Upgrading Access Control in Sugar Land Without Starting Over

Name the complaint, then pick the upgrade

An upgrade is worth paying for when you can state, in one sentence, what is wrong today. “The system is old” is not that sentence. “A former employee’s badge still opened the side door three weeks after she left” is. Each concrete complaint points to a specific add-on, and each add-on asks something of the equipment already on the wall.

If the honest answer in most rows is “our controller cannot do that,” you are looking at replacement rather than an upgrade, and our Sugar Land system replacement page covers that path.

Five checks before any upgrade is priced

1. Is the controller still supported? We read the model and firmware off the board and confirm the maker still issues updates. Anything added to an unsupported controller inherits its shorter life.
2. What can the reader ports speak? Older boards accept only Wiegand, a one-way signal with no encryption. Newer boards also accept OSDP, a two-way protocol with an encrypted mode called Secure Channel. That answer decides which readers are worth buying.
3. Who owns the card format? Some systems use proprietary formats only one dealer can order. When new credentials must coexist with old ones, we need the facility code and number ranges already in use so no two cards ever share an identity.
4. Is there spare capacity? Free inputs and outputs, headroom on the power supply, batteries within their service life. Smart-card and mobile readers generally draw more current than the proximity readers they replace, so a supply that was comfortable before can run short afterward.
5. Can your data leave? We ask for a test export of users, credential numbers and access levels. If the software cannot export, any move to a new platform means retyping every person, and that labor belongs in the plan from day one.

A quieter sixth check is licensing: adding a few doors can push a per-door or subscription license into a new tier.

Changing badges while people keep badging in

Credential upgrades stumble on logistics more than technology. A clinic with sixty staff on two shifts cannot swap cards in one morning, and a large association will never gather every household on one pickup day. The workable sequence has four stages:

1. Replace perimeter readers with multi-technology models that read the existing proximity cards and the new encrypted credentials. Users notice nothing yet.
2. Issue new credentials in groups, by department, shift or street, recording which person holds which new number.
3. Publish a cut-off date, then run a report of anyone still presenting old cards in the final two weeks and follow up with those people directly.
4. Disable low-frequency reading in the reader configuration.

That fourth step is the one that actually closes the copying risk, and it is the step most often forgotten. A reader left in dual mode indefinitely keeps honoring the very cards you meant to retire, so the project bought convenience and no security. We write the switch-off date into the plan at the start.

Phone credentials can share the same readers as cards. They end the reprinting of lost badges but add a license, a dependence on phone batteries, and a fair objection from staff who would rather keep work software off a personal device, so most offices end up with a mix.

Upgrades nobody sees: firmware, network and reader encryption

A modern access controller is a network appliance wired to your doors. These changes are invisible to badge holders, yet they close the gaps an IT auditor asks about first.

• Default and shared passwords. Controllers and their web interfaces often still carry the password they shipped with. Each administrator should have a named account, and accounts belonging to people who left should be gone.
• Network placement. Controllers belong on their own network segment, reachable for management only from approved machines, never on the same flat network as guest Wi-Fi. We plan this with your IT provider, not around them.
• Encryption between reader and controller. A Wiegand line carries card numbers in the clear, and a small device hidden behind an exterior reader can record them. OSDP readers with Secure Channel switched on close that path; OSDP readers installed with it left off do not.
• Tamper reporting. Reader and enclosure tamper switches should report to the controller, so a reader pried off the wall produces an event instead of silence.
• Time and backups. The controller clock should follow a time server so door events line up with camera footage, and the database should be backed up somewhere other than the controller.

Before touching firmware we back up the database and confirm a rollback path; a failed update on the device that locks your building is an outage.

What gets upgraded first, building by building in Sugar Land

Sugar Land grew steadily for decades, so many of its systems reached middle age together. Their weak points differ, and the building type usually decides which upgrade leads.

Medical and dental suites along the I-69 corridor

Clinics near the freeway and the hospital campuses usually need interior control more than new perimeter hardware: the medication room, records storage, the server closet. Phase one is often readers on two or three interior doors plus reports showing who opened them.

Offices in and around Town Square

Multi-tenant offices want per-tenant after-hours schedules, elevator floor limits and self-managed staff lists, so the upgrade is often software and partitioning rather than door hardware.

Amenities in First Colony, Telfair, Riverstone and New Territory

Pool, fitness and clubhouse doors run on fob systems that a new board inherits every few years. The most valuable change is usually administrative: a platform the next board can reach from a browser, an audit of fobs against current residents, and seasonal schedules set once rather than by hand each spring.

Churches, schools and daycares

Open to the public on some days and locked on others, these buildings usually put a single-action lockdown and a buzz-in intercom at the main entrance ahead of everything else.

Not every Sugar Land mailing address sits inside city limits, so confirm which fire code office reviews your property before any change to how an egress door locks or releases.

Spreading the work across two or three budget years

Most organizations cannot, and should not, do everything at once. Phasing is sound as long as each phase keeps what the next one depends on.

One rule governs every phase: buy nothing this year that a later phase will pull back out. A reader chosen in year one should still be the right reader in year three.

What EVOTECH does on a Sugar Land upgrade visit

1. We sit down with the administrator and whoever fields complaints, and write the problems down in their words.
2. We inventory controller model and firmware, software version and license, reader models, card format, and the lock, sensors and power at each door.
3. We test a sample of doors under load: voltage at the lock while it cycles, whether position and exit sensors report, whether fail-safe locks drop when the fire alarm contact opens.
4. With your IT contact, we review where the controllers sit on the network and who can reach them.
5. We request a trial export of the user database.
6. You receive a written roadmap tying each phase to the complaints it solves, with an itemized quote for each phase.
7. Work is scheduled around patient hours, services or board approvals, and each phase ends with updated door records and a walkthrough for your administrators.

What moves the price of an access control upgrade

• How many doors a phase touches, and whether readers are replaced or kept
• How many credentials are issued, and whether they are photo-printed
• The licensing model, and whether the change crosses a tier
• Whether the controller accepts new devices as-is or needs interface boards added
• Condition of the existing wire; our Sugar Land cabling page explains how we test it
• Coordination with your fire alarm company or video vendor
• After-hours work in occupied clinics and offices

Upgrade errors we are called in to correct

• Dual reading left on. New cards issued, old technology never switched off.
• Colliding card numbers. New credentials ordered in a range that overlaps cards already in the database, so one badge opens someone else’s doors.
• OSDP without Secure Channel, or with two readers sharing an address on one bus, which shows up as readers dropping offline by turns.
• Reader power ignored. Replacement readers drawing more than the old port or supply can deliver, so they reboot each time the lock fires.
• Firmware updated with no backup. A failed update then means rebuilding the user list from paper.
• A magnetic lock added for convenience with none of the code-required release devices.
• A single administrator trained. When that person moves on, the organization is back where it began.

Request an access control upgrade quote in Sugar Land

Related services

Frequently asked questions