARE® DESFire EV1 platform, providing a secure, flexible credential, with an improved read range compared to that of MIFARE® DESFire EV1.

Custom Encoding

Gallagher SMB Key Tags are encoded using an NFC enabled smartphone, running the Gallagher SMB app. A user with elevated privileges must authenticate themselves prior to encoding a tag. When encoded, a site-specific application is stored securely on the tag, meaning the tag can only be used on the site it was encoded for. Multiple layers of security prevent tag cloning. The tag’s unique serial number is available for use by third-party systems.

A multi-site solution

The tag must be encoded per site. If the same user (confirmed as the same user) exists on another SMB site, the additional site’s application must be encoded on the tag. Up to 27 site applications can be stored on a MIFARE® DESFire EV2 4K tag.

Product

*MIFARE Classic, MIFARE DESFire EV1, and MIFARE DESFire EV2 are registered trademarks of NXP B.V.

User Codes

Gallagher SMB User Codes are unique codes generated by Site Managers via the SMB app to allow access to their site. A user with Site Manager privileges can generate a code for a user during the user creation process or edit an existing user’s credential and generate a User Code. User Codes can be deleted directly from the SMB app to revoke access if required.

SMB User Codes must be used with the Gallagher T30 Keypad. They can be used for access as well as arming and disarming. When a user with disarming privileges enters their User Code at an armed area, the area disarms and access is granted.

SMB User Codes save you time and money. They remove the need to travel to your customer’s site to generate new codes or to change codes that have been compromised. Your customer has full control to create and delete User Codes independently, all via the SMB app.

The Gallagher SMB solution supports three different readers or the ability to configure a door without a reader.

• Gallagher SMB T11 (C500430/C500431)

• Gallagher SMB T15 (C500480/C500481)

• Gallagher T30 Multi Tech Keypad (C300490/C300491)

The Gallagher SMB Reader provides users with a convenient way to control their site’s security. The reader can be used for local alarm management, access control, or both.

Arming Reader: When a reader is not associated with a door, it's an arming reader, by default.

Access Reader: When a reader is added to a door, it's can perform both jobs, access and (local) arming.

Alarm management

Arming and disarming affect a whole site or area. When one or more areas are armed, all doors in those areas are locked.

A privileged user can locally arm or disarm their site at a reader using their smartphone, SMB Key Tag, SMB Card, or User Code. A user’s smartphone communicates using Bluetooth® to the reader. This functionality is useful if internet connectivity has been lost. The areas that a user can arm and disarm are determined by their roles and configured privileges.

Users arm and disarm areas by:

• presenting their smartphone, SMB Key Tag, or SMB Card to the reader (a single badge is required to disarm the site and a double badge to arm the site), or

• entering their User Code (T30 Keypad only).

Gallagher SMB T11 and T15

When a T11 or T15 is configured as an arming reader, the reader’s LED will display:

• Green: one or more areas are disarmed.

• Red: all areas are armed.

Gallagher SMB T30 Keypad

When a T30 Multi Tech Keypad is configured as an arming reader, the reader’s LED squiggle will display:

• Green: one or more areas are disarmed.

• Red: all areas are armed.

And the reader’s LED Arm (shield) icon will display:

• Green: one or more areas are disarmed.

• Red: all areas are armed.

• Quick Flash White: a long press on the Arm (shield icon) button causes the LED to flash white briefly, ready for the user to present their smartphone, SMB Key Tag, or SMB Card, or enter their User Code, to start the arming process.

• Blue: a long press on the '0' button changes the LED Arm icon to blue or white to reveal the reader's supported technology; blue is the Multi Tech variant and white is the MIFARE variant.

Access Control

Access control affects only one door at a time. When a door is unlocked with a user's credential, only that door momentarily unlocks to allow access. Additionally, if the door's area was armed and the user has the privilege to disarm, entering their credential disarms that area only.

If a reader is assigned to a door, a user can locally request access at the reader. Access can be requested using a smartphone, SMB Key Tag, SMB Card, or User Code. Access control is limited to Bluetooth® for iOS devices. Android devices will use NFC for access control by default (if enabled on the device) or Bluetooth®.

Users gain access through doors by:

• presenting their smartphone, SMB Key Tag, or SMB Card to the reader, or

• entering their User Code (T30 Keypad only).

When configured as an access reader, the reader’s LED (squiggle) will display:

• Solid green: the door is unlocked.

• Solid red: the door is locked.

• Flashes green: access has been granted.

• Flashed red: access has been denied.

• Note: When assigned to a door, the reader’s LED squiggle will always display the locked state of the door, not the armed or disarmed state of the site.

Adding a reader

1. From the Hardware tab, click the + ADD NEW button and select a reader.

2. Enter a name for the reader.

3. Enter the reader's serial number in the Serial Number field. After plugging in the reader, the serial number can be copied from the controller's event history. The serial number can also be found on the back of the reader and on its packaging.

5. Click OK.

Notes:

• If all T30 Keypads are removed from the site configuration, all User Code functionality is hidden within the SMB app, including existing User Codes. If the T30 Keypad is ever added back again, any previously-configured User Codes will remain and can be used again (and new ones can again be generated).

• If you are replacing a T15/T11 reader with a T30 Keypad, the door associated with the reader must be unlocked.

Enable NFC connectivity

The Enable NFC connectivity check box is included in the properties of all readers that have been assigned to a door. Hence, you will not see this option on readers you have only just created. After assigning the reader within a door's properties, you can return to the reader's properties and:

• select the 'Enable NFC connectivity' check box to allow Mobile Credentials to request access via NFC and Bluetooth® (selected by default), or

• deselect the 'Enable NFC connectivity' check box to force Mobile Credentials to request access via Bluetooth® and not NFC. SMB tags are unaffected by this setting.

Bluetooth® Connection Settings

Environmental factors (e.g. metal surfaces) will affect the reader's Bluetooth® performance. The following Bluetooth® connection settings can be adjusted to improve the user's phone performance when communicating with the reader.

These settings are adjusted in the SMB Installer Portal on the Reader's properties tab.

Transmit Power

Increasing the Transmit Power will increase the readers Bluetooth® read range. Adjusting this range will increase both the Door Connection and Local Arming ranges. The default value is -26 dBm (decibel-milliwatts).

Door Connection Range

This is the range at which the customer’s Bluetooth® device will automatically connect to the reader and grant access to the user if the user has access privilege to the area the door is associated to. The default value is 45 dBm (decibel-milliwatts) and must always be less than the value set for the local arming range.

Local Arming Range

This is the range within which the user can manually connect their Bluetooth® device to the reader to arm or disarm their alarm system. The default value is 64 dBm (decibel-milliwatts).

Note: These settings will need to be checked and adjusted according to the site as the distance at which a device connects to the reader depends on the construction of the wall the reader is placed on and the types of devices (phones) the users will be using.

Troubleshooting

• In the following situations, if the T30 Keypad loses power and comes back online, it might cause the Keypad to become unresponsive:

  T30 Keypad is unplugged and connected back.

  The Controller is power cycled.

  The Controller is soft restarted or restarted from the controller debug page.

• When replacing a T15/T11 reader with a T30 Keypad, the door must be unlocked.

  If the T30 Keypad becomes unresponsive, unlocking and then locking the door will recover the reader.

About Guarding

Gallagher SMB has partnered with First Security (New Zealand) and Wilson Security (Australia) to provide an integrated guarding solution as an alternative to self-monitoring or third-party monitoring. Guarding is not currently available outside of New Zealand and Australia.

With the Guarding service enabled, customers can request a guard directly from the Gallagher SMB app or enable automated guarding where the system will automatically request a guard in an alarm incident.

The guarding provider will respond to the alarm, assess the site, call the police if needed, and provide a full report within the SMB app. Customers will receive regular update notifications indicating the guard has arrived on site and departed, followed by updates on their actions on-site and a final report.

To be eligible for Guarding, a site must:

• be in New Zealand or Australia

• be activated

• not be a demo site

Guard call-outs

A guard call-out can be initiated either manually or automatically.

Manual guard call-out

With Guarding enabled, the customer can choose to manually request a security guard when an incident occurs.  When reviewing an incident, the site Manager can take the Action to “Request Security Guard”.  A warning will appear to ensure they want to proceed and are aware the call-out could result in a call-out fee.  Once agreed to proceed, the customer would need to call the guarding company to cancel, and fees may still apply.

Auto-Guard call-out

The customer can enable Auto-Guard call-outs, where the request for a guard is automatically sent.  Customers can configure a guard to be automatically requested if an incident is not responded to within the selected timeframe. This does not need to be set at the time of activation; the customer can enable auto-guarding within the SMB app.

Billing

Guarding has a monthly ongoing subscription associated with it. Billing will commence once the 'Setting up Guarding' section (below) is complete for a site and the site is activated. When a guard call-out is made either manually or via Auto-Guarding, the customer incurs a call-out fee additional to the monthly billing.

Setting up Guarding

Getting the Client Code

To enable Guarding for a customer, a Client Code is required from the Guarding provider.

Note: Guarding is only available for activated, real (not demo) New Zealand and Australia sites.

1. Complete the Guarding Form.

   Provide Site Details, Site Name, Site Address, Site Contact & After-Hours Contact.

   Click Send form to send the Guarding Form to the guarding provider (First Security NZ or Wilson Security AUS).

2. The guarding provider will organise a site visit with the customer and create a proforma.

3. Once the site visit is completed, the Site Plan is sent to the customer.

4. The guarding provider advises the Technician of the Client Code, which should start with 'GAL'.

   Once the Technician has the Client Code, Guarding can be enabled for a site.

Enabling Guarding in the SMB Installer Portal

To enable Guarding for a customer, perform the following:

Note: Guarding is only available for activated, real (not demo) New Zealand and Australia sites.

2. From the menu on the right-hand side of the customer’s site configuration screen, click Enable Guarding.

   The Guarding Subscription lightbox displays.

3. Enter the Client Code. This is provided by the Guarding company and us ually starts with 'GAL'.

4. If the customer wants a guard to be called automatically when an incident occurs, enable the Automatically Request Guard toggle.

5. In the Request Guard After field, enter the number of minutes (0-15) after which the customer wants a guard to be automatically called out, when an incident is raised through the SMB app.

6. Click OK.

System architecture

The following diagram shows the architecture for the Gallagher SMB solution. The system is a collection of hardware and software items, tightly integrated to provide a seamless intruder alarm monitoring system. The Gallagher Cloud server is hosted on AWS, Amazon web cloud servers.

The design allows integration with a range of external systems to provide the user with a single point of control for building security management.

Secure communications

The diagram above illustrates the secure nature of the Controller's communications with the internet. The key takeaway is that the Controller is isolated from the internet – it accepts no inbound traffic.

