Excrypt Plus
Versatile and scalable HSM for payment and general-purpose security
Payment and general purpose
HSM for high-performance processing
The Excrypt Plus is a hardware security module (HSM) designed for both payment and general-purpose use. It supports every major encryption algorithm to protect data in transit and at rest. The Excrypt Plus comes with vendor-neutral APIs to ease integration with cyber security infrastructure and host applications.
Transaction acquiring
- CVV generation and validation
- EMV validation
- Mobile payment acceptance
- PIN translation and verification
- Payment key management
- MAC generation and verification
Card and mobile issuing
- EMV key generation and derivation
- Online and mobile PIN management
- Mobile token issuance (Apple Pay, Google Pay, Samsung Pay, and host card emulation tokens)
- PIN and offset generation
Point-to-point encryption
- Cardholder data decryption
- Cardholder data translation
- Point-to-point encryption key management
Testing and development
Perform testing, development, and rapid prototyping within a secure code environment (SCE).
Scale Excrypt Plus deployment according to transaction processing speed, redundancy, and remote access
Support cryptographic processing for multiple applications at once with up to 250 application partitions
Integrate the Excrypt Plus with host payment applications by using the Excrypt Universal Interface and vendor-neutral APIs
Why choose the Excrypt Plus?
Digital payment networks need scalable data security solutions. The Futurex Excrypt Plus adapts to throughput demand and supports all major payment types and algorithms. The Excrypt Plus offers future-proof transaction security with disaster recovery and full redundancy.
Universal compatibility
The Excrypt Universal Interface is an API that communicates with host transaction processing applications for easy integration
Versatile cryptographic functionality
The Excrypt Plus performs cryptographic processing and key management for payment and general-purpose use cases
Easy scripting and automation
The Futurex Client Library (FXCL) and interface-based wrapper (FXCLI) enable easy scripting and automation of management and operational tasks
Disaster recovery and high availability
The Excrypt Plus integrates with the Futurex Guardian Series 3 to achieve automatic synchronization and data backup functionality
Strategic integration
Integrating the Excrypt Plus with other Futurex products amplifies speed, availability, and range of functionality to meet any cryptographic requirement
Compliance
Futurex solutions comply with current and emerging regulatory requirements including PCI DSS, FIPS 140-2 Level 3, ANSI X9.24 part 1 and 2 – TR-39, and FCC part 15 – class B
Comprehensive cryptographic functionality
Data security solutions for payments and general purposes
Excrypt Plus specifications
Hardware features
- Dual control-enabled, tamper-responsive
- Smart card reader for M-of-N key fragmentation and dual-factor authentication
- Dual, redundant gigabit Ethernet ports
- Dual, redundant, hot-swappable power supplies
- Secure Cryptographic Device (SCD) with tamper responsive barrier to protect sensitive data
Operating conditions
- Power: 100 – 240 VAC 50/60 Hz. 225 Watts
- Operating temp: -40° to 140°F (-40° to 60°C)
- Storage temp: -40° to 140°F (-40° to 60°C)
- Operating humidity: 20% to 80% non-condensing
- Storage humidity: 5% to 95% non-condensing
Dimensions and weight
- Weight: 36 lbs (16.33 kg)
- Width: 19 inches (48.26 cm)
- Height: 1U – 1.72 inches (4.37 cm)
- Depth: 19.4 inches (49.38 cm)
Powering the VirtuCrypt cloud
VirtuCrypt cloud HSM services are backed by the Excrypt Plus with hardened, FIPS 140-2 Level 3 validated technology. Whether an organization requires complete infrastructure management or more functionality for current infrastructure, VirtuCrypt can meet any security requirement.
Industry compliance standards
- FIPS 140-2 Level 3
- PCI HSM
- ASC X9.24 Part 1 and Part 2 – TR-39
- RoHS
- FCC Part 15 – Class B
Supported cryptographic functionality
- EMV
- DES
- Triple-DES
- Master/Session
- AES
- RSA
- Tokenization
- Point-to-Point Encryption (P2PE)
- PKCS #11
