The Rock can be set to 1FAF (Single Factor Authentication Face-only) in which case a badge reader is not required. The user will be authenticated using face only. However, the user is required to be enrolled at an Enrollment station or at a different Rock which does have a tethered badge reader.