Traka ASSA ABLOY - Oceania - Recent News

New Traka Gallagher Integration release - v4.2.0

Fri, 21 Aug 2026 00:36:00 GMT

Introduction

This Traka Gallagher integration release contains additional functionality, enhancements, and an updated certification for currently supported TrakaWEB and Gallagher Command Centre versions. For detailed information on updated certificate and requirements, please refer to the official associated integration documentation (UD0244 and UD 0245).

New Functionality

Registration of “Gallagher Remote Login” module within Traka Integration Engine.
Introduced new REST API connection for Remote Login capability.
Dedicated Door Monitoring feature through concurrent Gallagher REST API connections.

Fixes and Enhancements

Fixed Access Group mapping race issue – added a check for existence of user first, then maps the relevant groups.
Fixed handling of disabling remote login feature to close Gallagher event stream.
Enhanced API connection continuity for integration stability.
Enhanced real-time event monitoring idle reconnect.

Technical Specification

Supported Platforms	Windows 10 Windows 11 Windows Server 2022+
Traka Components	TrakaWEB v4.3, v4.4, v4.5, v4.6 Traka Integration Suite v2.23 Traka Monitor v2.0
Gallagher Command Centre Components	Supported Gallagher Command Centre Versions: 9.30, 9.40, 9.50 Licenses: From Gallagher Command Centre version 8.90: Gallagher Traka C12921 (Licensed feature) Gallagher REST API client certificate (optional) OR Gallagher REST Cardholders (Licensed feature) Gallagher REST CreateEvents (Licensed feature) Gallagher REST Events (Licensed feature) Gallagher REST API client certificate (optional)
Prerequisites	Additional to the above prerequisites, the following is also required on the Traka Application and Gallagher Command Centre Servers: Microsoft .NET Framework Version 4.8

Where to download the latest Integration?

Download the Traka Gallagher Integration v4.2.0 from the Traka Knowledge Base:

Traka Gallagher Integration v4.2.0

New TrakaWEB release - TrakaWEB v4.6.3

Thu, 02 Jul 2026 00:24:00 GMT

Introduction

TrakaWEB v4.6.3 is now available for all partners and customers in Oceania!

Alongside this release of TrakaWEB, a new version of the Traka Touch application has been released. If upgrading your environment to TrakaWEB v4.6.3, both the Traka Touch application and Integration Engine must be upgraded to the following versions:

Traka Integration Engine – v2.23.0000
Traka Touch OS v4, v5 = Traka Touch Application: v3.8.16
Traka Touch OS v6+ = Traka Touch Applicaiton: v4.2.1

Please note: Before completing an upgrade of a Traka environment, it is recommended that you consult with Traka Technical Support.

New Features

Added Region Override software permission for user visibility across regions.
Added Flexible Asset Detection support.
Added Remote Upgrades.
Added Traka Touch Linux support for the new Aesthetic Locker product type.
Added Key Retaining Receptor Strip support and lockout functionality.
Added the ability to set Traka Touch timezone remotely from TrakaWEB Admin.
Added support for multiple credentials per user.

System Improvements

Added ability to hide deleted iFobs from Traka Web.
Added Basque language support to Traka Web and Traka Web Admin.
Increased Item Booking limits.
Improved Item Booking handling across multiple time zones.
Improved Item Booking support across multiple time zones.
Corrected System Access item counts for Common Item Access Groups.
Improved Remote Release Popup user visibility based on permissions.
Added configurable password expiry notification popup.
Added show/hide option for new password fields.
Prevented browser autocomplete on sensitive user fields.
Prevented unnamed Regions from being added.
Improved Item Access by Item Access Group report performance.
Refined auditing of Item Access changes from Integration Engine.
Added visible version information in Traka Web Admin.
Added advisory message when Traka Touch is newer than TrakaWEB.
Improved email configuration validation messages.
Added warnings when creating or upgrading databases on unsupported SQL Server versions.
Improved database maintenance user experience.
Improved scheduled event purge so timeout does not prevent old event deletion.
Removed Trace-level logs from services.
Added extra SocketException logging.
Improved Comms Engine handling of network outages.
Added support for Key Storage Provider certificates in the Business Engine.
Added AES encryption support for 16-bit key cabinets and lockers.
Added PS256 signing support for OpenID Connect.
Added configurable cookie settings for SameSite, HttpOnly and Secure flags.
Updated jQuery Validation library to 1.20.0.
Added browser vulnerability mitigations.
Removed redundant cookie.
Updated Broker Certificate Installer for newer RabbitMQ config format.
Improved RabbitMQ certificate update process.
Unified Installer no longer removes RabbitMQ and Erlang on uninstall.
Unified Installer can complete on Windows 11 by removing the IIS6 feature dependency.

