Frequently Asked Questions About:
UPGRADING / INSTALLING ACCESS CONTROL SYSTEMS
-
An EACS upgrade typically takes 1-3 days depending on building size.
During this time the access control system will be temporarily offline, meaning some or all doors will be unlocked and lifts will operate in free access mode.
Our technicians prioritise perimeter doors and main entry points first, so the building's outer security is restored as early as possible before moving to internal access points.
We recommend notifying all residents and tenants at least two weeks before the upgrade date.
Residents and building managers should also consider whether a security guard is required onsite during the cutover period - this is not included in our scope of works but we will advise you if we think it's necessary based on your building's risk profile.
-
Yes. Both Inner Range Integriti and ICT Protege GX are actively developed platforms with regular firmware and software updates, ensuring long-term manufacturer support and compatibility with emerging technologies.
Both platforms support open integration protocols, allowing connection to a wide range of third-party systems both now and in the future. Current integration capabilities include mobile credentials, CCTV, intercoms, HVAC, lift control, and building automation systems.
The direction we see most demand for - and what we actively build toward - is unified control. One app, one platform, one place to manage access, cameras, intercoms, and building services. This is a core focus for CXI across all system deployments.
-
In many cases, yes.
Depending on the technology your current credentials use, they may be compatible with the new system - which can represent a meaningful cost saving, particularly for larger buildings. Where reuse is possible, we will carry over your existing credentials and you can upgrade to more secure encrypted versions over time as replacements are needed.
Where existing credentials are based on older unencrypted formats or you have a problem with unauthorised copying, we will recommend transitioning to a modern encrypted credential - either Inner Range SIFER or ICT DESFire - which cannot be cloned or copied.
We assess your existing credentials during scoping and give you a clear recommendation before any commitment is made.
-
Modern access control platforms deliver a significant step up from legacy systems such as Tecom, Concept 3000/4000, CSTech Evolution, and basic Hikvision or Dahua controllers.
Many of these systems are no longer manufacturer-supported, meaning parts, firmware updates, and security patches are no longer available - leaving buildings exposed to vulnerabilities and compliance risks.
Upgrading to a current platform delivers:
Mobile access - manage credentials, unlock doors, and review access events from your phone
Encrypted credentials that cannot be cloned or copied
CCTV integration - link camera footage directly to access events for instant visual verification
System automation - configure triggers and alarms so the system responds automatically to events (e.g. lock all doors on fire alarm, alert on forced entry)
HVAC and lift integration - control floor access and building services from a single platform
Real-time audit trails and remote management for building and strata managers
Manufacturer-backed support with a current software roadmap
Remote management support via web using CXI Cloud
-
A full credential changeover is a coordinated process managed between CXI, your building or strata manager, and/or your facilities team. The typical process is:
Audit - we establish a full list of current credential holders from your existing system or building records
Pre-programming - credentials are programmed and tested by CXI before installation day
Distribution - your strata manager or facilities manager issues new credentials to all residents and staff. We recommend allowing as much lead time as possible for this step
Confirmation - once your strata or facilities manager confirms all credentials have been distributed, we schedule the cutover date two weeks from that confirmation
Cutover - on installation day the new system goes live and old credentials are deactivated
Mop-up - any residents who missed distribution are handled post-cutover through your building manager
-
Credential orders are placed through your strata manager or facilities manager, who submits the request to CXI.
We supply credentials in bulk for initial building rollouts as well as on an ongoing basis for new residents or replacements.
Minimum order: 10 credentials per order
Standard lead time: 7 business days from order confirmation
PRO Maintenance clients: next business day dispatch
Orders are submitted via email or work order request. Your strata or facilities manager is the primary point of contact for all credential ordering for residents or staff.
-
Yes. All new system credentials supplied by CXI use AES-128 bit encrypted technology - either Inner Range SIFER or ICT DESFire - depending on the platform installed. Both use mutual authentication, meaning the credential only communicates with authorised readers and the data exchanged is fully encrypted. They cannot be cloned.
This is a significant security improvement over legacy 125kHz credentials such as EM and HID Prox, which carry no encryption and can be duplicated using cheap hardware widely available online for under $30.
