OsprioView
Live

Provisioner Workspace

Provisioner Workspace is the OsprioView workspace for commissioning OSDP devices in the field. Set the PD address, switch baud rates, and — when the PD is in install mode — push the SCBK directly, so secure-channel keying is no longer the painful step of a deployment.

Why It Exists

SCBK provisioning, done safely, at the device

Before Provisioner Workspace, getting a Secure Channel Base Key onto a freshly installed PD meant choosing between two bad options. Both have shipped real deployments — neither is how a secure protocol should be commissioned.

The cumbersome path

Unmount the PD, take it back to the control panel or a benched-out rig, key it there, then reinstall it on the wall. Every extra handling step is wasted technician time and another chance to damage hardware or wiring.

The insecure path

Leave the PD in install mode on a live bus and set the SCBK there. Install mode accepts unauthenticated key writes, so anything else listening on RS-485 during that window can capture or spoof the exchange.

The workspace path

Talk to one PD over a controlled session, push address, baud, and SCBK while it's in install mode, then move on. No unmount, no live-bus key leak, no separate vendor tooling.

Capabilities

One workspace for the full commissioning step

Live and batch modes

Provision one PD at a time from a quick-step queue, or stage a slot-backed batch plan of up to 126 devices. On capable hardware the device works through a batch autonomously while disconnected and backfills progress when you reconnect.

Address assignment

Set each PD's bus address with a sequential, random, or manual strategy. Give every device a deterministic address and skip the DIP-switch shuffle.

Baud rate configuration

Move a PD to the baud rate the deployment actually runs at without juggling separate tools or vendor utilities.

SCBK install-mode keying

When the PD is in install mode, push the Secure Channel Base Key over a controlled point-to-point session — the key never crosses a live, populated bus.

Verified, locked-down keying

After keyset, the new key is verified by completing a fresh secure-channel handshake with it, and the PD leaves install mode — so it stops accepting unauthenticated key writes and is handed to the production bus in secure operation.

Progress and outcomes

Track every PD's state and attempt count with precise failure outcomes — no response, wrong address, SCBK rejected, baud mismatch, and more. Try, retry, skip, or reset any step, and let auto-verify re-read each target after programming.

Profile-backed deployments

Save site profiles once and import them as JSON across many devices on the same job. No re-typing addresses, baud settings, or capability checks per PD.

SCBK export

Export the provisioned SCBKs as CSV or JSON for your key-management tooling. Per-PD keys are derived locally from a device-held seed that never touches disk — only the completed devices' keys leave the app, and the seed never does.

Security Posture

Closes the deployment-time key-handling gap

Most OSDP deployments are only as secure as the moment their SCBK gets installed. Provisioner Workspace moves that moment into a controlled session against a single device, verifies the new key by re-handshaking the secure channel with it, and leaves the PD with install mode disabled — so the device joins the production bus already locked into secure operation and the rest of the protocol's guarantees actually hold in the field.

Hardware

Same workspace, two hardware paths