RFID Card Data File Format

Each RFID card is represented by a separate RFID card data file in the centralized card database. This approach prevents network access conflicts and ensures high reliability and scalability.

Administrators can create or modify RFID card data files manually or by using scripts for bulk import. The file format described on this page is provided for that purpose.

File Naming

Filename is card ID:
- For card IDs ≤ 64 bits: use the unsigned integer value (decimal).
- For card IDs > 64 bits: use the card ID in uppercase hexadecimal (HEX).
No file extension.

Examples

1234567890  
A3F4B2C1D0E9F0012345

File Encoding and Structure

Text file encoded as UTF-8 with BOM
Line separator: \n (LF)

File Contents

First line: Card name (optional). Leave the line empty if not used.
Following lines: One or more security principals that this card can unlock. Each principal in a separate line.

If the file contains only the first line (card name), including an empty line, and no principals, the card will unlock all user sessions on all computers.

You can add multiple principals — the card unlocks the session if any listed principal matches. For example, adding both a user and a computer allows the card to unlock:

Any session of that user on any computer, and
Any user session on that specific computer.

Security Principal Formats

Security principals can be specified in one of the following formats:

`sid:<PrincipalSID>`

Example

sid:S-1-5-32-544

Using SIDs is recommended in Active Directory environments to avoid issues if a user, group, or computer is renamed.

`user:<UserName>`

Examples

user:Contoso\JohnSmith
user:.\john
user:john

`group:<GroupName>`

Examples

group:Contoso\Domain Users
group:.\Sunday Workers
group:Administrators

`computer:<ComputerName>`

Example

computer:WORKSTATION-01

Use the plain NetBIOS computer name.