Preparation of essentry implementation

In this article, we summarise all the relevant topics in the preparation of the essentry implementation. In addition to settings via the essentry dashboard (app.essentry.com), essential points must be clarified before the kiosks are delivered.

Location

The kiosk is installed on the customer premises (not outside) in the designated reception and check-in areas.

  • The requirements for the kiosk location are as follows:
    Please note the dimensions of the essentry kiosk below.
  • Operating temperature: 15°C - 30°C (59°F - 86°F), relative humidity: 30% - 75%, non-condensing.
  • The installation location should be selected to avoid glare on the display and to prevent over-exposure of the camera by backlighting.

Dimensions of the kiosk in mm:

Kiosk_Abmessungen.png 

Power Supply

One 230V Schuko socket (DE) for each kiosk - please install the socket in such a way that the cable length remains very short. The mains plug is located at the foot of the kiosk.

Other socket types by location:

US: 120V Type A

UK: 230V Type G

Network Connection

The network connection should be supplied via a wired LAN RJ45 1 Gbit Ethernet connection. A LAN RJ45 socket must be provided on site for each kiosk. The kiosk LAN port is located at the base of the kiosk.

Through autosensing, the LAN interface adapts to the switch/router port. Please make sure that the switch/router port is configured to auto speed accordingly.

A WiFi connection is also supported but not recommended.

Network Requirements

We recommend that the customer operates the kiosks on a separate network (VLAN) that allows only stable Internet access and no access from or to other devices on the customer's network. A DHCP server is also required to provide the kiosk with an IP address.

The kiosks connect to the essentry servers through a VPN that is used for monitoring and maintenance. The kiosks are isolated from each other in the VPN network and cannot communicate with each other. The other internet traffic is not routed through the VPN.

An internet connection via an HTTP/web proxy is not sufficient (see firewall rules below).

Maximum Transmission Unit

The minimum path MTU must be 1472 bytes (1496 bytes recommended) including the IP header for essentry's VPN to work. This MTU is available in most regular network configurations. However, if the network uses other VPN tunnels, this MTU may not be available.

The minimum path MTU can be determined using the PING command. The following examples assume a 28-byte IP header:

Linux: ping -s 1444 -M do 1.1.1.1

Windows: ping -f -l 1444 1.1.1.1

Firewall Rules

We strongly recommend that the essentry kiosks get unrestricted access to the internet. Our attempt to enumerate the set of allowed destinations is based on best effort and can change over time. 

You might need to enable NAT Port Mapping Protocol (NAT-PMP) in your firewall.

Target Host Protocol Source Port Target Port Description
*.essentry.com TCP / HTTPS any 443 essentry servers
storage.googleapis.com TCP / HTTPS any 443 file storage
*.pubnub.com
*.pndsn.com
*.pubnub.net
*.pubnubapi.com
TCP / HTTPS any 443 notifications
*.tailscale.com
*.tailscale.io
TCP / HTTPS any 443 VPN (Control)
any UDP 41641 any VPN / WireGuard
any UDP any 3478 VPN / WireGuard
*.microsoft.com
*.azureedge.net
*.windowsupdate.com
TCP / HTTP(S) any 80, 443 Microsoft Intune
time.windows.com UDP any 123 time synchronization
licensing.assuretec.com TCP / HTTP any 80, 443

Acuant license activation

https://*.ninjarmm.com

https://*.ninjarmm.net

https://*.rmmservice.eu

https://ninjauploads.s3.amazonaws.com*

https://resources.ninjarmm.com/AgentBinaries/patchmgmt/

https://ninjabuilds.s3.amazonaws.com/

https://agent-eu-central.ninjarmm.com

https://*.ingest.sentry.io

https://ninja-attachments-eu.s3.eu-central-1.amazonaws.com/*

TCP / HTTPS any 80, 443

NinjaOne Device Management Tool

 

Consumables

RFID cards and printer label rolls (for visitor badges) are managed by the customer. Usually, this is done by the IT department. The supported formats are listed below:
RFID cards:
Supported dimensions: width 53.92 - 54.18 mm, length 85.47 - 85-90 mm, thickness: 0.4 - 0.8 mm
Printer label rolls:
Supported dimensions: width: 62.00 mm, length: 50m (continuous roll), thickness: max. 80mm, printer roll core: 25 mm

Account Setup

Your Account Manager creates your Essentry account and the Super Administrator account. The Super Administrator will be assisted in setting up your account properly via webinars and e-mail. This is done in the time between the order date and the delivery date of your kiosk, so you are ready to go live when your kiosk is delivered. The setup includes the following steps:

  1. Company
  2. Sites
  3. Entrances
  4. Check-in procedure
  5. Integrations (optional)
    1. Employees (Alternatively, employees can be managed manually in the essentry web dashboard)
    2. Calendar (Alternatively, appointments can be created and managed in the essentry web dashboard)
    3. Access Control System (optional)

Delivery

As soon as we have received your request confirmation, we will plan your delivery. You will receive a delivery date, which you please confirm to us via e-mail.
As soon as your order has left our warehouse, you will receive a tracking number. The delivery will be made before 12.00 noon on the delivery date, unless otherwise agreed.
Please make sure that our logistics partner can deliver the kiosk to you and set it up safely. The kiosk will be shipped on a standard Euro pallet (WxD 800mm x 1200mm).

Installation

On the day of installation, your kiosk will be delivered and installed by us. Please make sure that our technicians have access to the building and that the person responsible for the kiosk in your company is available for installation and start-up.
The installation will be completed within 30 - 60 min per kiosk.

Go-Live and Operations

After successful installation, our technician will test the system and ask you to sign a delivery bill. Afterwards you can connect your kiosk to your essentry web dashboard.
Depending on the scope of your order, we will support you in the go-live training of your employees.
Please note that consumables (printing paper and RFID cards) must be provided and refilled by the customer. We are happy to provide you with recommended suppliers.

 

Updated

Was this article helpful?

3 out of 4 found this helpful

Have more questions? Submit a request

Comments

0 comments

Article is closed for comments.