Cotag Cards Explained: The High-Value Passive Prox Format

Cotag and its Bewator / Siemens / Vanderbilt Heritage

The Cotag format originated with Cotag International in Sweden during the 1980s, at a time when proximity access control was still a specialist niche rather than a commodity technology. Cotag's engineering team made deliberate design choices — low bitrate, high coupling, proprietary modulation — that produced a credential with exceptional read range for its era. Those choices also produced a format that remained entirely proprietary and incompatible with the parallel ecosystem that grew up around EM4100 and HID standards.

When Bewator acquired the Cotag line, then Siemens Building Technologies absorbed Bewator, and subsequently Vanderbilt took on the security division before Acre Security completed the lineage, the underlying card format was preserved intact across each corporate transition. That is the defining characteristic of enterprise proprietary formats in enterprise access control: the installed reader base creates a powerful specialist edge for the OEM supplier. A building fitted with Cotag-protocol readers in 1995 is still running Cotag-protocol cards today because a panel and reader replacement is a capital project, not a consumable purchase. That installed-reader lock-in is what sustains the format decades beyond the founding company's independence.

Facilities managers inheriting these systems from predecessor organisations often discover the brand name on the panel does not match the card format visible on the credential. A Vanderbilt-badged panel may have been originally installed as Bewator; the cards still carry the original Cotag encoding. This cross-brand ambiguity is one reason the format sits firmly in the 125 kHz LF proximity tier rather than being catalogued neatly under a single manufacturer name.

For organisations operating mixed estates — some Cotag, some other proprietary European formats such as Hitag2 or Hitag S — understanding the lineage behind each credential type is the prerequisite to placing accurate orders. Mislabelling a Cotag card as a generic EM4100 equivalent is the most common cause of incompatible blank shipments and delays.

The Unusual Low-Bitrate Passive Prox Format

Standard 125 kHz proximity formats — EM4100, HID 26-bit H10301, Indala — transmit their data at rates derived from subcarrier frequencies that sit comfortably within the reader's demodulation window. Cotag departs from this convention. It uses ASK (amplitude-shift keying) modulation with Manchester encoding, but at a bitrate significantly lower than EM4100. The slower clock gives each bit a longer dwell time, which translates directly into read-range: the reader can resolve the signal at greater distances and through more intervening material — wallet leather, belt pouches, clothing — than most competing passive credentials of the same era.

The high coupling coefficient compounds this effect. Coupling coefficient is essentially how efficiently the card's antenna extracts power from the reader's field. Cotag cards were engineered for a tighter power budget than their contemporaries, which means they energise reliably at ranges where a standard EM4100 card would fail to wake. This was a competitive advantage in building-wide turnstile and door applications where users would present cards at arm length rather than tapping. For a technical comparison against standard formats, see the specification table below.

The practical consequence for credential sourcing is that a T5577 blank — the industry-standard T5577 programmable blank used for most 125 kHz compatible work — must be configured with precisely the correct clock divisor, modulation scheme, and data rate to reproduce Cotag behaviour. That is not a configuration available from any drop-down menu; it requires a defined mapping process using a known-good sample card to establish the exact timing parameters before programming a compatible.

This technical specificity is also why Cotag cannot be treated like commodity proximity formats. An EM4100 compatible can be pre-programmed from published parameters; a Cotag compatible must be matched to the actual reader installation. The difference between compatible and genuine cards is worth understanding before ordering, because for Cotag the compatible production workflow is more involved than for most other 125 kHz formats.

Why Cotag Cards Cost So Much

OEM Cotag credentials are among the most expensive standard-sized proximity cards in the enterprise market, with list prices frequently reaching approximately $30 per card from authorised distributors — compared with $3–6 for commodity HID 26-bit cards and $4–8 for EM4100 blanks at similar quantities. That price premium is not driven by manufacturing cost; the physical card is a standard ISO CR-80 laminate with a thin-wire antenna coil. The premium is driven entirely by the proprietary nature of the format combined with a deliberately restricted distribution channel.

