Free tool · no sign-up
ADMS repoint configurator
Pick the brand on your wall. This gives you the menu path to the cloud-server screen, every field that has to be set, and what each one silently breaks when it is wrong.
A biometric terminal decides for itself where to send its punches, and that decision is one setting on the device. Changing it is the whole migration — nothing is installed and nothing is uninstalled. The hard part is only finding the screen, because the same screen is called ADMS, Cloud Server Setting, Server Settings or Web Setup depending on the brand and the year the firmware was written.
1. Choose your device brand
eSSL terminals are built on ZKTeco hardware, so they speak ZKTeco's ADMS push protocol. Most models sold in India since roughly 2016 expose the screen; the label changed more often than the fields did.
2. On the terminal, go to
- Menu
- Comm.
- ADMS
The same screen, on other firmware
- Cloud Server Setting — newer colour touch models (X990, iFace, MB series)
- Server Settings — some 2019-onward firmware builds
- Comm Settings → ADMS — older monochrome keypad models
3. Set these fields
eSSL · iClock / ADMS
Server Address : issued per account Server Port : issued per account Enable Domain Name : ON for a hostname / OFF for an IP Enable Proxy Server : OFF HTTPS / SSL : as issued with your settings
- Server Address
- address only — no http://, no trailing slash, no path
- Server Port
- goes in the port field, never appended to the address
- Enable Domain Name
- must match the address type you were issued
- Enable Proxy Server
- unless your IT team says the LAN requires one
- HTTPS / SSL
- a mismatch fails silently — the device shows connected, nothing arrives
4. Save and restart
Save, then restart the terminal. Most eSSL firmware only reloads cloud-server settings on boot, which is why a correctly typed address sometimes appears to do nothing until the device is power-cycled.
If the screen is not there
If Comm. has no ADMS, Cloud Server or Server Settings entry, that firmware cannot push to a server at all. Some eSSL models accept a dealer firmware update that adds it; others do not. Send the model, serial and firmware and we will tell you which — before you spend anything.
What to have ready before you call anyone
Four things decide whether a terminal can be repointed, and all four are on the device itself. Collected now, they turn a site visit into a phone call.
- The exact model and firmware version. Menu → System Info or Device Info. “eSSL X990” is not enough on its own: two X990s a year apart can run different firmware with different menus.
- The serial number, character for character, read off the Device Info screen rather than the sticker — the sticker is sometimes for the housing, not the board.
- A photo of the Comm. menu and of the cloud-server screen as it is now. Whatever is filled in today is where your punches have been going, and you may want that record.
- Whether the terminal can reach the internet at all: a wired LAN port or a Wi-Fi network with a plain password. Guest Wi-Fi with a captive portal will not work.
Frequently asked questions
- Why does this tool not show the server address?
- Because the address depends on your account and on what your terminal's firmware can accept — a hostname on most units, a numeric address on firmware with no domain-name toggle, and the two are not interchangeable. A terminal pointed at the wrong endpoint does not show an error: it reports itself connected on its own screen while nothing reaches the register. That failure is usually found at payroll, two weeks and one missing month later. We issue the address once the model is confirmed, which takes a day and costs nothing.
- What is ADMS?
- ADMS — also called the iClock protocol or the ZKTeco PUSH SDK — is how a biometric terminal sends its own punches to a server over ordinary HTTP. The terminal starts every conversation, so it needs no static IP, no port forwarding and no PC at the site, and it buffers punches in its own memory while the internet is down. It is the native protocol of ZKTeco hardware, which is what eSSL terminals and many rebranded units are built on.
- Will repointing the terminal erase the enrolled fingerprints?
- Changing only the server address normally leaves on-device templates in place — you are changing where punches are sent, not what is stored. We still verify the procedure for the exact model and firmware before a cutover, because firmware behaviour is the one thing that is not safe to generalise.
- Can I keep the old software running while I test?
- Desktop software such as eTimeTrackLite reads the terminal over the LAN on its SDK port, which is a separate mechanism from the push — so both can run at once, and a parallel month is the right way to do a first payroll cycle. A hosted cloud is different: it receives the same push you are about to redirect, so it stops receiving the moment you repoint the device.
- Do I need a static IP or port forwarding?
- No. With push the terminal dials out, the way a phone app reaches a website, so it works behind an ordinary router on a dynamic connection. A static IP is only needed by the older arrangement where software outside your network reaches in to read the device.
- My terminal has no ADMS or Cloud Server screen at all. Now what?
- Then that firmware cannot push, and no software can change that from the outside. Some models accept a dealer firmware update that adds the screen; others need replacing. Send the exact model, the serial, the firmware version and a photo of the Comm. menu, and we will tell you which of the three you are looking at.
Related
Send the model. Get the settings.
We confirm the terminal against its firmware, issue your server address and port, and stay on the line for the test punch. The subscription is invoiced only after your devices are live and syncing.