Thales payShield 10k

The new payShield 10K builds on Thales’ esteemed history of digital payment protection to deliver a future-proof hardware security module (HSM).

payShield 10K

The industry’s preferred payment hardware security module (HSM) used extensively throughout the global payment ecosystem by issuers, service providers, acquirers, processors and payment networks.

This fifth generation of payment HSMs from Thales eSecurity, delivers a suite of payment security functionality proven in critical environments including transaction processing, sensitive data protection, payment credential issuing, mobile card acceptance and payment tokenisation.


The payShield10k Hardware Security Modules play a fundamental security role in securing the payment credential issuing, user authentication, card authentication and sensitive data protection processes for both face-to-face and digital remote payments.

Contact ID-3 to help you with the following critical services:

The main role of a payShield HSM is to protect cryptographic keys and sensitive data in a highly secure manner such that the integrity of two fundamental processes is maintained:

1. Equipping consumers to make payments

By dealing with the complexity of EMV chip cards or mobile-based applications, keeping control of critical user credential assets and maintaining a high level of security (to avoid counterfeiting or rogue payment instruments) are critical and essential requirements.

2. Facilitating a secure payments process

By being able to scale quickly to handle higher transaction volumes, ensuring that sensitive data is protected at all times and facilitating transactions originating from a diverse range of payment instruments.

Transaction processing: PIN block translation - Cryptogram validation
Protect payment data: Point to Point Encryption (P2PE) protects payment data and reduces merchant PCI DSS scope
Card and device issuance: EMV card data preparation - PIN generation and distribution
Mobile provisioning: Secure Element (SE) key management and personalization - Payment app registration and personalization (HCE)

Playing a fundamental security role for both face-to-face and digital remote payments, it delivers the necessary trust that underpins the communications between payments participants. payShield 10K addresses the latest mandated security requirements and best practices for a wide range of organizations including EMVCo, PCI SSC, GlobalPlatform, Multos, ANSI and the various global and regional payment brands and networks.

ID-3 Personal Touch

A specialist supplier with industry experience can provide the assurance that you are speaking to the right person. We pride ourselves on being at hand to assist your delivery throughout its life-cycle. A single call to connect you to HSM expertise which you simply wont find at general re-sellers.

ID-3 Service Support

Unlike other re-sellers ID-3 is the UK’s only service led consultancy and re-seller who can offer comprehensive assistance for payShield 10k and its associated management tools to support your ITIL related service delivery.

ID-3 offers rapid over the phone or email advice and support to its customers from our team of in-house experts without depending on the vendors.

ID-3 has a proven track record of delivering HSMs into PCI PIN regulated environments and can offer an extensive range of professional service options and training options to help any team correctly implement the payShield 10k in to any regulated environment.

ID-3 Documentation

Procedures are critical to every service. ID-3 HSM procedures are available to our customers via download from our portal and customised for your environment removing the arduous task of needing to become expert prior to business as usual handover and reducing the time it takes to get the service into production.

Find out more about ID-3 payShield10k procedures