Keycard Access Installation in Houston, TX 77025

Who asks for keycards between Brays Bayou and the Medical Center

ZIP 77025 is a patchwork. Braeswood Place, Linkwood and Knollwood Village began as streets of post-war ranch houses, and a growing share of those lots now carry two-storey rebuilds raised well above the old slab height after Brays Bayou left water in living rooms more than once. Along Stella Link and the blocks closer to the Medical Center, garden-style apartments and condominiums house a large number of hospital staff working rotating shifts. Tucked in between are dental suites, therapy practices, small offices, churches and schools.

That mix produces four distinct kinds of keycard request:

• Property managers running a fob system installed fifteen or twenty years ago, who have learned that residents copy their fobs and that nobody can say how many working credentials are really in circulation.
• Clinics and practices that want the front door, the records room and the supply closet on separate rules, with a log showing who opened which one and when.
• Congregations and schools with dozens of volunteers and staff, where brass keys walked out the door years ago and were never recovered.
• Owners of rebuilt homes who want a card or fob on a detached office, a home gym, the garage entry or a wine room, and who would rather not patch fresh drywall to get it.

In most of these buildings the card itself is the weakest link, so that is where this page spends its time.

The fob on your key ring can be duplicated in under a minute

Most fobs and cards handed out before the mid-2010s run at 125 kHz, a technology usually just called prox. A prox credential does one thing: when the reader’s field powers it up, it repeats a fixed number. There is no challenge, no secret key and no encryption. Handheld duplicators sold online read that number and write it to a blank in seconds, and some retail key-copy kiosks offer the same service for fobs. To the reader the copy is indistinguishable from the original, because as far as the system can tell it is the original.

The number is often a weak point as well. The widely used open 26-bit format carries an 8-bit facility code (0 to 255) and a 16-bit card number (0 to 65,535). Because the format is public, cards with identical numbers exist all over the world, and a property that bought several batches over the years sometimes finds duplicates inside its own database.

What “secure” actually means

Moving to 13.56 MHz is necessary but not sufficient. What matters is whether card and reader prove themselves to each other with cryptographic keys before any identity is released.

Moving a building off prox without a line at the leasing office

The fear with any credential change is the morning when hundreds of people arrive and their fobs stop working. We plan so that morning never comes:

1. Identify what is installed. We read sample credentials with an analyzer to confirm technology, bit length and facility code, and we note the controller model and firmware. That tells us whether the panel can accept an encrypted format or must be replaced.
2. Replace readers first. Multi-technology readers accept both the old prox and the new encrypted card, so the swap is invisible to residents and staff.
3. Reissue in groups. Building by building, floor by floor or department by department, new cards are enrolled and handed out while the old ones keep working.
4. Switch the old technology off. Once reissue is finished, prox reading is disabled in the reader configuration. Owners forget this step constantly, and forgetting it means every copied fob still opens the door.

The cable between reader and panel

Most older installations use Wiegand, a one-way signal that sends the card number from reader to controller in the clear. A small sniffing device spliced in behind an outdoor reader can record every card presented, which undermines an expensive card upgrade. The modern alternative is OSDP, a two-way RS-485 protocol that supervises the reader and, with Secure Channel enabled, encrypts the conversation. OSDP needs a single twisted pair for data plus two conductors for power, supports far longer runs than Wiegand, and can often reuse existing cable if that cable tests clean. We test before promising either way.

Put the controller where Brays Bayou cannot reach it

Plenty of older complexes in this ZIP kept their access panel in a ground-floor electrical or telephone room, and some found out during Allison in 2001 and again during Harvey in 2017 what floodwater does to a circuit board. When we design or rebuild a system here, placement is a first-order decision:

• Controllers, lock power supplies and network switches go on an upper floor, or at minimum high on the wall, in a room that stays dry and reasonably cool.
• Readers at grade or in a parking level are treated as replaceable parts. Their cable is terminated in a junction box above the likely water line, so a drowned reader becomes a swap rather than a new cable pull.
• Every panel gets battery backup sized to the locks it drives, plus a written restart order: power, then network, then a check that the controller still holds its cardholder database.
• On raised homes, the reader goes at the top of the entry stair or on the garage door frame, with its cable in conduit along a pier or inside the stair framing rather than exposed.

When a keycard kit is fine and when it is not

A single battery-powered card-and-keypad lock on a home office door, with a handful of users, is a reasonable weekend project for a handy owner. Bring in a professional once any of these apply:

• The door is on an exit path, carries a fire rating label, or sits in a building with a fire alarm. The lock must release correctly, and leaving the building must never depend on a card.
• More than one door needs to share a user list, schedules or an audit log.
• Cable has to pass through plaster, brick veneer, finished ceilings or walls between units.
• An elevator, a gate operator or an intercom has to take instructions from the card system.

What EVOTECH does on a 77025 keycard job

1. Walkthrough. Every controlled opening is photographed and documented: frame material, existing hardware, fire label, and what lies on the far side of the wall.
2. Credential audit. We identify your current cards and document the cardholder list with the manager or owner.
3. Written design and itemized quote. Readers, card type and quantity, controller, lock hardware, power, cabling and software licensing each get their own line.
4. Rough-in and testing. New runs are pulled and every conductor is tested; reused cable is tested too, because old cable fails quietly.
5. Hardware and commissioning. Readers, strikes or electrified trim, request-to-exit devices and door-position switches go in, and each door is cycled until it behaves every single time.
6. Enrollment. We enroll the first groups alongside your staff and leave a written procedure for the rest.
7. Handover. The owner receives the administrator login, a database backup and a door schedule, registered in your name rather than ours.

The line items that drive a keycard quote here

• Door count and door type. Glass storefront, hollow metal and solid wood doors each need different electrified hardware.
• Whether the controller can stay. Keeping a compatible panel saves money; a panel that cannot read encrypted formats has to be replaced.
• Card technology and quantity. Encrypted cards cost more per piece than prox, and apartment communities may need several per unit.
• Photo ID badges. Practices and schools often want printed badges, which adds a card printer or a printing service.
• Cable path. Older masonry and finished apartment corridors take longer than an open attic in new construction.
• Elevator floor control. Restricting floors by card requires your elevator company to make the connection on its side.
• Software model. Some platforms are licensed per door up front, others by subscription, so we lay both out over several years for comparison.

Five errors that send a technician back to the same door

1. New cards were ordered in a format the controller has no definition for, so they show as “unknown credential” at every reader.
2. A reader was screwed flat against a steel mullion, and the metal cut its read range to almost nothing. A spacer or a mullion-rated model fixes it.
3. Prox reading was never disabled after the migration, so the copied fobs still open the pool gate.
4. An electric strike was wired without a suppression diode, and the voltage spike from its coil slowly pitted the controller’s relay contacts.
5. The previous installer kept the only administrator password. On our jobs, that password belongs to you from day one.

Related services

Frequently asked questions