Plug & Play Smart Card

Secure access. Ready to go.

Skip the complexity. LEAF Universal is a high-security MIFARE DESFire EV3 smart card that works with Wavelynx readers out of the box. No key ceremonies. No custom configuration. No waiting. Every credential is guaranteed unique.

LEAF Universal
PRE-CONFIGURED SMART CARD
Key Advantages

Upgrade instantly, securely.

Smart, encrypted credentials that work the moment they arrive. No security engineering required.

No Setup Required

Wavelynx handles all the security configuration. You skip the complexity and go straight to deploying smart credentials across your facility.

Plug and Play

Enroll the badge in your access control panel. Present it at the reader. Access granted. Compatible with every Wavelynx APEX and Ethos reader, and any other LEAF community member's devices.

Grow When You're Ready

Start here, upgrade anytime. Move to dedicated corporate keys (LEAF Enterprise) or the highest-security credential tier (LEAF Verified) without replacing a single reader.

Ideal Fit

Who should start with LEAF Universal?

A high-security, zero-friction smart credential built for specific deployment cases.

Distributors & Resellers

Stock a single smart credential SKU that works with any Wavelynx reader deployment. No custom key coordination needed: simply ship and go. Every credential is guaranteed unique, eliminating the complexity of tracking facility codes and card-number ranges when ordering.

New Installations

Deploying Wavelynx readers for the first time? Universal gets you onto a modern smart card platform day one, with zero security engineering prerequisites.

Evaluation & Pilots

Test Wavelynx reader compatibility and panel enrollment workflows before committing to a custom key profile. Universal is the zero-friction proving ground.

How It Works

Three steps. That's it.

No key ceremonies, no database registration, no administration delays.

1

Order

Select LEAF Universal cards or key fobs. Zero setup requirements and standard lead times.

2

Enroll

Import the credential manifest (every unique ID in your order) into your physical access control software, or scan and register the cards directly.

3

Present & Go

Present the card to any Wavelynx reader. Secure, encrypted authentication happens instantly.

Credential Roadmap

Start here. Evolve tomorrow.

LEAF Universal gets you onto modern smart card platforms (MIFARE DESFire EV3) without friction.

When you're ready for unclonable public-key credentials, or need custom facility code mappings and dedicated corporate keys, your reader hardware is already ready. Step up with a simple card order change.

Good today. Best when you're ready.

GOOD • CURRENT PRODUCT

LEAF Universal

Pre-loaded symmetric keys, guaranteed unique. Perfect for distributors, evaluation kits, and plug-and-play installations.

BEST

LEAF Verified

Turnkey public key. Everything Universal does, plus unclonable by design. Asymmetric ECC P-256 on Common Criteria EAL 6+ certified silicon.

Key-ownership option: LEAF Enterprise. Your own AES key profile, available standalone or encoded onto LEAF Verified.

Test LEAF Universal in your stack.

Request a physical sample kit containing LEAF Universal cards and key fobs to verify reader compatibility and enrollment speeds.

Common Questions

Frequently Asked Questions

Yes. Universal uses high-security AES-128 encryption on MIFARE DESFire EV3 silicon, the same standard trusted by governments and transit networks worldwide. The pre-configured key set is securely managed by Wavelynx and is not publicly accessible. For organizations requiring exclusive key custody, LEAF Enterprise offers a custom symmetric key profile.
All Wavelynx APEX and Ethos readers support LEAF Universal out of the box with zero configuration. Additionally, because LEAF is an open-standard credential format, any LEAF-compatible reader from other manufacturers will read these cards when configured.
Yes, absolutely. Your Wavelynx reader hardware supports both symmetric and asymmetric credentials. Stepping up to LEAF Verified (turnkey public key, unclonable by design) is a card-order configuration change, not a hardware rip-and-replace. And if your organization needs dedicated key custody, LEAF Enterprise key profiles are available standalone or encoded onto LEAF Verified.
No. That's the primary benefit of Universal. The credentials arrive pre-programmed and ready to go. You simply enroll the badge IDs in your access control software, present the card to the reader, and deploy.
Yes. You can order LEAF Universal cards with an embedded 125 kHz Prox coil to allow them to function on both legacy Prox readers and modern smart readers, enabling a smooth, phased migration path.
LEAF Universal is available in ISO standard card and key fob form factors. The printable ISO cards support standard photo ID printing and full custom graphic customization using ordinary dye-sublimation or retransfer printers.

Trusted across the access control ecosystem

Hanwha Vision Acre Security PDQ Hirsch RF Ideas
The LEAF Portfolio

Explore the full credential family.

LEAF Enterprise

Custom key ownership: a dedicated AES key profile exclusive to your organization. Standalone or encoded onto LEAF Verified.

Learn more
LEAF FIDO

FIDO2 passwordless desktop login + MIFARE physical access in one card.

Learn more
Wavelynx Mobile

Apple & Google Wallet credentials via NFC. Aliro zero-trust support coming.

Learn more