Hikvision Access Control Tested

Published Oct 19, 2017 15:00 PM

Hikvision aggressive pricing and marketing combined with generally reliable hardware and free software has made them a major player in video surveillance.

Now, Hikvision is ramping up their access control offering. How will it fare?

We bought Hikvision's two door controller, the DS-K2602 [link no longer available] and Hikvision branded readers, as shown below, to find out.

IPVM Image

With this report, we cover these findings and more:

  • 5 key strengths plus 5 key weaknesses
  • Examining price competitiveness
  • A teardown view image showing the inside of the K2602 Controller
  • 3 screencasts of Hikvision's iVMS-4200 access management client
  • Detailed examination of the video integration feature
  • Initial cybersecurity review

Inside, we detail our findings on how well the system operates, where it is weak, and how it compares to other access systems.

Key Tested Strengths

Our test shows Hikvision Access offers some strengths that could prove challenging for competing incumbents who often charge twice as much for their controllers / software:

  • Smooth Function: Despite being new to many markets, Hikvision's access platform works well. No hangups, glitches, or bugs were noted in the interface.
  • Heavy Duty Build: The physical enclosure containing Hikvision's panel is equipped with high voltage breakers, low voltage transformer, and a full-sized industrial connection terminal. Our test shows these high-end utilities are useful even for low-end installations.
  • Good Video Event Integration: Our testing showed that combining Hikvision's cameras with access works well and is quick to operate. The 'power feature' is included free with iVMS-4200, and works much faster and more reliably in contrast to Dahua's similar offering.
  • Easy Access Configuration Wizard: We tested Hikvision's Access configuration wizard that greatly speeds up and provides inexperienced access installers a guide when installing new systems. While only basic configuration is covered, small but operational access systems can be installed in a few minutes.

Low Price A Big Factor

Hikvision's pricing is low but not as relatively low compared to higher end Western brands in access as Hikvision has been with video. For example, the K2602 two-door access controller is street priced ~$525, with a single door model available for ~$350. Western competitors are typically priced at $600 - $850 for a double door, and a single door for ~$425.

In general, Hikvision Access will be at the low end of pricing compared to brands like Lenel, Software House, and S2. When contrasted with Dahua Access, Hikvision is more expensive. For example, Dahua charges ~$150 for a two door controller, where Hikvision's price is over 3X more. Part of Hikvision's higher cost is the provision of product items not shipping with Dahua, including a locking enclosure can, 120VAC to 12 VDC power transformer, and a full size terminal connection bar.

For more pricing analysis, see our Dahua and Hikvision Entering Access Control and Dahua Access Control Tested posts.

Key Tested Weaknesses

However, our test reveals and reinforces key drawbacks to Dahua access:

  • Unclear Nomenclature: During our test, there were several instructions or labels unclear or non-typical to other access platforms, and the instruction guides often did not consistently refer to functions using the same words. Inexperienced access installers may be faced with confusion and delays on account of this.
  • Weak Tech Support: When calling tech support, Hikvision needed long hold times and multiple agents to find the answer to questions, and the inexperience and newness of tech supporting access control to the US market was evident. This is a considerable factor given the operational importance to end users for access control relative to video.
  • Hikvision Software Only: The controller is only managed via Hikvision's own software, and the controller cannot be connected or managed through any other platform. This essentially means only Hikvision recorders can be used for some of the most powerful features, like video verification.
  • No PoE Support: Hikvision's controller does not support PoE, in contrast with many other small access systems. The lack of PoE support means that electrical infrastructure needs to be run to the panel, a potential cost not needed with PoE controllers.
  • Only Wiegand or RS485 Readers: We connected several types of readers, including Hikvision's own branded models, and HID 125 kHz or 13.56 MHz models. The only option for connecting most of these units was basic, unidirectional, unsupervised Wiegand or RS-485. Many smaller systems now support OSDP as an option to increase security of the reader bus, but Hikvision does not.

Compatible Only With Hikvision Software

One of the bigger barriers Hikvision faces in the access market is that Hikvision Access controllers only work with their own software, e.g., the iVMS-4200, Hikvision's free viewing and monitoring client. Being locked to Hikvision's own platforms will likely limit market success mostly to new and small systems, especially given that the power video integration works only with Hikvision's own recorders.

The application is free and no additional software licensing is needed to use hardware once installed.

In contrast to 3rd party controllers, Hikvision access operates with only 1 platform, while Mercury Security works with 20+, HID VertX with 10+, and Axis with 8+ different systems.

iVMS-4200 Management Software With Access Control

Hikvision's free management software combines both video, access, video intercom features together. Our test focused on access control features, like Hikvision's live door control, user management, and controller configuration tasks. All access functions are available in iVMS-4200, and other clients like the discovery app SADP are not needed although can be used if installers prefer.

IPVM Image

Testing shows Hikvision's access interface to be comparable with other small access platforms, including features live pushed status events, manual access controls, and door controller and user management. During testing, all features functioned correctly with no crashes or buggy commands in the interface. The video below shows off the interface:

The process of adding cardholders and provisioning access is similar to most access platforms, with respect to building user profiles containing ID pictures, PINs, card numbers, and access profiles:

IPVM Image

Hikvision iVMS-4200 access module includes mapping, integrated video/access event bookmarking, and manual door 'unlock' and 'lock' controls similar to other small access platforms.