Important Considerations

Upgrading from TrakaWEB v3 to v4

Due to the change in the TrakaWEB UI and a slight change in the installation and upgrade process between TrakaWEB v3 and TrakaWEB v4, it is recommended that you consult with a Traka Engineer before completing any upgrades.

Consideration should be made to undertake training in the new TrakaWEB UI to bring you up to speed on the latest features and functionality.

Technical Support

If you require technical consultation or support during the implementation or upgrade to TrakaWEB v4.6.3, please contact your local Traka representative.

Traka Oceania

Service desk: my.traka.com.au

Phone: +61 1800 666 110

Email: support.oceania@traka.com

Product Security Advisory - Lantronix Device Servers (CVE-2025-2567)

Wed, 28 May 2025 00:10:00 GMT

OVERVIEW

Traka has been informed about a vulnerability report, CVE-2025-2567 and initially identified in icsa-25-105-05, concerning Lantronix XPort and UDS2100 device servers. This issue impacts the following Traka solutions that use these devices:

First-generation Key Management with separate keypad and LCD
First-generation Equipment Management (Lockers) with separate keypad and LCD
First-generation Access Control Equipment with separate keypad and LCD systems

These are commonly referred to as Traka 8-bit and 16-bit systems.

The vulnerability is discussed on the Lantronix website: CVE-2025-2567 Lantronix XPort Missing Authentication for Critical Function vulnerability

The critical vulnerability scoring system (CVSS) has rated this as a critical vulnerability with a rating of 9.3 and we therefore recommend immediate remedial action.

NEXT STEPS

The following products are in scope of this vulnerability announcement.

Traka 8-bit and 16-bit systems, regardless of connected software platform, meeting the following criteria:

Fitted with Lantronix XPort-03, XPort-04, XPort-05 - a component fitted to the 8-bit/16-bit control board, accessible behind the system’s front panel.
Fitted with Lantronix UDS2100 – connected externally to the 8-bit/16-bit control board but typically located behind the Traka system’s front panel. UDS2100 is used for Traka32 with TACLS/RTUS (Real Time Update) scenarios.

If you are unsure, please contact Traka Technical Support.

It is important to note that the remediation process differs depending upon the Lantronix Device Server identified.

For Traka systems with a Lantronix XPort-05 or Lantronix UDS2100 fitted to the control board, Lantronix have released a firmware update which can be obtained from the Lantronix website, but we recommend that you follow the below documented steps in context of Traka products.

For Traka systems fitted with a Lantronix XPort-03 or XPort-04 device server, at the time of writing, there is no firmware available to mitigate the identified vulnerability. However, Lantronix have issued guidance to provide mitigations, also covered in the below document.

For information on how to identify the specific device servers, how to mitigate the vulnerability for each component and additional resources, please read “TD0226 - CVE– 2025-2567 remediation guide for Lantronix Device Servers”.

REFERENCES

Lantronix Article on CVE-2025-2567 - https://ltrxdev.atlassian.net/wiki/spaces/LTRXTS/pages/3130916865/CVE-2025-2567+Lantronix+XPort+Missing+Authentication+for+Critical+Function+vulnerability

Traka Remediation Documentation - TD0226 - CVE-2025-2567 remediation guide for Lantronix Device Servers - V1_0

NIST Vulnerability Database - CVE - https://nvd.nist.gov/vuln/detail/CVE-2025-2567

CISA ICS Advisory - https://www.cisa.gov/news-events/ics-advisories/icsa-25-105-05

CONTACT INFORMATION

If you would like more information or require technical support, please contact Traka Oceania Support.

