Knowledge base 156: Setting up an Iris ID iCAM 7111-H1 with EAC software for Iris+Card+Pin with the templates stored on an iClass Smart card.

Knowledge base 156: Setting up an Iris ID iCAM 7111-H1 with EAC software for Iris+Card+Pin with the templates stored on an iClass Smart card.


This bulletin explains how to use 3 factor authentication with the Iris 7111-H1 reader using an IA-CRD iClass 32K card.

The iCAM operates in 2 modes Option 1 which is only for enrollment and Option 3 which is for general use. During this bulletin we will be moving between option 1 (enrollment) and option 3 (general use) as this bulletin is based on a single iCAM being used, if you have a dedicated camera for enrollment these steps aren't necessary.




Equipment required -

Iris 7111-H1 reader with built in Omnikey iClass reader to use as an enrollment reader.
IA-CRD encoded HID iClass 2004CGGNN cards.
EAC software version 3.18.03 R5.
EAC License file (contact sales@controlsoft.com should you need to purchase this).
PC or Server running an up to date version of Microsoft Windows.



1. Basic configuration -

1.1. Install EAC as per the guide attached at the end of this bulletin called 'IrisAccess EAC System Installation and Setup Guide.pdf'.

The Iris Server software may need to be allowed through the Windows Firewall
1.2. Update the firmware of the iCAM 7111-H1 to version 8.06.10 as per attached guide at the end of this bulletin called 'Updating iCAM using iCAM7000S Update Utility.pdf'.

Default IP of the iCAM reader - 192.168.5.100
1.3. The iCAM reader also requires some basic settings to be changed before linking into the EAC software, to do this open a web browser e.g. IE/Edge/Chrome and type the default IP address of the iCAM reader shown above.

Default iCAM web login -

Username =  iCAM7000
Password = iris7000

*Note the username & password are case sensitive

You may experience an error stating this site isn't secure, please ignore this error and continue by clicking More information and then Go on to the webpage -




1.4. Network Settings -
Please either change the IP on the customers request or if you have additional readers on the same default IP address ensure they all have an individual IP address.
Also set the IrisServer IP to the IP address of the machine where you have installed the EAC software.

Each device must have it's own Security ID, the default is sixteen one's as shown below.





1.5. iCAM Settings -
Recognition Mode must be set to Smart Card (Iris on card) + Iris as shown below -



1.6. Wiegand Settings -
The wiegand Out setting must be set as per the screenshot below then click OK.




1.7. GPI & Relay Settings - 
The on-board relay needs to be disabled when using ACU mode, please adjust the setting below and click OK -



1.8. LCD, Function Key & PIN Pad Settings (LCD Models Only) - 
Please adjust the settings shown below and then click OK -




1.9. Operational Mode -
Please now set the reader into Option 1 as shown below, then click OK and the reader will then reboot ready to move on to step 2, you can now close the web browser -



2. Configuring EAC for Iris + Card enrollment

2.1. On the EAC Server run the IrisManager application from Start Menu > IrisAccess(TM) EAC SW V3.18 click OK to use 127.0.0.1 as the server's IP when prompted.
2.2. The default login details for the IrisManager are -

ID: administrator 
Password: iris3000

2.3. Please change the Default password when prompted to.
2.4. Next choose Creation > Remote Unit...



2.5. Click New...



2.6. Type a Name for the reader, IP Address and use the default Security ID of 1111111111111111 (Sixteen number one's)
Reminder: Each device needs it's own Security ID which is set in the iCAM readers web page under Network Settings as detailed in step 1.4.
The Description is optional.
Channel ID use 1.
Use Type choose Identification.
And for the Model use the last option iCAM7100S (OPTION 3).
Priority set to 1.

2.7. Click OK.
2.8. Close the Iris Manager application.
2.9. Open IrisEnroll application from Start Menu > IrisAccess(TM) EAC SW V3.18. 
2.10. Login with default credentials -
Username: administrator
Password: iris3000
(unless this was changed earlier then use the password you entered)

2.11. Click the Connect icon.
2.12. Click the Connect button shown below -


2.12. Once connected, please click on Options.
2.13. Then choose Smart Card.
2.14. Tick Use Smart Card.
2.15. Change Data Format to IA EAC FORMAT.
2.16. Tick Always issue Smart Card.
2.17. If for GDPR reasons you cannot store data in database untick Send Iris Code to Iris Server.
2.18. Leave the remaining Block, Book and Application settings as standard.
2.19. Click OK.

3. Creating iClass Encryption keys for smart card -

3.1. Run the IrisServer application
3.2. Default login credentials -
ID: administrator
Password: iris3000
(Unless it has been changed in previous step).

3.3. Click Option
3.4. Select Set Smart Card (IA EAC Format) ...

3.5. Click Generate New Keys.

3.6. Click Register and then Save Keys as File and save an accessible location on the server i.e. C: Drive.


3.7. Do not rename this file from SmartCard.dat
3.8. Click Close.
3.9. In the IrisServer window Select File and click Close.


4. Enrolling an Iris + Card User

4.1. Open IrisEnroll from Start Menu > IrisAccess(TM) EAC SW V3.18.
4.2. Login.
4.3. Click Connect.
4.4 Now click Enroll.
4.5. Enroll your eye's by looking straight forward and making sure they are open wide, remove any spectacles prior to enrollment.
4.6. Follow the audible instructions from the camera.
4.7. Click Verification Test and verify your enrollment.
4.8. Click OK to the Verified message.

4.9. Select Fill in User Information.
4.10 Enter the users card number for the User ID.
4.11. Click Get user information.
4.12. If the user ID hasn't been enrolled before you should see a message Registered user information is not found click OK.
4.13. At this step if a card number clash is located the system will warn of this and you will need to specify a different card number.
4.14. Now enter First Name and Last Name 
4.15. Type the printed card number for the Card ID and again for the Card Number fields.
4.16. Click Next.

4.17. Click Next again.
4.18. Under Remote Group highlight All and click Add.
4.19. For Time Group highlight All and click Add.
4.20. Click Next.
4.21. Click Finish.
4.22. You are now prompted to encode the Smart Card.
4.23. Click Start to proceed.
4.24. The camera will prompt you to present a card, this needs to be presented at the front bottom right of the reader where there is a hand & card logo shown below -




4.25  Hold the card in front of the reader in the area shown above until the camera shows the message below -


4.26. Now you will need to verify your Iris templates again as per the audible message.
4.27. Click OK to the Verified Message.


5. Adding the Encryption keys to the reader -

5.1. Log back into the Iris readers web page as per step 1.3.
5.2. Go to Operational Mode.
5.3. Select Option 3: On-Device iCAM Control and Iris Matching Mode.
5.4. Click OK the reader will reboot again.
5.5. Log back in to the reader's web page.
5.6. Go to Smart Card Settings.

5.7. Ensure the Smart Card Type is set as HID iClass.
5.8. Change Data Format to IA EAC Format.
5.9. Encryption Key File click Browse.
5.10. Locate the SmartCard.dat file we saved earlier from the IrisServer, select it and click Open.
5.11. Click OK.

6. How to use the camera with 3 factor authentication (once steps 1 to 5 above are complete) -

6.1 First hold the iClass card to the front of the camera where the card logo is shown until you hear an audible tone.
6.2. The camera now will request you to look into the camera, please do so.
6.3. When you are verified a Pin Pad will now pop up.
6.4. Enter the pin number you have defined for that user in the access control system.
6.5. The door should now unlock.

If you have any problems or additional questions on this tech bulletin please contact support@controlsoft.com which will raise you a support ticket.