SKI Series 3

Streamlined point-of-sale key injection

key injection SKI Series 3
Automation, compliance, and flexible functionality

Secure Key Injection – SKI Series 3

The SKI Series 3 makes direct key injection fast and easy. It supports all major POS manufacturers and compliance standards. Its GUI is easy to learn and use, cutting down training time. The SKI Series 3 can inject encryption keys into 18 POS terminals simultaneously. It also has automation templates to reduce manual effort. This powerful functionality, plus its wealth of extra features, makes the SKI Series 3 perfect for high-volume key injection projects.

Sales brochureTalk to an expert

Support for all major POS manufacturers

The SKI Series 3 supports all major POS/POI manufacturers. Deployments include POS terminals, PIN pads, POI devices, and PIN entry devices (PEDs). Support for new and emerging devices is ongoing, ensuring your key injection operations keep pace with the industry.

Compliance with all major standards

The SKI Series 3 complies with all major security standards, including full TR-31 support. It contains a FIPS 140-2 Level 3 validated cryptographic module, natively built into the product so no cumbersome integration is needed.

Versatility for all transaction types

Inject encryption keys for all payment purposes and types, including both Master/Session and DUKPT.

Security in an embedded SCD

The SKI Series 3 has an embedded secure cryptographic device (SCD) that is validated under FIPS 140-2 Level 3 and PCI HSM standards.

Automation to streamline workflow

Key injection profile templates and automation capabilities reduce manual effort and human error. Scanning terminal bar codes automatically populates fields in the SKI Series 3’s GUI.

key injection SKI Series 3
Logical security

The SKI Series 3 features dual control, split knowledge, and role-based user permissions. This gives you the logical tools to mitigate key exposure and cyber threats.

Physical security

The SKI Series 3 is enclosed in a tamper-resistant, tamper-evident puzzle-box-design chassis. Any physical intrusion attempt triggers sensor wires to clear sensitive data.

Remote key loading (RKL) ready

The SKI Series 3 can be expanded to support remote key loading. This ensures that even as the industry grows, expands, and evolves, you’ll be ready.

Why the SKI Series 3?

Two words: functionality and flexibility. The SKI Series 3 is the most user-friendly and feature-rich key injection solution on the market. With a wide range of functions and a streamlined GUI, the SKI Series 3 is a great choice for key injection projects of any scale.

Click diagram to enlarge

Key injection for POS and mPOS

The SKI Series 3 provides a FIPS 140-2 Level 3 certified platform for loading encryption keys for all major POS/POI terminal manufacturers.

On-premises deployment

The SKI Series 3 is deployed on-premises. Users operate it through its GUI, which is intuitive to use and reduces training time.

Connect to multiple POS devices simultaneously

The SKI can connect to up to 18 POS or POI devices at once. Automation and key injection templates can be applied to reduce manual effort.

Large technology partner network

Support is included for major POS/POI device makers, mobile payment systems, ATMs, and PIN pads for all manufacturers, merchants, and retailers. The SKI’s code base allows support for emerging technologies to be added at any point.
Related: KMES Series 3

Check out Futurex’s powerful and scalable key management server.

See it now

Related: USB Backup HSM

Explore infrastructure backup with the FIPS 140-2 Level 3-validated USB device.

See it now

User function separation

Configure user profiles based on their role with the organization, such as job title, department, or location.

Batch key injections

The SKI Series 3 handles batch key injections, serving up to 18 devices with different key algorithms.

Uncompromised compliance

Exceeds compliance standards for key injection and data storage, as well as the latest TR-31 key block standards.

Bar code scanner

Supports bar code scanners for serial reading, serial key injection, and to automatically populate fields.

High-speed label printing

High-speed label printers work with the SKI to help keep things organized during the injection process.

Audit logging function

Store critical data like serial information and user activity in log files to meet your audit requirements.

Cloud and hybrid solutions

VirtuCrypt remote key loading (RKL)

SKI Series 3 specifications

Hardware features

  • Dual control-enabled, tamper-responsive
  • Smart card reader for M-of-N key fragmentation and dual-factor authentication
  • Dual, redundant, hot-swappable power supplies
  • Automated, internal RAID-based backup of object management application and databases

Operating conditions

  • Power: 100 – 240 VAC 50/60 Hz. 225 Watts
  • Operating temp: -40° to 140°F (-40° to 60°C)
  • Storage temp: -40° to 140°F (-40° to 60°C)
  • Operating humidity: 20% to 80% non-condensing
  • Storage humidity: 5% to 95% non-condensing

Dimensions and weight

  • Weight: 40.5 lbs (18.4 kg)
  • Width: 19 inches (48.3 cm)
  • Height: 2U – 3.47 inches (8.81 cm)
  • Depth: 22.3 inches (56.7 cm)
  • Depth: 22.3 inches (56.7 cm)

