Door Controller Setup and Configuration: Complete Guide

Most access control problems trace back to installation rather than the hardware.

A reader mounted too high for shorter staff. Or a maglock wired so it stays locked when the power fails, on a fire escape route. Or a door contact misaligned by five millimetres, generating forced-door alarms every day until somebody disables it.

None of that shows up on a quotation. This guide covers what a correct installation involves, so you can specify it properly and check the work afterwards.

Quick Answer

• The controller is the brain. Readers and locks are just the parts you see.
• Maglocks on escape routes must fail safe, releasing on power failure. This is life safety, not preference.
• Reader height matters: 1.2 to 1.4 metres, reachable by everyone who uses the door.
• Power calculation decides reliability. Undersized supplies cause the faults nobody can diagnose.
• Access logs are personal data if you run this for a business.

What a Door Controller Actually Does

The controller sits between the reader and the lock. It receives credential data, checks it against the authorised user list, opens the lock or refuses, and records what happened.

It also manages the timing: how long the door stays unlocked, when it re-locks, how long it may stand open before an alarm sounds. And it handles the emergency behaviour, including releasing doors when the fire alarm triggers.

Our door controllers and readers range covers the hardware.

Three types, and which suits your site

Standalone controllers work independently with onboard memory, typically 1,000 to 50,000 users, programmed at the door itself. Suitable for one to four doors where nobody needs central management.

Network controllers connect over Ethernet to management software, giving central control, live monitoring and remote configuration. The right answer once you pass a handful of doors, or when several buildings need one user database.

Wireless controllers avoid cabling to awkward locations. Useful for glass doors, heritage buildings and retrofits where running cable would mean chasing walls.

Our guide on biometric, RFID and card access covers which credential type suits which door.

The Life Safety Point Most Quotations Skip

This deserves its own section, because getting it wrong is the one mistake with consequences beyond inconvenience.

Fail-safe locks release when power fails. Fail-secure locks stay locked.

On a fire escape route, the lock must fail safe. If the power goes and people cannot get out, you have created exactly the situation fire codes exist to prevent. Magnetic locks in particular are fail-safe by design, and a maglock on an escape door must also release when the fire alarm triggers.

So the fire alarm interface is not an optional integration. It is what makes the installation compliant. Our guide on fire alarm systems covers the alarm side, and your fire officer will check this at inspection.

Fail-secure is appropriate for a server room, a stock room or a records store, where a power cut should not open the door. Those are not escape routes.

Ask any installer which they are fitting on each door, and why. An installer who has not thought about it door by door has not thought about it at all.

What a Proper Installation Involves

Use this to specify the work, and to check it afterwards.

Site assessment first

Every door that needs control, where the reader goes on each, whether power is available nearby, and whether the network reaches. Existing lock types matter too, since replacing a door’s hardware costs considerably more than fitting a strike into what is already there.

Also worth documenting: cable routes, and any environmental issue such as an outdoor reader that will take direct sun or monsoon rain.

Components per door

A complete door needs the controller, an exterior reader, a request-to-exit device inside, the electric lock, a door contact sensor, and a power supply.

The request-to-exit device is the one people skip, and it causes the most nuisance. Without it, someone leaving normally triggers a forced-door alarm, because the controller sees the door open without a valid credential. After a fortnight of false alarms, somebody disables the alarm entirely.

Controller placement

Inside the secured area, so it cannot be reached from the unsecured side. In a reasonable environment rather than a hot ceiling void. Near the power supply and network point, with room around it for ventilation and access to the terminals.

Labelled. A controller nobody can identify in three years is a controller nobody can service.

Reader mounting

1.2 to 1.4 metres puts the reader within comfortable reach for most people. Position it 75 to 100 mm from the door frame edge, and angle it slightly downward outdoors so water runs off rather than sitting on the face.

Keep it within the manufacturer’s maximum cable distance from the controller, usually around 100 metres, and away from metal surfaces or electrical equipment that will interfere with the read.

Lock fitting

Magnetic locks mount on the frame header with a plate on the door, holding 275 to 545 kg depending on the model. They need flush contact when the door closes, and a bond sensor tells the controller whether the magnet actually holds.

Electric strikes replace the existing strike plate, which usually means enlarging the mortise. Latch alignment matters, and the strike should be tested mechanically before power is connected.

