School and University Access Card Replacement Guide

Campus access control is more complicated than most facilities of comparable size. A university or K–12 school may run HID Prox 26-bit on exterior doors, Kantech ioProx on interior zones, Keri Systems panels on a separate wing, and MIFARE-based smart cards on student IDs—sometimes all in the same building. American Key Cards supplies compatible replacement credentials for the most common campus formats, programmed to your facility code, without requiring a dealer account. For secured formats—HID iCLASS SE, HID Seos, MIFARE DESFire EV3 with AES application-layer encryption—no third party can reproduce those credentials, and we say so plainly below.

Why Campus Access Card Replacement Is Harder Than It Should Be

The original integrator who installed your system almost certainly also holds the facility code and the credential supply relationship with the OEM. When that integrator is no longer your vendor, or when your procurement office wants a second source, finding compatible credentials without re-engaging the original contractor can feel impossible.

It is not impossible for open 125 kHz proximity formats. What you need is a supplier who programs to the correct format—not just the correct frequency—and who is transparent about what can and cannot be reproduced.

The Most Common Campus Access Formats

HID Prox 26-Bit (H10301)

Standard 26-bit Wiegand is the single most deployed proximity format in North American access control, and it appears on a large share of K–12 and higher-education campuses. HID’s OEM card part numbers include 1386 (ISO card), 1326 (ProxCard II), 1346 (ProxKey III fob), and 1586 (ISOProx II). These operate at 125 kHz, carry no encryption, and output a standard H10301 26-bit Wiegand signal to any compatible access panel.

Because the format is fully open, compatible aftermarket cards are straightforward to produce. AKC supplies programmed 26-bit clamshell cards and key fobs matched to your facility code and card number range. See the full HID Prox H10301 format page for technical specifications and reader compatibility.

Compatible readers include the HID ProxPro 5355, HID MiniProx 5365, and any Wiegand 26-bit panel from Lenel, Software House, Kantech, Continental Access, or similar manufacturers.

Kantech ioProx (XSF / 26-Bit)

Kantech ioProx is the dominant format in Canadian school boards and is common in U.S. campuses that were installed under a Johnson Controls contract. The ioProx XSF (eXtended Secure Format) operates at 125 kHz using a Kantech proprietary air-interface encoding that is distinct from HID Prox—you cannot substitute HID cards in a Kantech reader, and vice versa.

OEM Kantech card part numbers include P10SHL (clamshell), P20WLM (printable ISO card), P30DMG (ISO card with graphic quality), P40KEY (key fob), and P20DYE (dye-sublimation printable card). These are sold through Johnson Controls’ dealer channel with minimum-quantity requirements that frustrate facility managers trying to replace a handful of lost cards.

AKC supplies Kantech ioProx-compatible clamshell cards and key fobs programmed to your site code. Visit the Kantech ioProx format page for full ordering information and reader compatibility.

Indala FlexPass 26-Bit

Indala FlexPass is found on campuses whose systems were installed in the late 1990s through early 2010s when Motorola and later HID Global distributed the Indala brand. The critical technical point that surprises most buyers: Indala uses PSK (Phase Shift Keying) modulation, while HID Prox uses ASK/FSK. Both are 125 kHz, and both output 26-bit Wiegand data to the panel—but the card-to-reader communication layer is completely incompatible. An HID card will not read in an Indala reader, and an Indala card will not read in an HID reader.

OEM Indala card part numbers include FPCRD-SSSMW-0000 (ISO PVC) and FPISO-SSSCNA-0000. Reader models that identify an Indala installation include the FP4511A and FP3521A.

AKC supplies Indala FlexPass 26-bit compatible cards and fobs. See the Indala FlexPass 26-bit format page for a full explanation of PSK modulation and how to confirm your format before ordering.

Note: Indala FlexSecur (the ASP encrypted variant) cannot be reproduced by any third party—the encryption is site-specific. If your readers require FlexSecur credentials, replacements must come through HID Global.

Keri Systems MS Format (MicroStar)

Keri Systems’ MS format is used on PXL-500 Tiger controllers and is one of the harder-to-source campus formats. The bit structure is proprietary and not publicly documented; only Keri MS-series readers will decode these credentials. OEM Keri MS card part numbers include KC-10X, MT-10X, PKT-10X, and MT-10XP.

For campuses that also run Keri PXL-250 or IntelliProx controllers using standard 26-bit Wiegand, those readers accept the same open-format cards as any HID-compatible reader—and are a distinct product line from the MS format. Ordering the wrong Keri type is a common mistake; confirm your controller model before placing an order.

AKC supplies compatible Keri MS format cards for PXL-500 installations. Visit the Keri MicroStar MS format page for more information on distinguishing MS from Keri 26-bit systems.

MIFARE Classic and MIFARE DESFire (Campus Smart Cards)

Universities frequently issue student ID cards that serve as both access credentials and campus payment or library cards. These dual-function cards typically use 13.56 MHz smart card technology, most commonly MIFARE Classic 1K or MIFARE DESFire EV2/EV3.

