Guide_OPE-KSADMN-0290_G_KnoxConnect-Admin User Guide (7) (v60120)

KNOXCONNECT®

ADMINISTRATOR

USER GUIDE

1601 W. Deer Valley Road, Phoenix, AZ 85027

Phone: 800-552-5669 ● Fax: 623-687-2290

knoxbox.com

KNOXCONNECT

| ADMIN USER GUIDE

The Knox® Company, the Knox logo and all other Knox Company product or service names are registered

trademarks or trademarks of the Knox Company.

Restricted Rights Legend

U.S. GOVERNMENT RESTRICTED RIGHTS. UNPUBLISHED—RIGHTS RESERVED UNDER THE

in the FAR Section 52.227-14 Alt. III(g)(3), FAR Section 52.227-19, DFARS 252.227-7014(b), or DFARS

227.7202, as amended from time to time.

Important Information

FCC NOTICE

This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions:

(1) This device may not cause harmful interference, and

(2) This device must accept any interference received, including interference that may cause undesired

operation”.

Any changes or modifications could void the user's authority to operate the equipment.

This Class B digital apparatus complies with Canadian ICES-003.

Cet appareil numérique de la classe B est conforme à la norme NMB-003 du Canada.

This Device Contains: FCC ID: 2A0VI-KNOX-RAS, IC: 23479-KNOXRAS

KNOXCONNECT

| ADMIN USER GUIDE

CONTENTS

CONTENTS .................................................................................................................................................. 3

KNOXCONNECT OVERVIEW ..................................................................................................................... 5

About the KnoxConnect Management System ....................................................................................... 5

KnoxConnect Cloud Requirements ......................................................................................................... 6

Device Communication ........................................................................................................................... 6

KnoxConnect and Device Updates ......................................................................................................... 7

Additional Documentation ....................................................................................................................... 7

KNOXCONNECT LOGIN AND NAVIGATION ............................................................................................. 8

USERS ....................................................................................................................................................... 10

User Roles ............................................................................................................................................. 10

Users Screen ......................................................................................................................................... 11

Creating a User ................................................................................................................................. 12

Editing a User .................................................................................................................................... 14

Viewing a User’s PIN Assignments ................................................................................................... 15

Deleting a User ................................................................................................................................. 15

Creating Multiple Users (Upload utility) ............................................................................................. 16

Resend Registration Emails .............................................................................................................. 17

Username and Profile Setup ............................................................................................................. 18

Username and Password Recovery .................................................................................................. 19

Updating Personal Profile ................................................................................................................. 21

LOCK CODES ............................................................................................................................................ 22

Editing Lock Code Information .......................................................................................................... 23

KNOX ELOCK CORES .............................................................................................................................. 24

Editing Knox eLock Core Information ................................................................................................ 25

Assign Lock Codes to Knox eLock Core ........................................................................................... 26

KNOX EKEYS ............................................................................................................................................ 27

Editing Knox eKey Information .......................................................................................................... 28

Programming eKey Lock Codes ....................................................................................................... 29

Applying Changes to All Knox eKeys ................................................................................................ 30

KNOXDOCK PC APP ................................................................................................................................ 31

Configuring KnoxDock ...................................................................................................................... 31

Editing KnoxDock PINs ..................................................................................................................... 32

Applying Changes to all KnoxDocks ................................................................................................. 33

KEYSECURE ............................................................................................................................................. 34

Editing KeySecure Information .......................................................................................................... 35

Editing KeySecure User PINs ........................................................................................................... 37

Applying Changes to all KeySecure Devices .................................................................................... 38

MEDVAULT ................................................................................................................................................ 40

Editing MedVault Information ............................................................................................................ 41

Editing MedVault User PINs .............................................................................................................. 43

Applying Changes to all MedVault Devices ...................................................................................... 44

KNOXCONNECT

| ADMIN USER GUIDE

Initializing the Door Sensor ............................................................................................................... 45

SecurePIN .................................................................................................................................................. 47

Generating a SecurePIN for a device ............................................................................................... 47

Viewing SecurePIN Transaction History ........................................................................................... 48

NETWORK SETTINGS .............................................................................................................................. 50

Network Template Tab .......................................................................................................................... 50

Adding Network Templates ............................................................................................................... 51

Certificate Authority Certificates Tab ..................................................................................................... 52

Enterprise Client Certificates Tab .......................................................................................................... 53

Edit or Delete a Certificate ................................................................................................................ 54

DEVICE AUDIT TRAILS ............................................................................................................................ 55

KeySecure Tab ................................................................................................................................. 56

Selecting and Viewing Audit Trails ................................................................................................ 56

MedVault Tab .................................................................................................................................... 57

Selecting and Viewing Audit Trails ................................................................................................ 57

KnoxDock Tab ................................................................................................................................... 57

Selecting and Viewing Audit Trails ................................................................................................ 58

Knox eKey Tab .................................................................................................................................. 58

Selecting and Viewing Audit Trails ................................................................................................ 58

Knox eLock Core

Tab ........................................................................................................................ 59

Selecting and Viewing Audit Trails ................................................................................................ 59

KNOXCONNECT EVENT LOG .................................................................................................................. 60

Selecting and Viewing Event Logs .................................................................................................... 61

Selecting and Viewing an Existing Report ........................................................................................ 61

JURISDICTION .......................................................................................................................................... 63

Viewing Jurisdiction Details ............................................................................................................... 63

ADMIN ........................................................................................................................................................ 64

Groups Tab ....................................................................................................................................... 64

Viewing Group Members ............................................................................................................... 64

Creating, Editing, and Deleting, Groups ........................................................................................ 65

Assigning Devices to a Group ....................................................................................................... 66

Firmware and Versions Tabs ............................................................................................................ 67

Viewing Release Notes .................................................................................................................. 67

Settings Tab ...................................................................................................................................... 68

Dual PIN Feature .............................................................................................................................. 69

Software Download Tab .................................................................................................................... 70

VIEWING, CREATING, AND CHANGING REPORTS ............................................................................... 71

EXPORTING LISTS ................................................................................................................................... 74

TROUBLESHOOTING ............................................................................................................................... 75

KNOXCONNECT

| ADMIN USER GUIDE

KNOXCONNECT OVERVIEW

About the KnoxConnect Management System

The KnoxConnect Management System (KnoxConnect) is a cloud-based software system that is accessed at the

Knox website: knoxconnect.net. It is used to administer the Knox eLock System™ and supports the following

tools and components:

• KnoxConfig™ Software: KeySecure Network Configuration Tool for devices on firmware version 1.8.6 or

below.