All communications between the Controller and the Cloud server are encrypted using AES encryption.

If the Controller loses connection to the Cloud server, it will continually try to reconnect, in order that the system handles temporary network/internet outages. If the Controller is offline for a predefined period of time, an alarm is raised, notifying the appropriate users of the outage.

Data storage

Customer data (site data) is replicated across multiple data centres in Sydney, Australia. Customer data is backed up nightly, and the backups replicated across the data centres.

All historical events are stored within their own event database.

SMB Kit components

Installing the Gallagher SMB Kit hardware involves the following steps:

1. Install the cabinet

2. Install readers

3. Connect inputs and outputs

4. Connect power to the controller

5. Connect the controller to the cloud

6. Initialise tampers

For the full procedures for the above steps, refer to the appropriate SMB Kit installation note, depending on your region:

• SMB Base Kit - NZ/AUS

• SMB Base Kit - North America

As an additional aid, you may also refer to the appropriate hardware installation video module, which contains mostly the same information as the SMB Base Kit installation note:

Other hardware components

Refer to the relevant installation notes for any additional hardware components you need to install:

• Permaconn PM54 (NZ/AUS only)

• SMB Monitoring Kit (North America only)

• Gallagher SMB HBUS I/O 8In Board (NZ/AUS only)

• Gallagher SMB HBUS I/O 8In 4Out Board

• Gallagher SMB T11 Reader

• Gallagher SMB T15 Reader

• Gallagher SMB T30 Reader

The following hardware components are compatible with the SMB solution:

• Gallagher HBUS 16 In 16 Out Board (C300688)

• Gallagher HBUS 8 Port Hub (C300698)

Configuring Controller settings in a web browser

The Controller’s cloud configuration web pages allow configuration of specific Controller settings, including the Controller’s date/time and NTP server if needed.

To connect to the Controller’s cloud configuration web pages, there are two methods:

About this topic

The Gallagher SMB Kit installation note contains the procedures for bringing the controller online. This topic contains information to surplus the installation note, in case further help is required.

Bringing the controller online

The Controller should be brought online before the site is configured in the SMB Installer Portal.

1. Connect the site's LAN (Ethernet cable) to the Router's secondary Ethernet port.

2. Power on the Controller and wait for for the Controller to show as Online in the SMB Installer Portal. To indicate the Controller has come online in the SMB Installer Portal, the word 'OFFLINE' will not display next to the Controller item on the 'HARDWARE' tab. The physical Controller also enters the single flash state when it comes online.

3. Once connected, the controller will receive any outstanding firmware updates from the Cloud server.

If the Controller doesn't come online

Check the site has an internet connection - plug the laptop into the network via ethernet and test the connection.

If the site does have internet connectivity, try the following:

1. Check the controller flash state (see below table)

2. Use cellular router instead, as a last resort

Controller Flash Modes

The 8 In 4 Out LED is located near the centre of the board. The 8 In LED is located above IN3.

Proxy Server

If the site is using a proxy server, this may also stop the controller from coming online.

To resolve this issue, you will need to connect a web browser to the Controller's configuration web pages and enter the proxy server's connection details.

When the Controller is powered up with DIP switches 2 and 3 ON, the Controller uses the following default addresses:

Controller IP: 192.168.1.199

Gateway: 192.168.1.198

Subnet: 255.255.255.0

This enables you to configure your PC with an IP address in the same subnet as the Controller, and by setting DIP switch 1 to ON, connect a web browser to the Controller. Your PC IP address should be different from the Controller's IP address, (i.e. not 192.168.1.199).

To enter the proxy server's connection details, perform the following procedure:

1. Connect the Controller to your PC via the Controller's Ethernet port.

2. Set DIP switches 1, 2 and 3 to ON.

3. Power cycle the Controller.

4. Using a web browser, enter the IP address of the Controller as follows: http://192.168.1.199/cloud/ The Enter Network Password web page displays.

5. Enter cloud for the username, then GGLcloud for the password and press Enter. The Gallagher Cloud Controller Configuration web page displays.

6. Click the Proxy Server Configuration link. The Proxy Server Configuration web page displays.

7. Enter the proxy server's name, port number, and logon credentials (if required).

8. Click Save.

9. Set DIP switches 1, 2 and 3 to OFF.

10. Connect the Controller to the site's network.

11. Power cycle the Controller.

The proxy settings are persisted across Controller re-power.

To clear the proxy settings, set DIP switches 1, 2 and 3 to ON, then power cycle the Controller. Wait for the Controller's Run LED to enter a 2 flash pattern, then set DIP switches 1, 2 and 3 to OFF, and power cycle the Controller again.

Firewall

If the site has a firewall, this may also stop the controller from coming online.

The customer will need to open the required ports/protocols to allow the controller to communicate to the internet through their firewall.

Destination Ports

Detailed below are the destination ports that the SMB Controller and router will try to connect to for various services.

SMB Controller:

Router:

Clearing the Controller's configuration

If you need to clear the Controller's configuration, perform the following procedure:

1. Set DIP switches 1, 2 and 3 to ON.

2. Power cycle the Controller.

3. Wait a few minutes until the LED is flashing in a steady state (2 flash or 5 flash).

4. Set DIP switches 1, 2 and 3 to OFF.

5. Power cycle the Controller again.

   The Controller can now be assigned to a new site.

How the Controller works

The Controller works through the following steps:

• The Controller requests an IP address using DHCP.

• The DHCP server on the local area network assigns an IP address to the Controller, so it can send and receive TCP/IP messages from the Cloud server.

• Most networks have a DHCP server. The Router provided has a DHCP server.

• The Controller uses DNS to resolve the IP address for the Gallagher cloud services.

• The Controller uses the SNTP to obtain the time.

• The Controller establishes an HTTPS session with the Cloud server for encrypted communications.

• The Controller authenticates the Cloud server. This ensures that site-specific data is only exchanged with the authentic Cloud server.

• The Cloud server authenticates the Controller. This ensures that site-specific data is only exchanged with a Gallagher provisioned device.

The Controller connects to the site's local TCP/IP network. If required (i.e. TCP/IP network connectivity is unreliable), the Router can be used to provide connection to a mobile network provider. The router comes pre-equipped with a SIM card and an ethernet cable to connect it to the controller. Purchase of the Cellular data subscription package will automatically enable the controller to communicate over the cellular network.

1. Check cable type, size and maximum distances

2. Pull cables for all inputs and outputs

3. Check device power requirements

Cable distance

* The matching of wire sizes to equivalent wire gauges are only approximate. ** Recommended cable types for optimal HBUS RS485 performance.

Default configuration overview

This topic gives an overview of the default configuration that comes with a new SMB site.

Note: If you selected a "Controller Only" Configuration Template during the , only a Controller item is added by default. All other items can be added manually.

If you selected the 'NZ AU Base Kit' Configuration Template when creating the site, the following default configuration is applied:

If you selected the 'USA Base Kit' Configuration Template when creating the site, the following default configuration is applied:

Configuring an Input

About inputs: Inputs detect the voltage level change on the input to determine the state of the device connected. For example, if the voltage on the input is 2.5 Vdc (normal) and then changes to 3.3 Vdc as a result of the alarm relay opening, then this will be reported as an alarm condition.

All inputs on the Gallagher SMB solution have the same operational characteristics. They are provided to allow the connection of monitored switches for intruder detectors, door and window monitoring, fire alarm detection, and general equipment monitoring.

1. From the Hardware tab, open the input you want to configure.

2. Name the input something meaningful to the customer (e.g. 'Office PIR' rather than 'PIR 1'), as the names are present within the customer app.

3. Select the required Area.

4. Select the Sensor type.

5. Select the appropriate Alarm Response type. Options include:

   • 'Secure Alarm': When activated, the item will generate an alarm if the area it is assigned to is armed. Commonly used for intruder items such as PIRs or Reed Switches.

   • '24 Hour Alarm': When activated, the item will generate an alarm, regardless of whether the area it is assigned to is armed or not. Generally used for system alarms or building alarms.

   • '24 Hour Silent Alarm': Similar to the 24 Hour Alarm, but the alarm output for the area will not be activated. This can be used to discreetly raise an alarm when duress or holdup buttons are being used without alerting the threat to the fact an alarm has been raised.

   • 'Alarm when disarmed': When activated, the item will only generate an alarm when the area is disarmed. Generally used for safety issues onsite.

   • 'No Event Recorded': When activated, neither an event nor an alarm will be generated. This can be used when nothing needs to be recorded and no one needs to be alerted.

     Note: See below for more information.

6. Click the + ASSIGN OUTPUTS button and assign the appropriate output(s) to the input. The outputs you assign here will turn on when this input opens.

   Notes:

   • The 'Outputs' box displays all outputs assigned to this input.

   • The Status tab displays the current status of this input.

   • The Event History tab displays all events associated with this input. Events can be filtered.

7. Once finished configuring the output, click OK to close and save your changes.

8. See the '' topic to assign this input to Areas.

Note: For inputs that are not currently being used, we recommend disabling the input by setting its toggle to Off.  This ensures the controller ignores all unused inputs and avoids unnecessary open circuit tamper alarms being raised.

Configuring an Output

About outputs: All outputs on the Gallagher SMB system, irrespective of the actual hardware unit, have the same operational characteristics. They are provided to allow control of external devices such as door locks, lighting, sirens, and external systems.

1. From the Hardware tab, open the output you want to configure.

2. Name the output something meaningful to the customer (e.g. 'Office Light' rather than 'Light 1'), as the names are present within the customer app.

3. Select the Output type from the drop-down list: Siren, Strobe, Light, or Pulsed.

4. If you selected 'Siren', 'Strobe', or 'Light', enter the Maximum On Time in minutes and/or seconds. Defaults to None.

5. If you selected 'Pulsed', enter the Pulsed Time in minutes and/or seconds. Defaults to 5 seconds.

   Notes:

   • The 'Used on Areas' box displays all Areas this output is assigned to.

   • The 'Used on Inputs' box displays all inputs this output is assigned to.

   • The Status tab displays the current status of this output.

   • The Event History tab displays all events associated with this output. Events can be filtered.

6. Once finished configuring the output, click OK to close and save your changes.

7. See the 'Configure Areas' topic to assign this output to Areas.

Adding more I/O Boards

Additional I/O boards can be added to expand the solution to 128 Inputs and 61 Outputs.

The following I/O Boards are compatible with the SMB Solution:

• Gallagher SMB 8In Board

• Gallagher SMB 8In 4Out Board

• Gallagher HBUS 16 In 16 Out Board

To add more I/O Boards:

1. From the Hardware tab, click the + ADD NEW button.

2. Select '8 In Board', '8 In 4 Out Board', or '16 in 16 Out Board' from the drop-down list.

   The Properties lightbox displays.

