Sugar Land Access Control Installer: Choosing the Credential and the Platform

What access control work looks like across Sugar Land

Sugar Land’s building stock runs from 1980s and 1990s First Colony construction to brand-new mixed-use blocks, and that age gap shows up in the equipment we find on the wall.

• Town Square and the Highway 6 and US-59 office corridor: multi-tenant office buildings where tenants often inherited readers installed by a previous occupant.
• Medical office buildings near the hospitals along US-59: practices that need staff-only zones and patient-hours scheduling.
• Shopping strips in First Colony, Telfair and Riverstone: tutoring and enrichment centers, martial arts and dance studios, daycares and dental offices, each with a storefront entry and a rear service door.
• The Imperial district and other newer redevelopment: recent construction where the base building already has a system and tenants need to connect to it.
• Gated neighborhoods such as Sweetwater, and the amenity centers of Riverstone, Greatwood and New Territory, where HOA boards look after gate and pool entry equipment.

The credential question: why older proximity cards are the weak point

Many systems installed in the 2000s still read 125 kHz proximity cards. Those cards transmit a fixed number with no encryption, and handheld copiers that read one from a short distance and write it to a blank card have been sold online for years. Some early 13.56 MHz smart card formats have been compromised as well. If a building still uses those formats, anyone who can get briefly close to an employee’s badge may be able to copy it.

Current options close that gap:

• Encrypted smart cards and fobs built on formats such as MIFARE DESFire EV2 or EV3 and HID Seos, which authenticate with the reader instead of simply broadcasting a number.
• Phone credentials over Bluetooth or NFC, issued and revoked remotely, with nothing physical to hand out or collect.
• Multi-technology readers that accept both the old and new credentials during a changeover, so the building can migrate one group of people at a time.

The wire behind the reader matters too

Most older readers talk to their controller with the Wiegand protocol, which sends the card number unencrypted and one way. A small device spliced in behind an exterior reader can record every badge that is presented. OSDP with Secure Channel encrypts that conversation and supervises it, so the controller raises an alarm if a reader is removed. Existing reader cable can sometimes carry OSDP, depending on its pairs and condition, and we test it before promising to reuse it.

Cloud-managed or on-premises: an honest comparison

The single question that matters most: ask what happens at the door when the internet connection drops. A system that has to reach the cloud before it can unlock a door is the wrong system for a clinic or a school-age program.

One dashboard for a practice with offices in Sugar Land and beyond

Dental, medical, physical therapy and tutoring businesses in Sugar Land often have a second or third location in Katy, Richmond or Missouri City. Running each office on a different system means three user lists, three sets of schedules and three chances to forget a former employee. On a single platform, each person has one record, and their roles decide where and when they can enter:

• Front desk staff open the main entrance at their home office during business hours.
• Clinical staff who float between offices get access at each location on the days they are scheduled there.
• The office manager holds every door at every site.
• The cleaning company works after hours only, and only at the offices it services.

When someone leaves, one deactivation removes them everywhere at once.

Interior zones: medication rooms, records, server closets and classrooms

Inside a clinic, the front door usually follows patient hours while the interior doors never unlock on a timer. Medication storage, the records room and the network closet each get a separate access group, so the log can show exactly who entered and when. Privacy regulations put weight on controlling who can reach patient information; an access log is one useful part of that picture, not the whole of it.

Learning centers, studios and daycares in Sugar Land’s shopping strips have a different pattern. The storefront door stays locked while classes are running, and a video intercom at the entrance lets the front desk see a parent before buzzing them in. A single lockdown button can secure every controlled door at once, while the exit side of each door stays free so nobody is ever trapped inside.

Linking doors to cameras, intercoms and visitor check-in

The most useful integration is also the simplest: every door event linked to the camera covering that door, so clicking an entry in the log plays the matching clip. Alerts for a door forced open or propped too long go to a manager’s phone. Offices that register visitors can connect check-in software so a guest’s badge or temporary code works only for the day of the visit. Compatibility varies between brands, so we confirm that your cameras, intercom and access platform actually work together before anything is purchased.

Questions to ask any Sugar Land installer before you replace a system

1. Which credential format are you proposing, and is it encrypted?
2. Will the readers use OSDP Secure Channel or Wiegand?
3. What does each door do if the internet or the server goes down?
4. Who will hold the administrator account, and will it be in our name?
5. Can we export our users and event history if we change platforms later?
6. Which existing parts will you reuse, and how have you tested them?
7. How will you cut over without leaving a door unsecured or locking staff out?

If an installer cannot answer those clearly, keep looking, and hold us to the same list.

EVOTECH’s upgrade path for an existing Sugar Land system

1. Audit. We identify the existing controllers, readers, locks, power supplies and battery ages, and read a sample card to learn its technology and format.
2. Keep, replace or retire. Sound locks, door contacts and cable often stay; readers and controllers are usually what changes.
3. Itemized plan and quote, phased by door if you prefer to spread the work out.
4. Staged cutover. New equipment goes in door by door, typically after hours, with multi-technology readers accepting old and new credentials in the meantime.
5. Enrollment. We issue new credentials or phone invitations and collect the old cards.
6. Retire the old format, so a copied prox card stops working everywhere.
7. Handover with administrator access in your company’s name and a door-by-door record.

Variables behind a Sugar Land upgrade quote

• How much existing cabling, lock hardware and power can be reused after testing.
• The number of readers and controllers replaced.
• The number of credentials, and whether they are cards, fobs or phone credentials.
• Subscription or up-front software licensing.
• Camera, intercom or visitor-management integration.
• After-hours cutover requirements and interior zones.

Upgrade mistakes we are called in to correct

• Card format mismatch. Legacy cards use a specific bit length and facility code; a new reader not configured to output the same format rejects every existing badge on cutover morning.
• The old format never switched off, so the building paid for encrypted credentials while copyable prox cards still open every door.
• A cloud system with no local decision-making that strands staff outside whenever the office internet drops.
• Admin rights left with the previous vendor, so the tenant cannot add a new hire without a service call.
• Aging backup batteries left in place behind brand-new controllers, so the first outage exposes them.

Request a Sugar Land access control upgrade quote

Related services

Frequently asked questions