Replacing an Access Control System in Brookshire, TX

The Brookshire pattern: a card system nobody can log into

Brookshire’s industrial growth runs on leased space. Distribution buildings along I-10 and the business parks between Brookshire and the Katy line change tenants every few years, and each move leaves behind hardware the new occupant did not choose and cannot manage.

The typical scene at move-in: card readers on the office entry, the driver lobby and a row of perimeter man doors, a gray enclosure on the wall of an electrical room, and no way to add a single badge. The previous tenant took the workstation that ran the software, or the cloud account is registered to an email address at a company that no longer occupies the building. Smaller versions of the same story play out at shops and yards along FM 359 and FM 1489, where a keypad went in years ago through a dealer who has since closed.

Why an orphaned system is a security problem, not an inconvenience

Until its database is wiped, the controller keeps honoring every badge the last occupant issued, including the ones carried by their former employees, contractors and cleaning crews. You have no list of who holds them and no way to revoke them. That alone is the reason to deal with the system on move-in day, before inventory arrives.

Reset or replace?

Sometimes the existing hardware can be recovered. Many controllers can be returned to factory defaults, which clears the cardholder database and the admin login, and some cloud platforms will transfer an account to a new owner who can prove control of the site. Whether that is worth doing depends on what is on the wall. A current, supported controller is worth resetting. A discontinued one whose software needs an old version of Windows is not. We read the model and firmware from the board, check whether the manufacturer still supports it, and tell you which path makes sense before any work is scheduled.

A reset is also where do-it-yourself attempts go wrong. Defaulting the wrong board, or doing it without the setup software, can leave doors stuck locked or stuck open with nothing able to program them. If any door in the building has a magnetic lock, the work belongs with a licensed low-voltage contractor, because that lock is part of the exit path.

What usually survives a replacement, and what does not

A replacement is rarely a full rip-out. In most warehouses and offices the labor-heavy parts, meaning the cable in walls and conduit and the locks in the frames, can stay if they pass testing.

On tilt-wall buildings the reuse question matters more than usual. Cable often climbs concrete walls in conduit and crosses a high open structure where every new pull needs a lift. Testing the existing runs before quoting can take a large share of the labor out of the job.

Moving off 125 kHz proximity badges without stopping a shift

Most systems installed before the last decade issue 125 kHz proximity badges. Those badges broadcast a fixed number, unencrypted, to any reader that asks, including an inexpensive handheld cloner that can copy one from a few inches away. In a building with rotating shifts, temporary labor and visiting drivers, assume some badges have already been copied.

The common 26-bit format carries an 8-bit facility code and a 16-bit card number, so a badge’s entire identity is two small integers. Modern credentials, such as DESFire EV2 or EV3 class cards or phone credentials over Bluetooth and NFC, use cryptographic mutual authentication, so a captured data stream is worthless. Frequency by itself is not the test: older 13.56 MHz MIFARE Classic cards have well-documented weaknesses of their own.

A migration that fits a multi-shift operation

1. Record the old format first. Before anything is unplugged we capture the card format and facility code. Lose them and transition readers cannot be told to accept existing badges.
2. Install multi-technology readers that accept both the old proximity badges and the new secure credentials.
3. Enroll by shift or department so badge printing never holds up the dock.
4. Set a hard end date in the software when proximity badges stop working. A transition with no cutoff just keeps the weak badge alive.

Gates: truck courts off I-10 and keypads at the end of a caliche drive

Truck courts and employee lots

On a truck court, the access controller never drives the gate motor. It only closes a dry relay contact that tells the operator to open, exactly as a push button would. Replacing the access system means re-landing that contact correctly, confirming the exit loop still opens for outbound trucks without a credential, and leaving the operator’s own entrapment protection, its photo eyes and edge sensors, completely independent of the access wiring. Gates fitted with an emergency responder opening device get that device re-tested on the same visit.

Visiting drivers are the other design question. Options include PIN codes that expire when the appointment window closes, a call station that rings the shipping office, or license-plate recognition tied to a list of approved carriers.

Ranch and acreage gates

On the acreage north and south of town, many gate keypads are telephone-entry units that dial out over a copper landline. Carriers are retiring copper service in many areas, and when the line goes, the call box goes quiet. The usual replacement is a cellular or network call station, a separate code for each person instead of one shared number, and an event log you can read from a phone.

Power and lightning decide how long the new equipment lasts. A pedestal far from the house needs either utility power with surge protection on the incoming line or solar with a battery sized to ride out a week of overcast weather. Long buried runs across open ground pick up induced surges from nearby strikes, so we protect both ends of every run and bond the protection to a real ground rather than to the gate post.

How we cut over a building that never closes

The swap is planned so no opening is down longer than it takes to move and test it.

1. Walk and test every opening. Lock, reader, door position switch, request-to-exit device, closer and latch are checked while the old system still runs. Doors that do not latch reliably are flagged, because no controller can fix a door that will not close.
2. Export what the old system will give up. Cardholder lists, card numbers and schedules where possible, plus an archive of the event history for your records.
3. Pre-build the new system. The controller, power supply and batteries are mounted beside the old panel and programmed with verified users before any door moves.
4. Move doors in small groups. Each opening is landed on the new controller, then tested with a valid badge, an invalid badge, free egress and fire alarm release where it applies, before the next one starts. Mechanical keys stay in service throughout.
5. Work around the dock. Shipping and receiving doors move outside receiving hours; the main office entry moves after close.
6. Remove the old panel last, after every door has run on the new one without trouble.
7. Hand over the keys to the system. Your company holds the master administrator account, not us, so the next tenant change or vendor change never strands the doors again.

Old defects a replacement should fix, not reconnect

A swap is the one moment when every opening is opened up and tested, and it is the cheapest time to correct what the original installer got wrong.

• Magnetic locks with no independent release. Under the model building and fire codes widely adopted in Texas, a maglock on an exit path typically needs an egress-side sensor that drops it, a push-to-exit button that cuts lock power directly for a period even if the controller fails, release on fire alarm and release on power loss. Older warehouse installs often miss at least one. We confirm specifics for your building with the local authority and correct the door rather than reconnect it as it was.
• Batteries past their life. In an unconditioned electrical room, standby batteries age quickly. A new controller on an old battery fails the first time the utility blinks.
• A controller sitting on the office network with its default password. New controllers go on their own network segment with named administrator accounts.
• One code for the whole crew. A shared keypad code cannot be revoked from one person. Individual credentials can, and the log shows whose credential was used.
• No drawings. We leave a door schedule listing every opening, its hardware, where its cable lands and how it behaves without power.

What moves the price of a Brookshire replacement

The quote follows the survey. The biggest variables:

• Whether the existing controller can be reset and kept, or has to be replaced.
• The number of openings, gates included, and how many of them pass testing as they are.
• How much existing cable is reusable versus how much must be pulled, and whether new pulls need a lift.
• How many people need new credentials, and which credential type you choose.
• Gate work: pedestals, cellular call stations, solar power, trenching and surge protection.
• The software model: a recurring cloud fee, or locally hosted software and a PC dedicated to it.
• After-hours cutover and coordination with your fire alarm contractor.

Every quote is itemized, so you can see what is reused, what is new and why. Brookshire sits next to our Katy base; call (832) 359-2425 and ask for an on-site estimate at your building.

Request an access control replacement quote in Brookshire

Related services

Frequently asked questions