PCI-Compliant Payment Card Processing

PCI Compliant Payment Card Processing

Securing and protecting the financial services industry with end-to-end transaction security

The lifecycle of each specific card payment transaction can vary depending on a number of factors, however certain processes in the payment transaction lifecycle are fixed in place with a requirement for end-to-end transaction security: authorization, batching, clearing and settlement.

From Merchant’s Points of Sales, mobile devices and ATMs, Utimaco covers the complete chain of PIN encryption, authorization, PIN translation and Key Management through Acquirers, Switches and Issuers, in compliance with PCI-DSS and PCI PTS.

Utimaco’s Atalla Division invented encrypted PIN and ATM messages in the 1970s and has led the evolution of standards and innovation ever since, providing a robust solution for secure, end-to-end transaction processing.

Business value

Business value


Designed for the Financial Services Industry

  • Enables cryptographic operations to perform PIN translation and verification, card verification, card production and personalization, electronic funds interchange (EFTPOS, ATM), cash-card reloading, EMV transaction processing, and key generation and injection.
  • Provides unrivaled protection for AES and other cryptographic keys safeguarding payment transactions
  • Protects and manages encryption keys needed for payment processing within the tamper-resistant/responsive hardware device.

Data Security & Compliance

  • Used by global payment leaders and card brands to secure payment ecosystems, achieving the highest level of compliance.
  • Provides superior hardware security to deliver maximum privacy, integrity and performance for host applications
  • PCI PTS Certified for the most demanding application profile, focusing on physical security when used in controlled and uncontrolled environments like non-ISO certified data centers
  • Provides advanced security architecture that prevents retrieval of PINs, keys, and other sensitive data in clear text form
  • Ensures TLS protected and authenticated sessions with host application
  • Provides full multi-domain key and policy enforcement for multiple segregated digital keys per business need while applying policy enforcement to govern the key on the HSM

Scalable and flexible

  • Gives options for automated and manual key management
  • Encrypted, convenient configuration management: Key loading via Atalla Secure Configuration Assistant (no unenciphered text passing of keys or key components)
  • Integrates with all major payment and switching applications
  • Compatible with previous generation Atalla HSMs

Remote Access

  • Remote workflow based model
  • Remote Key Loading (RKL)
  • Initialize remote payment devices
  • ATM remote key loading

Software Simulator included

Included a simulator allowing for evaluation and integration testing to benchmark the best possible solution for each specific case

Deployment options

Deployment options


On Premise

  • Useful for centralized use cases without a requirement of scalability or remote accessibility and existing legacy infrastructure
  • Defined total cost of ownership
  • Complete control on hardware and software, including configuration and upgrades
  • Secured uptime in areas with insatiable internet connectivity
  • Preferred choice in industry-segments where regulation imposes restrictions

In the Cloud

  • Strategic architectural fit & risk management for your high value assets
  • Provides flexibility, scalability and availability of HSM-as-a-service
  • Ideal for a multi-cloud strategy, supporting multi-cloud deployments & allows for migration flexibility
  • Allows you to seamlessly work with any Cloud Service Provider
  • Easy-to-use remote management and on-site key ceremony service option
  • Full control over data through encryption key life-cycle and key administration
  • Secured data privacy through Bring-Your-Own-Key procedures



Get in touch with us

Talk to one of our specialists and find out how Utimaco can help you today.