• Knox Device Sync Software: Configuration update tool for KeySecure and MedVault devices on

firmware version 2.0 or higher.

• KnoxDock™: desktop programmer/charger for the Knox eKey™

• Knox eKey: Programmable electronic key that opens the Knox eLock Core

• Knox eLock Core™: Programmable electronic lock that can be used as the keyway in most Knox

products

• KeySecure

5 Programmable key retention device for mechanical Knox Master Keys

• KeySecure

6: Programmable key retention device for the electronic Knox eKey and mechanical Knox

Master Key

• MedVault

2.5: Narcotics Vault storage vault with mechanical lock or elock override

Intended Audience

KnoxConnect is managed by administrators who have different levels of access to the system through user roles.

KnoxConnect is accessible by any authorized user but depending on the user role, certain administrative

privileges and functions are limited. See the User Roles section for additional details.

Note: System administrators should have previous experience with software systems and configuring networked

devices or have applicable training.

Primary and Secondary administrators use KnoxConnect to:

• Administer user rights and permissions

• Configure KeySecure, eKey, KnoxDock, and MedVault settings.

• Share lock codes with mutual aid jurisdictions

• Change lock codes if jurisdiction boundaries change

• Deactivate missing or stolen Knox eKeys

• Monitor activity from KeySecure

5, KeySecure

6, Knox eKey, Knox eLocks, KnoxDock and MedVault

Administrative features include the ability to:

• Activate and deactivate users and devices

• Assign PINs to users, add user PINs to devices and perform other user administration tasks

• Easily control access by restricting users to one of the multiple roles

• Create groups of users and devices such as departments or stations

• Monitor users and devices in a jurisdiction

KNOXCONNECT

| ADMIN USER GUIDE

• View device usage details by time and user

• Create customized reports

KnoxConnect Cloud Requirements

To use the system, you must have one of the following browsers:

• Chrome

• Internet Explorer versions 10/11

• Safari

• Firefox

• Edge

Note: Knox strongly recommends that users stay current with Microsoft

operating system updates and web

browser updates.

Device Communication

KnoxConnect communicates with KeySecure, KnoxDock, and MedVault devices to provide administrative data,

and software/firmware updates automatically. This software-to-device synchronization occurs when the device is

connected to an internet enabled network.

Device Network Configurations

Knox KeySecure and MedVault devices interface with KnoxConnect using Ethernet or WiFi networking.

Communication Standards:

• 802.3 Ethernet

• 802.11 b/g/n 2.4Ghz

Supported Security/Encryption:

• Open (no encryption)

• WPA-PSK: TKIP

• WPA\WPA2: Mixed

• WPA2-PSK: AES

• WPA2-EAP-TLS

• WPA2-EAP-PEAP with TLS

• WPA2-EAP PEAP with MSCHAP

Note: EAP-FAST and WPA2-EAP-PEAP with PSK are not currently supported. Please contact Knox

Technical Support for assistance if your desired encryption is not shown.

Ports (required for communication):

• 443 - SSL communication

• 123 – Network Time Protocol (optional)

KNOXCONNECT

| ADMIN USER GUIDE

KnoxConnect and Device Updates

Knox Company will periodically implement software and device firmware updates. Before these updates are

released, an email notification will be sent to the primary and secondary administrators with release notes and

schedule. After the scheduled time:

• For KnoxConnect updates: Close and reopen your browser to start a new session (will require login).

• For firmware updates: All networked devices will update the next time they connect to KnoxConnect.

• For software updates: Users will be prompted to install KnoxDock, Knox Device Sync, or KnoxConfig

updates when using these tools.

Additional Documentation

Additional documents are available for KnoxConnect and Knox eLocks System products including:

• KnoxConnect Administrator Quick Start Guide

• Knox eLock System Quick Start Guide

• Knox Device Networking Guide

• Knox eKey

Admin User Guide

• KnoxDock

Quick Start Guide

• KeySecure

5 User Guide

• KeySecure

5 Quick Start Guide

• KeySecure

6 Admin User Guide

• KeySecure

6 Quick Start Guide

• SecurePIN Quick Start Guide

• MedVault 2.5 Admin User Guide

KNOXCONNECT

| ADMIN USER GUIDE

KNOXCONNECT LOGIN AND NAVIGATION

To login to KnoxConnect navigate to knoxconnect.net, enter your username and password, and then select Log

In button.

Homepage

Once logged into KnoxConnect, the homepage displays the navigation menu and dashboard.

Navigation Menu

The navigation menu allows the user to quickly navigate between the following functions:

• Home: Homepage.

• Users: Create, edit, view, and delete user information.

• Lock Codes: Manage lock codes.

• Knox eLock Cores: Manage Knox eLock Cores and installation location details.

• Knox eKeys: Manage Knox eKey settings and lock code assignments.

• KeySecure

: Manage KeySecure settings and PIN assignments.

• KnoxDock PC App: Manage KnoxDock settings and PIN assignments.

• MedVault: Manage MedVault settings and PIN assignment

• SecurePIN: Generate a temporary use access code for use in authorized devices

• Network Settings: Create templates containing network access configurations that can be applied to

devices

• Device Audit Trails: View detailed user and device activity.

• KnoxConnect Event Log: View detailed KnoxConnect activity.

• Jurisdiction: View your licensing details.

