nShield HSMi 2
Leverage a FIPS-certified hardware security module (HSM) to deliver scalable cryptographic services for credential issuance applications, including card production, payment credential issuance, EMV chip card personalization, and ICAO chip personalization.
Integral for integrated issuance
The nShield Hardware Security Module (HSMi 2) is FIPS 140-3 Level 3-certified hardware that delivers cryptographic services for Entrust’s secure issuance software. This tamper-resistant HSMi performs vital functions for financial and ID issuance, including EMV data preparation, key generation, and data protection.
nShield HSMi 2 Benefits
Seamless Integration
Our Security World architecture integrates our HSMi 2 with issuance software, ensuring seamless failover and maximum availability.
High Transaction Rates
Its support for high transaction rates makes it ideal for instant issuance and central issuance.
Remote Administration
The Remote Administration kit facilitates remote smart card presentation for firmware updates and more.
Secure Key Loading
The Secure Key Loading device provides a secure method for loading cryptographic keys into the nShield HSMi 2.
Tech Specs
Supported Cryptographic Algorithms
Symmetric Key Mechanisms: AES (Advanced Encryption Standard), DES (Data Encryption Standard), Triple DES (3DES)
Asymmetric Key Mechanisms: RSA (Rivest-Shamir-Adleman), DSA (Digital Signature Algorithm), ECDSA (Elliptic Curve Digital Signature Algorithm)
Hashing Mechanisms: SHA-1 (Secure Hash Algorithm 1), SHA-256, SHA-384, SHA-512
MAC (Message Authentication Code) Mechanisms: HMAC (Hash-Based Message Authentication Code), CMAC (Cipher-Based Message Authentication Code)
Random Number Generation: RNG (Random Number Generation)
Supported Issuer EMV Certificates
- American Express
- Discover
- Elo
- Interac
- Japan Credit Bureau (JCB)
- Jetco
- MasterCard
- NSICCS Indonesia
- RuPay
- UnionPay
- Visa
- VCCS Vietnam
Security Compliance
- FIPS 140-3 Level 3 certified hardware
Host Connectivity
- Dual-gigabit ethernet ports (two network segments with network bonding option)
Safety and Environmental Standards Compliance
- UL, CE, FCC, UKCA, RCM, Canada ICES
- RoHS WEEE, REACH
High Availability
- All solid-state storage
- Field-serviceable fan tray
- Dual hot-swap power supply
- HSM load balancing/failover with Key Manager
- Network bonding supporting active backup mode and 802.3ad mode
Management and Monitoring
- nShield Remote Administration — includes nShield Trusted Verification
- Device and remote administration smart cards
- Secure Key Loading
Physical Characteristics
- Standard 1U 19in. rack mount dimensions: 43.4 x 430 x 705mm (1.7 x 16.9 x 27.8in)
- Weight: 11.5kg (25.4lb)
- Input voltage: 100-240V AC auto switching 50-60Hz
- Power consumption: 220W maximum
- Heat dissipation: 445 BTU/hr (typical load)
Related Products
We have a long history together and we’re extremely comfortable continuing to rely on Entrust solutions for the core of our business. We have used Entrust HSMs for five years and they have always been exceptionally reliable. We’ve layered a lot of code on top of the HSM; it delivers the performance we need and has proven to be a rock-solid foundation.
As a global payment solutions and commerce enablement leader, Verifone’s strategy is to develop and deploy “best in class” payment solutions and services that meet or exceed global security standards and help our clients securely accept electronic payments across all channels of commerce. We selected Entrust HSMs to provide robust security, unmatched performance, and superior scalability across our payment security platforms…
The Entrust nShield sales team provided excellent local and remote support during this evaluation period and was invaluable to the process. The excellent depth, breadth, and quality of the product documentation gave us confidence that the solution was well thought-out and supported.
Entrust provided the expertise needed to design and implement a tailored, secure VoIP solution.
Resources
Fill out the form below, and an Entrust nShield HSMi 2 specialist will be in touch soon.