Do I need a Tosibox Key per site and do I always need a physical key?

You can have multiple locks associated to a single physical master key, it is recommended to have a spare physical key as well. A software key via is also available, see below links for more details

https://www.tosibox.com/product/softkey/