There are established sites which still use/require the legacy credentials which we are able to supply and are perfectly fine in situations where basic entry-point security is perfectly suitable.
CXI is also able to upgrade the cards and readers for existing systems without a whole system upgrade. Talk to us about how we can help you.
-
Yes. Modern access control platforms including Inner Range Inception/Integriti and ICT Protege WX/GX support integration with fire indicator panels (FIPs) via monitored inputs or relay outputs. In a fire event, the system automatically releases all designated doors to fail-safe (unlocked) mode, ensuring free egress in compliance with the Building Code of Australia.
Fire system integration is carried out by a licensed fire contractor. We work to ensure our access control installation is ready to accept the fire integration and will liaise with your fire contractor as needed - however coordinating the fire trade is the responsibility of the building owner or manager.
-
Yes. Both Inner Range Integriti and ICT Protege GX support lift floor control, restricting residents to only their nominated floor or floors.
When a resident presents their credential at the lift reader, only the buttons for their authorised floors are activated.
Lift integration is a coordinated process between CXI and your lift contractor. CXI supplies and configures the access control side of the integration, while your lift contractor handles the lift controller hardware. We manage this process regularly and will confirm compatibility with your existing lift equipment during the scoping phase.
-
In most cases, yes. Modern access control platforms can integrate with a wide range of intercom systems including Akuvox, Aiphone, Comelit, Bticino, Fermax and Jacques, either using existing hardware or with minor additional hardware to facilitate the connection. We assess intercom compatibility during the scoping phase and will advise if any additional work is required.
Some older legacy intercoms may not support integration with a modern access control platform. If your intercom is ageing or already experiencing issues, it may be worth considering a unified platform upgrade - combining access control, intercom, and CCTV into a single system. This approach can reduce complexity, improve reliability, and deliver better value than upgrading each system separately.
-
Yes. CXI Cloud is exactly what this is built for, secure remote management of your EACS.
Both Inner Range Inception/Integriti and ICT Protege WX/GX support multiple user accounts with configurable permission levels, meaning building managers, strata managers, and other nominated users can be given their own secure login to manage the system directly without needing to contact CXI.
Typical self-managed functions include adding and removing credentials, setting access levels, generating audit reports, and managing visitor access. CXI configures the appropriate permission levels for each user role during commissioning and provides training to ensure your team can manage the system confidently from day one.
For buildings that prefer to have CXI handle all system administration, we offer a Remote Access Management (RAM) service where our team manages credential changes, access levels, and system events on your behalf. Ask us about RAM pricing for your building.
-
You are not locked into CXI.
All system passwords created by CXI are unique to the site and are stored in our secure password management platform and are available to you at any time - they are also formally handed over as part of your Operations and Maintenance (O&M) documentation at project completion.
If you choose to move to a different integrator at any point, CXI will provide a full handover of all system credentials and documentation, and discontinue any CXI-managed services such as CXI Connect (4G service and monitoring) and CXI Cloud (secure remote access) at your request.
It is worth noting that CXI Connect and CXI Cloud are proprietary CXI platforms. If these services are in use at your building, transitioning away from CXI would require an alternative to be arranged for those specific services.
All clients receive remote access management (RAM) capability. Buildings on our PRO maintenance plan have RAM included, while other clients can access RAM at an additional fee.
-
Yes. CXI provides hands-on training for all nominated system administrators, building managers, and strata managers as part of every installation. Training covers day-to-day system operation including adding and removing credentials, managing access levels, running reports, and responding to common events.
Training is conducted on-site at commissioning and tailored to the permission level of each user, with remote sessions available where preferred. Documentation and user guides are provided as part of your O&M handover pack. Additional training sessions beyond the initial handover are available at our standard rates.
-
Yes. Both Inner Range Inception/Integriti and ICT Protege WX/GX support mobile credentials, allowing residents and staff to use their smartphone as an access credential via Bluetooth or NFC.
Each platform has its own dedicated app through which mobile credentials are issued and managed.
Mobile credentials can be used alongside or instead of traditional cards and fobs, depending on your building's preference. Issuing, suspending, or revoking mobile credentials is managed remotely through the administration platform without needing to physically collect a credential.
