Replacing an Aging Access Control System in Houston, TX

An access control system is seven layers, and each one ages differently

When a Houston property manager says the access system needs replacing, the part that actually failed is usually one or two layers, not all of them. Separating those layers is the first job, because it decides whether the project is a controller swap over a weekend or a new installation with new cable.

The most economical replacement reuses every sound conductor and every working piece of door hardware, and changes only what is genuinely obsolete. The most expensive mistake is reusing something that looked fine and was not, then discovering it after the old system is gone.

How to tell the old system is finished, not just broken

A failed reader or a dead power supply is a repair. Replacement starts to make sense when the problems are structural:

• The software runs on an operating system that no longer receives security patches, on a PC that cannot be swapped without losing the license or the database.
• The controller has been discontinued, and spare boards come only from salvage and online resellers.
• Every badge in the building is 125 kHz proximity, which broadcasts a fixed number with no encryption and can be copied with inexpensive, widely sold equipment.
• Adding one more door means buying a whole panel, because the existing ones are full and no longer made.
• Nobody can produce a clean report of who entered where without calling the original vendor.
• Disabling a departing employee’s badge requires someone to walk to the server, so on busy weeks it does not happen.

If two or more of those describe your building, repairs are buying time on a system that will eventually fail on its own schedule rather than yours. If only one door misbehaves, start with our Houston access control repair page instead.

How the job changes from a Downtown tower to an east-side warehouse

Houston has no zoning, so a replacement project can mean very different things a few blocks apart. The building type sets the logistics as much as the technology does.

Downtown, Uptown and Greenway Plaza towers

Work happens after hours under the building engineer’s rules, material travels in a scheduled freight elevator, and the property manager will want a certificate of insurance before anyone enters. Many towers run a base-building system for lobby turnstiles, the garage and the elevators, while each tenant runs its own suite doors. If you want one badge to open both, the new tenant system has to read the same card technology and bit format as the building’s, which we confirm with management before ordering anything. Readers that restrict elevator floors involve the elevator contractor, because that wiring runs through the cab’s traveling cable; we coordinate with them rather than working inside the elevator ourselves.

Energy Corridor and Westchase office campuses

Mid-rise buildings from the 1980s and 1990s were often expanded tenant by tenant, so one floor may run a different panel generation than the next. Here the replacement is mostly an inventory problem: mapping every door to its controller before cutting anything over.

Warehouses along Beltway 8 and toward the Ship Channel

Tilt-wall construction, long runs out to guard shacks and truck gates, dock doors that get propped open, and shifts that need readers live before sunrise. Distance and exposure matter more than finish here. A gate reader on a steel pedestal takes full Gulf Coast sun and every summer thunderstorm, so it needs an outdoor rating and sealed cable entry.

Garden-style and mid-rise apartment communities

Resident turnover means credentials are issued and revoked constantly, so a system that makes leasing staff faster at that is worth more than a long feature list. Pedestrian gates, pool gates, package rooms and garage entries are frequently on different equipment generations that the replacement can finally unify.

Older buildings inside the Loop

In the Heights, Montrose and older parts of Midtown, plaster, brick and shallow ceilings limit where new cable can travel. Reusing the existing cable path, or painted surface raceway, often decides the design before any equipment is chosen.

The reader protocol decision most replacements get wrong

Most systems installed before the late 2010s connect readers to controllers with Wiegand, a one-way signal on two data wires. Wiegand has three weaknesses that matter when you replace a system:

1. It is unencrypted, so a small device spliced into the reader cable can record credentials and replay them later.
2. It is unsupervised: if someone disconnects a reader, the controller does not necessarily notice.
3. It is one-way, so reader settings and firmware have to be changed at the reader itself, one ladder climb at a time.

OSDP, the Open Supervised Device Protocol published by the Security Industry Association, addresses all three. It runs over RS-485, the controller supervises each reader continuously, and with Secure Channel enabled the traffic between reader and controller is encrypted. It needs four conductors, two for power and two for data, so most existing six-conductor Wiegand reader cable has enough wires. What that cable may lack is twisted pairs. RS-485 is designed for twisted-pair cable, and untwisted conductors that behave on a short run can cause intermittent reader dropouts on a long or electrically noisy one. We test each run before deciding to reuse it.

Moving hundreds of badges without locking anyone out

Credential migration is where tenants actually feel the project, so we plan it before any hardware is ordered.

• Card format comes first. Every card carries a bit format with a facility code and a card number. The 26-bit format is the old open standard; 35-bit, 37-bit and proprietary formats are common in larger organizations. The new system must be configured to decode each format in use, or existing badges read as unknown.
• The 26-bit ceiling. That format allows only 256 facility codes of 65,536 card numbers each, so duplicate numbers exist in the wild. It is one more reason to move past it.
• Multi-technology readers. Readers that accept both old 125 kHz cards and new 13.56 MHz smart credentials let you switch systems on one date, swap badges gradually, and switch off prox reading once the last old card is retired.
• The serial-number trap. Some 13.56 MHz installations read only a chip’s serial number, which is unprotected and can be copied. The security gain comes from reading the card’s encrypted credential, and we configure readers that way.
• Export the database. Names, card numbers, access levels, schedules and holidays should come out of the old software as a file. When the old software cannot export, entry is manual, and the timeline has to allow for it.

What EVOTECH does on a Houston replacement

1. Door survey. We walk every controlled opening and record the reader, lock type, fail mode, door position switch, exit device, cable, controller port and power supply. Doors missing from every drawing tend to turn up on this walk.
2. Keep-or-replace list. Each layer from the table above gets a decision, with the reason written down so you can question it.
3. Egress and fire review. Where maglocks or fire-rated openings are involved, we confirm the release devices and the fire alarm interface, and flag anything that needs your fire alarm vendor.
4. Itemized proposal. Hardware, labor and any new cable are broken out line by line.
5. Staged cutover. Controllers move one at a time, after hours when tenants require it, with mechanical key override confirmed on each door before its controller is disconnected.
6. Door-by-door testing. Valid card, invalid card, forced door, held-open alarm, exit device, request-to-exit and power-fail behavior, logged per opening.
7. Handover. Training for whoever issues badges, a door schedule, and a written record of the credential formats and controller addresses, with administrator accounts in your name.

What drives the price of a Houston replacement

We quote after the survey because the variables belong to your building, not to a price sheet:

• How many doors, and how many are exterior, fire-rated or tied to elevators.
• How much existing cable and lock hardware passes testing.
• Credential strategy: rebadge everyone at once, or migrate gradually through multi-technology readers.
• Cloud-hosted versus on-site software, and any integration with video, intrusion alarm or HR systems.
• Building logistics such as after-hours work, freight elevator windows, escorts and parking for a work vehicle Downtown.
• Whether the old system can export its cardholder database.

Replacement mistakes that bring the installer back

• Decommissioning the old server before anyone verifies the cardholder export opened correctly.
• Mounting new readers over old holes without checking the new mounting pattern, leaving gaps that let rain behind exterior readers.
• Reusing a lock power supply without load-testing its batteries.
• Setting the unlock time shorter than it takes to reach the door after the request-to-exit sensor fires, which produces forced-door alarms all day.
• Switching off prox reading before the last legacy badge has been swapped.
• Leaving administrator passwords with the installer instead of the owner.

Request an access control replacement quote in Houston

Related services

Frequently asked questions