Services User Guide
Services User Guide
Matrix Comsec reserves the right to make changes in the design or components of the product as engineering and
manufacturing may warrant. Specifications are subject to change without notice.
This is a general documentation for all variants of the product. The product may not support all the features and
facilities described in the documentation.
Information in this documentation may change from time to time. Matrix Comsec reserves the right to revise
information in this publication for any reason without prior notice. Matrix Comsec makes no warranties with respect
to this documentation and disclaims any implied warranties. While every precaution has been taken in the
preparation of this system manual, Matrix Comsec assumes no responsibility for errors or omissions. Neither is any
liability assumed for damages resulting from the use of the information contained herein.
Neither Matrix Comsec nor its affiliates shall be liable to the buyer of this product or third parties for damages,
losses, costs or expenses incurred by the buyer or third parties as a result of: accident, misuse or abuse of this
product or unauthorized modifications, repairs or alterations to this product or failure to strictly comply with Matrix
Comsec operating and maintenance instructions.
Warranty
For product registration and warranty related details visit us at:
[Link]
Copyright
All rights reserved. No part of this user manual may be copied or reproduced in any form or by any means without
the prior written consent of Matrix Comsec.
Version 7
Release date: September 30, 2024
Contents
Alert Service.............................................................................................................37
Pre-requisite for Installation .....................................................................................37
FIPS Algorithm Policy Check ....................................................................................37
Installing the Alert Service .......................................................................................40
Uninstalling/Reinstalling of COSEC Alert Service .........................................................45
Settings ................................................................................................................46
Service Tray in Multiple User login .............................................................................48
Table of Contents i
FIPS Algorithm Policy Check ....................................................................................49
Installing the Enroll Service .....................................................................................52
Uninstalling/Reinstalling of COSEC Enroll Service........................................................57
Settings ................................................................................................................58
Service Tray in Multiple User login .............................................................................60
ii Table of Contents
Master Service
To install the Master Service make sure you complete the steps mentioned in the pre-requisites and then install the
same.
If you have started installing the Master Service and if the FIPS Algorithm flag is enabled then following pop
up will appear.
To disable FIPS Algorithm Policy, select Registry Editor (or search regedit) from the start menu of your computer.
Double click on Enabled and the Edit DWORD (32-bit) Value dialog box appears as shown below:
• Now you need to reset the Internet Information Services (IIS) Server. To do so, search Internet
Information Services (IIS) Manager from the start menu of your computer.
• To reset the IIS Server, click Reset under Actions > Manager Server.
Now you can proceed with the installation of the Master Service.
Click on Install.
The End User License Agreement page will appear when new installation is done.
Select COSEC Master Service check box. Click Next to install the setup.
The confirmation window appears. Click Install to proceed with the installation.
After the successful installation of COSEC Master Service, Installation Complete window appears as shown
below.
Click Exit.
We recommend you to enable certain Security Settings after the Installation is done. To do so, make sure you
download and run the Security Configuration Utility.
After the installation, you can start the COSEC Master Service Application by browsing the folder from C:\Program
Files (x86)\Matrix\COSEC Master Service
At the time of Master Service start-up, if the service entry is not found in General Settings of Admin Portal,
then this service will self-register itself. When Master Service URL in Admin Portal> System Configuration
> General Settings is blank then service will self-register itself.
When Master Service starts, Master Service’s icon will be displayed in the System Tray (Notification area) on
the right side of the taskbar. When Master Service stops, Master Service’s icon will be displayed.
Right Click
The options displayed are — Start/Stop Master Service, Settings, Sync Log Parameters, Refresh Status, About and
Exit.
• To configure the settings of Master Service, first stop this service by clicking Stop Master Service, and
then click Settings. To know more, refer “Settings”.
• To enable debug logs of the Master Service, click Sync Log Parameters. This is used for trouble-shooting
by the Technical Support Team.
When service is running and Admin database loses connectivity or is unavailable then the service will keep
running for 24 hours by default after which it will stop.
The maximum hours allowed for service is given as the configurable tag in [Link] file from
C:\Program Files (x86)\Matrix\COSEC Master Service.
You can configure the DB Settings and the General Settings of this service.
DB Settings
Configure the following parameters:
• IP Address: If your PC is having multiple network connections, the IP Addresses of these networks will be
displayed in the drop down list. Select the desired IP Address.
The IP Address of the first enabled network will be set as the default IP Address for this service.
To restore the IP Address to the desired one, you must first enable the connection from network
connections and then select its IP Address from the drop down list manually.
As the Windows10 PC boots up fast, so services will check and retry for the availability of assigned IP
address before finally moving to [Link]
If more than one network connections are enabled then the first enabled network connections IP Address
will be assigned to all the services on service startup after installation.