Note that mobile credentials require compatible readers. Not all readers support this functionality, so if mobile access is a priority for your building, let us know during the scoping phase and we will ensure the correct hardware is specified.
-
Yes. Both platforms are designed to scale. Inner Range Integriti supports up to 1,000 card readers, 250 doors per controller, and up to 1,000,000 users across a networked multi-controller architecture - making it suitable for everything from a single strata building to a large multi-site enterprise.
ICT Protege GX has no software limits on users, doors, or access levels, with controllers expandable to meet the demands of the site.
Additional doors, readers, and users can be added at any time without replacing the core system. Larger expansions may require additional controller hardware, which CXI can scope and quote as needed. We recommend discussing future growth plans during the initial scoping phase so the system is sized appropriately from the outset.
-
The core system software license is a one-time cost - there are no mandatory annual software fees or subscriptions on either Inner Range Inception/Integriti or ICT Protege WX/GX platforms.
Optional ongoing services are available for buildings that want additional capability or support:
CXI Connect - remote device health monitoring, fault detection, and status reporting for your system
CXI Cloud - secure remote access to your system for Remote Access Management (RAM)
Maintenance Plan - scheduled preventative maintenance, priority support response, and extended hardware warranty
Software/Firmware Updates - these are licensed updates that give you the current version and access to the next version as well.
All of the above are optional. CXI Connect and CXI Cloud are bundled into our maintenance plans, so clients on a plan get these services included rather than paying separately.
-
There is no minimum door count or job size requirement. However, access control upgrades do require a consistent approach across the building - we cannot upgrade individual doors in isolation, as this would result in two separate systems operating simultaneously, creating credential management complexity and security gaps.
We can stage the upgrade in logical sections - for example, upgrading card readers and credentials first, then the backend controller hardware - allowing buildings to manage the project across budget cycles where needed.
For strata buildings, the upgrade decision is generally made at the Executive Committee / Body Corporate level and may not require individual owner agreement, but you should talk to your strata management agent for your specific circumstances.
-
Formal SLA coverage is available to clients on a CXI maintenance plan.
BASE plan clients receive a response within 24 hours during business hours, with attendance scheduled as available.
PRO plan clients receive a 2-hour response time with priority attendance within 24 hours and access to after-hours on-call support.
Both plans include phone, email, remote, and onsite support channels.
Response time refers to first point of contact - a call or email to triage the fault and agree on a timeframe for a technician to attend.
CXI Connect and CXI Cloud don’t have any specific uptime guarantees but the underlying connectivity services carry a 99% uptime guarantee across both 4G and NBN connections.
Clients not on a maintenance plan are supported on a best-effort basis at standard call-out rates, without formal SLA commitments.
-
All CXI-managed cloud services are hosted in Australian data centres.
Inner Range cloud services operate on Australian-based infrastructure, and CXI Connect (device monitoring) runs on Australian DigitalOcean infrastructure with Cloudflare providing secure access routing.
Cloudflare operates as a global content delivery network, meaning generally traffic routes through regional nodes but may vary depending on network conditions.
For ICT Protege WX deployments, the system is entirely self-contained on the local controller with no cloud dependency. ICT Protege GX is hosted on a server located on your site, meaning your data never leaves your premises.
-
No you aren’t locked into any service. CXI Connect is an optional service and can be cancelled or changed at any time. If your building has an existing NBN or ethernet connection, you are welcome to use that for system connectivity instead.
It is worth noting that CXI only manages connectivity services provided by CXI. If you choose to use your own internet connection, the management and reliability of that connection become the responsibility of the building owner or manager. CXI cannot provide SLA guarantees over third-party connectivity.
-
The access control system continues to operate normally during a connectivity outage. Both Inner Range Inception/Integriti and ICT Protege WX/GX process all access decisions locally on the controller hardware - there is no reliance on a cloud connection for day-to-day door operation. Residents and staff will not notice any difference during a connectivity outage.
What is affected during an outage is:
remote management and monitoring.
