Objective. The student will recommend an appropriate key control solution for a client scenario, install a restricted-keyway cylinder, and complete a professional keying record that could withstand audit.
This lesson, its worked examples and its practice questions has not yet been verified by a credentialed professional in the field or by a certification or approval body. It is a study draft and may contain errors. Do not use it as instructions for work on a job site or on live equipment. Always follow your instructor, your supervising professional, and current official references and regulations.
VoTechWorks program approval and accreditation are still in progress. Credentials are issued only by the certifying bodies named in each program, after their own exams.
A lock is only as secure as the keys made from it. Key control is the set of policies, hardware, and records that ensure only authorized people can obtain a working key to a facility. When key control breaks down—keys are lost, copied without permission, or issued without documentation—an organization faces real liability: theft, unauthorized entry, and potential insurance or legal consequences. For a licensed locksmith, recommending and implementing a sound key control solution is both a professional service and an ethical obligation.
The foundation of mechanical key control is the restricted keyway. A restricted keyway is a key blank profile that the manufacturer controls tightly. Blanks are sold only to authorized dealers, and dealers may only cut keys for verified account holders. Examples include Schlage Everest, Medeco Biaxial, Medeco3, Mul-T-Lock MT5+, and BEST's IC core keyways.
Restricted keyways deliver three benefits:
When installing a restricted-keyway cylinder, handle it as you would any quality cylinder: verify the cylinder cam or tailpiece matches the lockbody, torque mounting screws to the manufacturer's specification, and confirm the key operates smoothly through the full rotation without binding. After installation, test the key from both sides of the door if it is a double-cylinder application.
Safety note: Wear safety glasses when operating a code machine or key duplicator—metal chips are sharp and fly unpredictably. Use cut-resistant gloves when handling key blanks in bulk. Keep fingers clear of the cutter head.
Restricted hardware alone does not prove who holds each key at a given moment. That requires a key register—a controlled log of every key issued, returned, or destroyed.
For the school district scenario: a large campus with many staff and high turnover benefits from an electronic key cabinet combined with a restricted-keyway master-key system. The audit trail protects the district administratively.
For the small medical office scenario: HIPAA-covered areas require documented access control. A restricted-keyway system with a manual keying record maintained by the office manager is often cost-effective and sufficient, provided the record is stored securely and reviewed when staff leave.
Every key in a managed system must be individually identified. Use a hand-stamp set or electric engraver to mark the key number on the bow (the head of the key, not the blade). The number should match the keying record exactly. Never stamp or engrave near the shoulder or cuts—distorting the blade can alter key dimensions and cause the key to fail or damage the cylinder.
Do not stamp the cylinder location code on the key itself. If a key is lost, a stamped location code tells a finder exactly which door to try. Use a coded numbering system that only your keying record can decode.
A keying record is a legal document. In many states, licensing regulations require locksmiths to maintain records of work performed, and a keying record may be subpoenaed in a dispute. Every entry must be complete, legible, and logically consistent.
A standard keying record for each key should capture:
1. Key number – unique identifier stamped on the key
2. Key holder name – full legal name, not a nickname
3. Cylinder location – building, door, or asset description
4. Key system level – grand master, master, change key, etc.
5. Issue date – the date the key was handed over
6. Issuer signature – the locksmith or authorized administrator
7. Key holder signature – acknowledges receipt and responsibility
8. Return date and signature – completed when the key is returned
9. Disposition – returned, lost, destroyed (with date and witness)
For a 12-key system, all 12 rows must be completed before the record is considered audit-ready. A single blank field is a red flag to an auditor and a liability exposure to the client.
Your memo to a client must translate technical options into plain business language. Cover three areas: security level (what threat does each option address?), cost (installation, hardware, ongoing management), and client need (staff count, turnover, regulatory requirements, budget). State your recommendation clearly, give two or three supporting reasons, and acknowledge any trade-off. Use business letter format: date, recipient, subject line, body paragraphs, your name and license number.
Key control is the intersection of hardware, documentation, and professional judgment. A restricted keyway limits unauthorized duplication; a keying record proves accountability; an appropriate key management system—manual or electronic—fits the client's scale and risk. As a licensed locksmith, your signature on a keying record carries legal weight. Keep every field complete, every key numbered, and every recommendation in writing.
Answer each question, then check it. Nothing is recorded; this is your own practice.
A free tech program — complimentary, as our commitment to get America working. Help us build VoTechWorks. Tell us what works, what doesn’t, and what you want to learn.