If the PC is assigned a DHCP Addressing scheme, then whenever the IP Address changes, the same will
be updated against every service.
Click Refresh IP List to update the list of all network adapters (network connections).
• Server Address: Enter the database server address i.e. the IP address of computer where database is
located to establish the connection with the Admin Portal.
• Database Name: Enter the database name to establish connection with Admin Portal.
• Username & Password: Enter the Username and Password to establish connection with database.
In case of Windows Authentication; Username and Password will be disabled.
Click Test Connection to test the connection with the database. Make sure you test the connection with
the database whenever you change / update the parameters.
• Command Timeout (Sec): Enter the time interval after which the command execution timeout error will be
displayed for the Master Service approaching database for connection.
On initial startup of the service if the Settings file doesn't exist then on click of Save, Settings would be
created and all the values of the parameters would be stored in the file.
General Settings
Configure the following parameters:
• Port Number & Secure Port Number: Enter the Port number, Secure Port number at which the Master
Service is accessible.
• Request Time-Out (Sec): Specify the request time-out duration in seconds for the services approaching
Master Service for connection.
• Response Time-Out (Sec): Specify the response time-out duration in seconds for the services
approaching Master Service for connection.
• Preferred Language: Select the desired Language from the provided drop down list.
The languages listed here will be as per the language files present in the C:\Program Files
(x86)\Matrix\COSEC Master Service\Language Resource.
Name of the English language file for services will be: SERVICES_EN-US.
Name of the language file differs as per the language. For example, name of the Arabic (Saudi Arabia)
language file for services will be SERVICES_AR-SA.
If you prefer a different language other than the default language file (i.e. English), you can translate this
default language into the desired language with the help of COSEC Multi-Language Utility. To know more,
refer to the Multi-Language Utility User Guide.
This new user will have the rights to start/stop the service and make changes to the settings of service.
When you exit from the Master Service Tray Application manually then this service will not be visible in the tray for
that particular windows login session. When you log in to windows session again, the service tray will be launched
again.
To install the Monitor Service make sure you complete the steps mentioned in the pre-requisites and then install the
same.
Monitor Service will be active and run only if Master Service is running.
If you have started installing the Monitor Service and if the FIPS Algorithm flag is enabled then following
pop up will appear.
To disable FIPS Algorithm Policy, select Registry Editor (or search regedit) from the start menu of your computer.
Then in the Registry Editor follow this path:
Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\FipsAlgorithmPolicy.
• Now you need to reset the Internet Information Services (IIS) Server. To do so, search Internet
Information Services (IIS) Manager from the start menu of your computer.
Now you can proceed with the installation of the Monitor Service.
Click on Install.
The End User License Agreement page will appear when new installation is done.
Select COSEC Monitor Service checkbox. Click Next to install the setup.
The confirmation window appears. Click Install to proceed with the Installation.
Click Exit.
We recommend you to enable certain Security Settings after the Installation is done. To do so, make sure you
download and run the Security Configuration Utility.
When Monitor Service starts, Monitor Service’s icon will be displayed in the System Tray (Notification area) on
the right side of the taskbar. When Monitor Service stops, Monitor Service’s icon will be displayed.
Right Click
The options displayed are — Start/Stop Monitor Service, Settings, Version Upgrade, Sync Log Parameters, Refresh
Status, About and Exit.
• To start this service through the Service Manager Tray, click on Start Monitor Service.
• To configure the settings of Monitor Service, first stop this service by clicking Stop Monitor Service, and
then click Settings. To know more, refer “Settings”.
• To enable debug logs of the Monitor Service, click Sync Log Parameters. This is used for trouble-
shooting by the Technical Support Team.
When service is running and Admin database loses connectivity or is unavailable then the service will keep
running for 24 hours by default after which it will stop.
The maximum hours allowed for service is given as the configurable tag in [Link] file from
C:\Program Files (x86)\Matrix\COSEC Monitor Service.
If Auto Synchronize with NTP is disabled for some devices from COSEC Web, then the date-time of
devices can be synced with sever date-time by specifying the SetDateTime value in Monitor [Link]
file.
• IP Address: If your PC is having multiple network connections, the IP Addresses of these networks will be
displayed in the drop down list. Select the desired IP Address.
The IP Address of the first enabled network will be set as the default IP Address for this service.
If none of the network connections are enabled, then IP Address of the running service will get updated to
[Link] - Localhost and the services will continue running.
To restore the IP Address to the desired one, you must first enable the connection from network
connections and then select its IP Address from the drop down list manually.
