nShield HSMi 2
Secure your payments systems with a payment hardware security module (HSM) that delivers scalable cryptographic services for payment issuers, card manufacturers, and financial services organizations.
Entrust nShield HSMi is a payment hardware security module that protects cryptographic keys, secures payment transactions, and delivers payment-specific cryptographic services for card issuance and personalization environments.
The nShield HSMi secures EMV data preparation, card personalization, transaction processing, and key injection workflows while supporting compliance requirements across payment ecosystems.
Protect payment transactions
Streamline secure card issuance
Strengthen compliance with hardware-backed security
Product Highlights:
Protect Payment Keys and Transactions
Secure cryptographic keys, payment credentials, and transaction workflows with nShield HSMi, a purpose-built payment HSM designed for card issuers, card manufacturers, and financial institutions.
Streamline Secure Card Issuance
Support EMV data preparation, card personalization, key injection, and issuance workflows with dedicated cryptographic services designed for payment environments. Help simplify operations while maintaining strong security controls throughout the card lifecycle
Strengthen Compliance and Trust
Protect payment ecosystems with hardware-backed key protection and transaction security capabilities that help organizations support compliance requirements while reducing risk across issuance and payment processes.
Integral for integrated issuance
The nShield Hardware Security Module (HSMi 2) is FIPS 140-3 Level 3-certified hardware that delivers cryptographic services for Entrust’s secure issuance software. This tamper-resistant HSMi performs vital functions for financial and ID issuance, including EMV data preparation, key generation, and data protection.
nShield HSMi 2 Benefits
Seamless Integration
Our Security World architecture integrates our HSMi 2 with issuance software, ensuring seamless failover and maximum availability.
High Transaction Rates
Its support for high transaction rates makes it ideal for instant issuance and central issuance.
Remote Administration
The Remote Administration kit facilitates remote smart card presentation for firmware updates and more.
Secure Key Loading
The Secure Key Loading device provides a secure method for loading cryptographic keys into the nShield HSMi 2.
Tech Specs
Supported Cryptographic Algorithms
Symmetric Key Mechanisms: AES (Advanced Encryption Standard), DES (Data Encryption Standard), Triple DES (3DES)
Asymmetric Key Mechanisms: RSA (Rivest-Shamir-Adleman), DSA (Digital Signature Algorithm), ECDSA (Elliptic Curve Digital Signature Algorithm)
Hashing Mechanisms: SHA-1 (Secure Hash Algorithm 1), SHA-256, SHA-384, SHA-512
MAC (Message Authentication Code) Mechanisms: HMAC (Hash-Based Message Authentication Code), CMAC (Cipher-Based Message Authentication Code)
Random Number Generation: RNG (Random Number Generation)
Supported Issuer EMV Certificates
- American Express
- Discover
- Elo
- Interac
- Japan Credit Bureau (JCB)
- Jetco
- MasterCard
- NSICCS Indonesia
- RuPay
- UnionPay
- Visa
- VCCS Vietnam
Security Compliance
- FIPS 140-3 Level 3 certified hardware
Host Connectivity
- Dual-gigabit ethernet ports (two network segments with network bonding option)
Safety and Environmental Standards Compliance
- UL, CE, FCC, UKCA, RCM, Canada ICES
- RoHS WEEE, REACH
High Availability
- All solid-state storage
- Field-serviceable fan tray
- Dual hot-swap power supply
- HSM load balancing/failover with Key Manager
- Network bonding supporting active backup mode and 802.3ad mode
Management and Monitoring
- nShield Remote Administration — includes nShield Trusted Verification
- Device and remote administration smart cards
- Secure Key Loading
Physical Characteristics
- Standard 1U 19in. rack mount dimensions: 43.4 x 430 x 705mm (1.7 x 16.9 x 27.8in)
- Weight: 11.5kg (25.4lb)
- Input voltage: 100-240V AC auto switching 50-60Hz
- Power consumption: 220W maximum
- Heat dissipation: 445 BTU/hr (typical load)
Related Products
We have a long history together and we’re extremely comfortable continuing to rely on Entrust solutions for the core of our business. We have used Entrust HSMs for five years and they have always been exceptionally reliable. We’ve layered a lot of code on top of the HSM; it delivers the performance we need and has proven to be a rock-solid foundation.
As a global payment solutions and commerce enablement leader, Verifone’s strategy is to develop and deploy “best in class” payment solutions and services that meet or exceed global security standards and help our clients securely accept electronic payments across all channels of commerce. We selected Entrust HSMs to provide robust security, unmatched performance, and superior scalability across our payment security platforms…
The Entrust nShield sales team provided excellent local and remote support during this evaluation period and was invaluable to the process. The excellent depth, breadth, and quality of the product documentation gave us confidence that the solution was well thought-out and supported.
Entrust provided the expertise needed to design and implement a tailored, secure VoIP solution.
Resources
Fill out the form below, and an Entrust nShield HSMi 2 specialist will be in touch soon.