Knowledgebase

Expiration Rules

  • 0

Expiration Rules

keyExpiration.png
Expiration is an important means to achieve key control with CyberKeys and CyberLocks. Regular expiration and renewal reduces the exposure and subsequent risk of a lost or stolen key because an expired key will not open locks.

CyberKey expiration takes effect as soon as it ceases to be the day or date of expiration. In other words, the key will work up through 11:59pm on the day or date specified. The key will expire as soon as the clock rolls to 12:00am, since the date will have advanced. The exception to this is with a rolling expiration of minutes or hours. These will set the key to stop working at a specific hour or minute of the day.

This form enables setting expiration "rules" to enable ongoing control. In addition, a start date for the key may be set to prevent the key from working before it should.

Start Date - The "Start Date" is the day a key will begin working. By default, it is the day the key is added to the system.

Expiration Rules - CyberKey expiration takes effect as soon as it ceases to be the day or date of expiration. For most expiration rules, that means the key will work till the end of the day or date specified. The key will expire as soon as the clock rolls to 12:00am, since the date will have advanced. Expirations rules of "minutes" or "hours" will set the key to stop working at a specific hour and minute of the day.
  • Fixed Date - This rule simply sets a date after which the key will not work.
  • Extend Expiration - Another option is to have the expiration move further ahead every time the key is updated. This rule is often called a rolling expiration. Since there is no set day or date for key expiration, the key's next expiration is calculated when the key is updated at a communicator. Each time the key is updated, the time until expiration is reset to the interval specified in the input fields. Note that rolling expiration by days, weeks, or months extends the key's expiration to midnight (relative to the time zone of the communicator contacted) of the last day.
    Example: A key with a one day rolling expiration updated today at a communicator will be set to expire at the end of the day tomorrow.
    Note: A rolling expiration of minutes or hours takes priority over the time frames assigned to master keys. For example if a master key has a 24 hour rolling expiration and is updated at 10am on Wednesday, it will continue to operate until 10am on Thursday even if time frames for the master key indicate that key cannot operate on a Thursday.
  • Never Expire - This involves the least keyholder interaction but is the least secure expiration rule because a lost or stolen key can pose an ongoing threat to the system. It removes the need to regularly update the key so there will likely be no current audit trail data available for that key.
  • Fixed period expiration rules - The following rules select a specific day of the week, month, or year or the end of a quarter as the key expiration target date.
    • Day of the Week - Select this expiration rule to make the key expire on a specific day of the week. The key will function through the end of the selected day, and stop working at midnight (00:00) of the following day.
    • Monthly Expiration - Select this expiration rule to make the key expire on a specific day every month. The key will function through the end of the selected day, expiring at midnight. If the key should expire on the last day of every month, select the "End of month" option from the bottom of the pull-down menu.
    • Quarterly - If this option is selected, the date of expiration will be set to the end of every third month, beginning January 1st. Expiration dates will be 31 March, 30 June, 30 Sept., and 31 Dec.
    • Yearly - Expiration occurs at the end of the selected day.
  • Expiration Renewal Grace - This setting allows a key holder to renew their key before the key expires and CyberAudit-Web will move the expiration ahead to the next expiration day, rather than the current one. For example, if a key is set to expire weekly on Fridays, and the renewal period is set to 12PM, 1 day prior to expiration, the key can be renewed by docking it at a communicator anytime after Noon on a Friday. The key will then be set to expire the next Friday. It is set to (1) day prior because expiration occurs at 12AM midnight of the next day which is Saturday in this example.

Was this answer helpful?