When a business needs reliable, enterprise-grade on-premise access control, Kantech is consistently one of the first names that professional integrators recommend. Unlike cloud-only platforms that depend entirely on an internet connection, Kantech gives organizations full control over their access control data, hardware, and administration — with the flexibility to manage the system entirely on their own premises.
BCS Consultants is a certified Kantech integrator. We design, install, and support Kantech access control systems across Southern California, Arizona, Ohio, and Oregon. This guide explains exactly what the Kantech platform includes, who it is right for, and what a professional Kantech installation looks like.
What Is Kantech Access Control?
Kantech is a brand within the Tyco Security Products portfolio, now part of Johnson Controls. It is a hardware-and-software access control ecosystem that has been deployed in commercial buildings, healthcare facilities, government offices, and corporate campuses for more than three decades.
The Kantech platform centers on the KT-400 four-door controller — a field device that manages the readers, locks, and sensors at up to four doors and communicates back to the EntraPass software over IP. Multiple KT-400 controllers work together under a single EntraPass installation, allowing organizations to scale from a handful of doors to thousands across multiple sites.
The EntraPass Software Platform
EntraPass is Kantech's access control management software. It is the administrative hub where security managers define which credential holders can access which doors, during which time periods, and with what level of verification. EntraPass manages:
User credentials — issuing and revoking access cards, key fobs, and PIN codes for employees, contractors, and visitors. Access levels — defining exactly which doors a credential is authorized to open and during which scheduled time windows. Event logging — a complete, tamper-evident audit trail of every access event, denied entry attempt, and door alarm across every controlled door in the system. Report generation — access activity reports for security audits, HR investigations, and compliance documentation. Real-time monitoring — a live view of door status across all controlled access points, with immediate alerts for forced doors, propped doors, and access denials.
EntraPass is available in several editions scaled to site count and user volume, from single-site installations to large enterprise deployments managing hundreds of locations.
Kantech Hardware Components
KT-400 Four-Door Controller
The KT-400 is the heart of a Kantech installation. It is an IP-based access control panel that manages four doors per unit, communicates with EntraPass over the local network, and holds a local database of credentials and access rules so that doors continue to grant or deny access even if the network connection to the EntraPass server is temporarily interrupted. This onboard intelligence is a significant advantage in environments where network reliability cannot be guaranteed.
Kantech Card Readers and Keypads
Kantech offers a range of card readers and keypads compatible with multiple credential technologies. ioSmart is Kantech's smart card platform, using 13.56 MHz contactless technology for higher security than older 125 kHz proximity cards. Kantech readers are designed to work with industry-standard card formats including HID and EM, giving organizations flexibility when integrating with existing credential infrastructure or transitioning from legacy systems.
ioSmart Smart Card Technology
ioSmart is Kantech's proprietary smart card ecosystem. ioSmart cards store credential data securely using encryption, making them significantly more difficult to clone than traditional proximity cards. For organizations that are replacing an older 125 kHz card system, ioSmart provides a natural upgrade path that can be rolled out incrementally — new ioSmart readers work alongside legacy proximity readers during the transition.
Why On-Premise Access Control Still Makes Sense
Cloud-based access control platforms have clear advantages in certain scenarios — particularly for multi-site organizations that want centralized management without maintaining on-site servers. But there are compelling reasons why on-premise access control remains the right choice for a significant portion of commercial buyers.
Data sovereignty matters. Organizations in regulated industries — healthcare, government, legal, and financial services — may have specific requirements about where access data is stored and who can access it. An on-premise system keeps that data entirely within the organization's own infrastructure.
Reliability without dependency. An on-premise Kantech system continues to operate fully even if the internet goes down, because the controllers hold local credential databases and the EntraPass server runs on the local network. Cloud systems that lose internet connectivity can experience degraded functionality.
Integration with existing infrastructure. Many organizations have invested significantly in on-premise IT infrastructure, network architecture, and security policies that are designed around local systems. Kantech integrates naturally into these environments without requiring organizations to change their fundamental IT model.
Long-term total cost of ownership. Cloud access control platforms carry per-door or per-user monthly subscription fees indefinitely. An on-premise system has a higher upfront cost but no ongoing subscription — a consideration that matters for organizations planning multi-year technology budgets.
What a BCS Kantech Installation Looks Like
BCS approaches every Kantech installation through our standard design-build process. We begin with a site assessment that covers your door count, physical layout, existing network infrastructure, credential preferences, integration requirements with other systems (cameras, alarm systems, elevators, turnstiles), and your reporting and compliance needs.
From the assessment we produce a system design specifying controller placement, reader locations, locking hardware, cable routes, and EntraPass configuration. We handle hardware procurement through our authorized Kantech distribution relationship and manage the complete installation — running low-voltage cabling, mounting and wiring controllers and readers, configuring EntraPass, importing user credentials, and programming access levels and time schedules.
Before handoff, we conduct a full point-to-point test of every door in the system and deliver documentation that includes as-built drawings, EntraPass configuration records, and a user administration guide. We also provide training for your security and facilities team on day-to-day system management.
After installation, BCS provides ongoing support including service calls, EntraPass software updates, credential management assistance, and expansion as your facility grows.
Frequently Asked Questions
How many doors can a Kantech system manage?
A single KT-400 controller manages four doors. Multiple controllers connect to a single EntraPass installation over IP, allowing the system to scale to hundreds or thousands of doors across multiple buildings and sites without a practical upper limit.
Can Kantech integrate with IP cameras?
Yes. Kantech integrates with video management systems through EntraPass's video verification feature, allowing camera footage associated with a specific door to be reviewed directly from the access control interface when an event occurs at that door.
Is Kantech compatible with existing access cards we already use?
Kantech readers support multiple card formats including HID and EM proximity, as well as Kantech's own ioSmart smart cards. During the assessment phase, BCS evaluates your current credential infrastructure and advises on the most cost-effective migration path.
What happens to the access control system if the network goes down?
The KT-400 controller holds a local database of credentials and access rules. Doors continue to grant or deny access based on the locally stored data even when the network connection to the EntraPass server is unavailable. Events are logged locally and synchronized when connectivity is restored.