Henry AV Premium Technology. Unbeatable Value.
A card reader mounted beside a commercial door with its cover off and the wiring visible during installation

Blog Security & Access Control

Wiegand vs OSDP card readers

· 10 min read · By Henry AV

Wiegand vs OSDP in one answer

Wiegand is a one-way, unencrypted interface that sends a card number from the reader to the controller over dedicated wires, typically up to 500 feet. OSDP is a two-way RS-485 protocol, published as a Security Industry Association standard, that adds AES-128 encryption, constant reader supervision and multidrop wiring over runs of up to about 4,000 feet. For new doors and most upgrades, OSDP is the better choice.

The controller makes the decision for you, though. A reader set to OSDP won't do anything on a panel port that only speaks Wiegand, so choosing a protocol is really a question about the controller you have or plan to buy. That's why we ask for the controller model whenever we quote readers.

How Wiegand card readers work

A Wiegand reader sends the card number over two data lines, Data 0 and Data 1, pulsing one line for each zero bit and the other for each one bit. Add power, ground and the separate lines the panel uses to switch the reader's LED and beeper. A typical run ends up with six or more conductors in a shielded cable, home-run from each reader to its own controller port. Most sites use the 26-bit format or a manufacturer's longer format, and the panel only needs to know which one to decode.

Data goes one way. The panel can't ask the reader anything, so it can't tell whether the reader is working, tampered with or missing. Unless someone wired a separate tamper input, a dead reader and a quiet door look exactly the same.

Nothing is encrypted. The card number crosses the wire in the clear, and it's the same bits every time that card is presented. Anyone who can reach the wires behind the reader can capture those bits with inexpensive hardware and replay them later.

Distance is limited too. HID's spec sheet for the HID MaxiProx 5375 long-range reader lists Wiegand cable distance at 500 feet (152 m) and RS-485 at 4,000 feet (1,219 m) on the same reader. That 500-foot ceiling is the figure you'll see on most Wiegand reader data sheets.

How OSDP works on an RS-485 bus

OSDP, the Open Supervised Device Protocol, runs over RS-485, a two-wire, half-duplex serial bus. The controller polls each reader by address, and the reader answers every poll. That polling is the "supervised" part: if a reader stops answering, the controller knows right away and can raise an alarm.

OSDP Secure Channel encrypts traffic between reader and controller. The Security Industry Association's OSDP standard page says Secure Channel supports AES-128 encryption and notes that it's required in federal government applications. It isn't switched on automatically on every device, though. Readers usually pair with the controller using a default install key and then move to a unique one, and a reader left in install mode is far less protected than the spec sheet suggests.

Because data flows both ways, the controller can drive LED colors, the buzzer and, on readers with a display, text prompts. Depending on the reader and controller, you can also push configuration or firmware updates over the bus.

A typical OSDP reader needs only four conductors: power, ground and the two RS-485 data lines, ideally on a twisted pair. SIA describes this as 2 wires instead of 12 or more, which is what makes multidrop possible. Several readers can share one daisy-chained bus, each with its own address, terminated at the ends. How many readers a port will take varies by controller, so check that before you design a bus around it.

According to SIA, HID Global, Mercury Security and Lenel created the first version in 2008, and ownership moved to SIA in 2012. It was published as international standard IEC 60839-11-5:2020, and SIA released version 2.2.2 in October 2024.

Wiegand and OSDP compared side by side

WiegandOSDP
Data directionOne way, reader to controllerTwo way, controller polls each reader
EncryptionNoneAES-128 with Secure Channel enabled
Reader supervisionNone without a separate tamper inputContinuous, offline readers are reported
Data wiringData 0, Data 1, plus LED and beeper linesTwo RS-485 data lines, ideally twisted pair
Typical conductorsSix or more, shieldedFour (power, ground, two data)
TopologyOne reader per port, home runMultidrop, daisy-chained with addresses
Typical max cable run500 feetAbout 4,000 feet
Reader feedbackLED and beeper on discrete linesLED, buzzer and text prompts over the bus
StandardDe facto, no governing bodySIA standard, also IEC 60839-11-5

For a new site, OSDP wins on every row. The harder decisions come when there's already a working Wiegand system in the ceiling.

Upgrading from Wiegand to OSDP? Check these first

Start with the controller. On many current boards each reader port can be set to Wiegand or OSDP, but older boards may need a firmware update, an interface module or replacement. OSDP started at HID Global, Mercury Security and Lenel, but that history won't tell you what an older board supports. Get the exact controller model and firmware version and check whether it supports OSDP and Secure Channel before you order readers.

