Excrypt SSP Enterprise v.2: Fastest HSM for Transactions
The last word on payment data security
![excrypt plus ssp enterprise fastest payment hsm excrypt plus ssp enterprise fastest payment hsm](https://www.futurex.com/hs-fs/hubfs/Page%20Images%20-%20FX/Hero%20Images/PNGs/excrypt%20plus%20ssp_hero_image_A.png?width=420&name=excrypt%20plus%20ssp_hero_image_A.png)
Excrypt SSP Enterprise v.2: The Fastest HSM with Limitless Scalability
The Excrypt SSP Enterprise v.2 is the fastest hardware security module (HSM) in the world. A transaction processing powerhouse, the Excrypt SSP v.2 combines vast cryptographic functionality with near-limitless scalability. Its robust virtualization capabilities allow users to create virtual HSMs with unique firmware versions, users, key storage, and security policies. This, as well as the module’s integration with all common APIs and host applications, plus its robust compliance with standards like FIPS 140-2 Level 3 and PCI PTS HSM, make it the backbone of enterprise data security infrastructure.
Power, Performance, and Utility
The Excrypt SSP Enterprise v.2 is the fastest payment HSM in the world, both in terms of transactions per second (TPS) and signatures per second (SPS). Its performance, as well as its range of cryptographic functions and level of redundancy, and can be scaled according to need.
Universal Compatibility
The Excrypt SSP v.2 integrates with almost every financial host application software sold around the world, thanks to its broad support for all common APIs, including standards-based interfaces and web APIs. This, plus its backward compatibility with other Excrypt HSMs, makes it especially easy to deploy within enterprise processing environments.
Scripting and Automation
Users can create and deploy virtual HSMs with the Futurex Client Library (FXCL) and the Futurex Command Line Interface (FXCLI), with user-focused scripting and automation capabilities.
Disaster Recovery and Redundancy
The Excrypt SSP v.2 contains integrated disaster recovery and redundancy features. The device complies with all major key management best practices and features physical and logical security controls.
Key Benefits of Excrypt SSP Enterprise v.2
![icon_saas](https://www.futurex.com/hs-fs/hubfs/Page%20Images%20-%20FX/Icons%2072px/icon_saas.png?width=72&height=72&name=icon_saas.png)
Sheer processing power
The Excrypt SSP Enterprise v.2 excels in high throughput environments where reliability and functionality are crucial.
![icon_certificate folder](https://www.futurex.com/hs-fs/hubfs/Page%20Images%20-%20FX/Icons%2072px/icon_certificate%20folder.png?width=72&height=72&name=icon_certificate%20folder.png)
Diverse use cases
Whether its card or mobile issuing, transaction acquiring, P2PE, remote key loading (RKL), this HSM has you covered.
![icon_ca](https://www.futurex.com/hs-fs/hubfs/Page%20Images%20-%20FX/Icons%2072px/icon_ca.png?width=72&height=72&name=icon_ca.png)
HSM virtualization
Create logically independent HSMs in a host device for separate transaction processing environments.
Minimize Downtime with High-Performance HSMs
The Excrypt SSP Enterprise v.2 excels in enterprise environments with high throughput and lots of applications. It provides full system redundancy and HSM virtualization, making it a cornerstone of security infrastructure. It happens to be the fastest payment HSM in the world, compliant with all major security standards, with support for all common APIs and encryption algorithms. Deploy on-premises for hands-on control or in Futurex’s VirtuCrypt cloud for on-demand HSM processing.
![icon_safety](https://www.futurex.com/hs-fs/hubfs/Page%20Images%20-%20FX/Icons%2072px/icon_safety.png?width=72&height=72&name=icon_safety.png)
Digital transformation through HSM virtualization
Excrypt SSP Enterprise v.2 enables organizations to share cryptographic resources among business units while centrally managing them. Critical data and keys can be allocated for specific applications and units.