Service Desk: https://my.traka.com.au

Email: support.oceania@traka.com

Phone: +61 1800 666 110

New TrakaWEB release - TrakaWEB v4.3.1

Wed, 13 Dec 2023 01:32:00 GMT

Introduction

TrakaWEB v4.3.1 is now available for all partners and customers in APACMEA!

Alongside this release of TrakaWEB, a new version of the Traka Touch application and Traka Touch application have been released. If upgrading your environment to TrakaWEB v4.3.1, both the Traka Touch application and Integration Engine must be upgraded to the following versions:

Traka Integration Engine – v2.23.0000
Traka Touch Application – v3.6.1

Please note: Before completing an upgrade of a Traka environment, please consult with your local Traka Engineer.

New Features

Exchange of Custody Lockers

This new cost option feature for non-RFID lockers enables you to control the secure exchange of used hard drives that are destined for erasure and disposal by contracted third-party specialist organisations.

This solution ensures that these used hard drives are secure and cannot fall into the wrong hands between their decommissioning and their final disposal.

Basic Authentication Password Complexity

Enables customers to set up TrakaWEB to adhere to Corporate or internal IT policies for strong passwords.

This new functionality significantly enhances individual password security and gives customers reassurance that they can adopt and enforce their standard policies for system access control within TrakaWEB.

Left & Right 5-way Receptor Strip Support

This feature allows 5-Way Receptor Strips to be used in Traka Touch Pro S and L cabinets.

This change was made to support the need for management of exceptionally large keysets, typically found when managing older buildings or more complex infrastructure (e.g., hospitals and mental health facilities, prisons, mining and utility sites).

Left & right 5-way Receptor Strips cannot be installed alongside 10 or 20-way receptor strips in Traka Touch key cabinets.

Locker Availability Indicator

This new functionality allows the addition of a beacon or strobe light to any Traka Touch locker system to provide a highly visual external indication that there are either items available or not from a specific locker.

This helps maximize efficiency and eliminate the time wasted in approaching a locker to retrieve an item only to find out none are available.

This is essential in large workspaces, such as warehouses and distribution centers, where every second counts in terms of productivity and there are large distances involved; this visual indication will save users approaching lockers that are empty.

Japanese Romaji Keyboard Support

This new functionality sees the adoption of the Romaji keyboard for users who select the Japanese language within Traka Touch.

This change makes the use of Traka Touch more accessible to Japanese users.

System Improvements

Disallowing Booking of Faulty Items

When using the Item Booking feature in conjunction with Fault Logging, it now checks the fault status of the Items being requested by the booking.

Any Items identified with critical faults will now be excluded from the Item Booking process.

This prevents Users from reserving and gaining access to Items that may have serious issues or need repair or replacement before they should be used.

This prevents accidents or incidents and ensures Users only book Items that are in good working order, saving time and ensuring User, Item, and data safety.

Integrations and API Enhancements

Controlling API Access

Added the ability in the Integration Engine to turn on/off the Integration Engine API endpoints, with the default of APIs being turned off in a fresh IE installation.

This facility increases security for customers who do not leverage the Integration REST API but are using the Integration Engine for Real Time Update Service, or customers wishing to prevent access to call APIs until further configuration is carried out.

SSL/TLS Transport Encryption by Default

The default for installations of the Integration Engine will be 'SSL enabled' to encourage the use of encryption.

This option aligns with our best practice recommendation for data transfers between the Integration Engine and TrakaWEB being encrypted, ensuring that communications are only based upon the certificate trusted chain.

Biometric Template property added in User Model

A new property has been added to the User object returned by the API, allowing for the retrieval of a user’s PCOMP2 biometric data.

Important Considerations

Upgrading from TrakaWEB v3 to v4

Consideration should be made to undertake training in the new TrakaWEB UI to bring you up to speed on the latest features and functionality.