Motorised locks integrate into the door hardware itself, and suit doors where neither of the above fits neatly.

Door contact

A magnetic contact on the frame and door edge, with a maximum gap of around 20 mm, wired as a normally closed circuit.

Alignment is where this fails. A contact a few millimetres out reports the door open when it is closed, producing daily alarms. Check it by opening and closing the door several times while watching the controller status.

Wiring and Power

Two things account for most unreliable installations, and both are decided here.

Cable

Use shielded cable for readers, which prevents interference from nearby electrical runs. Keep at least 30 cm of separation from AC power lines.

Gauges by load:

• Readers: 18 AWG, or 22 AWG on short runs
• Locks drawing under 1A: 16 AWG
• Locks drawing over 1A: 14 AWG

Support the cable every metre to metre and a half, avoid sharp bends, and label every wire at both ends. That labelling costs nothing during installation and saves hours on every future service visit. Our cables and wires range covers what is needed.

Power calculation

Undersized power supplies cause intermittent faults that look like software problems and waste days of diagnosis.

Add up the actual draw:

• Controller: around 0.5A
• Reader: 0.1 to 0.3A
• Maglock: 0.3 to 1.5A
• Door sensor: around 0.05A

Worked example: 0.5 + 0.2 + 0.5 + 0.05 = 1.25A. Add 20 percent headroom and you need at least 1.5A, so specify a 2A or 3A supply.

Site the supply close to the controller to limit voltage drop, and verify the voltage at the controller under load rather than at the supply.

Battery backup is not optional in Indian conditions. Four to eight hours covers a typical outage. Add surge protection too, since Madhya Pradesh sees enough voltage fluctuation to kill unprotected electronics over time. A UPS handles both.

Configuration

Network setup

Assign a static IP outside the DHCP range, set the subnet mask and gateway to match your network, and change the default credentials immediately. Default logins for most controller brands are published online.

Update the firmware before going live rather than afterwards.

Time, and why it matters more than it sounds

Set the time zone and enable NTP synchronisation. Clock drift breaks access schedules and makes audit logs useless as evidence, since two systems disagreeing on when something happened is worse than neither recording it.

Access levels and schedules

Build schedules that match how the business actually runs, then attach doors and permissions to each.

• Standard staff: business hours, main entrance only
• Management: all hours, all doors
• Cleaning staff: after hours, specific areas
• Contractors: specific dates and times, escorted areas

Set unlock duration at 3 to 5 seconds for a normal door, 7 to 10 for a heavy or slow-closing one. Too short and people get shut out mid-step. Too long and the door sits unsecured.

Anti-passback, if you need it

Anti-passback requires a user to badge out before badging in again, which prevents one card getting several people through.

Hard anti-passback denies access on violation. Soft anti-passback logs it but lets them through. Soft is usually the better starting point, because hard anti-passback locks out anyone who followed a colleague through a door once, and that generates complaints on day one.

Set a reset period, typically 24 hours, and decide what happens during an emergency.

Alarms worth enabling

Door forced open. Door held open beyond 30 to 60 seconds. Invalid credential attempts. Tamper detection. Controller offline.

Anything beyond that becomes noise, and an alarm log nobody reads is not security.

The Data Question

Access control logs record who entered which door and when. For a business, that is personal data about your employees.

Under the DPDP Act, you are a Data Fiduciary. Section 7 provides an employment-related legitimate use, so attendance and access processing generally does not require individual consent from staff. But you do owe them a clear notice about what is collected and why.

Three things to get right:

Retention. Decide how long logs are kept and write it down. Indefinite retention is the most common gap.

Deletion on exit. Deactivate credentials when someone leaves, and delete biometric templates rather than leaving them in the database.

Contractors and visitors. These need consent before enrolment, and deletion when the engagement ends.

Our guide on attendance systems and salary software covers this in more detail, and it applies equally to access control.

Testing Before Handover

Insist on this before accepting the work, and be present for it.

• Valid credential opens the door
• Invalid credential is refused
• The exit device releases the door from inside
• The door contact reports status accurately, tested by opening and closing several times
• Forcing the door triggers the alarm
• Holding the door open triggers the alarm
• Fire alarm activation releases the doors that must release
• Schedules activate at the right times
• The audit log records every one of the above

Test the fire alarm interface specifically. It is the item most likely to have been wired but never verified, and it is the one that matters most.

