Dear Valued Partners,

Release Date: 30-AUG-2026


A new official BioStar Device SDK 2.9.13 (V2.9.13.0) has been released recently with new features.

Release Note: BioStar Device SDK 2.9.13 Release Note


Important Notice!
1. Please be advised that the SDK product name has been updated.
BioStar 2 Device SDK -> BioStar Device SDK

2. Starting March 2, 2026, SDK downloads will be centralized in the Suprema Download Center. To download SDK files, please visit the Download Center below:
https://download.supremainc.com/download-center/pages/login.asp

New features and improvement    


  • Supported XPass Q2 (XPQ2-DPB)
  • Added unicast device discovery using the device IP address
  • Added an option to accept DesFire cards only through EV2 Secure Messaging
  • Added device capability flags
  • Included security evidence in the distribution package

1. Supports new devices.

  • XPass Q2 (XPQ2-DPB)

2. Added unicast device discovery using the device IP address.
The request is sent directly to one IPv4 address instead of being broadcast, so a device is still found when broadcast is blocked or the device is on another subnet.
Note that a response timeout is reported as success. Check the device count returned by BS2_GetDevices rather than the return code.

3. Added an option to accept DesFire cards only through EV2 Secure Messaging.
When enabled, a card that cannot use EV2 Secure Messaging fails authentication and the reason is reported as BS2_SUB_EVENT_AUTH_FAIL_EV2SM_REQUIRED.
Please refer to the linked API descriptions below for supported devices and firmware versions.

4. Added device capability flags.
A flag only indicates whether the device supports the feature, not whether the SDK provides a way to use it.

  • Refer to structure BS2DeviceCapabilities
  • y2k38Supported, ev2smSupported, videoStandbySupported
  • authFailLockoutSupported, doorUnlockLockImproveSupported, toggleDoorSupported
  • antiTailgatingSupported, elevatorCabinAuthSupported, reAuthPreventionSupported

5. Included security evidence in the distribution package.

  • SBOM (CycloneDX, Syft)
  • Vulnerability report (Grype)
  • SHA256SUMS.txt
  • Security assessment

Modified Features   

1. The device search API BS2_SearchDevicesEx has been deprecated.
Use BS2_SearchDevices together with BS2_SetEnableIPV4 / BS2_SetEnableIPV6 instead.
BS2_SearchDeviceByIP is not a replacement. Its argument is the address of the target device, not a host or broadcast address.