Abstract: A gateway including a hardware security module (HSM) implementing a hardware random number generator and a non-transitory memory maintaining a key injection status table (KIST). The gateway is programmed to distribute keys generated using the random number generator to a plurality of electronic control units (ECUs) responsive to a trigger to begin key distribution received from an end-of-line (EOL) tool, and send the KIST to the EOL tool responsive to completion of the key distribution. A key generated using a hardware random number generator is sent in an encrypted message to a vehicle electronic control unit (ECU), responsive to receiving a unique identifier (UID) of the ECU over a vehicle bus. Responsive to an indication of success from the ECU in a second encrypted message, a key injection status table (KIST) is updated to indicate that the key was applied to the ECU.