What a venue needs before buying UniFi Access for Alba

Alba can open UniFi Access doors, but the connection works differently from the cloud-based systems. Read this before you buy.

How it works

When a customer opens the door, Alba’s servers send an unlock command to your UniFi Access console over the internet. UniFi Access has no cloud service for this, so your console must be reachable from the internet.

What you need

• A UniFi Access console that can be reached from the internet, using a public IP address or a hostname.
• The network port for the Access API. It is usually 12445, and it must be open to the internet.
• An API token, a door ID and the SPKI key from your console. You enter these when you add the door.

Things to know about your network

• Alba has no fixed IP address, so you cannot limit the firewall rule to Alba only. Keep your API token private, since it is the main protection. Don’t leave the port open wider than you need.
• If your internet address changes, for example on Starlink, an IP address entered in Alba stops working. Use a hostname instead of an IP address.
• If your router sits behind another router (double NAT), or your provider shares one public address between customers, forwarding the port on your own router is not enough. Ask your provider for a public IP address.
• If you cannot open a port to the internet, UniFi Access is not a good fit. Systems like Seam, Avigilon, Kisi and Entro connect from Alba to the supplier’s cloud and need no open port at your venue.

Before customers arrive

When you add the door, test the connection. The test really opens the door. See How to integrate an access control system with Alba.