• Admin: Create groups, view software and firmware versions details, download software, and configure

settings.

KNOXCONNECT

| ADMIN USER GUIDE

• Logout: Logs the user out of KnoxConnect

Note: Menu options displayed will depend on your user role and devices used by your jurisdiction.

Dashboard

The dashboard contains the following information:

• Item: List of users, lock code owned, lock code shared, devices, and applications available in your

jurisdiction.

• Total: Number of users for that jurisdiction; number of devices/applications used by that jurisdiction

• Synced: Indicates how many of the devices have been updated with the latest updates

• Online: Indicates how many of each device type are online.

Note: Items such as Users, Own Lock Codes, Shared Lock Codes, and Knox eLock Cores will always be

blank under the Synced and Online columns.

Note: For Knox eKeys, KeySecure devices, KnoxDock, Software PC Apps and MedVault, the Synced column

will not update when changes are made in KnoxConnect until the device is synchronized with the

KnoxConnect changes.

KNOXCONNECT

| ADMIN USER GUIDE

USERS

User Roles

KnoxConnect offer predefined roles that can be assigned to users. All roles except Assigned PIN User provide

to assigned devices.

Administrative users view and assign the user roles as shown in the table below. A Primary Admin is created by

Knox when setting up your account. All other roles are assigned by the department.

Field Capabilities

Users may also be assigned field capabilities using the Supervisor designation during user setup. Supervisors

can adjust certain device settings at the device keypad and are treated as a separate category of user when

certain features are enabled, such as when Dual PIN entry is required for key release.

General User Access Levels

Functions

Assigned

Field User

Dispatch

User

Device

Admin

View Only

Secondary

Admin

Primary

Admin

Device PIN Access

Generate a SecurePIN

User's Own Profile

Dashboard

view-only

Other Users

(Limited Info)

view-only

Other Users (Details)

P**

Device Info

view-only

Audit Trails

SecurePin

only

view-only

Event Log

view-only

Groups

view-only

Firmware/Software

Versions

view-only

KnoxConnect

view-only

Settings

view-only

SSL Certificates

view-only

Configuration Apps

Full rights

* Can view all users and can add/modify/delete inactive, users and analyst

**Can view all users and can add/modify/delete user at or below secondary admin

KNOXCONNECT

| ADMIN USER GUIDE

Users Screen

Selecting Users from the menu opens the Users screen that shows current users and their roles. Authorized

administrators can use this screen to create, edit, view, and delete users.

The Users screen contains the following information:

• Name: The name of the user.

• ID: Optional field, usually a badge ID (16 characters max.)

• Role: Admin privilege level

• Groups: Groups user is member of

• Valid Pin: Current status of user PIN

• Edit: Modify user information

• PIN Assignments: Shows the devices where the user’s PIN is Programmed and active

Note: The names are typically user’s real first and last names such as John Doe, Sally Johnson, etc.

Note: You can sort any column, where the title is underlined, by selecting the title of the column. You can also

perform a search by entering or selecting a name or ID under each column name.

KNOXCONNECT

| ADMIN USER GUIDE

Creating a User

Primary and Secondary Admins can add users one of two ways: individually or through an import. To create an

individual user:

1. On the Users screen, select the Add User button at the bottom left. The Create User screen will open.

2. Enter the user’s first and last name in the Name field.

3. Select a Role for the user.

The user’s role determines the permissions the user will be given to interact with the KnoxConnect

software. See User Roles for details.

4. Determine Field Capabilities:

a. Check the Supervisor box if the user will be treated as a supervisor for dual PIN purposes and/or

is allowed to change light settings (such as Blackout Mode) on devices in the field.

b. Check the Dependent PIN box if this user will always need a second valid PIN entered after their

PIN for access to any devices regardless of the system Dual PIN setting. This setting is typically

applied to users on probation or temporary employees.

Note: For skip steps 5 through 7 for Assigned PIN users

5. Select an option for how the user account setup will be managed

a. Select Invite user via email radio button to allow the user to create a username and password

with options for PIN assignment. Email address is required.

b. Select Assign username/password/PIN radio button to create username and password for the

user with option for PIN assignment. Email address is optional. If an email address is not

provided, and the Admin assigns the PIN, the system will not send an automated email to the

user.

6. Select an option under PIN creation

a. User assigns PIN allows the user to create an account login, password and PIN in KnoxConnect

using a link sent to them from KnoxConnect through an automated process.

KNOXCONNECT

| ADMIN USER GUIDE

b. System assigns PIN allows the user to create an account login and password in KnoxConnect.

The PIN is system generated and assigned to the user in KnoxConnect when the user creates

the user account.

Note: User PIN minimum and maximum length is a system setting. See the section on Administrative

settings.

7. For all user roles except for Assigned PIN, a user Email address must be used. Enter the user email

address in the Email address field.

8. Provide the optional details:

a. User ID: ID such as badge number.

b. Phone: User’s phone number.

c. Job Title: Job title of the user.

d. Groups: Select optional groups if configured.

9. Select Create button.

Note: To ensure PIN security, PINs, including assigned PINs, cannot be viewed by other users, including

Admins, once created

KNOXCONNECT

| ADMIN USER GUIDE

Editing a User

1. On the Users screen select Edit for the selected user to edit their information.

2. Make changes as necessary on the Edit User screen.

3. Select the Save button.

KNOXCONNECT

| ADMIN USER GUIDE

Viewing a User’s PIN Assignments

To view device permissions assigned to a user that contain that user’s PIN:

1. On the Users screen, select View under the column PIN Assignment for the user.

The User’s Name screen shows devices that the user’s PIN has been assigned to and the status of that

assignment.

• Programmed: Indicates that the user’s PIN has been assigned to the device for programming.

• Live: Indicates that the user’s PIN has been programmed into the device and can be used.

