Skip to main content

Site credentials and Aliro

Select the site before changing its credential configuration. These settings affect how that site's locks accept credentials; they do not replace a person's access grants.

Wallet provider​

Open Site Settings → Credentials (or Settings → Credentials for a Link site). Review the wallet-provider selection and save any authorized change.

Wallet issuance depends on the site's configured provider and the user's eligibility. If an issue/add-wallet action is unavailable, check setup and permissions before trying to create another user account.

DESFire credential profiles​

Use the site's credential-profile page to define how locks read the site's DESFire cards. Create or open a profile, configure the application/authentication/read details supplied by your credential provider, review the validation checks, and save.

The editor shows a generated profile preview and identifies invalid fields. Use the provider's actual card configuration; a profile does not program a physical card. Devices support up to five profiles. Edit, rename, delete, and reapply actions are available according to configuration and permissions.

Open the site's Aliro settings to review credential issuers and data element identifiers. Aliro supports up to five credential issuers at Link sites. Use the issuer public keys or certificates provided for your integration and resolve validation errors before saving.

The settings page distinguishes saved configuration and readiness. Check the lock's reported state after configuration has synchronized.

Guest-pass readiness​

Door passes require Last Lock guest-pass issuance to be enabled and ready for the site. Open the guest-pass setup, review the confirmation, and enable it when the site is ready. The confirmation explains that it overwrites other Aliro configuration and applies to locks on their next synchronization. If the site reports Already using another issuer, coordinate the change with the integration owner.

Disabling guest passes causes passes already sent to stop working as locks synchronize. Review the confirmation before disabling them or changing issuer keys.

If the site is externally managed, coordinate credential configuration with the owner of the external access-control system.

Send temporary access · Device policies