Features

Code

The Code is an encrypted 5-character cipher, comparable to those used in on-line banking applications. This cipher is unique and is only known and shared by your app and your IQ. This means that it is not stored anywhere else. Also, since only your app and your IQ are involved, you are the only person who has full control over any modification in the site. A Code is only valid for 3 minutes, which increases its security.

Why is it necessary to activate the IQ in the app?

The Owner needs full control and access for every IQ and door, but a SuperUser only requires this type of control and access for the doors to which the Owner has given them access. To be able to manage an IQ, the owner must activate it in the app.

How can I activate the Code for the first time?

Step 1 Once you have entered the app, a notification appears that the IQ has still not been activated.

Step 2 It is classified in the app menu under “Non-activated IQs”. Select the “Activate” button and press “OK” so that the site sends a text message.

Step 3 You receive a text message with a 4 digit PIN.

Step 4 Copy the PIN from the text message. Enter a unique, non-transferable PIN. Enter the PIN again to confirm. The app will now be ready to generate codes.

When do I need to generate a new Code?

  • For remote door opening, when this takes place via the Internet.
  • To put your doors into office mode, when this is performed via the Internet.
  • If the Owner wants to change the hardware configuration in the “Account” section.
Go to the page

A Code is required to perform sensitive actions:

  • Attaching a lock to an IQ
  • Attaching a repeater to an IQ
  • Detaching a lock from an IQ
  • Detaching a lock from an IQ
  • Performing a remote opening through the web interface (app.saltoks.com )
  • Placing a door into office more through the web interface (app.saltoks.com )

When you perform a remote opening or place a door into Office Mode through the mobile application, a Code is still required and will be generated, however the Code is not displayed to you nor do you need to enter the Code in the mobile application. The Code is, in this case processed automatically by the app, making the app easier to use and more user friendly. The security measures are still in tact as you are the only one that has access to your mobile phone and know the PIN of your mobile application.

A Code is needed as an extra security measure when you use the web interface (app.saltoks.com ) to perform any of the actions listed above. We believe credentials based on e-mail address and password is a secure way of logging in, however as an added security measure, the use of a Code ensures that the action is actually performed by the account holder and not by someone who has just gained access to the account holder’s account. To generate a Code, the user needs to have access to the mobile device where the user has logged into the mobile application and where the IQ has been activated.

Go to the page

A Code is generated using a number of elements that all have to match up for the Code to be valid. The exact composition of the elements is confidential, however the items below make up over 90% of the generation of invalid Codes.

A Code can be invalid when:

  • A wrong PIN is used to generate the Code
  • The time on your mobile device is not synced to 'network time'
  • The wrong Code was entered (e.g. due to typing error)
  • The wrong user's Code is used (e.g. logged in as user A, but using device of user B)

A wrong PIN is used to generate the Code

If a wrong PIN is entered to generate the Code, a code will be generated, however this Code will be invalid. When you are unsure if you have entered the correct PIN, you can double-check your PIN by performing a 'Change PIN' on your mobile device. You don't actually have to change your PIN, but you can simply re-enter your current PIN as 'new' PIN. If you have used a wrong PIN, in this process you will receive a 'wrong PIN' message. If you can successfully change your PIN, you have used the correct PIN. Tip: Using the wrong PIN accounts for the majority of invalid Codes.

The time on your mobile device is not synced to 'network time'

One of the other elements that make up your Code is 'time'. It is therefore important that your device time settings are synchronized with our server time. The best way to ensure that this is the case (also taking into account time zones, etc.) is to set the time settings of your mobile device to 'network time' or 'Set Automatically'.

Android

  1. Open "Settings" App
  2. Tap "More" tab and select "Date and Time"
  3. Mark "Automatic date and Time" to use network-provided time. 

iOS

  1. Open "Settings"
  2. Tap "General" and tap "Date & Time"
  3. Mark "Set automatically" to use network-provided time. 

The wrong Code was entered (e.g. due to typing error)

Another common reason that the Code does not work is when the code has been typed in incorrectly.

The Code is not case sensitive (so it does not matter if you use upper- or lower case). A Code can consist of the letters A-F and the number 0-9; this means that there can never be an "O" (letter). O-shaped characters are always a "0" (number) in a Code. The same goes for the letters I and L (these cannot be part of a Code). Tip: Please pay careful attention to the number 8 and the letter B. These can be difficult to distinguish and may result in the Code not being accepted.

The wrong user's Code is used (e.g. logged in as user A, but using device of user B)

A Code is uniquely linked to a specific user, so generating a valid Code for another user is not possible. If you are logged in as 'User A', please make sure that you also use the device of 'User A' to generate the Code. Using another device for another user will result in the Code being invalid. *Please note that this applies to all users of a site; an Owner can also only generate Codes for its own account. An Owner cannot generate a valid Code for any of its (Super)Users.

Go to the page

A Code is needed as an extra security measure when you use the web interface (app.saltoks.com ) to perform any of the actions listed above. We believe credentials based on the e-mail address and password is a secure way of logging in, however, as an added security measure, the use of a Code ensures that the action is actually performed by the account holder and not by someone who has just gained access to the account holder’s account. To generate a Code, the user needs to have access to the mobile device where the user has logged into the mobile application and where the IQ has been activated.

Go to the page

Installer Access

When an installer starts working on a site, the installer can add devices, attach and detach devices without a Code to setup the site. Once an installation has been released to the Owner, an installer no longer has access to the site. If an installer needs to work on a site (e.g. add devices or modify the site), the installer can be granted 'Installer Access' so that the installer can temporarily gain access to the site and does not require a Code to attach /detach hardware to the current site.

