How to configure an STid Architect reader on a Windows device for Apple Wallet

July 6, 2026
Auston Bunsen
Auston Bunsen

Overview

We are going to show you how to configure an STid Architect reader to read AccessGrid issued credentials on Apple Wallet.

In this set up, you'll need a few key components to set everything up: 

  • STid Architect reader
  • Windows Machine with a USB slot
  • Internet connection
  • USB to RS485 cable

Note: In this guide, we're using a standard STid Architect reader over USB to RS485. However, other models are able to configure via Bluetooth, Physical Credential card, or Virtual Credential card.

Let's take a look at what software you'll need to configure your reader.

Downloading and understanding all of the required apps

To configure the reader, you will need to download SECard. The SECard software makes it easy to create physical / virtual user cards, reader configurations and management of security keys.

To download SECard:

  • Log into your account at https://stid-security.com/
  • Navigate to My account in the STid portal
  • Click on the Product's life - Software Kits link in the side navigation pane
  • Download SECard – High security programming kit from the list of downloads
  • Extract the ZIP file
  • Run the installer (e.g. SECardv3xxx_setup.exe)

Another helpful piece of software is OSDPPro, which is a utility and testing tool. Ask your STid contact about obtaining a copy.

After installing SECard (and optionally OSDPPro), proceeding to the next section.

Updating the firmware

The minimum required firmware versions to support Apple Wallet in STid Architect readers varies depending on the reader type.

  • For OSDP readers: the minimum version is 21 (this article focuses on OSDP readers)
  • For Wiegand readers, the minimum version is 25

If your reader already has a compatible firmware version, you may proceed to the next section.

Tip: Updating firmware incorrectly may render the device inoperable. Always follow STid’s instructions carefully.

Per STid's FAQ, to request an update for your reader:

  • Check your current firmware version (look at the LEDs on startup)
  • Contact STid Support ([email protected]) with the following information:
    • Your reader model and serial number
    • Your current firmware version
    • The reason for the update request
  • STid will send you the latest firmware version and installation instructions

Configuring Apple Wallet to read AccessGrid credentials

Before we configure the Apple Wallet settings in SECard, we need to determine our Terminal Capabilities Identifier (TCI).

If you're using a Sample Pass with our DESFire configs issued from the console UI, you can use the value 02000. Otherwise, you can navigate to your card template in the console UI and note the TCI from the Settings popover.

Take note of your TCI. You'll need it to complete this section.





Now that we have our TCI noted, we can configure our Apple Wallet settings in SECard. To get started:

  • Launch the SECard application
  • Log in as an Administrator (see SECard manual for details)
  • Click Reader configuration from the home screen
  • Click Start my reader configuration at the top of the Reader config pane


Click on the Settings option in the Apple Wallet row.



Its time to configure our Apple Wallet Access settings in SECard. For this example, we'll use the following settings:

  • Fill in Terminal capability identifier (with the value we determined above)
  • Fill in Terminal Type with 0202
  • Check Express Mode

  • Configure GetUID/RandomData Diversification Application settings
    • Fill in Application Identifier (AID) with F56401
    • Fill in FileID nb with 0
    • Check RandomData Diversification
    • Fill in Size with 1
    • Fill in Offset with 0

  • Configure GetUID/RandomData Diversification Application settings
    • Fill in Application Identifier (AID) with F56401
    • Fill in FileID nb with 0
    • Fill in Size with 3
    • Fill in Offset with 6
    • Leave Reverse unchecked

After you've filled in these values, click Validate.



Find the Apple Wallet row again in the OCB Wizard pane, then click Keys.

Now, we need to configure the Apple Wallet Access keys.

The key values used in this example are AccessGrid's sample keys. These are suitable for proof-of-concept, but you should never use them in a live deployment.

We're going to use the example keys from the AccessGrid DESFire application structures guide.

  • Configure GetUID Application section settings
    • Fill in Key with 1869e1e47af074f4fcf76a4ba9cf0709
    • Fill in KeyID with 0

  • Configure UserID Application section settings
    • Fill in Key with 6e369e1a479c14601d2ed20a4121a67d
    • Fill in KeyID with 1



After you've filled in these values,Click Validate. Then, from the OCB Wizard, click Close.

Saving your reader configurations

Before we can apply our settings to the reader, we need to first figure out which port we're connected to. Open the Device Manager on your Windows operating system and find the COM port for your reader.



Take note of the COM value (e.g. COM3). You'll need to use this value to transfer the configuration to your reader.

From the Reader configuration pane in SECard, click OSDP FileTransfer.



We're ready to finalize our reader configuration. Configure the settings for the OSDP FileTransfer:

  • Fill in Serial/USB port with your COM value from earlier in this section
  • Select the Baudrate for your reader (you may need to refer to your product manual)
  • Fill in RS485 address (you can try setting it to 0 if you're not sure)

After you've configured the OSDP FileTransfer, click Send.



It will take a few moments to update. You will see the progress under "Current operation".

Issuing a credential

In order to test our setup, we need Apple credentials. AccessGrid makes issuing and managing Apple Wallet credentials simple! So go ahead and open an account, go through onboarding, we'll be right here.

Now that you're set up, go ahead and issue an NFC key. Here's a sample using our python library:

from accessgrid import AccessGrid # get these from your access grid account account_id = "[placeholder]" secret_key = "[placeholder]" card_template_id = "[placeholder]" client = AccessGrid(account_id, secret_key) card = client.access_cards.provision( card_template_id=card_template_id, employee_id="101010101", card_number="42169", site_code="199", full_name="Jose Casanova", email="[email protected]", phone_number="+17867212241", classification="Employee", title="CEO", start_date="2025-04-03T22:46:25.601Z", expiration_date="2026-04-20T22:46:25.601Z" ) print(card.id) print(card.url)

Note that we set the card number and site code to arbitrary integer values. If you'd like to encode different information than a site code and card number, you can use our file_data parameter.


Download the pass using the link output from the script above. Each pass will transmit a compatible card number via the STid Architect when tapped.

Reading a credential

At this point, you should have configured and saved your reader configuration using SECard. For this example, you'll need OSDPPro installed.

To get started, make sure your reader is connected to your Windows machine, and then open OSDPPro.

Configure the COM port settings:

  • Fill in Port with the value you used for saving your reader configuration
  • Fill in Baudrate with the value you used for saving your reader configuration

After you've filled in these values, click Connect.



After you successfully connect, the details in the bottom pane will fill in with some reader details.

To start observing scans, click Start POLL in the bottom pane.



Assuming you haven't applied any filters, you will start to see pings in the log in the pane.

Pull up the credential in the Apple Wallet of your iOS device and hold it close to the reader. You should see the scan details in the log in OSDPPro.



The details here reflect the Sample Pass issued from the console UI.

Summary of learnings

Congrats! You did it! By following this guide, you've configured your STid Architect reader on a Windows device to read Apple Wallet credentials issued through AccessGrid. Along the way you installed multiple configuration apps, updated the reader's firmware, set up Apple Wallet by dialing in the AccessGrid-specific settings - TCI, encryption keys and more - so that every pass transmits a compatible card number the moment it's tapped.

Depending on your needs, you might be interested in using one of our Integration Hub options, to make this reader work with your existing PACS! If you run into any trouble at all, please don't hesitate to reach out via the chat in the bottom right or email me at [email protected].