🚧 Under construction — VoTechWorks is being built. A free tech program — complimentary, as our commitment to get America working.
voTechWorksGrade 13 · a vocational technology learning center, by urbanicity
newSchoolWorks.com › VoTechWorks › Technology & Design › Data Center Technician › Physical Security for Data Centers › Lesson 3
TEC-DATA82-09 · Lesson 3 · 14 clock hours · lab

Installing and Testing Access Control Hardware

Objective. Students will mount a proximity card reader and electric door strike on a practice door frame, wire both devices to a provided controller, and verify correct grant/deny operation for enrolled and unenrolled credentials.

⚠ Pending professional review

This lesson, its worked examples and its practice questions has not yet been verified by an industry-certified professional or by a certification or approval body. It is a study draft and may contain errors. Do not use it as instructions for work on a job site or on live equipment. Always follow your instructor, your supervising professional, and current official references and regulations.

VoTechWorks program approval and accreditation are still in progress. Credentials are issued only by the certifying bodies named in each program, after their own exams.

Why Physical Security Hardware Matters in a Data Center

Digital firewalls protect data in transit, but the servers, storage arrays, and network gear inside a data center also need physical barriers. An electric door strike combined with a proximity card reader is one of the most common first lines of defense at server-room entries, caged areas, and equipment corridors. As a data center technician, you will install, wire, and verify these systems regularly, so understanding how each component works—and how to do the work safely—is essential.

Key Components

Proximity card reader — A surface-mount device that reads the radio-frequency signal broadcast by an access credential (card or fob). It sends a signal to the controller indicating whether the credential was presented. The reader itself does not make the grant/deny decision; the controller does.

Electric door strike — A frame-mounted device that replaces a conventional strike plate. When the controller sends a release signal, an internal solenoid retracts a latch-blocking lug, allowing the door to open. This lab uses a fail-secure (also called fail-locked) strike, which stays locked when power is removed. Fail-secure is the correct choice for server rooms because a power outage should not throw the door open.

Access control controller — The brain of the system. It stores enrolled credentials, applies grant/deny logic, and drives output relays that energize or de-energize the door strike. Controllers are typically powered by a dedicated low-voltage power supply and may log every access event.

ADA-Compliant Mounting Height

The Americans with Disabilities Act sets requirements for operable hardware, including card readers. Mount the center of the card reader between 34 and 48 inches above the finished floor (AFF). The industry standard most commonly used is 48 inches AFF to the center of the reader face when the reader is on the latch side of the door, keeping it within reach range for wheelchair users. Always confirm the authority-having-jurisdiction requirement for your installation, but 48 inches AFF is a safe, widely accepted height for a vertical surface-mount unit.

Wiring Fundamentals for Low-Voltage Access Control

Card readers and electric strikes run on low voltage—commonly 12 VDC or 24 VDC. The cable used in this lab is 22 AWG 4-conductor, a standard size for short reader runs. Each conductor in the cable is color-coded and maps to a specific function on the reader's pinout: typically power (+V), ground (GND), data line 0 (D0), and data line 1 (D1) for Wiegand-protocol readers. Always follow the manufacturer's pinout diagram exactly—reversing power and ground will damage the reader.

Run cable through a raceway (surface-mount or in-wall conduit) to keep conductors protected, organized, and code-compliant. Avoid running low-voltage access control cable in the same raceway as AC power conductors; induced noise can cause read errors.

At the controller terminal block, strip conductors to the length specified in the manual—usually about 1/4 inch—and seat each conductor fully into its terminal before tightening the screw. A loose connection is the single most common source of intermittent failures in access control systems.

Lockout/Tagout (LOTO) — Non-Negotiable Safety Step

Before any wiring work on a panel that is, or could be, energized, you must apply lockout/tagout procedures in accordance with OSHA standards for the control of hazardous energy. Even a low-voltage panel can contain components connected upstream to line voltage.

The LOTO sequence for this lab:

1. Notify affected personnel that the panel will be de-energized.

2. Locate the energy-isolating device (the circuit breaker or power-supply switch feeding the controller).

3. Switch the isolating device to the OFF position.

4. Apply your personal padlock to the hasp on the isolating device.

5. Attach a lockout tag showing your name, date, and reason.

6. Verify zero energy by measuring the controller's input terminals with a multimeter set to DC voltage—confirm the reading is 0 V.

