Hikvision Access Control: The Complete UK Installer Guide
Hikvision access control is a complete door-entry ecosystem — standalone fingerprint and MinMoe face terminals, networked Pro and Ultra Series controllers, OSDP card readers, secure door control units, locks and exit hardware — all managed from free iVMS-4200, Hik-Connect or HikCentral software. This guide is written for UK installers: it explains what to fit on a single door versus a 125-door campus, how to wire and secure readers, how to stay the right side of BS 7273-4 on escape routes, and which Hikvision parts Netview holds in stock for same-day dispatch.
What this guide covers
- How the Hikvision access control range is structured: standalone terminals vs networked controllers.
- Pro Series (DS-K2601T / DS-K2602T / DS-K2604T) and Ultra Series (DS-K2701X) controllers compared.
- MinMoe face recognition, fingerprint terminals and which card technology to specify.
- Why OSDP beats Wiegand, and how a secure door control unit protects the lock.
- Escape-door compliance (BS 7273-4), biometric data and UK GDPR, plus a wiring quick-reference.
- Three worked door designs and the exact in-stock Hikvision parts to order.
Published 15 June 2026 · Last updated 15 June 2026 · By Netview — Hikvision UK authorised wholesaler, Leicester.
What is Hikvision access control?
Hikvision access control is a family of readers, terminals, controllers and door hardware that decides who may open which door, when, and keeps an audit trail of every event. There are two architectures. A standalone terminal makes the access decision on the device itself — ideal for one or two doors with no PC. A networked controller sits in a secure cupboard, takes readers on each side of one or more doors, and is administered centrally for schedules, anti-passback and reporting. Everything shares the same credentials (cards, fobs, PINs, fingerprints or faces) and the same free management software, so you can start standalone and grow into a managed system without ripping anything out.
Standalone terminal or networked controller — which to fit?
Fit a standalone terminal for one or two doors where the customer wants simplicity, and a networked controller wherever you need central administration, more doors, or readers on both sides of a door. A standalone unit such as the DS-K1T804BMF combines reader, keypad and controller in one wall plate and stores 3,000 fingerprints, 3,000 cards and 100,000 events on board (Hikvision DS-K1T804BMF datasheet). The weatherproof DS-K1T805MBFWX does the same job to IP65 and IK08 outdoors, with 3,000 fingerprints, 10,000 cards and 100,000 events, Wi-Fi, RS-485 with OSDP and Wiegand (Hikvision DS-K1T805MBFWX). When the door count or admin burden grows, move to a Pro or Ultra controller.
Hikvision Pro Series controllers (DS-K2601T / DS-K2602T / DS-K2604T)
The Pro Series gives you networked one-, two- and four-door control with serious capacity in a single box. The DS-K2602T communicates over TCP/IP and RS-485, accepts Hikvision RS-485 readers or third-party Wiegand (W26/W34) readers, and stores up to 100,000 cards (expandable to 200,000) and 300,000 events (expandable to 600,000). It supports multi-door interlocking, anti-passback, multi-card, first-person and super-card/super-password rules, and uploads tamper, forced-entry, unsecured-door and duress alarms (Hikvision DS-K2602T). Scale the door count with the matching DS-K2601T (single door) or DS-K2604T (four door). Power is a wide-range 100–240 VAC supply drawing up to 100 W under full load.