Deleting a User

To delete a user:

1. Select the Delete button next to a user’s name, the Delete User prompt appears.

2. Select the OK button, the user will be deleted.

Note: Deleted user’s PIN will be active in assigned Knox devices until they sync with KnoxConnect, at

which time the PIN is automatically removed from the device.

Note: When deleting a user, the user will no longer appear in searches or user lists, they are

automatically removed from all groups and the user can no longer log into KnoxConnect. KnoxConnect

event history and device audit trail events are retained for the deleted user.

KNOXCONNECT

| ADMIN USER GUIDE

Creating Multiple Users (Upload utility)

Instead of manually adding each user in KnoxConnect, you can upload multiple users along with their passwords

and PINs. The template was improved in v2.5.3 to enable users with different roles to be uploaded in the same

template with a single upload.

1. Select the Import Users button at the bottom of the Users screen and the Create Users by Uploading a

File screen will display.

2. Select Download Template and save to your computer.

Open the template and complete the fields for the users you wish to create.

a. PINs assigned by Department:

KNOXCONNECT

| ADMIN USER GUIDE

• NAME and PIN must be supplied for each user. ID, PHONE and JOBTITLE are optional.

• All PINs must be 8 digits and unique (no duplicates within your jurisdiction).

• If a PIN has leading zeros, the format of the Excel cell must be 'Text'.

• ROLE is assignedpin

Note: On spreadsheet view for Assigned PIN users, Required and Optional shown for emphasis

b. Combination of PIN assignments by Departments and Users:

• NAME and either PIN or (PINCREATION + EMAIL) are required for each user. ID, PHONE

and JOBTITLE are optional

• PINs must be 4-8 digits and unique. System generated PINs are 4-8 digits.

• If a PIN has leading zeros, the format of the Excel cell must be formatted as 'Text'

• The value for PINCREATION if provided must be either “user” or “system” (case sensitive)

and the PIN field must be blank

• The value for SUPERVISOR must be either standard, supervisor or dependent

Note: Supervisor capabilities enable the user to change device light settings and will

determine dual PIN behavior (future release)

• All email addresses if provided must be unique (no duplicates within the system)

• If an email address is supplied for a user with a role other than assignedpin, the user will

receive an email with instructions to setup their account with a username and password

Save the template and select Choose File from the Create Users by Uploading a File screen. Select and open

the file in the windows explorer screen.

3. Select the Upload button.

Note: Header titles must be on the first row. Users must start on the second row and there must be no

empty rows between users.

Tip: The file must be saved as an Excel (.xlsx) file or Comma Separated (.csv) file.

Tip: If there is an error in the file, the file will stop at the first error and reject the file.

Resend Registration Emails

Users with email addresses (other than PIN-only users) will receive a system-generated email inviting them to

complete their registration. Invitations expire after 14 days.

• To resend emails to all pending users, select the Resend invitation emails button on the Users screen.

• To resend an invitation email to a specific user, select the Resend invitation email button from the Edit

User screen for the select user.

KNOXCONNECT

| ADMIN USER GUIDE

Username and Profile Setup

The following steps are completed by the user after they have been added as a user in KnoxConnect. They will

not be active in the system until they have completed the username and profile setup using the system generated

email that is sent to them.

Note: If a user cannot locate the email, have them check their junk/spam email folder. The new user has 14 days

to complete the process before the link expires. If expired see Resend Registration Emails section.

1. To complete the new user set up process, select the SET UP PROFILE link in the email.

2. The user will be redirected to the Set Up Profile screen. They will need to complete each of the fields and

answer the two security questions. The security questions will be used when attempting to restore their

username or to restore a forgotten password.

Note: Passwords must be 12 to 40 characters and contain 3 of 4 character types including upper case,

lower case, number or special characters.

3. When complete select the Submit button to save.

4. The screen will respond with Success or instructions to correct or include additional information.

KNOXCONNECT

| ADMIN USER GUIDE

Username and Password Recovery

Username Recovery

1. To recover your username, select Forgot Username on the KnoxConnect Log In page.

2. Enter your email address and the answers to your security questions, the select the Submit button.

Note: The security questions were created when the user originally setup their profile.

3. After selecting submit using the correct information, the screen will show your information along with

“Success – An email was sent”.

KNOXCONNECT

| ADMIN USER GUIDE

4. An email will be sent to the user’s email address if the email address provided matches the one listed in

the KnoxConnect user profile containing their Username.

Password Recovery

1. To recover your password, select Forgot Password on the KnoxConnect Log In page.

2. Enter your email address and the answers to the security questions and select the Submit button.

Note: The security questions were created when the user originally setup their profile.

3. After submitting with the correct information, the screen will show your information along with “Success –

An email was sent”.

4. The email will contain a link for resetting your password, select the link and follow the instructions for your

password reset.

Note: The Primary Admin can also generate a password reset by selecting the Reset password button on

the user’s edit page. If you cannot locate the email, check your junk/spam email folder.

KNOXCONNECT

| ADMIN USER GUIDE

Updating Personal Profile

Users can update their own profiles after logging into KnoxConnect.

1. Select the user icon, located in the upper-right corner of the KnoxConnect screen.

2. From the dropdown menu select Profile.

3. Enter your current password (required when updating profile)

4. Edit your profile as needed. Note: To change name, PIN, User ID or Role, user must contact an admin.

5. Select the Update button to save changes.

KNOXCONNECT

| ADMIN USER GUIDE

LOCK CODES

Lock Codes can be thought of as an electronic keyway. Lock Codes are issued to a jurisdiction by Knox

Company and each jurisdiction is initially provisioned with one Lock Code. Additional Lock Codes can be

obtained from Knox by using a process similar to requesting an additional mechanical keyway.

To use a Lock Code, it must first be assigned to eLocks and to eKeys.

Owned or shared Lock Codes can be viewed from the Lock Codes screen. The screen also allows the user to

name and share Lock Codes that are controlled by the user’s jurisdiction.