As the Windows10 PC boots up fast, so services will check and retry for the availability of assigned IP
address before finally moving to [Link]
If more than one network connections are enabled then the first enabled network connections IP Address
will be assigned to all the services on service startup after installation.
Click Refresh IP List to update the list of all network adapters (network connections).
• Master Service Address: Enter the IP Address or URL of the Master Service.
On changing or updating the Master Service Address, connection with the Master Service must be tested.
Click Test Connection to test the connection of Monitor Service with Master service.
• Web Access Port Number: Enter the port number of the computer at which COSEC Web can access the
Monitor Service.
• Secured Web Access Port Number: Enter the port number of the computer at which COSEC Web can
access the Monitor Service on SSL mode.
• Request Time-Out (Sec): Enter the request time-out duration in seconds for the Monitor Service
approaching Master Service for connection.
• Response Time-Out (Sec): Enter the response time-out duration in seconds for the Monitor Service
approaching Master Service for connection.
• Device Port Number: Enter the port number at which device will communicate with Monitor Service.
• Device Secured Port Number: Enter the port number at which device will communicate with Monitor
Service on SSL mode.
The languages listed here will be as per the language files present in the C:\Program Files
(x86)\Matrix\COSEC Master Service\Language Resource.
Name of the English language file for services will be: SERVICES_EN-US.
Name of the language file differs as per the language. For example, name of the Arabic (Saudi Arabia)
language file for services will be SERVICES_AR-SA.
If you prefer a different language other than the default language file (i.e. English), you can translate this
default language into the desired language with the help of COSEC Multi-Language Utility. To know more,
refer to the Multi-Language Utility User Guide.
This new user will have the rights to start/stop the service and make changes to the settings of service.
When you exit from the Monitor Service Tray Application manually then this service will not be visible in the tray for
that particular windows login session. When you log in to windows session again, the service tray will be launched
again.
To install the Admin Management Portal Service make sure you complete the steps mentioned in the pre-requisites
and then install the same.
Admin Management Portal Service will be active and run only if Master Service is running.
If you have started installing the Admin Management Portal Service and if the FIPS Algorithm flag is
enabled then following pop up will appear.
To disable FIPS Algorithm Policy, select Registry Editor (or search regedit) from the start menu of your computer.
Then in the Registry Editor follow this path:
Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\FipsAlgorithmPolicy.
• Now you need to reset the Internet Information Services (IIS) Server. To do so, search Internet
Information Services (IIS) Manager from the start menu of your computer.
• To reset the IIS Server, click Reset under Actions > Manager Server.
Now you can proceed with the installation of the Admin Management Portal Service.
Click on Install.
The End User License Agreement page will appear when new installation is done.
Select COSEC Admin Management Portal Service checkbox. Click Next to install the setup.
The confirmation window appears. Click Install to proceed with the Installation
Click Exit.
We recommend you to enable certain Security Settings after the Installation is done. To do so, make sure you
download and run the Security Configuration Utility.
When Admin Management Portal Service starts, Admin Portal Service’s icon will be displayed in the System
Tray (Notification area) on the right side of the taskbar. When Admin Management Portal Service stops, Admin
Portal Service’s icon will be displayed.
Right Click
The options displayed are — Start/Stop Admin Portal Service, Settings, Version Upgrade, Refresh Post/Retrieve
List, Sync Log Parameters, Refresh Status, About and Exit.
• To start this service through the Service Manager Tray, click on Start Admin Portal Service.
At the time of Admin Management Portal Service start-up, if the service entry is not found in General
Settings of Admin Portal, then this service will self-register itself. When Admin Portal Service URL in Admin
Portal> System Configuration > General Settings is blank then service will self-register itself.
• To configure the settings of Admin Management Portal Service, first stop this service by clicking Stop
Admin Portal Service, and then click Settings. To know more, refer “Settings”.
• To refresh the post of this service or retrieve the list, click Refresh Post/Retrieve List.
• To enable debug logs of the Admin Management Portal Service, click Sync Log Parameters. This is used
for trouble-shooting by the Technical Support Team.
When service is running and Admin database loses connectivity or is unavailable then the service will keep
running for 24 hours by default after which it will stop.
The maximum hours allowed for service is given as the configurable tag in [Link] file from
C:\Program Files (x86)\Matrix\COSEC Admin Portal Service.
• IP Address: If your PC is having multiple network connections, the IP Addresses of these networks will be
displayed in the drop down list. Select the desired IP Address.
The IP Address of the first enabled network will be set as the default IP Address for this service.
If none of the network connections are enabled, then IP Address of the running service will get updated to
[Link] - Localhost and the services will continue running.
To restore the IP Address to the desired one, you must first enable the connection from network
connections and then select its IP Address from the drop down list manually.
