An access control system can contain AC power, low-voltage DC power, Wiegand reader wiring, OSDP or RS-485 communication, monitored inputs, electric-lock outputs, Ethernet and PoE. These circuits do not share the same voltage, current or signal characteristics, so they should not be protected with one generic surge protective device.
This guide helps weak-current contractors, access control integrators, security engineers and project buyers identify the possible surge paths, select the correct SPD category and decide whether protection should be installed at the controller, the field device or both ends of the cable.
Inhaltsübersicht
Schnelle Antwort
Access control surge protection should be designed line by line. Start with the controller power supply. Then assess every conductive cable connected to readers, door contacts, request-to-exit devices, electric locks, remote controllers, network switches and outdoor access terminals.
- An AC SPD protects the mains supply path. It does not automatically protect field wiring or network ports.
- A reader-line SPD must match the interface, conductor arrangement, working voltage and current.
- A PoE SPD must support both the required Ethernet performance and the required PoE power configuration.
- Outdoor, inter-building and exposed cables may justify protection at both ends, but effective local bonding is still required.
IEC 61643-21 covers SPDs connected to telecommunications and signalling networks, including networks that provide power on the same line, such as PoE. IEC 61643-22 provides selection, location and coordination principles for these applications. [3] [4]
Which Access Control Lines Should Be Assessed?
The first engineering task is to create a circuit list. A single controlled door can have several independent conductive paths connected to the same controller.
The “Confirm before selection” column is the most important. It determines whether an SPD is electrically compatible with the connected circuit.
| Line group | Typische Ausrüstung | Confirm before selection | SPD category to assess |
|---|---|---|---|
| Controller AC supply | Control cabinet, power supply, UPS or PoE switch | System voltage, earthing system, installation position and backup protection | Low-voltage AC power SPD |
| Low-voltage DC power | Reader, keypad, lock, intercom or remote controller | Maximum operating voltage, polarity, current and conductor arrangement | DC power or combined power-and-signal SPD |
| Wiegand reader wiring | Card reader, keypad or biometric reader | D0, D1, power, common reference and auxiliary conductors | Interface-matched power and signal protection |
| OSDP or RS-485 | Reader, peripheral module or remote door controller | Bus voltage, baud rate, topology, shielding and reader power | RS-485 or signalling-network SPD |
| Monitoring inputs | Door contact, tamper switch and request-to-exit device | Dry contact or supervised input, monitoring voltage, loop current and resistance thresholds | Low-leakage control-line SPD |
| Electric-lock output | Magnetic lock, electric strike or solenoid | AC or DC, voltage, load current, switching method and cable exposure | Load-compatible power or control-circuit SPD |
| Ethernet or PoE | IP reader, biometric terminal, door station or network controller | Data rate, PoE type, power demand, powered pairs and shielding | Ethernet or PoE-compatible SPD |
Procurement conclusion: do not begin with “one 24 V access control SPD.” Begin with a circuit list and the operating parameters of every exposed interface.
How Can Surges Enter an Access Control System?
The building power supply is only one possible entry path. Conductive field wiring can also carry transient overvoltage into the controller or into a remote access terminal.
- Building AC supply: a transient can reach the control cabinet, power supply, UPS or PoE switch through the low-voltage distribution system.
- Outdoor reader cable: reader power and communication conductors can be exposed to induced or conducted transients.
- Perimeter gate or turnstile: field equipment is often connected through long cables and separate metal structures.
- Inter-building wiring: connected structures may not remain at the same electrical potential during a transient event.
- Ethernet and PoE cable: a remote IP terminal introduces a conductive data path and, in a PoE system, a power path.
- Local switching: relays, solenoids and electric locks can generate switching transients that must be distinguished from externally arriving surges.
IEC 62305-4 treats protection of electrical and electronic systems as a coordinated system problem. It addresses surge protection measures intended to reduce permanent failures caused by lightning electromagnetic impulse within structures. [5]
Do Not Judge Exposure Only by Equipment Location
An indoor controller can still be exposed through a cable connected to an outdoor reader, gate or remote building. The complete cable route, connected equipment and bonding path matter more than the controller’s indoor location.
