Updated Date: July 13, 2023
Are you looking for training material? Please click Using OSDP with Suprema Product.
Refer to the article below to understand the OSDP protocol:
Note: Suprema devices use 2.1.6 v of the OSDP protocol
*Below FW files use 2.1.7 v of the OSDP protocol
BioEntry W2 v1.4.0_190708 or higher version
BioEntry P2 v1.3.0_190626 or higher version
BioLite N2 v1.2.0_190806 or higher version
BioStation 2 v1.8.0_190806 or higher version
BioStation A2 v1.7.0_190806 or higher version
BioStation L2 v1.5.0_190708 or higher version
FaceStation2 v1.3.0_190805 or higher version
FaceLite v1.1.0_190809 or higher version
XPass 2 v1.0.0 or higher version
XPass D2 v1.2.0 or higher version
XPass D2 (Rev.2) v1.4.0 or higher version
FaceStation F2 v1.0.0 or higher version
CoreStation v1.0.0 or higher version
X-Station 2 v1.0.0 or higher version
BioStation 3 v1.0.0 or
All official firmware for BioStar 2 devices uses OSDP protocol for RS485 by default.
* 2.x firmware for entry level devices, 1.x firmware for 2nd generation devices
Refer to the following article if you don't know what entry device or 2nd generation devices are: 1st Generation Device / 2nd Generation Device / Entry Level Device
Suprema device as an OSDP Reader
Suprema device has the following features as an OSDP reader.
OSDP Reader (based on OSDP v2.1.7)
User Information Storage
ACU holds the user information
Smart Card holds the BioStar 2 method user information
- Suprema device and BioStar 2 Server hold the user information
- Smart Card holds the BioStar 2 method user information
1:1 verification on the scanned template/downloaded template from ACU
1:1 verification on access on card
1:1, 1:N Device Matching,
1:1, 1:N Server Matching
1:1 verification on the access on card
Card, PIN, Card+Fingerprint(ANSI378 /Suprema format)
Access On Card+Fingerprint/PIN
Access on Card+Face/PIN (FaceStation F2 only)
Various Operation mode
-Device Operation mode
-Private Authentication Mode
Suprema Mobile Access
Support (NFC, BLE)
Exception Code Support
Fingerprint Devices, RFID Card Devices, XPass D2 (v1.5.0)
All except FaceStation 2
BioEntry W2 v1.6.3, BioEntry P2 v1.4.1
BioStation L2 v1.6.1, XPass 2 v1.2.3, FaceStation F2 v1.1.2, BioLite N2 v1.4.1, X-Station 2 v1.0.0
Suprema device as a Slave device or Intelligent Slave device
You can use a Suprema device as a slave device with a third-party controller using OSDP with the official firmware, but in that case, the devices operate only as a dummy reader. This means that the device does not store user data.
It does not store user information in the device's memory. Like other company's OSDP Reader, it is operated by the controller by sending the card to the controller when there is a card input in the normal state, and by scanning the fingerprint when the controller requests fingerprint input.
Suprema device as an Intelligent Slave device
,Suprema device authenticates user information and upon successful authentication, a card number or user ID is sent to the controller. Template-on-card authentication is also possible with this function. In addition, when user authentication fails, a code can be sent to the controller, which is the most requested function by customers who want to replace the Wiegand environment.
Suprema device as a Slave device using Access on Cards
Note that you will have to issue access on cards through the BioStar 2 software. If you're not familiar with Access on Cards refer to the FAQ article
1. If the slave device is connected to a master Suprema device, the AoC matching is done on the master device.
2. If the slave device is not connected to a master Suprema device, the AoC matching is done on the slave device and the card ID (secure ID) is sent to the master device.
3. If the slave device is in factory default status, and no primary or secondary keys are used for AoC, then the slave device will match AoC without any smart card layout configured.
This is based on BioStar 2.6 Firmware specification. Previous firmware may not behave this way.
Suprema device as a master device
Suprema device cannot be a master device when used with a third-party device without customization when using OSDP.
This is because there is no way to know the ID of the attached device because there isn't an established device search command with OSDP.
Hence the search method is a manufacturer's command which means that it differs for each manufacturer.
Therefore customization is always necessary in such cases.
Case A (ACU holds the user information)
In this case, the ACU should enroll the user's fingerprint and store the user information in the ACU’s memory.
The ACU should also have a feature to transfer templates to RS485 Slave device.
Relevant operation mode:
Device matching (Card+Finger)
Case B (Suprema device holds the user information)
In this case, the system administrator handles two different software for Suprema’s reader and the ACU.
The user data will be sent to the slave device, and the slave device should do the input (fingerprint) matching and send the matching result to the master device through RS485.
For more details, please visit [BioStar 2] Intelligent Slave Support.
Case C (Access on Card Matching)
* Access on Card is the Template on Card concept in BioStar 2.
The following device types are available to transfer card ID of the Access on card though RS485.
You will have to use BioStar 2 to issue the Access on Cards and configure the device to have the smart card template format.
Relevant operation mode:
Template On Card (Card+Finger)
Do Suprema devices support Secure Channel and AES 128?
Yes, the OSDP specification requires a secure channel with AES 128, which is supported with the device firmware.
Can we add more than one Suprema device as a slave to a master controller with OSDP?
If the master controller can send the osdp_COMSET to set OSDP ID for the slave device, you can add more than one Suprema device. Please note that the Suprema device's OSDP ID is always 0 as default.
(Updated) From W2 v1.6.3, OSDP ID configuration is available. You can set up the OSDP ID in BioStar 2 SW.
Device search issue.
- Check if Device ID 0 can be searched.
If a master ACU searches a Suprema device via OSDP, the Suprema device's OSDP ID will be 0.
- Check that the Baud rate of the ACU and Suprema device matches:
Suprema device's baud rate default is 115200.
If you still have issues, please let us know what OSDP commands the controller users to search the device.
I receive "NAK reply, unsupported command" when using OSDP_Biomatch command
If the template is over 400 bytes, this response will appear. Try changing the template size to 384 bytes.