As the Windows10 PC boots up fast, so services will check and retry for the availability of assigned IP
address before finally moving to [Link]
If more than one network connections are enabled then the first enabled network connections IP Address
will be assigned to all the services on service startup after installation.
Click Refresh IP List to update the list of all network adapters (network connections).
• Master Service Address: Enter the IP Address or URL of the Master Service.
On changing or updating the Master Service Address, connection with the Master Service must be tested.
Click Test Connection to test the connection of Admin Management Portal Service with Master service.
• Port Number: Enter the port number at which the Admin Management Portal Service is accessible.
• Secured Port Number: Enter the port number at which the Admin Management Portal Service is
accessible on the SSL mode.
• Web Access Port Number: Enter the port number of the computer at which COSEC Web can access the
Admin Management Portal Service.
• Secured Web Access Port Number: Enter the port number of the computer at which COSEC Web can
access the Admin Management Portal Service on SSL mode.
• Request Time-Out (Sec): Enter the request time-out duration in seconds for the Admin Management
Portal Service approaching Master Service for connection.
• Response Time-Out (Sec): Enter the response time-out duration in seconds for the Admin Management
Portal Service approaching Master Service for connection.
The languages listed here will be as per the language files present in the C:\Program Files
(x86)\Matrix\COSEC Master Service\Language Resource.
Name of the English language file for services will be: SERVICES_EN-US.
Name of the language file differs as per the language. For example, name of the Arabic (Saudi Arabia)
language file for services will be SERVICES_AR-SA.
If you prefer a different language other than the default language file (i.e. English), you can translate this
default language into the desired language with the help of COSEC Multi-Language Utility. To know more,
refer to the Multi-Language Utility User Guide.
This new user will have the rights to start/stop the service and make changes to the settings of service.
When you exit from the Admin Management Portal Service Tray Application manually then this service will not be
visible in the tray for that particular windows login session. When you log in to windows session again, the service
tray will be launched again.
To install the Alert Service make sure you complete the steps mentioned in the pre-requisites and then install the
same.
Alert Service will be active and run only if Master Service is running.
After the installation, if you are upgrading the Alert Service from the Service Tray App you will need to
update the FR libraries manually. To do so,
• Copy the desired FR files from the downloaded package, that is from MxFRSDK >
MxFRSDK_x64_CPU or MxFRSDK_x64_GPU.
• Paste the same into the Alert Service library folder in the setup folder in your local PC.
If you have started installing the Alert Service and if the FIPS Algorithm flag is enabled then following pop
up will appear.
To disable FIPS Algorithm Policy, select Registry Editor (or search regedit) from the start menu of your computer.
Then in the Registry Editor follow this path:
Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\FipsAlgorithmPolicy.
• Now you need to reset the Internet Information Services (IIS) Server. To do so, search Internet
Information Services (IIS) Manager from the start menu of your computer.
Now you can proceed with the installation of the Alert Service.
Click on Install.
The End User License Agreement page will appear when new installation is done.
Select COSEC Alert Service checkbox. Click Next to install the setup.
The confirmation window appears. Click Install to proceed with the Installation.
Click Exit.
We recommend you to enable certain Security Settings after the Installation is done. To do so, make sure you
download and run the Security Configuration Utility.
When Alert Service starts, Alert Service’s icon will be displayed in the System Tray (Notification area) on the
right side of the taskbar. When Alert Service stops, Alert Service’s icon will be displayed.
Right Click
The options displayed are — Start/Stop Alert Service, Settings, Version Upgrade, FR Using GPU, Sync Log
Parameters, Refresh Status, About and Exit.
• To start this service through the Service Manager Tray, click on Start Alert Service.
• To configure the settings of Alert Service, first stop this service by clicking Stop Alert Service, and then
click Settings. To know more, refer “Settings”
• To run FR with GPU, you require a graphic card installed in your PC, then click FR with GPU. If the graphic
card is not available, then the system will continue the FR process without GPU.
• To enable debug logs of the Alert Service, click Sync Log Parameters. This is used for trouble-shooting
by the Technical Support Team.
The maximum hours allowed for service is given as the configurable tag in [Link] file from
C:\Program Files (x86)\Matrix\COSEC Alert Service.
The Alert service will send a Refresh request on every date change but will not physically restart the
service.
The Physical restart of services can be done by setting the following flag in [Link] file as True.
<AlertServicePhysicalRestart>false</AlertServicePhysicalRestart>(Default value). This will automatically
trigger physical restart of service on every date change.
• IP Address: If your PC is having multiple network connections, the IP Addresses of these networks will be
displayed in the drop down list.
The IP Address of the first enabled network will be set as the default IP Address for this service.
