Skip to content
Check out the CryptoHub press release.
  • There are no suggestions because the search field is empty.
Check out the CryptoHub press release.

SKI Series 3

Streamlined point-of-sale key injection

ski series 3 key injection

Secure Key Injection – SKI Series 3

The SKI Series 3 makes direct key injection fast and easy. It supports all major POS manufacturers and compliance standards. Its GUI is easy to learn and use, cutting down training time. The SKI Series 3 can inject encryption keys into 18 POS terminals simultaneously. It also has automation templates to reduce manual effort. This powerful functionality, plus its wealth of extra features, makes the SKI Series 3 perfect for high-volume key injection projects.

Support for all Major POS Manufacturers

The SKI Series 3 supports all major POS/POI manufacturers. Deployments include POS terminals, PIN pads, POI devices, and PIN entry devices (PEDs). Support for new and emerging devices is ongoing, ensuring your key injection operations keep pace with the industry.

Compliance with all Major Standards

The SKI Series 3 complies with all major security standards, including full TR-31 support. It contains a FIPS 140-2 Level 3 validated cryptographic module, natively built into the product so no cumbersome integration is needed.

Versatility for all Transaction Types

Inject encryption keys for all payment purposes and types, including both Master/Session and DUKPT.

Security in an Embedded SCD

The SKI Series 3 has an embedded secure cryptographic device (SCD) that is validated under FIPS 140-2 Level 3 and PCI HSM standards.

Automation to Streamline Workflow

Key injection profile templates and automation capabilities reduce manual effort and human error. Scanning terminal bar codes automatically populates fields in the SKI Series 3’s GUI.

Key Benefits


Logical security

The SKI Series 3 features dual control, split knowledge, and role-based user permissions. This gives you the logical tools to mitigate key exposure and cyber threats.


Physical security

The SKI Series 3 is enclosed in a tamper-resistant, tamper-evident puzzle-box-design chassis. Any physical intrusion attempt triggers sensor wires to clear sensitive data.


Remote key loading (RKL) ready

The SKI Series 3 can be expanded to support remote key loading. This ensures that even as the industry grows, expands, and evolves, you’ll be ready.

Why the SKI Series 3?

Two words: functionality and flexibility. The SKI Series 3 is the most user-friendly and feature-rich key injection solution on the market. With a wide range of functions and a streamlined GUI, the SKI Series 3 is a great choice for key injection projects of any scale.

Key injection for POS and mPOS

The SKI Series 3 provides a FIPS 140-2 Level 3 certified platform for loading encryption keys for all major POS/POI terminal manufacturers.

icon_web safety
On-premises deployment

The SKI Series 3 is deployed on-premises. Users operate it through its GUI, which is intuitive to use and reduces training time.

icon-atm cloud
Connect to multiple POS devices simultaneously

The SKI can connect to up to 18 POS or POI devices at once. Automation and key injection templates can be applied to reduce manual effort.

Large technology partner network

Support is included for major POS/POI device makers, mobile payment systems, ATMs, and PIN pads for all manufacturers, merchants, and retailers. The SKI’s code base allows support for emerging technologies to be added at any point.



User function separation

Configure user profiles based on their role with the organization, such as job title, department, or location.


Batch key injections

The SKI Series 3 handles batch key injections, serving up to 18 devices with different key algorithms.

icon_web safety

Uncompromised compliance

Exceeds compliance standards for key injection and data storage, as well as the latest TR-31 key block standards.


Bar code scanner

Supports bar code scanners for serial reading, serial key injection, and to automatically populate fields.

icon_atm sign

High-speed label printing

High-speed label printers work with the SKI to help keep things organized during the injection process.


Audit logging function

Store critical data like serial information and user activity in log files to meet your audit requirements.

VirtuCrypt Remote Key Loading (RKL)

The VirtuCrypt cloud remote key management service allows users to remotely manage and load keys through the cloud from anywhere in the world. Users can access the intuitive VirtuCrypt Intelligence Portal (VIP) Dashboard to manage devices, control access, and configure settings. Avoid the effort and expense of manual key loading within a secure facility. All with FIPS 140-2 Level 3 validated security.

Frequently Asked Questions

What is the SKI Series 3?

The SKI Series 3 key management server is a streamlined solution for Point-of-Sale key injection, with industry-leading technology and support for all major manufacturers. Point of Sale (POS) terminal deployment operations often face the challenge of injecting encryption keys into hundreds or even thousands of terminals in a short amount of time. The Secure Key Injector (SKI) Series 3 tackles this challenge, eliminating costly manual processes and removing reliance on legacy software-based systems. The SKI can connect to up to 18 POS terminals at the same time, with the advanced ability to load different types of keys simultaneously. The SKI is streamlined to fit your organization’s needs without compromising on speed, security, or stability.

