payShield Manager is a secure, browser-based solution for centralized management of payShield 10K HSMs. It enables remote key management, security configuration, and software and license updates across multiple sites.

Using AES-256 encryption, ECC 521-bit certificates, and smart card authentication, it ensures trusted, compliant HSM access. An intuitive web interface reduces operational risk while eliminating the need for data center visits. payShield Manager delivers 24×7 availability, improved efficiency, and enterprise-grade security.

Benefits of the payShield Manager

Flexibility

Securely monitor and manage HSMs remotely from any location for streamlined logistics and maximum uptime.

Strong Control

Enforce granular role-based access with secure digital credentials to eliminate the risks of physical keys.

Scalability

Expands easily to support a large estate of HSMs deployed across multiple locations.

Efficiency

Centralize global HSM management and streamline upgrades through one intuitive, error-reducing interface.

Cost Savings

Reduce operating costs by eliminating the need to manage HSMs inside data centers.

payShield Manager

payShield Manager delivers centralized remote HSM management, reducing operational risk and data center dependency. With strong encryption, smart card control, and an intuitive web interface, it streamlines key management, updates, and monitoring.

Thales payShield is the #1 ranked solution in top Payment HSM solutions.

PeerSpot users give Thales payShield an average rating of 9.5 out of 10.

Hear what experts say

Securely manage your HSMs remotely using payShield Manager

Explore the payShield Manager Specifications

User Interface	Standard browser (Internet Explorer, Chrome and Firefox) - offering an identical interface for both local and remote modes of operation Rapid navigation via intuitive menu system using web-based, accordion presentation style and simple parameter selection Virtual console provides support for customer-specific console commands
Local and Remote Device Management	Online, offline, secure and authorized-state operations, employing smart cards that are used as substitutes for physical keys during local and remote operations Local master key (LMK) management - generation, installation and migration Interface management - host, alarm, management and printer port settings Loading of firmware and license files via HTTPS session Audit trail and error log management
Security	Establish controls based on individual tasks and specific roles. Enforce strong access controls based on digital credentials, which is preferable to relying on physical keys Data encryption to protect all data between user smart cards and HSMs AES 256-bit session keys, ECC 521-bit certificates GlobalPlatform-compliant smart cards with Thales applet - secure distribution from approved source, not available on open market
HSM compatibility	payShield 10K - software built on base V1.0 or later
Smart Card Readers	payShield Manager requires one PC/SC compliant smart card reader to facilitate normal operation of the system. Readers (which incorporate an integral PIN Pad to facilitate secure PIN/password entry) can be ordered from Thales or sourced directly.

Thales Ranked #1 in ABI Research’s Payment HSM Competitive Ranking

This recognition highlights Thales’ deep-rooted expertise in cryptography, and its trusted payShield HSM product lines used by financial institutions worldwide.

Learn More

Thales Ranked #1 in ABI Research’s Payment HSM Competitive Ranking

payShield Manager