Thousands of sites, nobody on any of them
A telecom network is not a building. It is a few staffed facilities and then thousands of unstaffed ones: cell sites, equipment huts, rooftop compounds, cabinets at the curb, headends, central office spaces, tower gates, generator enclosures and colocation cages inside a building another operator owns.
Almost every one of those runs on a mechanical padlock or cylinder, and the key is held by a tower climber, a field technician, a generator contractor, a landlord, a co-locating carrier, or somebody who left the company two years ago. There is no record of who visited a site, and no realistic way to rekey a network when a key goes missing.
No power at the lock. A CyberLock cylinder needs no wiring and no battery at the opening. Power comes from the battery inside the CyberKey the moment the key touches the lock. That is why a hut on a hilltop, a cabinet at a curb or a gate at a tower compound can be access controlled and audited with nothing to plug in.
What gets secured across a network
| Site type | Typical opening | What changes |
| Cell sites and tower compounds | Gate padlocks, hut door cylinders | Per-site records at locations nobody staffs. |
| Equipment huts and shelters | Mortise or rim cylinders | Climber and technician access tied to a named person. |
| Street cabinets and pedestals | Cam locks, cabinet cylinders | Accountability on assets exposed to the public. |
| Rooftop compounds | Padlocks, door cylinders | Landlord and carrier access without handing over a key. |
| Central offices and headends | Door cylinders, cabinet locks | Interior spaces a badge system never reached. |
| Colocation cages | Padlocks and cage cylinders | Carrier separation with no controller per cage. |
| Generator and fuel enclosures | Weather resistant padlocks | Contractor access to outdoor assets, on a schedule. |
One key for the whole footprint
A single CyberKey can carry up to 3,300 locks, or up to 12,000 lock list entries on a Generation 2 key with the Lock List Expansion module, across as many as 49 separate schedules. A master key has no limit. A field technician carries one key for an entire market, and what it opens is decided in software rather than by which keys are on the ring.
Because permission lives in the key rather than the lock, sending a technician to a different set of sites tomorrow does not require anyone to drive to a lock.
Climbers, contractors and carriers
Access is issued against a schedule instead of handed over. A tower crew, a generator contractor or a co-locating carrier gets a key that opens named sites, on named days, between named hours, and stops working when that window closes. Nothing has to be collected, and an unreturned key expires on its own.
If a key is lost you disable it in CyberAudit Web and it stops opening locks. Locks also hold a lost key list, up to 500 entries on Generation 2 non-padlock models, so a named key can be refused at the cylinder itself. No site is rekeyed and no other key is affected.
Keys can be refreshed without returning to a depot. A wall mounted Authorizer at a regional yard, a USB or ValidiKey station, a Flex System keyport, a key vault, or a phone over Bluetooth will all update a key. CyberKey Air and Air2 skip the communicator entirely and update directly over wifi, which matters for crews who work a territory and never come back to an office.
The audit trail
Every cylinder records the lock ID, the date, the time and whether access was granted. A standard cylinder stores 1,100 events in Generation 1 mode and 6,500 in Generation 2. The CyberKey keeps its own separate trail of up to 3,900 events, or 12,000 on a Generation 2 key, and it always records a refusal, so an attempt at a site a technician was not cleared for is captured even though the lock never opened.
For a network operator that turns site visits from an unknown into a record: which sites, which person, which day, and whether the visit was authorized.
What a rollout looks like
1. We survey the openings. Gate padlocks, hut cylinders, cabinet cam locks and enclosure padlocks each take a different format. With over 450 cylinder designs the goal is to match hardware already deployed.
2. We fit a pilot. A handful of real sites, real keys, real crews. Most cylinder swaps take as little as 30 seconds; awkward formats run 10 to 15 minutes. Nothing is drilled and nothing is wired.
3. You read the audit trail. You see which sites were visited, by whom and when, before committing to anything.
Common questions about telecom site access control
Can we secure unstaffed cell sites with no power for a reader?
Yes, and it is the main reason network operators choose CyberLock. There is no wiring and no battery at the lock. Power comes from the battery inside the CyberKey when the key touches the cylinder. A tower gate, a hut door or a street cabinet gets full access control and a full audit trail with nothing to plug in.
How many sites can one key open?
Up to 3,300 locks on a standard key, or up to 12,000 lock list entries on a Generation 2 key with the Lock List Expansion module, across up to 49 separate schedules. A master key has no limit. A technician normally carries one key for a whole market.
Can we give a tower crew access to specific sites for specific days?
Yes. A key is issued against a schedule naming which locks it opens, on which days and between which hours. It stops working when that window closes, so nothing has to be collected and an unreturned key expires on its own.
What happens when a contractor loses a key?
You disable it in CyberAudit Web and it stops opening locks. Locks also hold a lost key list, up to 500 entries on Generation 2 non-padlock models, so a named key can be refused at the cylinder itself. Nothing is rekeyed and no other site is affected.
Do we get a record of attempted entry?
The CyberKey always records a no access event in its own audit trail, so an attempt at a site the technician was not cleared for is captured even though the lock never opened. Locks do not record denied attempts by default, though that can be configured.
How do crews update keys if they never return to an office?
Keys are refreshed by a communicator: a wall mounted Authorizer at a regional yard, a USB or ValidiKey station, a Flex System keyport, a key vault, or a phone over Bluetooth. CyberKey Air and Air2 skip the communicator entirely and update directly over wifi.
Can a landlord or co-locating carrier be given limited access?
Yes. They get a key scoped to the openings they are entitled to, on a schedule, with every use recorded. That is usually easier to administer than issuing a mechanical key you can never get back.
Will the hardware survive outdoors on a tower site?
CyberLock makes weather resistant padlocks and cylinder formats intended for exterior doors, gates, cages and containers. Over 450 designs cover interior and exterior openings, padlocks, cabinets and containers, so the format is matched to where the asset sits.
Can we try it on our own sites first?
Yes. We run free pilots. We fit a small number of your openings, issue keys to the crews who actually use them, and you read the audit trail before committing to anything.