3. Enter the Name and Serial Number of the board that is being added to the site.

4. If different EOL Resistors are required, select the required option from the drop-down list.

5. Click OK.

To configure the additional inputs and outputs, refer to the procedures above.

About input Alarm Responses

Refer to the table below for a detailed overview of the behaviour of each of the Alarm Response types:

Once the site has been created, the will display. The default configuration supports the pre-wired mains power failure and battery low inputs.

To associate a controller with a site, perform the following procedure:

1. Navigate to the customer's site.

2. Click the Scan controller QR code button and scan the QR code printed on the controller.

   If using a laptop, take a photo of the QR code using your phone and present it to the laptop. If you are unable to scan the controller's QR code, you can enter the controller's ID in the Controller ID field. The controller's ID is printed on the controller, below the QR code.

3. Click the ASSIGN CONTROLLER button.

   The controller will come online and connect to the Gallagher cloud. An IP address is automatically assigned to the controller via DHCP. There is no MAC address or IP addressing required. The controller will download the latest firmware and update its default configuration. This takes approximately five ( 5 ) minutes.

   Notes:

   • If the controller does not come online, check the site has an internet connection.

   • If the site has a firewall preventing the controller from connecting to the internet, the following ports on the controller need to be reachable:

   Port	Protocol	Details

   • If the message 'Cannot assign controller' displays, the controller has already been assigned to a site.

4. Select the Controller.

   The ‘Controller’ lightbox displays.

   Notes:

   • If the site is using tamper detection, the controller’s optical tampers can be enabled here.

   • The controller’s firmware version and application version are shown here.

   • The Controller's 'EOL Resistors' setting is only applied to the '8In Board 1' by default; not the '8In4Out Board 1'. This is because the 8In4Out Board's two power-monitored inputs (Battery Low and Mains Failure) require 4k7 Ohm Rs in order to function, and therefore are set this way in the 8In4Out Board's default configuration.

   • The controller’s ‘Event History’ shows events generated by the controller, and cloud events that are related to the controller. Use the event history to help diagnose issues with the site.

Alarm transmitter hardware

For New Zealand and Australia sites, the Permaconn PM54 is the available alarm transmitter. For North American sites, the Alula BAT-Connect is available.

NZ/AUS: Permaconn PM54 The Permaconn PM54 can also function as an alarm communicator, transmitting alarms from the Gallagher SMB Controller to a monitoring station using the Contact ID alarms transmission protocol. The Permaconn PM54 is powered by the Gallagher SMB Kit and provides connection to the site's WAN or Wi-Fi.

North America: Alula BAT-Connect The Alula BAT-Connect is an alarm communicator, transmitting alarms from the Gallagher SMB Controller to a monitoring station using the Contact ID alarms transmission protocol. The Alula BAT-Connect is powered by the Gallagher SMB Kit and provides connection to the site's WAN, cellular, or Wi-Fi.

Configuring an alarm transmitter

If the customer requires third-party monitoring, configure the alarm transmitter.

1. In the , click the MONITORING tab.

2. Enter the Account Code received from the monitoring station and click SAVE.

   The Alarm Transmitter item displays.

3. Enable the toggle next to the Alarm Transmitter.

   Note: If you are also enabling the IP Alarm Transmitter, select which transmitter is the primary one from the Primary option (next to the 'Account Code' field).

4. Click on the Alarm Transmitter to open its properties. The Alarm Transmitter lightbox displays.

5. Enter the transmitter device's serial number or MAC address (this is an optional field).

6. To enable , enable the Periodic Dialling toggle.

7. To set the frequency of dialling tests, select either Dial daily at or Dial every.

   • Dial daily at: Select this option to have a periodic dial occur at the same specified time each day. Consider selecting a unique time for each site so the load on monitoring stations is spread throughout the day. If you change the periodic dial time, notify the monitoring station of the new test time. The time will automatically adjust for daylight savings.

   • Dial every: Select this option if you require more frequent periodic test dials. This means that a test dial will occur at the interval specified, starting at the time that has been specified. Any time can be entered as the start time. Daylight savings corrections will be applied when the Controller's clock is updated.

8. If required, select the Skip periodic dial following successful alarm dial check box.

   With this option selected, the periodic dial test will be skipped if there has been a successful alarm dial since the last periodic dial test. If the periodic dial is skipped, the next time you can expect a periodic dial is at the configured time the next day or after the periodic dial interval, depending on how it is configured.

9. Click OK to complete the configuration.

For more information about your alarm transmitter, refer to the appropriate installation note:

About Periodic Dialling

A timer test (also known as the ‘periodic test’ or ‘24 hour’ test) is an affirmation to the monitoring station that the alarm system is capable of sending Contact ID. Most alarm systems send one test per day. The signal is fixed in its format and will be sent with an XYZ (Contact ID event code) of 602 and it will be sent in the (GG) partition or Alarm Zone 00. Only one periodic test can be enabled per account number for accurate reporting of line status (this is a consideration when using multiple Diallers using single client code reporting). It may be necessary to configure periodic tests from different diallers into different account numbers. It will also be reported as a new event and will have a CCC of 000, (e.g. 123418160200000, where 1234 is the account number).

If a test is not received when it should have been, action is taken by the monitoring station staff.

Publishing with an alarm transmitter

Publishing configuration with monitoring enabled pushes the monitoring-related configuration to the controller. This publishing is also the trigger for the controller to carry out dial checks and construct and send messages to the monitoring station.

Monitoring Report

Generating the report Once a site is activated, a Monitoring Report will be available to download and send to the monitoring station. The Monitoring Report outlines the XZY Codes, GG Codes, Zone list CCC Codes, and User CCC Codes.

1. Under Site Actions on the right-hand side of the screen, click Download Monitoring Report.

   A warning appears: Only published changes will appear in the report. NOTE: This report contains personal data. Please respect privacy laws.

2. Click Download.

   The Monitoring Report downloads as a CSV file.

3. Send the file to the monitoring station.

As no users are created for the site yet, the User List CCC Codes will only contain the Key Account Holder. The Monitoring Report can be downloaded at any stage, and you may wish to wait until the Site is set up with more users before downloading and sending the report.

Users' CCC codes If an incident occurs and the monitoring station doesn’t know who the user is by name, they will have a CCC code. In the SMB app, the customer can search for this code.

For the Site Manager to find which user the CCC code is related to:

1. Log into the SMB customer app.

2. Select Team from the navigation bar.

3. In the search field, enter the CCC code.

   The user with the related CCC code appears in the search results.

This section contains answers to common questions about Gallagher SMB.

Creating a Site

A customer's site is first created and then configured in the Gallagher SMB Installer Portal.

1. Log into the .

   Login details can be requested through Gallagher Sales Order Management team.

2. Click the + ADD NEW SITE button located at the top of the screen.

   The 'New Site' wizard displays.

3. Enter a Name for the site.

   It is important to consult with the customer to identify a meaningful name for the site - as well as areas, doors, inputs, and outputs - as these names will appear in the Gallagher SMB App.

4. Select the Timezone, Country and Address of the site.

   Ensure you select the appropriate 'Country'. The associated country code is used as the default dialling prefix (country code) when adding phone numbers in the Gallagher SMB App.

5. Click Next.

   The Key Account Holder screen displays.

6. Enter the Name, Email and Cellphone number of the key account holder.

   The key account holder should be the main point of contact at the customer’s site and they will be the first person to receive access to the SMB security solution. An invitation is sent to this person once the site is activated.

7. Click Next.

   The Setup screen displays.

8. Select the appropriate Configuration Template. If you select 'NZ AU Base Kit' or 'USA Base Kit', after you click 'SAVE', the site is given a default configuration as outlined in . If you select 'NZ AU Controller Only' or 'USA Controller Only', the site will only have a Controller added by default.

9. Select the Billing Frequency. The available options are Monthly and Annually. Subscription billing commences once the site is activated.

10. Enable the Site uses tags check box if the site will be issuing key tags to users. This will enable the key tag assignment and management functionality within the Gallagher SMB App.

    Tags are considered a single-factor credential. If tags are used for access, the area the doors are associated with must be configured to disarm with a single-factor authentication. This is part of the Area configuration lightbox.

11. Click the Save button.

    The site is created, and the is displayed.

Demo Sites

About Demo Sites

The Demo Site workflow is designed to provide SMB Partners with a platform to train technicians to configure SMB Sites. Demo Sites can also be used for promoting the solution to potential customers. All SMB Partners have a default of five (5) Demo Sites available to configure. Demo Sites can be deleted at any stage in the process and are non-chargeable. If you require more than five demo sites at one time, please contact your Gallagher representative with an explanation so this can be adjusted in the system.

Demo Sites can have hardware allocated to them and they can be fully activated and used in the same way as a real site. By activating the site, SMB Partners can demonstrate the registration process and SMB app to potential customers.

Demo Sites are not development sites and are not monitored by Gallagher's development teams. Demo Sites should be used for training and promotion only.

Creating a Demo Site

1. Login details can be requested through Gallagher Sales Order Management team.

2. Click the SUPPORT tab at the top of the screen.

3. Under 'Manage Demo Sites', click the + ADD NEW DEMO SITE  button.

   The 'New Demo Site' wizard displays.

4. Enter a Name for the site. The name of the site, areas, doors, inputs, and outputs will appear in the Gallagher SMB App.

5. Select the Timezone, Country and Address of the site.

   Ensure you select the appropriate 'Country'. The associated country code is used as the default dialling prefix (country code) when adding phone numbers in the Gallagher SMB App.

6. Click Next.

   The Account Holder screen displays.

7. Enter the Name, Email and Cellphone number of the key account holder.

   The key account holder should be the main point of contact at the customer’s site and they will be the first person to receive access to the SMB security solution. An invitation is sent to this person once the site is activated. As this is a demo site, it can be the Technician.

8. Click Next.

   The Setup screen displays.

9. Select the appropriate Configuration Template. Once the site creation wizard is completed, this template provides a default configuration for the site.

10. Select the Billing Frequency. This defaults to non-chargeable. No subscription is charged for Demo Sites.

11. Enable the Site uses tags toggle if the site will be issuing key tags to users. This will enable the key tag assignment and management functionality within the Gallagher SMB App.

    Tags are considered a single-factor credential. If tags are used for access, the area the doors are associated with must be configured to disarm with a single-factor authentication. This is part of the Area configuration lightbox.

12. Click the Save button.

    All other configuration procedures are the same as a real site, as is outlined in the Installer Help, documentation, and training videos.

Identifying Demo Sites

Demo Sites will appear on the SITES tab. They can be identified within the list by the word '(Demo)' that appears after their status in the 'Status' column. Demo Sites will also appear under the 'Manage Demo Sites' section in the SUPPORT tab.