Technical Support

If you require technical consultation or support during the implementation or upgrade to TrakaWEB v4.3.1, please contact your local Traka representative.

Traka Africa Service desk: support.trakaafrica.com Phone: +27 10 346 1870 Email: support.africa@traka.com	Traka Asia Service desk: support.trakaasia.com Phone: +65 6983 0940 Email: support.asia@traka.com
Traka Middle East Service desk: support.trakamiddleeast.com Phone: +971 508939722 Email: support.middleeast@traka.com	Traka Oceania Service desk: my.traka.com.au Phone: +61 1800 666 110 Email: support.oceania@traka.com

New Traka Gallagher Integration release - v4.0.0

Tue, 19 Sep 2023 02:58:00 GMT

Introduction

New Functionality

Real-time cardholder and access group synchronisation
Gallagher secure user authentication, which includes:
- Ability for readers to be directly connected to Gallagher Controller for cardholder authentication
- Compatibility with any credential supported by Gallagher
- Support for multiple credentials for a single cardholder
Traka Common Item Access Group import and mapping (Random Return Multiple System only)

Fixes and Enhancements

Updated module installation path
Fix for Gallagher module not re-registering in Traka Monitor
Tracking and management of Access Group FROM and UNTIL dates for user access
Email notifications for integration service status
Ability to send exception (integration services cannot be contacted) notifications to an external webhook

Technical Specification

Supported Platforms	Windows 10 Windows 11 Windows Server 2019+ Windows SQL Server 2019+
Traka Components	TrakaWEB v4.1, v4.2
Gallagher Command Centre Components	Supported Gallagher Command Centre versions: 8.80, 8.90, 9.00 Gallagher REST Cardholders (licensed feature) Gallagher REST CreateEvents (licensed feature) Gallagher REST Events (licensed feature) Gallagher REST API Client Certificate (optional)
Prerequisites	Additional to the above prerequisites, the following is also required on the Traka Application and Gallagher Command Centre Servers: Microsoft .NET Framework Version 4.8

Where to download the latest Integration?

Download the Traka Gallagher Integration v4.0.0 from the Traka Knowledge Base:

Traka Gallagher Integration v4.0.0

New TrakaWEB release - TrakaWEB v4.1.0

Thu, 30 Mar 2023 23:59:00 GMT

Introduction

TrakaWEB v4.1.0 is now available for all partners and customers in APACMEA!

Please note: Before completing an upgrade of a Traka environment, please consult with your local Traka Engineer.

New Features

Improved User Experience and Responsive Web Pages

TrakaWEB v4.1.0 introduces new re-styled web pages to provide an enhanced user experience. The new UX is designed to improve application performance and page load times and removes 3^rd party controls and components, assisting in the reduction of potential future security concerns.

New Traka Touch UI

In line with the release of the new TrakaWEB UI, the Traka Touch UI has been redesigned with a new style and colour scheme to enhance user experience. The new UI is designed to improve performance and provide a modern look and feel.

Item Pairing on Lockers

Further enhancements on Item Pairing for Key Cabinets (released in v3.16), the Item Pairing functionality is now available for lockers.

When a user requests a locker, the associated paired locker compartment opens automatically.

Temporary Deposit Locker Connectivity to TrakaWEB

The Temporary Deposit Lockers (TDL) feature on Traka Touch now supports full connectivity with Traka Web. This allows TDL systems to be fully administered from Traka Web.

TDL events are now synchronised with Traka Web and are visible in Activity Reports.

Note that for consistency with other Touch features, the TDL override permissions have been moved into the standard Touch User Roles screen. These will be migrated when Touch is upgraded.

The Deallocate button on Door Setup has now been removed. If the logged in user has the Deallocate Override permission, they will be able to select and deallocate the locker from the IKWIW screen.

Also as part of the release, support for standard lockers with mixed RFID and non-RFID positions has been improved.

Location Logging support for Random Return to Multiple Systems (RRMS) configuration

Traka Web has been updated to support the Location Logging feature for key cabinets configured for Random Return to Multiple Systems.

