A method for starting up and managing an offline control device, in particular an offline access control device, by means of a multi-factor/ID authentication, wherein the control device comprises a management control unit and a terminal which activates the management control unit, with the following method steps for the initial start-up of the control device: - implementing, in particular by the terminal manufacturer, of a multi-factor/ID authentication algorithm in the terminal, - delivering, in particular by the provider of the control device, of the terminal, in a factory state, and an, in particular mobile, first storage medium, in which a storage medium ID and a first security code are stored in a forgery-proof and globally unique manner, to a customer, - delivering, in particular by the provider of the control device, of a second security code generated, in particular by the terminal manufacturer, using the first security code, to a second storage medium, in particular to a mobile terminal device, of the customer, - positioning, by a user, of the first and the second storage medium (7, 8) at the location of the terminal, and reading, by the terminal, of the storage medium ID and the first and the second security code (5, 22), and offline checking by means of the multi-factor authentication algorithm of the terminal, whether the read first and second security codes (5, 22) are valid with one another, - after a positive multi-factor authentication check, storing the storage medium ID as the authorization ID and the first security code in the terminal, and, if necessary, subsequently activating the management control unit by means of the terminal for the management of the management control unit by the user, and - terminating the initial start-up mode, and, on completion of the initial start-up of the control device, with the following method steps for managing the management control unit: - positioning, by a user, of two storage media at the location of the terminal and reading, by the terminal, of a storage medium ID and a security code of the one storage medium and a security code of the other storage medium, and offline checking by means of the multi-factor/ID authentication algorithm of the terminal, whether the read storage medium ID and the read security code of the one storage medium match the authorization ID stored in the terminal and the first security code stored in the terminal, and the two read security codes are valid with one another, - after a positive multi-factor/ID authentication check, activating the management control unit by means of the terminal for the management of the management control unit by the user, and - terminating the management mode. - implementing, in particular by the terminal manufacturer, of a multi-factor/ID authentication algorithm in the terminal, - delivering, in particular by the provider of the control device, of the terminal, in a factory state, and an, in particular mobile, first storage medium, in which a storage medium ID and a first security code are stored in a forgery-proof and globally unique manner, to a customer, - delivering, in particular by the provider of the control device, of a second security code generated, in particular by the terminal manufacturer, using the first security code, to a second storage medium, in particular to a mobile terminal device, of the customer, - positioning, by a user, of the first and the second storage medium (7, 8) at the location of the terminal, and reading, by the terminal, of the storage medium ID and the first and the second security code (5, 22), and offline checking by means of the multi-factor authentication algorithm of the terminal, whether the read first and second security codes (5, 22) are valid with one another, - after a positive multi-factor authentication check, storing the storage medium ID as the authorization ID and the first security code in the terminal, and, if necessary, subsequently activating the management control unit by means of the terminal for the management of the management control unit by the user, and - terminating the initial start-up mode, and, on completion of the initial start-up of the control device, with the following method steps for managing the management control unit: - positioning, by a user, of two storage media at the location of the terminal and reading, by the terminal, of a storage medium ID and a security code of the one storage medium and a security code of the other storage medium, and offline checking by means of the multi-factor/ID authentication algorithm of the terminal, whether the read storage medium ID and the read security code of the one storage medium match the authorization ID stored in the terminal and the first security code stored in the terminal, and the two read security codes are valid with one another, - after a positive multi-factor/ID authentication check, activating the management control unit by means of the terminal for the management of the management control unit by the user, and - terminating the management mode.