The openings a utility cannot wire
A water district, a co-op or a municipal utility does not have a security perimeter. It has hundreds of separate openings spread across a service territory: pump houses, well heads, chlorine rooms, substation gates, meter vaults, SCADA cabinets, tower compounds, chemical stores and lift stations. Almost none of them have power for a reader, a network drop, or anyone on site to let a technician in.
So they run on mechanical keys. Usually a small number of master keys, copied over the years, carried by crews and contractors, with no record of who went where. When one goes missing the honest answer is that nobody knows how many doors are exposed, and rekeying a whole territory is not a realistic response.
CyberLock exists for exactly this shape of problem, because the lock needs nothing at the opening.
What gets secured across a service territory
| Asset | Typical opening | What changes |
| Substations and switchyards | Perimeter gate padlocks, control house doors | Per-gate records; contractor keys that expire on their own. |
| Pump houses and lift stations | Door cylinders, hatch padlocks | Remote sites get accountability with no power run. |
| Well heads and reservoirs | Weather resistant padlocks | Outdoor assets with nothing to trench to. |
| Chlorine and chemical rooms | Mortise or rim cylinders | Two-person rule available on standard cylinders. |
| SCADA and RTU cabinets | Cam locks, cabinet cylinders | Physical access records for critical control equipment. |
| Meter vaults and pits | Padlocks | Tamper evidence on assets crews visit alone. |
| Tower and telemetry compounds | Gate padlocks | Carrier and vendor access without a site visit to unlock. |
One key, an entire territory
A single CyberKey can carry access to up to 3,300 locks, or up to 12,000 lock list entries on a Generation 2 key with the Lock List Expansion module, across as many as 49 separate schedules. A master key has no limit. In practice a field crew carries one key for the whole service area, and what it opens is decided in software rather than by which keys are on the ring.
Because permission lives in the key and not in the lock, a crew going to three sites today and two different ones tomorrow does not require anyone to visit a lock.
Contractors and mutual aid crews
Access is issued against a schedule. A line contractor, a pump technician or a mutual aid crew from a neighbouring utility gets a key that opens named sites, on named days, between named hours, and stops working when that window closes. Nothing has to be collected afterwards, and an unreturned key expires on its own.
If a key is lost you disable it in CyberAudit Web and it stops opening locks. Locks also hold a lost key list, up to 500 entries on Generation 2 non-padlock models, so a named key can be refused at the cylinder itself. No site is rekeyed and no other key is affected.
Keys can be refreshed in the field. A wall mounted Authorizer at a district yard, a USB or ValidiKey station at a desk, a Flex System keyport, a key vault, or a phone over Bluetooth will all update a key. CyberKey Air and Air2 skip the communicator entirely and update directly over wifi, which matters when a crew does not come back to the yard.
Two people at one opening
Standard CyberLock cylinders can require two or more keys presented in succession before the lock opens, and can require those keys to belong to different schedules, so one person carrying two keys will not satisfy it. An open delay can hold the lock shut for up to 17 minutes after first contact. For a chlorine room, a chemical store or a cabinet that should never be opened by a lone operator, that is dual custody with no guard and no wiring.
What a rollout looks like
1. We survey the openings. Gate padlocks, door cylinders, hatches and cabinet cam locks each take a different format. With over 450 cylinder designs the goal is to match the hardware already in the field.
2. We fit a pilot. A handful of real sites, real keys, real crews. Most cylinder swaps take as little as 30 seconds; awkward formats run 10 to 15 minutes. Nothing is drilled and nothing is wired.
3. You read the audit trail. You see which sites were visited, by whom and when, before committing to anything.
Common questions about utility access control
Can we secure remote sites with no power and no network?
Yes, and that is the main reason utilities choose CyberLock. There is no wiring and no battery at the lock. Power comes from the battery inside the CyberKey the moment the key touches the cylinder. A well head, a pump house, a substation gate or a meter vault gets full access control and a full audit trail with nothing to plug in.
How many sites can one key open?
Up to 3,300 locks on a standard key, or up to 12,000 lock list entries on a Generation 2 key with the Lock List Expansion module, across up to 49 separate schedules. A master key has no limit. A crew normally carries one key for the whole service territory.
What happens when a crew member loses a key?
You disable it in CyberAudit Web and it stops opening locks. Locks also hold a lost key list, up to 500 entries on Generation 2 non-padlock models, so a named key can be refused at the cylinder itself. Nothing is rekeyed. Compare that to a mechanical master key, where one loss can expose an entire territory.
Can we give a contractor access to only certain sites?
Yes. A key is issued against a schedule naming which locks it opens, on which days and between which hours. It stops working when that window closes, so nothing has to be collected and an unreturned key expires on its own.
Do we get a record of attempted entry, not just successful entry?
The CyberKey always records a no access event in its own audit trail, so an attempt at a site the crew member was not cleared for is captured even though the lock never opened. Locks do not record denied attempts by default, though that can be configured.
How do crews update their keys if they never come back to the yard?
Keys are refreshed by a communicator: a wall mounted Authorizer at a district yard, a USB or ValidiKey station, a Flex System keyport, a key vault, or a phone over Bluetooth. CyberKey Air and Air2 skip the communicator entirely and update directly over wifi.
Can we require two people to open a chemical room?
Yes, on standard cylinders. The lock can require two or more keys presented in succession, and can require those keys to belong to different schedules so one person carrying two keys will not satisfy it. An open delay can hold it shut for up to 17 minutes after first contact.
Will it survive outdoors?
CyberLock makes weather resistant padlocks and cylinder formats intended for exterior doors, gates, cages and containers. Over 450 designs cover interior and exterior openings, padlocks, cabinets and containers, so the format is matched to where the asset actually sits.
Can we try it on our own sites first?
Yes. We run free pilots. We fit a small number of your openings, issue keys to the crews who actually use them, and you read the audit trail before committing to anything.
