← All Prism HSMs Prism HSM · Payment hardware

Prism TSM530

A tamper-responsive payment hardware security module approved under PCI PTS HSM v4.0, in a 1U rack appliance.

Prism TSM530 hardware security module, front view
Why the TSM530

Approved cryptography, bought at the capacity you need.

PCI PTS HSM v4.0 approved

Tamper-responsive and tamper-resistant, approved under PCI PTS HSM v4.0 under approval number 4-20384.

Plug-in compatible

Transaction processing services over TCP/IP on an Ethernet interface, plug-in compatible with Postilion, Traderoot, iZealiant Access Control Server and PayTabs SwitchOn software.

Pay for the performance you use

Models from 20 Triple DES PIN translations per second upwards, upgradeable in the field at your premises as volumes grow.

Managed from a browser

Configuration and day-to-day management through a web browser interface, with full documentation supplied and tutorials available.

Banking & EFT features

What it does in the transaction path

PIN translation & verification

AES and TDES, DUKPT and master/session; ISO 9564 / X9.8 formats 0, 1, 3 and 4; PIN verification by IBM-3624 PIN offset and Visa PVV.

Card & message verification

CVV, CVV2, CVC and dynamic CVV (CVC3); MAC generation and verification to ANSI double-key X9.19 and ISO 9797-1 algorithm 3.

Key management

X9 TR-31 and AKB key block formats; management of encrypted keys compatible with X9.24-1, X9.24-2, X9.24-3 and ISO 11568; remote key loading and distribution to PIN entry devices and ATMs under TR-34.

EMV & data protection

EMV v3.x and v4.x transaction processing and secure messaging including PIN change; TDES and AES encryption and decryption in support of PCI DSS; point-to-point encryption using TDES DUKPT and BPS; audit trail.

Cryptography & control

Algorithms, standards and dual control

Algorithms

Triple DES; AES (FIPS 197); BPS format-preserving encryption; RSA key generation, signing and verification up to 4096 bit (X9.31); ECC from P-224 to P-521; SHA hash algorithms (ISO 10118 / FIPS 180-4); HMAC (FIPS 198-1).

Access control & key loading

Built-in access control enforces dual control for sensitive operations such as key loading. Appointed security officers enter their passwords on the Prism Key Loading Device to authorise them, and key components are entered the same way.

Supported standards

ANSI X9.8, X9.19, X9.24, X9.31, X9.52, TG-39, TR-31 and TR-34; FIPS 180-4, 186-4, 197 and 198-1; ISO 9564, 10118, 11568, 13491 and 20038.

mCommerce extensions

Mobile security extensions for SMS and mCommerce security, alongside the banking and EFT feature set.

The appliance

Model TSM530-NSS

Form factor

19″ rack-mount appliance, 1U high: 483mm wide, 250mm deep, 4.65kg.

Interfaces

Two Gigabit (10/100/1000 Mbps) Ethernet ports and a USB port for software upgrades and the Prism Key Loading Device. Any platform that can communicate over TCP/IP.

Power

Dual power inputs, 100–240V AC 50–60Hz, 50W maximum consumption.

Environment

Operating temperature 0–40°C, relative humidity 5–95% non-condensing. RoHS compliant, and compliant with IEC 62368-1, EN 55032 and EN 55035.

PCI PTS HSM v4.0approval # 4-20384
20/sec upwardsTDES PIN translations, upgradeable in the field
1 yearhardware warranty, extendable by agreement

Specifications as published by Prism Payment Technologies (Pty) Ltd, TSM530 datasheet, April 2026, and subject to change by the manufacturer.

Talk to us about the Prism TSM530.

Contact the team →
↑