SKI Series 3 Secure Key Injection for POS

The SKI Series 3 key management server is a streamlined solution for Point-of-Sale key injection, with industry-leading technology and support for all major manufacturers. Point of Sale (POS) terminal deployment operations often face the challenge of injecting encryption keys into hundreds or even thousands of terminals in a short amount of time. The Secure Key Injector (SKI) Series 3 tackles this challenge, eliminating costly manual processes and removing reliance on legacy software-based systems. The SKI can connect to up to 18 POS terminals at the same time, with the advanced ability to load different types of keys simultaneously. The SKI is streamlined to fit your organization’s needs without compromising on speed, security, or stability.

Hardware features

• Dual control-enabled, tamper-responsive
• Smart card reader for M-of-N key fragmentation and dual-factor authentication
• Dual, redundant, hot-swappable power supplies
• Automated, internal RAID-based backup of object management application and databases

Operating conditions

• Power: 100 – 240 VAC 50/60 Hz. 225 Watts
• Operating temp: -40° to 140°F (-40° to 60°C)
• Storage temp: -40° to 140°F (-40° to 60°C)
• Operating humidity: 20% to 80% non-condensing
• Storage humidity: 5% to 95% non-condensing

Dimensions and weight

• Weight: 40.5 lbs (18.4 kg)
• Width: 19 inches (48.3 cm)
• Height: 2U – 3.47 inches (8.81 cm)
• Depth: 22.3 inches (56.7 cm)

Functions and keys

Key types and algorithms

• Master Session Key
• DUKPT Initial Key
• DUKPT BDK Key
• MAC Key
• PIN Encryption Key (PEK)
• Key Exchange Key (KEK)
• Host Verification
• DUKPT 3DES BDK Key
• Default KTK
• Balance Decryption Key

Other functions

• Bar code scanner for serial reading
• High speed label printer support
• Audit logging function
• Separation of users by job function
• Ability to define batch key injections
• Balance Decryption Key

Host management

• Allows for management of multiple host keys
• Includes functionality to generate duplicate copies of POS device templates

What makes the SKI innovative and unlike anything else in the industry is its ability to manage encryption keys for your entire POS terminal estate and consolidate them into one centralized key injection product solution. It provides an ideal, cost-effective, and all-in-one security solution for loading and managing POS encryption keys for all major terminal manufacturers.

The SKI is capable of connecting to up to nineteen POS terminals at once. Scalable hardware allows you to purchase only the injection capabilities your organization needs, increasing capacity over time without increasing your total rack footprint.

Capable of injecting more than one type of key at a time, the SKI also can easily and securely import, create, and store your keys. This helps to eliminate the time-consuming process of performing more key loading ceremonies than are necessary.

High Powered Key Injection Functionality

• Automate large key injection batches
• Standardized Point of Sale terminal injection templates help reduce operator errors and eliminate re-work

Connect to Multiple POS Devices Simultaneously

• Generate duplicate copies of POS device templates
• Increase efficiency and eliminate training requirements for multiple vendor-specific injection tools

Key Types Supported

• Master Session Key
• DUKPT 3DES BDK Key
• PIN Encryption Key (PEK)
• Key Exchange Key (KEK)
• Base Derivation Key (BDK)
• DUKPT Initial Key
• DUKPT BDK Key
• Point-to-Point Encryption (P2PE)
• MAC Key
• Default KTK

Streamlined Functionality

• Separates users by job function
• Defines batch key injections
• Provides flexibility in key loading operations
• Reduces errors and re-work
• Serial and USB-based key injection
• Capable of upgrading to support remote key injection

Hardware Support and Integration

• Supports bar code scanner for serial reading
• Supports high-speed label printers
• Supports protocols for major POS terminal manufacturers and key types

Ease of Use

• Intuitive user interface
• Barcode scanner support for easy device selection

Powerful Logging Capability

• Provides detailed audit records and the ability to generate key reports
• Simplifies management of internal and external TR-39 audits
• Complete, authenticated audit log files of all activity, access, tracking, and serial information

Cost-Effective Solutions

• Injects more than one type of encryption key simultaneously
• Reduces training and administration costs

The SKI supports key injection using both RS-232 serial and USB. This equips organizations to inject keys into virtually any Point of Sale terminal, whether countertop or mobile.

Support for new Point of Sale devices and manufacturers is regularly added, ensuring future support and compatibility.