Key Management

Managing your keys

Step One

Clear ZMK Components will be exchanged with nominated security officers of the OFI, from the various Issuers on the network, the OFI should store the Encrypted Form of this Clear ZMK Components shared with them. This key will be exchanged between Issuers and the OFI, during the initial setup stages of the OFI on the Network.

Step Two

Zone provides a miniature switch approach, that allows the OFI to acquire & forward transactions directly to Issuers. Hence, the OFI is expected to perform Key Exchange with the various Issuers on the Network and get a resulting Varianted ZPK, that will be decrypted and used to encrypt that Issuers Transaction Pin Data.

Step Three

The Key Exchange ISO8583 Request to be sent to each Issuer on the network, should have a F100 carrying the value that represents the code of the Issuer, that Key Exchange ISO Request is destined for. A list of Issuers on the Network, their Code and Card Bins will be shared with the OFI.