The Lock Codes screen columns contain the following information:

• Index: Unique identifier/Internal ID within database (not editable)

• Name: Lock code name (Lock codes editable for those assigned to your department; Lock codes shared from

another department are not editable)

• Shared From: Locks codes that are being shared with you from other jurisdictions (not editable)

Note: You cannot share lock codes that are being shared with you from other jurisdictions.

• Shared With: Lock codes you are sharing with one or more outside jurisdictions (editable)

• Edit: Users with permission to update the sharing of jurisdictions and the name of the lock code will see this

button.

Tip: You can sort any information column by selecting the title of the column

KNOXCONNECT

| ADMIN USER GUIDE

Editing Lock Code Information

Lock Code sharing is available between jurisdictions.

To edit lock code sharing information:

1. In the Lock Codes screen, select Edit next to a lock code name to display the Edit Lock Code screen

2. Revise the lock code name in the Name field, if necessary.

3. Select a jurisdiction name from the Available Jurisdictions box and select the right arrow to move it to

the Shared Jurisdictions box. Continue to move jurisdiction names until all jurisdictions that will share

Lock Codes have been moved.

Note: If a jurisdiction with which you wish to share a lock code is not listed in the Available Jurisdictions

box, you will need to contact Knox support to have that jurisdiction added.

4. To remove sharing privileges, select a jurisdiction name from the Shared Jurisdictions box and select

the left arrow to move it back to the Available Jurisdictions box. Continue to move jurisdiction names

until all jurisdictions that will no longer share Lock Codes have been removed.

Note: When you remove a shared Jurisdiction lock code, the administrator of that Jurisdiction will receive

an email notification stating that you are no longer sharing that lock code with them. The lock code will be

removed from that Jurisdiction’s electronic keys the next time the ekeys sync with KnoxConnect

5. Select the Save button and then select Back to return to the Lock Codes main screen.

Note: To export a list, see section Exporting Lists.

KNOXCONNECT

| ADMIN USER GUIDE

KNOX ELOCK CORES

This screen allows the user to configure information for Knox eLock cores in the user’s jurisdiction.

The Knox Locks screen contains the following information:

• Knox eLock Core SN: Knox eLock Core serial number

• KnoxBox SN: Knox-Box

serial number for assigned Knox eLock Core

• Install Address: KnoxBox with Knox eLock core street address

• City: Knox eLock Core city location

• State: Knox eLock Core state location

• Groups: Groups authorized to use this Knox eLock Core

NOTE: Only the Admin can create a group. Any user or device can belong to one or more groups.

• Lock FW: Knox eLock Core firmware version

• Lock Code: Lock code name (programmed into the Knox eLock Core by the Knox eKey)

• Edit: Available to authorized admin users to change or update lock box information

Note: KnoxBox SN, Install Address, City, and State will be populated using the Installation address provided

on the order if the elock core is shipped factory installed in the box. Retrofit eLock cores will require location

information feedback to be provided by the installer.

Note: You can sort any column where the title is underlined by selecting the title of the column. You can also

perform a search by entering or selecting a name or ID under each column name.

KNOXCONNECT

| ADMIN USER GUIDE

Editing Knox eLock Core Information

To edit Knox eLock Core information:

1. In the Knox eLock Cores screen, select Edit next to a name under the Lock Code column.

The following screen appears.

2. Provide details about the location of the Lock Box / Knox eLock Core in the fields provided. At a

minimum, enter the Lock Box SN, the cross street or other identifying landmark (location), and the

Address/City/State/Zip.

3. If using Groups, select the group or groups (using the CTRL key) to which the lock belongs, to provide

access to the Lock Box and Knox eLock Core at the designated address.

4. Enter any notes into the Notes box which pertains to the usage of the Knox eLock Core, any restrictions

or limitations, and the location of the box and lock.

5. Select the Save button and then Back to return to the Knox Locks main screen.

Note: To export a list, see section Exporting Lists.

KNOXCONNECT

| ADMIN USER GUIDE

Assign Lock Codes to Knox eLock Core

Set Up Programming Key

To lock and unlock the eLock, a lock code must be programmed into the lock using an eKey that has

Command Code 2 enabled for lock programming. eLocks are shipped default with no Lock Code.

1. From the Knox eKeys screen, identify the eKey that will used to assign the lock code and select the Edit

button for that eKey. eKeys in programming mode can program any eLock assigned to the jurisdiction.

2. In the Device Hardware Programming section under Command Code 2, select the button for “Action

Change Lock Code.

3. Next, select the lock code from New Lock Code dropdown list that will be assigned to the eLock core(s).

4. Then, select “None” from the Replaced Lock Code dropdown list if programming a lock for the first time.

5. Select the Save button.

6. Program the eLock: To physically assign the lock code to the lock core use the Knox eKey programmed

with the new lock code, enter the Command Code 2. See the eKey Admin Guide for more information

a) LEDs will flash green three (3) times (indicating correct code entered)

b) Insert ekey into elock and hold steady

c) LEDs will be solid blue

d) LEDs will flash green three (3) times (indicating programming was successful)

e) Lock core now programmed

7. Test the lock code by using Command Code 1 to open/close the box.

Note: You can only assign lock codes to eLock cores that belong to your jurisdiction. A shared lock code

can only be used to open/close boxes.

Note: Only the lock codes that have been assigned to the ekey and that belong to your jurisdiction can be

programmed

KNOXCONNECT

| ADMIN USER GUIDE

KNOX EKEYS

This menu option allows users to configure Knox eKey parameters.

The Knox eKeys screen displays two columns with user-configurable parameters: Edit and Lock codes.

1. Identify the eKey serial number (SN) to configure.

2. Select the Edit button in the Edit column to display the Knox eKeys screen and configure Knox eKey

identity and hardware provisioning information or select the Edit button in the Lock codes column to

display and configure available and programmed lock codes for a specific key.

Note: To export a list, see section Exporting Lists.

