payShield 10K, the fifth generation of payment HSMs from Thales, delivers a suite of payment security functionality proven in critical environments including transaction processing, sensitive data protection, payment credential issuing, mobile card acceptance and payment tokenization.
Like its predecessors over the past 30+ years, payShield 10K can be used throughout the global payment ecosystem by issuers, service providers, acquirers, processors and payment networks.
- Simplifies deployment in dark data centers
- Delivers high resilience and availability
- Offers the broadest support of card and mobile applications in a timely manner
- Supports performance upgrades without hardware change
- Maintains backwards compatibility with all legacy Thales payment HSMs
There are many advantages to be found with the payShield 10K and to help introduce you to the next generation in payment HSMs we have compiled a top 10 reasons to migrate now.
- Slimmer form factor
Data center space is expensive. With payShield 10K we have reduced the height of the unit to 1U which means that you can stack twice as many units in the rack than you could with payShield 9000, reducing the cost of your real estate. - Lower power consumption
Each watt of power a device requires increases your data center energy and cooling costs. With our new payShield 10K design we have, leveraged the latest energy-efficient components and power management techniques to lower the overall power consumption, even when operating at twice the cryptographic performance, by 40% - Higher resilience & availability
Planned downtime is still downtime. Being forced to take an HSM offline for routine configuration tasks or to replace a faulty power supply can adversely affect the availability of your financial services infrastructure. We have improved the physical design with payShield 10K by providing dual hot swappable power supplies and fans as standard which improves MTBF by a factor of 14, delivering very high predicted uptime. - Faster firmware updates
Loading firmware usually means taking the HSM offline for several minutes. With payShield 10K the firmware update workflow process has been reduced by more than a factor of 10 while still maintaining all the necessary security checks for code authenticity and integrity. - Clearer visual indicators
payShield 10K has a simple, uncluttered front panel design which displays a red warning triangle when a tamper event has occurred. - Simpler key erasure confirmation
payShield 10K contains a dedicated key erasure confirmation light on the rear panel to provide assurance that no sensitive keys or data reside in the unit and it is safe to decommission. This enhanced approach to key erasure provides confirmation even after the unit has been powered off. - Stronger tamper protection
payShield 10K has multiple levels of tamper detection which (when activated) erase keys and sensitive data in the event of an attack. Attempts to gain access inside the inner security module cause the device to be permanently disabled. - Broader cryptographic support
payShield 10K is ready to be enhanced to support a much broader range of cryptographic algorithms and mechanisms as they become formalized as part of the increasing range of payment security specifications. - Greater maximum performance
Card payments and digital online payments are growing year on year, requiring you to constantly monitor and upgrade your processing bandwidth. payShield 10K offers significantly higher RSA and 3DES performance - 10. Superior service architecture
As the payments world increasingly looks towards new deployment models involving a mixture of private and public clouds, payShield 10K has been specifically designed to offer secure remote management and monitoring delivering a true ‘no touch’ experience
Get in contact with an Encryption Specialist