How Should the Controller Power Supply Be Protected?
AC Input Protection
The AC supply feeding an access control cabinet should be reviewed as part of the building’s coordinated power-system surge protection design.
The selected AC SPD must match the actual system voltage and earthing arrangement. The project should also confirm SPD Type, maximum continuous operating voltage, voltage protection level, discharge-current ratings, connection mode, short-circuit conditions and required backup protection.
IEC 61643-11:2025 applies to SPDs connected to low-voltage AC power systems. IEC 61643-01:2024 provides common requirements and ratings used with the relevant product-specific parts. [1] [2]
An AC SPD Does Not Protect Every Downstream Interface
A correctly selected mains SPD limits surges entering through the AC supply. A separate assessment is still required for reader, lock, RS-485, Ethernet and PoE wiring that can introduce another surge path.
Low-Voltage DC Field Power
Readers, locks and remote peripherals commonly use low-voltage DC supplies. The exact operating range must be taken from the connected equipment documentation.
The SPD maximum continuous operating voltage must remain compatible with the highest normal circuit voltage. For a device installed in series, the permitted continuous current and series resistance must also suit the connected load.
Battery-backed supplies require additional care because the real operating voltage can be higher than the nominal label during charging. Confirm the normal voltage range, battery charging voltage and equipment tolerance before approving the SPD.
Bedeutung für Käufer: “12 V SPD” or “24 V SPD” is not a complete specification. The buyer must also identify whether the circuit carries DC power, reader data, RS-485 communication, a supervised input or a combination of functions.
How Should Card-Reader Lines Be Protected?
Wiegand, OSDP and Ethernet readers may perform a similar access-control function, but their electrical interfaces are different. The SPD must be selected for the interface rather than for the general term “card reader.”
Wiegand Reader Circuits
A Wiegand reader connection can include power, ground, D0, D1 and additional conductors for functions such as LED, buzzer, tamper or hold control. The exact wire functions vary by reader.
HID’s Signo 25B installation guide, for example, documents separate Wiegand, RS-485, supervised-input, DC-power and Ethernet connections. This demonstrates why the exact device model and wiring document must be reviewed before an SPD is selected. [7]
Confirm the reader supply voltage, maximum current, signal reference, conductor count and auxiliary functions. A protector that adds excessive loading or leaves an exposed conductor unprotected may not be suitable.
OSDP and RS-485 Readers
The Security Industry Association describes OSDP as an open communications standard used between access-control panels and peripheral devices such as readers. It offers a more capable alternative to legacy Wiegand and is commonly implemented over an RS-485 physical connection. [6]
An OSDP installation may include a communication pair, reader power, a common reference and shielding. The designer should confirm the bus topology, baud rate, cable type, grounding arrangement and whether multiple devices share the bus.
A product labelled “RS-485 SPD” is not automatically suitable for every OSDP installation. Its working voltage, protection modes, series impedance, capacitance, conductor arrangement and bonding method still require verification.
Proprietary and Multifunction Terminals
Some biometric readers, keypads, video door stations and remote controllers combine several functions in one cable or connector.
When the interface limits are not documented, request the controller and reader wiring diagrams. Sample validation may be necessary before a large project or OEM order, particularly when allowable leakage, capacitance and series resistance are unknown.
How Should Door Contacts, REX and Tamper Inputs Be Assessed?
A door contact may be described as a dry-contact device, but the connected controller can still apply a small monitoring voltage or current to identify normal, alarm, open-circuit, short-circuit or tamper conditions.
