Software upgrade for the access control you already own For integrators[email protected]
GateStride

Systems / Software House C•CURE 9000

Software House C•CURE 9000 and iSTAR: versions, end of life and upgrade options

Software House, a Johnson Controls brandGateStride: PlannedReviewed October 2026

By Tom Jin

C•CURE 9000 is the access-control and event-management software from Software House, a Johnson Controls brand. It runs on Windows Server with a Microsoft SQL Server database and manages Software House iSTAR door controllers. It is built for scale: the version 3.10 datasheet quotes up to 5,000 readers per server, and an enterprise layout of one master server with up to 60 satellite servers and up to 200,000 readers.

You typically find C•CURE 9000 in mid-size to large organisations and multi-site companies. A smaller office usually meets it as a tenant in a building that already runs it, or as a branch of a larger company. It is unified with American Dynamics victor video, sold through integrators, and supported by a large technology-partner program. Version 3.00 and earlier lose support in January 2027.

How to recognise Software House C•CURE 9000

Operators use the C•CURE 9000 client on Windows, the browser-based C•CURE IQ (and older C•CURE Web) client, or the C•CURE Go mobile app. Many sites also run the victor client, because victor video and C•CURE 9000 share a unified installer. The door controllers are Software House iSTAR units; older paperwork may say Tyco or Tyco Security Products, the previous branding of the same line.

  • Software named C•CURE 9000, C•CURE IQ or victor on the security workstation or server.
  • Door controllers named iSTAR (Ultra, Ultra SE, Ultra LT, Edge or Pro), or older apC and iSTAR eX units, in the C•CURE hardware tree.
  • IP-ACM Ethernet door modules, which connect individual doors to iSTAR controllers over the network.
  • Readers sold through Software House, such as RM series readers or HID readers, and HID Mobile Access or HID Origo for phone credentials.
  • A C•CURE Go Reader app on an Android device, which turns it into a portable reader.

Still not sure? Follow how to identify your access control system.

Versions and editions

NameDetailsStatusSource
C•CURE 9000 v3.20Exists: the C•CURE Go Reader v3.20 release note is dated September 2026 and C•CURE IQ 3.20 has a datasheet. Core v3.20 release notes were not publicly located.currentsource
C•CURE 9000 v3.10Datasheet dated July 2025. Up to 5,000 readers per server; enterprise up to 60 satellite servers and 200,000 readers. Windows Server 2019/2022 and SQL Server 2019/2022.currentsource
C•CURE 9000 v3.00 and earlierEnd of support January 2027, per Software House's lifecycle notification. v2.90 was released in June 2022.legacysource
C•CURE IQBrowser-based client and event management for C•CURE 9000 (v3.20 datasheet). Comes with an SDK for certified partners.currentsource
C•CURE Go and C•CURE Go ReaderC•CURE Go is the mobile monitoring and control app. Go Reader turns an Android device into a mobile reader; it is not a credential.currentsource
C•CURE CloudC•CURE 9000 delivered in a dedicated single-tenant cloud.currentsource
victor (unified with C•CURE)American Dynamics video client. The v6.0 unified installer includes a victor Web Service API component.currentsource

Hardware

NameDetailsStatusSource
iSTAR Ultra G2 and Ultra G2 SECurrent controllers listed by Software House. The G2 models are the named drop-in successors to the Gen 1 Ultra and Ultra SE.currentsource
iSTAR Edge G2Current edge controller; the product page lists 8 doors per panel.currentsource
IP-ACM v2Ethernet door module for iSTAR.currentsource
iSTAR Ultra (Gen 1)Notice April 2024: discontinued effective December 2024. End of support December 2029. Successor: iSTAR Ultra G2.end of salesource
iSTAR Ultra SE (Gen 1)End of manufacture 12/31/2024, end of sale 3/31/2025, end of support December 2029. Successor: iSTAR Ultra G2 SE.end of salesource
iSTAR Ultra LTEnd of manufacture 12/31/2024, end of sale 3/31/2025, end of support December 2029. Successors: iSTAR Ultra G2 or Edge G2.end of salesource
iSTAR Edge (Gen 1)Notice April 2024: discontinued effective December 2024. End of support December 2029. Successor: iSTAR Edge G2.end of salesource
iSTAR ProEnd of manufacture 4/5/2019; end of firmware support 4/5/2024. Still recognised by C•CURE 9000. Successor: iSTAR Ultra G2 SE.end of lifesource
iSTAR eX, apC/8X, apC/L, apSEnd of manufacture April 2017; support ended April 2022. Successors: iSTAR Edge or Ultra SE (now their G2 versions).end of lifesource

What is ending, and when

Two things are ending on C•CURE sites. First, software: Software House has announced end of support in January 2027 for C•CURE 9000 v3.00 and earlier, which includes v2.90 from June 2022. Sites on those versions will stop receiving patches, so a move to a current v3.x release is the usual next step. Second, controllers: the first-generation iSTAR Ultra, Ultra SE and Edge, plus the Ultra LT, were discontinued in December 2024 after notices issued in April 2024, with support continuing until December 2029. The Ultra SE and Ultra LT notices give end of manufacture 12/31/2024 and end of sale 3/31/2025; the exact days for the Gen 1 Ultra and Edge are not confirmed.