If none of the network connections are enabled, then IP Address of the running service will get updated to
[Link] - Localhost and the services will continue running.
To restore the IP Address to the desired one, you must first enable the connection from network
connections and then select its IP Address from the drop down list manually.
As the Windows10 PC boots up fast, so services will check and retry for the availability of assigned IP
address before finally moving to [Link]
If more than one network connections are enabled then the first enabled network connections IP Address
will be assigned to all the services on service startup after installation.
Click Refresh IP List to update the list of all network adapters (network connections).
• Master Service Address: Enter the IP Address or URL of the Master Service.
On changing or updating the Master Service Address, connection with the Master Service must be tested.
Click Test Connection to test the connection of Alert Service with Master service.
• Web Access Port Number: Enter the port number of the computer at which COSEC Web can access the
Alert Service.
• Secured Web Access Port Number: Enter the port number of the computer at which COSEC Web can
access the Alert Service on SSL mode.
• Request Time-Out (Sec): Enter the request time-out duration in seconds for the Alert Service
approaching Master Service for connection.
• Response Time-Out (Sec): Enter the response time-out duration in seconds for the Alert Service
approaching Master Service for connection.
• Preferred Language: Select the desired language from the provided dropdown list.
The languages listed here will be as per the language files present in the C:\Program Files
(x86)\Matrix\COSEC Master Service\Language Resource.
Name of the English language file for services will be: SERVICES_EN-US.
Name of the language file differs as per the language. For example, name of the Arabic (Saudi Arabia)
language file for services will be SERVICES_AR-SA.
If you prefer a different language other than the default language file (i.e. English), you can translate this
default language into the desired language with the help of COSEC Multi-Language Utility. To know more,
refer to the Multi-Language Utility User Guide.
This new user will have the rights to start/stop the service and make changes to the settings of service.
When you exit from the Alert Service Tray Application manually then this service will not be visible in the tray for
that particular windows login session. When you log in to windows session again, the service tray will be launched
again.
To install the Enroll Service make sure you complete the steps mentioned in the pre-requisites and then install the
same.
Enroll Service will be active and run only if Master Service is running.
After the installation, if you are upgrading the Enroll Service from the Service Tray App you will need to
update the FR libraries manually. To do so,
• Copy the desired FR files from the downloaded package, that is from MxFRSDK >
MxFRSDK_x64_CPU or MxFRSDK_x64_GPU.
• Paste the same into the Enroll Service library folder in the setup folder in your local PC.
If you have started installing the Enroll Service and if the FIPS Algorithm flag is enabled then following pop
up will appear.
To disable FIPS Algorithm Policy, select Registry Editor (or search regedit) from the start menu of your computer.
Then in the Registry Editor follow this path:
Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\FipsAlgorithmPolicy.
• Now you need to reset the Internet Information Services (IIS) Server. To do so, search Internet
Information Services (IIS) Manager from the start menu of your computer.
Now you can proceed with the installation of the Enroll Service.
Click on Install.
The End User License Agreement page will appear when new installation is done.
Select COSEC Enroll Service checkbox. Click Next to install the setup.
The confirmation window appears. Click Install to proceed with the Installation.
Click Exit.
We recommend you to enable certain Security Settings after the Installation is done. To do so, make sure you
download and run the Security Configuration Utility.
When Enroll Service starts, Enroll Service’s icon will be displayed in the System Tray (Notification area) on the
right side of the taskbar. When Enroll Service stops, Enroll Service’s icon will be displayed.
Right Click
The options displayed are — Start/Stop Enroll Service, Settings, Version Upgrade, Sync Log Parameters, Refresh
Status, About and Exit.
• To start this service through the Service Manager Tray, click on Start Enroll Service.
• To configure the settings of Enroll Service, first stop this service by clicking Stop Enroll Service, and then
click Settings. To know more, refer “Settings”
• To enable debug logs of the Enroll Service, click Sync Log Parameters. This is used for trouble-shooting
by the Technical Support Team.
When service is running and Admin database loses connectivity or is unavailable then the service will keep
running for 24 hours by default after which it will stop.
The maximum hours allowed for service is given as the configurable tag in [Link] file from
C:\Program Files (x86)\Matrix\COSEC Enroll Service.
• IP Address: If your PC is having multiple network connections, the IP Addresses of these networks will be
displayed in the drop down list. Select the desired IP Address.
The IP Address of the first enabled network will be set as the default IP Address for this service.
If none of the network connections are enabled, then IP Address of the running service will get updated to
[Link] - Localhost and the services will continue running.
To restore the IP Address to the desired one, you must first enable the connection from network
connections and then select its IP Address from the drop down list manually.
