🏠 Home›Security System›Access Control Systems
← Back to Security System

Access Control Systems

Select specific service type

📋 About Access Control Systems Installation & Setup ▾

Access control systems sit at the intersection of physical security and digital management, and they represent one of the most consequential upgrades covered under the broader [Security System](https://contractorsplanet.com/?service=security-system) category. Where a traditional deadbolt or alarm simply reacts to unauthorized entry, a purpose-built access control system actively manages who enters, when, and through which door — generating an auditable log of every event. Residential applications have grown sharply since 2018, but the category still skews commercial: office buildings, multi-tenant residential complexes, healthcare facilities, schools, and retail environments account for the majority of installed systems in North America.

Q: What is the difference between fail-safe and fail-secure access control hardware?
Fail-safe hardware unlocks automatically when power is cut — required by NFPA 101 on most egress doors so occupants can always exit during a fire or power outage. Fail-secure hardware stays locked when power is lost, which is appropriate for server rooms, vaults, or perimeter doors where maintaining security during an outage is the priority. Most installations mix both types: exit doors are fail-safe, sensitive interior doors are fail-secure. Your integrator must document the mode of every electric strike or magnetic lock and demonstrate that the configuration complies with your building's occupancy classification under the local adopted edition of NFPA 101.
Q: Do I need a permit to install an access control system?
In most jurisdictions, any work involving new wiring, modifications to an egress door, or installation of an electric strike or magnetic lock requires a low-voltage or electrical permit. Purely wireless smart lock swaps on residential doors often fall below the permit threshold, but the moment a contractor runs conduit, installs a power supply panel, or modifies door hardware on a commercial property, expect a permit to be required. Permit requirements are set at the city or county level, so your integrator should research local rules before starting work. Operating without a required permit can void the installation warranty and create liability if a door failure results in injury.
Read full guide ↓
Keycard/fob access system
→
Biometric (fingerprint/face) entry system
→
Smart lock installation
→
Intercom system installation
→

Access Control Systems Hiring Guide

📖 Overview

At the core of any access control installation is a controller — the hardware brain that reads credentials, evaluates permissions, and sends an unlock signal to an electric strike, magnetic lock, or electrified mortise lock. Controllers from manufacturers like HID Global, Lenel S2, Honeywell Pro-Watch, and Bosch ACE range from single-door panels (~$150–$400) to enterprise chassis supporting hundreds of readers. The credential layer sits on top of that controller and is where homeowners and facility managers make their most visible product decisions.

[Keycard and fob access systems](https://contractorsplanet.com/?service=security-system&subcat=access-control-systems&subsubcat=keycardfob-access-system) remain the workhorse credential format across commercial and multi-family residential properties. Proximity cards operating on 125 kHz (EM4100, HID Prox) have been the standard for decades, though the industry is steadily migrating toward 13.56 MHz smart-card formats — MIFARE Classic, MIFARE DESFire EV3, and HID iCLASS SE — that support encrypted, rolling credentials and are far harder to clone than legacy proximity fobs. A typical small-business installation of two or three doors runs $1,200–$4,500 in materials and labor, with the biggest variable being whether existing wiring can be reused.

[Biometric entry systems](https://contractorsplanet.com/?service=security-system&subcat=access-control-systems&subsubcat=biometric-fingerprintface-entry-system) replace or supplement cards with fingerprint scanners, palm-vein readers, or facial-recognition cameras. Suprema, ZKTeco, and Anviz manufacture readers common in mid-market commercial installs; enterprise deployments often use NEC NeoFace or Idemia readers certified to FBI MINEX accuracy standards. Biometric systems eliminate credential-sharing and lost-card headaches but introduce a data-privacy layer that varies significantly by jurisdiction — Illinois' BIPA, Texas' CUBI, and Washington's My Health MY Data Act each impose distinct requirements around biometric data storage, consent, and breach notification that contractors and building owners must address before deployment.

[Smart lock installation](https://contractorsplanet.com/?service=security-system&subcat=access-control-systems&subsubcat=smart-lock-installation) is the residential entry point to access control. Brands like Schlage Encode Plus, Yale Assure 2, and August Wi-Fi Smart Lock retrofit onto standard ANSI Grade 1 or Grade 2 prep holes and integrate with Apple Home, Google Home, or Amazon Alexa ecosystems. A licensed locksmith or low-voltage electrician can typically complete a single-door smart lock swap in under two hours. More sophisticated setups — wiring for electric strikes on steel doors, installing Wiegand or OSDP card readers alongside the lock, or connecting the lock to a Property Management System via API — require a low-voltage systems integrator rather than a simple DIY swap.

