Complete Single-Door Access Control System: Parts and Planning Checklist

A complete single-door access control system needs more than a card reader and an electric lock. The controller, reader, credentials, locking hardware, exit arrangements, door monitoring and power supply must be specified as one working system. Missing even one component can mean delays, unreliable operation or an unsafe door.

This practical New Zealand guide is for security integrators, electrical contractors and specifiers planning an office, commercial entrance, storeroom or other single-door installation. Use the checklist to build a bill of materials, identify site-specific requirements and prepare for commissioning.

What parts make up a single-door access control system?

A typical installation uses the following components. The final selection depends on the door, whether it is an escape route or fire-rated assembly, the required security level and the client's management requirements.

1. Survey the door before selecting equipment

Start with the opening itself, not the product catalogue. Record the door material, handing and opening direction; frame dimensions; existing latch and door furniture; door closer condition; and available mounting space. Confirm whether the door is exposed to weather, has high daily traffic or is used by people who need accessible entry and exit.

Identify any fire- or smoke-control function and establish whether the opening is part of an escape route. Confirm the approved building fire strategy, any required fire-alarm interface and how the door must operate during a power failure. Do not drill, modify or replace hardware on a fire-rated doorset without confirming the permitted configuration and applicable approvals.

Site-survey checkpoint: A door that drags, does not latch reliably or has a misaligned frame should be repaired before electronic locking is commissioned.

2. Select the access controller

The controller processes credential decisions and manages the lock output, exit input and door-monitoring input. A standalone keypad/controller may be suitable for a simple independent door. A networked controller is generally more practical where the client wants central enrolment, event reports, access schedules or possible expansion.

Before ordering, check the number of supported doors and readers; relay and input ratings; software and licence requirements; offline behaviour; network connectivity; available reader protocols; and any required integration with an alarm or fire system.

A two-door controller can operate a single door while providing capacity for a future second opening, but only specify that spare capacity if it has a genuine project benefit. Keep the controller and its lock relay within a suitably secured area rather than installing critical control equipment on the unsecured side of the door.

3. Match the reader and credentials

Choose reader technology according to the client's security requirements, installed credential base and likely future expansion. Check the physical format and mounting position: a narrow aluminium mullion may need a different reader from a wide internal wall. Consider lighting, weather protection, accessibility and tamper resistance.

Reader-to-controller communications also matter. Legacy Wiegand readers are common on existing installations, while supported OSDP readers can provide supervised two-way communications and, when correctly configured, encrypted OSDP Secure Channel. Verify that both the controller and reader support the intended protocol and security features; an OSDP-capable device does not mean Secure Channel is automatically active.

For a new installation, discuss the credential life cycle with the client: issuing cards, withdrawing access when staff leave, replacing lost credentials and restricting access by time or user group. Avoid choosing a credential format on price or availability alone when the door protects a sensitive area.

4. Specify the correct electric lock

The lock must suit the actual doorset and required operating behaviour. Common choices include electric strikes, electrified mortice locks and electromagnetic locks, but they are not interchangeable. Check the door material, latch type, handing, holding requirements, weather exposure, electrical load and monitoring options.

An electric strike can permit controlled entry while compatible mechanical escape hardware provides egress. This arrangement depends on the exact lock, latch and door hardware. For power-loss behaviour and exit implications, see our fail-safe versus fail-secure electric-lock guide. A magnetic lock normally requires a different release strategy and may need additional interfaces and safeguards, particularly on escape routes. Specify fail-safe or fail-secure behaviour as part of the approved door design rather than treating either as a universal rule.

For monitored doors, consider whether the lock provides useful bolt or latch status in addition to the separate door-position contact. Lock-status monitoring and door-position monitoring answer different questions and should not be confused.

5. Plan normal exit and emergency egress

People must be able to leave the building in accordance with its approved escape design. The controller's request-to-exit input is an operational signal; it does not by itself establish a compliant means of escape. Review the installed mechanical exit hardware, accessibility, fire-alarm interface and required operation if power, controller or communications fail.

A push button, touchless button or exit sensor can be useful where a REX signal is needed. Compare mounting and operating options in our guide to push-button, PIR and touchless request-to-exit devices. Confirm the selected device’s position, activation method and interaction with door-held or forced-door alarm logic. In some designs, suitable mechanical hardware already provides normal egress and the REX device is used for event logging or alarm shunting rather than being relied upon for life safety.

Where the design calls for emergency-release equipment, verify the required device, location, signage, wiring and operating sequence. Do not assume that fitting a green emergency door-release unit makes an otherwise unsuitable locking arrangement compliant.

6. Include door-position monitoring

A door-position contact lets the controller distinguish between an authorised entry, a door left open and a possible forced opening. Without it, the system may successfully operate the lock but have no dependable indication of whether the door actually closed.

Select a contact suitable for the door and frame, then check the input circuit configuration and cable protection. Set a realistic door-held-open delay based on user traffic and accessibility requirements. Where required, supervise the contact circuit so that a wiring fault is distinguishable from normal door activity.

For a deeper explanation, read our door monitoring, REX and forced-door alarms guide.

