HID® Seos®

What Seos actually is, in operational terms

Seos is HID's device-independent credential architecture. Rather than storing an access number in the open the way a 125 kHz proximity card does, Seos wraps your credential data inside a Secure Identity Object — an encrypted, digitally signed container — and ties that container cryptographically to the specific secure-element chip it lives on. The reader and the credential perform a mutual AES-128 authentication before any data moves, so the credential proves it's genuine and the reader proves it's authorized, in both directions, on every tap.

The practical consequence for a facility is that a Seos credential is not a number you can read off and reproduce. It's a cryptographic conversation that only a properly keyed credential and a properly keyed reader can have. That's the entire security proposition, and it's why Seos is chosen for federal, financial, healthcare, and critical-infrastructure sites where identity assurance is non-negotiable.

The same Seos architecture also runs as a mobile credential in HID Mobile Access — the phone becomes the secure element, provisioned over the air. Sites frequently run physical Seos cards and mobile Seos side by side from the same management platform.

How Seos credentials get issued and replaced

Seos issuance happens under HID's Trusted Identity Platform, using cryptographic keys specific to your organization. When a facility is set up, HID and your integrator provision those keys into your readers and into your credential order; from then on, every new card or mobile credential is created against that key set. This is what makes the credentials trustworthy — and also what makes them impossible for an outside vendor to fabricate.

When someone loses a Seos card, the replacement path is the same channel that issued the original: your access-control integrator orders and provisions a new credential to your keys, and you revoke the lost one in your management software so it stops working immediately. There's no bench-programming shortcut, because the whole design goal is that a lost card is a dead card the moment you revoke it.

For bulk reissuance — a big intake of staff, a merged site, a lease turnover — your integrator handles the order against your key set. If you've lost track of who your integrator is, HID's partner locator will connect you to an authorized dealer who can pick up the account.

Reader ecosystem and how Seos fits your building

Seos reads on HID's Signo line and on iCLASS SE and multiCLASS SE readers with Seos enabled. Signo is the current-generation platform and is the usual target for new deployments and reader refreshes because it handles Seos, mobile credentials, and OSDP Secure Channel to the panel out of the box.

Because multiCLASS readers can be configured to accept more than one technology, many facilities run Seos as the primary credential while a reader still accepts a legacy format during a migration window. That flexibility is a deployment tool, not a permanent state — the security benefit of Seos is only fully realized once the older, more copyable technologies are switched off at the reader.

If you're planning doors, the reader decision matters more than the card decision: a Signo or SE reader provisioned with your keys is what makes Seos work, and it's also what will accept your mobile credentials when you're ready for them.

Where American Key Cards fits — and where we don't

We don't sell Seos, and we won't imply we can. What we can genuinely help with is the rest of your credential fleet. Almost every Seos site also runs open 125 kHz proximity somewhere — a parking gate, an older outbuilding, a legacy wing mid-migration — and that's exactly the stock we supply: unbranded, compatible-by-specification proximity cards and fobs programmed to your facility code, with no dealer account required.

If you're mid-migration from a legacy format toward Seos, we can supply the interim proximity credentials while your Seos rollout proceeds through HID's channel, so you're never caught short on the old doors while the new ones come online. And if you're simply trying to figure out which of your doors are Seos and which are still on something we can supply, send us photos of your readers and credentials — we'll tell you honestly which is which.