<Who will buy payShield 9000?

Issuing Banks who create the secure data for magstripe and/or EMV chip credit/debit cards they issue themselves rather than outsourcing the task to a third party service providerthird party service providerIssuing Banks (or their approved third parties) who authorize credit and debit card transactions – they receive authorization requests from AcquirersAcquirers normally themselves a bank who act on behalf of the merchantAcquirers, normally themselves a bank, who act on behalf of the merchant to obtain authorization from the relevant issuer for the transaction in questionCard Schemes, for example Visa, MasterCard, American Express andCard Schemes, for example Visa, MasterCard, American Express and Discover who need Payment HSMs to protect the PINs and keys that flow through their networks during payment processingNational ATM and Debit card networks such as VocaLink in the UK, Jetco ,in Hong Kong and Star/Nyce in the US for their security infrastructureThird party processors who handle issuing or acquiring operations on behalf of banks, for example First Data, TSYS, Global Payments Asia-Pacific Limited, VocaLink, Deutsche-Postbank AG and Equens.

0

<HSM 8000 v payShield 9000

Feature HSM 8000 payShield 9000

Base software options Single base license Choice of 4 base packages for p g p gdifferent user profiles

Multiple LMK capability yes yes

Code loading mechanism Image Loader application FTP interface or USB stickg g

Security sub-system SGSS certified to FIPS 140-2 level 3

TSPP designed to meet FIPS 140-2 Level 3 and PCI HSM

M i PIN bl k t l t 800 t 1500 tMaximum PIN block translate performance

800 tps 1500 tps

Maximum 1024 bit RSA key pair generation performance

3 per second 10 per secondg p

Power supply options Single Dual option on all models

Management port connection 9 way D-Type serial portsEthernet for local/remote

USB portsEthernet for local/remoteEthernet for local/remote

managementEthernet for local/remote

management

Host interface connectivity 10/100 Mbps Ethernet, Async,ESCON, SNA/SDLC

10/100/1000 Mbps Ethernet, Async,FICON under investigation

1

<Software licenses – base packs

Sales Order Code

License Description HSM9-PAC001

HSM9-PAC010

HSM9-PAC020

HSM9-PAC030

HSM 8000 base

equivalent

Transaction Processing

Magnetic Stripe

Issuers

EMV Issuers

HSM9-LIC001 Base

HSM9-LIC002 RSA

HSM9-LIC008 Data Protection

HSM9-LIC011 Magnetic Stripe Contactless Card Data Preparation

HSM9-LIC016 EMV Data Preparation

HSM9-LIC024 Magnetic Stripe Issuing

HSM9-LIC025 Magnetic Stripe Transaction Processing

HSM9 LIC026 EMV Transaction ProcessingHSM9-LIC026 EMV Transaction Processing

HSM9-LIC027 PIN and Key Mailer Printing

HSM9-LIC028 Visa Cash Processing

HSM9-LIC029 Legacy Functions

2

<Software licenses – optional itemsSales Order Code License Description

HSM9-LIC002 RSA license

HSM9-LIC003 AS2805 license

HSM9-LIC004 Europay Security Platform (ESP) license HSM9-LIC005 User Authentication (HMAC/CAP/DPA) license

HSM9-LIC006 X9 TR-31 license

HSM9-LIC008 Data Protection licenseHSM9 LIC008 Data Protection license

HSM9-LIC009 Remote Management license

HSM9-LIC011 Magnetic Stripe Contactless Card Data Preparation license

HSM9-LIC012 LMK x 2 license

HSM9-LIC013 LMK x 5 license

HSM9-LIC014 WebPIN license

HSM9-LIC016 EMV-based Card Data Preparation license

KSM9-LIC020 Korean Algorithm license

HSM9-LIC021 LMK x 10 license

HSM9-LIC024 Magnetic Stripe Issuing license

HSM9-LIC025 Magnetic Stripe Transaction Processing license

HSM9-LIC026 EMV Transaction Processing licenseHSM9-LIC026 EMV Transaction Processing license

HSM9-LIC027 PIN and Key Printing license

HSM9-LIC028 Visa Cash Processing license

HSM9-LIC029 Legacy Functions license

3

<payShield 9000 customer benefits

Feature Customer benefits

Dual PSUs •Makes HSM power management consistent with other data center devices•HSM replacement can be deferred in the event of a single PSU failure

High performance •Reduced Cost of Ownership for high volume processing applications•Enables EMV DDA card issuers to maintain current issuance time windowEnables EMV DDA card issuers to maintain current issuance time window

Choice of base software packs

•Software functionality matches customer’s business•More attractive pricing for card issuers

Remote management •Lowers operating costsg p g•Scalable administration at low incremental cost

Multiple LMKs •Increases security through key and data separation•Cost savings through improved HSM utilization and simpler configuration

Custom software •Simple migration path for customers with HSM 8000 custom software•Expansion of optional licenses reduces need for custom software for issuers

Backwards compatibility •No need to change host application•Mix and match payShield 9000 with RG7000 and HSM 8000 devicesMix and match payShield 9000 with RG7000 and HSM 8000 devices

4

<payShield 9000 improves our competitiveness

HP Atalla (Ax150 NSP)key block performance, dual PSUs and multiple LMKs

SafeNet (ProtectHost EFT)New issuer license packages lowers cost of ownership

Futurex (Excrypt SSP)Futurex (Excrypt SSP)Ability to compete in low end ‘credit union’ opportunities

Bull (Crypt2Pay)Modular license packs and higher performance

IBM (4764 PCI-X CC)significantly faster RSA key pair generation for EMV card issuerssignificantly faster RSA key pair generation for EMV card issuers

Dual power supplies and multiple LMKs are our key differentiators togetherDual power supplies and multiple LMKs are our key differentiators together with low cost scalable remote management

5

<Quick recap – beating the competition

Key product benefits for customersDual power suppliesDual power supplies Higher performanceTargeted software license packagesMultiple LMKsCost effective scalable remote management

Underpinned by strong support from Thales and its Channel PartnersExtensive range of software customization servicesExtensive range of software customization servicesExtended range of support options

Strong backwards compatibility makes payShield 9000 an ‘easy buy’ for our established customer base

6