Some systems use supervised inputs and end-of-line resistance. HID’s Signo installation documentation provides one example of supervised request-to-exit and door-position inputs. [7]
Before adding a control-line SPD, confirm:
- Open-circuit monitoring voltage
- Normal loop current
- Alarm, fault and tamper thresholds
- End-of-line resistor arrangement
- Number of conductors and shared commons
- Maximum acceptable SPD leakage current
- Maximum acceptable series resistance and capacitance
An incorrectly selected SPD can change the electrical conditions seen by the controller input. Short indoor loops do not automatically require a separate SPD, while outdoor, inter-building and exposed loops require a more detailed project assessment.
How Should Electric Locks and Door Strikes Be Protected?
Electric-lock circuits can experience two different types of transient problem. They should be evaluated separately.
Surges Arriving Through the Field Cable
A cable connected to an outdoor magnetic lock, electric strike, gate or solenoid can carry an externally generated transient toward the controller.
The field-line SPD must match the circuit voltage, load current, polarity where applicable, switching arrangement and installation environment. The controller output rating and lock manufacturer’s instructions remain the final approval references.
Inductive Switching Transients
A lock or strike coil can generate a local transient when current is interrupted. Depending on the equipment, the manufacturer may specify a diode, MOV, TVS or another suppression method.
Allegion installation documents for reader-controllers and electric strikes distinguish inductive-load suppression from protection against other transient voltages. They also require the suppression method to suit the actual device and circuit. [8]
Field-Line Protection Is Not the Same as Coil Suppression
A field-line SPD limits transient overvoltage entering through the cable. A manufacturer-specified suppression component controls the switching transient generated by the lock itself. A project may require both, but neither should be presented as an automatic replacement for the other.
How Should Ethernet and PoE Access Control Devices Be Protected?
IP readers, biometric terminals, video door stations and networked controllers may use Ethernet or PoE. In a PoE system, communication and DC power share the structured cabling system.
IEC 61643-21:2025 explicitly includes telecommunications and signalling networks that provide power on the same line, such as PoE. [3]
Ethernet and PoE requirements should be checked against the applicable IEEE 802.3 edition and project documentation. IEEE 802.3-2022 is the base Ethernet standard listed by IEEE Standards Association, while later amendments may also apply to the selected equipment. [9]
A PoE SPD must satisfy both sides of the interface: Ethernet transmission and DC power delivery.
| Parameter | Warum es wichtig ist | Information to provide |
|---|---|---|
| Ethernet performance | The SPD must not reduce the link performance below the project requirement | Required Ethernet data rate and cable category |
| PoE type and power | The current-carrying path must suit the PSE and powered device | PoE type, class or maximum device demand |
| Powered pairs | The protection circuit must cover the conductor arrangement used by the system | PSE model and powered-pair arrangement |
| Shielding | Shield continuity and bonding affect the installation method | Shielded or unshielded cable and connector format |
| Mounting environment | Outdoor equipment may require a suitable enclosure and environmental protection | Indoor cabinet, gate enclosure, wall box or exposed terminal |
Procurement conclusion: an RJ45 connector alone does not prove compatibility with the required Ethernet speed, PoE power or powered-pair arrangement.
Should the SPD Be Installed at the Controller or Field Device?
The installation position cannot be decided from cable length alone. It depends on the surge path, cable exposure, equipment at each end, bonding arrangement and project risk assessment.
Protection at Both Ends Deserves Particular Consideration When:
- The reader, gate terminal, intercom or controller is installed outdoors.
- The cable connects separate buildings or separately bonded structures.
- The cable runs to a perimeter gate, guardhouse, turnstile or parking entrance.
- Sensitive electronic equipment is connected at both ends.
- The cable crosses different lightning protection or electromagnetic zones.
- The project specification or equipment manufacturer requires protection at both ends.
A Dedicated Field-Side SPD May Not Be Required When:
- The cable is short, fully indoor and remains inside one bonded zone.
- Only one end contains sensitive electronic equipment.
- The connected equipment has documented internal withstand or protection.
- The project risk assessment concludes that additional field protection is unnecessary.