Deleting a Demo Site

1. Login details can be requested through Gallagher Sales Order Management team.

2. On the SITES tab, use the search box to search for the Demo Site to be deleted, or go to the SUPPORT tab to see a list of Demo Sites.

3. Click on the site that is to be deleted.

4. Click SITE DETAILS on the right-hand side of the screen.

   The 'Site Details' lightbox displays.

5. Click the DELETE button.

   A warning displays.

6. Click OK to delete or CANCEL to return to the site configuration page.

   Once a Demo Site is deleted, there is no further record of this site. Gallagher does not store any history, events or users’ details about the site.

Reusing the Demo Site Controller

Gallagher Support Team

Please note that if you purchase your Gallagher SMB solution through a distributor, they will provide your Level 1 Technical Support.

Phone:

Australia - 1800 009 259 | +61 2 9439 8599

New Zealand - 0800 654 256 | +64 7 838 9800

USA - +1 866 922 7329

Email:

Web:

LinkedIn:

Facebook:

Installer

SMB Installer Portal:

The same login credentials are used to access both the Partner Portal and the Installer Portal.

Customer

To check which smartphones are supported:

• Refer to the Apple Store to confirm the latest iOS compatibility.

• Refer to the Google Play Store to confirm the latest Android compatibility.

The following is required for all smartphones:

• Users must have a passcode or pattern lock set on their phone. Even if they have face recognition or a thumbprint set up, a passcode or pattern lock is still necessary.

• Users must have email access on their phone. Each person using the app will need a separate email address.

The IP Alarm Transmitter requires no additional hardware; only the Controller is required.

Configuring an IP Alarm Transmitter

If the customer requires third-party monitoring, you can configure the IP Alarm Transmitter as an alternative or addition to the Permaconn or Alula alarm transmitter.

1. In the SMB Installer Portal, click the MONITORING tab.

2. Enter the Account Code received from the monitoring station and click SAVE.

   The IP Alarm Transmitter item displays.

3. Enable the toggle next to the IP Alarm Transmitter.

   Note: If you are also enabling the Permaconn or Alula alarm transmitter, select which transmitter is the primary one from the Primary option (next to the 'Account Code' field).

4. Click on the IP Alarm Transmitter to open its properties.

   The IP Alarm Transmitter lightbox displays.

5. Select the required Protocol for transmitting to the monitoring station.

   • CSV uses Comma Separated Values (CSV) format for transmitting alarms. This method uses TCP/IP and is unencrypted.

   • DC-09 Gallagher uses Gallagher's own format of DC-09. Select this option if you are transmitting alarms to a Gallagher receiver. Encryption is available.

   • DC-09 SIA uses the Security Industry Association (SIA) protocol for DC-09. You will most likely want this option when transmitting to a third-party monitoring station. Encryption is available.

6. If you selected a DC-09 protocol, the Encryption check box displays. Optionally select this check box to encrypt all transmissions from the Controller, then enter the Encryption Key.

   You can either generate this Encryption Key yourself and then provide it to the monitoring station, or request an Encryption Key from the monitoring station. Either way, the monitoring station must have the same key that you enter here.

7. For the IP Alarm Transmitter to provide authentication, select the Authentication check box and enter the Username and Password that will be used by the monitoring station to authenticate the data received.s

   Note: The Username and Password must not contain the following characters: < > & ‘ “ ,

8. Enable as many Receivers as you like; there are two available. You must enable at least one Receiver for the IP Alarm Transmitter to function.

   Transmissions are sent to 'Receiver 2' if attempts with 'Receiver 1' fail.

9. In the IP field of the enabled receiver(s), enter the IP address of the receiver. This must be provided to you by the monitoring station.

10. In the Port field of the enabled receiver(s), enter the Port used by the receiver. This must also be provided to you by the monitoring station.

11. To enable polling, select the time under the Polling field and enter how often a heartbeat will be sent to poll the receiver. Otherwise, select 'None'.

12. Click OK to complete the configuration.

About Polling

A timer test or 'poll' (also known as the ‘periodic test’ or ‘24 hour’ test) is an affirmation to the monitoring station that the alarm system is capable of sending Contact ID. Most alarm systems send one test per day. The signal is fixed in its format and will be sent with an XYZ (Contact ID event code) of 602 and it will be sent in the (GG) partition or Alarm Zone 00. Only one periodic test can be enabled per account number for accurate reporting of line status (this is a consideration when using multiple Diallers using single client code reporting). It may be necessary to configure periodic tests from different diallers into different account numbers. It will also be reported as a new event and will have a CCC of 000, (e.g. 123418160200000, where 1234 is the account number).

If a test ('poll') is not received when it should have been, action is taken by the monitoring station staff.

Publishing with an alarm transmitter

Publishing configuration with monitoring enabled pushes the monitoring-related configuration to the controller. This publishing is also the trigger for the controller to carry out dial checks and construct and send messages to the monitoring station.

Monitoring Report

Generating the report Once a site is activated, a Monitoring Report will be available to download and send to the monitoring station. The Monitoring Report outlines the XZY Codes, GG Codes, Zone list CCC Codes, and User CCC Codes.

1. Under Site Actions on the right-hand side of the screen, click Download Monitoring Report.

   A warning appears: Only published changes will appear in the report. NOTE: This report contains personal data. Please respect privacy laws.

2. Click Download.

   The Monitoring Report downloads as a CSV file.

3. Send the file to the monitoring station.

As no users are created for the site yet, the User List CCC Codes will only contain the Key Account Holder. The Monitoring Report can be downloaded at any stage, and you may wish to wait until the Site is set up with more users before downloading and sending the report.

Users' CCC codes If an incident occurs and the monitoring station doesn’t know who the user is by name, they will have a CCC code. In the SMB app, the customer can search for this code.

For the Site Manager to find which user the CCC code is related to:

1. Log into the SMB customer app.

2. Select Team from the navigation bar.

3. In the search field, enter the CCC code.

   The user with the related CCC code appears in the search results.

Entry Delay provides some time (default of 30 seconds) for a user to disarm an area, after entering the site. It is ideally suited for intruder alarm sites, where a user has entered using a physical key, and must then disarm the site.

Procedure

To configure entry delay, perform the following procedure:

1. Click the Areas tab.

2. Select the area to configure entry delay for.

3. Select the Delay Warnings tab.

4. Enable Entry Delay. The default entry delay time is 30 seconds. This is the period of time a user will have to disarm the site, after entry.

5. Click the Assign Inputs button and assign one or more entry points.

   The first entry point to be activated will trigger entry delay. When the area is in delay, entry points will not raise an alarm until the delay period has expired. Non-entry point sensors will immediately raise an alarm when the area is in delay or armed.

   Notes:

   • Assignment of an entry point is required if entry delay has been enabled.

   • Only inputs assigned to the area, can be assigned as entry points.

   • Inputs assigned to an access-controlled door cannot be assigned as entry points.

   • Battery Low and Mains Failure inputs cannot be assigned as entry points.

   • When a disabled input is assigned as an entry point, it will be automatically enabled.

   • When an input is assigned as an entry point, the input’s alarm response will be set to ‘Secure Alarm’.

6. If required, select the readers to beep when the area is in entry delay.

   Any reader can be assigned as a delay warning. When the area is in delay, the reader will emit a continuous beep, until such time, as the delay has been cancelled, or the delay period has expired.

7. If required, select the outputs to activate when the area is in entry delay.

   Any output, excluding door relays, can be assigned as a delay warning. The output will activate, until such time, as entry delay has been cancelled, or entry delay has expired. The output could be a piezo buzzer or light that provides an audible or visual indication to users, that the area is in entry delay. An output is useful when the audio from a reader cannot be heard, (e.g. a user has entered an upstairs office, failing to disarm before entry).

Note: To complete the configuration, a warning (reader or output) must be assigned.

Output behaviour

If the delay warning output is on, and delay occurs, the output will remain on for the delay period and will turn off when the delay has been cancelled, or the delay period has expired. If the output is an Alarm Output, the output will be on when the area is in alarm, (i.e. will remain on after the delay period, if the area is in alarm). Likewise, if the output is a Reflected Output, the output will be on when the area is armed, (i.e. remain on after the delay expires, if the area is armed).

Auto-guard callout

If the delay period expires and an incident is generated, auto-guard callout will occur from the time the incident was raised. For example, if the system has been configured to call a guard after 10 minutes, and entry delay is configured for 30 seconds, the system will call a guard 10 minutes and 30 seconds after activation of the first entry point.

Ignoring entry points

If a customer isolates an entry point when arming, the input will continue to trigger entry delay. An alarm will be raised that entry delay has timed out (if timed out), however, the isolated input will not raise an alarm. This is expected behaviour. Ideally, the customer should not arm the area when the entry point is open.

The Gallagher SMB Installer Portal is where Technicians configure SMB customer sites. This section gives an overview of the portal, before you use it to configure sites in the 'Configuration' section of this Help.

SITES tab

The SITES tab lists all of the sites that you as a technician have access to. To view an existing site, click on its name in the list, or search its name in the search bar and then select it.

From this tab, you can also create a new site. This is covered in the topic Create a Site or Demo Site.

TECHNICIANS tab

The TECHNICIANS tab is only viewable when logged in as an Install Manager technician.

It lists all the technicians within your organisation. A technician has one of two roles: Install Manager or Install Technician.

• Install Managers can create, view, update, delete, and resend invites to all the technicians on the TECHNICIANS tab, and change a site's Key Account Holder and general configuration.

• Install Technicians cannot access the TECHNICIANS tab or change a site's Key Account Holder, but can perform standard configuration for sites.

On the TECHNICIANS tab, as an Install Manager, you will see your own technician account listed. You can edit and resend the invite to your own account, but you can never delete your own account or change your own Role. These actions must be performed by another Install Manager technician.

SUPPORT tab

The SUPPORT tab contains three sections; 'Technical', 'Administration', and 'Manage Demo Sites'.

• The 'Technical' section contains links that can help you when you need technical help, including the help centre for installers, installer training material, and an option to contact technical support.

• The 'Administration' section contains links to things you and your customers may need for sales and product setup. This includes links to SMB sales and marketing material, the SMB product order form, and the guarding form.

• The 'Manage Demo Sites' section contains all the Demo Sites you have access to. For more information about Demo Sites, click here.

The Site Details button allows the general details of the site to be changed after it has been created. The site must be in Installer Mode for the site details to be changed.

To modify the Site Details:

1. Click the Site Details button.

   The Site Details lightbox displays.

2. Change the details as required, such as the Name, Timezone, Country and Address of the site.

   Note: For a timezone change to take effect on the Controller, you must publish the configuration.

3. Change the Subscription and Guarding details as required.

   Note: These are not applicable for Demo Sites.