![icon_encryption](https://www.futurex.com/hs-fs/hubfs/Page%20Images%20-%20FX/Icons%2072px/icon_encryption.png?width=72&height=72&name=icon_encryption.png)
Avoid the vendor lock-in trap
Futurex products like Excrypt SSP Enterprise v.2 are designed for seamless integration, featuring broad API support—including standards-based and web APIs—to simplify the process and avoid vendor-specific interfaces.
![icon_web safety](https://www.futurex.com/hs-fs/hubfs/Page%20Images%20-%20FX/Icons%2072px/icon_web%20safety.png?width=72&height=72&name=icon_web%20safety.png)
Highly available enterprise infrastructure
Pairing Excrypt SSP Enterprise v.2 with devices like the Guardian Series 3 from Futurex optimizes its capabilities, ensuring continuous functionality through load redistribution during disasters and general load balancing.
![icon_saas](https://www.futurex.com/hs-fs/hubfs/Page%20Images%20-%20FX/Icons%2072px/icon_saas.png?width=72&height=72&name=icon_saas.png)
Versatile deployment options
Like all Futurex solutions, the Excrypt SSP Enterprise v.2 can be deployed on-premises or in the cloud, through Futurex's VirtuCrypt cloud platform, for turn-key deployment.
Features of Excrypt SSP Enterprise v.2
![icon_saas](https://www.futurex.com/hs-fs/hubfs/Page%20Images%20-%20FX/Icons%2072px/icon_saas.png?width=72&height=72&name=icon_saas.png)
Vaultless tokenization
Futurex uses vaultless tokenization, an advanced form of. This performs tokenization without token vaults, reducing exposure of clear-text data.
![icon_encryption](https://www.futurex.com/hs-fs/hubfs/Page%20Images%20-%20FX/Icons%2072px/icon_encryption.png?width=72&height=72&name=icon_encryption.png)
Point-to-point encryption (P2PE)
The Excrypt SSP Enterprise v.2 encrypts data from the point of capture to storage. This ensures that data is never transmitted in the clear and boosts compliance.
![icon_safety](https://www.futurex.com/hs-fs/hubfs/Page%20Images%20-%20FX/Icons%2072px/icon_safety.png?width=72&height=72&name=icon_safety.png)
Next-gen transaction processing
Take advantage of highly scalable payment transaction processing speeds, with both issuing and acquiring possible within the same environment.
![icon_code signing](https://www.futurex.com/hs-fs/hubfs/Page%20Images%20-%20FX/Icons%2072px/icon_code%20signing.png?width=72&height=72&name=icon_code%20signing.png)
A dynamic scope of algorithms
The Excrypt SSP Enterprise v.2 supports all common asymmetric and symmetric encryption algorithms to provide a wealth of encryption options.
![icon_encryption](https://www.futurex.com/hs-fs/hubfs/Page%20Images%20-%20FX/Icons%2072px/icon_encryption.png?width=72&height=72&name=icon_encryption.png)
Host application integration
The Excrypt SSP Enterprise v.2 supports standards-based interfaces and web APIs to aid integration with external applications, no matter how many.
![icon_atm payment](https://www.futurex.com/hs-fs/hubfs/Page%20Images%20-%20FX/Icons%2072px/icon_atm%20payment.png?width=72&height=72&name=icon_atm%20payment.png)
Integrated smart card reader
The Excrypt SSP Enterprise v.2 features an integrated smart card reader to meet best practices for loading/ distributing key components.
Virtual HSMs for Enhanced Transaction Environments
The Excrypt SSP Enterprise v.2 can create multiple logically independent HSMs inside a single host device for separate transaction processing environments. It provides virtualization capabilities that allow users to host logically separated virtual HSMs within a single physical device.
- Unique firmware versions, users, key storage space, and security policies on each virtual HSM
- Multiple methods of access including a web portal, API, the Guardian Series 3, and VirtuCrypt
- Test new firmware on an independent virtual instance
- Increase the ROI of your HSM infrastructure
Frequently Asked Questions
What is an enterprise payment HSM?