| Tier | Doors | Cards / events | Reader bus | Best for |
|---|---|---|---|---|
| Standalone DS-K1T804BMF / DS-K1T805MBFWX | 1–2 | Up to 10,000 / 100,000 | On-board + Wiegand/RS-485 | Single doors, no PC, fast fit |
| Pro Series DS-K2601T / 2602T / 2604T | 1 / 2 / 4 | 100,000 (→200,000) / 300,000 (→600,000) | RS-485 + Wiegand W26/34 | Offices, blocks, light commercial |
| Ultra Series DS-K2701X | 1, expandable to 125 | 200,000 cards / 600,000 events | RS-485 OSDP + Wiegand | Campuses, multi-building estates |
Hikvision Ultra Series controllers (DS-K2701X)
The Ultra Series is the controller you specify when one box must grow into a whole estate. The DS-K2701X runs Linux, has a Gigabit network port, and controls one door out of the box but expands to 125 doors when paired with access modules. It stores 100,000 users, 10,000 fingerprints, 200,000 cards and 600,000 events, and — crucially — supports RS-485 card readers over the encrypted OSDP protocol as well as legacy Wiegand 26/34 (Hikvision DS-K2701X). The DS-K2701X(P) main-board variant suits panel and enclosure builds. For multi-tenant or high-security sites, OSDP end-to-end is the reason to choose Ultra over Pro.
MinMoe face recognition terminals — how they work
Hikvision MinMoe terminals use a deep-learning algorithm to match a face in under 0.2 seconds with better than 99% accuracy, and enrol a new user from a single photo in under three seconds (Hikvision MinMoe newsroom). Each terminal carries a visible-light lens and an infrared lens and only grants access when both detect the same live person, which is how the anti-spoofing defeats a photo held up to the reader, and why it still works in low or zero light. MinMoe units accept face, card, PIN and fingerprint, so you can mix credential types on one door. The 10.1-inch DS-K5604A-3XF/V adds temperature screening for sites that still want it. Note the data-protection duties below before you specify face recognition for staff access.
Card readers and credentials — Mifare, DESFire EV2 and OSDP
Specify the reader by the card technology and the bus security you need, not just the bezel. Hikvision's vandal-resistant DS-K1104M and keypad version DS-K1104MK read Mifare, as do the slim DS-K1108AM and keypad DS-K1108AMK. For higher-security credentials, the DS-K1108AD and DS-K1108ADK add DESFire and Felica support, and the DS-K1107MK pairs Mifare with a keypad for two-factor. Where you need a card plus fingerprint on one indoor reader, fit the DS-K1201AMF. For credentials, stock DS-K7M102-M smart tags for fobs and DS-K7M106-D0E DESFire EV2 cards for the secure end.
The bus matters as much as the card. Wiegand is a 40-year-old wiring standard that sends credential data unencrypted, which is why it can be sniffed or replayed; OSDP (adopted by the Security Industry Association) runs over RS-485, adds Secure Channel encryption and is bidirectional, so the reader and controller authenticate each other (asmag: OSDP & DESFire). Pair OSDP with MIFARE DESFire EV2/EV3 cards — which use AES-128 mutual authentication — and the credential is protected on the card, over the air, and along the cable. On new high-security jobs, default to OSDP and DESFire; on retrofits, OSDP over the existing RS-485 is the upgrade path.
| Reader bus / card | Encrypted? | Wiring | Use it for |
|---|---|---|---|
| Wiegand (W26/W34) | No | Multi-core, short runs | Legacy compatibility only |
| OSDP (RS-485, Secure Channel) | Yes (AES-128) | 2-pair, long runs, multidrop | New & high-security doors |
| Mifare Classic card | Weak | — | Low-risk internal doors |
| DESFire EV2 / EV3 card | Strong (AES-128) | — | Staff ID, multi-site, payments |
The secure side — why you need a secure door control unit
On any door that matters, the device that actually releases the lock should live on the secure (inside) side, not in the reader on the outside wall. The DS-K2M060 Secure Door Control Unit is the interlayer between the terminal and the lock: it talks to the access terminal over RS-485, collects the door-contact, exit-button and tamper signals, and switches the lock relay (Hikvision DS-K2M060 datasheet). Because the relay sits inside, prising the outdoor reader off the wall cannot pop the door. The newer DS-K2M061 Secure Door Control Module does the same in a DIN-friendly form. On standalone terminals fitted outdoors, a secure door control unit is the single most important upgrade you can make.
