Issue
Guidance is needed to enable reading of PIV (FIPS-201) cards using the AX-SSC controller and AC1 downstream devices within EcoStruxure Access Expert.
Product Line
EcoStruxure Access Expert
Environment
AX-SSC
Cause
Sites migrating from Continuum systems require a clear, step-by-step process to ensure PIV cards are properly enrolled and recognized in Access Expert.
Resolution
What is FASC-N?
FASC-N stands for Federal Agency Smart Credential Number. It is a 25-byte (200-bit) identifier embedded in PIV cards, used to uniquely identify the cardholder across federal systems. It is composed of multiple fields, including:
- Agency Code
- System Code
- Credential Number
- Credential Series
- Credential Issue
- Person Identifier
- Organizational Category
- Organizational ID
- Person Org Association
These fields are encoded using Packed Binary Coded Decimal (BCD) with odd parity, and together form a unique string used by access control systems to authenticate users.
Understanding the FASC-N Structure
In the Continuum Personnel object below, the fields highlighted are those that make up the FASC-N
The PIV enrollment tool generates a character string when a card is presented. For example:
32013733334894141152472674132011
This string is composed of the following FASC-N fields:
| Field | Value |
|---|---|
| Agency Code | 3201 |
| System Code | 3733 |
| Credential Number | 334894 |
| Credential Series | 1 |
| Credential Issue | 4 |
| Person Identifier | 1152472674 |
| Organizational Category | 1 |
| Organizational ID | 3201 |
| Person Org Association | 1 |
Note: If no enrollment tool is available, manually concatenate these fields in the order shown to create the FASC-N string.
Configuration Steps
1. Card Format Setup
Configure the card format in Access Expert as follows:
- Card Format Type: Standard
- Bit Length: 128
- Large Encoded Card Number: ✅ Checked
- Convert 200 FASCN Bit to 128 Bit: ✅ Checked
- Card Number Starting Bit: 0
- Card Number Bit Length: 128
2. AX-SSC Controller Configuration
- Ensure Enable Large Encoded Card Number is checked.
- Assign the card format created in Step 1 to the controller.
3. Person Object Configuration
-
Navigate to Add Card Assignments.
-
Paste the full FASC-N string into the Display Card Number field. This will auto-populate the Encoded Card Number field.
-
Since the Encoded Card Number field is limited to 16 characters, truncate the string from the end until only 16 characters remain.
-
Paste the full FASC-N string into the Hex Value field.
⚠️ Although labeled "Hex Value", enter the string as decimal digits.
-
Save the Person object.
Additional Notes
- Only the editors mentioned above require configuration for PIV card support.
- Editors such as Reader, Access Level, etc., do not need special configuration for PIV cards.