[Intercom system installation](https://contractorsplanet.com/?service=security-system&subcat=access-control-systems&subsubcat=intercom-system-installation) pairs audio or video verification with the door-release function, creating a layered credential check. Video intercom products from 2N, Aiphone, and Doorbird dominate the mid-market; for apartment buildings, systems like ButterflyMX or Swiftlane add mobile-app unlock and virtual concierge features that eliminate the need for a physical management office. Legacy two-wire intercom wiring can often carry IP-based signals with a balun adapter, but older coax or proprietary bus wiring frequently requires full re-pulls — a cost that surprises owners of 1980s-era multifamily buildings.

Regulatory compliance threads through every tier of this category. The National Electrical Code (NEC) Article 725 governs Class 2 and Class 3 low-voltage control circuits used to power readers and electric strikes. NFPA 101 Life Safety Code Section 7.2 mandates that any electrically controlled egress door must fail-safe (unlock on power loss) in most occupancy types — a requirement that shapes product selection and UPS battery backup sizing. ADA Standards for Accessible Design require that hardware at accessible entries operate with a closed fist and require no tight grasping, pinching, or twisting, which affects reader mounting heights (centerline 34–48 inches AFF per ICC A117.1) and the type of electric hardware used. For projects requiring a building permit — generally any installation involving new wiring, structural door modifications, or changes to egress paths — a licensed electrical or low-voltage contractor must pull permits in most states.

When deciding which sub-service fits a given project, the clearest guidance is credential philosophy. If you need simple, scalable, cost-effective control for a small office or rental property, a keycard or smart lock solution covers 80% of use cases. If credential sharing or buddy-punching is a specific operational risk, biometrics close that gap definitively. If visitor management at a building entrance is the primary concern, an intercom system with video capability addresses that distinct workflow. For emergencies — a compromised credential, a door that will not release, or a controller that has gone offline and locked occupants in or out — treat the situation as a [Locksmith](https://contractorsplanet.com/?service=locksmith) call first to restore safe egress, then engage your access control integrator for the root-cause investigation once the immediate hazard is resolved.

✅ What it covers

  • Site survey to map door locations, wiring paths, and existing hardware compatibility
  • Selection of credential technology (proximity card, smart card, biometric, or mobile credential)
  • Controller and panel installation — mounting, power supply wiring, and network integration
  • Electric strike, magnetic lock, or electrified mortise lock installation on each controlled door
  • Reader installation and wiring per NEC Article 725 low-voltage circuit requirements
  • Software setup — user enrollment, access schedules, and permission groups in the access control management platform
  • Testing of fail-safe or fail-secure operation and UPS battery backup under simulated power loss
  • ADA compliance verification — reader mounting heights per ICC A117.1, hardware force requirements
  • Permit filing and inspection where required by local jurisdiction
  • Staff training on credential issuance, audit log review, and lockout/emergency procedures

💵 Typical cost range

$800 to $18,000

Single-door smart lock retrofits run $800–$2,000 installed, including hardware and a two-hour labor window. A two-to-four-door keycard system for a small commercial office typically lands at $3,500–$7,500 when factoring in the controller, readers, electric hardware, low-voltage wiring, and programming. Biometric systems carry a $400–$1,200 per-reader premium over equivalent card readers, pushing a three-door biometric installation to $6,000–$12,000. Large-scale deployments — 10-plus doors with server-based software, structured cabling, and ADA-compliant hardware throughout — commonly exceed $18,000 and can reach $50,000+ for enterprise campus systems. Video intercom for a multifamily building adds $1,500–$4,000 per entry point depending on camera resolution, mobile-app integration, and whether existing wiring is reusable. Ongoing software subscription fees ($20–$200/month per site) should be budgeted separately from installation.