MIFARE Classic 1K (MF1S50YYX_V1, MF1ICS50) uses the CRYPTO1 cipher, which is cryptographically broken—sector keys can be recovered in minutes with tools like the Proxmark3. Many campuses are migrating away from MIFARE Classic. For those still running it, AKC supplies compatible 1K cards for access-control-only applications.

MIFARE DESFire EV2 and EV3 (MF3D43, MF3DH43, and related NXP part numbers) are a different matter. DESFire uses AES-128 hardware encryption with a Common Criteria EAL5+ secure element. The application-layer data—dining balances, library entitlements, access zone permissions—is protected by keys that are specific to the campus deployment. No third party can clone or reproduce a MIFARE DESFire card with application-layer programming. AKC does not claim otherwise. Replacement DESFire credentials for university campus card systems must be issued through the campus card office using the deployment’s own provisioning system and application keys.

Format Comparison: Common Campus Access Credential Types

Format	Frequency	Chip / Standard	OEM Example Part Numbers	Cloneable	AKC Compatible
HID Prox 26-bit (H10301)	125 kHz	HID Prox	1386, 1326, 1346	Yes	Yes
Kantech ioProx XSF	125 kHz	Kantech proprietary	P10SHL, P40KEY	Yes	Yes
Indala FlexPass 26-bit	125 kHz	Indala PSK	FPCRD-SSSMW-0000	Yes	Yes
Keri MS Format (MicroStar)	125 kHz	Keri proprietary	KC-10X, MT-10X	Yes	Yes
MIFARE Classic 1K	13.56 MHz	NXP MF1ICS50	MF1S50YYX_V1	Yes (CRYPTO1 broken)	Yes (access-only)
MIFARE DESFire EV3	13.56 MHz	NXP MF3D(H)x3, AES-128	MF3D43, MF3D83	No	No
HID iCLASS SE	13.56 MHz	HID SE (AES-128, EAL5+)	3000, 3002	No	No
HID Seos	13.56 MHz	HID Seos (AES-128, EAL5+)	5005, 5006	No	No

Identifying Your Campus Reader and Card Format

Before placing any order, confirm the format in use. Campus systems frequently mix formats across buildings installed in different years, so confirm each zone independently.

Read the reader housing. HID readers show the model number on the face or rear label—common campus models include the HID ProxPro 5355, HID MiniProx 5365, and HID MaxiProx 5375. Kantech P-series readers show “Kantech” or “Johnson Controls.” Indala readers show FP-prefixed model numbers.

Check existing cards. Many OEM cards print the part number on the card body. The facility code is often labeled “FC” or “Site Code” with a number between 1 and 255 on 26-bit formats.

Check the panel software. Lenel OnGuard, Software House C-CURE, Kantech EntraPass, and Keri NXT software all display the credential format in system settings.

See our access card format identification guide for a full walkthrough if you are still unsure.

What “Compatible by Specification” Means in a Campus Context

American Key Cards is not affiliated with HID Global, Kantech, Johnson Controls, Indala, Keri Systems, or NXP Semiconductors. Our cards are programmed to match the same format specification as the OEM credential—the same frequency, air-interface protocol, bit structure, and facility code. For a Kantech ioProx reader, that means a card with the same XSF dual-encoding as a P10SHL. For an HID ProxPro reader, it means the same H10301 26-bit output as a 1386 or 1326.

What this does not cover: encrypted credentials. HID iCLASS SE and HID Seos use AES-128 keys established through HID’s Trusted Identity Platform and bound to the chip’s EAL5+ secure element. MIFARE DESFire EV3 application data is protected by AES-128 keys held by the campus card office. No third party can reproduce these credentials—anyone who says otherwise is selling you non-functional cards.

Ordering Compatible Campus Cards

K–12 schools typically order cards in batches at the start of the academic year or when staff turnover requires access changes. Universities run a more continuous replacement cycle—students graduate, lose cards, or enroll mid-year. In both environments, OEM dealer channels perform poorly: minimum order quantities, contractor account requirements, and multi-week lead times are standard obstacles.

AKC ships to order in any quantity. Provide the facility code, card number range, and format—or the reader model number if you need help confirming the format. Cards arrive programmed and ready to enroll in your access control software. For campuses with multiple buildings on different systems, we handle multiple formats in one order, each batch labeled by facility code and card number range.

Why Compatible Cards Cost Less

OEM access cards carry a manufacturer’s brand markup plus dealer distribution margin. Kantech P10SHL cards through a Johnson Controls contractor include two layers of margin above the 125 kHz chip cost. AKC prices on technology and programming only—no brand license fee. For a school district or university replacing credentials regularly across a large population, the per-card difference adds up quickly.

---

If you manage access control for a school, college, or university campus and need compatible replacement cards or fobs without going through the original installer, contact American Key Cards. Provide your reader brand, model number, and facility code—or send a photo of your existing card and reader housing—and we will confirm the correct format and get a quote to you promptly.