Futurex Payment Remote Key Loading (RKL) is a solution for securely distributing encryption keys to payment endpoint devices such as ATMs and POS terminals, eliminating the need for manual key injection at a physical facility. The solution supports three RKL techniques: - Certificate-Based RKL (TR-34 / RSA PKI): Uses asymmetric cryptography to authenticate recipients and facilitate secure key exchanges, endorsed by ASC X9. - Signature-Based RKL: Uses digital signatures to encrypt keys before transmission; suited for older ATM networks and dial-up connections. - Symmetric Key RKL: Keys are injected during device manufacturing, skipping the certificate establishment phase. Futurex offers two deployment models: - On-Premises (CryptoHub Platform): A hardware-based key management system for POS and ATM encryption key management. Compliant with FIPS 140-2 Level 3 and PCI HSM. Supports API integration with multiple programming languages and variable automation levels. - Cloud (VirtuCrypt Cloud Payments Platform): A cloud-based "as-a-service" model using Futurex hardware in secure data centers. Compliant with FIPS 140-2 Level 3 and PCI HSM. Includes the VirtuCrypt Elements RKL Service for automated key distribution over secure IP networks, and the VirtuCrypt Intelligence Portal (VIP) Dashboard for centralized key management, device communication, and audit log access. The solution addresses use cases including ATM rekeying for PCI DSS compliance, POS terminal PIN encryption, and Point-to-Point Encryption (P2PE) for primary account number (PAN) protection.