Systems / Kantech EntraPass
Kantech EntraPass: versions, hardware, end of life and upgrade options
By Tom Jin
EntraPass is the access-control software made by Kantech, a Johnson Controls brand that was founded in 1986 to serve small and mid-size businesses. EntraPass manages Kantech's KT-series door controllers, the cardholders and access levels, and the event log of who badged where and when. It comes in several editions. Special Edition is a single-workstation product for up to 64 doors. Corporate Edition supports up to 20 workstations and multiple sites. Global Edition supports up to 128 workstations with a central gateway and redundancy.
You typically find EntraPass in offices, clinics, schools and multi-site businesses that want a server-based system without enterprise-platform cost. It is usually installed and serviced by a local security integrator. The current release of Corporate and Global Edition is version 9.12. Several older KT controllers have reached end of sale or end of support, which is what prompts many offices to look at upgrades.
How to recognise Kantech EntraPass
The quickest check is the software. EntraPass runs on a Windows server, and operators use the EntraPass workstation program, the EntraPass web client in a browser, or the EntraPass go app on a phone. The edition (Special, Corporate or Global) and the version number appear in the program's own about information. On the hardware side, the door controllers are Kantech KT-series units, and newer sites often use Kantech ioSmart readers.
- Software named EntraPass on the server or workstation, with Special Edition, Corporate Edition or Global Edition in its title or about box.
- Door controllers listed in EntraPass as KT-1, KT-2, KT-4, KT-400, KT-300 or KT-200, and on larger Global Edition sites a KT-NCC network gateway.
- Kantech readers: ioSmart smart-card and multi-technology readers, or older ioProx 125 kHz proximity readers such as the P225 and P325.
- Staff using the EntraPass go Pass app on a phone or Apple Watch to open doors, which points to a mobile credential licence on the system.
- T.REX request-to-exit motion sensors above doors are common on Kantech installs, though they are also used with other systems.
Still not sure? Follow how to identify your access control system.
Versions and editions
| Name | Details | Status | Source |
|---|---|---|---|
| EntraPass Corporate Edition 9.12 | Current release (build 9.12.269). Up to 20 workstations, multi-site gateway, up to 50 concurrent web and go logins. 9.12 added multi-factor login through Entra ID or Okta and mapping of Active Directory groups to access levels. | current | source |
| EntraPass Global Edition 9.12 | Current release (build 9.12.269). Up to 128 workstations, KT-NCC gateway, redundancy options, up to 200 concurrent web and go logins, embedded SQL engine with ODBC access for reporting. | current | source |
| EntraPass Special Edition | Small-office edition: single workstation, up to 64 doors on KT-1, KT-2 or KT-4 controllers. Still sold in the 2025 product guide. The 9.x release notes cover only Corporate and Global Edition; the latest Special Edition version is not confirmed. | current | source |
| EntraPass 9.00 | Release notes revised July 2025. Added a Salto integration, migration paths into hosted hattrix, and card access group exceptions. Superseded by 9.12; a support end date is not published in our sources. | unconfirmed | source |
| EntraPass 8.x (8.20 to 8.72) | 8.20 was announced in January 2020. The KT-2 needs 8.40 or later (8.50 for four-reader mode) and the KT-4 Wi-Fi module needs 8.71 or later. Support status of 8.x is not confirmed. | unconfirmed | source |
| EntraPass 6.x and 7.x | Older releases. In 6.0x the EntraPass web client needed Microsoft Silverlight. 7.30 added ioSmart reader support and HID Mobile Access support. Support status not confirmed. | unconfirmed | source |
| EntraPass hattrix | EntraPass hosted and managed by a service provider instead of on the office's own server. 9.00 added migration from Special Edition 8.71 and Corporate Edition 8.72 or later. | current | source |
| EntraPass web, go and go Pass | EntraPass web is the browser client. EntraPass go is the admin app (cards, lock and unlock, reports) and needs Corporate or Global Edition 6.0 or later. EntraPass go Pass is the mobile credential, sold in user packs. | current | source |
Hardware
| Name | Details | Status | Source |
|---|---|---|---|
| KT-1 | One-door controller (two readers), PoE+. Can run under EntraPass or alone in standalone web mode. | current | source |
| KT-2 | Two-door controller with built-in Wi-Fi, launched September 2021. Needs EntraPass 8.40 or later. | current | source |
| KT-4 | Four-door controller (eight readers) with optional PoE++ or Wi-Fi module. Holds 100,000 cards and 60,000 events offline. The replacement for the KT-400. | current | source |
| KT-400 | Four-door Ethernet controller. End of manufacture 12/31/2024, end of sale 3/31/2025, end of support December 2029. Successor: KT-4. | end of sale | source |