IEC 61643-22 addresses selection, operation, location and coordination of SPDs for telecommunications and signalling networks. IEC 62305-4 places these devices within a wider surge protection measures system. [4] [5]
Two SPDs Still Require Effective Local Bonding
Installing an SPD at each end does not guarantee effective protection if either device lacks an appropriate bonding or earthing path. The discharge path must be reviewed together with the protected circuit.
What Installation Details Affect Protection Performance?
Place the SPD Close to the Protected Interface
The connection between the SPD and the protected port should be practical and direct. Excessive conductor length and poor routing can increase the voltage experienced by the equipment during a fast transient.
The final conductor arrangement must follow the SPD installation instructions and applicable project requirements. Do not apply one universal connection-length value to every AC, DC, signal and PoE device.
Provide a Suitable Bonding Path
The SPD needs a defined path for diverting surge current. A long, indirect or poorly connected bonding conductor can reduce the effectiveness of the protection arrangement.
For outdoor equipment or separate structures, confirm the local earthing and equipotential bonding design before approving a field-side SPD.
Separate Exposed and Protected Wiring
Avoid routing the protected output beside the unprotected incoming cable where practical. Closely parallel wiring can allow transient energy to couple back into the protected side.
Check Existing Protection
The installation may already contain an AC SPD at the distribution board, another SPD in the controller cabinet or internal protective components in the connected equipment.
Confirm the purpose and ratings of each device. Internal port protection should not be assumed to replace external protection unless the equipment documentation clearly supports that conclusion.
Which Standards and Certificates Should Buyers Verify?
The relevant document depends on the circuit being protected. One certificate should not be assumed to cover AC power, low-voltage control lines and Ethernet or PoE products at the same time.
| Protection area | Document to assess | Buyer verification |
|---|---|---|
| AC power SPD | IEC 61643-11 and the applicable national adoption or project specification | Exact model, voltage, SPD Type, protection modes, ratings and certificate scope |
| Signal, control and PoE SPD | IEC 61643-21, with IEC 61643-22 used for application guidance | Exact interface, voltage, current, transmission performance and tested model range |
| North American data circuits | UL 497B may be relevant to protectors for data communications and fire-alarm circuits | Confirm the exact product listing and category in current UL certification records |
| Ethernet and PoE interface | Applicable IEEE 802.3 edition, amendments and equipment documentation | Data rate, PoE type, class, powered pairs and maximum current |
| Access control equipment | Controller, reader, lock and network-device installation documents | Port limits, wiring arrangement, suppression method and grounding instructions |
Certificate conclusion: verify the certificate owner, exact model number, tested ratings, issue status and scope. A logo on a brochure is not enough evidence.
UL 497B is listed by UL Standards & Engagement as a standard covering protectors for data communications and fire-alarm circuits. Applicability still depends on the exact product and intended installation. [10]
For a North American project, the buyer should check the exact certification record in UL Product iQ or the relevant certification database rather than relying only on a supplier statement. [10]
Access Control SPD Selection Process
-
Draw the system architecture.
Mark the distribution board, power supply, controller, readers, locks, monitoring devices, network switch and every conductive field cable. -
Classify each circuit.
Identify AC power, DC power, Wiegand, OSDP or RS-485, supervised contact, lock output, Ethernet or PoE. -
Record the electrical limits.
Confirm maximum operating voltage, load current, signal level, data rate, conductor count, shielding and allowable line loading. -
Assess the cable route.
Check whether the cable is indoor, outdoor, inter-building, near power conductors or connected to a separate metal structure. -
Select the SPD category.
Choose an AC power SPD, DC power SPD, signalling SPD, RS-485 SPD, control-line SPD or PoE SPD according to the circuit. -
Choose the protection location.
Decide whether protection is needed at the controller, building entry, field equipment or both ends. -
Verify compatibility and documents.
Check bonding, mounting, leakage, resistance, bandwidth, PoE power, certificate scope and equipment instructions. -
Complete project approval.
Review the wiring diagram, product datasheet and sample performance before a large order or OEM release.
