Skip to main content

Zone Touch terminal

How to connect the Zone Touch terminal, add it to All Hours, fix common issues and which network connections it needs

Written by Marko Klopčič

Zone Touch is a time clock terminal that you connect to the internet with a network cable and to your All Hours account with its MAC address.

Connecting the terminal

1. Connect the terminal to a switch or router with a network cable. If your switch does not provide PoE, use a PoE injector. Make sure the network is connected to the internet.

Zone Touch - Cable connection

Adding the terminal in All Hours

2. In All Hours, go to Settings › Clocking points and select an existing clocking point or add a new one.

3. In the clocking point, click Add › Add Time clock and select Spica Zone Touch. In the MAC Address field, enter the MAC address from the label on the device or on its packaging. Enter the characters in pairs separated by a colon (e.g. c4:f4:64:11:13:8d). If necessary, change the name, time zone and language, then click Save.

Checking the connection

4. When the terminal is connected, the Status column shows online. Use Update Clock to update the date and time on the terminal according to the time zone setting. You can also edit or delete the terminal.

The terminal is now ready for use. To test it, select Arrival on the terminal, hold your card to it and check in All Hours that the clocking was recorded correctly.

For advanced settings, see the guide »Zone Touch All Hours and Simple Access Control« on the Spica partner portal.

Troubleshooting

Below are the procedures for resolving the most common terminal issues.

Updating the time and date

After a power failure or a loss of internet connection, the time and date on the terminal may freeze, or the terminal may be shown as offline in the Status column. In that case, force an update of the terminal in the web application:

1. Go to Settings › Clocking points and select the clocking point with the terminal.

2. Hover over the terminal and click the first icon on the right, Update Clock.

The date and time on the terminal are updated according to the time zone setting.

Restarting the terminal

To restart the Zone Touch terminal manually:

  1. Hold your finger on the screen for 10 seconds.

  2. On the keypad that opens, enter the PIN 1337.

  3. In the list, select Settings.

  4. In the Device Info section, select Reboot device.

Before restarting, we recommend checking that the terminal has the correct IP address and running the connectivity test.

Network requirements

All Hours uses Door Cloud cloud services to communicate with the terminals. For the terminal to work correctly, the following connections must be allowed in your firewall.

Required connections

  • DNS (UDP port 53)

    • By default, it uses a public server (8.8.8.8), but you can configure your own.

  • NTP (UDP port 123)

    • By default, it uses a public server (pool.ntp.org), but you can configure your own.

  • MQTT (TCP port 8883)

    • iot.doorcloud.com:8883

    • a2whd8kw6y0n86.iot.eu-central-1.amazonaws.com:8883

  • HTTPS (TCP port 443)

    • inward.s3.eu-central-1.amazonaws.com:443

    • doorcloudfirmwares.s3.eu-central-1.amazonaws.com:443

    • api.doorcloud.com

💡 Allow both MQTT addresses. Terminals with newer firmware use iot.doorcloud.com, while the other address is still used by older versions and as a backup connection.

Connectivity test

You can check connectivity on the terminal (Settings › Connection info › Test connectivity) or in the ZAP portal (Maintenance › Cloud Connectivity). If the connections above are allowed in your firewall, the terminal works regardless of the test result.

  • Application – checks whether the Zone Touch application is communicating with All Hours/Door Cloud.

  • Gateway – sends an ICMP ping to the configured gateway to check that the terminal can communicate on the local network.

  • WAN – sends an ICMP ping to a server outside the local network to check internet access.

  • DNS – sends an ICMP ping to the configured DNS server.

  • NTP – sends a query to the configured NTP server. An accurate clock is required for a secure connection.

  • HTTPS – checks that the terminal can make HTTPS requests to the internet.

  • Door Cloud API – checks that the Door Cloud API is reachable.

  • MQTT broker – sends an ICMP ping to the MQTT broker used by Door Cloud.

  • TCP port 8883 – opens a TCP connection on port 8883 to check that the port is open.

In addition to the connections above, the test also checks whether these addresses are reachable: 4.2.2.2, 208.67.222.222, 8.8.8.8, www.spica.com, aws.amazon.com, www.microsoft.com, www.google.com, api.doorcloud.com, s3.eu-central-1.amazonaws.com, portquiz.net and zoneiot.westeurope.cloudapp.azure.com. These are part of the general internet infrastructure or our services. The terminal does not read any data from them, it only checks whether they are reachable.

ZAP portal (Zone Administration Portal)

The ZAP portal is a web interface built into the Zone Touch terminal. In it, you can manage the terminal's network settings (IP address, DNS, NTP) and card reader settings, and run a connectivity test.

⚠️ The computer you use to access the portal must be on the same network as the terminal. Access from home or remotely is not possible.

Terminal IP address

You can see the terminal's IP address in the terminal settings, under Settings › Network. How to open the terminal settings is described in the Restarting the terminal section. If no IP address is set, select Static IP and manually enter a free IP address on your network.

Signing in to the portal

1. Enter the terminal's IP address in your browser. If the terminal uses a dynamic IP address (DHCP), you can also enter its host name http://zoneABCDEF, where ABCDEF are the last 6 characters of the MAC address on the terminal label (e.g. C4:F4:64:01:AA:5F → http://zone01AA5F). Press Enter.

2. The browser shows a warning that the connection is not private. This is expected, because the ZAP portal does not use a certificate from a third-party authority. Click Advanced and then Proceed to … (unsafe).

3. Enter the user name and password for the ZAP portal and click Sign in.

Username: user

Password: 123

Under Device Settings › Networking, set the IP address (automatic or static) and the DNS and NTP servers. Confirm the changes with Apply, Reconfigure DNS settings or Reconfigure NTP settings. Ask your network administrator for the correct settings.

Reading Mifare cards (CSN)

If the terminal does not read Mifare cards, card serial number (CSN) reading may be disabled. Go to Device Settings (1) › Credential Configuration (2) and click Enable CSN reading (3). Wait a few minutes, restart the terminal and hold a card to it. The terminal should read the card and display its number.

Did this answer your question?