Badge Readers and a Master Key System for a Small Lab or Startup Suite

A flex suite in one of the office buildings along Lawrence Expressway or Tasman Dr arrives with a small envelope of keys, a badge reader on the suite door wired to an account the last tenant set up, and a landlord who keeps a master that opens the suite whether or not you like it. Inside, the doors were keyed by whoever was there before: an office on one key, a lab or a wet bench on another, a server closet on a third, and a supply room on no key at all. Nobody hands over a diagram because nobody has one.

The first hour of sorting this out is a walk-through, not a purchase. Count the doors. Decide which of them need to lock at all. Note which are on the building master, which have an electric strike wired to the reader, and which have a key that nobody present can identify. That count is what the quote is built from, and it is why master key systems and access control are quoted per suite after a visit rather than from a list.

A master key system is a set of cylinders pinned so that one key, the change key, opens exactly one door, while a second key, the master, opens all of them. Inside each cylinder that means an extra pin in some chambers, giving two shear lines instead of one. A larger system adds a level above that, a grand master held by the building, and can add sub-masters for a department. The trade-off is precise: every extra level slightly reduces the number of unique change keys available and slightly increases the number of keys that could, in theory, be filed to fit.

For a twelve-person company the sensible shape is small. Founders and the office manager hold the master. Staff hold a change key to the suite door and their own office. The cleaning contractor holds a key to the suite door and nothing else. The building holds its grand master, which opens the suite door because the lease says it may. What should not happen is a master handed to a contractor because it was easier than cutting a change key, since that is how a system stops being one within six months.

One door in most suites needs to be the exception, and it is usually the server closet or the room with the instruments in it. Put that door on its own cylinder, outside the master system, on a key held by two named people. The reason is not distrust of the office manager. It is that the master will be lent, copied and left in a drawer over the life of the lease, and the one door that holds customer data or a $200,000 instrument should not be opened by whatever happens to that key.

A restricted keyway helps here. Cylinders on a keyway whose blanks are sold only to the locksmith who installed them cannot be copied at a hardware store kiosk, and the key can be stamped with a number that ties it to a signature in a log. That is not exotic and it is not expensive relative to what is behind the door. For a wet lab, the same door also needs to open from inside with one motion and no key, which usually means a lever with a passage function or an exit device, at $279 to $745 per device.

A reader on a door is the visible part of a system with four other components: a credential, the card or fob or phone; a controller that decides whether that credential opens this door at this hour; a locking device, an electric strike or a magnetic lock; and a power supply with a battery so the door behaves predictably when the building loses power. Older readers use 125 kHz proximity cards that can be cloned with a device the size of a phone. Newer ones use 13.56 MHz smart cards or phone credentials that cannot. If the suite inherited the former, that is worth replacing before adding users to it.

The question that decides most of the design is what the door does when power fails. A magnetic lock is fail-safe: no power, no lock, the door opens. That is right on an exit path and wrong on a server room. An electric strike can be fail-secure, holding locked without power, with the mechanical lever still letting people out. Every reader-controlled door also needs a mechanical override cylinder on a key someone can find, because cloud controllers go offline and somebody still has to get in at 6am. Access control is quoted per door after the walk-through.

Two outside parties have a say in the suite. The lease almost always requires that the landlord be able to enter, which in practice means the suite door stays on the building grand master or the landlord is given a credential. A tenant who changes the suite door cylinder without telling the building has, in most leases, breached it. The route that works is a cylinder on the suite door that accepts both the building master and the tenant master, with everything inside the suite on the tenant system alone.

The fire code has the second say. Every door on the path out has to open from inside with a single motion, without a key, tool or special knowledge. That rules out a double-cylinder deadbolt on a lab door, a reader that requires a badge to exit, and any magnetic lock without a request-to-exit sensor and a release button beside the door. A locksmith who fits a lock that violates that is not doing you a favour, and the inspection that follows a tenant improvement will find it.

The walk-through produces a count: doors on the master, doors off it, doors with readers, doors that need exit hardware, keys per level. The quote is one figure for the whole suite, agreed on the call once the count is confirmed, covering the cylinders, the pinning, the keys, the hardware and the labour. The $89 service call is inside it. A written line for the facilities lead or the landlord is provided before the work so the tenant improvement can be approved by whoever approves such things.

The listed figures cover the rest of what a suite calls about. A lockout when the fourth founder cannot get in on a Saturday is $125 to $229. An exit device that latches only when pushed is $279 to $745 per device. A rekey of a single cylinder when a key does not come back is $24 to $39. Calls are answered 24/7, and for a company whose lab runs overnight that matters more than it does for an office that closes at six.