ECAM CO.

, LTD

ATM-TX Key Loading

Instruction:
In order to load TMK key from TX to ATM, you’ll need key to generate key components of
TMK from HSM. You are required to have 2 key components and 1 TMK key.
In this guideline, there will be separated in to 3 parts of each systems (HSM,TX and ATM).

1. HSM
Creating Key Component:

• Log in to HSM using Excrypt Manager.

• On the left-toolbar, go to Key Management
• In the Key Management Tab, you will see a section called Component/Fragmentation.
• In the section Key Component, Click Generate.
• The Generate Key Component window will appear.
i. *Suggested Parameters:
♦ Total Component to Generate = 2
♦ Type of Key To Generate = Triple DES , Double
• Click Next.
• A Warning box will appear with the message: WARNING: Clicking ‘Ok’ will display the next
key part.
• Click OK to view the key part. The part will display along with the component number,
checksum, and final key checksum. (*These keys and values will be used in ATM)

Generate TMK Key:

• Login to HSM using Excrypts Manager.
• On the left-toolbar, go to Key Management
• In the Key Management Tab, you will see a section called Miscellaneous Key Functions.
• In Miscellaneous Key Functions, there is a function called Key Generation.
• Next to Key Generation, click comb-box to see a dropdown menu and select Cryptogram
• Click Generate, and the Load Key Window will appear
• Select the Key Parts, Key Modifier, Key Type/Length, and Parity.
i. Suggested Parameter:
♦ Key Parts: 2
♦ Key Modifier: 4
♦ Key Type/Length: Tripple DES, Double (*same as components)

Sophareach Kong
Engineer, BSFI Team
 ECAM CO., LTD
• Click Next
• The Save Options Window will appear.
• Choose either to Save to disk or display the cryptogram instead of saving it. Click Next
• (Make sure “Generating Key Component” is completed) Enter all the necessary Key
Components. Click Next
• A key ready to load window will display the Final Key Checksum and Parity. Click Next.
• The Finish window will display a detailed report with the cryptogram’s modifier,
checksum, parity, and cryptogram (if display cryptogram was selected). Click Finish.
2. ATM
Loading Key to ATM:

• Go to SOP to Enter TMK1 and TMK2 by pressing SOP button Operation type password:
2080-> Press 50 ->VENDOR MENU ->00 EPP FCTS ->INIT EPP ->OK -> press 96 BACK.
• Press 06-> ACCESS 03-> INIT ENTRY 08 ->ENTER SKE A ->enter the TMK1 value:
i. TMK1 (Key Component A) : xxxx-xxxx-xxxx-xxxx-xxxx-xxxx-xxxx-xxxx
♦ KVC A: XXXXXX
ii. TMK2 (Key Component B): xxxx-xxxx-xxxx-xxxx-xxxx-xxxx-xxxx-xxxx
♦ KVC B: XXXXXX
• After TMK1 and TMK2 have been entered, it will display the Final Key Check Value (Final
KVC xxxxxx). If it is correct: Press 01 YES, if it is not: Press 02 NO.
3. TX
Loading TMK Key to dedicated Terminal

• Go to Entire System/Financial Institutions/Financial Institution: Acquirer

Bank/Acquiring/Terminals
• Choose your ATM terminal, open it
• Click on “Key Tabs”
• Look for Master, Click on “…” button
• Click on “Set” button
• Enter Your TMK Key (From HSM) with Check Value correctly
• Click OK
• Click on “Activate” button
Final Result:
PIN Working Key should be auto generated under the Master Key. If it is not auto
generated, make sure the procedures have been done correctly.

Sophareach Kong
Engineer, BSFI Team