Access Control for Businesses and Residential Communities

What access control does, and what it doesn't

Access control answers three questions at every controlled opening: who is allowed in, when they're allowed in, and what actually happened. A mechanical key answers only the first, and poorly, because keys get copied, lent out and never returned. An electronic system ties entry to a credential that can be issued or cancelled from a screen, limited to certain hours and logged every time it's presented.

What it won't do is fix a weak door. If a frame is bent, a closer leaks, or a storefront door can be pried at the latch, adding a card reader simply records who used an opening that a determined person could defeat anyway. It doesn't replace an intrusion alarm or cameras either, although it can work alongside both. And on its own it doesn't stop tailgating: a reader grants entry to one credential, and nothing prevents a second person from following the first unless the site adds procedures or hardware aimed at that problem.

Seen honestly, access control is a management tool as much as a security tool. Its real payoff shows up on ordinary days. A new hire gets access in a minute. A lost fob stops working before anyone finds it in a parking lot. The cleaning crew can enter only on its scheduled nights. And the owner can answer the question of who was in the stockroom on Tuesday evening with a report instead of a guess. Those everyday benefits are what justify the system, and they're what we design around.

The parts of a system, from the door back to the server

Every installation, from a single keypad to a multi-building campus, is assembled from the same building blocks. Knowing them makes quotes easier to compare and problems easier to describe on the phone.

• Credential. A PIN, a proximity or smart card, a key fob, or a phone carrying a digital credential.
• Reader or keypad. Mounted beside the opening, it reads the credential and sends the identity onward. In standalone locks the reader is built into the lock body.
• Controller. The decision-maker. It holds the user database and schedules, decides whether to release the lock, and records the event. A typical panel serves two to eight doors and talks to software on a local computer or in the cloud.
• Locking hardware. An electric strike in the frame, a magnetic lock on the header, an electrified mortise or cylindrical lock, or an exit device with electric latch retraction.
• Door position switch. A small magnetic contact that reports whether the door is really closed, which makes forced-door and held-open alerts possible.
• Request-to-exit device. A motion sensor, push button or switch inside the exit hardware that tells the controller someone is leaving, so it doesn't report a forced door, and that releases a maglock for egress.
• Power supply and batteries. Usually 12 or 24 volts DC, with backup batteries and often a fire alarm interface relay.
• Software. Where administrators manage people, schedules and reports.

When an opening misbehaves, one of these parts is responsible. Diagnosing them in order, beginning at the door rather than at the computer, finds the fault faster and more cheaply than replacing components on suspicion.

Standalone, networked or cloud: choosing the right size

The most consequential decision in any project is the tier of system, because it sets the cost, the administrative workload and what's possible later.

Standalone locks are self-contained. A battery-powered lock with a keypad, a prox reader or both stores its own users and audit log. Commercial examples include the Alarm Lock Trilogy line, Schlage CO-series locks and dormakaba E-Plex models. They suit a small office, a server closet, a medication room or a lone back door. The drawback is that every change happens at each lock, so a company with eight of them and steady turnover spends real time walking from door to door with a programmer.

Networked systems wire readers and electrified locks to controllers and manage everything from one console. They scale to dozens or hundreds of openings, support layered schedules, produce unified reports and integrate with video and alarm platforms. They also demand more planning, more cable and power, and someone willing to administer them.

Cloud-managed systems use similar door hardware but host the software online. Administrators work from a browser or phone, updates arrive automatically, and several sites can be run from one account. The cost shifts to a recurring subscription, and you depend on the provider staying in business and supporting your hardware.

A hybrid is common and sensible: networked or cloud control on perimeter doors and high-value rooms, standalone locks on a few interior doors where cabling would be costly, and wireless electrified locks that report to the system through a nearby gateway. We help owners weigh door count, turnover, the number of administrators and reporting needs, and we'll say plainly when a simpler option meets the goal.

Credentials: keypads, cards, fobs and phones

The credential decides both convenience and how hard the system is to defeat.

Keypads require nothing to carry, but codes travel. A code shared among a crew reaches friends, former employees and delivery drivers within months, and the log can only say that the code was used, not by whom. Individual PINs solve the logging problem, and longer codes resist guessing.

125 kHz proximity cards and fobs remain extremely common, and they are the weak point in many older installations. They transmit a fixed identifier with no encryption, so an inexpensive device can read one from a short distance and write a working duplicate. The kiosks that copy apartment fobs at shopping malls work exactly this way.

13.56 MHz smart credentials vary widely. Early MIFARE Classic cards have well-documented weaknesses, and older iCLASS cards that relied on the standard factory key have been compromised as well. Current options such as MIFARE DESFire EV2 and EV3 or HID Seos use modern encryption and mutual authentication between card and reader, and they're a sound choice for new work.

