The PCI HSM specification defines a set of logical and physical security compliance standards for HSMs specifically for the payments industry. Compliance certification depends on meeting those standards.
The payShield 9000 HSM from Thales eSecurity was one of the first HSMs to be successfully validated against the PCI HSM standard, including fundamental requirements for payment processes, including:
- PIN processing;
- Card verification;
- Key generation.