4. The Site uses tags toggle defines whether Key Tag assignment and management functionality is enabled.

   Tags are considered a single-factor credential. If tags are used for access, the area the doors are associated with must be configured to disarm with a single-factor authentication. This is part of the Area configuration.

5. Click the OK button.

   The site details are changed.

The 'SITE ACTIONS' section of a site in the Installer Portal contains key actions around the configuration and activation of the site. The available options depend on the current state of the site, but can include:

At all times:

• View the Site Details

• View, add, and modify Site Notes

• View and change the Key Account Holder

Only before the site is activated:

• Activate the site (see Activation)

Only once the site is activated:

• Download the Monitoring Report (see Alarm transmitters or IP Alarms)

Only in Installer Mode (or before the site is activated):

• Modify the Site Details

• Enable Test Mode (cannot be done manually before activation)

• Invite yourself to the site

• Publish configuration to the Controller

The Key Account Holder button lets Install Managers view the details of the Key Account Holder and also change the Key Account Holder.

Note: Install Technicians cannot change the Key Account Holder. For more about Technician roles, refer to Installer Portal overview > 'TECHNICIANS tab'.

1. Click the Key Account Holder button.

   The Key Account Holder lightbox displays.

2. Click the CHANGE KEY ACCOUNT HOLDER button.

   The New Key Account Holder lightbox displays.

3. Enter the email address of an existing SMB app user for this site.

4. Click OK.

5. In the confirmation pop-up, tick the check box then click OK.

   The selected user is given the Site Manager role and is made the Key Account Holder. They will receive an email informing them of the change.

Exit Delay provides some time (default of 30 seconds) for an on-site user to exit or disarm the area, after an arming request has been sent. It is ideally suited when a user has remotely armed an area, unaware that a user is on-site. It provides the on-site user with an opportunity to disarm the area (cancel the arming request) or to exit the area.

Functionality:

• After arming an area (or several/all areas), the area's configured Exit Delay starts counting down (if Exit Delay is enabled). If a user with the Privilege to disarm presents a valid credential at one of the area's readers before the delay period expires, the 'arm' action is cancelled and the area/site remains disarmed.

• The area's Exit Delay period expires (and the area is armed) as soon as a door that accesses the area is opened and closed. If one of the area's access doors is opened or closed after the Exit Delay period has expired, an alarm is raised.

Procedure

To configure exit delay, perform the following procedure:

1. Click the Areas tab.

2. Select the area to configure exit delay for.

3. Select the Delay Warnings tab.

4. Enable Exit Delay. The default exit delay time is 30 seconds. This is the period of time a user will have to exit or disarm the area, after an arming request has been sent.

5. Click the Assign Inputs button and assign one or more exit points.

   When an exit point closes, exit delay will cancel, and the area will immediately arm. For example, a reed switch on a door, when closed, will immediately arm the area.

   Notes:

   • Assignment of an exit point is optional.

   • Only inputs assigned to the area, can be assigned as exit points.

   • Battery Low and Mains Failure inputs cannot be assigned as exit points.

   • When a disabled input is assigned as an exit point, it will be automatically enabled.

   • When an input is assigned as an exit point, the input’s alarm response will be set to ‘Secure Alarm’.

6. If required, select the readers to beep when the area is in entry delay.

   Any reader can be assigned as a delay warning. When the area is in delay, the reader will emit a continuous beep, until such time, as the delay has been cancelled, or the delay period has expired.

7. If required, select the outputs to activate when the area is in exit delay.

   Any output, excluding door relays, can be assigned as a delay warning. The output will activate, until such time, as exit delay has been cancelled, or exit delay has expired. The output could be a piezo buzzer or light that provides an audible or visual indication to users, that the area is in exit delay. An output is useful when the audio from a reader cannot be heard, (e.g. the site has been armed remotely, and an onsite user is unable to hear the reader beep).

Note: To complete the configuration, a warning (reader or output) must be assigned.

Output behaviour

If the delay warning output is on, and delay occurs, the output will remain on for the delay period and will turn off when the delay has been cancelled, or the delay period has expired. If the output is an Alarm Output, the output will be on when the area is in alarm, (i.e. will remain on after the delay period, if the area is in alarm). Likewise, if the output is a Reflected Output, the output will be on when the area is armed, (i.e. remain on after the delay expires, if the area is armed).

If an input is open when an area configured with exit delay is armed, the input will raise an alarm. For areas without exit delay, the user will be notified that the input is open when attempting to arm.

Input behaviour

If an input is open when an area configured with exit delay is armed, the input will raise an alarm. For areas without exit delay, the user will be notified that the input is open when attempting to arm.

Viewing a door's status

A door's 'Status' tab only displays when a reader is assigned to the door and the reader is online.

You can view a door's status to diagnose connection faults with the door. To view a door's status, open the door's properties and select the 'Status' tab. This tab displays the state of the door and all items assigned to the door. Status is updated in real-time.

Viewing a door's event history

A door's 'Event History' tab only displays when a reader is assigned to the door and the reader is online.

You can view a door's event history to see a record of its historical events. For example, the event history will include a record of access denied events, access granted events, lock and unlock overrides, and other alarms such as 'forced' or 'open longer than expected'. You can filter the event history by 'All Events', 'Alarms', or 'Active Alarms', and by the time the event occurred.

Overriding a door

After the configuration has been published and before the site is activated, you can unlock a door from within the SMB Installer Portal.

• Opening the door The 'Open Door' override is intended to let someone through the door, and let the door lock again once they have passed through. Next to the door item, click Open Door. The door will unlock momentarily, then relock.

• Unlocking the door

  The ‘Unlock Door’ override is intended to unlock the door for a set period of time.

  1. Next to the door item, click Unlock Door.

  2. Set the Duration in Minutes. This duration is how long the door will remain unclocked for, before locking again. The default is 10 minutes.

  3. Click OK. The door will unlock for the set duration, then relock.

  To re-lock the door manually, select Lock Door. When the site is activated, the ‘Unlock Door’ override will be cancelled.

The Site Notes button opens the notes for the site, where you can add, edit, and delete notes for you and other Technicians to refer to.

Creating a Site Note

1. Click the Site Notes button.

   The Notes lightbox displays.

2. Click the + button to create a new note.

3. Type out the note you would like to add for this site. Each note is limited to 500 characters.

4. Click the SAVE button.

   The note is added to the left-hand navigation panel within the Notes lightbox. Notes are listed in this panel in order of most recently modified.

5. Click the x button to close the Notes lightbox.

Editing a Site Note

1. Click the Site Notes button.

   The Notes lightbox displays.

2. Select the note from the left-hand navigation panel.

3. Type in the text area to make any required changes.

4. Click SAVE, then click the x button to close the Notes lightbox.

Deleting a Site Note

1. Click the Site Notes button.

   1. The Notes lightbox displays.

2. Select the note from the left-hand navigation panel, and click the DELETE button.

3. Click YES, then click the x button to close the Notes lightbox.

Areas

An area is a collection of sensors that the customer will want to arm or disarm together, separately from other areas. Areas typically define a physical space within the customer’s site, and include the sensors installed in that space.

Example: The manager's office is set up as a separate area from the reception. The receptionist is able to disarm the reception, leaving the office secure.

Area Groups

Area Groups allow areas of a site to be grouped to suit the way the business owner wants to operate their site. Area Groups typically define parts of the site which are physically separate from each other, so that entering one doesn’t necessarily mean you want to enter or disarm another.

Example: The site has an office block and a separate warehouse. Staff that work in the office block typically don’t have access to the warehouse. By creating two area groups, fully privileged users can easily disarm the office block on arrival while leaving the warehouse armed, or vice versa.

Using Key Tags, Cards, or User Codes to access an area

If a site wants to use Key Tags, cards, or User Codes to access an area, the area must use Single Factor. In the Area's properties, set the Locally disarm area option to 'Single Factor'.

Configuring Areas and Area Groups

When first created, the site is populated with default input and output data. The inputs are assigned to the default Area - Area 1, and default Area Group - Default Area Group.

The data can be viewed by 'As wired' and 'By area'. For configuring Areas and Area Groups, 'By area' is the easiest view to be in.

Adding an area

To add a new Area, select the + ADD NEW button and select 'Area'.

Configuring an Area

1. From the Areas tab, select the Area you have created to open its properties.

2. Name the Area something meaningful to the customer.

3. If the site has Area Groups configured, the Area Group drop-down list displays. Select an Area Group for the Area to be added to, or leave it in the 'Default Area Group'.

4. If using Key Tags, Cards, or User Codes to arm & disarm an Area, change the Locally disarm area to 'Single Factor'. 'Two Factor' can only be used if the customer is using the SMB app only.

5. Select the customer's desired behaviour from the Default Arming Mode drop-down list. This option determines how the Area arms when it is armed via SMB tags and User Codes or Automatic Arming schedule. It does not affect arming via the SMB app, which always uses the Bypass method.

   • Force Arm: When the Area is armed via SMB tag, User Code, or schedule, it will arm even if there are open (active) Inputs in the Area. Any input that is open when the Area arms will immediately trigger an alarm, and an incident will be raised.

   • Bypass: When the Area is armed via SMB tag, User Code, or schedule, it will arm even if there are open (active) Inputs in the Area. When the Area arms, any open Input will be bypassed, i.e. it will not trigger an alarm or raise an incident until the Area is disarmed and armed again.

   • Fail to Arm: When the Area is armed via SMB tag, User Code, or schedule, it will fail to arm if there are open (active) Inputs in the Area. If arming fails, this is raised in an incident. If arming fails when attempting to arm at an access reader, the reader will also briefly sound a siren noise to indicate the arming failed. If no Inputs in the Area are open, the Area will arm successfully.

6. Assign Inputs and Outputs as required.

7. To configure the Delay Warnings tab, refer to the following sections: Configure Entry Delay and Configure Exit Delay.

8. Once finished configuring the Area, click OK to close and save your changes.

   Note: Once the Area is configured, its Event History tab displays all events associated with this output. Events can be filtered.

9. Assign the Area to Area Groups, if applicable.

Configuring an Area Group

1. To add a new Area Group, select the + ADD NEW button and select 'Area Group'. Or, select an existing Area Group to open its properties.

2. Name the Area Group something meaningful to the customer.

3. To add Areas to the Area Group, select the + ASSIGN AREAS button, then select the check box next to each Area you wish to add to the Area Group.

4. Once finished, click OK to close and save your changes.

Removing Areas from Area Groups

Since all Areas must be in an Area Group (once you have created at least one Area Group), you cannot simply remove an Area from its group. To remove an Area from an Area Group, add it to another Area Group or the 'Default Area Group'. This will remove it from its previous group, since it can only be in one group.

Once an Area Group has had all of its Areas moved to another group, it can be deleted. If all Area Groups are deleted, the 'Default Area Group' is also deleted.

