Page 2 of 11
Access
Electronic access should be used as a primary means of entry, where available. Spaces on
electronic card access control must only be able to be opened by GGM or Building Master.
UCF Cards are the only cards authorized for electronic card access to buildings and rooms on
campus. Any exceptions must be approved in writing by the Department of Security. Employees
may be issued physical keys to access their workspaces. The university strongly advises
against the issuance of physical keys to students, however, should a department require this,
the request should be submitted through the online key request system. Keys will not be issued
to volunteers. F&BO will process all physical key requests, transfers, replacements, and returns.
An electronic access card holder or physical key holder may not give away, loan, or swap
access cards or physical keys, and must immediately notify their supervisor if an access card or
physical key is lost or stolen. Lost or stolen Building Sub-Master, Building Master or GGM keys
will not be replaced until a report has been filed with the UCF Police Department. Upon
separation from the university, electronic access will be terminated, and employees must return
all university physical keys to their University Access Control Representative (UACR).
The Department of Security will ensure all new electronic access control hardware utilizes the
university’s approved electronic access control system and is purchased from the university’s
contracted vendor. Other access control systems may continue to be used for existing doors
but cannot be expanded or replaced without authorization from the Department of Security. New
electronic access control systems that do not use the university’s approved system are
prohibited, unless approved by the Department of Security.
All doors with electronic access control must also be on the university physical key system and
be accessible only by the Building Master or GGM, unless approved by the director of Security
Management, AVP of FO, and the director of Environmental Health & Safety (EH&S).
Doors which protect critical infrastructure, as identified by the Department of Security, F&BO,
and UCF IT, will require electronic access with two-factor authentication (such as requiring card
and PIN) for entry, unless the installed hardware does not support it. All electronic access
control hardware that does not protect critical infrastructure, as determined by the Department
of Security, may be configured to require “card only” authentication or two-factor authentication.
Modifications to existing buildings or rooms that might result in adding or moving entrances
must be reviewed by the Department of Security to determine whether electronic access control
should be added, modified, or removed.
Only the FO Lock Shop (Lock Shop) may duplicate university physical keys or install/maintain
mechanical locking hardware to university spaces. Any other method of key duplication, lock
installation or rekeying is prohibited.
Individual Responsibilities
Whenever possible, individuals should access buildings and rooms using electronic access.
Physical key should only be used in emergency situations. No self-closing doors should ever be
propped open to bypass the access control. Upon accessing a controlled space, the individual
must recognize the current state of the lock and ensure the lock is in the same state upon
exiting. If a sensitive controlled space is found to be in an unlocked state, the individual must
secure the space and report the incident to the building liaison.