Secure Access Module (SAM)

What's a SAM?

A Secure Access Module (SAM) is a memory module that stores encryption keys and handles encrypted communication with project cards. In comparison with the reader's microcontroller, a SAM provides better protection for the keys.

A SAM is either inserted as a SIM card or built into the reader.

Most frequently used SAMs

HID SE Processor

An HID SE Processor (also known ass "iClass SAM") is required to access the memory of the following card types and read a PCN (programmed card number):

  • HID iClass SE
  • HID iClass SR
  • HID iClass Seos

Without an HID SE Processor, you can only read the card's UID (serial number).

NXP MIFARE SAM AVx

NXP MIFARE SAM AVx can optionally be used with the following card types:

  • MIFARE DESFire
  • MIFARE Plus

Here, NXP MIFARE SAM AVx provide better protection for the encryption keys. It's also possible to force the host to authenticate against the SAM. If you want to implement this host authentication, please order a custom configuration.

Compatible reader hardware

All BALTECH reader types are optionally available with a SAM slot to insert a SAM in the form of a SIM card. Potted ACCESS2xx readers can also be ordered with a pre-installed SAM. For more details, please get in touch.

Insert a SAM

ID-engine ZM/ZB/XE:

  1. Insert the SAM into the reader with contacts facing down and the notch facing out.

    If you have an ID-engine ZM, make sure the reader's larger side (where you can see the antenna) is facing up.

  2. Use the edge of a coin or a flat-bladed screwdriver to push the SAM completely into the slot.

How to insert a secure access module (SAM) into a BALTECH ID-engine ZB/XE    How to insert a secure access module (SAM) into a BALTECH ID-engine ZM

ACCESS2xx:

  1. If the housing is closed, open it.
  2. Position the front part of the reader so its inside is facing towards you and the pins for the Molex connector are in the bottom left.
  3. The SAM slot is in the top right.
  4. Insert the SAM with contacts facing down and the notch facing left.

How to insert a secure access module (SAM) into a BALTECH ACCESS2xx

Remove a SAM

Grasp the SAM with a pair of tweezers and pull firmly.

Command set

To interact with a SAM from your host application, please use our command set Iso78call_made.