payShield HSM family of Payment HSMs

Designed for the payment industry, payShield HSMs are proven solutions that deliver capabilities for issuing credentials, processing transactions and managing keys

What payShield HSMs Do

payShield 9000 supports payment applications for contact chip, contactless chip and mobile secure elements. The solution addresses evolving standards from EMVCo, PCI SSC, GlobalPlatform and Multos International.

Leverage Proven Solutions

Thales eSecurity payment HSMs are the most widely deployed in the world, used in an estimated 80 percent of payment card transactions.

Reduce Operating Costs

Leverage solutions that enable centralised, streamlined management of distributed HSM deployments.

Establish Strong Security

Employ tamper-resistant security modules for generating and storing keys.

Purpose-built for Payments

Leverage a suite of solutions designed exclusively for card issuing, mobile provisioning and payment processing.

Comprehensive Use Case Support

Offers support for all major payment industry standards and applications, including contact chip, contactless chip and mobile

Efficient, Remote Management

Streamline administration, even across deployments with multiple locations and large numbers of HSMs.

Data Sheet : payShield 9000

Thales payShield 9000 is a hardware security (HSM) payment module that provides the cryptographic protection required for ATM, point of sale (POS), credit and debit card issuance, and processing Of transactions. Encryption and management functionality meets or exceeds the operational and security requirements of the major international card system, including American Express, Discover, JCB, MasterCard, UnionPay and Visa. It is deployed as an external peripheral for mainframes and servers running card issuance applications, mobile platform provisioning, and payment processing software for the electronic payment industry.


Data Sheet : Key Management Device for Thales eSecurity Payment HSMs

The Thales eSecurity Key Management Device (KMD) for payment HSMs is a compact tamper-resistant security module (TRSM) that enables keys to be formed securely from separate components in a manner that is compliant with relevant security standards including X9 TR-39, ANSI X9.24-1 and PCI PIN Security. With its touch screen graphical user interface, the KMD is simple and intuitive to operate, and is compatible with the full range of Thales payment HSMs including the award-winning payShield 9000. The device configuration and management user interface complies with banking grade security best practices and the installed software is automatically validated for integrity prior to use. Upgrades are supported to meet future functional enhancements and security audit requirements.


Data Sheet : payShield Manager

payShield Manager enables security teams to perform all tasks remote from data centers, reducing costs and delivering greater operational efficiency. payShield Manager is a hardware security module (HSM) management tool specifically designed for the Thales payShield 9000 HSM that operates in both local and remote modes via a standard browser interface. A secure connection to the HSM underpinned by smart card access control enables key management, security configuration and software/license updates to be carried out remotely from the data center.


PCI Approvals for payShield 9000 FAQ

payShield 9000 is independently certified against security standards including FIPS 140-2 and PCI HSM. This FAQ document helps answer questions on broader PCI compliance and how payShield 9000 assists in such efforts.

Watch our interactive demo Explore
Schedule a live demo Schedule
Get in contact with a specialist Contact us