As the Windows10 PC boots up fast, so services will check and retry for the availability of assigned IP
address before finally moving to [Link]
If more than one network connections are enabled then the first enabled network connections IP Address
will be assigned to all the services on service startup after installation.
If the PC is assigned a DHCP Addressing scheme, then whenever the IP Address changes, the same will
be updated against every service.
Click Refresh IP List to update the list of all network adapters (network connections).
On changing or updating the Master Service Address, connection with the Master Service must be tested.
Click Test Connection to test the connection of Enroll Service with Master service.
• Port Number: Enter the port number at which the Enroll Service is accessible.
• Secured Port Number: Enter the port number at which the Enroll Service is accessible on the SSL mode.
• Request Time-Out (Sec): Enter the request time-out duration in seconds for the Enroll Service
approaching Master Service for connection.
• Response Time-Out (Sec): Enter the response time-out duration in seconds for the Enroll Service
approaching Master Service for connection.
• Preferred Language: Select the desired language from the provided dropdown list.
The languages listed here will be as per the language files present in the C:\Program Files
(x86)\Matrix\COSEC Master Service\Language Resource.
Name of the English language file for services will be: SERVICES_EN-US.
Name of the language file differs as per the language. For example, name of the Arabic (Saudi Arabia)
language file for services will be SERVICES_AR-SA.
If you prefer a different language other than the default language file (i.e. English), you can translate this
default language into the desired language with the help of COSEC Multi-Language Utility. To know more,
refer to the Multi-Language Utility User Guide.
This new user will have the rights to start/stop the service and make changes to the settings of service.
When you exit from the Enroll Service Tray Application manually then this service will not be visible in the tray for
that particular windows login session. When you log in to windows session again, the service tray will be launched
again.
To install the Visitor Management Service make sure you complete the steps mentioned in the pre-requisites and
then install the same.
Visitor Service will be active and run only if Master Service is running.
After the installation, if you are upgrading the Visitor Management Service from the Service Tray App you
will need to update the FR libraries manually. To do so,
• Copy the desired FR files from the downloaded package, that is from MxFRSDK >
MxFRSDK_x64_CPU or MxFRSDK_x64_GPU.
• Paste the same into the Visitor Management Service library folder in the setup folder in your local
PC.
If you have started installing the Visitor Management Service and if the FIPS Algorithm flag is enabled then
following pop up will appear.
To disable FIPS Algorithm Policy, select Registry Editor (or search regedit) from the start menu of your computer.
Then in the Registry Editor follow this path:
Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\FipsAlgorithmPolicy.
• Now you need to reset the Internet Information Services (IIS) Server. To do so, search Internet
Information Services (IIS) Manager from the start menu of your computer.
Now you can proceed with the installation of the Visitor Service.
To install Visitor Management Service, click on application Setup from the COSEC Application setup folder.
Click on Install.
The End User License Agreement page will appear when new installation is done.
Select COSEC Visitor Management Service checkbox. Click Next to install the setup.
The confirmation window appears. Click Install to proceed with the Installation.
Click Exit.
We recommend you to enable certain Security Settings after the Installation is done. To do so, make sure you
download and run the Security Configuration Utility.
When Visitor Service starts, VMS Service’s icon will be displayed in the System Tray (Notification area) on the
right side of the taskbar. When Visitor Service stops, VMS Service’s icon will be displayed.
Right Click
The options displayed are — Start/Stop Visitor Service, Settings, Version Upgrade, Sync Log Parameters, Refresh
Status, About and Exit.
• To start this service through the Service Manager Tray, click on Start Visitor Service.
• To configure the settings of Visitor Management Service, first stop this service by clicking Stop Visitor
Service, and then click Settings. To know more, refer “Settings”.
• To enable the debug logs of the Visitor Service, click Sync Log Parameters. This is used for trouble-
shooting by the Technical Support Team.
The maximum hours allowed for service is given as the configurable tag in [Link] file from
C:\Program Files (x86)\Matrix\COSEC Visitor Service.
• IP Address: If your PC is having multiple network connections, the IP Addresses of these networks will be
displayed in the drop down list. Select the desired IP Address.
The IP Address of the first enabled network will be set as the default IP Address for this service.
If none of the network connections are enabled, then IP Address of the running service will get updated to
[Link] - Localhost and the services will continue running.
To restore the IP Address to the desired one, you must first enable the connection from network
connections and then select its IP Address from the drop down list manually.
As the Windows10 PC boots up fast, so services will check and retry for the availability of assigned IP
address before finally moving to [Link]
If more than one network connections are enabled then the first enabled network connections IP Address
will be assigned to all the services on service startup after installation.
If the PC is assigned a DHCP Addressing scheme, then whenever the IP Address changes, the same will
be updated against every service.