System Improvements

Enhanced Engine Security

We have enhanced security for connections to the Comms Engine and the Integration Engine. This release is incompatible with previous Integration Engines - minimum version required is 2.21.0. If you have an Integration Engine, you were previously not required to add the engine in TrakaWEB Admin from this release you are required otherwise the engine will not be able to communicate with the Business Engine.

Integrations and API Enhancements

No Longer using Hard Coded User Record for Connection to Business Engine

To improve product security, the Integration Engine will connect to the Business Engine with a different user record. This introduces a new dependency on adding an Integration Engine record to the Business Engine via the Traka Web Admin and resetting the credentials.

New API Endpoints available to perform a Remote User Login on a Traka system

A new endpoint has been added to the Business Engines integration service to allow the Integrations engine to request a remote user login.

New API Endpoints available to return real time status of Items

The API now has the functionality to retrieve the real time status of items in systems configured with the Real Time Update Service (RTUS) option. An endpoint is also available to query the items a user has based on the real time status.

Important Considerations

Upgrading from TrakaWEB v3 to v4

Consideration should be made to undertake training in the new TrakaWEB UI to bring you up to speed on the latest features and functionality.

Technical Support

If you require technical consultation or support during the implementation or upgrade to TrakaWEB v4.1.0, please contact your local Traka representative.

Traka Africa

Service desk: support.trakaafrica.com

Phone: +27 10 346 1870

Email: support.africa@traka.com

Traka Asia

Service desk: support.trakaasia.com

Phone: +65 6983 0940

Email: support.asia@traka.com

Traka Middle East

Service desk: support.trakamiddleeast.com

Phone: +971 508939722

Email: support.middleeast@traka.com

Traka Oceania

Service desk: my.traka.com.au

Phone: +61 1800 666 110

Email: support.oceania@traka.com

End of Life – Traka32 LenelS2 OnGuard Integration

Thu, 17 Nov 2022 00:14:00 GMT

Dear Customer,

Traka would like to make you aware of the following announcement.

1. PRODUCT CHANGE OVERVIEW

From Traka LenelS2 OnGuard module v3.4, there will be no further certification of Traka32 with future versions of Lenel S2 OnGuard. Effective from 21st October 2022.

2. REASONS FOR THIS CHANGE

In line with the End-of-Life notification for Traka32 and the phasing out of updates to related products, the future versions of LenelS2 OnGuard from v8.1 onwards will continue to be supported only on TrakaWEB.

3. WHO WILL BE AFFECTED?

Customers still using Traka32 will continue to be provided with telephone guidance only on versions up to Traka LenelS2 OnGuard (OpenAccess) Integration v3.3.1 but this support is only valid for up to LenelS2 OnGuard of v8.0 as a maximum.

4. OUR GUIDANCE

Customers preparing upgrade plans to higher versions of LenelS2 OnGuard should consider that upgrades to TrakaWEB will then be required.

5. WHO TO CONTACT?

If you have any concerns, please contact your Regional Technical Support and they shall endeavour to assist you further.

Traka32 LenelS2 OnGuard Integration End of Life Notice

New TrakaWEB Release - Traka Web v3.16.3

Wed, 12 Oct 2022 00:50:00 GMT

Traka has recently released Traka Web v3.16.3 and it is now available. Click here to view the Release Notes!

It is always our recommendation to upgrade to the latest release to ensure you access the latest features and bug fixes.

Reach out to us if you would like more Information!

An issue has been identified on Traka Touch v3.0.2

Tue, 19 Jul 2022 01:45:00 GMT

Issue Alert Notification

Dear Customer,

Traka would like to make you aware of the following issue.

Issue Overview

An issue has been identified on Traka Touch v3.0.2 and beyond, whereby under certain conditions, the SQLite database can error and lock the Traka Touch device after a successful database backup.

This results in the unit requiring a manual restart before the system will revert to normal operation.

What is affected?

This will only affect customers with Traka Touch v3.0.2 or above. This only appears to occur if an activity or event is trying to be recorded to the Traka Touch at the exact same time at which the database backup concludes. For many customers, these backups are scheduled to occur during their quietest usage periods, so it is unlikely to affect them.