The Knox eKeys screen contains the following information:

• Device serial number: Knox eKey serial number

• Location: Knox eKey location

• Assigned to: Knox eKey owner and user type

• Groups: List of groups assigned to the Knox eKey

Note: Only an Admin can create a group. Any user or device can belong to one or more groups.

• Online: When checked, indicates which Knox eKey devices are currently online

• Synced: When checked, indicates that the device has been updated with the latest user-updated or auto-

updated changes

Note: To update the device, place the key into a KnoxDock charger or KeySecure retention device.

• Enabled: If enabled, a checkmark is shown; if only a dash is shown, the ekey is disabled

• FW Version: Current Firmware version

• Edit: Available to authorized Admin users to change or update key information

• Lock codes: Available to authorized Admin users to change or update lock codes associated with the

key

• Apply to all keys Menu (button): Edit attributes and apply to a Knox eKey group or all Knox eKeys

Note: You can sort any column, where the title is underlined, by selecting the title of the column. You can

also perform a search by entering or selecting a name or ID under each column name.

KNOXCONNECT

| ADMIN USER GUIDE

Editing Knox eKey Information

To edit Knox eKeys information:

1. On the Knox eKeys screen, select the Edit button under the Edit column for a specific eKey SN and the

following screen appears.

2. In the Device Information section, enter the Location in which the selected Knox eKey resides, the

Assigned User (owner), the Asset Number (if applicable); and then select the Assigned User Type and

the Group or Groups to which the key belongs and will be authorized to use the key.

3. In the Device Hardware Programming section, enter that eKey’s programming information into each

field, and check/uncheck each check box as required. Use the Notes column as a guide.

4. Select the Save button and then select the Back button to return to the Knox eKeys screen.

Note: You can temporarily disable the eKey by unchecking the Enabled checkbox and syncing with

KnoxConnect.

KNOXCONNECT

| ADMIN USER GUIDE

Programming eKey Lock Codes

To program Lock Codes for a Knox eKey:

1. On the Knox eKeys main screen, select the Edit button under the Lock Codes column for a specific

eKey SN.

2. Changing Lock Codes

• Add Lock Code(s):

Select a Lock Code from the Available Lock Codes box and select the right arrow button to move it

to the Programmed Lock Codes box. Repeat for each available lock code that you want added to

the eKey.

• Remove Lock Code(s):

Select a Lock Code from the Programmed Lock Codes box and select the left arrow button to move

it back to the Available Lock Codes box. Repeat for each lock code that you want removed from the

eKey.

3. Select the Save button and then the Back button to return to the Knox eKeys screen.

Note: One Knox eKey can hold up to 100 lock codes and can open eLock cores with a corresponding

lock code.

Screen Glossary:

• Available Lock Codes: These are lock codes that can be assigned to the eKey.

• Programmed Lock Codes: These are lock codes that have been assigned to the eKey.

• Live Lock Codes – Match: These are lock codes that have been programmed into the eKey and are

available for use. Live lock codes are updated when the eKey has synced to KnoxConnect through a

KeySecure or a KnoxDock.

KNOXCONNECT

| ADMIN USER GUIDE

Applying Changes to All Knox eKeys

To apply changes to all Knox eKeys:

1. Select the Apply to all keys Menu button on the Knox eKeys screen to configure attributes for specific

groups of eKeys or all eKeys. The Knox eKey Attributes screen appears.

2. Update values for eKey attribute fields or check boxes as needed. Use the Notes column as a guide.

3. Select the Save button under Apply to All to apply the changes to all eKeys or select a specific group

from the Apply to Group drop-down list to apply the changes to all eKeys in that group and then select the

Save button.

4. Select Back to return to the Knox eKeys main screen.

KNOXCONNECT

| ADMIN USER GUIDE

KNOXDOCK PC APP

This menu selection allows user to configure KnoxDock software parameters.

Configuring KnoxDock

To edit the KnoxDock information:

1. On the KnoxDock Software PC App main screen, select the Edit button under the Edit column for a

specific KnoxDock SN and the following screen appears.

2. In the KnoxDock PC App Information section, update the Location and Groups as needed.

3. In the KnoxDock PC App Programming section, update the PIN Attempts Before Lockout, Lockout Time,

PIN Expiration Time, and Override Lockout as needed. Use the Notes column as a guide to your

changes.

4. Select the Save button and then Back to return to the KnoxDock Software PC App screen.

Note: When the KnoxDock Software PC App syncs with KnoxConnect the Actual Settings are updated

with the Programmed Settings.

TIP: You can sort any column, where the title is underlined, by selecting the title of the column. You can

also perform a search by entering or selecting a name or ID under each column name.

Note: KnoxDock Serial Numbers will not appear until the KnoxDock PC app has been installed on a PC

and Knox Dock connected via USB to PC.

Screen Glossary:

• Serial Number: KnoxDock Software application serial number

• Location: KnoxDock Software application location

• Groups: List of groups assigned to the PC application

Note: Only an Admin can create a group. Any user or device can belong to one or more groups.

• Online: When checked, indicates which KnoxDock applications are online.

• Synced: When checked, indicates that the software has been updated.

KNOXCONNECT

| ADMIN USER GUIDE

• Software Version: Current software version.

• Edit: Available to authorized admin users to change or update software and group information.

• User PINs: Provides the PIN codes that need to be programmed in the KnoxDock Software PC

application.

• Apply to all KnoxDock Software PC Apps Menu (button): Edit attributes and apply to a KnoxDock

group or all KnoxDock PC applications.

Editing KnoxDock PINs

To configure which user PIN codes are programmed to release the Knox eKey from the KnoxDock:

1. Select the Edit button in the User PINs column of the KnoxDock Software PC App main screen and the

following screen displays. The following user lists are configurable: Available Users and Programmed

Users.

2. Changing KnoxDock Users and Groups

Note: You can select more than one user or group at a time by holding down the CTRL key on your

keyboard when selecting.

• Add User(s):

Select a User from the Available Users box and select the right arrow button to move them to the

Programmed Users box. Repeat for each available User that you want added to the KnoxDock.