Then check the software. Reader addresses, baud rate and Secure Channel keys are usually set from the access control software. If you run LenelS2 or another platform, confirm the version you're on can configure OSDP readers and Secure Channel.

Look at the readers you'd keep. Many current readers can be set to either protocol, by configuration card, software or app depending on the model. If yours can, the upgrade may be a configuration change at the door.

Walk the cable. Wiegand cable usually has enough conductors for OSDP, and on shorter runs it can often be reused if you can put the data lines on a twisted pair. Moving to a daisy chain may mean new cable between doors. Follow the reader and controller install guides on cable type and length.

Recheck power. With several readers on one bus, the supply at the panel carries all of them, so total the current draw against your power supply, Altronix or otherwise. If the controller itself draws PoE, confirm your network switches and PoE budget while you're at it.

Converters exist that put a Wiegand reader on an OSDP port or the reverse. They're useful for odd devices, but the leg that stays Wiegand stays unencrypted. Ask whether the reader and controller have been tested under SIA's OSDP Verified program, too.

When Wiegand is still fine

Wiegand still has a place. If one reader fails on a working Wiegand system you aren't upgrading this year, matching the existing reader is the sensible repair. The same goes for interior doors where the reader isn't the real security boundary, such as an office door behind an entrance that's already controlled.

Some devices only output Wiegand, including certain long-range gate readers, biometric units and intercoms. In those cases you either keep a Wiegand port or add a converter and accept the unencrypted leg.

Where we'd steer you away from Wiegand is on new exterior doors, server rooms, pharmacies and anything else that gets audited. If you have to buy readers for a Wiegand panel today, choose models that can switch to OSDP so the readers outlast the panel. You can compare current access control readers and controllers or the full list of security and access control brands we supply.

What to include when you request reader and controller pricing

Reader and controller quotes stall when the protocol, card technology or controller model is missing. Send these and we can price the right parts the first time:

  • Controller model and firmware version, plus whether you're keeping it or replacing it.
  • Protocol required: Wiegand, OSDP or OSDP with Secure Channel.
  • Reader part numbers, or the mounting style (mullion or single-gang) and keypad or display needs.
  • Card technology: 125 kHz prox, 13.56 MHz smart card, mobile credentials, or a mix during migration.
  • Door count and readers per port, with rough cable distances for the longest runs.
  • Power and locking hardware, such as Altronix power supplies or Securitron locks, if they're part of the job.
  • Quantity, ship-to location and need-by date.

The same habits apply to any equipment order, and we cover them in more detail in what to include in a quote request. We ship access control equipment to businesses nationwide, and stocked readers and controllers ship fast.

Pricing a Wiegand to OSDP changeover

If you're moving a site from Wiegand to OSDP, or adding doors to a Wiegand system you plan to convert later, send us the controller model, reader count by port and card technology. We'll reply by e-mail with pricing and availability on HID readers, Mercury Security controllers and the power supplies and locks that go with them. Send us your reader list to get started.

Not sure yet whether your controller can make the jump? Get in touch with our team with the board model and we'll work through it with you.

Frequently asked questions

Is OSDP more secure than Wiegand?

Yes, when Secure Channel is turned on. OSDP Secure Channel encrypts traffic between reader and controller with AES-128, and the controller supervises each reader continuously. Wiegand sends the card number unencrypted in one direction, so anyone who taps the wires can capture it. OSDP without Secure Channel still adds supervision, but not encryption.

Can I reuse my Wiegand wiring for OSDP readers?

Often, on shorter runs. OSDP needs power, ground and two data conductors, ideally on a twisted pair, and Wiegand cable usually has enough conductors for that. Moving to a daisy-chained bus may mean new cable between doors. Check the reader and controller install guides for cable type and maximum length before you reuse it.

Do OSDP readers work with any access control panel?

Only with a panel port that supports OSDP. Because OSDP is an open SIA standard, readers and controllers from different manufacturers can work together, but older panels may only speak Wiegand. Confirm the controller model, firmware and Secure Channel support first, and ask whether both devices have been tested under SIA's OSDP Verified program.

Does Henry AV supply card readers and access control panels?

Yes. Henry AV supplies access control equipment from HID, Mercury Security, LenelS2, Securitron and Altronix to businesses nationwide. Pricing is by quote: send part numbers or your reader and controller requirements, and our team quotes it by e-mail. In-stock hardware ships the same or next business day.

Related products