In this article, we summarise all the relevant topics in the preparation of the essentry implementation. In addition to settings via the essentry dashboard (app.essentry.com), essential points must be clarified before the kiosks are delivered.
Location
The kiosk is installed on the customer premises (not outside) in the designated reception and check-in areas.
- The requirements for the kiosk location are as follows:
Please note the dimensions of the essentry kiosk below. - Operating temperature: 15°C - 30°C (59°F - 86°F), relative humidity: 30% - 75%, non-condensing.
- The installation location should be selected to avoid glare on the display and to prevent over-exposure of the camera by backlighting.
Dimensions of the kiosk in mm:
Power Supply
One 230V Schuko socket (DE) for each kiosk - please install the socket in such a way that the cable length remains very short. The mains plug is located at the foot of the kiosk.
Other socket types by location:
US: 120V Type A
UK: 230V Type G
Network Connection
The network connection should be supplied via a wired LAN RJ45 1 Gbit Ethernet connection. A LAN RJ45 socket must be provided on site for each kiosk. The kiosk LAN port is located at the base of the kiosk.
Through autosensing, the LAN interface adapts to the switch/router port. Please make sure that the switch/router port is configured to auto speed accordingly.
A WiFi connection is also supported but not recommended.
Network Requirements
We recommend that the customer operates the kiosks on a separate network (VLAN) that allows only stable Internet access and no access from or to other devices on the customer's network. A DHCP server is also required to provide the kiosk with an IP address.
The kiosks connect to the essentry servers through a VPN that is used for monitoring and maintenance. The kiosks are isolated from each other in the VPN network and cannot communicate with each other. The other internet traffic is not routed through the VPN.
An internet connection via an HTTP/web proxy is not sufficient (see firewall rules below).
Maximum Transmission Unit
The minimum path MTU must be 1472 bytes (1496 bytes recommended) including the IP header for essentry's VPN to work. This MTU is available in most regular network configurations. However, if the network uses other VPN tunnels, this MTU may not be available.
The minimum path MTU can be determined using the PING command. The following examples assume a 28-byte IP header:
Linux: ping -s 1444 -M do 1.1.1.1
Windows: ping -f -l 1444 1.1.1.1
Firewall Rules
We strongly recommend that the essentry kiosks get unrestricted access to the internet. Our attempt to enumerate the set of allowed destinations is based on best effort and can change over time.
You might need to enable NAT Port Mapping Protocol (NAT-PMP) in your firewall.
Target Host | Protocol | Source Port | Target Port | Description |
*.essentry.com | TCP / HTTPS | any | 443 | essentry servers |
storage.googleapis.com | TCP / HTTPS | any | 443 | file storage |
*.pubnub.com *.pndsn.com *.pubnub.net *.pubnubapi.com |
TCP / HTTPS | any | 443 | notifications |
*.tailscale.com *.tailscale.io |
TCP / HTTPS | any | 443 | VPN (Control) |
any | UDP | 41641 | any | VPN / WireGuard |
any | UDP | any | 3478 | VPN / WireGuard |
*.microsoft.com *.azureedge.net *.windowsupdate.com |
TCP / HTTP(S) | any | 80, 443 | Microsoft Intune |
time.windows.com | UDP | any | 123 | time synchronization |
licensing.assuretec.com | TCP / HTTP | any | 80, 443 |
Acuant license activation |
https://*.ninjarmm.com https://*.ninjarmm.net https://*.rmmservice.eu https://ninjauploads.s3.amazonaws.com* https://resources.ninjarmm.com/AgentBinaries/patchmgmt/ https://ninjabuilds.s3.amazonaws.com/ https://agent-eu-central.ninjarmm.com https://*.ingest.sentry.io https://ninja-attachments-eu.s3.eu-central-1.amazonaws.com/* |
TCP / HTTPS | any | 80, 443 |
NinjaOne Device Management Tool |
Consumables
RFID cards and printer label rolls (for visitor badges) are managed by the customer. Usually, this is done by the IT department. The supported formats are listed below:
RFID cards:
Supported dimensions: width 53.92 - 54.18 mm, length 85.47 - 85-90 mm, thickness: 0.4 - 0.8 mm
Printer label rolls:
Supported dimensions: width: 62.00 mm, length: 50m (continuous roll), thickness: max. 80mm, printer roll core: 25 mm
Account Setup
Your Account Manager creates your Essentry account and the Super Administrator account. The Super Administrator will be assisted in setting up your account properly via webinars and e-mail. This is done in the time between the order date and the delivery date of your kiosk, so you are ready to go live when your kiosk is delivered. The setup includes the following steps:
- Company
- Sites
- Entrances
- Check-in procedure
- Integrations (optional)
- Employees (Alternatively, employees can be managed manually in the essentry web dashboard)
- Calendar (Alternatively, appointments can be created and managed in the essentry web dashboard)
- Access Control System (optional)
Delivery
As soon as we have received your request confirmation, we will plan your delivery. You will receive a delivery date, which you please confirm to us via e-mail.
As soon as your order has left our warehouse, you will receive a tracking number. The delivery will be made before 12.00 noon on the delivery date, unless otherwise agreed.
Please make sure that our logistics partner can deliver the kiosk to you and set it up safely. The kiosk will be shipped on a standard Euro pallet (WxD 800mm x 1200mm).
Installation
On the day of installation, your kiosk will be delivered and installed by us. Please make sure that our technicians have access to the building and that the person responsible for the kiosk in your company is available for installation and start-up.
The installation will be completed within 30 - 60 min per kiosk.
Go-Live and Operations
After successful installation, our technician will test the system and ask you to sign a delivery bill. Afterwards you can connect your kiosk to your essentry web dashboard.
Depending on the scope of your order, we will support you in the go-live training of your employees.
Please note that consumables (printing paper and RFID cards) must be provided and refilled by the customer. We are happy to provide you with recommended suppliers.
Updated
Comments
0 comments
Article is closed for comments.