Getting Started
Provides initial procedures for getting started with the device.
Components
| BioStation 2a | Wall Bracket | Drilling Template | Cable Cover |
| Connection Cables | Quick Guide | PVC Anchor x4 | Fixing Screw x4 |
| Bracket Fixing Screw (Star Shaped) | 120 Ω Resistor | Diode |
- Components may vary according to the installation environment.
- When assembling the product with the bracket, you can use the included bracket fixing screw (Star Shaped) instead of the product fixing screw for enhanced security.
Name and function of each part

-
Display: Provides a UI for operation.
-
Number/Menu/ESC Button
-
0-9: Input numbers/characters, select menus
-
: Enter menu
-
ESC: Go back to the previous screen, cancel input
-
-
Function Button: Used as a time attendance functional key or to select submenu.
-
Direction/OK Button
-
: Change character type, set guard start/stop
-
: Change character type, select attendance event for registration
-
: Delete numbers/characters, authenticate using ID
-
: Insert symbol, set item, select operation code
-
OK: Select item/save setting, activate key menu
-
-
LED Indicator: Indicates the operational status of the device with the color of the LED.
-
Green: Authentication success.
-
Red: Authentication failure.
-
Blue: Normal operation.
-
Blue/Green blinking:
-
When setting DHCP to use, unable to retrieve IP address.
-
When in Slave mode, the connection to the master device is disconnected.
-
-
Red/Purple blinking: Device is locked.
-
Yellow blinking: Waiting for input.
-
-
Fingerprint Recognition Unit: The part that recognizes the fingerprint for access.
-
RF card and mobile access card authentication unit: Part to scan a RFID card or mobile access card for entrance.
-
USB (Type-C) Memory Slot: Connects the USB memory.
-
Speaker: Delivers sound.
-
Wiegand Input (4-pin): Connect the Wiegand Input cable.
-
Wiegand Output (4-pin): Connect the Wiegand Output cable.
-
RS-485 (4-pin): Connect the RS-485 cable.
-
Ethernet: Connect the Ethernet cable.
-
Input (5-pin): Connect the input cable.
-
Relay (3-pin): Connect the Relay cable.
-
USB Expansion Port (5-pin): Connect other accessory products.
-
Power Supply (2-pin): Connects the power supply cable.
Cables and connectors
Power
| Pin | Name | Color |
|---|---|---|
| 1 | PWR +VDC | Red (White stripe) |
| 2 | PWR GND | Black (White stripe) |
Relay
| Pin | Name | Color |
|---|---|---|
| 1 | RLY NO | White |
| 2 | RLY COM | Blue |
| 3 | RLY NC | Orange |
RS-485
| Pin | Name | Color |
|---|---|---|
| 1 | 485 TRXP | Blue |
| 2 | 485 TRXN | Yellow |
| 3 | 485 GND | Black |
| 4 | SH GND | Gray |
Input
| Pin | Name | Color |
|---|---|---|
| 1 | INPUT0 | Red |
| 2 | INPUT1 | Yellow |
| 3 | INPUT2 | Orange |
| 4 | INPUT GND | Black |
| 5 | SH GND | Gray |
Wiegand input
| Pin | Name | Color |
|---|---|---|
| 1 | WG D0 | Green |
| 2 | WG D1 | White |
| 3 | WG GND | Black |
| 4 | SH GND | Gray |
Wiegand output
| Pin | Name | Color |
|---|---|---|
| 1 | WG D0 | Green |
| 2 | WG D1 | White |
| 3 | WG GND | Black |
| 4 | SH GND | Gray |
Set Up Master Administrator CE model only
The Master Admin feature enhances the overall admin privileges of the device to improve device security and prevent unauthorized access and configuration changes. This feature applies only to CE products for the EU region, and Master Administrator enrollment is required on CE products. Only the enrolled master administrator can access the administrator menu and change device settings.
-
This feature is a required policy introduced to enhance security for CE products in the EU region, and it is not supported on Global (Non-CE) products.
-
The master admin cannot delete directly and will be deleted only during Factory Default.
Master administrator support policy CE products vs Global (Non-CE) products
The Master Admin feature is activated only on CE products with a label that has the CE mark.
Use the sticker on the back label to identify CE products and Global (Non-CE) products. The feature works differently as follows.
-
CE products: CE mark present
-
Global (Non-CE) products: CE mark absent
| Category | CE products | Global (Non-CE) products |
|---|---|---|
| Master Admin | Enabled (cannot be disabled) | Not supported |
| Admin 2-step Authentication | Required | Not supported |
| Minimum PIN length | At least 8 digits | At least 4 digits |
When connected to BioStar X (or BioStar 2), the Master Admin setting changes based on device support, and the enablement of the Admin 2-step Authentication menu syncs automatically.
Behavior Logic During Firmware Upgrade
When you upgrade the firmware of an existing device, support for Master Admin and Admin 2-step Authentication can vary based on the combination of the version before upgrade and the target version.
Contact Suprema Global Technical Support Team for detailed version support availability.
Enroll master administrator on a new device
On a new device for CE products, you must enroll Master Admin from the start. If you do not enroll it, device use is restricted.
-
At first boot, the Master Admin enrollment screen appears. If you do not complete enrollment, you cannot move to the next screen.
-
Even if you connect to BioStar X (or BioStar 2) and assign a device-wide administrator, you must enroll Master Admin directly on the device to use all features.
-
New devices cannot perform firmware downgrades.
-
When the new device is booted for the first time, the Master Admin registration screen will appear. Press OK to start enrollment.

