Paymentology Key Guide


Paymentology key guide helps you as a client to understand the keys involved in a project when setting up with a Card Manufacturer. It helps provide the timelines for each key and will help guide when keys will be generated and shared respectively.

We recommend that as soon as a project is opened with the Card Manufacturer, that Paymentology Card Programme Team should be looped into an email by the Paymentology Project Manager. This way we can start the initial discussions required to kick off the project.

As some keys take some time due to PCI Compliance, we suggest that we start with the key exchange as the first activity and work in parallel on other items required.

Please see below a table for each key and the timelines. The Paymentology Card Programme Team will discuss with the Card Manufacturer on which keys will be involved and how keys will be shared. Once this is confirmed, we will then move forward in generating the keys and sharing them with the Card Manufacturer.

The Card Programme Team will work directly with the Card Manufacturer on all key activities. The Card Manufacturer should share a project plan with you as the client and keep you up to date on all aspects of the project.


ZCMK - Transport Keys >> 2 Courier Process

TaskProjected Timeline
Card Programme Team requests for ZCMK
Security Officers generate ZCMK components3 days
Day 1: Security Officers ship ZCMK component 1 >> DHL (Delivery time included)3 days
Day 2: Security Officers ship ZCMK component 2 >> FedEx (Delivery time included)5 days
Day 3: Security Officers ship ZCMK component 3 >> DHL (Delivery time included)3 days
Card Manufacturer loads components on HSM7 days
Card Manufacturer confirms KCV with Card Programme Team1 day

ZCMK - Transport Keys >> Components received first process

TaskProjected Timeline
Card Programme Team requests for ZCMK
Security Officers generate ZCMK components3 days
Day 1: Security Officers ship ZCMK component 1 >> DHL (Delivery time included)3 days
Card Manufacturer confirms receipt of component 11 day
Day 2: Security Officers ship ZCMK component 2 >> FedEx (Delivery time included)5 days
Card Manufacturer confirms receipt of component 21 day
Day 3: Security Officers ship ZCMK component 3 >> DHL (Delivery time included)3 days
Card Manufacturer loads components on HSM7 days
Card Manufacturer confirms KCV with Card Programme Team1 day

IMK/ MDK and PPK Key Exchange

TaskProjected Timeline
Card Programme Team requests for IMK/MDK/PPK
Security Officers generates the keys encrypting with ZCMK and PGP7 days
Security Officers share encrypted keys with Card Programme Team3 days
Card Programme Team Shares encrypted keys with Card Manufacturer1 day
Card Manufacturer loads keys and confirms KCV4 days

Disclaimer: Should a card scheme share keys with Paymentology, the timeline maybe be slightly different.