SKI Series 3 Secure Key Injection for POS
Streamlined point-of-sale key injection
![ski series 3 key injection ski series 3 key injection](https://www.futurex.com/hs-fs/hubfs/Page%20Images%20-%20FX/Hero%20Images/PNGs/ski%20s3_hero_image_A.png?width=420&name=ski%20s3_hero_image_A.png)
SKI Series 3 for High-Volume Key Injection
The SKI Series 3 makes direct key injection fast and easy. It supports all major POS manufacturers and compliance standards. Its GUI is easy to learn and use, cutting down training time. The SKI Series 3 can inject encryption keys into 18 POS terminals simultaneously. It also has automation templates to reduce manual effort. This powerful functionality, plus its wealth of extra features, makes the SKI Series 3 perfect for high-volume key injection projects.
Support for all Major POS Manufacturers
The SKI Series 3 supports all major POS/POI manufacturers. Deployments include POS terminals, PIN pads, POI devices, and PIN entry devices (PEDs). Support for new and emerging devices is ongoing, ensuring your key injection operations keep pace with the industry.
Compliance with all Major Standards
The SKI Series 3 complies with all major security standards, including full TR-31 support. It contains a FIPS 140-2 Level 3 validated cryptographic module, natively built into the product so no cumbersome integration is needed.
Versatility for all Transaction Types
Inject encryption keys for all payment purposes and types, including both Master/Session and DUKPT.
Security in an Embedded SCD
The SKI Series 3 has an embedded secure cryptographic device (SCD) that is validated under FIPS 140-2 Level 3 and PCI HSM standards.
Automation to Streamline Workflow
Key injection profile templates and automation capabilities reduce manual effort and human error. Scanning terminal bar codes automatically populates fields in the SKI Series 3’s GUI.
Key Benefits of SKI S3
![icon_safety](https://www.futurex.com/hs-fs/hubfs/Page%20Images%20-%20FX/Icons%2072px/icon_safety.png?width=72&height=72&name=icon_safety.png)
Logical security
The SKI Series 3 features dual control, split knowledge, and role-based user permissions. This gives you the logical tools to mitigate key exposure and cyber threats.
![icon_encryption](https://www.futurex.com/hs-fs/hubfs/Page%20Images%20-%20FX/Icons%2072px/icon_encryption.png?width=72&height=72&name=icon_encryption.png)
Physical security
The SKI Series 3 is enclosed in a tamper-resistant, tamper-evident puzzle-box-design chassis. Any physical intrusion attempt triggers sensor wires to clear sensitive data.
![icon_key](https://www.futurex.com/hs-fs/hubfs/Page%20Images%20-%20FX/Icons%2072px/icon_key.png?width=72&height=72&name=icon_key.png)
Remote key loading (RKL) ready
The SKI Series 3 can be expanded to support remote key loading. This ensures that even as the industry grows, expands, and evolves, you’ll be ready.
Why Choose the SKI Series 3 for Key Injection?
Two words: functionality and flexibility. The SKI Series 3 is the most user-friendly and feature-rich key injection solution on the market. With a wide range of functions and a streamlined GUI, the SKI Series 3 is a great choice for key injection projects of any scale.
![icon_key](https://www.futurex.com/hs-fs/hubfs/Page%20Images%20-%20FX/Icons%2072px/icon_key.png?width=72&height=72&name=icon_key.png)
Key injection for POS and mPOS
The SKI Series 3 provides a FIPS 140-2 Level 3 certified platform for loading encryption keys for all major POS/POI terminal manufacturers.
![icon_web safety](https://www.futurex.com/hs-fs/hubfs/Page%20Images%20-%20FX/Icons%2072px/icon_web%20safety.png?width=72&height=72&name=icon_web%20safety.png)
On-premises deployment
The SKI Series 3 is deployed on-premises. Users operate it through its GUI, which is intuitive to use and reduces training time.
![icon-atm cloud](https://www.futurex.com/hs-fs/hubfs/Page%20Images%20-%20FX/Icons%2072px/icon-atm%20cloud.png?width=72&height=72&name=icon-atm%20cloud.png)
Connect to multiple POS devices simultaneously
The SKI can connect to up to 18 POS or POI devices at once. Automation and key injection templates can be applied to reduce manual effort.
