Gladstone360: Access Control Prerequisites
Problem
Before Gladstone engineers can install and operate the Gladstone360 Access Control Windows Service at your site, you need to have certain prerequisites in place. They cover installation, communication, testing and ongoing support: without them, the installation visit may stall or fail, or the system may be unreliable once installed.
Resolution
Complete the following before your installation is scheduled.
Allow the Gladstone360 API URL and file paths
- Whitelist the Gladstone360 API URL and all folder and file paths related to access control.
- Confirm the PC can reach the API URL, taking into account any firewalls or proxy servers on your network.
Allow communication over port 443
- Allow outbound communication over port 443 (HTTPS) on the PC, so it can make secure connections to the Gladstone360 API.
Allow files to be uploaded to the PC
- Make sure the following can be uploaded or copied to the PC:
- the Gladstone360 Access service installation file
- the FTDI driver (which converts USB to a virtual COM port)
- the communications port test application
- Make sure the following can be uploaded or copied to the PC:
Arrange remote access for Gladstone engineers (where applicable)
- Arrange remote access for Gladstone engineers to the PC connected to the Access Control Communications Box.
- Use third-party remote access software such as WebEx or TeamViewer. Microsoft Teams is not suitable for this.
Create a login account for the engineers (onsite and remote)
- Create a login account on the PC for Gladstone engineers, with permission to:
- install the Windows Service
- start and stop the Windows Service
- create folders
- update the service configuration file
- Create a login account on the PC for Gladstone engineers, with permission to:
Check the Windows Service account's permissions
- By default, the service runs as the Network Service account.
- If Network Service does not have internet or COM port access on your PC, set up a different account with permission to:
- access the Gladstone360 API URL
- communicate with the COM port
Prepare active membership cards or fobs
- Have at least two active membership cards or fobs ready for testing the system.
Train staff to disable the access control override
- Make sure your staff know how to disable the access control override. It must be disabled to test that the system works.
Arrange a member of staff for testing
- Arrange for a member of staff to test access control by tapping cards or fobs on the reader.
- Confirm who will be on site to validate access at each entry point once the service is running.
- During testing, keep the turnstile or gate override switched off (gates locked), so you can see how the system responds.
Notes
- How Gladstone360 access control works — system components:
- User: a member of staff or of the public
- Reader: the device at the turnstile that reads cards and fobs
- Slave board: connected to the turnstile; receives data from the reader
- Master board: in the communications box near the PC; connects to the slave boards and to the PC's USB port
- USB port: on the PC; connects the master board to the PC
- Windows Service: the Gladstone360 Access Control Windows Service, which passes data between the Gladstone360 API and the master board
- Process flow:
- The user presents a card or fob to the reader.
- The reader reads the data from the card or fob.
- The reader sends the data to the slave board.
- The slave board forwards the data to the master board.
- The master board sends the data to the PC through the USB port.
- The Windows Service on the PC receives the data.
- The Windows Service sends the data to the Gladstone360 API.
- The Gladstone360 API checks the user's access rights.
- Gladstone360 decides whether access is granted or denied.
- If access is granted, the permission is sent back through the chain (API → Windows Service → USB port → master board → slave board), and the entry point opens.
- If access is denied, the entry point stays locked (no signal is sent to open it).
- Re-installing the service on a PC that was already commissioned is covered in Re-installing the G360 Access Control Service.