Thales payShield 10K is a proven, enterprise-grade payment HSM that secures the most critical processes in the global payment ecosystem. Used by issuers, acquirers, processors, service providers, and payment networks, it protects payment credential issuing, PIN routing, card and mobile payment authorization, tokenization, and sensitive data for both in-person and digital transactions.

Designed for scale and resilience, payShield 10K supports remote configuration and monitoring, hot-swappable components, and seamless integration with the widest range of payment applications. Fully aligned with PCI, EMVCo, and global payment network requirements, it delivers the trust, availability, and compliance needed to operate secure, high-volume payment services with confidence.

Benefits of the payShield 10K

Operating Costs

Improved operating costs with remote management, upgradeable performance, and 24/7 monitoring with payShield.

Maximize Resilience

Continuous uptime with dual hot swap power, redundant ports, and no touch operation.

Simplified Integrations

Off‑the‑shelf functions, high level APIs, and backward compatible payShield HSM security.

Diverse Payment Support

Single HSM platform securing cards, mobile wallets, tokens, and IoT with comprehensive cryptographic services.

payShield 10K

payShield 10K is a payment hardware security module (HSM) that ensures robust security for credential issuance, user and card authentication, and sensitive data protection—supporting both in-person and digital payments across the global payment ecosystem.

Thales payShield is the #1 ranked solution in top Payment HSM solutions.

PeerSpot users give Thales payShield an average rating of 9.5 out of 10.

Hear what experts say

Explore the payShield 10K Specifications

Card/Mobile Payments Support	payShield 10K has a comprehensive range of functions that supports the needs of the leading payment brands (American Express, Discover, JCB, Mastercard, UnionPay and Visa) including: PIN processing, card‑verification and EMV authorization/messaging for all major payment brands. Secure key lifecycle management and Remote Key Loading for ATMs, POS and cloud HSMs. Card issuance and personalization: magnetic‑stripe, EMV, mobile provisioning, plus integrated PIN generation/printing. Scalable management and compliance: payShield Manager/Monitor, health checks, cloud HSMs, EMV/PCI/GlobalPlatform aligned.
Cryptographic Algorithms	DES and Triple-DES key lengths 112 & 168 bit AES key lengths 128 bit, 192 bit & 256 bit RSA (up to 4096 bits) ECC as defined in FIPS 186-3 (P-256, P-384 & P-521) HMAC, MD5, SHA-1, SHA-2, SHA-224, SHA-256, SHA-384 & SHA-512
Financial Services Standards	ISO: 9564, 10118, 11568, 13491, 16609 ANSI: X3.92, X9.8, X9.9, X9.17 ASC X9 TR-31, X9.143 ASC X9 TR-34, X9.139 APACS 40 & 70
Host Connectivity	TCP/IP & UDP (1Gbps or 10Gbps) – dual ports Secure Host Communications Management option for TLS authenticated sessions on Ethernet host port FICON - single port
Security Approvals	FIPS 140 (for the TASP security subsystem) PCI HSM including RAP AusPayNet CB HSM (SAFIRE v2.2 methodology) GBIC pre-evaluation Bancontact certificate holder

Thales Ranked #1 in ABI Research’s Payment HSM Competitive Ranking

This recognition highlights Thales’ deep-rooted expertise in cryptography, and its trusted payShield HSM product lines used by financial institutions worldwide.

Learn More