A network gateway includes a gateway authenticator, a first network interface for interfacing the network gateway with a first computer network, and a second network interface for interfacing the network gateway with a second computer network that is distinct from the first computer network. The gateway authenticator receives from a pin-pad terminal, via the first computer network, an activation credential request that includes a first administrator credential. The pin-pad terminal receives the first administrator credential from a hardware token that is interfaced with the pin-pad terminal. The gateway authenticator is configured to (i) verify that, before the pin-pad terminal received the first administrator credential from the hardware token, the first computer network associated the first administrator credential with the pin-pad terminal; and (ii) install in the pin-pad terminal a digital authentication certificate that facilitates authentication of the pin-pad terminal to the second computer network via the network gateway.