7. Calculate power and specify backup

Build a power budget before choosing the supply. Include the controller, every reader, lock activation or holding current, sensors, interface relays and any accessories. Check the peak operating case rather than adding only the nominal idle loads, and allow appropriate design margin for future changes.

Confirm supply voltage, lock-output ratings, cable length and voltage drop at the lock. Keep required mains and extra-low-voltage work appropriately separated and installed by suitably qualified people. Where backup is required, size the battery using the measured or specified operating load and the autonomy period agreed with the client.

Important: battery backup must not defeat the door's required emergency-release or power-failure behaviour. Document exactly what remains powered and what releases when the primary supply is lost.

8. Plan cabling, networking and enclosure space

Prepare a cable schedule for the reader, lock, door contact, REX input, fire interface, power and network connection. Verify manufacturer cable-type, shielding, length and segregation requirements before installation. Leave sufficient enclosure space for safe termination, identification and future servicing.

For an IP controller, agree network addressing, firewall rules and remote-management permissions with the client's IT team. Do not expose controller administration directly to the public internet. Apply firmware updates and unique administrator credentials as part of commissioning.

9. Prepare the single-door bill of materials

Use this list at ordering stage. Quantities are typical starting points, not a substitute for a site-specific design.

• 1 × compatible access controller: include required software or licences.
• 1 × external entry reader: or an approved integrated keypad/controller.
• User credentials: cards, fobs or supported mobile credentials, plus agreed spares.
• 1 × suitable electric locking assembly: include plates, brackets and approved door furniture.
• 1 × door-position contact: select surface or concealed mounting to suit the door.
• 1 × REX arrangement where needed: button, sensor or appropriate monitored hardware.
• Emergency-release and fire-interface components: only as required by the approved design.
• 1 × correctly rated power supply: add a calculated backup battery if required.
• Controller enclosure and fixings: allow for protected, accessible installation.
• Cable, containment and consumables: include labels, protection and termination accessories.
• Documentation: drawings, user permissions, test results and maintenance instructions.

10. Commission and test the complete system

Do not hand over the system after testing only that one valid card unlocks the door. Commission every relevant operating and failure condition, recording the results against the agreed design.

1. Confirm reader power, credential recognition and correct user permissions.
2. Test a valid credential, invalid credential and any time-restricted user.
3. Verify lock operation and that the door latches reliably after each cycle.
4. Check normal exit operation and the expected REX event.
5. Confirm door-open, door-held-open and forced-door reporting where specified.
6. Test power loss, battery operation and restoration against the approved door schedule.
7. Verify emergency release and fire-alarm interaction with the responsible building and fire-system parties where applicable.
8. Confirm network loss behaviour and subsequent event synchronisation if supported.
9. Check enclosure security, cable labelling, administrator access and backups.
10. Demonstrate user enrolment, deletion and basic fault reporting to the client.

Provide an as-built wiring diagram, credential-management procedure and record of the final controller and reader configuration. Where the project uses OSDP Secure Channel, verify that encrypted communication is actually enabled rather than relying on product capability alone.

Common single-door planning mistakes

Choosing the lock first: inspect the door and establish the fire and escape requirements before ordering electric locking hardware.

Leaving out the door contact: a working lock output is not proof that the door closed or that a forced opening will be detected.

Ignoring peak current: an undersized supply or excessive cable voltage drop can cause intermittent release and controller faults.

Mixing incompatible readers and credentials: check interface, format and security requirements across the entire credential path.

Assuming a REX button provides compliant egress: assess the full doorset, exit hardware and approved fire strategy.

Skipping the failure tests: a successful card presentation is only one part of commissioning.

Frequently asked questions

Can a two-door controller be used on one door?

Yes, when the controller, software and connected hardware are appropriate. The unused capacity may support later expansion, but check licensing, enclosure size and total project requirements first.

Does every access-controlled door need a REX button?

No. It depends on the lock type, escape arrangement and whether the controller needs an exit signal for logging or alarm control. The approved egress design determines the required equipment.

Can an electric strike be used on a fire-rated door?

Only when the complete proposed door and hardware configuration is permitted by the relevant approvals and fire design. Check the doorset and hardware documentation before altering the opening.

Should a new installation use Wiegand or OSDP?

Where the controller and reader support it, appropriately configured OSDP Secure Channel offers stronger protection for reader communications. Legacy Wiegand may still be relevant to retrofit work, but its security limitations should be discussed with the client.

Plan the entire opening, not just the reader and lock

A dependable single-door access control installation starts with the door survey, then works through compatible equipment, safe exit arrangements, electrical design and documented commissioning. Getting the complete parts list right before installation reduces avoidable call-backs and makes later maintenance much easier.

Security integrators and electrical contractors can explore the RBH UNC-500 controller, FSH monitored electric strike and AAP proximity egress button at Essential Security Supplies. For component selection and compatibility questions, contact our team with your door schedule and project requirements.

Technical references

• New Zealand Building Performance: C/AS2, second edition, for the current applicable fire-design compliance pathway.
• Security Industry Association: Open Supervised Device Protocol, for reader communication and Secure Channel information.
• Security Industry Association: OSDP implementation checklist, for staging and commissioning guidance.

This is a planning guide, not a substitute for the approved building design, the equipment manufacturers' installation instructions or the assessment of a suitably qualified installer or designer.