What are the SKI Series 3 specifications?

Hardware features

  • Dual control-enabled, tamper-responsive
  • Smart card reader for M-of-N key fragmentation and dual-factor authentication
  • Dual, redundant, hot-swappable power supplies
  • Automated, internal RAID-based backup of object management application and databases

Operating conditions

  • Power: 100 – 240 VAC 50/60 Hz. 225 Watts
  • Operating temp: -40° to 140°F (-40° to 60°C)
  • Storage temp: -40° to 140°F (-40° to 60°C)
  • Operating humidity: 20% to 80% non-condensing
  • Storage humidity: 5% to 95% non-condensing

Dimensions and weight

  • Weight: 40.5 lbs (18.4 kg)
  • Width: 19 inches (48.3 cm)
  • Height: 2U – 3.47 inches (8.81 cm)
  • Depth: 22.3 inches (56.7 cm)

Functions and keys

Key types and algorithms

  • Master Session Key
  • DUKPT Initial Key
  • MAC Key
  • PIN Encryption Key (PEK)
  • Key Exchange Key (KEK)
  • Host Verification
  • Default KTK
  • Balance Decryption Key

Other functions

  • Bar code scanner for serial reading
  • High speed label printer support
  • Audit logging function
  • Separation of users by job function
  • Ability to define batch key injections
  • Balance Decryption Key

Host management

  • Allows for management of multiple host keys
  • Includes functionality to generate duplicate copies of POS device templates

What makes the SKI Series 3 unique to key injection?

What makes the SKI innovative and unlike anything else in the industry is its ability to manage encryption keys for your entire POS terminal estate and consolidate them into one centralized key injection product solution. It provides an ideal, cost-effective, and all-in-one security solution for loading and managing POS encryption keys for all major terminal manufacturers.

How does the SKI provide a streamlined and secure injection process?

The SKI is capable of connecting to up to nineteen POS terminals at once. Scalable hardware allows you to purchase only the injection capabilities your organization needs, increasing capacity over time without increasing your total rack footprint.

Capable of injecting more than one type of key at a time, the SKI also can easily and securely import, create, and store your keys. This helps to eliminate the time-consuming process of performing more key loading ceremonies than are necessary.

High Powered Key Injection Functionality

  • Automate large key injection batches
  • Standardized Point of Sale terminal injection templates help reduce operator errors and eliminate re-work

Connect to Multiple POS Devices Simultaneously

  • Generate duplicate copies of POS device templates
  • Increase efficiency and eliminate training requirements for multiple vendor-specific injection tools

Can I get a product overview of the SKI Series 3?

Key Types Supported

  • Master Session Key
  • PIN Encryption Key (PEK)
  • Key Exchange Key (KEK)
  • Base Derivation Key (BDK)
  • DUKPT Initial Key
  • Point-to-Point Encryption (P2PE)
  • MAC Key
  • Default KTK

Streamlined Functionality

  • Separates users by job function
  • Defines batch key injections
  • Provides flexibility in key loading operations
  • Reduces errors and re-work
  • Serial and USB-based key injection
  • Capable of upgrading to support remote key injection

Hardware Support and Integration

  • Supports bar code scanner for serial reading
  • Supports high-speed label printers
  • Supports protocols for major POS terminal manufacturers and key types

Ease of Use

  • Intuitive user interface
  • Barcode scanner support for easy device selection

Powerful Logging Capability

  • Provides detailed audit records and the ability to generate key reports
  • Simplifies management of internal and external TR-39 audits
  • Complete, authenticated audit log files of all activity, access, tracking, and serial information

Cost-Effective Solutions

  • Injects more than one type of encryption key simultaneously
  • Reduces training and administration costs

Does the SKI support injection scalability?

The SKI supports key injection using both RS-232 serial and USB. This equips organizations to inject keys into virtually any Point of Sale terminal, whether countertop or mobile.

Support for new Point of Sale devices and manufacturers is regularly added, ensuring future support and compatibility.

Featured Resources

“The upgrade was seamless and involved zero downtime for our customers. We take great comfort in knowing our key injection hardware can scale alongside our rapidly expanding business."


- Anthony Siracuse, CEO and owner


Enterprise Data Encryption Solutions

Futurex provides HSMs and key management servers that handle encryption, bring-your-own-key (BYOK). Futurex helps enterprise organizations deploy a modern cloud data security environment that complies with the latest standards and regulations.

wells fargo
RBC_Bank logo