Payment HSM


Thales HSMs have long been a standard within the payment industry, and with more than 25 years of experience the company has reached a market leading position. The numbers speak for themselves: Thales HSMs protect 80 percent of all card transactions in the world.

PayShield 9000

PayShield 9000 is an HSM designed to meet the needs and requirements of the payment industry. It performs tasks such as PIN protection and validation, transaction processing, key management and payment card issuance – capable of handling both chip cards (EMVs) and magnetic stripe cards. It delivers high assurance protection for ATMs, POS terminals and credit card transactions, while providing operational ease.

PayShield 9000 also supports the growth in global transaction volumes with a range of cryptographic performance options, including the highest performance figures in the industry – processing up to 1 500 transactions per second (TPS).

 Technical specifications – brief summary:

  • Features that meet industry standards from American Express, Discover, JCB, MasterCard and Visa, as well as the banking industry’s security audit requirements
  • Certified to FIPS 140-2 Level 3 and available in configurations certified to PC1 HSM v1.0
  • Supports the resiliency needs of high-capacity shared infrastructures with dual power supplies
  • Multiple local main keys enable several agencies to share one and the same HSM
  • Redundant hardware with clustering support

For more information on PayShield 9000, please visit the Thales product page.


WebSentry is a flexible and cost-effective HSM for cryptography devices within e-commerce security.

WebSentry brings the highest level of security and performance to data encryption, payment transactions and digital signatures, as well as providing cryptographic functions for a wide range of PKI applications. It features broad support for industry standard platforms, protocols and algorithms.

WebSentry also comes with the highest level of physical security; any drilling, electrical probing or chemical attacks against it will trigger a critical alarm that results in an instant erasure of secret keys and data.

Technical specifications – brief summary:

  • Fail-safe hardware architecture
  • Easy to integrate with existing server architecture
  • Supports several development platforms; PKCS#11, Java Cryptographic Extension and OpenSSL
  • Supports the operating systems Windows, Solaris and Linux

For more information on WebSentry, please visit the Thales product page.