7. Log all steps in your lab notebook.

The instructor must verify that lockout is complete before you touch any terminal. This is a hard rule in this lab and in the field.

Enrolling Credentials and Functional Testing

After wiring is complete and the instructor approves terminations, remove your lockout, restore power, and boot the controller. Credential enrollment is performed through the controller's programming interface (software or keypad depending on the model). You will enroll:

Present credential A at the reader. The controller should release the strike (you will hear or feel the solenoid actuate and the door will open). Present credential B; the strike should remain locked and the reader may indicate denial with a red LED or beep pattern.

If either test fails, use your multimeter to check continuity across each conductor at both ends, verify terminal seating, and re-check the pinout. Document every fault found, the corrective action taken, and the retest result in your lab notebook. Troubleshooting is normal; undocumented troubleshooting is not acceptable.

Safety Summary

Key terms9

Fail-secure strikeAn electric door strike that remains locked when power is removed, preventing unauthorized entry during an outage; the correct default for server-room doors.
Proximity card readerA surface-mount device that reads the radio-frequency signal from an access credential and forwards the credential data to the controller for grant/deny processing.
Wiegand protocolA common signaling standard used between card readers and controllers that transmits credential data over two data lines (D0 and D1).
Lockout/tagout (LOTO)An OSHA-required procedure that de-energizes equipment and prevents re-energization by applying personal padlocks and warning tags before any work on electrical systems.
ADA mounting heightThe Americans with Disabilities Act requirement that operable devices such as card readers be centered between 34 and 48 inches above the finished floor so they are reachable by wheelchair users.
ControllerThe access control panel that stores enrolled credentials, makes grant/deny decisions, and drives the relay output that releases or holds an electric door strike.
22 AWG 4-conductor cableA common low-voltage cable used for card-reader runs, with four color-coded conductors typically mapped to power, ground, and two Wiegand data lines.
RacewayA surface-mount or in-wall channel that protects and organizes low-voltage cables between devices and panels, keeping the installation code-compliant and resistant to physical damage.
Continuity checkA multimeter test that confirms a complete electrical path exists from one end of a conductor to the other, used to verify correct terminations and detect open or miswired connections.