Key types and algorithms

  • Master Session Key
  • DUKPT Initial Key
  • DUKPT BDK Key
  • MAC Key
  • PIN Encryption Key (PEK)
  • Key Exchange Key (KEK)
  • Host Verification
  • DUKPT 3DES BDK Key
  • Default KTK
  • Balance Decryption Key\

Other functions

  • Bar code scanner for serial reading
  • High speed label printer support
  • Audit logging function
  • Separation of users by job function
  • Ability to define batch key injections
  • Balance Decryption Key

Host management

  • Allows for management of multiple host keys
  • Includes functionality to generate duplicate copies of POS device templates

Frequently Asked Questions

The SKI Series 3 key management server is a streamlined solution for Point-of-Sale key injection, with industry-leading technology and support for all major manufacturers. Point of Sale (POS) terminal deployment operations often face the challenge of injecting encryption keys into hundreds or even thousands of terminals in a short amount of time. The Secure Key Injector (SKI) Series 3 tackles this challenge, eliminating costly manual processes and removing reliance on legacy software-based systems. The SKI can connect to up to 19 POS terminals at the same time, with the advanced ability to load different types of keys simultaneously. The SKI is streamlined to fit your organization’s needs without compromising on speed, security, or stability.

What makes the SKI innovative and unlike anything else in the industry is its ability to manage encryption keys for your entire POS terminal estate and consolidate them into one centralized key injection product solution. It provides an ideal, cost-effective, and all-in-one security solution for loading and managing POS encryption keys for all major terminal manufacturers.

The SKI is capable of connecting to up to nineteen POS terminals at once. Scalable hardware allows you to purchase only the injection capabilities your organization needs, increasing capacity over time without increasing your total rack footprint.

Capable of injecting more than one type of key at a time, the SKI also can easily and securely import, create, and store your keys. This helps to eliminate the time-consuming process of performing more key loading ceremonies than are necessary.

High Powered Key Injection Functionality
  • Automate large key injection batches
  • Standardized Point of Sale terminal injection templates help reduce operator errors and eliminate re-work
Connect to Multiple POS Devices Simultaneously
  • Generate duplicate copies of POS device templates
  • Increase efficiency and eliminate training requirements for multiple vendor-specific injection tools
Key Types Supported
  • Master Session Key
  • DUKPT 3DES BDK Key
  • PIN Encryption Key (PEK)
  • Key Exchange Key (KEK)
  • Base Derivation Key (BDK)
  • DUKPT Initial Key
  • DUKPT BDK Key
  • Point-to-Point Encryption (P2PE)
  • MAC Key
  • Default KTK
Streamlined Functionality
  • Separates users by job function
  • Defines batch key injections
  • Provides flexibility in key loading operations
  • Reduces errors and re-work
  • Serial and USB-based key injection
  • Capable of upgrading to support remote key injection
Hardware Support and Integration
  • Supports bar code scanner for serial reading
  • Supports high-speed label printers
  • Supports protocols for major POS terminal manufacturers and key types
Ease of Use
  • Intuitive user interface
  • Barcode scanner support for easy device selection
Powerful Logging Capability
  • Provides detailed audit records and the ability to generate key reports
  • Simplifies management of internal and external TR-39 audits
  • Complete, authenticated audit log files of all activity, access, tracking, and serial information
Cost-Effective Solutions
  • Injects more than one type of encryption key simultaneously
  • Reduces training and administration costs
Dimensions and Weight
  • Weight: 40.5 pounds (18.4 kg)
  • Width: 19 inches (48.3 cm)
  • Height: 2U – 3.47 inches (8.81 cm)
  • Depth: 22.3 inches (56.7 cm)
Industry Compliance Standards
  • PCI HSM
  • FIPS 140-2 Level 3 Compliant
  • ANSI X9.24 Part 1 and Part 2—TR-39
  • FCC Part 15 – Class B
Integrate Remote Management

Combine the SKI and the Excrypt Touch for secure access, operation, and key loading.

Operating Conditions
  • Power: 100 – 240 VAC 50/60 Hz. 225 Watts
  • Operating temp: -40° to 140°F (-40° to 60°C)
  • Storage temp: -40° to 140°F (-40° to 60°C)
  • Operating relative humidity: 20% to 80%
  • Storage relative humidity: 5% to 95%
External Hardware Requirements
  • Keyboard: Standard USB
  • Mouse: Standard USB
  • Video: SVGA 1024×768 at 75Hz refresh
Additional Features
  • Dual, hot-swappable hard drives
  • Integrated smart card reader
  • Dual, hot-swappable power supplies
  • Four-line front panel LCD and information display
Host Management
  • Allows for management of multiple host keys
  • Includes functionality to generate duplicate copies of POS device templates

The SKI supports key injection using both RS-232 serial and USB. This equips organizations to inject keys into virtually any Point of Sale terminal, whether countertop or mobile.

Support for new Point of Sale devices and manufacturers is regularly added, ensuring future support and compatibility.

Want to learn more about Futurex Key Injection Services?

Contact a Solutions Architect today.

Give us a call


Futurex key injection customers