Locks, exit devices and request-to-exit
Choose the lock by how the door must behave when power fails. A magnetic lock such as the DS-K4H250D double-door maglock (fitted with the DS-K4H250-LZ LZ bracket on inward doors) is fail-safe — it needs current to stay locked, so it releases on power loss, which is what you want on most escape routes. For a controlled exit, fit a request-to-exit button: the touch-free DS-K7P03 aluminium plate or the brushed-steel DS-K7P06. On any final exit door, add a green emergency break-glass such as the DS-K7PEB so anyone can break the maglock circuit by hand. To enrol credentials cleanly at the desk rather than at the door, keep a DS-K1F820-F fingerprint enrolment station or the DS-K1F600U-D6E-F face enrolment station on the admin PC.
Escape doors and BS 7273-4 — the compliance you must get right
If an electrically locked door is on an escape route, its release is governed by BS 7273-4, and getting it wrong is a life-safety failure, not a snag. The current code of practice, BS 7273-4:2015+A2:2023, covers the actuation of release mechanisms for escape doors and now refers directly to BS EN 13637 for electrically controlled exit systems on escape routes (IFSEC Insider). In practice that means the fire alarm must provide a clear, monitored signal to the access control system to release doors on alarm activation or power failure, the maglock must be fail-safe, and a green break-glass must allow manual release. Magnetic locks are not banned — they are compliant when fitted so they release safely on fire alarm or power loss (FIA: BS 7273-4 explained). Always wire the fire-alarm relay into the maglock circuit and prove the release on commissioning.
Biometrics and UK GDPR — what installers must flag
Face and fingerprint templates used to identify people are special category data under UK GDPR, so a face- or fingerprint-based door needs more than a wiring diagram. The ICO treats most biometric recognition as high-risk processing that requires a Data Protection Impact Assessment, a lawful basis plus an Article 9 condition (explicit consent is usually the most appropriate), and a genuine alternative — a card or PIN — for anyone who does not want to give a biometric (ICO biometric data guidance). The good news for installers: Hikvision terminals store the template on the on-premise device or controller and encrypt user data, which supports a privacy-by-design argument. Advise the customer to run a DPIA, restrict who can export data, and delete templates when staff leave — and offer the card-plus-PIN route as the fallback.
Software — iVMS-4200, Hik-Connect and HikCentral
You can manage Hikvision access control free of charge with the same software that runs the cameras. The Windows client iVMS-4200 configures doors, schedules, anti-passback and time-and-attendance, and exports event and attendance reports at no licence cost (Hikvision software downloads). For remote door unlock and customer self-service on a phone, hand over with Hik-Connect. When a site outgrows a single PC, HikCentral Professional unifies access, video and intercom across multiple servers, and HikCentral Lite bridges the gap. If the same door also needs a camera and a video intercom, the access controller drops straight into the wider Hikvision platform — see our TalkVu video intercom guide and NVR buyer's guide for the recording side.
Wiring, power and topology quick reference
Get the cable schedule right at survey and the install is half done. Run readers back to the controller on shielded twisted pair for RS-485/OSDP, keep the lock relay on the secure side, power the maglock from a monitored supply with battery back-up, and never share the lock supply with the controller logic supply. Mount the request-to-exit and break-glass on the safe side of the door at the right height, and label every core. The summary below is the order of work the workflow image above follows.
- Survey the door: fire-escape status, in/out swing, fail-safe vs fail-secure, wall material.
- Reader bus: OSDP over RS-485 for new work; keep Wiegand only for legacy.
- Secure side: lock relay and DS-K2M060/K2M061 inside, never in the outdoor reader.
- Escape release: fire-alarm relay into the maglock circuit + green break-glass, proven at commissioning.
