Thales e-Security Smart Card Bridge

Provides web applications access to the host's PC/SC subsystem.payShield Manager from Thales e-Security enables security teams to perform all tasks remote from data centers, reducing costs and delivering greater operational efficiency. It is a hardware security module (HSM) management tool specifically designed for the Thales payShield 9000 HSM that operates via a standard browser interface. A secure connection to the HSM, underpinned by smart card access control, enables key management, security configuration and software/license updates to be carried out remotely. Flexibility to check the operational status of any HSM is also provided via a dedicated, restricted operator role. The result is dramatic reductions in operating costs.

Designed with the most stringent security requirements in mind, Thales payShield Manager addresses two primary challenges faced by today’s organizations: how to securely manage payment HSMs across multiple data centers and how to accommodate the rising number of operations that must be performed. Today’s increasing workload often leads to more travel and higher costs. But with Thales payShield Manager, once the HSMs are initially installed in the data center rack (without reliance on the security team or master key component holders), configuration and management tasks can be executed securely from a remote location using a standard web browser interface. Beyond eliminating the time and cost of travel, the browser streamlines operations by enabling faster execution of complex commands. With the ability to provide greater separation of duties, security personnel can delegate more routine tasks for less security sensitive operations while maintaining the high levels of security demanded in today’s payment ecosystem.


Benefits of payShield Manager
- Reduces operating costs by eliminating the need for physical presence for HSM management.
- Provides 24 x 7 management even when local physical access to HSMs is not available.
- Supports a large number of HSMs deployed across multiple locations.
- Operates seamlessly with VPNs and firewalls.
- Adapts rapidly to evolving organizational needs through support of a management port white list for device access.