Phone credentials use Bluetooth or NFC. They're easy to issue remotely and hard to lend casually, though they depend on a charged phone and an app or wallet setup that works for every user, including the ones who dislike installing apps.

For high-value rooms, two factors help: a card plus a PIN, or a credential combined with a tight schedule. Biometric readers exist and perform well in specific settings, but they raise privacy and enrollment questions worth thinking through before purchase.

Apartment communities, HOAs and gated properties

Multifamily properties face different pressures than offices. The user list is large and churns constantly, credentials get shared among roommates and relatives, and the openings themselves are hammered by daily traffic.

Typical controlled points include: - Vehicle gates with a telephone entry panel, remote transmitters or fob readers - Pedestrian gates beside the vehicle entrance and near mailbox clusters - Pool, spa and fitness room doors with posted hours - Package rooms, mailrooms and bike storage - Leasing offices, maintenance shops and trash enclosures

Several weak spots recur. Telephone entry panels that call residents over an analog phone line stop working as carriers phase out copper service, and moving them to cellular or internet communication usually brings them back. Unencrypted fobs get duplicated. Pool gates must still self-close and self-latch after an electronic lock is added. And credentials for long-gone residents stay active because nobody audits the list.

Common-area access control is in addition to, not a substitute for, the locks on each unit. California Civil Code section 1941.3 requires landlords to provide a working deadbolt on each unit's main swinging entry door, regardless of what happens at the gate. When a tenant makes a written lock-change request under Civil Code sections 1941.5 and 1941.6 in a situation involving a protective order or similar documentation, deleting the restrained person's fob is a sensible companion step, though the statute's lock-change requirement still applies on its own terms.

We service readers, keypads, telephone entry panels, maglocks and gate locks, and we coordinate with gate operator technicians for motors, arms and safety sensors.

Egress, fire and accessibility rules in California

Electronic locking is regulated because it can trap people. Under the California Building Code, which is part of Title 24, the governing principle is that occupants must be able to leave from the egress side without a key, special knowledge or special effort. That principle shapes every design decision.

Some practical consequences: - Magnetic locks on egress doors generally need a sensor on the egress side that releases the lock as someone approaches, a manual push-to-exit device near the door, release on loss of power, and release when the fire alarm or sprinkler system activates. - Fire-rated doors must latch positively. Electrified hardware on them must be listed for fire doors, and electric strikes on those openings are fail-secure. - Stairway doors in multistory buildings carry their own re-entry and release requirements. - Readers, keypads and exit hardware must sit within accessible reach ranges, and operable parts must work without tight grasping, pinching or twisting of the wrist under Chapter 11B of the California Building Code. - Delayed egress devices, which hold a door briefly while sounding an alarm, are allowed only in certain occupancies and under specific conditions.

Details vary with occupancy type and the code edition a jurisdiction has adopted, and the local building official or fire marshal has the final word. Some installations, particularly those involving maglocks, fire alarm interfaces or changes to required exits, need a permit and inspection. We design within these rules from the first site walk and tell you when a permit applies, because removing noncompliant hardware after a failed inspection costs more than getting it right.

Why access control fails

Most failures fall into a few predictable groups, and almost none of them call for replacing the whole system.

Power problems lead the list. Backup batteries lose capacity over time, and faster in hot electrical rooms and rooftop enclosures. A power supply overloaded by locks added over the years may run fine until several doors energize at once. Long runs of thin wire drop voltage, so a maglock holds weakly or a strike buzzes without fully releasing.

Mechanical problems come next. A door sagging on worn hinges pushes its latch into the strike keeper and binds it. A closer that has lost its fluid no longer pulls the door into a maglock, so the armature never seats. Weatherstripping, building air pressure and wind all add preload that some strikes can't overcome.

Electrical wear follows. Strikes and maglocks are coils, and when they switch off they kick back a voltage spike. Without a suppression diode or varistor installed at the lock, those spikes erode the controller's relay contacts until one sticks closed and a door stays unlocked indefinitely.

Then come communication and software issues: a reader cable damaged where it enters conduit, a network switch replaced without the controller's settings, an expired cloud subscription, a schedule edited by mistake, or a server PC that finally refused to boot.

Finally, people. Shared codes, unreturned fobs, override keys nobody can locate, and a lone admin login belonging to someone who left last year cause as many security failures as any hardware fault.

Maintenance that prevents most service calls

A yearly inspection of each controlled opening costs far less than an emergency at a busy entrance, and heavily used doors and outdoor gates may justify two visits a year. A thorough check covers:

• Release and relock with a valid credential, and denial with an invalid one
• Closing speed, latching from full open and the condition of the closer
• Strike or maglock alignment, armature mounting and fastener tightness
• Request-to-exit timing and the egress hardware itself
• Door position switch reporting and held-open alerts
• Fire alarm release on maglocked and fail-safe doors, timed with the alarm contractor's own testing
• Power supply output and a battery load test, replacing aging batteries
• Reader and keypad condition, especially units exposed to sun and weather
• Firmware and software versions, and whether the manufacturer still supports them
• The user list, administrator accounts and override key records

Lubrication is selective. Many electrified locks and strikes should not be oiled at all, and the manufacturer's instructions govern. A written record of each visit gives the owner documentation for insurers or inspectors and gives the next technician a head start. The same visit is the right moment to plan replacements, so parts get swapped on your schedule rather than failing in the middle of a heat wave.

