Bosch Access Professional & AMC: Cards, Readers & Prox Migration

Bosch Access Professional Edition (APE) is a Bosch access-control software product for small-to-mid sites, paired with Bosch's AMC and AMC2 access modular controllers and Bosch readers. An AMC2 controller can manage large local populations — Bosch cites capacity for up to 400,000 users locally and buffering of around 2 million events — which is why APE/AMC systems are common in offices, schools, and industrial sites.

APE is best understood today as an established but ageing platform. It reads a mix of credentials through multi-technology readers, and many APE sites were first deployed in the 125 kHz proximity era, which is precisely why the migration questions below matter. For the deeper security model — the Bosch Code, key diversification, and OSDP Secure Channel — see the canonical guide, Bosch (Keenfinity) access cards explained.

Bosch APE and AMC systems use multi-technology readers, so they can accept several credential types at once: legacy 125 kHz proximity cards, a 13.56 MHz card read by its serial number (CSN), and Bosch-coded AES-secured 13.56 MHz smart cards that store their credential in an encrypted sector. Which of these a given door uses depends on how its reader is configured.

The security difference between them is large. A 125 kHz prox card and a CSN-only read are both effectively open identifiers that can be copied, whereas a Bosch-coded AES card is keyed to your site. For ordering, that split is what matters: the open prox and CSN formats can be supplied by a third party, but a Bosch-coded card must be written with your keys through Bosch/Keenfinity.

Bosch Access Professional should be treated as a legacy line. The current Keenfinity access-control portfolio centres on AMS (Access Management System) and BIS (Building Integration System) rather than APE, and Bosch's building-security business now trades as the Keenfinity Group with boschsecurity.com redirecting to keenfinity-group.com.

For an operator, that means an APE/AMC system can keep running, but new capability, current documentation, and long-term roadmap sit with AMS. It is sensible to plan any credential upgrade with the eventual move off APE in mind — which, conveniently, is the same move as getting off 125 kHz proximity, since both point toward encrypted 13.56 MHz cards on modern controllers.

You migrate a Bosch prox system to 13.56 MHz by using the multi-technology readers to run old and new credentials at the same door, then cutting over. Bosch's own guidance is to upgrade the frequency from 125 kHz to 13.56 MHz to gain the card's security functions, and to replace Wiegand wiring with OSDP v2 Secure Channel. The table below shows the typical stages.

For a Bosch APE or AMC system, the answer depends on which credential a door uses. Bosch-coded AES cards are keyed to your site and come through Bosch/Keenfinity or your integrator; there is no third-party drop-in for those, and Security ID Systems does not offer one.

The open formats are a different story. The 125 kHz proximity cards and card-serial-number (CSN) credentials that APE/AMC multi-technology readers still accept — the ones you are migrating away from — we supply as fully compatible, encoded credentials that read identically on your existing readers. That lets you keep the legacy doors stocked while you plan the move to encrypted 13.56 MHz.