An enterprise payment HSM is a cryptographic device that performs cryptographic operations within a physically secure environment. Enterprise payment HSMs are used to encrypt payment transactions and manage payment keys in high-throughput environments. The descriptor “enterprise” refers to the demanding environments where they are deployed. The fast and powerful Excrypt SSP Enterprise v.2 HSMs work in any enterprise IT infrastructure and are highly customizable for different use cases.
What are the Excrypt SSP Enterprise v.2 HSM specifications?
Hardware features
- Dual control-enabled, tamper-responsive
- Smart card reader for M-of-N key fragmentation and dual-factor authentication
- Dual, redundant gigabit Ethernet ports
- Dual, redundant, hot-swappable power supplies
- Secure Cryptographic Device (SCD) with tamper responsive barrier to protect sensitive data
Operating conditions
- Power: 100 – 240 VAC 50/60 Hz. 225 Watts
- Operating temp: -40° to 140°F (-40° to 60°C)
- Storage temp: -40° to 140°F (-40° to 60°C)
- Operating humidity: 20% to 80% non-condensing
- Storage humidity: 5% to 95% non-condensing
Dimensions and weight
- Weight: 36 lbs (16.33 kg)
- Width: 19 inches (48.26 cm)
- Height: 1U – 1.72 inches (4.37 cm)
- Depth: 19.4 inches (49.38 cm)
Industry compliance standards
- PCI HSM
- FIPS 140-2 Level 3
- ANSI X9.24 part 1 and part 2 – TR-39
Supported cryptographic functionality
- DES / Double-DES / Triple-DES
- DUKPT (Triple-DES / AES)
- Master/Session
- AES
- RSA
- EMV
- PKCS #11 cryptographic library for host application integration
VirtuCrypt integration
- Monitoring and alerting
- Backup and disaster recovery
How much processing power will we need?
Transaction processing throughput is measured in transactions per second (TPS). Your organization’s TPS depends on your operation’s scale, how many customers and partners you’re serving, and existing infrastructure. Enterprise organizations tend to need faster processing speeds that balance immanent needs with anticipated future demands. The Excrypt SSP Enterprise v.2 offers ultimate scalability when it comes to cryptographic functionality and processing speed, able to go from a few hundred TPS up to tens of thousands with a simple request.
What makes the Excrypt SSP Enterprise v.2 an “enterprise” HSM?
Scalability and customization are what defines an enterprise-class HSM. Aside from sheer processing power, which reaches upwards of 50,000 TPS, Futurex’s enterprise-grade HSMs can serve multiple applications at the same time with application partitioning. The number of application partitions extends into the hundreds, for unsurpassed scalability. As far as customization goes, the Excrypt SSP Enterprise v.2 includes custom command line interfaces (CLIs) and client libraries. These tools open up scripting and automation capabilities, organizing complicated operations into a single command.
What is HSM virtualization?
HSM virtualization refers to an HSM’s ability to create and run virtual instances of itself. This effectively multiplies the number of HSMs a user has access to, allowing them to dedicate virtual HSMs to different transaction processing environments, use cases, or business units. Each virtual HSM is truly independent, with unique firmware versions, users, security policies, and storage space. In short, HSM virtualization allows users to deploy multiple HSMs within a single device.
How is the Excrypt SSP Enterprise v.2 the world’s most advanced financial HSM?
Protect Sensitive Payment Data at Rest, in Use, and in Motion
Electronic payment networks need data security solutions that scale in speed and expand over time to support emerging payment types and algorithms. The Excrypt SSP Enterprise v.2 is the world’s fastest hardware security module (HSM) for financial transaction processing. It offers robust functionality and full backward compatibility with the Excrypt SSP Series of HSMs. It has a high degree of scalability, offering speeds in excess of 50,000 transactions per second. All in a tamper-resistant, 1U rackmount chassis.
Integrated disaster recovery and redundancy features ensure rock-solid reliability. The device complies with key management best practices and contains some of the industry’s most advanced security features.
