Hundreds of ATMs, a single ceremony, zero manual transcription.

ATM Keygen automates the TDES key-generation ceremony for entire ATM fleets on Thales payShield 10k HSM — printing numbered Sobreflex envelopes and exporting the signed log, without cryptographic material ever appearing on screen.

Transcribing keys by hand is a risk the industry shouldn’t be paying for anymore.

Key-generation ceremonies are critical security processes that have historically been run by hand. ATM Keygen removes that flow — without giving up control, chain of custody or auditable evidence.

Hours, spreadsheets, faith.

• 01Operators transcribe cryptographic components by hand, one by one.
• 02Each ATM consumes minutes of human attention with no signed traceability.
• 03Transcription errors are caught late — or not at all.
• 04Ceremony evidence lives in Excel sheets and manual logs.

Minutes, envelopes, evidence.

• The operator authenticates with two factors and lets the HSM do the work.
• Hundreds of ATMs are processed in a single auditable ceremony.
• Every key prints onto a numbered Sobreflex envelope, never going through the screen.
• The log is signed with SHA-256 and exported to the IronKey USB.

A deliberately minimal TUI.

On an embedded device running hardened Linux: no network, no mouse, no distractions. The interface is designed so an operator follows the exact ceremony script and does nothing else.

Seven steps. A single shift.

The flow is linear by design: each screen unlocks the next only if the previous one closed without errors. No alternative paths, no shortcuts.

Dual authentication

The operator completes a dual authentication, with both factors masked.

Institution data

ABA and the financial institution’s name are bound to the ceremony.

Custodian registry

Custodians identified for the ceremony, with card-based authorization on the HSM.

Parameters and ATM list

Key type selection and upload of the ATM ID list. Automatic deduplication.

Batch generation

Component generation and cryptogram assembly inside the HSM. Progress indicator and retry of failed runs.

Secure printing

One Sobreflex envelope per successful ATM. The envelope serial is bound to the ATM ID.

Export + close-out

CSV exported to USB and verified with SHA-256. Close-out only if the checklist is complete.

A single box, no network, encrypted down to the disk.

ATM Keygen runs on a dedicated embedded device, on customer premises. No network, no shared screen, no general-purpose software — the device’s only function is to run the ceremony.

Dedicated embedded device

A single piece of hardware, physically isolated, installed on customer premises. No shared use, no software outside the ceremony.

Air-gap by default

No network interfaces enabled. The only I/O surfaces are the HSM reader, the printer and the USB port dedicated to encrypted export.

Full disk encryption

Full cold-disk encryption. Without the passphrase, a powered-off device is a brick — no recoverable residue from previous ceremonies.

Dot-matrix printer

Continuous form, no networked buffer. Each envelope prints with a control serial and is bound to an ATM ID in the closing CSV.

Every action is recorded. No secret leaves the HSM.

The audit log captures timestamp, actor, action and result of every step — never storing components, keys or KCV in the clear. The session only closes when the full checklist is validated.

• LMK deauthorized

  The payShield 10k HSM is taken out of authorized mode before anything else.
• Signed log

  Audit log closed and signed with SHA-256. Hash printed on the ceremony’s last envelope.
• CSV exported

  File sent to the IronKey USB and verified with SHA-256 before unmounting.
• Envelopes reconciled

  Number of printed envelopes = number of processed ATMs. Any mismatch blocks close-out.
• Operators acknowledge

  Double on-screen confirmation. No operator can close alone.

Is your next ceremony still done by hand?

We coordinate a live demo on a lab payShield 10k. In 45 minutes you see the full ceremony, the printed envelopes and the signed CSV at close-out.