SKI Series 3

Streamlined point-of-sale key injection

Automation, compliance, and flexible functionality

Secure Key Injector (SKI) Series 3

The SKI Series 3 makes direct key injection fast and easy. It supports all major POS manufacturers and compliance standards. Its GUI is easy to learn and use, cutting down training time. The SKI Series 3 can inject encryption keys into 18 POS terminals simultaneously. It also has automation templates to reduce manual effort. This powerful functionality, plus its wealth of extra features, makes the SKI Series 3 perfect for high-volume key injection projects.

Sales brochureTalk to an expert

Support for all major POS manufacturers

The SKI Series 3 supports all major POS/POI manufacturers. Deployments include POS terminals, PIN pads, POI devices, and PIN entry devices (PEDs). Support for new and emerging devices is ongoing, ensuring your key injection operations keep pace with the industry.

Compliance with all major standards

The SKI Series 3 complies with all major security standards, including full TR-31 support. It contains a FIPS 140-2 Level 3 validated cryptographic module, natively built into the product so no cumbersome integration is needed.

Versatility for all transaction types

Inject encryption keys for all payment purposes and types, including both Master/Session and DUKPT.

Security in an embedded SCD

The SKI Series 3 has an embedded secure cryptographic device (SCD) that is validated under FIPS 140-2 Level 3 and PCI HSM standards.

Automation to streamline workflow

Key injection profile templates and automation capabilities reduce manual effort and human error. Scanning terminal bar codes automatically populates fields in the SKI Series 3’s GUI.

Logical security

The SKI Series 3 features dual control, split knowledge, and role-based user permissions. This gives you the logical tools to mitigate key exposure and cyber threats.

Physical security

The SKI Series 3 is enclosed in a tamper-resistant, tamper-evident puzzle-box-design chassis. Any physical intrusion attempt triggers sensor wires to clear sensitive data.

Remote key loading (RKL) ready

The SKI Series 3 can be expanded to support remote key loading. This ensures that even as the industry grows, expands, and evolves, you’ll be ready.

Why the SKI Series 3?

Two words: functionality and flexibility. The SKI Series 3 is the most user-friendly and feature-rich key injection solution on the market. With a wide range of functions and a streamlined GUI, the SKI Series 3 is a great choice for key injection projects of any scale.

Click diagram to enlarge

Key injection for POS and mPOS

The SKI Series 3 provides a FIPS 140-2 Level 3 certified platform for loading encryption keys for all major POS/POI terminal manufacturers.

On-premises deployment

The SKI Series 3 is deployed on-premises. Users operate it through its GUI, which is intuitive to use and reduces training time.

Connect to multiple POS devices simultaneously

The SKI can connect to up to 18 POS or POI devices at once. Automation and key injection templates can be applied to reduce manual effort.

Large technology partner network

Support is included for major POS/POI device makers, mobile payment systems, ATMs, and PIN pads for all manufacturers, merchants, and retailers. The SKI’s code base allows support for emerging technologies to be added at any point.
Related: KMES Series 3

Check out Futurex’s powerful and scalable key management server.

See it now

Related: USB Backup HSM

Explore infrastructure backup with the FIPS 140-2 Level 3-validated USB device.

See it now

User function separation

Configure user profiles based on their role with the organization, such as job title, department, or location.

Batch key injections

The SKI Series 3 handles batch key injections, serving up to 18 devices with different key algorithms.

Uncompromised compliance

Exceeds compliance standards for key injection and data storage, as well as the latest TR-31 key block standards.

Bar code scanner

Supports bar code scanners for serial reading, serial key injection, and to automatically populate fields.

High-speed label printing

High-speed label printers work with the SKI to help keep things organized during the injection process.

Audit logging function

Store critical data like serial information and user activity in log files to meet your audit requirements.

Cloud and hybrid solutions

VirtuCrypt remote key loading (RKL)

SKI Series 3 specifications

Hardware features

  • Dual control-enabled, tamper-responsive
  • Smart card reader for M-of-N key fragmentation and dual-factor authentication
  • Dual, redundant, hot-swappable power supplies
  • Automated, internal RAID-based backup of object management application and databases

Operating conditions

  • Power: 100 – 240 VAC 50/60 Hz. 225 Watts
  • Operating temp: -40° to 140°F (-40° to 60°C)
  • Storage temp: -40° to 140°F (-40° to 60°C)
  • Operating humidity: 20% to 80% non-condensing
  • Storage humidity: 5% to 95% non-condensing

Dimensions and weight

  • Weight: 40.5 lbs (18.4 kg)
  • Width: 19 inches (48.3 cm)
  • Height: 2U – 3.47 inches (8.81 cm)
  • Depth: 22.3 inches (56.7 cm)
  • Depth: 22.3 inches (56.7 cm)

Key types and algorithms

  • Master Session Key
  • DUKPT Initial Key
  • DUKPT BDK Key
  • MAC Key
  • PIN Encryption Key (PEK)
  • Key Exchange Key (KEK)
  • Host Verification
  • DUKPT 3DES BDK Key
  • Default KTK
  • Balance Decryption Key\

Other functions

  • Bar code scanner for serial reading
  • High speed label printer support
  • Audit logging function
  • Separation of users by job function
  • Ability to define batch key injections
  • Balance Decryption Key

Host management

  • Allows for management of multiple host keys
  • Includes functionality to generate duplicate copies of POS device templates

Want to learn more?

Contact a Solutions Architect today.

Give us a call