🛡️ Hiring tips

  • Verify the contractor holds a low-voltage or alarm systems license in your state — most states require ESA, C-10 electrical, or a dedicated low-voltage classification for access control work
  • Ask specifically whether they are a certified integrator for the hardware brand they are proposing (HID, Lenel, Genetec, Honeywell) — manufacturer certification means factory-trained diagnostics and warranty support
  • Request a written site survey and wiring plan before signing a contract; vague scope documents are the primary source of change-order disputes in this trade
  • Confirm that the proposal specifies fail-safe versus fail-secure operation for each door and documents compliance with NFPA 101 egress requirements for your occupancy type
  • Check that the integrator will pull all required permits and schedule inspections — never accept a proposal that asks you to waive permits on wired low-voltage work
  • Ask how credentials and audit logs are stored: on-premise server, cloud, or hybrid — and who owns the data if you switch providers
  • Get references from at least two installations of comparable scale and credential type completed within the past 18 months
  • Clarify the support and response-time SLA for system failures — a locked-out facility at 6 a.m. requires a defined escalation path, not just a business-hours phone number

More frequently asked questions

How long does a typical access control installation take?
A single-door smart lock swap takes a skilled installer one to two hours. A two-to-four-door commercial keycard system — including controller mounting, wiring, reader installation, and software setup — typically runs one to two full days for an experienced two-person crew. Larger deployments with structured cabling, multiple controllers, and server-based software can run one to three weeks. The biggest schedule variable is existing wiring condition: reusing in-place conduit can cut labor by 30–40%, while a complete re-pull through finished walls adds days. Permit lead times (commonly five to fifteen business days in urban jurisdictions) should be built into the project schedule before work begins.
Can access control integrate with my existing security cameras or alarm system?
Yes — integration is one of the primary value propositions of modern access control platforms. Leading software platforms like Genetec Security Center, Milestone XProtect, and Lenel OnGuard natively correlate door-access events with camera timestamps, so a failed credential attempt automatically pulls the corresponding video clip. Integration with intrusion alarm panels (DSC, Bosch, Honeywell Vista) allows the access system to arm or disarm zones based on the last-person-out event. Most integrations use open protocols — OSDP for reader communication, REST APIs for software-to-software links — but confirm compatibility between brands before purchasing hardware, since some proprietary systems limit third-party integration.
What credential format is most secure for a small business?
Legacy 125 kHz proximity cards (HID Prox, EM4100) are easily cloned with commercially available readers available for under $30 online and should be considered obsolete for any security-sensitive application. The current baseline recommendation is 13.56 MHz smart cards using MIFARE DESFire EV3 or HID Seos, which use AES-128 encryption and rolling cryptographic challenges that prevent replay attacks. Mobile credentials delivered via Bluetooth Low Energy or NFC — available through HID Mobile Access, Allegion Engage, and Openpath — offer equivalent or better security with the added convenience of smartphone-based access, eliminating physical card management for small teams with frequent personnel turnover.
How does access control handle power outages?
A well-designed system includes an uninterruptible power supply (UPS) sized to maintain the controller, readers, and electric hardware for a minimum of four hours — 24 hours is the standard for critical facilities. The UPS protects against short outages and keeps audit logs intact. Beyond the UPS runtime, fail-safe doors unlock automatically, and fail-secure doors remain locked — so egress path planning must account for the scenario where card readers are offline. Some integrators also install mechanical key overrides on electric strikes as a secondary backup. NFPA 72 and UL 294 (the standard for access control units) both address power-loss behavior and are commonly referenced by AHJs during permit inspections.
What maintenance does an access control system require annually?
Annual maintenance for a commercial system typically includes firmware updates on all controllers and readers, inspection and load-testing of UPS batteries (sealed lead-acid batteries in access control UPS units typically need replacement every three to five years), cleaning of biometric reader lenses and card reader slots, verification of door closer force and strike alignment (a misaligned door is the most common cause of nuisance access failures), and a full audit of user credentials to remove departed employees. Many integrators offer annual service agreements for $300–$800 per site covering these tasks plus priority response. Neglecting firmware updates is a meaningful cybersecurity risk — the 2020 HID OSDP vulnerability and several Lenel CVEs have required prompt patching.
Should I hire a locksmith or a security integrator for access control work?
The answer depends on project scope. A licensed locksmith is the right call for smart lock retrofits on one or two residential or light-commercial doors, mechanical key-override installation, or emergency lockout response — locksmiths are trained in door prep, hardware fitting, and mechanical security standards like ANSI/BHMA grades. A low-voltage security integrator is the right choice when the project involves a multi-door controller, network integration, server or cloud software, structured cabling, or biometric readers. For large commercial or multifamily projects, the best outcomes typically come from a systems integrator who holds both a low-voltage license and a manufacturer certification, often subcontracting the mechanical door work to a licensed [Locksmith](https://contractorsplanet.com/?service=locksmith) partner.

🔗 Related Services

Visitors who came here often also needed:

Scroll to Top