Test Mode allows Technicians to install, configure, and test an SMB site without annoying or alarming anyone by setting off the sirens or any other type of device activated in response to an alarm. Test mode also prevents Site Managers, guards, and monitoring services from responding to alarms generated while the system is being tested.

Test Mode can be used as part of your ongoing maintenance process. All Gallagher-manufactured parts are covered under the Gallagher SMB Product Warranty Policy. Annual testing and maintenance checks are recommended to ensure the solution is meeting the customer’s needs.

New sites

Test Mode starts automatically when a new site is created, and ends when the site is activated.

Test Mode gives Technicians the ability to test individual outputs. Alarm Relays are bypassed, and technicians can ‘chirp’ test outputs from this screen.

When Test Mode is enabled for new sites:

• All alarm outputs are automatically bypassed. This prevents sirens etc. being activated during Test Mode.

• The Installer Portal will display a banner showing when Test Mode will expire.

During Test Mode (new sites)

Technicians can "Test" individual outputs by using the TEST found next to the outputs in the Installer Portal. This will override the output to On for 1 second, then Bypass the alarm output again (or cancel the override) which will turn it off.

Existing sites

Enabling Test Mode for existing sites

1. Once a site is activated, ask the Site Manager to enable Installer Mode within the Gallagher SMB app. Notes:

   • Installer Mode allows Technicians to make configuration changes to the site in the Installer Portal and publish changes to the Controller.

   • Test Mode can only be enabled after Installer Mode has been enabled.

   • Test Mode puts the site in a state that is no longer production-ready (alarm relays will not activate), therefore Test Mode can only be enabled for a short period of time, less than 24 hours.

   • If Installer Mode is disabled, Test Mode will automatically be disabled too.

2. After Installer Mode is enabled in the Customer app, the Enable Test button is visible in the Installer Portal.

3. Select Enable Test Mode in the Admin section of the Installer Portal.

4. Select an expiry time.

   If the site has Monitoring or Guarding enabled, a message will display to remind the Technician to contact the Monitoring or Guarding company to advise that the system is being tested. This will prevent unnecessary call-outs.

   Note: Test Mode can only be enabled if there are no Guard call-outs currently in progress for the site.

When Test Mode is enabled:

• All alarm outputs are automatically bypassed. This prevents sirens etc. being activated during Test Mode.

• Any currently in-progress Incidents will not receive any new alarms (existing incidents remain open).

• A new Test Mode incident is created to capture any alarms generated during Test Mode.

• A notification is sent to all Site Managers alerting them that Test Mode is enabled.

• The Installer Portal will display a banner showing when Test Mode will expire.

• The Customer app will display a banner explaining that the site is under maintenance.

During Test Mode (existing sites)

• Any alarms generated will be added to the 'Test Mode Incident'.

• Technicians can "Test" individual outputs by using the TEST found next to the outputs in the Installer Portal.

  This will override the output to On for 1 second, then Bypass the alarm output again (or cancel the override) which will turn it off.

• If Monitoring is enabled during Test Mode, the Technician will be advised, when publishing the change, that the Monitoring company needs to be informed that the system is under test.

Disabling Test Mode (existing sites)

• Test Mode can be disabled due to any of the following occurring:

  The Technician selects Disable Test Mode in the Admin section of the Installer Portal.

  The Test Mode period expires.

  The site is taken out of Installer Mode (expires or is manually disabled).

• Ideally, a technician disables Test Mode manually by selecting Disable Test Mode in the Admin section of the Installer Portal when they have finished testing, as the site will be 'live' again when Test Mode is disabled.

• For sites with Monitoring or Guarding enabled, if Test Mode is disabled manually, a reminder will display to inform the Monitoring or Guarding company that testing has finished.

When Test Mode is disabled:

• Incidents generated during Test Mode are automatically closed.

• Alarm outputs are un-bypassed.

• Banners in both the Customer app and the Installer Portal are removed.

The Display Names button lets Technicians change the names of an SMB site's roles, which are by default 'Site Manager', 'Site Admin', and 'Site Member'. An SMB customer may request this, for example, so that the role names in the app correspond with the job titles that they already use.

1. Click the Display Names button.

   The Display Names lightbox displays.

2. Change the Role Names as requested by the customer.

3. Click OK. Wherever a role type is displayed or selectable in the SMB app, the new role names will now be displayed.

You can set the length that User Codes will be when they are generated for users in the SMB app. User codes that have already been assigned to users will not be affected if you change the minimum user code length.

Note that this option only displays if at least one T30 Terminal has been configured for the site. The User Code Length can only be changed before the site has been activated or while in Installer Mode.

Setting the User Code length

To set the minimum User Code length:

1. If the site has been activated, ask the customer to enable Installer Mode.

2. Click the User Code Length button.

   The User Code Length lightbox displays.

3. Select the Minimum length from the drop-down list. Generally, longer User Codes are considered more secure.

4. Click the OK button. New User Codes will now be generated at this length in the SMB app.

The Gallagher SMB solution can support up to 10 access control doors. Access control doors have a Gallagher SMB reader which a user can either present their smartphone or SMB key tag or enter an SMB User Code into a Keypad.

iOS smartphones communicate with the reader using Bluetooth®. Android smartphones communicate with the reader using NFC or Bluetooth®. A tag will communicate with the reader using NFC.

Access granted and access denied events will appear in the Activity log. The user’s name, credential type, and door name are reported.

A user can request access by presenting their smartphone, SMB Key Tag or SMB Card at the door’s reader or entering a User Code into the T30 Keypad. The smartphone must host the Gallagher SMB app with a valid mobile credential for the site.

iOS smartphones communicate with the reader using Bluetooth®. Android smartphones communicate with the reader using NFC or Bluetooth®. The tag and card communicate with the reader using NFC.

Access granted events will appear in the History log of the Site Manager’s app when access has been granted and taken through the door. The user’s name and door name are reported.

Notes:

• Location permission must be enabled on Android devices, as without this permission the device’s Bluetooth® won’t scan, even if Bluetooth® itself is enabled.

• Only Site Managers and privileged Site Admins can view doors and their locked/unlocked status within the Gallagher SMB app.

• For an access granted event to appear in the History log, access must be granted and taken through the door. The door’s open sensor must change state.

• Door configuration supports a reader on one side of the door only. The solution does not support entry and exit readers on the same door.

Controlled entry

To be granted access, the user must have privilege to the area the door leads into. If they have privilege for the area, access will be granted, and the controller will unlock the door.

If the area the door leads into is armed, the system will prompt for a second factor to disarm. The user must have privilege to disarm the area the door leads into, hence must present a valid FIDO authenticator (PIN, Fingerprint, or Face ID). The controller will then disarm the area and unlock the door.

Notes:

• Access decisions are made at the controller, not the reader.

• Site Members cannot arm or disarm areas, hence if the door leads into an armed area, access will be denied. A Site Manager or Site Admin must first disarm the area.

• If an area is disarmed as a result of a successful access request, it is not re-armed if access isn’t taken.

Request to Exit

Exiting the area is achieved by either turning the door handle (mortise lock) or by using a push button release (magnetic lock). The door will temporarily unlock, allowing the user to pass through.

Note: The Request to Exit must transition to the closed state to unlock the door. If it transitions to the opened state, invert the Request to Exit input.

Unlock override

Unlocking the door from within the Gallagher SMB app will perform an unlock override. The door will not automatically change back to the locked state, until scheduled to do so. For example, if the door is scheduled to lock at 5pm each day, but a user unlocks the door from within the app at 6pm. The door will not lock again until 5pm the following day, unless a user locks it from within the app or the site is armed.

Note: Arming the site will automatically lock all doors.

Adding an access control door

Doors with readers can be used for access control. They allow people to access them with a valid credential.

Adding a door without a reader

Gates, roller doors, or cupboards without a reader are not considered ‘access control’ doors, as the door is locked and unlocked remotely via the app or open-door button.

Within the customer app:

• Doors without readers are displayed on the 'Doors' tab.

• All actions for these doors must be performed in the SMB Customer app. SMB Key Tags, SMB Cards, and User Codes cannot be used for these doors. See Controlling a Door remotely.

• All Site Managers get privilege by default.

• Site Admins have the optional Additional Privilege to lock/unlock remote doors to selected areas.

• 'Unlock by' and 'Lock by' will appear in the History Log. These are not Access Granted events, as the system doesn't know who (if anyone) opened the door.

About door Alarm Responses

Refer to the table below for a detailed overview of the behaviour of each of the Alarm Response types:

Accessing a door on-site

Using the SMB app:

1. Open the Gallagher SMB app (the app can be running in the background).

2. Place your smartphone on or near the reader.

   If successful, the reader’s LED will turn green, and the door will temporarily unlock.

   If you receive an access denied message, you will either have the wrong permission for the door or, the area will be armed and you don’t have disarm privileges. Contact your Site Manager for assistance.

SMB Key Tags:

1. Tap the SMB key tag once (single badge) at the reader.

   If successful, the reader’s LED will turn green, and the door will temporarily unlock.

   If you receive an access denied tone and the reader flashes red, you will either have the wrong permission for the door, or the area will be armed and you don’t have disarm privileges. Contact your Site Manager for assistance.

SMB User Codes:

1. Enter your User Code.

2. Push the button with the green tick.

   If entered correctly, the LED squiggle on the T30 reader flashes green, and access is granted.

   If entered incorrectly, the LED squiggle on the T30 reader flashes red, and access is denied.

Opening a door while off-site (remote)

Arming and disarming your security alarm

The Gallagher SMB app provides the ability to arm and disarm your site's security from anywhere at any time.

A Site Manager or Site Admin, with additional privileges, can arm and disarm the solution using the SMB app, SMB Key Tags, or SMB User Codes. Should connection to the internet be lost, app users can use Bluetooth on their phone to arm and disarm their site locally at the reader.

Using the SMB app

From the ALARM tab within the SMB app, privileged users can arm and disarm their alarm for the whole site or select specific areas.

With the SMB app open in the background and with Bluetooth background settings enabled, the site can also be armed and disarmed by holding a phone up to the reader.

Arming

To arm the whole site:

1. Navigate to the Site page.

2. From the ALARM tab, click the ARM SITE button.

   Arming the site will automatically lock all doors.

To arm a specific area:

1. From the ALARM tab on the Site page, click the Areas dropdown.

2. Select the check box next to the area.

3. Click the ARM SELECTED AREAS button.

   The ALARM tab will indicate the site is Part Armed. If you want to arm the full site, click ARM SITE.

After arming:

• After arming an area (or several/all areas) and if Exit Delay is enabled, the area's configured Exit Delay starts counting down. If a user with the Privilege to disarm presents a valid credential at one of the area's readers before the delay period expires, the 'arm' action is cancelled, and the area/site remains disarmed.