Quick Video Verification Of Door Events

Triggering video views based on door events like card reads or unlocks is a default feature that tested reliably during our eval. In contrast to Dahua Access where the feature often took 20 seconds or more, Hikvision's offering did this quickly, popping up a video window in under a second. The animation below shows how this function looks in operation:

DS-K2602 Controller Physical Overview

One of the controller's strengths is an industrial grade enclosure, equipped with heavy duty power components and full sized termination points. The video below illustrates the size and build quality of the controller.

The controller panel is dressed out and suitable for direct install in closets or crawlspaces and has 120 VAC breakers and transformers on board, but does not support PoE connections.

High Voltage Power

Inside the enclosure is a pre-installed high voltage circuit breaker, regionally configured for 120 VAC single phase up to 480 VAC. The enclosure power supply is fed by a rated breaker, and depending on the area, a licensed electrician may be needed to run power to the panel.

The breaker assembly is shown up close in this image:

IPVM Image

The panel itself uses 12 VDC, so if low voltage technicians cannot run 110 VAC or an existing power supply is used, the product can be installed like other access products by just bypassing this breaker.

Panel Protecting MOVs Included

A surprising inclusion is that Hikvision factory installs metal oxide varistors across the lock output terminals, factory equipping the enclosure with components typically field furnished by the installers:

IPVM Image

Controller providers typically do not furnish these components, and while inexpensive (often $0.20 or less each), lock and strike manufacturers often require them to prevent cumulative damage to controllers from de-energizing locks. Hikvision including preinstalled MOV's is not a substantial cost savings, but they are ensuring these devices are actually installed where they are commonly ignored.

Incomplete Terminal Connector Block

For installers not used to putting in access control, Hikvision offers a full size terminal port. However, the available ports do not include all taps needed to fully connect devices. For example, the reader connectors only offer power, serial, and wiegand, but do not include tamper, buzzer, or LED controller wire terminals. Those ports are offered directly on the control panel, but this means bypassing the pre-connected factory installed terminal block.

The nomenclature used in the contact points are non-typical as well, for example Hikvision calls the Wiegand 'D0' and 'D1' wires 'W0-1' and 'W1-1' instead, a subtle difference but one that may cause confusion in inexperienced installers. The image below shows this block in detail:

IPVM Image

Panel Teardown View

Inside the panel, the printed circuit board equipped with a field replaceable CR-1220 clock battery, piezo sounder, and an enclosure tamper switch riser are present. Hikvision's DS-K2602 is built on the same board as the four door K2604 version:

IPVM Image

Software Wizard For Easy Configuring

Hikvision includes a software wizard for rapid configuration of controllers, users, and access schedules from inside iVMS-4200. Using the wizard allows basic systems to be operational in under ten minutes, although configuration of power features like video integration with alarms or deep user configuration are not supported in the wizard.

The video below demonstrates the process in greater detail:

3rd Party Reader Compatibility Is Basic

Hikvision supports either 26 or 34 bit wiegand readers, or RS-485 connections. We tested both protocols with no issues, using Hikvision branded readers, the ones show here:

IPVM Image

We also tested HID multiclass readers using wiegand, with a variety of credentials including 125 kHz and 13.56 MHz types with no observed issues.

Hikvision does not support OSDP, which offers high security encrypted, supervised reader communication. The methods available now are basic and rudimentary, and will not meet more stringent reader specifications.

Our full detailed report on Hikvision's Standalone Access Terminal DS-K1T105E-C [link no longer available] (~$450) will follow in a separate post coming later this fall.

Initial Cybersecurity Review

Our test included basic port scanning and packet sniffing of the controller and how the management server communicates during operation. The controller does not use 'Hik-Connect' or other recently exploited Hikvision remote services, and communicates inbound locally on one port, 8000. The device itself has no webserver, and while indexed via IP address, all device configuration and management occurs in iVMS-4200.

Wiresharking command traffic showed data is not 'open text' and is obscured against command line spoofing:

IPVM Image

Awkward And Slow Technical Support

Hikvision USA's tech support was challenged for access control questions, unlike their generally solid video support. Wait times exceed 35 minutes in all 4 attempts, and as many as three different support agents redirecting questions. On the positive side, questions were eventually answered accurately and sufficiently but only after an average of ~45 minutes was spent waiting for responses. On two occasions, Hikvision directed questions to an engineer in possession of an actual panel who answered questions based on that example system rather than a developed set of internal guides or FAQs.

We suspect that this is a factor of Hikvision USA tech support being relatively new to the access control products. We would expect it to improve over time, though much how much remains to be seen given the differences in technical complexity for access vs video and how access will most likely remain a relative niche in Hikvision sales.

On the other hand, technical support is arguably more important for access than video because access control problems impact life safety and physical access to doors / buildings, unlike video, whose problems can more frequently be tolerated for at least short periods of time since they do not as directly impact building occupants.

Note: IPVM used an alias when calling technical support, to avoid any biases, positive or negative towards us.

Comments are shown for subscribers only. Login or Join