What are the Symptoms?

The visible symptom here is that following a lock error, users will not be able to log into the Traka Touch system until after a manual restart has been performed.

What was the cause?

The exact cause is yet to be determined, but it appears to occur only when another activity occurs on the Traka touch device at the same time at which the database backup concludes.

What is the Solution?

In the short-term, customers have two options:

Choose to turn off their Traka Touch database backups (not viable for many and not a preferred option)

Deploy a hotfix to Traka Touch devices that we are just finalising now: Traka Touch v3.1.2 will automatically perform a restart following database backup, thus ensuring minimal disruption to customer operations whilst we find and deliver a long-term solution.

We are planning to issue Traka Touch v3.1.2 on Friday 29^th July 2022.

We anticipate that we will issue a complete fix to this issue as part of the upcoming TrakaWEB v4.0 release that will resolve the root cause of the issue.

6. Who to Contact?

If you would like more guidance on this issue, then please contact your local Traka Technical Support department within your region:

Traka Africa – support.africa@traka.com

Traka Asia – support.asia@traka.com

Traka Middle East – support.middleeast@traka.com

Traka Oceania – support.oceania@traka.com

Traka-PSA-2021-01 - Apache Log4J (CVE-2021-44228)

Wed, 15 Dec 2021 04:29:00 GMT

Dear valued customers,

Traka has been made aware of a publicly disclosed vulnerability (CVE-2021-44228) related to Apache Log4j disclosed on 9-December-2021. After investigation, Traka can confirm that all TRAKA products and solutions do not use the Java framework and so do not use Log4j.

There is NO action to be taken for any customers using Traka's products and solutions.

To download and review the official Traka PSA regarding Apache Log4j (CVE-2021-44228) vulnerability, click below:

Traka-PSA-2021-01 - Apache Log4j.pdf

Please feel free to distribute this document within your business. If you have any further questions on this matter, please don’t hesitate to reach out to your account manager or region support team for more information.

Kind regards,

Traka APACMEA

Traka ASSA ABLOY - Oceania - Recent News

New Traka Gallagher Integration release - v4.2.0

New TrakaWEB release - TrakaWEB v4.6.3

Introduction

New Features

System Improvements

Important Considerations

Technical Support

Traka Oceania

Product Security Advisory - Lantronix Device Servers (CVE-2025-2567)

New TrakaWEB release - TrakaWEB v4.3.1

Introduction

New Features

Exchange of Custody Lockers

Basic Authentication Password Complexity

Left & Right 5-way Receptor Strip Support

Locker Availability Indicator

Japanese Romaji Keyboard Support

System Improvements

Disallowing Booking of Faulty Items

Integrations and API Enhancements

Controlling API Access

SSL/TLS Transport Encryption by Default

Biometric Template property added in User Model

Important Considerations

Technical Support

Traka Africa

Traka Asia

Traka Middle East

Traka Oceania

New Traka Gallagher Integration release - v4.0.0

New TrakaWEB release - TrakaWEB v4.1.0

Introduction

New Features

Improved User Experience and Responsive Web Pages

New Traka Touch UI

Item Pairing on Lockers

Temporary Deposit Locker Connectivity to TrakaWEB

Location Logging support for Random Return to Multiple Systems (RRMS) configuration

System Improvements

Enhanced Engine Security

Integrations and API Enhancements

No Longer using Hard Coded User Record for Connection to Business Engine

New API Endpoints available to perform a Remote User Login on a Traka system

New API Endpoints available to return real time status of Items

Important Considerations

Technical Support

Traka Africa

Traka Asia

Traka Middle East

Traka Oceania

End of Life – Traka32 LenelS2 OnGuard Integration

New TrakaWEB Release - Traka Web v3.16.3

An issue has been identified on Traka Touch v3.0.2

Issue Alert Notification

Issue Overview

What is affected?

What are the Symptoms?

What was the cause?

What is the Solution?

6. Who to Contact?

Traka-PSA-2021-01 - Apache Log4J (CVE-2021-44228)