• The area's Exit Delay period expires (and the area is armed) as soon as a door that accesses the area is opened and closed. If one of the area's access doors is opened or closed after the Exit Delay period has expired, an alarm is raised.

Disarming

To disarm the whole site:

1. Navigate to the Site page.

2. From the ALARM tab, click the DISARM SITE button.

To disarm a specific area:

1. From the ALARM tab on the Site page, click the Areas dropdown.

2. Select the check box next to the area.

3. Click the DISARM SELECTED AREAS button.

   The ALARM tab will now indicate the site is Part Armed. If you want to disarm the full site, click DISARM SITE.

Using the SMB app - onsite at the Reader

If you are a Site Admin, with access to the SMB app but not the privilege to remotely arm and disarm a site through the SMB app, you can do it onsite at the reader.

To use the SMB app to arm & disarm at the reader:

• The user must be next to the reader to perform this action.

• Bluetooth must be turned on and permissions enabled.

Arming

To arm the whole site:

1. Navigate to the ALARM tab.

2. Click the ARM/DISARM SITE AT READER button.

   This will connect the user to the reader.

3. Click ARM SITE button.

After arming:

• After arming an area (or several/all areas) and if Exit Delay is enabled, the area's configured Exit Delay starts counting down. If a user with the Privilege to disarm presents a valid credential at one of the area's readers before the delay period expires, the 'arm' action is cancelled, and the area/site remains disarmed.

• The area's Exit Delay period expires (and the area is armed) as soon as a door that accesses the area is opened and closed. If one of the area's access doors is opened or closed after the Exit Delay period has expired, an alarm is raised.

Disarming

To disarm the whole site:

1. Navigate to the ALARM tab.

2. Click the ARM/DISARM SITE AT READER button.

   This will connect the user to the reader.

3. Click DISARM SITE button.

To disarm the specific area associated with the reader:

1. Tap the phone at the reader.

2. The reader will make a sound and go green.

   If the reader light is green, disarming was successful.

Using Bluetooth

When you don't have a Wi-Fi or cellular connection on your phone, the No Connection screen of the app will show.

To connect with Bluetooth, you will need to be on-site, close to the Bluetooth reader.

1. Check your mobile data or Wi-Fi are on and airplane mode is off.

2. If you are still unable to establish an online connection, select Connect with Bluetooth.

3. The reader will flash blue while attempting to connect. Stay close to the reader until a Bluetooth connection is established.

4. Once connected, arm or disarm your alarm as usual.

5. The app will then return to the No Connection screen. Use the light on the reader to confirm your action was successful – it should be green if disarmed and red if armed.

6. If an online connection becomes available, you will see a Restore Online Connection button. Select this to reconnect.

Using SMB Key Tags

An SMB Key Tag provides an alternative credential to the Gallagher SMB app, in case the user is not using a phone. In addition to gaining access, an SMB key tag can be used to arm and disarm an area.

Arming

1. Tap the SMB key tag twice (double badge) at the reader.

2. The reader will make a sound and go red.

   If the reader light is red, arming was successful.

Disarming

1. Tap the SMB key tags once (single badge) at the reader.

2. The reader will make a sound and go green.

   If the reader light is green, disarming was successful.

Using User Codes

SMB User Codes must be used with the Gallagher T30 Keypad. They can be used just for access, or, if the user has the correct privilege for a site, to disarm the area prior to accessing it.

Arming

The user must have arming privileges to arm an area with a User Code. If they have the correct privilege, the area arms. If the user does not have arming privileges, access is denied.

At the T30 reader Keypad, while the area is disarmed:

1. Press and hold the shield icon button for 3 seconds.

2. Enter your User Code.

3. Push the green tick button.

   If entered correctly, the shield LED on the T30 reader turns red.

   If entered incorrectly, the LED squiggle on the T30 reader flashes red, and access is denied.

Disarming

Once a User Code is generated, it is immediately available for the user to gain access.

If the area is armed, the user must have disarming privileges for the User Code to work. If they have the correct privilege, the area disarms and access is granted. If the user does not have disarming privileges, access is denied.

At the T30 reader Keypad, while the area is armed:

1. Enter your User Code.

2. Push the green tick button.

   If entered correctly, the LED squiggle on the T30 reader flashes green, and access is granted.

   If entered incorrectly, the LED squiggle on the T30 reader flashes red, and access is denied.

About Door Schedules

Door Schedules are simplified to reduce the need for them to be maintained or frequently changed.  A Door Schedule can be set by your Technician which specifies the hours each day that the door will be unlocked for.

• Door Schedules are configured by the Technician in the SMB Installer Portal.

• One Door Schedule per door.

• Each day of the week can be configured differently.

• Two options available: 'Locked 24 Hours' or 'Customised'.

Locked 24 Hours

The door will remain in the locked state unless a Site Manager changes the state to unlocked through the SMB app. If a Site Manager changes the state to unlocked, it will remain unlocked until it is locked again through the app, or the area is armed.

Customised

The technician can set the times when the door will be in an Unlocked or Locked state.  At the time the door is scheduled to be unlocked, if the 'First access unlock' feature is enabled,  the door remains locked until a user presents a valid credential. After being unlocked, the Door stays unlocked by default until the scheduled 'Locked' time.

First access unlock

If the 'First access unlock' feature is enabled for the door, then regardless of the door's schedule, the door will remain locked until a user with the Site Manager or Site Admin privileges badges at the reader.

If 'First access unlock' is not enabled for the Door, it will unlock immediately at the time its schedule states it will become unlocked, even when its Area is armed.

Scenarios

Andrew’s Motorbikes

Andrew’s Motorbikes supplies motorbikes and maintenance to the Waikato region. There are three staff members.

• Andrew – Store Manager and Site Manager

• Michael – Mechanic and Site Admin

• Simon – Salesman and Site Member

Andrew’s Motorbikes have both intruder detection and one access control door at the front.

The Doors Schedules are set up by the technician as follows:

All of the following scenarios are managed without making changes to the Door Schedule or contacting the technician:

If you need to make additional configuration changes after activating a site, the customer must .

By enabling Installer Mode, the customer has granted you permission to make changes to their site.

If you wish to use the customer app to test the site's access, alarm, and app behaviour from the perspective of the customer, you can invite yourself to the site. This can only be done before the site has been or while in . As a Technician, you have some restrictions in the customer app. You cannot:

• see the details of any user (except for names in events)

• create, delete, or send invites to users

• close incidents

• manually call out a guard.

You can only invite yourself to sites where you are recorded as being a Technician of the customer's Installer. You can send as many invitations as you like. You can have just one credential per site per technician. If you invite yourself as a user to multiple sites, you can interact with readers at all of those sites and can in the customer app.

Inviting yourself to the site

To request a credential for yourself to the customer's site:

1. If the site has been activated, ask the customer to enable .

2. Click the Invite Myself To The Site button.

   This sends an invitation to the email address entered against your Technician account; there is no option to send it to a different email address. SMS verification is not required.

3. Download the Gallagher SMB app if you have not already.

4. Select the Complete Registration link in the email invitation.

Changes made within the Installer Portal do not take effect until they are published to the Controller with the or button. The PUBLISH button displays when there are pending hardware changes; the REFRESH button displays at all other times to allow you to ensure the Controller configuration is up to date (e.g. if you have made a non-hardware site change).

When publishing/refreshing configuration to the Controller, doors will revert to their original schedule regardless of whether the customer has performed an override. For example, if the customer has overridden the schedule to Free, and then a Lock Door override is performed, the door will lock and the override will be lost.

Once changes have been published to the Controller, there is no way to restore to a previously published version. To revert the site configuration to how it was when it was last published, select DISMISS CHANGES under Unpublished Changes.

Note: Configuration can only be published/refreshed when the Controller is online.

Publishing configuration to the Controller

1. All changes appear in the sidebar to the right under Unpublished Changes.

   Note: If no changes have been made since the last publish, the 'Unpublished Changes' section does not display.

2. Select the floating PUBLISH button to publish the changes.

   Note: If the Controller is offline, the button will be disabled. If there are no pending hardware configuration changes, the '' button shows instead.

3. When PUBLISH is selected, a pop-up window will appear asking you to confirm you want the changes published. Select Publish Changes. Note: For all newly-installed sites, when the Controller comes online, it will immediately start downloading new firmware. If the firmware is still downloading when you attempt to publish the changes, a warning will appear. If changes are published while the download is not completed, the download will restart from the beginning.

4. After the configuration has been published, a small confirmation displays.

Refreshing the Controller configuration

If you have not made any hardware changes, but need to update the Controller's configuration anyway (e.g. you changed the site's timezone), you can use the 'REFRESH' button.

1. Select the floating REFRESH button to publish the current configuration to the Controller. Note: If the Controller is offline, the button will be disabled. If you have pending hardware configuration changes, the '' button shows instead.

2. When REFRESH is selected, a pop-up window will appear asking you to confirm you want the Controller to be updated. Select Yes. Note: For all newly-installed sites, when the Controller comes online, it will immediately start downloading new firmware. If the firmware is still downloading when you attempt to refresh the configuration, a warning will appear. If configuration is refreshed while the download is not completed, the download will restart from the beginning.

3. After the configuration has been refreshed, a small confirmation displays.

Onboarding the key account holder

Once the customer's site has been , an invitation email is sent to their key account holder (normally the business owner). You may help the key account holder through the steps in the email to ensure they are onboarded as the first fully privileged system user. The steps are:

1. Download the app, following the link in the email.

2. Trigger the SMS verification code to be sent.

3. Enter the verification code in the app.

4. Set up their preferred FIDO authentication option for logging into the app.

In order to download the credential and gain access to the security system, each user must have access to both the email address and mobile phone number (to receive the verification code) entered on their account details.

Issues with onboarding key account holder

If you are unable to onboard the key account holder, ensure they have a PIN, pattern, fingerprint, or Face ID set on their phone. If they don’t, they will need to set one.

When a site is activated, it will become operational and billing will commence. A site can be commissioned as soon as the system is operational, allowing the key account holder to start using the system before the Technician has fully completed the installation. The site can be activated at the Technician's discretion.

To activate the site:

1. Ensure you have in the SMB cabinet.

2. Select the floating ACTIVATE SITE button. This will send an 'account activation' email to the Customer key account holder.

3. The Customer key account holder will need to follow the instructions in the email to download the Gallagher SMB app and accept the credentials. Refer to Onboard users.

The site has now been handed over to the customer. The SMB Installer Portal changes to ‘read-only’ for the site. If you need to make additional configuration changes, the customer must enable within the Settings of the SMB App.