| KT-NCC-G2 | Second-generation network gateway for Global Edition, connecting serial and IP controller loops. | current | source |
| KT-NCC (Gen 1) | First-generation Global Edition gateway. End of manufacture and sale; supported through April 2026, so that support period has passed. Successor: KT-NCC-G2. | end of life | source |
| KT-300 | Two-door RS-485 controller. End of manufacture and sale 9/30/2022; supported through September 2025. Successor: KT-2. | end of life | source |
| KT-200 | Two-door controller. End of manufacture 9/30/2022; end of support September 2025. Successor: KT-2. | end of life | source |
| KT-100, KTES | Still listed in the EntraPass 9.12 firmware matrix. Lifecycle status not confirmed. | unconfirmed | source |
| ioSmart readers | MIFARE Plus and DESFire smart-card and multi-technology readers that also read ioProx and HID Prox cards. Support Kantech encrypted RS-485, Wiegand and OSDP, and Bluetooth for EntraPass go Pass. | current | source |
| ioProx readers | 125 kHz proximity readers (P225, P325 and keypad versions). Still shipped in some KT-4 kits; lifecycle otherwise not confirmed. | unconfirmed | source |
What is ending, and when
Most of the end-of-life activity on Kantech sites is on the controller side, not the software. The KT-200 and KT-300 stopped being made on 9/30/2022 and their support ended in September 2025; Kantech names the KT-2 as their successor. The first-generation KT-NCC gateway was supported through April 2026 and is replaced by the KT-NCC-G2. The KT-400, still very common in offices, stopped manufacture on 12/31/2024 and sale on 3/31/2025, with support continuing until December 2029; the KT-4 replaces it. EntraPass 9.12 includes conversion firmware that moves a KT-400 rev1 onto the KT-4 firmware line.
On the software side, Corporate and Global Edition 9.12 are current. We found no published end-of-support dates for EntraPass 8.x or 9.00, so we mark them unconfirmed rather than ended. Special Edition is still sold, but its latest version number is not confirmed in the 9.x documents. If your server runs a very old release, such as 6.x whose web client needed Silverlight, ask your integrator about a version upgrade before assuming the hardware must change. Each dated notice is also in our end-of-life tracker.
See every dated notice in the end-of-life tracker.
What offices commonly miss
- No record of who left. Like most card systems, exits usually release through a request-to-exit sensor or push bar with no badge, so EntraPass logs who came in but not who went out.
- Phone unlock is a paid add-on. EntraPass go Pass mobile credentials are sold in user packs (10, 50, 100 or 500) for Corporate Edition 7.10 or later, and use Bluetooth to ioSmart readers.
- Special Edition is the smallest edition, and the EntraPass web and go apps are documented for Corporate and Global Edition only. Small offices on Special Edition may lack the browser and app layer.
- Remote access has a ceiling: Corporate Edition allows up to 50 concurrent web and go logins and Global Edition up to 200.
- KT controllers in standalone web mode (no EntraPass server) have no documented integration interface, so add-ons generally need EntraPass.
Integration options
EntraPass Corporate and Global Edition expose a REST web service that is installed with SmartLink and hosted on the EntraPass server. Johnson Controls' own victor integration uses it: it signs in as an EntraPass operator, so its actions appear in the log under that operator, polls events and hardware status (every 10 seconds by default), syncs people and devices, and sends door commands including unlock, temporary unlock and lock. The older SmartLink channel also passes messages and commands; the admin guide states it needs no additional licence. Kantech also sells an integration licence for one concurrent integration (version 7.0 and later), though which third-party products consume it is not confirmed. The REST reference itself is not public; it appears to sit behind the Johnson Controls Connected Partner Program, which offers an API and sample code and uses self-certification.
Other surfaces include an MS SQL card gateway licence, ODBC reporting on Global Edition, and LDAP / Active Directory sync. The controller protocol between KT controllers and EntraPass is proprietary and AES-128 encrypted, and a controller only talks to its own EntraPass instance, so integrations work at the software level, never by talking to controllers directly. As with any server software, keep EntraPass and Windows patched to the current release your integrator supports.
Upgrade paths
Keep EntraPass and add features in software
If your KT controllers are still supported, the cheapest move is to leave the doors alone and add what is missing (phone unlock, exit tracking, a live who-is-inside list) through software that talks to EntraPass. This works best on Corporate or Global Edition, where the web service is available.
