Note: The screenshots in this guide are from an Apple device.
After you install the application, open it and sign in with your Reader Technician account.
If you don't have a Reader Technician account, there's a link to Register a new account within the HID Reader Manager app, under the sign-in form.
Now that you're signed in, you'll need to obtain your Administration (MOB) keys. Proceed to the next section to find out how.
Authorizing MOB keys for use on your reader
Before you can start reading AccessGrid credentials, you'll need to have your Reader Technician account authorized to use your MOB keys. An administrator in the HID Origo portal will need to share the key(s) with the email address associated with your Reader Technician account.
When you receive an invitation to manage readers with HID MOB keys, you'll receive an email with the following information:
Your user name
Organization name (that invited you)
Invitation Code
The Invitation Code is particularly important. You'll need to take note of it. To accept the invitation, you'll need to follow these instructions:
Sign in to the HID Reader Manager app on your mobile device
ClickSettings (usually toward the bottom-right)
Under Administration Keys, click Enter Invitation Code
Type (or paste) the invitation code from the invitation email
ClickRegister Device
After registering your device with the invitation code, you can find your authorized MOB keys by clicking Show Authorized Keys under the Administration Keys section in the app Settings.
After you've confirmed access to your MOB keys, you can move on to configuring your reader.
Configuring the HID Signo reader
Before we can configure the reader, we need to power it on. Go ahead and do this if you haven't done so yet. After the reader is powered on, on the HID Reader Manager app, sign in, and tapScan for Readers.
You should see an HID Reader listed on the screen, along with the signal strength. If you don't see any readers listed, please ensure that Bluetooth is enabled on your mobile device.
Tap the reader that you'd like to configure. A modal window will pop up, asking you what you'd like to do. TapInspect.
It may take a few moments to load the configurations. After it's loaded, you'll see an Inspection Report with information such as the model, UUID, friendly name, and more.
We recommend upgrading the reader's firmware if the HID Reader Manager app offers it. The upgrade is as simple as tappingUpgrade Firmware and following the instructions.
You'll want to scroll down until you see Detailed Configuration. Tap it (under the Software Configuration section).
It may take a few more moments to load the configurations. From here there are two items that we'll need to configure: Keys & ECP Configuration.
To configure your keys:
TapKeys (under Credential Details)
TapAdd Keys
Tap the MOB key you'd like to add to the reader
TapAdd to the template
After you've added your MOB key, navigate back to the Inspection Report by tapping the left arrow in the top-left corner. Now, we need to handle the ECP Configuration.
TapECP Configuration (under Wallet Settings)
Ensure ECP is toggled on
Ensure there's a TCI value (it comes from the MOB key)
Ensure Enforce TRA is toggled on or off (your preference)
TapAdd to the template
TRA stands for Terminal Requested Authentication. When Enforce TRA is enabled, the end user will be required to authenticate on their device (Face ID, Touch ID or passcode) when tapping their credential.
Now that you've configured your Keys and ECP Configuration, all that's left to do is tapApply Selected Items at the bottom of the Inspection Report.
You'll receive a notice once the settings have been applied. Now we can issue a credential and try it out.
Issuing a credential
In order to test our setup, we need Apple credentials. As noted in the Overview, you should already have an HID-enabled card template. You'll need the API Card Template ID.
To find this in the Console UI, navigate to edit your card template, then click Settings:
You'll need the value under "Card Template ID" to provision your NFC key.
Now that you're set up, go ahead and issue an NFC key. Here's a sample using our Python library:
fromaccessgridimportAccessGrid# get these from your access grid account
account_id="[placeholder]"secret_key="[placeholder]"card_template_id="[placeholder]"client=AccessGrid(account_id,secret_key)card=client.access_cards.provision(card_template_id=card_template_id,employee_id="101010101",card_number="42169",site_code="199",full_name="Jose Casanova",email="[email protected]",phone_number="+17867212241",classification="Employee",title="CEO",start_date="2026-08-17T22:46:25.601Z",expiration_date="2027-08-17T22:46:25.601Z")print(card.id)print(card.url)print(card.site_code)print(card.card_number)
Don't forget to add the site code and card number to your ACS.
Note that we set the card number and site code to arbitrary integer values. If you'd like to encode different information than a site code and card number, you can use our file_data parameter.
Download the pass using the link output from the script above. Each pass will transmit a compatible card number to the HID Signo reader when tapped.
Summary of learnings
Congrats! You did it! By following this guide, you've configured your HID Signo reader to read Apple Wallet credentials issued through AccessGrid. Along the way you: installed the HID Reader Manager app, updated the reader's firmware (if prompted), and configured the reader with your AccessGrid-specific settings (MOB key, TRA and more) so that every Apple Wallet pass transmits a compatible card number the moment it's tapped.
If you run into any trouble at all, please don't hesitate to reach out via the chat in the bottom right or email me at [email protected].