• Master Service Address: Enter the IP Address or URL of the Master Service.
On changing or updating the Master Service Address, connection with the Master Service must be tested.
Click Test Connection to test the connection of Visitor Service with Master service.
• Port Number: This shows the port number at which the Visitor Service is accessible.
• Secured Port Number: This shows the port number at which the Visitor Service is accessible on SSL
mode.
• Request Time-Out (Sec): Enter the request time-out duration in seconds for the Visitor Service
approaching Master Service for connection.
• Response Time-Out (Sec): Enter the response time-out duration in seconds for the Visitor Service
approaching Master Service for connection.
• Preferred Language: Select the desired language from the provided dropdown list.
The languages listed here will be as per the language files present in the C:\Program Files
(x86)\Matrix\COSEC Master Service\Language Resource.
Name of the English language file for services will be: SERVICES_EN-US.
Name of the language file differs as per the language. For example, name of the Arabic (Saudi Arabia)
language file for services will be SERVICES_AR-SA.
If you prefer a different language other than the default language file (i.e. English), you can translate this
default language into the desired language with the help of COSEC Multi-Language Utility. To know more,
refer to the Multi-Language Utility User Guide.
This new user will have the rights to start/stop the service and make changes to the settings of service.
When you exit from the Visitor Service Tray Application manually then this service will not be visible in the tray for
that particular windows login session. When you log in to windows session again, the service tray will be launched
again.
To install the Identification Service make sure you complete the steps mentioned in the pre-requites and then install
the same.
Identification Service will be active and run only if Master and Enroll Services are running.
If you have multiple Identification Services and you wish to make any one function as Centralized Service, you must
configure the same in COSEC Admin > License and Service. For more details refer Admin Management Portal
User Manual.
Centralized IDS is required for Group FR (Mark Group Attendance), Unidentified Face Enrollment, Mark Group
Attendance and Face Enrollment via Web features to work.
After the installation, if you are upgrading the Identification Service from the Service Tray App you will need
to update the FR libraries manually. To do so,
• Copy the desired FR files from the downloaded package, that is from MxFRSDK >
MxFRSDK_x64_CPU or MxFRSDK_x64_GPU.
• Paste the same into the Identification Service library folder in the setup folder in your local PC.
If you have started installing the Visitor Management Service and if the FIPS Algorithm flag is enabled then
following pop up will appear.
To disable FIPS Algorithm Policy, select Registry Editor (or search regedit) from the start menu of your computer.
Then in the Registry Editor follow this path:
Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\FipsAlgorithmPolicy.
• Now you need to reset the Internet Information Services (IIS) Server. To do so, search Internet
Information Services (IIS) Manager from the start menu of your computer.
Now you can proceed with the installation of the Identification Service.
To install Identification Service, click on application Setup from the COSEC Application setup folder.
Click on Install.
The End User License Agreement page will appear when new installation is done.
Select COSEC Identification Service checkbox. Click Next to install the setup.
The confirmation window appears. Click Install to proceed with the Installation.
Click Exit.
We recommend you to enable certain Security Settings after the Installation is done. To do so, make sure you
download and run the Security Configuration Utility.
When Identification Service starts, Identification Service’s icon will be displayed in the System Tray
(Notification area) on the right side of the taskbar. When Identification Service stops, Identification Service’s
icon will be displayed.
Right Click
The options displayed are — Start and Stop Identification Service, Restart Identification Server, Settings, Advance
Settings, Master Server Settings, FR Using GPU, Version Up-To Date, Refresh Status, About and Exit.
• To start this service through the Service Manager Tray, click on Start Identification Service.
• To configure the settings of Identification Service, first stop this service by clicking Stop Identification
Service, and then click Settings. To know more, refer “Settings”.
• To configure the settings of logs and tenants in the Identification Service, click Advance [Link] know
more, refer “Advance Settings”
• To configure the settings of Master Service, first stop the Identification Service, then click Master Service
Settings. To know more, refer “Master Service Settings”.
• To run FR with GPU, you require a graphic card installed in your PC, then click FR with GPU. If the graphic
card is not available, then the system will continue the FR process without GPU.
• To enable the debug logs of the Identification Service, click Sync Log Parameters. This is used for
trouble-shooting by the Technical Support Team.
When service is running and Admin database loses connectivity or is unavailable then the service will keep
running for 24 hours by default after which it will stop.
The maximum hours allowed for service is given as the configurable tag in [Link] file from
C:\Program Files (x86)\Matrix\COSEC Identification Service.
• Enter the Login ID and Password same as configured in the COSEC Web.
• Click OK.
