Equinox utilizes a centralized RKI Secure Server to distribute symmetric debit PIN and data encryption keys.
-
Architecture: Their scheme is designed for "single-session" multi-key injection, meaning a single RKI call can deliver both a PIN key and a P2PE (SRED) key simultaneously.
-
Workflow: Management is handled via the Equinox RKI Portal. A deployment center or technician schedules a "Key Job," and the terminal pulls the payload using its unique Hardware ID.
-
Key Distinction: Equinox is known for its Key Rotation flexibility; their scheme allows for easier swapping of processor keys (e.g., moving from First Data to TSYS) without a full device re-board.