![icon_search](https://www.futurex.com/hs-fs/hubfs/Page%20Images%20-%20FX/Icons%2072px/icon_search.png?width=72&height=72&name=icon_search.png)
Large technology partner network
Support is included for major POS/POI device makers, mobile payment systems, ATMs, and PIN pads for all manufacturers, merchants, and retailers. The SKI’s code base allows support for emerging technologies to be added at any point.
Features of SKI S3
![icon_search](https://www.futurex.com/hs-fs/hubfs/Page%20Images%20-%20FX/Icons%2072px/icon_search.png?width=72&height=72&name=icon_search.png)
User function separation
Configure user profiles based on their role with the organization, such as job title, department, or location.
![icon_key](https://www.futurex.com/hs-fs/hubfs/Page%20Images%20-%20FX/Icons%2072px/icon_key.png?width=72&height=72&name=icon_key.png)
Batch key injections
The SKI Series 3 handles batch key injections, serving up to 18 devices with different key algorithms.
![icon_web safety](https://www.futurex.com/hs-fs/hubfs/Page%20Images%20-%20FX/Icons%2072px/icon_web%20safety.png?width=72&height=72&name=icon_web%20safety.png)
Uncompromised compliance
Exceeds compliance standards for key injection and data storage, as well as the latest TR-31 key block standards.
![icon_application](https://www.futurex.com/hs-fs/hubfs/Page%20Images%20-%20FX/Icons%2072px/icon_application.png?width=72&height=72&name=icon_application.png)
Bar code scanner
Supports bar code scanners for serial reading, serial key injection, and to automatically populate fields.
![icon_atm sign](https://www.futurex.com/hs-fs/hubfs/Page%20Images%20-%20FX/Icons%2072px/icon_atm%20sign.png?width=72&height=72&name=icon_atm%20sign.png)
High-speed label printing
High-speed label printers work with the SKI to help keep things organized during the injection process.
![icon_saas](https://www.futurex.com/hs-fs/hubfs/Page%20Images%20-%20FX/Icons%2072px/icon_saas.png?width=72&height=72&name=icon_saas.png)
Audit logging function
Store critical data like serial information and user activity in log files to meet your audit requirements.
VirtuCrypt Cloud Key Management for Global Access
The VirtuCrypt cloud remote key management service allows users to remotely manage and load keys through the cloud from anywhere in the world. Users can access the intuitive VirtuCrypt Intelligence Portal (VIP) Dashboard to manage devices, control access, and configure settings. Avoid the effort and expense of manual key loading within a secure facility. All with FIPS 140-2 Level 3 validated security.
Frequently Asked Questions
What is the SKI Series 3?
The SKI Series 3 key management server is a streamlined solution for Point-of-Sale key injection, with industry-leading technology and support for all major manufacturers. Point of Sale (POS) terminal deployment operations often face the challenge of injecting encryption keys into hundreds or even thousands of terminals in a short amount of time. The Secure Key Injector (SKI) Series 3 tackles this challenge, eliminating costly manual processes and removing reliance on legacy software-based systems. The SKI can connect to up to 18 POS terminals at the same time, with the advanced ability to load different types of keys simultaneously. The SKI is streamlined to fit your organization’s needs without compromising on speed, security, or stability.
What are the SKI Series 3 specifications?
Hardware features
- Dual control-enabled, tamper-responsive
- Smart card reader for M-of-N key fragmentation and dual-factor authentication
- Dual, redundant, hot-swappable power supplies
- Automated, internal RAID-based backup of object management application and databases
Operating conditions
- Power: 100 – 240 VAC 50/60 Hz. 225 Watts
- Operating temp: -40° to 140°F (-40° to 60°C)
- Storage temp: -40° to 140°F (-40° to 60°C)
- Operating humidity: 20% to 80% non-condensing
- Storage humidity: 5% to 95% non-condensing
Dimensions and weight
- Weight: 40.5 lbs (18.4 kg)
- Width: 19 inches (48.3 cm)
- Height: 2U – 3.47 inches (8.81 cm)
- Depth: 22.3 inches (56.7 cm)
Functions and keys
Key types and algorithms
- Master Session Key
- DUKPT Initial Key
- DUKPT BDK Key
- MAC Key
- PIN Encryption Key (PEK)
- Key Exchange Key (KEK)
- Host Verification
- DUKPT 3DES BDK Key
- Default KTK
- Balance Decryption Key
Other functions
- Bar code scanner for serial reading
- High speed label printer support
- Audit logging function
- Separation of users by job function
- Ability to define batch key injections
- Balance Decryption Key
Host management
- Allows for management of multiple host keys
- Includes functionality to generate duplicate copies of POS device templates
What makes the SKI Series 3 unique to key injection?