Typical Engineering Scenarios
Indoor Office Door
The controller and reader are inside the same building, and the field cable remains within one bonded area. Begin with the AC supply protection and cable-route assessment. A separate reader-line SPD should be decided from the equipment withstand and project risk rather than added automatically.
Outdoor Perimeter Reader
The reader is mounted outside while the controller remains indoors. Assess the reader power and communication conductors separately. Protection at the controller and near the outdoor reader may be appropriate when effective local bonding is available.
PoE Biometric Terminal at a Gate
Confirm the Ethernet data rate, PoE type, maximum power, cable shielding and outdoor enclosure. Review the PoE switch side, building entry and field terminal according to the cable route and bonding design.
Inter-Building Access Controller
Conductive wiring between structures can expose equipment to differences in electrical potential. Review every power, communication and control path together with the earthing and bonding design at both buildings.
Magnetic Lock with Supervised Door Contact
The lock output and door-contact input require different checks. The lock path must carry the load current and may require coil suppression, while the supervised input may require a low-leakage SPD that does not alter monitoring thresholds.
Common Selection and Installation Mistakes
- Protecting only the AC input. Field and network cables can create separate surge entry paths.
- Using one 24 V SPD for every circuit. A lock output, Wiegand signal and OSDP bus do not have the same requirements.
- Treating Wiegand and OSDP as identical. Their communication and conductor arrangements differ.
- Choosing an RJ45 SPD only by connector appearance. Ethernet speed, PoE power and powered pairs must also match.
- Ignoring electric-lock current. A small signal SPD may not be suitable for the lock load.
- Adding excessive leakage to a supervised input. The SPD may affect normal, alarm or fault detection.
- Confusing coil suppression with field-line surge protection.
- Installing two SPDs without suitable local bonding.
- Routing protected and unprotected wiring together.
- Accepting a certificate without checking the exact model and rating scope.
Before Ordering Access Control SPDs
Send the following information to the supplier. A system diagram and circuit data are more useful than a controller photograph or a request for a generic access control surge protector.
Systemarchitektur
- Controller and peripheral models
- Number and type of doors
- Indoor or outdoor equipment
- Same-building or inter-building wiring
- Cable route and approximate length
Power Parameters
- AC oder DC
- Nominal and maximum voltage
- Maximum continuous or load current
- Earthing arrangement
- Battery-backed or non-backed supply
Reader and Communication
- Wiegand, OSDP, RS-485 or Ethernet
- Reader supply voltage
- Conductor count and wire functions
- Baud rate or Ethernet data rate
- Shielded or unshielded cable
Lock and Monitoring Circuits
- Lock type and operating current
- AC or DC lock output
- Dry-contact or supervised input
- End-of-line resistor arrangement
- Manufacturer suppression requirement
PoE Details
- PoE type or class
- PSE and powered-device models
- Maximum device power
- Required data rate
- Cable category and shielding
Procurement Requirements
- DIN-rail, panel or inline mounting
- Erforderlicher Standard oder Zertifikat
- Quantity
- OEM label and packaging
- Datasheet and sample approval needs
How LEEYEE Reviews an Access Control SPD Configuration
An access control project should be reviewed circuit by circuit. LEEYEE does not treat one generic product name as proof that every interface is compatible.
1. Circuit Identification
Separate the AC, DC, reader, monitored-input, lock, serial communication and PoE paths.
2. Parameter Matching
Compare working voltage, current, data performance, wiring mode and installation position.
3. Document Verification
Check the exact product datasheet, wiring instructions and model-specific certificate scope where required.
4. Sample Approval
Use sample or interface verification when a proprietary device or undocumented port creates uncertainty.
Project boundary: the final model cannot be selected from this article alone. The controller, reader, lock, network and site parameters must be confirmed for the actual project.
Need an Access Control SPD Configuration Review?
Share the controller voltage, reader interface, lock current, monitoring-input arrangement, PoE requirement, cable route and proposed installation positions. LEEYEE can review the required SPD categories for an OEM order or project configuration.