Worked examples4

1. You need to mount the card reader at the ADA-standard height. The finished floor is the reference. At what measurement from the floor do you set the center of the reader, and how do you mark it before drilling?
  1. Identify the ADA-compliant target: the center of the reader face must be at 48 inches above the finished floor (AFF) for a vertical surface-mount unit on the latch side.
  2. Hold a tape measure vertically from the finished floor surface (not a raised floor tile or threshold) and mark 48 inches on the door frame or wall surface with a pencil.
  3. Use a level placed horizontally through that mark to draw a short level reference line so the reader will be plumb and at the correct height.
  4. Align the center hole or center mark on the reader's mounting template with the 48-inch mark, then mark the fastener hole locations before drilling.
Answer: Set the center of the reader at exactly 48 inches AFF, verified with a tape measure from the finished floor, and confirm the mounting is level before drilling fastener holes.
2. Before wiring, you use a multimeter to verify zero energy at the controller's input terminals after applying LOTO. The meter is set to DC voltage. You probe the positive and negative input terminals and the display reads 0.03 V. Is it safe to proceed, and why?
  1. Compare the reading (0.03 V) against the nominal supply voltage for the controller (typically 12 VDC or 24 VDC).
  2. A reading of 0.03 V is effectively zero for a DC low-voltage system — it represents residual capacitive charge that dissipates immediately and poses no hazard.
  3. Confirm that the isolating device is in the OFF position and your padlock is on the hasp, then record '0.03 V — verified zero energy' in your lab notebook.
  4. Proceed with wiring because the measured voltage is negligibly small and confirms the circuit is de-energized.
Answer: 0.03 V is effectively zero energy on a 12 V or 24 V DC system; the LOTO is confirmed effective and it is safe to proceed with wiring. Log the reading.
3. After power-up, you present the enrolled credential and the strike does not release. You suspect a wiring fault. Describe the measurement steps to locate the fault using a multimeter.
  1. Apply LOTO again to de-energize the panel before probing internal wiring.
  2. Set the multimeter to the continuity or resistance (ohms) function.
  3. Place one probe at the controller's strike output terminal (positive relay output) and the other probe at the corresponding terminal on the strike itself. A reading near zero ohms (or an audible beep in continuity mode) confirms that conductor is intact. A reading of OL (open line) indicates a break or loose connection in that run.
  4. Repeat the test on the return (negative) conductor between the strike and the controller.
  5. If both conductors are continuous, re-energize and measure DC voltage across the strike terminals while presenting the enrolled credential — the controller relay should switch and voltage should appear across the strike. No voltage indicates a controller configuration or relay fault rather than a wiring fault.
  6. Correct any faults found, re-terminate loose conductors, restore power, and retest.
Answer: Use continuity checks on each conductor between the controller output terminals and the strike terminals while power is off, then a live voltage check across the strike during an access attempt. A break in continuity or missing relay voltage points to the exact fault location.
4. Your 22 AWG 4-conductor cable run from the reader to the controller is approximately 75 feet. The manufacturer states the maximum recommended reader cable run is 500 feet for 22 AWG at 12 VDC. Are you within specification?
  1. Note the actual run length: 75 feet.
  2. Note the manufacturer's maximum: 500 feet for 22 AWG cable at 12 VDC.
  3. Compare: 75 ft ÷ 500 ft = 0.15, meaning the run uses only 15% of the allowable cable distance.
  4. Conclude that the installation is well within specification with a large safety margin.
Answer: 75 feet is well within the 500-foot maximum for 22 AWG at 12 VDC — approximately 15% of the limit. The run is fully within specification.
In class: Following a provided wiring diagram and the manufacturer's installation guide, students mount a surface-mount card reader at the correct ADA-compliant height, pull low-voltage wiring through a raceway to a controller panel, and terminate conductors using the pinout reference. · Apply OSHA lockout/tagout procedure to de-energize the practice panel before wiring; instructor verifies lockout is complete before students touch terminals; students log the LOTO steps in their lab notebook. · After energizing, enroll two test credentials (one grant, one intentionally unenrolled); test door-strike release for the grant credential and confirm denial for the unenrolled credential; document pass/fail results and troubleshoot any wiring faults found.
Materials: Practice door frame with frame-mounted strike pocket, surface-mount card reader, electric door strike (fail-secure type), 22 AWG 4-conductor cable, controller with power supply, manufacturer wiring diagram, screwdrivers, cable staple gun, multimeter, LOTO kit (padlock, hasp, lockout tags), lab notebook
Check: Instructor observes LOTO execution before wiring and checks terminal connections against the wiring diagram before power-up; student demonstrates grant and deny operation live. Pass = LOTO performed correctly with no skipped steps, all terminations within tolerance confirmed by multimeter continuity check, and both grant/deny functions operate correctly on first test or after one documented troubleshooting cycle.

Practice check8

Answer each question, then check it. Nothing is recorded; this is your own practice.

Physical Security / CNet CDCTP Data Center Operations
1. A fail-secure electric door strike is the correct choice for a server-room entry primarily because:
Physical Security / CompTIA Server+ Environmental and Physical Security
2. According to ADA guidelines, a surface-mount proximity card reader installed on the latch side of a door should have its center positioned at:
Safety / OSHA 10 Hazardous Energy Control
3. Before terminating conductors at a controller panel, what OSHA-required step must be completed and verified by the instructor?
Physical Security / CompTIA Security+ Access Control Hardware
4. In the Wiegand communication protocol used by most proximity card readers, credential data is transmitted to the controller over:
Physical Security / CNet CDCTP Access Control Systems
5. After enrolling two credentials and energizing the system, you present the unenrolled credential and the door strike releases. What is the most likely cause?
Safety / OSHA 10 Hazardous Energy Control
6. You probe a powered controller's DC input terminals with a multimeter after applying LOTO and read 0.02 V. What should you do?
Physical Security / BICSI Installer Cable Infrastructure
7. Which of the following best describes the purpose of running low-voltage access control cable in a raceway rather than stapling it loosely along a wall?
Hardware Troubleshooting / CompTIA A+ Core 1 Hardware Installation
8. A technician terminates a card-reader power conductor into a controller terminal block but does not tighten the screw fully. Which symptom is most likely to appear during testing?
Record this lesson on my transcript. Sign in with your key and enrollment email to record lessons (enroll free if you have no key). This page stays open to read and practise.
← Previous lessonProgram planNext lesson →