SKI Series 3

Streamlined point-of-sale key injection

From the factory floor to the field, anywhere in the world

Scalable and secure key injection

The Futurex Secure Key Injector (SKI) Series 3 is a powerful key management tool that can serve 18 point-of-sale (POS) terminals or internet of things (IoT) devices at the same time. It can load and deploy different types of cryptographic keys simultaneously. This makes it ideal for working with global networks of connected devices, although its scalability allows for small-scale deployments as well. The SKI also features a user-friendly GUI to configure, execute, and replicate high-volume key injection projects.

Sales brochureTalk to an expert

Large technology partner network

The diverse Futurex partner network offers flexibility for your key loading operations. Our solutions contain vendor-neutral API, enabling integration with a wide array of payment devices with any manufacturer, merchant, and retailer.

Automated enterprise key management

The SKI Series 3 contains a user-friendly GUI. The GUI allows you to remotely manage encryption key injection schemes and provides a high level of automation. Automated, remote key injection and rotation reduces the time and effort of manually managing encryption keys, especially when dealing with large networks of devices.

Streamlined for easy use

Futurex designed the GUI offered by our key injection platform to require as few steps as possible to get what you need. This reduces errors and reworks while decreasing the scope and cost of training.

Standardized POS injection templates

The SKI Series 3 interface features standardized Point of Sale (POS) terminal injection templates that you can replicate and deploy to reduce user error and eliminate the need to re-do work. You can also combine this feature with the interface’s automation features for powerful, scalable key management.

Extensive back-end support

The SKI Series 3’s vendor-neutral APIs enable it to integrate with all major Point of Sale device manufacturers.

Logical security

The SKI Series 3 features dual control, split knowledge, and role-based user permissions. This gives you the logical tools to mitigate key exposure and cyber threats.

Physical security

The SKI Series 3 is enclosed in a tamper-resistant, tamper-evident puzzle-box-design chassis. Any physical intrusion attempt triggers sensor wires to clear sensitive data.

Certified support

Our TR-39 certified Solutions Architects help you integrate the SKI Series 3 with your existing security environment, prepare for audits, and anticipate potential security risks.

Why the SKI Series 3?

With scalable processing power, diverse functions, and a centralized management platform, the SKI Series 3 can serve global enterprises or small businesses. You can easily attain encryption key security for your connected devices with the SKI Series 3.

Click diagram to enlarge

Key injection for POS and mPOS

The SKI Series 3 provides a FIPS 140-2 Level 3 certified platform for loading and managing POS encryption keys for all major terminal manufacturers. It represents a cost-effective and all-in-one security solution.

Secure, remote key distribution

The SKI Series 3 is deployed on-premises. Organizations can load and manage keys from anywhere in the world, with reduced need for in-person key management.

Connect to multiple POS devices simultaneously

The SKI can connect to up to 18 payment devices at once. The Futurex cloud model enables you to purchase only the injection capabilities your organization needs, increasing functionality without increasing your data footprint.

Large technology partner network

The SKI Series 3 offers flexibility by integrating with all major POS device makers, mobile payment systems, ATMs, and PIN pads for all manufacturers, merchants, and retailers.
Related: VirtuCrypt cloud

Check out our cloud key management service backed by Futurex key management servers.

See it now

Related: USB Backup HSM

Explore infrastructure backup with the FIPS 140-2 Level 3-validated USB device.

See it now

Bar code scanner

The SKI Series 3 integrates with bar code scanners for serial reading and serial key injection.

High-speed label printing

High-speed label printers work with the SKI to help keep things organized during the injection process.

Audit logging function

Critical data like serial information and user activities is stored in log files to meet audit requirements.

User function separation

Configure user profiles based on their role with the organization, such as job title, department, or location.

Batch key injections

The SKI Series 3 defines batch key injections, serving up to 18 devices with different key algorithms at once.

Uncompromised compliance

Exceeds compliance standards for key injection and data storage, including PCI DSS and TR-39/Network Audits.

Cloud and hybrid solutions

The VirtuCrypt cloud

SKI Series 3 specifications

Hardware features

  • Dual control-enabled, tamper-responsive
  • Smart card reader for M-of-N key fragmentation and dual-factor authentication
  • Dual, redundant, hot-swappable power supplies
  • Automated, internal RAID-based backup of object management application and databases

Operating conditions

  • Power: 100 – 240 VAC 50/60 Hz. 225 Watts
  • Operating temp: -40° to 140°F (-40° to 60°C)
  • Storage temp: -40° to 140°F (-40° to 60°C)
  • Operating humidity: 20% to 80% non-condensing
  • Storage humidity: 5% to 95% non-condensing

Dimensions and weight

  • Weight: 40.5 lbs (18.4 kg)
  • Width: 19 inches (48.3 cm)
  • Height: 2U – 3.47 inches (8.81 cm)
  • Depth: 22.3 inches (56.7 cm)
  • Depth: 22.3 inches (56.7 cm)

Key types and algorithms

  • Master Session Key
  • DUKPT Initial Key
  • DUKPT BDK Key
  • MAC Key
  • PIN Encryption Key (PEK)
  • Key Exchange Key (KEK)
  • Host Verification
  • DUKPT 3DES BDK Key
  • Default KTK
  • Balance Decryption Key\

Other functions

  • Bar code scanner for serial reading
  • High speed label printer support
  • Audit logging function
  • Separation of users by job function
  • Ability to define batch key injections
  • Balance Decryption Key

Host management

  • Allows for management of multiple host keys
  • Includes functionality to generate duplicate copies of POS device templates

Want to learn more?

Contact a Solutions Architect today.

Give us a call