• Remove User(s):

Select a User from the Programmed Users box and select the left arrow button to move them back to

the Available Users box. Repeat for each User that you want removed from the KnoxDock.

• Add Group(s):

Select a Group from the Available Groups box and select the right arrow button to move them to the

Programmed Groups box. Repeat for each available Group that you want added to the KnoxDock.

• Remove Group(s):

Select a Group from the Programmed Groups box and select the left arrow button to move them back

to the Available Groups box. Repeat for each Group that you want removed from the KnoxDock.

3. Select the Save button and select Back to return to the KnoxDock Software PC App main screen.

Note: When the KnoxDock Software PC App syncs with KnoxConnect the Actual Users and Groups are

updated with the Programmed Users and Groups.

KNOXCONNECT

| ADMIN USER GUIDE

Applying Changes to all KnoxDocks

To apply changes to all KnoxDock Software PC applications:

1. On the KnoxDock PC App main screen select the Apply to all KnoxDock PC Apps Menu button to

configure attributes for all KnoxDocks or KnoxDocks in a specific group.

The KnoxDock PC App Attributes screen appears.

2. Update values for KnoxDock attribute fields as needed. Use the Notes column as a guide.

3. Select the Save button under Apply to All PC Apps to apply the changes to all KnoxDocks or select a

specific group from the Apply to PC Apps of Group drop-down list to apply the changes to all KnoxDocks

in that group and select the Save button.

4. Select Back to return to the KnoxDock Software PC App main screen.

Note: Refer to the KnoxDock PC App User Guide located in your account at knoxbox.com for

information on how to download and install the KnoxDock PC App Software and KnoxDock.

KNOXCONNECT

| ADMIN USER GUIDE

KEYSECURE

The KeySecure menu option allows the user to configure KeySecure device parameters. The KeySecure screen

shows two columns with user-configurable parameters: Edit and User PINs.

KeySecure Screen Glossary:

• Device Serial Number: KeySecure serial number

• Device Location: Installation location/apparatus name of the KeySecure

• Groups: List of groups assigned to the KeySecure

• Online: When checked, indicates which KeySecure devices are connected to the network and can

communicate with the KnoxConnect website

• Synced: When checked, indicates that the device has been updated with the latest user-updated or auto-

updated changes

• Firmware Version: the revision of firmware currently running in the device

• Edit: Available to authorized Admin users to change or update device or group information

• User PINs: Provides the PIN codes that need to be programmed into the KeySecure

• Apply to all KeySecures Menu (button): Edit attributes and apply to a KeySecure group or all

KeySecure devices

Note: You can sort any column, where the title is underlined, by selecting the title of the column. You can also

perform a search by entering or selecting a name or ID under each column name. To export a list, see section

Exporting Lists.

KNOXCONNECT

| ADMIN USER GUIDE

Editing KeySecure Information

1. On the KeySecure main screen, select Edit under the Edit column for a specific KeySecure SN and the

following screen is displayed.

2. In the Device Information section, update the Location, Asset Number, and Groups fields as needed.

Apparatus 4

Station 4 WiFi

KNOXCONNECT

| ADMIN USER GUIDE

3. In the Device Hardware Programming section, update the Num Lockout Tries, Lockout Time fields and

select the Override Lockout checkbox and Disable eKey Retention as needed. Use the Notes column as

a guide.

4. Update network settings fields as needed. See the Knox KeySecure Networking Guide for details on

Network templates and configuring network settings.

5. Select the Save button and select Back to return to the KeySecure main screen

Note: When the KeySecure syncs with KnoxConnect the Actual Device settings will update with the

Programmed Device Settings.

Note: The Disable Key Retention feature should not be used to temporarily stop the “key not present”

notification LEDs from flashing while the key is in use. This setting is intended for use when a jurisdiction

wishes to turn off the “key not present” LED flashing light for an unused key retention port during times

when the key is out of service, for example: KeySecure installation, transition to eKey, or discontinuation

of mechanical key.

• If the eKey is retained when the Disable Key Retention Right is selected, the eKey will not be

removable until the eKey retention port is made active by deselecting the setting and syncing the

device with Knox Connect. The eKey retention port will not charge the eKey while the Disable

setting is in effect.

• If a mechanical key is retained or inserted when Disable Key Retention is selected for that

retention port, the mechanical key will not be removable until the key retention port is made active

by deselecting the setting and syncing the device with KnoxConnect.

Screen Glossary:

The Device Information section contains the following information:

• Model: The device profile given when the unit was created in KnoxConnect

• Hardware Revision: The hardware profile given when the device was created in KnoxConnect

• Serial Number: KeySecure serial number

• Device Location: An optional but recommended field identifying the installation location/apparatus name

of the KeySecure

• Asset Number: An optional field for entry of a department-assigned asset or inventory tracking number

• Groups: List of groups assigned to the KeySecure

The Device Hardware Status screen contains the following information:

• Online: System shows a checkmark when the KeySecure is connected to KnoxConnect

• Synced: System shows a checkmark when the device is current with the latest changes

• Last Server Contact: The last time-date the device was connected to KnoxConnect

• Hardware Configuration: shows the device’s key capacity

• Connected Knox eKey SN: The serial number of the eKey retained in the device

• Ethernet MAC address: identity assigned to the device by Knox

• WiFi MAC address: identity assigned to the device by Knox

• Internal IP address: dynamically updated field containing the LAN address the device is using

• Active SSID: The SSID that the device is currently using for the network connection.

The Device Hardware Programming section contains the following information:

• Programmed Device Settings: The most recent settings that have been entered.

• Actual Device Settings: The settings the device reported during its latest connection.

• Firmware Version: The revision of firmware currently running in the device. A difference between the

Programmed and Actual indicates syncing is required to install the update

KNOXCONNECT

| ADMIN USER GUIDE

• PIN Attempts Before Lockout: The number of invalid PIN entries allowed before the device enters

lockout mode

• Lockout Time: The number of minutes the device will prevent PIN entry after the set number of invalid

attempts

• Override Lockout: Overrides a lockout, device must be online.

