Access Control PCB Copy | NDA on Every Project

Access Control PCB Copy — Complete Manufacturing-File Recovery

Access control PCB copy is the process of reverse-engineering an existing door controller, card reader, intercom panel, or biometric terminal board to produce a full set of manufacturing files—Gerber, BOM, and optional schematic—so you can remanufacture or second-source the board without depending on the original vendor. Our engineers handle 2- to 8-layer access control boards under a project-specific NDA, with typical turnaround of 8–12 working days and first-article yields above 97%.

Why Access Control Boards Need Copying

Access control hardware sits at the intersection of physical security and embedded electronics. When a supplier discontinues a controller or a building integrator needs replacement panels for a 15-year-old system, the original design files are often unavailable. Buying new-generation hardware can mean re-wiring entire buildings, re-programming credential databases, and re-certifying fire-alarm tie-ins.

Copying the existing board sidesteps all of that. You get a drop-in replacement that matches the original connector pinout, mounting holes, and firmware interface—without a full system redesign. Common scenarios include:

• Legacy door controllers — 4-layer boards running 8- or 16-bit MCUs with Wiegand interfaces, often out of production for 5+ years.
• Card readers and keypads — typically 2-layer FR-4, but with RF antenna traces that must be reproduced to tight tolerances (±0.05 mm trace width) to maintain 13.56 MHz or 125 kHz read range.
• Intercom and video panels — mixed-signal boards combining audio codec, video driver, Ethernet PHY, and relay outputs on a single 4- to 6-layer PCB.
• Biometric terminals — fingerprint-sensor carrier boards with impedance-controlled USB and SPI signal routing, where a 5 Ω impedance deviation can cause sensor communication failures.

What Makes Access Control Boards Distinct?

Not every board type presents the same challenges. Access control PCBs have a specific set of characteristics that an experienced copy house must account for.

RF Antenna Sections

Proximity card readers embed a planar loop antenna directly on the PCB. The antenna trace geometry—width, spacing, number of turns, and ground-plane clearance—determines the resonant frequency and read distance. During our access control PCB copy process, we measure the antenna section with a 2D optical profiler (±0.01 mm resolution) and verify the recovered layout against a network analyzer sweep before releasing Gerber files. A mismatch of even 0.1 mm in trace width can shift the resonant frequency by 200–400 kHz, enough to cut read range in half.

Relay and High-Current Paths

Door-strike controllers switch 12–24 V DC at 1–3 A through on-board relays. The copper weight on these paths is typically 2 oz (70 µm), while signal layers remain at 1 oz (35 µm). Our cross-section analysis confirms copper weight per layer so the cloned board carries the same current without overheating. If your original board uses heavy-copper construction for power distribution, we document that separately in the stackup report.

Tamper and Security Features

Higher-end access panels include tamper switches, encapsulated modules, or conformal coating over critical ICs. We photograph and document every mechanical and protective feature, including potting compound locations, so the cloned board can be reassembled with identical protection. Conformal coating type (acrylic, silicone, urethane) is identified and noted in the BOM.

Mixed-Signal Layout Constraints

A single access control board may carry RS-485 bus lines, Wiegand data/clock pairs, Ethernet (100BASE-TX or 10BASE-T), and sometimes PoE input—all on a 4-layer board measuring 100 × 80 mm. Maintaining the original ground-plane splits and differential-pair routing is critical. We replicate the original layout geometry, not just netlist connectivity, because moving a differential pair by 0.3 mm relative to its reference plane can push return loss outside the 100 Ω ±10% window.

Typical Access Control Board Specifications

Our Access Control PCB Copy Process

Step 1 — Intake and Feasibility

You ship us the board (or high-res photos for a preliminary assessment). We sign a project-specific NDA before any physical work begins. Within 2 working days we return a feasibility report covering layer count estimate, component density, and any potential blockers such as BGA packages or code-protected MCUs.

Step 2 — Non-Destructive Imaging

We scan each layer using a combination of optical imaging and X-ray (for inner-layer via mapping). Access control boards with BGA packages on the processor module get additional X-ray passes to map escape routing beneath the package.

Step 3 — Gerber Reconstruction

Trace-by-trace reconstruction in CAD (Altium or KiCad), including drill files, solder-mask layers, silkscreen, and board outline with mounting-hole tolerances of ±0.1 mm. Antenna traces are reconstructed with dimensional verification against the optical profile data.

Step 4 — BOM Extraction

Every component is identified by manufacturer part number, package, and value. Obsolete parts are flagged with recommended substitutes—cross-referenced for pinout, electrical spec, and package compatibility. A typical 4-layer access controller yields a BOM of 120–250 line items.

Step 5 — Schematic Recovery (Optional)

For clients who need a full schematic—useful for future modifications or compliance documentation—we reverse-engineer the netlist into a hierarchical schematic with meaningful net names and block annotations. This adds 3–5 working days to the project. Understanding the difference between a PCB copy and full reverse engineering helps you decide whether you need this step.

Step 6 — Verification and Delivery

We run DRC against IPC-2221B Class 2 rules, verify netlist integrity, and deliver Gerber RS-274X, Excellon drill, BOM (Excel + CSV), and assembly drawings. Centroid/pick-and-place files are included for SMT production.

Deliverable File Package

Turnaround and Pricing Signals

Most access control PCB copy projects fall into a predictable range:

• 2-layer card reader boards: 5–8 working days, starting around $350–$600 depending on component count and antenna complexity.
• 4-layer door controllers: 8–12 working days, typically $700–$1,400. Boards with PoE magnetics and Ethernet PHY sit at the higher end.
• 6-layer mixed-signal panels: 10–15 working days, $1,200–$2,200. Add 3–5 days if a full schematic is requested.

These are starting ranges, not fixed quotes. Final pricing depends on board area, component density, and whether firmware readout is required (authorized recovery only, with proof of ownership).

Firmware and MCU Considerations

Many access control boards use STM32, LPC, or SAM-series MCUs with read-protection enabled. If you own the original design IP or have written authorization from the IP holder, we can attempt firmware readout as part of the project. Success depends on the protection level—STM32 RDP Level 1 is recoverable in most cases; RDP Level 2 is a permanent lock and cannot be bypassed. We provide a realistic feasibility assessment before committing to firmware work. All firmware recovery is performed under NDA with documented proof of authorization.

Who Orders Access Control PCB Copy?

• Building management companies maintaining legacy access systems across multi-site portfolios.
• Security integrators who need replacement boards for discontinued product lines.
• OEMs second-sourcing a subcontractor’s board design that they own but never received files for.
• Repair depots stocking spare boards for high-volume installations (airports, hospitals, campuses).

If your access control hardware uses consumer-grade electronics packaging or shares a platform with residential smart-lock designs, the same process applies—board complexity, not market segment, determines scope.

Related Services

• PCB copy service overview — full intake process and capability summary
• Impedance-controlled PCB copy — for boards with differential-pair and RF routing requirements
• PCB reverse engineering vs PCB copy — deciding between file recovery and full design analysis

Related reading

• Oct 2026STM8 IC Unlock | Supported Families & Readout Methods
• Oct 2026PIC32MM Crack | Protection Levels & Recovery Guide
• Oct 2026STM32 IC Unlock | Which Families We Can Read