At this moment, Installer access only allows the installer to add a new IQ to an existing site and to add repeaters and doors to that IQ. It is currently not possible to add repeaters or doors to existing IQs. 

Installer access enables an installer to work on a released site, without having to login as the Owner and without the need for Codes to perform actions that usually would require a Code.

What is the Code?

The Code is an encrypted 5-character code, comparable to those used in on-line banking applications. This encryption is unique and is only known and shared by your app and your IQ. This means that it is not stored anywhere else. Also, since only your app and your IQ are involved, you are the only person who has full control over any modification in the site. A Code is only valid for 3 minutes, which increases the security.

When do I need to generate a new Code?

  • For remote door opening, when this takes place via the Internet.
  • To put your doors into Office Mode, when this is performed via the Internet.
  • If the Owner wants to change the hardware configuration in the “Account” section.
Go to the page

To provide 'Installer Access', the Owner can generate an access code by clicking on 'Account' > 'Security' > 'Installer Access'

The installer can enter the Customer UID and Access code in their Installer environment to gain access to the site.

Go to the page

There are 2 scenarios where an installer can change the email address of the Owner:

  1. The site is still in installation and not yet released to the customer. When the installer goes to home.saltoks.com and selects the installer account > Dashboard > Edit site. As you can see the name of the site can be changed as well as the email address.
  2. The site is already released to the customer, but the customer has not yet created an account for the site on home.saltoks.com . This means that the site has not been 'picked up' by the customer and is therefore floating around without an Owner. When the installer goes to home.saltoks.com and selects the installer account > Dashboard > Edit installation

As you can see the name of the site can be changed as well as the email address. 

If the site is already in use by the customer, and released on a certain date the Installer can no longer change the email address in the installer account. Changing the Owner is the responsibility of the customer now.

Go to the page

Users, roles and authorizations

What kind of user roles does my site include?

In you site a user can have various user roles:

  • Owner
  • SuperUser
  • User

Owner

There is only one Owner for each site. The SALTO Ks account is registered in this person's name. The details for the Owner are stored and can be edited in “Account/Personnel”. All of the authorizations are established by default: Master Key, Offline and access app activated . The Owner can create SuperUsers and Users. The Owner can also modify any information for personnel and for the account.

Superuser

This is a User who, in addition to being assigned a Tag or use of the app, will have access to an account at home.saltoks.com This will require an e-mail address to be entered (needed for the login) and a telephone number (needed to receive the SMS for configuring the PIN or alerts).

A SuperUser can view but not modify the details for the Owner, or can create other SuperUsers and new app users or users with a Tag.

App user

For each IQ on a site, there can be up to 100 Users with access to the app. They can be assigned a Tag and are also allowed to use the app. To do so, an email address (needed for the login) and a telephone number (needed to receive the SMS for configuring the PIN) must be entered.

What are Master key rights

The Master key or Offline Access option allows a User to open the doors to which he or she has permissions defined, even when the IQ is offline or disconnected.

Where can I configure the Master key rights for offline access?

The configuration option can be located when you:

Step 1 Access the account via home.saltoks.com and go to the “People” section.

Step 2 Click the pencil icon in order to edit the profile.

Step 3 The option appears in the lower part of the profile.

Go to the page

"Master key" is a feature that allows offline access to locks that are (temporarily) not connected to the IQ or when the IQ cannot connect to our database. This can happen for a number of reasons, including a power outage that causes the IQ to switch off temporarily. A Master key is by no means a skeleton key (A skeleton key is a type of Master key in which the serrated edge has been filed down so that it can open numerous locks, most commonly the warded lock): it does not give the ability to the holder of the tag to open doors that the user is not authorized for. In case the lock cannot validate the tag and its access rights in the database, the lock will fall back on the 'Master key' validation which means that if the presented tag is a Master key and is included in an access group that has access to the lock the tag is presented to, the lock will validate the tag and provide access to the holder of the tag. Due to the storage capacity of a lock, and depending on the firmware of the lock this feature can be assigned to a maximum of 39 Users / Tags. Please note that Master keys have 24/7 accesses to a door if the lock falls back on the Master key validation, even if in the access group the access of that Tag is limited to a specific time frame. In other words: access groups do not apply to Master keys when the IQ has no connection to the lock or to our database.

A Master key can be assigned to user by editing the user in 'People' and checking the box 'Master key'.

Go to the page

Eagle Eye Networks

To be able to link a cameramanager account to a site, you need to be an Owner or admin of that site.

  1. After opening the SALTO KS app on your mobile device, go to the settings page and select KSconnect.
  2. Click on the cameramanager logo. The sites you have an admin or Owner role in will be shown and the status of the connection is indicated. The exclamation mark icon indicates that no cameramanager credentials have been provided. Provide your cameramanager credentials and press “connect”.

After you have been authenticated to cameramanager successfully, the available cameras in your account are shown.

You can link a camera to a door by selecting “manage door”. Select the door you want link the camera to and press, “done”. The selected door is now displayed below the camera preview.

When going back, the connection status has now been updated. On the door detail page, each door that has a camera attached to it will have an extra icon, displayed at the top left side of the screen.

It might take a little while to appear and will first be greyed out and then become white. Once it is white, you can tap it to show a live feed from the camera. You can tilt your phone to show a full screen version of the video feed, or tap the right top of the video screen to close it.

The events overview now has a new indicator for each event generated on a door that has a camera linked to it. Tapping the event will open an event detail page. The event detail page shows a still of the camera at the exact time of the event. Clicking this still image will show a video fragment from 15 seconds before till 15 seconds after the time of the event.

Go to the page