Dormakaba Quantum Cards Explained: Ambiance, AES & Mobile

A Dormakaba Quantum credential is the key used on dormakaba's Quantum RFID electronic lock, part of the same Confidant family managed by dormakaba Ambiance software. Dormakaba states that Quantum RFID "supports RFID keycards, fobs, wristbands, mobile credentials, and digital wallets," so a property can issue the same guest access as a plastic card, a wearable, or a phone key.

On the physical-card side, a Quantum credential is a 13.56 MHz contactless smart card. Its security depends on which Ambiance tier the property runs: a legacy card, the 3DES-secured memory card that dormakaba sets as its default minimum, or the AES-secured smart card enabled by Ambiance Enhanced Security.

Dormakaba published two hospitality advisories in 2025 that tightened its guidance. Its RFID Vulnerability Update advisory dated 12 May 2025 warned that a security researcher had publicly released code demonstrating a Saflok exploit affecting System 6000, Ambiance and Community, so the risk was "no longer theoretical," and directed customers to update credentials and apply firmware — with Ambiance 2.7 to 2.9 sites moving to 2.11.

Its RFID Card Security advisory dated 27 August 2025 went further, stating that even standard-security cards had "materially declined" and that "hotels should immediately transition to Ambiance Enhanced Security using AES 128 encryption." Together the two advisories make dormakaba's position explicit: for a Quantum or Confidant property, AES-128 Enhanced Security is now the recommended baseline, not an optional extra.

An AES-secured Quantum card on Ambiance Enhanced Security cannot be cloned by copying its serial number, because the AES-128 layer protects the key data with mutual authentication rather than exposing it on the card surface. That is the whole point of the Enhanced Security tier: it replaces a key-derivation method that had leaned on the card's world-readable serial number with an encrypted, authenticated exchange.

Lower tiers are weaker. Dormakaba's own whitepaper on RFID access-control security notes that static card serial numbers are world-readable and "unsuitable as the sole security mechanism," and its 2025 advisories describe the standard 3DES tier's protection as having materially declined. So on a Quantum estate, clone resistance tracks the tier: legacy is exposed, 3DES is a declining baseline, and AES-128 Enhanced Security is the resistant option.

Dormakaba Quantum supports mobile credentials and digital-wallet keys in addition to cards, and these can improve operational security because they are issued and revoked over the air rather than by re-encoding plastic. A lost phone key can be cancelled centrally, and a wallet key is bound to a specific device, which removes the "stack of copied plastic keys" risk that hospitality operators know well.

That said, a mobile key and an AES-128 Enhanced Security card are both strong credentials; the choice is largely operational. Many properties run both — mobile for guests who opt in, AES-secured cards for everyone else and for staff — on the same Quantum locks. The credential a property should retire is the legacy card, whichever direction it then goes.

The table compares the credential options a Quantum RFID lock can accept, by security model.

A high-security Quantum or Confidant card is encoded with your property's AES-128 keys inside dormakaba Ambiance, so a compatible Enhanced Security credential is not something an independent supplier can produce, and Security ID Systems does not offer one. Additional high-security cards, and mobile keys, come from dormakaba or your integrator.

What we supply are the open hotel-card formats used across dormakaba, Saflok and adjacent front-desk systems — blank hotel cards, Saflok and Quantum card stock, and legacy magstripe cards. Those are the formats below.