LEEYEE is a specialized surge protection and low-voltage protection supplier. CNSPD is LEEYEE’s surge-protection-focused platform for global technical buyers.
Häufig gestellte Fragen
Does every access control system need an SPD on every line?
No. The requirement depends on the cable route, exposure, connected equipment, internal withstand, existing protection and project risk. Every conductive path should still be assessed.
Does a card-reader cable need surge protection?
Protection is more likely to be required for outdoor, inter-building or exposed reader cables. The final decision should consider the interface, equipment withstand, cable route and bonding arrangement.
Can the same SPD protect Wiegand and OSDP readers?
Only when the documented working voltage, conductor arrangement, series impedance, capacitance and protection modes suit both interfaces. Compatibility should not be assumed.
Does an OSDP reader use an RS-485 SPD?
OSDP commonly uses an RS-485 physical connection, but the SPD must still match the actual bus voltage, baud rate, topology, grounding arrangement and reader power conductors.
Can a dry-contact input use any signal SPD?
No. The controller may apply a supervision voltage or monitor resistance thresholds. SPD leakage, series resistance and capacitance must not interfere with normal, alarm, open-circuit or tamper detection.
Does a magnetic lock need surge protection?
An exposed lock cable may require field-line surge protection. The lock may also require manufacturer-specified inductive-load suppression. These are separate functions.
Does a PoE access reader need an RJ45 SPD?
Protection deserves particular consideration for outdoor, inter-building or exposed cabling. The SPD must support the required Ethernet speed, PoE power, powered pairs and shielding arrangement.
Should an outdoor reader be protected at both ends?
Protection at both ends may be appropriate when sensitive electronics are connected at both ends of an exposed cable. The decision must also consider local bonding, protection zones, equipment instructions and project risk.
What information is required for an OEM access control SPD order?
Provide the system diagram, circuit voltage, maximum current, reader interface, monitoring method, Ethernet or PoE requirement, conductor count, cable route, installation position, required certification and quantity.
Referenzen
- International Electrotechnical Commission, IEC 61643-01:2024, Low-voltage surge protective devices — Part 01: General requirements. Offizielle IEC-Veröffentlichungsseite.
- International Electrotechnical Commission, IEC 61643-11:2025, Low-voltage surge protective devices — Part 11: Surge protective devices connected to low-voltage AC power systems — Requirements and test methods. Offizielle IEC-Veröffentlichungsseite.
- International Electrotechnical Commission, IEC 61643-21:2025, Surge protective devices connected to telecommunications and signalling networks — Performance requirements and test methods. Offizielle IEC-Veröffentlichungsseite.
- International Electrotechnical Commission, IEC 61643-22:2015, Low-voltage surge protective devices — Part 22: Surge protective devices connected to telecommunications and signalling networks — Selection and application principles. Offizielle IEC-Veröffentlichungsseite.
- International Electrotechnical Commission, IEC 62305-4:2024, Protection against lightning — Part 4: Electrical and electronic systems within structures. Offizielle IEC-Veröffentlichungsseite.
- Security Industry Association, Open Supervised Device Protocol (OSDP) und OSDP vs. Wiegand. Official SIA OSDP page; official comparison page.
- HID Global, HID Signo 25B Biometric Reader/Controller Installation Guide, including documented Wiegand, RS-485, supervised-input, DC-power and Ethernet connections. Official HID installation guide.
- Allegion, ISONAS Pure IP Reader-Controller Installation and Wiring Guide and Von Duprin 6400 Electric Strike Installation Instructions, including manufacturer guidance on inductive-load suppression. Official reader-controller guide; official electric-strike instructions.
- IEEE Standards Association, IEEE 802.3-2022, IEEE Standard for Ethernet. Official IEEE standard page.
- UL Standards & Engagement, UL 497B, Protectors for Data Communications and Fire-Alarm Circuits, and UL Solutions Product iQ certification database. Official UL standard page; UL Product iQ.
