Gemalto SafeNet Payment HSM

Protect Your Electronic Funds Transfer [EFT]

SafeNet Payment HSM – formerly Luna EFT – provides PCI-HSM 2.0 and APCA CECS Certification for secure financial transactions. As a PCI-Certified hardware security module (HSM), SafeNet Payment HSM adheres to the highest level of security in the industry.

The PCI HSM standard, first issued by the Payment Card Industry Security Standards Council (PCI SSC) in 2009, defines a set of requirements for HSMs to use in several areas throughout the payment process.

SafeNet Payment HSM adheres to all of the standards, which include:

  • Transaction Processing
  • 3-D Secure
  • Card Verification
  • Card Production and Personalization
  • EFTPOS, including DUKPT
  • ATM Interchange
  • Cash Card Reloading
  • Data Integrity
  • Chip Card Transaction Processing
  • Cloud Based Payments

Easy management and Increased Efficiency

SafeNet Payment HSM features an easy to use Graphic User Interface (GUI) that simplifies the process of configuring and managing cryptographic and key component settings. A well-structured menu-based navigation system, coupled with intuitive dialog box interaction, reduces the risk of manual input errors and speeds up the administrative process.

Scalability with Secure Partitions

A single SafeNet Payment HSM can be separated into 20 cryptographically isolated partitions, with each partition functioning as if it was an independent HSM. This provides a tremendous amount of scalability and flexibility given that a single HSM can perform tasks for multiple payment applications at the same time.

Custom Functionality

SafeNet Payment HSM allows for custom functionality to be readily implemented in support of non-standard EFT systems including e-wallet, mobile banking, and gaming. SafeNet works closely with customers to extend its standard payment products to incorporate customer-defined functionality.

Multiple Command Set & API Support

SafeNet Payment HSM provides command set support for a wide variety of clients. The Mark II command set provides the functionality required by the vast majority of issuing and acquiring banks, payment processors and ATM systems, including functionality for card issuance whilst the AMB command set supports Australian Major Bank (AMB) requirements.

Sample Applications

  • Card issuance
  • PCI P2PE compliance
  • EMV
  • Remote key loading
  • Contactless payments

Security at a Glance

  • Keys in hardware
  • Remote management with two-factor access control
  • Web-based configuration
  • Intrusion-resistant, tamper-evident hardware


  • Up to 2000 Visa PIN verification operations per second
  • Scalable up to 20 cryptographically isolated partitions
  • Available in a variety of performance options to suit individual use case needs
  • In-field upgradeability between performance levels to protect investment
  • Dual hot-plug redundant power supply

Additional Information

SafeNet Payment HSM Specifications:
OS SupportWindows, Linux, Solaris, AIX, HP-UX
Virtual: VMware, Hyper-V, Xen
CryptographySymmetric: AES, DES, Triple DES, SEED
Asymmetric: RSA (1024-7168)
Hash/Message Digest/HMAC: SHA-1, SHA-2 (SHA-224, SHA-256, SHA-384, SHA-512), MD5
Random Number Generation: FIPS 140-2 approved DRBG (SP 800-90 CTR mode)
Functionality and SupportEMV
Contactless & NFC Payment Support
Italian Debit
American Express
Visa Cloud-Based Payments
MasterCard Cloud-Based Payments
Format Preserving Encryption
Rack MountableStandard 19" EIA rack mount chassis (1U height)
Dimensions19” x 21” x 1.725” (482.6mm x 533.4mm x 43.815mm)
Weight28lb (12.7kg)
Input Voltage

100-240V, 50-60Hz
Power Consumption180W maximum, 155W typical
TemperatureOperating 0°C – 35°C, Storage 20°C – 60°C
Relative Humidity5% to 95% (38°C) non-condensing
CertificationsPCI-HSM 2.0
ComplianceUL, CSA, CE


Related Products