The single platform key injection solution for payment terminals and peripheral de-vices


The single platform key injection solution for payment terminals and peripheral de-vices

  • Highest compatibility with POI devices
  • Complete Solution with built-in HSM and central key storage
  • Single solution platform for FIPS- and PCI-compliant local and remote key injection

Delivery Time:

About 2-4 weeks
Key Benefits

Key Benefits


Highest Compatibility

Supports more than 350 different devices from various renowned manufacturers of POI systems.


Complete Solution

Benefit from the built-in FIPS- and PCI-certified HSM as a root of trust and the integrated central key storage platform’s logical and physical security.


Highest safety level for executing Key Injection

Enables the administrator to execute local and remote key injection securely in insecure environments according to FIPS 140-2 Level 3 and PCI DSS.



The single platform key injection solution for payment terminals and pe-ripheral devices



KeyBRIDGE POI is the central solution for local and remote key injection for payment terminals and peripheral devices. It provides a complete solution that consists of an HSM and an integrated central key storage platform.

Due to the built-in FIPS- and PCI-certified HSM it provides the root of trust to execute highly secure key injection in both secure and unsecure environ-ments.

KeyBRIDGE POI has been designed to be a state-of-the-art key injection ap-pliance, keeping up with the very dynamic changes within various indus-tries.

Its capability to integrate with more than 350 different POI devices and its unique key management and functionalities ensures secure and reliable payment transactions and device attestation.

Additional features such as Remote Audit Management, Network support, or Real-Time DID Back-up can be licensed for further enhanced functional-ity and upgraded serviceability upon request.


Provides high efficiency

  • Provides detailed key inventory
  • Streamlines key injection operational efficiency
  • Automatically captures all relevant audit log details
  • Provides easy export and validation of audit logs
  • Reduces audit cycles by automatic audit log creation
  • Performs both DUKPT and MK/SK key injection

Unifying more than 350 different POI devices

  • Provides central management of the most certified POI devices with their individually unique protocols

Configurable Injection profiles

  • Allows a user to inject up to thirty keys to a single device in just four mouse-clicks

SMK Update functionality

  • Captures each performed action through extensive audit logging
  • Enables reliable tracking of all activities from at least two unique personnel
  • Provides greater granular flexibility to system managers to assign unique role-based access-controls (RBACs)

POS key erasure functionality

  • to clear production keys from POS devices prior to transporting

Central Device Management through one single pane of glass

  • Injection dashboard for each supported device
  • Detailed overview of all necessary features and functions through custom wiring diagrams

Dual control and split knowledge

  • Ability to update the SMK for periodic key rotation

Unlimited capacity

  • Management of unlimited Key Encryption Keys (KEKs)

Technical Specifications:

Full Support of all key types

  • DUKPT (PIN, MAC, or Data)
  • Standard E2E keys
  • KEKs
  • Allows Master Session methods as well as alternative derivation techniques
  • Supports other key types


Our on-premise options allow hosting the product directly on-site in your own network or data center.

  • LAN Appliance



AT1000 Payment HSM

The fastest HSM in the Payment Industry. Secure the Payment Ecosystem with AT1000 Payment HSM and benefit from unique speed and global sup-port.

Find more details General Purpose HSM Se-Series

The world’s first converged crypto platform for payment and general pur-pose HSM use case enabling to offer HSM as a Service and providing true multi-tenancy.

Find more details


Contact us

We look forward to answering your questions.

How can we help you?

Talk to one of our specialists and find out how Utimaco can support you today.
You have selected two different types of downloads, so you need to submit different forms which you can select via the two tabs.

Your download request(s):

    By submitting below form you will receive links for your selected downloads.

    Your download request(s):

      For this type of documents, your e-mail address needs to be verified. You will receive the links for your selected downloads via e-mail after submitting below form.

      About Utimaco's Downloads

      Visit our Downloads section and select from resources such as brochures, data sheets, white papers and much more. You can view and save almost all of them directly (by clicking the download button).

      For some documents, your e-mail address needs to be verified. The button contains an e-mail icon.

      Download via e-mail


      A click on such a button opens an online form which we kindly ask you to fill and submit. You can collect several downloads of this type and receive the links via e-mail by simply submitting one form for all of them. Your current collection is empty.