Automation of remote key loading for ATMs

Cryptosec RKL

として利用できる: Hardware on-premise

Ensures integrity, confidentiality, and non-repudiation of key loading while dramatically lowering operating costs of your ATM fleet

Cryptosec rkl Productimage
  • Increased security - no manual intervention
  • Reduction of labor costs and operating expenses
  • Reduced risk of fraud
  • Increased frequency and speed in key changes
  • Availability of process reports and alerts
  • Compliance with PCI PIN requirements in ATMs - TR31 and TR34
  • PCI-certified Keyblock support for secure key handling



Provides support for all leading ATM manufacturers, ensuring global standardization.


Eliminates the possibility of human error or criminal activity from the initial key upload.


Enables significant savings compared to manual key uploading.


Having the right remote key loading solution allows you to comply with ANSI X9.24 standards, save costs, improve ATM availability, and have an auditable system.



Cryptosec RKL

Cryptosec RKL is an appliance for the automated remote loading of initial master keys and key renewal into multivendor ATM networks, used by commercial banks and credit unions. Compatible with all major ATM vendors, such as Diebold, NCR, Wincor, and more, this system requires no software or hardware changes in host servers or changes in ATM application code.

The integrity of transferring and loading initial cryptographic keys to an ATM secure PIN PAD is central to the security of the ATM transactions that utilize public networks. Cryptosec RKL fully automates this process, versus traditional costly and risky manual procedures, by employing advanced asymmetric cryptography and PKI certificates. The Cryptosec RKL ensures the integrity, confidentiality, and non-repudiation of key loading while dramatically lowering operating costs of the ATM fleet.

Requirements from major payment card brands such as Visa and MasterCard state that an ATM’s master keys must be renewed periodically or when keys had been compromised. This renewal of master keys was previously done manually by operators, in person, on each ATM. Cryptosec RKL enables ATM network operators to update up to 7,000 ATM master keys per hour, with one single appliance. This dramatically reduces response times in case of emergency, minimizes ATM unavailability, and maximizes resource savings.

Cryptosec RKL incorporates an industry leading hardware security module (HSM), providing optimal protection for transportation of master keys. HSM-based remote key loading solutions deliver physical and logical protection that manual approaches cannot match.

Cryptosec RKL allows the end user to update their ATM’s keys as often as they wish, with no additional cost.

The flexibility and scalability of Cryptosec RKL enables ATM networks to grow at the fastest pace. Cryptosec RKL is currently used by some of the major banks in the world, handling key loading processes for over 100,000 ATMs worldwide.

Key features of Cryptosec RKL:

  • Replaces up to 7,000 ATM master keys per hour
  • Automates and simplifies compliance reporting and auditing
  • Compatible with any core banking application being used by the bank
  • Integrates with core banking applications through a web service app


Our on-premise options allow hosting the product directly on-site in your own network or data center.



How can we help you?

Talk to one of our specialists and find out how Utimaco can support you today.
You have selected two different types of downloads, so you need to submit different forms which you can select via the two tabs.

Your download request(s):

    By submitting below form you will receive links for your selected downloads.

    Your download request(s):

      For this type of documents, your e-mail address needs to be verified. You will receive the links for your selected downloads via e-mail after submitting below form.

      Your collection of download requests is empty. Visit our Downloads section and select from resources such as data sheets, white papers, webinar recordings and much more.