Vanderbilt and Acre Security supply OEM Cotag credentials only through their certified installer network. End-user organisations without a current installer relationship frequently find themselves unable to purchase directly, and even those with an active support contract may face lead times of two to four weeks for card orders. For a 200-person office that loses cards regularly or undergoes periodic staff turnover, that combination of unit price, distribution friction, and lead time creates meaningful operational cost.

The format also ages poorly from a sourcing standpoint. As each corporate acquisition in the Cotag lineage consolidated the distribution channel further, the number of authorised resellers contracted. Today, a facilities team managing a legacy Bewator installation may find that their original installer no longer holds authorisation, creating a sourcing gap that the discontinued format card replacement service is specifically designed to address.

The hard-to-find nature of genuine OEM Cotag stock through normal procurement routes is therefore a structural feature of the format, not a temporary supply problem. Organisations that plan ahead and establish a compatible-card supply relationship before an urgent replacement need arises are in a significantly better operational position than those who discover the sourcing difficulty mid-incident.

Producing a Compatible Cotag Card

Unlike commodity formats where programming parameters are published and stable, producing a Cotag compatible proximity card requires a sample read workflow. Because the low-bitrate Manchester encoding parameters must be read from a working card at the hardware level to extract site code, card number, and — critically — the precise timing parameters your specific reader expects, there is no standardised off-the-shelf Cotag blank that works universally. The programming must be mapped from a known-good card in your existing credential pool.

This is why Security ID Systems requests a working sample from your installation as the first step in any Cotag order. That sample is read to record the data needed for programming; it is returned to you intact and undamaged. From the recorded profile, a T5577-based compatible is programmed to reproduce the correct bitrate, modulation, and data payload. The resulting credential presents to your reader identically to the original. There is no panel reconfiguration, no firmware update, and no change to access-level assignments required on your end.

The sample read requirement also means Cotag compatibles cannot be supplied speculatively as pre-programmed stock. Every order is custom-programmed to the specific installation's parameters. Customers ordering compatible Cotag proximity cards for the first time should budget for this workflow: submit a sample, receive a proof card for reader validation, then place the production quantity order once the proof has been confirmed by your access-control manager or security integrator.

The process is straightforward for facilities teams who have access to a functioning card from their credential pool. Cotag cards that have been deactivated in the panel software are still suitable as programming samples — the reader-level protocol parameters embedded in the credential are independent of the panel's access-level database. A deprovisioned card from a departed employee is therefore just as useful as an active one for this purpose.

Ordering: Why a Sample Read Matters

The single most common delay in Cotag compatible orders is a customer submitting insufficient sample information. A photograph of the card face, the panel model number, or the Vanderbilt / Acre system documentation does not substitute for a physical sample. The reader protocol parameters that differentiate one Cotag installation from another are not published in any panel manual; they are set during the original commissioning and may have been adjusted by the installer at the time. Only a hardware read of a functioning credential from your reader population establishes the correct parameters.

If your organisation has already lost all functioning Cotag cards and cannot source a sample, contact our technical team before placing an order. There are limited cases where an on-site read using our specialist field equipment can recover the parameters directly from a commissioned reader, but this is a non-standard service path and should be discussed before any commitment is made. For multi-site organisations, note that different sites in the same estate may have been commissioned with different site codes even if they run identical Vanderbilt or Siemens panels — each site requires its own sample.

For facilities teams also managing non-Cotag legacy formats alongside Cotag installations, the same sample-read principle applies across the broader range of proprietary European enterprise formats. A card format identification guide is available to help determine whether your credential is Cotag, Hitag2 or Hitag S, or one of the other Gallagher-system compatible formats that share similar enterprise distribution constraints. Understanding the format before ordering avoids the most common source of mismatch and rework.

Organisations managing larger card populations — typically above 50 credentials — often find it practical to order a small initial batch of compatibles as a validated stock alongside their existing OEM cards, rather than waiting until the original supply is exhausted. Because each Cotag active hands-free tag and standard card format in an estate may have been commissioned differently, building a format map of your credential population is a worthwhile preparatory step before any bulk replacement programme.

Security ID Systems is an independent manufacturer and supplier of compatible access-control credentials and is not affiliated with, authorized by, or endorsed by Cotag International, Bewator, Siemens Building Technologies, Vanderbilt Systems, or Acre Security.