What makes the SKI innovative and unlike anything else in the industry is its ability to manage encryption keys for your entire POS terminal estate and consolidate them into one centralized key injection product solution. It provides an ideal, cost-effective, and all-in-one security solution for loading and managing POS encryption keys for all major terminal manufacturers.
How does the SKI provide a streamlined and secure injection process?
The SKI is capable of connecting to up to nineteen POS terminals at once. Scalable hardware allows you to purchase only the injection capabilities your organization needs, increasing capacity over time without increasing your total rack footprint.
Capable of injecting more than one type of key at a time, the SKI also can easily and securely import, create, and store your keys. This helps to eliminate the time-consuming process of performing more key loading ceremonies than are necessary.
High Powered Key Injection Functionality
- Automate large key injection batches
- Standardized Point of Sale terminal injection templates help reduce operator errors and eliminate re-work
Connect to Multiple POS Devices Simultaneously
- Generate duplicate copies of POS device templates
- Increase efficiency and eliminate training requirements for multiple vendor-specific injection tools
Can I get a product overview of the SKI Series 3?
Key Types Supported
- Master Session Key
- DUKPT 3DES BDK Key
- PIN Encryption Key (PEK)
- Key Exchange Key (KEK)
- Base Derivation Key (BDK)
- DUKPT Initial Key
- DUKPT BDK Key
- Point-to-Point Encryption (P2PE)
- MAC Key
- Default KTK
Streamlined Functionality
- Separates users by job function
- Defines batch key injections
- Provides flexibility in key loading operations
- Reduces errors and re-work
- Serial and USB-based key injection
- Capable of upgrading to support remote key injection
Hardware Support and Integration
- Supports bar code scanner for serial reading
- Supports high-speed label printers
- Supports protocols for major POS terminal manufacturers and key types
Ease of Use
- Intuitive user interface
- Barcode scanner support for easy device selection
Powerful Logging Capability
- Provides detailed audit records and the ability to generate key reports
- Simplifies management of internal and external TR-39 audits
- Complete, authenticated audit log files of all activity, access, tracking, and serial information
Cost-Effective Solutions
- Injects more than one type of encryption key simultaneously
- Reduces training and administration costs
Does the SKI support injection scalability?
The SKI supports key injection using both RS-232 serial and USB. This equips organizations to inject keys into virtually any Point of Sale terminal, whether countertop or mobile.
Support for new Point of Sale devices and manufacturers is regularly added, ensuring future support and compatibility.
Featured Resources
![SKI Series 3 Overview](https://www.futurex.com/hubfs/Page%20Images%20-%20FX/Asset%20Thumbnails/Datasheets%20(Sales%20Brochures)/ds_thumbnail_ski%20series%203-min.png)
![Key Injection](https://www.futurex.com/hubfs/ds_thumbnail_key%20injection.png)
![Remote Key Loading - VirtuCrypt Elements](https://www.futurex.com/hubfs/Page%20Images%20-%20FX/Asset%20Thumbnails/Solution%20Briefs/sb_thumbnail_remote%20key%20loading-virtucrypt%20elements-min.png)
“The upgrade was seamless and involved zero downtime for our customers. We take great comfort in knowing our key injection hardware can scale alongside our rapidly expanding business."
- Anthony Siracuse, CEO and owner
Trintas
Enterprise Data Encryption Solutions
Futurex provides HSMs and key management servers that handle encryption, bring-your-own-key (BYOK). Futurex helps enterprise organizations deploy a modern cloud data security environment that complies with the latest standards and regulations.
![bc4595180ea915c553ac6ecf67ca4b0b](https://www.futurex.com/hubfs/Partner%20Logos/bc4595180ea915c553ac6ecf67ca4b0b.png)
![Bank_of_America_logo](https://www.futurex.com/hubfs/Icons%20-%20%5BIC%5D/2560px-Bank_of_America_logo.svg.png)
![wells fargo](https://www.futurex.com/hubfs/Partner%20Logos/wells%20fargo.png)
![RBC_Bank logo](https://www.futurex.com/hubfs/Icons%20-%20%5BIC%5D/RBC_Bank.svg.png)
![Discover_Card_logo](https://www.futurex.com/hubfs/Icons%20-%20%5BIC%5D/2560px-Discover_Card_logo.svg.png)