Mobile Credential Setup for Uptown and Galleria Offices, 77057

Map the route from the parking garage to the desk

Before choosing a platform or a reader, we trace the path a new hire actually walks on the first morning and note who controls each point along it.

Property management’s tenant access rules come first. They decide whether suite doors may join the building’s system, which vendors may work in the ceiling, and whether work in occupied areas must happen after hours.

Can the suite door read the same phone key as the lobby?

There are three workable arrangements, and the right one depends on how much control the tenant wants to keep.

Join the building’s system

Some landlords offer suite doors as an add-on to the base-building platform. Staff carry a single credential, but every change runs through building management’s administrator, and the suite’s door activity sits in a database the landlord controls.

Run a separate suite system

The tenant owns its own platform, readers and administrator login. Control and privacy are complete, but staff hold two credentials, the building’s for the lobby and garage and the tenant’s for the suite, which may mean two apps on one phone.

One credential enrolled in both

On some platforms a mobile credential carries a defined card format and number, and both the building’s controller and the tenant’s controller can enroll that same number, the way one plastic badge can be registered in two systems. It only works when both sides read the same credential technology and agree on format and number ranges so no two tenants collide. When it is available, it gives staff one key and gives each party its own records.

The parking level where remote unlock stops working

Podium and underground garages under Uptown towers are the most common place a mobile rollout disappoints. Concrete decks and steel starve phones of cellular signal a level or two down, so any feature that routes through the cloud, such as tapping Unlock in the app, can simply time out at the garage arm.

Local reads are different. A Bluetooth or NFC exchange between phone and reader does not need the phone to be online at all, and the garage controller decides from its own stored list. We confirm which path a given garage uses by presenting a phone with cellular and Wi-Fi both disabled; if the arm still lifts, the credential is local and signal no longer matters.

Height is the other garage problem. A reader set for pedestrians leaves drivers of low sedans stretching out of the window, so lane readers belong on a pedestal at driver-window height, with range tuned to reach the car without also catching the one behind it.

Wallet badges or an access app for office staff?

Wallet badges live in Apple Wallet or, on platforms that support it, Google Wallet. With Express Mode, staff tap the phone or an Apple Watch at the reader without opening anything or unlocking the screen, which is the fastest experience at a busy turnstile. They require readers and a platform that explicitly support wallet credentials, and that list is shorter.

App-based credentials work across a broader range of readers and add options such as hands-free unlock and in-app remote release. Their weak point is the phone itself: Bluetooth permissions and battery-saving settings can stop the app from responding until it is opened.

If the building already issues wallet badges at the lobby, matching that at the suite keeps a single habit for staff. For sensitive rooms, requiring a phone unlock (Face ID, fingerprint or passcode) before the credential is released adds a second factor without any extra hardware.

Behind the suite reader: Wiegand, OSDP and Secure Channel

Most suite readers still report to the controller over Wiegand, a one-way protocol that sends the credential number in the clear. A small device hidden behind the reader can capture and replay those numbers, and the controller cannot tell whether the reader is even still connected. That weakness applies no matter how strongly the phone itself is encrypted.

OSDP runs over RS-485 and is two-way and supervised: the controller knows when a reader goes offline, and OSDP Secure Channel encrypts the link. It also lets reader settings and firmware be managed centrally, which helps with mobile-enabled readers whose Bluetooth range and modes need adjusting later.

Existing six-conductor reader cable can often carry OSDP on short runs, though twisted-pair cable is preferred and we test before reusing anything. Many towers use the space above the ceiling as a return-air plenum, and cable run there must be plenum rated, so new runs are specified accordingly.

Suite move-in week, in the order we work it

1. Collect the building’s tenant access guidelines, the property manager’s contact and the certificate-of-insurance requirements, and book the freight elevator if hardware is being delivered.
2. Confirm which lobby, elevator and garage permissions the building will program for your staff, and in which credential format.
3. Install or replace the suite reader, electrified lock and request-to-exit device, after hours if management requires it.
4. Configure the tenant platform: access levels, business-hours schedule, restricted rooms and administrator accounts.
5. Issue test credentials on an iPhone and an Android handset and walk the whole route from garage to suite.
6. Enroll staff, run a short onboarding for office management, and document how to add and remove people in both systems.

Offboarding: the step tenants skip

When an employee leaves, revoking the suite credential is only half the job. If the building issued that person lobby, elevator or garage access, management has to remove it as well, or a former employee can still ride up to your floor and wait at the door. We set up a written two-line offboarding checklist that names who notifies the building and how.

For suite systems with an on-site panel, we also clear the departed employee’s number from the panel itself; a phone that stays offline cannot keep using a key the panel no longer recognizes.

What moves the scope, and the errors we get called to fix

Scope drivers

• Whether suite readers can be reconfigured or must be replaced to read phones.
• Which of the three building arrangements applies, and how much coordination with management it needs.
• After-hours work rules, freight elevator scheduling and ceiling access in an occupied floor.
• New cable, especially plenum-rated runs, and upgrading readers from Wiegand to OSDP.
• The platform’s licensing model and the number of staff and rooms.

Errors we fix

• Suite readers set to hands-free with wide range, releasing the glass door whenever staff walk the corridor inside.
• A credential format that does not match what the controller expects, so the reader beeps and the panel logs an unknown card.
• Staff removed from the suite system but never from the building’s turnstiles and elevators.
• Garage access built on in-app remote unlock, which fails below grade.

Related services

Frequently asked questions