Payment Security Functionality
- Card/PIN Issuance
- Mobile Payments
- P2PE and Tokenization
- ATM Remote Key Loading
- Card/PIN Validation
- EMV Issuance/Validation
- MAC and Hashing
- General Purpose Functionality
HSM Virtualization
The Excrypt SSP Enterprise v.2 can create multiple logically independent HSMs inside a single host device for separate transaction processing environments.
- Increase the ROI of your HSM infrastructure
- Multiple methods of access including a web portal, API, the Guardian Series 3, and VirtuCrypt
- Test new firmware on an independent virtual instance
- Unique firmware versions, users, key storage space, and security policies on each virtual HSM
HSM Virtualization and Application Partitioning
- The Excrypt SSP Enterprise v.2 offers HSM virtualization and application partitioning. This allows multiple logically separated environments to be created within a single FIPS 140-2 Level 3 validated HSM boundary.
Universal Compatibility
- Turnkey compatibility with all major financial host application software, as well as support for standards based interfaces like PKCS #11 and Java for general purpose cryptographic processing
Can I get a product overview of the Excrypt SSP Enterprise v.2?
The Excrypt SSP Enterprise v.2 provides virtualization capabilities that allow users to host logically separated virtual HSMs from within a single physical device.
Wide-Ranging Cryptograhic Functionality
- Magnetic Stripe and EMV Card Issuance and Verification
- MAC and Hashing
- Point-to-Point Encryption (P2PE)
- Format-Preserving Encryption
- ATM Remote Key Loading
- HCE and Cloud Payments
- Digital Signing
- General-Purpose Cryptography
- Mobile Payments
- PIN Management and Printing
- Tokenization
- Contactless/NFC
- 3-D Secure
- PCI Data Protection
- On Behalf Key Management (OBKM)
- Custom Functionality
HSM Virtualization, Application Partitioning, and Custom Command Extensions
- A single Excrypt SSP Enterprise v.2 HSM can be divided into multiple logically separated, completely independent virtual HSMs.
- Design and deploy custom extensions within the HSM’s cryptographic boundary to add functionality to existing API commands.
- Use application partitioning to segregate key storage locations, giving individual applications control over their own keys and security policies through API function blocking.
Native Integration with Futurex Solutions
- The Excrypt SSP Enterprise v.2 integrates directly with other Futurex solutions for centralized configuration, management, monitoring, alerting, load balancing, cloud services, and more.
Disaster Recovery and High Availability
- Contains hot-swappable power supplies and dual Ethernet ports
- Integrates with VirtuCrypt for increased infrastructure visibility and uptime
What’s the longevity of an enterprise HSM?
Futurex hardware is designed and manufactured completely in-house. To both help our customers and partners meet compliance requirements, as well as to give them the best user experience, solutions like the Excrypt SSP Enterprise v.2 are made to withstand demanding IT environments. On the software level, Futurex HSMs operate with a sophisticated code base that allows them to support new and emerging algorithms, compliance standards, and cryptographic functions.
Featured Resources
“The Excrypt SSP Enterprise v2 is a true version of state of the art technology which simplifies implementation and management, be it remote management or local management.”
- Adil Rahat, Sales and Operations Manager
VeriSafe LLC
Enterprise Data Encryption Solutions
Futurex provides HSMs and key management servers that handle encryption, bring-your-own-key (BYOK). Futurex helps enterprise organizations deploy a modern cloud data security environment that complies with the latest standards and regulations.
![bc4595180ea915c553ac6ecf67ca4b0b](https://www.futurex.com/hubfs/Partner%20Logos/bc4595180ea915c553ac6ecf67ca4b0b.png)
![Bank_of_America_logo](https://www.futurex.com/hubfs/Icons%20-%20%5BIC%5D/2560px-Bank_of_America_logo.svg.png)
![wells fargo](https://www.futurex.com/hubfs/Partner%20Logos/wells%20fargo.png)
![RBC_Bank logo](https://www.futurex.com/hubfs/Icons%20-%20%5BIC%5D/RBC_Bank.svg.png)
![Discover_Card_logo](https://www.futurex.com/hubfs/Icons%20-%20%5BIC%5D/2560px-Discover_Card_logo.svg.png)