Wiegand has connected readers to controllers for decades, and its age shows. The protocol carries card data in the clear, offers no supervision of the wire, and cannot send anything back to the reader beyond simple LED and buzzer control. OSDP, the Open Supervised Device Protocol, was built to replace it. On new work it is now the default worth specifying, and on existing sites it is worth a migration plan.
Why move off Wiegand
Wiegand’s data lines are unencrypted, so a tap on the cable between the reader and the controller can capture credential numbers. The link is also unsupervised, which means a cut or shorted wire may go unnoticed. And because it is one-way, the reader cannot be managed or updated from the head end. For a modern access system, those are three real gaps.
What OSDP adds
OSDP is a two-way serial protocol that runs over RS-485. One pair of wires can support multiple readers on a bus, which simplifies cabling on larger doors and corridors. Because it is bidirectional, the controller can push configuration, colours, and firmware to the reader, and the reader can report tamper and status back. OSDP is maintained by the Security Industry Association and has been published internationally as IEC 60839-11-5.
Secure Channel is the point
The security gain comes from OSDP Secure Channel, which encrypts and authenticates the link between reader and controller using AES. Specifying OSDP without enabling Secure Channel leaves much of the benefit on the table, so treat Secure Channel as a requirement, not an option. Confirm that both the reader and the controller support it, and that keys are provisioned during commissioning rather than left at defaults.
Planning a migration
Most sites move in stages. Inventory the readers and controllers and confirm which already speak OSDP and which are Wiegand only. Many controllers accept OSDP on the same terminals or through a converter, and many current readers support both modes by configuration. Prioritize perimeter and high-value doors first, verify Secure Channel is active after each change, and keep a record of firmware versions. Cabling is usually reusable: OSDP runs on standard shielded twisted pair within its distance limits.
Common gotchas
Watch bus length and topology, since RS-485 has distance and daisy-chain rules that Wiegand did not. Confirm reader and controller are set to the same baud rate and address. And test one door end to end, including Secure Channel and tamper reporting, before rolling the pattern out across the site. Done in order, the switch is low drama and closes gaps that Wiegand cannot.
References
Last updated 2026-07-07.