Choosing the right Hikvision access kit — three worked doors
Match the tier to the door, not the other way round. For a single internal office door, a DS-K1T804BMF standalone terminal, a fail-secure strike or a maglock with DS-K7P03 exit and a handful of Mifare fobs is a clean, low-cost fit. For a small commercial unit with two or three doors, a DS-K2602T Pro controller with DS-K1108AMK readers, maglocks and break-glass, managed in iVMS-4200, gives you anti-passback and a proper audit trail. For a multi-building site, a DS-K2701X Ultra controller with OSDP readers, DESFire EV2 cards, secure-side control units and HikCentral scales to 125 doors without re-platforming. Every part listed here is held in stock at Netview — call the trade desk on 01163 800 838 to spec a door.
Frequently asked questions
Do I need a PC to run Hikvision access control?
No. A standalone terminal such as the DS-K1T804BMF or DS-K1T805MBFWX makes the access decision and stores users and events on the device, configured on the unit or in the Hik-Connect app. You only need a PC with iVMS-4200 when you want central administration across several doors.
What is the difference between the Pro and Ultra controllers?
The Pro Series (DS-K2601T/2602T/2604T) controls one, two or four doors with 100,000 cards and 300,000 events, over RS-485 and Wiegand. The Ultra Series DS-K2701X runs Linux, holds 200,000 cards and 600,000 events, supports encrypted OSDP readers, and expands from one door to 125 with access modules — choose it for large or high-security estates.
Is OSDP really better than Wiegand?
Yes, for security. Wiegand sends credential data unencrypted over a short multi-core run, while OSDP runs over RS-485 with Secure Channel encryption and bidirectional supervision, so readers and controllers authenticate each other. Default to OSDP on new and high-security doors; keep Wiegand only where you must match legacy hardware.
Can I fit a Hikvision maglock on a fire-escape door?
Yes, when it is installed to release safely. Magnetic locks are fail-safe and release on power loss, and under BS 7273-4 the fire alarm must give a clear, monitored signal to release the door, backed by a green emergency break-glass for manual release. Wire the fire-alarm relay into the maglock circuit and prove the release at commissioning.
Do I need consent for face recognition access control?
Usually, yes. Face templates are special category data under UK GDPR, so the site operator should run a DPIA, identify an Article 9 condition (commonly explicit consent), and offer a card or PIN alternative. Hikvision terminals keep templates on-premise and encrypted, which helps, but the legal duty sits with the data controller, so flag it to the customer in writing.
How many fingerprints and cards can a standalone terminal hold?
The DS-K1T804BMF holds 3,000 fingerprints, 3,000 cards and 100,000 events; the weatherproof DS-K1T805MBFWX holds 3,000 fingerprints, 10,000 cards and 100,000 events. For larger user populations, move to a Pro or Ultra controller, which scale into the hundreds of thousands.
What is a secure door control unit and do I need one?
It is a module such as the DS-K2M060 that sits on the secure side of the door and switches the lock, so the relay is never exposed in the outdoor reader. It collects the door-contact, exit-button and tamper signals over RS-485. Fit one on any outdoor or higher-security door to stop the lock being released by attacking the reader.
Can Hikvision access control integrate with cameras and intercoms?
Yes. Access events can be linked to NVR recording and managed alongside cameras and TalkVu video intercoms in iVMS-4200 or HikCentral, so a door-forced or door-held event can pull up the matching footage. See our TalkVu and NVR guides for the video side.
Spec a Hikvision access control door with Netview
Controllers, MinMoe terminals, OSDP readers, secure door units, maglocks and credentials — held in stock for same-day dispatch. As a Hikvision UK authorised wholesaler in Leicester, we'll help you pick the right tier for every door.
Call the trade desk on 01163 800 838 or browse the full brands we stock.
Related guides
- Hikvision ANPR Cameras: 2026 UK Installer Guide — vehicle access control and barrier triggering.
- Ajax Keypad Comparison: KeyPad, Plus, TouchScreen & Outdoor — wireless arming keypads alongside access.
- Hikvision AX PRO Wireless Alarm System — integrating intruder detection with door control.
- Hikvision NVR Buyer's Guide 2026 — recording and linking access events to video.
- Hikvision TalkVu Video Intercom Guide — door entry with audio and video at the door.
About the Author
