Layered access control for Dubai data centres

The layers table

Security in a data centre is not one lock. It is a series of checks, each with its own record. The table below is the way we organise a survey, and your design may add or merge layers.

Each layer slows an intruder and creates a record, so an unauthorised entry has to defeat several checks and every attempt leaves evidence. The gate level overlaps with gate access control, and the data hall often uses a mantrap.

Two-factor entry and anti-passback

For halls and cages the usual standard is two factors: something carried, such as a card, plus something present, such as a fingerprint, or a PIN. Anti-passback prevents a card from being used to let a second person in, by requiring a card to exit before it can enter again. Dual-authorisation rules, where two named people must badge in together, suit vaults and critical rooms. Each rule needs reader positions on both sides of the door, so plan them before the walls are closed.

Audit logs that stand up to questions

The point of a data centre log is accountability. Time must be synchronised across controllers, event records must be protected from edits, and exports must be kept per your policy. Access rights should expire. Agree who reviews exceptions weekly: forced doors, door held open, repeated denied attempts and out-of-hours entries. A log nobody reads gives comfort without security. Follow applicable UAE data protection and building policies for any personal data in the logs.

Power and life safety come first

Data halls are fed by uninterrupted power, and the access control system should be too. Controllers and locks need their own protected supply with battery backup sized for your outage plan. Lock type matters: a door that stays locked in a fire could trap people, and a door that unlocks in an outage could expose the hall. The usual answer is a mix of fail-safe and fail-secure hardware on different doors, with manual emergency releases and a link to the fire alarm for escape routes. Escape doors and fire-rated doors follow Civil Defence requirements and the approved building drawings; your fire consultant confirms the logic.

Consent and approvals

In a multi-tenant building the landlord or facility manager controls common doors, so get written consent before touching lobbies or risers. Cages inside a colocation space are agreed with the operator. If cameras are part of the project, CCTV in Dubai falls under SIRA rules; use a SIRA-licensed security provider and project approval where it applies. Our companion guide, automatic doors and access control for data centres, goes further.

Installation sequence

1. Survey each zone, listing doors, frames, ceiling voids and risers, and note existing readers.
2. Agree the access matrix: roles, zones, time rules and visitors.
3. Pull separate, labelled cable routes for power, locks, readers and network, with fire-stopping where cables cross fire lines.
4. Fit readers and locks, rack locks and door sensors; align with the door hardware contractor.
5. Install controllers in secured, ventilated cabinets with battery backup and tamper switches.
6. Configure anti-passback, dual authorisation, alarms and time sync.
7. Test each door for valid, invalid, exit, held open, forced door, power loss and fire release.
8. Hand over with logs, drawings and the review procedure.

Keeping it healthy in Dubai heat

Cooling is the obvious priority in a data centre, but corridors, plant rooms and entrance vestibules may be hotter than the hall. Controllers in uncooled risers age faster, backup batteries lose life with heat, and outdoor readers at the gate face sun and sand. Include the controller cabinets in your thermal check, and have readers cleaned on a routine.

Warning signs

• Intermittent denied entries on the same door.
• A door alarm that clears itself.
• Event time stamps that disagree between controllers.
• A rack lock that needs the override key too often.
• Backup battery alerts or short run times after an outage.

Visitors, contractors and escorts

Most data centre incidents involve people who were allowed in but should not have been where they were. Visitors get time-limited credentials that only open the doors on their route, and contractors get named, expiring access linked to a work order. Escorts are recorded in the log, and credentials return to reception on exit. For cages, the tenant rather than the operator administers who is on the list, with the operator holding an override for emergencies. These rules are as important as the hardware, and we write them into the handover pack so staff do not invent their own workarounds.

Retrofitting a live facility

Most of our data centre work is upgrading something that already runs. That means working around live traffic: pre-fabricating, taking one door at a time out of service, agreeing change windows, and testing the new reader against the old before cutting over. Where cabinets, biometric readers and card readers from different eras must coexist, we map the old credential types before choosing the new ones. See also gate access control for the site entrance.

What drives the quote

Number of zones and doors, reader type and two-factor requirements, rack lock count, controller redundancy, power backup, integration with CCTV, fire alarm and building management, and how much work happens in live, restricted areas. Out-of-hours access arrangements affect planning rather than the hardware.

Contact us on +971 50 494 8667 with the facility type and number of zones, and we will plan the visit.

Supply in Dubai

Mount Everest Automatic Doors supplies Data Centre Access Controls in Dubai, with a free site visit, installation and servicing by our own technicians. We also supply to Abu Dhabi, Sharjah, Ajman, Umm Al Quwain, Ras Al Khaimah and Fujairah.