1. Who will buy payShield 9000? <
Issuing Banks who create the secure data for magstripe and/or EMV chip
credit/debit cards they issue themselves rather than outsourcing the task to a
third party service provider
Issuing Banks (or their approved third parties) who authorize credit and
debit card transactions – they receive authorization requests from Acquirers
Acquirers,
Acquirers normally themselves a bank who act on behalf of the merchant
bank,
to obtain authorization from the relevant issuer for the transaction in
question
Card Schemes, for example Visa, MasterCard, American Express and
Discover who need Payment HSMs to protect the PINs and keys that flow
through their networks during payment processing
National ATM and Debit card networks such as VocaLink in the UK, Jetco ,
in Hong Kong and Star/Nyce in the US for their security infrastructure
Third party processors who handle issuing or acquiring operations on
behalf of banks, for example First Data, TSYS, Global Payments Asia-
Pacific Limited, VocaLink, Deutsche-Postbank AG and Equens.
0

2. HSM 8000 v payShield 9000 <
Feature HSM 8000 payShield 9000
Base software options
p Single base license
g Choice of 4 base packages for
p g
different user profiles
Multiple LMK capability yes yes
Code loading mechanism
g Image Loader application
g FTP interface or USB stick
Security sub-system SGSS certified to FIPS 140-2 TSPP designed to meet FIPS 140-2
level 3 Level 3 and PCI HSM
Maximum PIN block t
M i bl k translate
l t 800 t
tps 1500 t
tps
performance
Maximum 1024 bit RSA key pair 3 per second 10 per second
g
generation p
performance
Power supply options Single Dual option on all models
Management port connection 9 way D-Type serial ports USB ports
Ethernet for local/remote Ethernet for local/remote
management management
Host interface connectivity 10/100 Mbps Ethernet, Async, 10/100/1000 Mbps Ethernet, Async,
ESCON, SNA/SDLC FICON under investigation
1

3. Software licenses – base packs <
Sales Order License Description HSM9- HSM9- HSM9- HSM9-
Code PAC001 PAC010 PAC020 PAC030
HSM 8000 Transaction Magnetic EMV
base Processing Stripe Issuers
equivalent Issuers
HSM9-LIC001 Base
HSM9-LIC002 RSA
HSM9-LIC008 Data Protection
HSM9-LIC011 Magnetic Stripe Contactless Card Data
Preparation
HSM9-LIC016 EMV Data Preparation
HSM9-LIC024 Magnetic Stripe Issuing
HSM9-LIC025 Magnetic Stripe Transaction Processing
HSM9-LIC026
HSM9 LIC026 EMV Transaction Processing
HSM9-LIC027 PIN and Key Mailer Printing
HSM9-LIC028 Visa Cash Processing
HSM9-LIC029 Legacy Functions
2

4. Software licenses – optional items <
Sales Order Code License Description
HSM9-LIC002 RSA license
HSM9-LIC003 AS2805 license
HSM9-LIC004 Europay Security Platform (ESP) license
HSM9-LIC005 User Authentication (HMAC/CAP/DPA) license
HSM9-LIC006 X9 TR-31 license
HSM9 LIC008
HSM9-LIC008 Data Protection license
HSM9-LIC009 Remote Management license
HSM9-LIC011 Magnetic Stripe Contactless Card Data Preparation license
HSM9-LIC012 LMK x 2 license
HSM9-LIC013 LMK x 5 license
HSM9-LIC014 WebPIN license
HSM9-LIC016 EMV-based Card Data Preparation license
KSM9-LIC020 Korean Algorithm license
HSM9-LIC021 LMK x 10 license
HSM9-LIC024 Magnetic Stripe Issuing license
HSM9-LIC025 Magnetic Stripe Transaction Processing license
HSM9-LIC026 EMV Transaction Processing license
HSM9-LIC027 PIN and Key Printing license
HSM9-LIC028 Visa Cash Processing license
HSM9-LIC029 Legacy Functions license
3

5. payShield 9000 customer benefits <
Feature Customer benefits
Dual PSUs •Makes HSM power management consistent with other data center devices
•HSM replacement can be deferred in the event of a single PSU failure
High performance •Reduced Cost of Ownership for high volume processing applications
•Enables EMV DDA card issuers to maintain current issuance time window
Enables
Choice of base software •Software functionality matches customer’s business
packs •More attractive pricing for card issuers
Remote management
g •Lowers operating costs
p g
•Scalable administration at low incremental cost
Multiple LMKs •Increases security through key and data separation
•Cost savings through improved HSM utilization and simpler configuration
Custom software •Simple migration path for customers with HSM 8000 custom software
•Expansion of optional licenses reduces need for custom software for issuers
Backwards compatibility •No need to change host application
•Mix and match payShield 9000 with RG7000 and HSM 8000 devices
Mix
4

6. payShield 9000 improves our competitiveness <
HP Atalla (Ax150 NSP)
key block performance, dual PSUs and multiple LMKs
SafeNet (ProtectHost EFT)
New issuer license packages lowers cost of ownership
Futurex (Excrypt SSP)
Ability to compete in low end ‘credit union’ opportunities
Bull (Crypt2Pay)
Modular license packs and higher performance
IBM (4764 PCI-X CC)
significantly faster RSA key pair generation for EMV card issuers
Dual power supplies and multiple LMKs are our key differentiators together
with low cost scalable remote management
5

7. Quick recap – beating the competition <
Key product benefits for customers
Dual power supplies
Higher performance
Targeted software license packages
Multiple LMKs
Cost effective scalable remote management
Underpinned by strong support from Thales and its Channel Partners
Extensive range of software customization services
Extended range of support options
Strong backwards compatibility makes payShield 9000 an ‘easy buy’ for
our established customer base
6