Refresh controllers and version within Kantech
Replace end-of-life KT-200, KT-300 and KT-NCC Gen 1 units with the KT-2 and KT-NCC-G2, plan KT-400 to KT-4 swaps before December 2029, and move the server to EntraPass 9.12. Kantech publishes an application note for moving from Special Edition to Corporate Edition.
Replace the platform
A full replacement means new controllers, often new readers and credentials, re-wiring and re-commissioning every door. It makes sense if the building is being renovated or the system no longer fits, but it is usually the most expensive route and is rarely forced by Kantech's lifecycle dates alone.
Compare the routes over three years in the savings calculator.
GateStride and Kantech EntraPass
GateStride Verified GateStride is Verified on Kantech EntraPass: we tested it ourselves on the EntraPass installation in our own office, where it reads EntraPass events and calls EntraPass’s own unlock, then adds phone unlock and exit tracking on top. Verified is our own test program, not a Kantech or Johnson Controls certification. Other EntraPass editions, versions and controller models have not yet been tested; tell us what you run and we will confirm before any installation. GateStride is in early access.
Questions about Kantech EntraPass
- Which EntraPass edition do I have?
- Open the EntraPass program and check its title bar or about information, which names Special, Corporate or Global Edition and the version. As a rule of thumb, Special Edition runs on a single workstation for up to 64 doors, Corporate Edition supports up to 20 workstations and multiple sites, and Global Edition adds a KT-NCC gateway and up to 128 workstations.
- Is my KT-400 controller end of life?
- Not yet. Kantech ended KT-400 manufacture on 12/31/2024 and sales on 3/31/2025, but support continues until December 2029. You cannot buy new units, so plan to replace failed or added doors with the KT-4, which Kantech names as the successor. There is no need to replace working KT-400s today.
- Can EntraPass do phone unlock?
- Yes, through Kantech's own EntraPass go Pass mobile credential, which is sold in user packs and uses Bluetooth to ioSmart readers, or through HID Mobile Access, supported since EntraPass 7.30. Add-on software that works with EntraPass, such as GateStride (in early access, verified on our own EntraPass installation), is another route.
- Does EntraPass have an API?
- Corporate and Global Edition include a REST web service installed with SmartLink, which Johnson Controls' own victor integration uses for events and door commands. The full reference is not published openly; Kantech points developers to the Johnson Controls Connected Partner Program. Special Edition web-service support is not confirmed.
Related systems: Software House C•CURE 9000 · Honeywell WIN-PAK · LenelS2 OnGuard
Sources
- https://kantech.s3.amazonaws.com/Product-Guide/EMEA_Kantech_Product_Guide_2025.pdf
- https://docs.johnsoncontrols.com/kantech/r/Kantech/en-US/EntraPass-9.12-Release-Notes/A/9.12
- https://docs.johnsoncontrols.com/kantech/r/Kantech/en-US/EntraPass-9.00-Release-Notes/B/9.00
- https://www.johnsoncontrols.com/media-center/news/press-releases/2020/01/16/kantech-entrapass-8-20-product-update
- https://docs.johnsoncontrols.com/kantech/api/khub/documents/CM3NXU_1zzenwKe~WArYCA/content
- https://docs.johnsoncontrols.com/kantech/api/khub/documents/aREsAxBORgzzlo47YZ5RkQ/content
- https://docs.johnsoncontrols.com/kantech/api/khub/documents/5IzcVW5t2u2EO4q69VlCog/content
- https://docs.johnsoncontrols.com/kantech/api/khub/documents/Occk1Zl9ZBAGhmkwnIOj8A/content
- https://docs.johnsoncontrols.com/kantech/r/Kantech/en-US/EntraPass-Corporate-Edition-Administration-Guide/8.30
- https://docs.johnsoncontrols.com/kantech/api/khub/documents/SiygbTaWLwMcxKUA52_6Tg/content
- https://s3.amazonaws.com/compatibilitymatrix/TSP%20Compatibility%20Matrix/victor/Kantech/Advanced%20Details/Victor_Kantech_UserGuide_v6.0.pdf
- https://docs.johnsoncontrols.com/kantech/api/khub/documents/9SaDzz3ihyNitpGopb6b0A/content
- https://docs.johnsoncontrols.com/kantech/api/khub/documents/HFdy6OsnKNxPoYXNUQk1rA/content
- https://www.securitysales.com/news/tyco-kantech-kt-2-two-door-controller/134905/
- https://connectedpartnerprogram.partnerproducts.com/
Last reviewed October 2026. Kantech EntraPass and other product names are trademarks of their respective owners. GateStride is independent and not affiliated with, endorsed by or a dealer for any manufacturer.