• Disable Key Retention Right: Suspends operation of the right key port and notification LEDs

• Disable Key Retention Left: Suspends operation of the left key port and notification LEDs

• Dual PIN Settings: Indicates if two PINs are required for the release of keys. This selection is only

available if Dual PIN has been enabled by the Primary Admin in the Admin settings. See the Dual PIN

feature section for more information.

• SecurePIN Settings: Indicates if use of SecurePIN dispatcher-generate access code feature is enabled

• SSL Certificate version: Dynamically updated field that shows the version of the installed KnoxConnect

SSL certificate

• KnoxConnect mode: Dynamically updated field indicating the implementation method of KnoxConnect

software in use

• Network Template: The selection box shows the network connections available for the device

• Static Ethernet IP: Field to enter a unique static ethernet IP address if used for the device connection

• Static WiFi IP: Field to enter a unique static WiFi IP address if used for the device connection

• Enterprise Identity: Field to enter the object name used for LDAP authentication

• Client Certificate: Selection box for certificate if using EAP-TLS

• Enterprise Password: The network password the device is using, populated from the network template

• Enterprise Anonymous Identity: Field to enter an optional anonymous identity for the device-- used with

certain types of Enterprise Security, populated from the network template

Editing KeySecure User PINs

To configure which users can release keys from a KeySecure (identified by serial number) using their PIN code:

1. On the KeySecure main screen, select the Edit button under User PINs for a specific KeySecure SN and

the following screen displays.

2. Changing KeySecure PINs, Users and Groups

Note: You can select more than one user or group at a time by holding down the CTRL key on your

keyboard when selecting.

KNOXCONNECT

| ADMIN USER GUIDE

• Add User(s):

Select a User from the Available Users box and select the right arrow button to move them to the

Programmed Users box. Repeat for each available User that you want added to the KeySecure.

• Remove User(s):

Select a User from the Programmed Users box and select the left arrow button to move them

back to the Available Users box. Repeat for each User that you want removed from the

KeySecure.

• Add Group(s):

Select a Group from the Available Groups box and select the right arrow button to move them to

the Programmed Groups box. Repeat for each available Group that you want added to the

KeySecure.

• Remove Group(s):

Select a Group from the Programmed Groups box and select the left arrow button to move them

back to the Available Groups box. Repeat for each Group that you want removed from the

KeySecure.

3. Select the Save button and select Back to return to the KeySecure main screen.

Note: Users can be Programmed by a group. Changes to groups, following programming, won’t be

reflected in the device.

Note: When the KeySecure syncs with KnoxConnect the Actual Users and Groups are updated with the

Programmed Users and Groups.

Applying Changes to all KeySecure Devices

To make changes to all KeySecure devices at the same time:

1. On the KeySecure main screen, select the Apply to all KeySecures Menu button to configure attributes

for all KeySecure devices or KeySecure devices in a specific group.

KNOXCONNECT

| ADMIN USER GUIDE

The KeySecure Attributes screen displays.

2. Update KeySecure attribute fields and checkboxes as needed.

3. To apply changes to all KeySecure devices, select the Save button under Apply to All Devices. To apply

changes to a specific group, select the group under the Apply to Devices of Group drop-down list and

select the Save button.

4. Select Back to return to the KeySecure main screen.

KNOXCONNECT

| ADMIN USER GUIDE

MEDVAULT

The MedVault menu option allows the user to configure MedVault device parameters. The MedVault screen

shows two columns with user-configurable parameters: Edit and User PINs.

MedVault Screen Glossary:

• Serial Number: MedVault serial number

• Device Location: Installation location/apparatus name of the MedVault

• Groups: List of groups assigned to the MedVault

• Online: When checked, indicates which MedVault devices are connected to the network and can

communicate with the KnoxConnect website

• Synced: When checked, indicates that the device has been updated with the latest user-updated or auto-

updated changes

• Firmware Version: the revision of firmware currently running in the device

• Edit: Available to authorized Admin users to change or update device or group information

• User PINs: Provides the PIN codes that need to be programmed into the KeySecure

• Apply to all MedVault Menu (button): Edit attributes and apply to a MedVault group or all MedVault

devices

Note: You can sort any column, where the title is underlined, by selecting the title of the column. You can also

perform a search by entering or selecting a name or ID under each column name. To export a list, see section

Exporting Lists.

KNOXCONNECT

| ADMIN USER GUIDE

Editing MedVault Information

1. On the MedVault main screen, select Edit under the Edit column for a specific MedVault SN and the

following screen is displayed.

2. In the Device Information section, update the Location, Asset Number, and Groups fields as needed.

3. In the Device Hardware Programming section, update the PIN Attempts before Lockout, Lockout Time

fields and select the Override Lockout checkbox. Use the Notes column as a guide.

Ambulance 4

Station 4

KNOXCONNECT

| ADMIN USER GUIDE

4. Update network settings fields as needed. See the Knox Device Networking Guide for details on Network

templates and configuring network settings.

5. Select the Save button and select Back to return to the MedVault main screen

Important: The MedVault door sensor must be initialized before first use and any time the door is replace.

Note: When the MedVault syncs with KnoxConnect the Actual Device settings will update with the Programmed

Device Settings. See information below and the MedVault Admin Guide for more information.

Screen Glossary:

The Device Information section contains the following information:

• Model: The device profile given when the unit was created in KnoxConnect

• Hardware Revision: The hardware profile given when the device was created in KnoxConnect

• Serial Number: MedVault serial number

• Device Location: An optional but recommended field identifying the installation location/apparatus name

of the MedVault

• Asset Number: An optional field for entry of a department-assigned asset or inventory tracking number

• Groups: List of groups assigned to the MedVault

The Device Hardware Status screen contains the following information:

• Online: System shows a checkmark when the MedVault is connected to KnoxConnect