Need to replace your
current payment HSM?

Try the Utimaco Atalla AT1000
– we help you migrate.

Fastest and Most Compliant Payment HSM on the Market

– Supports REST API and provides
true remote management.

Home / products / payment HSM / Atalla AT1000

Atalla AT1000

The Utimaco Atalla Hardware Security Module (HSM) is a NextGen FIPS 140-2 L3 and FIPS 140-2 L4 (physical design) compliant and PCI PTS HSM v3 certified payment HSM designed to protect customer sensitive data, perform cardholder authentication, and manage the cryptographic keys used in ecommerce retail payment transactions.

Download Product Overview

The Utimaco Atalla AT1000 is a payment HSM that enables interbanking business. It provides superior hardware security to deliver maximum privacy, integrity and performance for host applications. It supports cryptographic operations to perform PIN translation and verification, card verification, card production and personalization, electronic funds interchange (EFTPOS, ATM), cash-card reloading, EMV transaction processing, and key generation and injection.

Product Highlights

Atalla HSMs are used by global payment leaders and card brands to secure their payment ecosystem and achieve the highest level of compliance. The use cases vary by different industries and the ecosystem players like issuers, service providers, acquirers, processors, and payment networks. We play a crucial role in securing interbanking communication, user and card authentication, as well as focus on user data protection for both in-person (card present) and remote payments (online or card not present) transactions. Some of the use cases include:

PIN Processing
3-D Secure v1 & v2 cryptography
Card / User Verification
ATM Interchange
Data Integrity
Processing Transaction Data
Data Encryption / Decryption
Initialize Remote Payment Devices
PIN Translations and Authorization
Payment Card Verification, Production and Personalization
Electronic Funds Interchange (EFTPOS, ATM)
AS2805 Host-to-Host

Cash-Card Reloading
EMV Transaction Processing
Key Generation and Injection
ATM Remote Key Loading
Interbanking Clearing and Settlement
Card Issuance
Alternative Payment Methods Including
- Mobile and e-Wallets
- Contactless
Cloud Payment Standards
End-to-End Encryption (E2E) of credentials for Internet and Mobile Banking
Supports JSON Web Tokens

The Utimaco Atalla AT1000 HSM is PCI PTS Certified for the most demanding application profile, focusing on physical security when used in controlled and uncontrolled environments like non-ISO certified data centers. It provides unrivaled protection for AES and other cryptographic keys safeguarding payment transactions. The HSM protects and manages encryption keys needed for payment processing within the tamper-resistant/responsive hardware device.

The Utimaco Atalla HSM AT1000 host commands are fully backward compatible with its previous generation models, incorporating more than three decades of expertise — enabling co-existence and easy migration.

PCI Security Policy

Key Benefits

Atalla Key Block

Atalla Key Block (AKB) is a key block format approved by the ANSI standards community to support interchange of symmetric keys in a secure manner and with key attributes included in the exchanged data. This key-wrap process, also commonly known as ANSI Key Block (AKB), was the first market-specified standard that binds the key with the intended attributes along with integrity to ensure that the cipher text hasn’t been modified.

Remote Management

Atalla AT1000 implements the unique flexible approach to HSM configuration and key management that enables a remote workflow-based model meeting the PCI Dual Control Requirement without the need to have all of the individual officers physically present. The remote management solution streamlines software and license upgrades, HSM security policy management, key loading, backup and restore.

Secure Configuration Assistant (SCA)

The Atalla Secure Configuration Assistant (SCA) is a versatile tablet-based tool that implements the remote and local management of the HSM intuitively. The SCA enables security administrators to easily configure commands, define parameters, calculate cryptograms, and inject cryptographic keys into Atalla HSMs in a trusted manner. An easy-to-use GUI with a natural event and decision flow is very convenient to navigate on wider tablet screens thereby improving security administrator user experience and productivity reducing risks of errors.

Robust Backup and Restore

Atalla HSMs implement robust backup/restore capability with a user configurable policy to specify “M of N” smartcards required for a restore following the dual control requirements. This functionality allows the HSM administrators to initialize multiple HSMs to a pre-configured known state without Admin Smartcards or key components.

SmartCard Authentication

Atalla HSMs enforce smartcard authentication using preoperatory digitally signed smartcards to allow secure administration of smartcards. The authentication uses Atalla Secure Keypad (ASK) a tamper-reactive device for security critical data entry such as key components and PINs.

Multi-Domain Support

Full multi-domain key and policy enforcement enables enterprises to create and manage up to 10 HSMs in a single 1U Hardware appliance. The domains cater to business needs while applying separate policy enforcements and MFKs to govern individuality of each HSM.

Redundant Hardware

Atalla HSMs are designed for high performance ecosystems that just cannot afford any downtime and AT1000 is no different. Everything in the Atalla AT1000 is fully redundant including power supplies, hard drives, Network Interface Cards (NIC), etc. In AT1000 we also implemented NIC Teaming to protect HSMs from external failures.

Best Support for Banking Cryptosystem

Atalla AT1000 is designed to support all global card schemes like Visa, MasterCard, Amex, UnionPay, Diners and Discover. It also integrates with all major core banking applications and hardware vendors like ACI and HPE NonStop.

Regulatory Compliance

The HSMs are highly regulated by PCI, NIST ISO and ANSI. AT1000 is certified as a FIPS 140-2 Level 3 HSM and PCI PTS HSM v3 to allow the best in class security and governance.

Payment Emulator

By leveraging the Payment Emulator, organizations can emulate other Payment APIs in the industry to communicate with the Atalla API and NextGen RESTful interface to easily gain access to all Atalla features!

REST API Support

Utilize the REpresentational State Transfer Application Programming Interface (REST API) to communicate with the Atalla HSM. With
this flexible, stateless, easy to use and secure API, users can harness the unrivaled protection of an HSM in public, private and hybrid cloud environments. The REST API implementation also supports TLS, ACL, multiple domains and mutual authentication to further enhance security of the HSM.

Unrivaled Speed

With up to 10,000 TPS, the AT1000 is the fastest multi-core HSM on the market and can perform upgrades on the fly! That’s four times the power of our closest competitor! Software upgrades in under five minutes – performance is never impacted.