This documentation serves as a guide to configure SALTO® Space in CardExchange® Admin Center, Controller and STAND.

1. Whitelisting for the access to SALTO Server.

To allow access to the Salto server from a client location, the client's IP address needs to be added to the whitelist on the firewall or security appliance. This ensures that only authorized clients can establish a connection with the on-premise Salto server.

Here's a table explaining how the whitelisting is made and what steps are necessary:

Open

Explanation:

1. Client Location: Represents where the client accessing the on-premise SALTO server is located. The Client being CardExchange® Admin Center and Controller

2. Firewall/Security Appliance: Acts as a barrier between the internet and the private network where the on-premise Salto server is located. This device controls incoming and outgoing network traffic.

3. Whitelist: Within the firewall or security appliance, there's a whitelist that specifies which IP addresses are allowed to access the on-premise SALTO server. Only connections from IP addresses on this list will be permitted through the firewall.

4. On-premise SALTO Server: The server hosting the Salto service. It is located within the private network and is only accessible to devices with authorized IP addresses as per the whitelist.

Cardexchange® Azure IP’s for the whitelist, to access SALTO’s Server:

• 51.11.148.62

• 51.11.148.69

• 51.11.184.212

• 51.11.148.64

• 51.11.148.72

• 51.140.37.241

• 51.105.74.163

2. Grabbing SALTO® URL and SHIP Key.

SHIP Key

In SALTO ProAccess Space, which can be accessed in the server where SALTO Space is located.

Go to:

1. System.

2. General Options.

3. SHIP.

4. Key, add a key and save it for the next steps.

Open

URL

In the Private Network where the server hosting SALTO Space is located, it can be accesseble to get the URL which later, can be used in Admin Center.

For a more protective URL, we recommend ngrok, which not only protects more, but it accelerates the application and network services.

3. Admin Center, SALTO® Space Full Configuration.

In the Admin Center is where the SALTO® Space Configuration is done, is where the URL and SHIP key are inserted, where the Mappings are done and the creation of SALTO Mobile and SALTO Physical Credentials.

Starting off with SALTO Mobile (Digital Credential) in the General Configuration, it is needed to fill the following fields:

1. SALTO Url

2. SALTO Ship Key

Moving to the Mappings Configuration, we have to create at least 3 Mappings for the Digital Credentials:

1. ExtUserID

2. First Name

3. Phone Number

For the creation of the First Mapping, ‘ExtUserID’, here are the following steps:

1. Source: Person Number.

2. Database Types: Int16.

3. Target Fields: ExtUserID.

4. Is Key Field: Active.

5. Save.

For the second Mapping, ‘First Name’:

1. Source: FirstName.

2. Database Types: String.

3. Target Fields: FirstName.

4. Save.

Finally for the third Mapping, 'Phone Number':

1. Source: MobileNumber.

2. Split Size: 3.

3. Database Types: Int16.

4. Target Fields: PhoneNumber.

5. Should Split: Active.

It should look like this:

To Create a Physical Mapping we need to have those 3 previous mappings and one more:

1. Source: ChipserialNumber.

2. Database Types: String.

3. Target Fields: AutoKeyEditROMCode.

4. For this mapping, scroll right to:

   • CSN Options.

   • Set Conversation Method: DecilmalToHexTraillingZeroes.

   • Set Number of Bytes: 7.

Creating SALTO Mobile Credential (in case there is none). Firstly it is necessary to create a new category and then create a type, these can be located in Setup > Controller > Creedntials > Category / Type:

For the creation of SALTO Mobile Category, here is the following steps necessary:

1. Name: Salto Mobile.

2. Digital Credential: YES.

3. External Credential System: Salto Space.

4. Set it Active.

For the creation of SALTO Physical Category, here is the following steps necessary:

1. Name: Salto Physical.

2. Digital Credential: NO.

3. External Credential System: Salto Space.

4. Set it Active.

For the creation of SALTO Mobile Type, here is the following steps necessary:

1. Name: Salto Mobile.

2. Type: Salto Space.

3. Category: Salto Mobile.

4. Use Card chip serial number: Active.

5. Set it Active.

For the creation of SALTO Physical Type, here is the following steps necessary:

1. Name: Salto Physical.

2. Type: Salto Space.

3. Category: Salto Physical.

4. Use Card chip serial number: Active.

5. Set it Active.

4. Controller, adding SALTO® Mobile & Physical Credentials.

In Controller, is where the person’s are going to be created and is where the SALTO® Mobile and Physical Credentials are added.

The first steps is to create a new person in Controller, the following required fields to fill are:

1. First Name.

2. Last Name.

3. In Profile Data, Set a Profile (E.g. Employee).

4. In the Email field, insert a valid email address.

5. Save & Close.

6. It should appear an email from STAND.

7. Set a new Password.

Now it’s time to add the Credentials. Select the person and go to Credentials, then in the cardholder, select the SALTO Mobile credential.

It should look like this:

5. STAND, redeeming and using SALTO® Mobile & Physical Credentials.

STAND is a CardExchange® App that can be found in both App Store (iOS Devices) and Google Play Store (Android Devices).

After Installing STAND, open the app and log in with the previously created account. After accepting Privacy Agreement, in the main menu, it should appear a SALTO message to redeem the credential which has to be accepted.

By going to ID > Credentials, it is possible to confirm if the credential is Activated.

If the SALTO Mobile Credential is Active, in the bottom of the main menu, it should be a KEY Icon button, to when pressed, it shows a “Tap to Open“ and a button:

After tapping the button, lean over the device to the SALTO Reader, and it should beep and it should appear a success message, meaning that the reading of the Salto Mobile Key was a success!