Introduction

This section covers the activation of the Gallagher SMB system, including:

Gallagher SMB is a cloud-based security system that lets you take control of your business security from anywhere, at any time, all from your smartphone.

Everything is at your fingertips, managed through the Gallagher SMB app. It’s simplified security, using the latest in cloud technology.

Site

The Site page is the homepage of the Gallagher SMB app and shows the status of the security system. It can be accessed from anywhere in the app by clicking the Site button on the navigation bar at the bottom of the screen.

If an incident occurs on your site, an incident banner will appear across the top of the SMB app. Tapping on the banner will show you more details about what has occurred.

Alarm tab

From the Alarm tab, users can arm and disarm the entire site or specific areas.

.

Doors tab

If the Site has access control doors, the Doors tab will appear under the Site homepage.

From the Doors tab, the Site Manager or Site Admin (if given the additional privilege) can unlock, lock or temporarily open the doors on the site/s they have access too.

.

Team

From the Team page, the Site Manager can add, edit and delete users. They can also allocate users' roles and manage which areas they have privileges for.

To find an existing user quickly, Site Managers can use the search and filter functions. If they are managing multiple sites, they can filter the users based on what site they are allocated to.

If a Site has SMB Key Tags, they can be encoded from the Team page.

Activity

The Activity page is split into two tabs: Events and Incidents.

Events

The Events tab shows a log of the arming and disarming activity and all events related to access control, including access granted and access denied.

Events can be filtered and exported to a CSV file.

Incidents

The Incidents tab shows details of all previous alarm activations, showing which alarms were activated, who actioned the alarm, and how.

More about incidents:

Multi-Site

The Multi-Site feature allows users to control and monitor the security of physically separate sites from one app. This is useful for businesses where user and alarm management are centralised, or where staff are required to move between premises regularly.

Settings

My Account

My Account gives an overview of your account details, including phone number, email address, and device registered for using the SMB app. From My Account, you can delete your own account (unless you are the Key Account Holder).

User Settings

User Settings allows you to apply settings to yourself as a user, including Bluetooth Background Access, Critical Alert Notifications, and enable Dark Mode.

Switch Site

If a Site Manager has access to more than one site, they can switch between them by clicking on Switch Site for a list of all other sites.

About

About gives an overview of the App version, Open Source Licenses used in development, and a link to Gallagher SMB Policies available on the Gallagher website.

Help

Help links from within the SMB app to the Customer Help.

Site Settings

Site Settings contains settings that apply at a site level, including enabling Installer Mode, Contact your Installer, and configuring Late to Arm Notifications. And, if Guarding is enabled, you can manage auto-guarding.

SMB customers can momentarily unlock a gate, roller door, or other type of door, from anywhere at any time. This saves the need to travel to the business, for example, when someone needs access to a site after hours, such as a courier driver dropping off goods.

For Site Managers and Site Admins with additional remote unlock/locking privileges, OPEN, PULSE, UNLOCK, UP, and/or ON buttons appear in the DOORS tab of the SMB app. Correspondingly, CLOSE, LOCK, DOWN, and OFF buttons are available to perform the opposite actions.

On the DOORS tab of the SMB app:

Gallagher SMB app walk-through

Arming and disarming your alarm

Managing users

Managing alarm incidents

Access Control

About User Schedules

User Schedules can only be applied to Site Admins and Site Members; Site Managers have full privileges at all times. Site Admins can only unlock doors and disarm areas within the timeframes specified in their User Schedule. Site Members can only open locked doors within the timeframes specified in their User Schedule. If a user does not have a User Schedule, they can perform their privileged actions at all times.

Creating a User Schedule

1. Navigate to the Team screen within the SMB app.

2. Click the clock icon near the top.

   1. The User Schedules screen displays.

3. Click the + CREATE SCHEDULE button.

   1. The Create User Schedule screen displays.

4. Enter a Name for the schedule. Choose a meaningful name, e.g. one that describes the times or types of users for which this schedule provides access, so it is recognisable when assigning it to users.

5. If you manage more than one site, select the Site for which this User Schedule is applicable. Only users belonging to this site can be assigned this schedule.

6. If you want this schedule to be selected by default when a new user is created for this site, select the Show as default when creating new users check box.

   The schedule can still be changed from the default or set to none when creating a user.

7. Toggle on each day of the week for which this schedule provides access. Access is denied at all hours on any day that is not selected.

8. For each day you selected, select the times that access is granted From and To. Outside of these times, access is denied.

   Note: If a Door is armed and the user does not have the privilege to disarm the site, access is denied regardless of their User Schedule.

9. Click the SAVE button.

Assigning a User Schedule to a user

New users

Existing users

To assign a User Schedule to an existing user, perform the following procedure:

1. Navigate to the Team screen within the SMB app.

2. Click the arrow to expand the user's card.

3. Click on Privileges.

   The Privileges screen displays. If you manage more than one site and the user belongs to more than one of them, each site is displayed.

4. If there is more than one site, click the arrow to expand the site for which you are assigning a schedule.

5. From the Schedule drop-down list, select the user's schedule for the site.

6. If the user has other sites, assign schedules for any other sites as required.

7. Click the SAVE button.

About schedules

There are two types of schedules in Gallagher SMB; Door schedules and User schedules.

Door schedules

Gallagher SMB has simplified Door schedules to reduce the need for them to be maintained or frequently changed.  A door schedule can be set by your Technician which specifies the hours each day that the door will be unlocked for.

User schedules

User schedules control when access is granted on a user level (rather than a Door level). Unlike Door schedules, User schedules are configured in the Gallagher SMB app and are assigned to individual users rather than Doors. User schedules should be used in combination with Door schedules so that the Door schedule determines the times that the door is unlocked, and then within (never outside of) those times, User schedules define when specific users can and cannot gain access.

An SMB tag (i.e. Key Tag or card) provides an alternative credential to the Gallagher SMB app, should the user not want to use their phone.

An SMB tag can also be used to arm and disarm a site. Using an SMB tag, a single badge at the reader disarms the site and a double badge at the reader arms it.

A tag can also be used by someone who doesn’t want to (or can’t) bring a phone to site. Examples are courier drivers, gate access, locker access, shared facility access, or access to an area or site that is not armed (24-hour site).

Assigning a tag

SMB tags are assigned to users using the Gallagher SMB app. A tag can be assigned when the user is created or assigned to an existing user. Any user role can be assigned a tag: Site Manager, Site Admin, or Site Member.

Assigning a tag to a new user

To assign a tag while creating a new user, perform the following procedure:

1. Navigate to the My Team screen within the SMB app.

2. Select the + ADD USER button. The New User screen displays.

3. Populate the required fields.

   Note: If the user does not need to use the app (i.e. they only use tags or User Codes), uncheck the Mobile App User check box. For example, for a cleaner or a courier, or when the user of the tag is not always the same person.

4. Select the NEXT button.

   The Privilege screen displays.

5. If you are a Site Manager for more than one site, a list of sites appears. Toggle on the Sites for which this user requires privileges.

6. Select whether the user is a Site Manager, Site Admin or Site Member (for Access Control only). See User Privileges for more information on what each role can do.

7. If you selected 'Site Admin', select which areas of the site they can arm and disarm. If you selected 'Site Member', select which areas they can access. Site Managers have privileges for the entire site.

8. Select the SAVE button.

   The Credentials screen displays.

9. Select the ASSIGN TAG button.

   Notes: - This button allows you to assign all types of tags, i.e. Key Tags and cards. - This button is only available for Site Managers in the mobile app if the site has tags enabled. Enable the 'Site uses tags' option in Site Details.

   The 'Ready to Scan' pop-up displays.

10. Present an SMB tag to the phone. If the assignment is successful, the tag will show as assigned to the user.

    The tag can now be used to request access at the doors that enter into the user’s privileged areas.

Assigning a tag to an existing user

To assign a tag to an existing user, perform the following procedure:

1. Navigate to the My Team screen within the SMB app.

2. Search for the user and click the downward arrow on their user card for more options.

3. Select the Credentials button.

   The Credentials screen displays.

4. Select the ASSIGN TAG button.

   Notes: - This button allows you to assign all types of tags, i.e. Key Tags and cards. - This button is only available for Site Managers in the mobile app if the site has tags enabled. Enable the 'Site uses tags' option in Site Details.

   The 'Ready to Scan' pop-up displays.

5. Present an SMB tag to the phone. If the assignment is successful, the tag will show as assigned to the user.

   The tag can now be used to request access at the doors that enter into the user’s privileged areas.

Using a tag across multiple sites

If the user belongs to multiple sites, one tag can be used for multiple sites. Simply switch sites in the Gallagher SMB app and assign the tag to the user within each site.

Removing a tag

A Site Manager can remove a tag from a user at any time. When the tag is removed, it can no longer be used on the site. The removed tag can then be assigned to another user.

To remove a tag from a user, perform the following procedure:

1. Navigate to the My Team screen within the SMB app.

2. Search for the user and click the downward arrow on their user card for more options.

3. Select the Credentials button.

   The Credentials screen displays.

4. Select the Remove button.

   The tag is removed from the user.

Disabling a tag

If a tag has been misplaced or left in an insecure location, a Site Manager can disable the tag. A disabled tag can no longer be used on the site. When the tag is located, it can be enabled.

To disable a tag, perform the following procedure:

1. Navigate to the My Team screen within the SMB app.

2. Search for the user and click the downward arrow on their user card for more options.

3. Select the Credentials button.

   The Credentials screen displays.

4. Select the Tag - Active toggle.

   The tag is disabled and can no longer be used on the site. When enabled, the tag can be used again.

Modifying access

If the Site Manager has an internet connection, they can modify the privileged areas that a Site Admin or Site Member can access at any time. Changes take immediate effect. The Site Manager need not interact with the user or their tag.

Scanning a tag

A Site Manager can identify a tag's owner by simply scanning the tag at their phone. This is useful when distributing tags to users, searching for a user within the system, or challenging the tag holder.

To scan a tag, perform the following procedure:

1. Navigate to the My Team screen within the SMB app.

2. Select the SCAN TAG button.

   The 'Ready to Scan' pop-up displays.

3. Present an SMB tag to the phone.

   If scanning is successful, the tag owner’s name will display with a link to navigate to the user’s details.

   If you are a Site Manager for multiple sites, the site name will display below the tag owner’s name. Navigate to that site to modify the user’s details.

Requesting access at a door

A user can request access by presenting their smartphone or an SMB key tag at the door’s reader. The smartphone must host the Gallagher SMB app with a valid mobile credential for the site.

iOS smartphones communicate with the reader using Bluetooth®. Android smartphones communicate with the reader using NFC or Bluetooth®. A tag will communicate with the reader using NFC.

Access granted events will appear in the History log of the Site Manager’s app when access has been granted and taken through the door. The user’s name and door name are reported.