Then check the logs afterwards. If the events you just generated are not in there accurately, the logging is not configured properly.

Staff Briefing

The most reliable system fails if people do not use it correctly.

Show everyone how to present a credential properly, how the exit device works, and who to call when a card stops working. Cover tailgating, since holding the door for a colleague defeats both the log and the anti-passback.

Put a short reference card near each reader. Repeat the briefing when new staff join, rather than assuming they will work it out.

Maintenance

Monthly: clean the readers, since dust on a reader face causes read failures that look like credential problems. Check the audit logs for anything unusual.

Quarterly: test the battery backup by disconnecting mains power, and verify every function still works.

Annually: firmware updates, a full test of every door, and a review of who still has access. That last one matters, because access lists accumulate people who left.

Our AMC covers this, and it is worth having, because access control degrades quietly rather than failing visibly.

Common Faults and What Causes Them

Reader not responding. Check the wiring connections first, then the reader LEDs, then cable continuity. Readers do fail, but loose terminals are far more common.

Door will not unlock. Confirm the lock has power, check the relay is switching at the controller, and test the lock mechanically. Door alignment shifts over time and can bind a strike.

Intermittent operation. Almost always power. Measure the voltage at the controller under load, not at idle. Then check for loose connections and interference sources.

Network connectivity lost. Verify the cable, check the switch port, ping the controller. If the IP changed after a router restart, set a static IP or a DHCP reservation.

Frequently Asked Questions

What is the difference between fail-safe and fail-secure?

Fail-safe locks release when power fails, which is required on fire escape routes because people must be able to get out. Fail-secure locks stay locked, which suits server rooms and stock rooms. This is a life-safety decision rather than a preference, so confirm it door by door with your installer.

How many users can a door controller handle?

Standalone controllers typically hold 1,000 to 50,000 users depending on memory. Network controllers are limited by the management software rather than the hardware, so effectively unlimited for most businesses. Choose based on your current headcount plus expected growth over five years.

Do I need network connectivity for access control?

Standalone controllers work without it, using local memory and on-device programming. Network connectivity gives you central management, live monitoring, remote configuration and integration with CCTV or attendance. For anything beyond a few doors, network controllers save considerable administrative time.

Should access control integrate with the fire alarm?

Yes, and on escape routes it is a requirement rather than an option. The fire alarm must release the doors people need to use to get out. Verify this specifically during testing, since it is the integration most likely to have been wired but never actually checked.

How long should the door stay unlocked?

Three to five seconds suits a normal door. Increase to seven or ten seconds for heavy or slow-closing doors, or where users may need longer. Adjust after a week of real use rather than guessing, since too short causes daily complaints and too long leaves the door unsecured.

What maintenance does an access control system need?

Clean readers monthly, since dust causes read failures that look like credential faults. Test battery backup quarterly. Annually, update firmware, test every door, and review who still has access. That last review matters most, because access lists accumulate former staff.

Can I install a door controller myself?

Low-voltage wiring is within reach of anyone competent, but three things make professional installation worthwhile: getting fail-safe against fail-secure right on every door, sizing the power supply correctly, and verifying the fire alarm interface actually works. Those are also the three things that cause the most trouble when they are wrong.

Before You Sign Off

Three questions for whoever installs your system.

Which doors are fail-safe and which are fail-secure, and why? The answer should be door by door, not a general statement.

What is the total current draw per door, and what supply is fitted? If they cannot tell you, the calculation was not done.

Will you test the fire alarm release with me present? The answer should be yes, without hesitation.

An installer who answers all three properly is one worth using. One who is vague on any of them will produce a system that works on handover day and causes trouble thereafter.

Book a free access control site survey in Indore. We walk the building, mark reader positions, identify which doors need fail-safe and which need fail-secure, and calculate power per door before quoting.

Every installation includes labelled cabling, documented configuration handed over in writing, fire alarm integration tested in front of you, and staff briefing before we leave. We work across Indore and Pithampur for offices, factories, hospitals, schools and commercial buildings.

See our access control systems, RFID cards, smart locks, or get in touch.

Call or WhatsApp +91 91091 06826.