• MAC Address: It displays the MAC address of the system corresponding to the IP address selected from
the Tenant Settings screen.
• Upload SSL Certificate (.pfx): For secured communication, SSL Certificate is to be uploaded.
• Local Template Storage (SQL Server): Select this checkbox to allow the template storage in the local
database for the retention of stored templates when the service gets restarted.
• Database Server and Database Name: Enter the server address of the database and its name.
The Database Server name should be specified using the following syntax:
Server IP Address\instance name of SQL Server.
E.g. [Link]\sqlexpress. Here, IP Address is of the system on which the Database Server is
installed and sqlexpress is the instance name given to the SQL Server.
• Authentication: Select the desired authentication mode — SQL Server Authentication or Windows
Authentication.
• Username and Password: Enter the user name and the password of the database.
Click Test Connection to test the connection of Identification Service with the database.
• Preferred Language: It displays the language selected for the COSEC Web for a specific System
Account User.
Before you start the configurations, you can check if your PC is compatible and the required pre-requisites for the
installation of the Identification Server are fulfilled.
Value mentions the current systems details for each Feature and the Remark column displays what is
required for the IDS to function.
If all Values are as per the Remarks the IDS will be functional. If not you need to update the system as per
the Remarks.
• “Log Settings”
• “Start up Logs”
• “IDS Basic Settings”
• “Tenant Settings”
• “Tenant Status”
Log Settings
Click the Log Settings tab to enable logs of the IDS Service.
Click Send and the respective logs will be stored in the COSEC Identification Server in the Logs folder. These logs
can be used for troubleshooting issues related to IDS by the Support Team.
If in case you restart the Identification Service, the configured log settings will be [Link] need to
configure it again.
Start up Logs
Click the Start up Logs tab if you desire viewing the previous start-up logs of the identification [Link] Start up
logs page appears as below:
In the event, when user stops IDS and starts immediately, logs may not be displayed because, before IDS
could complete its stopping task, the start command was executed in that case the user will have to reload
logs after some time.
Click the IDS Basic Settings tab. in order to configure the basic settings of the Identification Service. The page
appears as below:
• Minimum Face Size: Specify the minimum percentage value of face mandatory in the frame, for the face
to be detected.
• Template Sync Interval: Specify the desired time after which the Identification Service will request the
Enroll Service to sync the face template.
Tenant Settings
Click Tenant Settings tab, to configure the parameters of the tenant. The Tenant Settings page appears as shown
below.
• Debug Device ID(MID): You can select the desired device/s from which you intend to get logs as well as
face images.
To debug multiple devices make sure you specify Device ID as comma-separated values. For example, if
you desire logs/image templates of three devices, that is, 15, 05, 44 then select Selected as the Debug
Device ID (MID) option and in the text box enter the values as 15, 5, 44.
• Image Debug Path: If you have enabled the Image Debug checkbox, mention the path where you wish to
store the images. Click on the icon and a pop up appears, browse and select the respective
[Link] OK.
• Save Image Type: Select the image type from the drop down list.
• Select Face only if you desire saving only images with face.
• Select All if you desire saving all images, that is, with or without face.
Tenant Status
Click the Tenant Status tab in order to configure the type of tenant status. The Tenant Status page appears as
shown below:
• Type: From the drop down list select the desired type of tenant status —Face, Palm or FP.
• Master Service Address: Enter the IP Address or URL of the Master Service.
• IP Address: If your PC is having multiple network connections, the IP Addresses of these networks will be
displayed in the drop down list. Select the desired IP Address.
The IP Address of the first enabled network will be set as the default IP Address for this service.
If none of the network connections are enabled, then IP Address of the running service will get updated to
[Link] - Localhost and the services will continue running.
To restore the IP Address to the desired one, you must first enable the connection from network
connections and then select its IP Address from the drop down list manually.
As the Windows10 PC boots up fast, so services will check and retry for the availability of assigned IP
address before finally moving to [Link]
If more than one network connections are enabled then the first enabled network connections IP Address
will be assigned to all the services on service startup after installation.
If the PC is assigned a DHCP Addressing scheme, then whenever the IP Address changes, the same will
be updated against every service.
Click Refresh IP List to update the list of all network adapters (network connections).
• Login ID and Password: Enter the Login ID and Password same as configured in the COSEC Web.
This new user will have the rights to start/stop the service and make changes to the settings of service.
When you exit from the Identification Service Tray Application manually then this service will not be visible in the
tray for that particular windows login session. When you log in to windows session again, the service tray will be
launched again.
MATRIX COMSEC
Head Office:
394-GIDC, Makarpura, Vadodara - 390010, India.
Ph: (+91)18002587747
E-mail: [Link]@[Link]
[Link]