-
According to EU security policy, Master Admin must enroll credentials of at least two types. Select and enroll two desired credentials.

The credentials that can be enrolled for Master Admin are as follows.
Credential type Number of enrollments Conditions Card Up to 4 Supports only CSN and Wiegand types
Duplicate enrollment within the same type is not allowedFace Up to 2 Enroll only on devices with the same algorithm Fingerprint Up to 2 - PIN 1 At least 8 digits long (CE regulation applies) Enrollment conditions
-
You must enroll at least two types of credentials.
-
All credentials supported by the device can be used as authentication means.
-
-
After enrolling two or more types of credentials, press OK to complete Master Admin enrollment.

Additional Information
-
When enrolling PIN through BioStar software
Global (Non-CE) products that do not support the master administrator can enroll a PIN of at least 4 digits directly on the device. However, when enrolling users through BioStar X (or BioStar 2), the following versions require a PIN with at least 8 digits.
-
BioStar 2 v2.9.11 or later
-
BioStar X v1.0.0 to v1.0.2
Users enrolled with a 4-digit PIN in the versions above cannot be assigned as device administrators.
-
-
Manual Device Hash Key Change
When manually changing the device hash key, a warning message will indicate that Master Admin PINs will be deleted. Please confirm the message before proceeding.
-
RS-485 Biometric Image Transmission Restriction
Biometric credential images are not transmitted over RS-485 communication, so substitute images appear when viewing the registered Master Admin face on slave devices.
Correct fingerprint input method
In order to improve the fingerprint authentication rate, enroll the fingerprint correctly. This product can authenticate fingerprints even if the user's fingerprint input angle and position change. If you enroll the fingerprint with attention to the following matters, the authentication rate can be improved.
Selecting a finger for fingerprint input
-
In preparation for the case that the fingerprint of a specific finger cannot be used, for example if the user is lifting a load with one hand or a finger gets hurt, up to 10 fingerprints for each user can be enrolled.
-
In the case of a user whose fingerprint cannot be recognized well, the authentication rate can be improved by enrolling the same finger twice repeatedly.
-
If a finger has a cut or the fingerprint is blurry, select another finger for the fingerprint.
-
It is recommended to use the index finger or the middle finger when scanning the fingerprint. The authentication rate can be reduced if it is difficult to place another finger at the center of fingerprint sensor accurately.
Fingerprint enroll method
- When the screen displays "Please input your first fingerprint," place the finger you want to enroll on the fingerprint recognition unit and gently press it so that the fingerprint is authenticated well.
- When the re-input screen is displayed after a beep sound, scan the fingerprint of the enrolled finger again. (scan the fingerprint of a finger to be enrolled twice)
Cautions for fingerprint enrollment
When a fingerprint is recognized, it is compared with the initially enrolled fingerprint, so the initial fingerprint enroll is the most important. Pay attention to the following matters when enrolling the fingerprint.
-
Place the finger deep enough to contact with the sensor completely.
-
Place the center of the fingerprint in the center of the sensor.
-
If a finger has a cut or the fingerprint is blurry, select another finger for the fingerprint.
-
Scan the fingerprint correctly without moving according to the instruction on the screen.
-
If you make the finger upright so that the contact area with the sensor is decreased or the angle of finger is warped, fingerprint authentication may not be performed.
If fingerprint authentication does not work well
This product can authenticate fingerprints regardless of seasonal changes or changes in the condition of the fingers. However, the authentication rate may vary according to the external environment or fingerprint input method. If the fingerprint authentication cannot be done smoothly, it is recommended to take the following measures.
-
If the finger is smeared with water or sweat, dry off the finger and then scan the finger.
-
If the finger is too dry, blow your breath on the fingertips and then scan the finger.
-
If the finger has a cut, enroll the fingerprint of another finger.
-
Since the initially enrolled fingerprint is often not input correctly, please re-enroll the fingerprint according to the Cautions for fingerprint enrollment.