CXI Connect device monitoring
System events sent to master server in multi-site systems
CXI Cloud remote access; and
remote administration by building or strata managers
These will be unavailable until connectivity is restored.
Where CXI Connect is installed, our monitoring platform will alert us to the connectivity loss and we will investigate proactively.
Buildings wanting added resilience can opt for a 4G backup router configuration, which automatically fails over to 4G if the primary connection drops.
This is a network-level solution outside CXI's scope but we can advise on suitable options during the scoping phase.
-
Yes. CXI Connect supports both NBN and 4G connectivity and the choice is yours but also subject to your buildings NBN availability. The right option depends on your building's existing infrastructure, location, and reliability requirements.
NBN is generally preferred where a reliable fixed connection is already available, as it typically offers more consistent speeds and lower latency. 4G is a practical alternative for buildings without NBN access or where running new cabling is not feasible.
A combined approach using NBN as the primary connection with 4G as an automatic failover backup is also available and recommended for buildings where remote access reliability is critical.
-
Modern access control platforms are designed for a long service life. Both Inner Range Inception/Integriti and ICT Protege WX/GX are actively developed, manufacturer-supported platforms with regular firmware and software updates - meaning the software continues to improve after installation.
As a general guide, well-maintained access control hardware has an expected lifecycle of 10 to 15 years. Individual components such as readers, locks, and door hardware may require replacement sooner depending on usage and environmental conditions, but the core platform typically outlasts the hardware - meaning upgrades can be done incrementally rather than as a full system replacement.
Inner Range has a strong track record on this point. When the older Concept 3000/4000 platform reached end of life, customers were able to migrate to Integriti at a fraction of the cost of an entire system replacement, with most existing hardware remaining compatible.
CXI maintenance plans include firmware updates, system health checks, and proactive fault identification - all of which extend system life and protect your investment.
-
Your access control data remains on your system regardless of your maintenance plan status.
Cancelling a maintenance plan does not affect system operation or data retention - your audit trails, user records, and system configuration remain intact on your controller or server.
If you are also using CXI Connect or CXI Cloud, those services would be discontinued on cancellation of a PRO plan, but your core system data is unaffected.
-
Yes. Both Inner Range Inception/Integriti and ICT Protege WX/GX support real-time email and push notifications for a wide range of system events. Building managers can be alerted to forced door events, doors held open too long, failed access attempts, system faults, and more.
Notifications are configurable by event type and recipient, meaning different staff or managers can receive different alerts based on their role.
CXI configures notification rules during commissioning and these can be adjusted by nominated administrators at any time.
-
Anti-passback is a security feature that prevents a credential from being used to enter the same area twice in a row without first exiting. In practical terms, it stops residents or staff from "passing back" their card or fob to someone else to use immediately after them.
Both Inner Range Inception/Integriti and ICT Protege WX/GX support anti-passback and CXI can configure it during commissioning based on your building's specific requirements.
-
Yes. Both Inner Range Inception/Integriti and ICT Protege GX include comprehensive reporting capabilities.
Reports can be generated for access events, door activity, failed access attempts, system faults, and user credential history - all with date and time stamping.
These reports are commonly used for insurance claims, workplace health and safety investigations, compliance audits, and body corporate record keeping.
Reports can be exported in standard formats and scheduled to run automatically on a recurring basis. Nominated administrators can run reports directly through the system management platform without needing to contact CXI.
For buildings that want deeper analysis, CXI also offers Security Intelligence reporting - an advanced service that analyses your access control data to identify unusual patterns, credential anomalies, door health issues, and potential security risks. Ask us about Security Intelligence reporting for your building.
-
All CXI-installed access control systems include battery backup as standard, providing a minimum of 4 hours of continued operation during a power outage. Larger battery configurations are available for buildings with higher requirements.
Door hardware behaviour during a power outage depends on how each door is configured. Doors can be set to fail-safe (unlock on power loss) or fail-secure (remain locked on power loss) depending on the security and egress requirements of each access point. Fire exit doors and egress paths are always configured to fail-safe in compliance with the Building Code of Australia.
Buildings on CXI Connect will receive an automatic alert if a power fault is detected, allowing the issue to be investigated and resolved before battery reserves are exhausted.