Upgrading an older system without starting over

Upgrade projects usually begin with one of four triggers: unsupported software, a failed computer or controller, unencrypted credentials, or a business that outgrew its original setup. Few of them require gutting everything.

Door hardware, cabling and power supplies in good condition can often stay. Readers can be swapped for multi-technology models that read both legacy prox and new encrypted credentials, allowing a gradual migration: new users receive secure credentials immediately, existing users exchange theirs over a few weeks, and the old format is switched off once the count reaches zero.

Controllers are the second piece. Many older panels communicate with readers over Wiegand, a one-way, unencrypted signal that has been in use for decades. Newer controllers and readers support OSDP, an open standard published by the Security Industry Association that runs over a two-wire RS-485 connection. With Secure Channel enabled, OSDP encrypts reader traffic and reports when a reader goes offline. Existing cable can often carry it if it has the right conductors and is in sound condition.

Software and hosting come last. Moving to a cloud platform may mean replacing controllers with models that platform supports; moving to a newer version of on-site software may mean a new server. We confirm which user data can be exported and imported, so nobody has to retype hundreds of names.

We phase upgrades so every door works at the end of each workday. Perimeter openings usually go first because they carry the most risk.

Users, schedules and audit trails

Hardware only enforces the rules you give it, so a well-run system depends on good administration.

Start with roles. Group users by job or tenant type, give each group the doors and hours it needs, and keep exceptions rare. A managers group with access everywhere, a warehouse group limited to shift hours and a vendor group restricted to weekday mornings is far easier to maintain than individual permissions for fifty people.

Plan schedules with care. Doors that unlock on a timer for business hours must lock on a timer as well, and holidays belong in the calendar ahead of time. A first-person-in rule holds a scheduled unlock until an authorized employee badges in, which protects you on days the business unexpectedly stays closed.

Protect administrator access. Every administrator should have an individual login, with multi-factor authentication where the platform offers it. At least two people should be able to manage the system, and admin accounts should be removed when people leave, exactly like door credentials.

Use the audit trail. Name every credential after a person, not a number. Turn on the events that matter: granted, denied, forced, held open and administrative changes. Review the user list quarterly and delete dormant credentials. When something goes missing, a clean log narrows the question in minutes.

Before changing anything in a client's system, we confirm that the person directing the work is the owner or an authorized manager, the same verification we apply before opening any business.

What a locksmith handles and when other trades join

Access control sits between several trades, and being clear about who does what prevents gaps.

As a licensed California locksmith company (license LCO7891, issued by the Bureau of Security and Investigative Services), we handle the door: electrified locks, strikes, maglocks, exit devices with latch retraction, closers, hinges, override cylinders and key systems. We install and service readers, keypads, standalone locks, controllers and power supplies, program systems and train administrators, and we troubleshoot faults where the door and the electronics meet.

Some work belongs to other licensed specialists: - New 120-volt circuits for power supplies: an electrical contractor - Large structured cabling projects, multi-building fiber or network design: a low-voltage contractor or your IT provider - Fire alarm interface wiring at the alarm panel: the fire alarm contractor - Elevator readers and floor restrictions: the elevator company - Gate operator motors, arms and safety sensors: a gate technician

We identify early which of these apply, coordinate scheduling, and prepare the door hardware they'll connect to. Being candid about those limits is part of the job. A system works when every trade's piece fits, and one designed by someone who understands the door is far less likely to fail there.

Service area, hours and getting started

Julian's Locksmith is a mobile locksmith based in San Bernardino, serving businesses, apartment communities and HOAs across the Inland Empire, the San Gabriel Valley, the Pomona Valley, north Orange County and southeast Los Angeles County. We come to your property for site walks, installations, repairs and maintenance.

Our hours are 6:30 a.m. to 11:30 p.m., every day of the week. We're closed between 11:30 p.m. and 6:30 a.m. Because door failures don't keep business hours, we encourage every client to keep override keys within reach of the right people and to know how each door behaves without power.

To get started, call (951) 903-3193 or email info@julians-locksmith.com. For a new project, tell us the number of doors and gates, the type of property and what prompted the project. For a repair, describe the symptom and the brand on the reader or keypad. We'll schedule a visit, confirm your authority over the property, inspect the openings and give you a written quote before any work begins. You can verify our license at search.dca.ca.gov.