Build and test HSM client code without provisioning real hardware. Iterate on connection logic, command parsing, and error handling against a faithful console.
[ DEV · DEBUG · INTEGRATE ]Prepare for PCI and payment-scheme HSM audits with documented command flows and reproducible test vectors — under your test LMK, no production keys at risk.
[ AUDIT · DOCUMENT · PROVE ]Hands-on HSM exposure for engineers transitioning from app development into payment cryptography and key management. Real protocol, safe data.
[ LEARN · PRACTICE · ONBOARD ]50+ Thales payShield host commands — A0/A2/A4/A6 (key gen), CA/CY (PIN translation), M0/M2 (MAC), BU/BW (block / unblock).
TR-31 / X9.143 and Thales Key Block formats. Generate, wrap, and translate DES, 3DES, AES keys under your test LMK.
Translate PIN blocks between zones (ZPK / BDK / IPEK) and between formats (ISO 0/1/3, Diebold, Docutel). Validate offsets.
ANSI X9.19 retail MAC, ISO 9797-1 algorithms 1/3, CMAC. Generate and verify across messages and key types.
Generate and verify ARQC / ARPC for online authorization. Issuer script commands, MAC, and encryption.
Configure your test LMK (variant or key block). Manage KEKs, ZMKs, BDKs. Inspect KCVs. All under your control.
[ READY ]
Ready to send your first A0 command?