Older controllers are already past support. The iSTAR Pro ended manufacture in April 2019 and firmware support in April 2024. The iSTAR eX and apC family ended manufacture in April 2017 and support in April 2022. Software House names G2 successors for each, and the Ultra G2 and Ultra G2 SE are described as drop-in replacements. All of these dates are in our end-of-life tracker with links to the notices.

See every dated notice in the end-of-life tracker.

What offices commonly miss

  • No record of who left. Exits normally release through a request-to-exit device without a badge, so C•CURE logs entries but cannot name the person who walked out.
  • Phone credentials come from a third party. Software House uses HID Mobile Access and HID Origo Mobile Identities for phone-based credentials; C•CURE Go Reader turns a phone into a reader, not a key.
  • It is a large-system platform. Server, SQL Server and Windows Server requirements, plus integrator-managed licensing, make it heavy for a small office to run on its own.
  • Integration documentation is gated. The victor Web Service API and the C•CURE IQ SDK references are not public, so adding third-party features usually runs through the vendor's partner program.

Integration options

C•CURE 9000 has several integration surfaces, but their documentation is mostly behind a partner login. The unified victor and C•CURE installer includes a victor Web Service API component, hosted in IIS alongside C•CURE Web and C•CURE Go. Its API reference is not public. The C•CURE IQ SDK lets certified C•CURE 9000 partners bring their integrations into the IQ web client. Both appear to be reached through the Johnson Controls Connected Partner Program, which Software House says has more than 300 technology partners. The program's application form is public; the technical documents are not.

Mobile credentials are an integration in their own right: Software House publishes an integration guide for HID Origo Mobile Identities and lists HID Mobile Access among its credentials. For an office, the practical point is that any add-on to C•CURE will normally be a certified partner integration configured by the integrator who manages the system. As with any server platform, keep C•CURE 9000 and iSTAR firmware on a supported release; the iSTAR 6.9.8 CU01 firmware release notes cover the Ultra and Edge G2 families.

Upgrade paths

Stay on C•CURE and add features in software

If your iSTAR controllers are supported and C•CURE is on a current v3.x release, you can keep the doors as they are and add features such as phone unlock or exit tracking through certified partner software. Expect partner certification and integrator involvement to be part of the project.

Upgrade C•CURE and swap to iSTAR G2

Move servers on v3.00 or earlier to a current v3.x release before January 2027, then plan Gen 1 Ultra, Ultra SE, Ultra LT and Edge replacements with G2 models before December 2029. Replace any iSTAR Pro or iSTAR eX first, because their support has already ended.

Replace the platform

A full replacement means new controllers and software, re-commissioning every door and often new credentials. For a small office inside a larger building, this may not be your decision at all; check whether the building or parent company owns the system before pricing anything.

Compare the routes over three years in the savings calculator.

GateStride and Software House C•CURE 9000

Planned C•CURE 9000 is Planned for GateStride. It is on our roadmap, with the iSTAR Ultra G2, Ultra G2 SE and Edge G2 controllers listed, but work has not started, so GateStride does not work with C•CURE 9000 today. Because C•CURE's integration documents sit behind the vendor's partner program, any future integration would have to go through that route. GateStride is in early access. If you run C•CURE 9000, tell us; demand helps decide what we build next.

Full compatibility list · Tell us you run Software House C•CURE 9000

Questions about Software House C•CURE 9000

When does C•CURE 9000 v3.00 lose support?
Software House's lifecycle notification gives end of support in January 2027 for C•CURE 9000 v3.00 and earlier. After that date those versions stop receiving fixes. The usual step is to upgrade to a current v3.x release. Check controller and firmware compatibility with your integrator before you schedule it.
Do I have to replace my first-generation iSTAR Ultra or Edge now?
No. Software House discontinued the Gen 1 iSTAR Ultra, Ultra SE, Ultra LT and Edge in December 2024, but support continues until December 2029. New units are no longer sold, so plan the move to Ultra G2, Ultra G2 SE or Edge G2 over the next few years rather than as an emergency.
Can C•CURE 9000 unlock doors from a phone?
Software House lists HID Mobile Access as a credential and publishes an integration guide for HID Origo Mobile Identities, so phone credentials come through HID. The C•CURE Go app is for monitoring and control, and C•CURE Go Reader turns an Android device into a reader rather than a credential.
Is there a public C•CURE 9000 API?
Not publicly. The installer includes a victor Web Service API component and there is a C•CURE IQ SDK for certified partners, but their references are not published openly. Developers apply through the Johnson Controls Connected Partner Program, which has a public application form.

Related systems: Kantech EntraPass · LenelS2 OnGuard · Honeywell Pro-Watch

Sources

Last reviewed October 2026. Software House C•CURE 9000 and other product names are trademarks of their respective owners. GateStride is independent and not affiliated with, endorsed by or a dealer for any manufacturer.