Data sheet

HPE Atalla Ax160 Network

Security Processors
Protect your organization and customers from
financial fraud
Protect your business and its financial data with the HPE Network Security Processor (NSP).
This secure, tamper-resistant hardware security module (HSM) for cryptographic processing
solutions on automatic teller machine (ATM), electronic funds transfer (EFT), and
point of sale (POS) networks delivers high-performing cryptography and key management
capabilities for card payment authorization and real-time fraud prevention. And it meets critical
financial services industry, PCI-DSS, and NIST standards for security and compliance.
Features at a glance
• Industry-leading physical and logical
security
HPE Atalla Ax160 Network Security Processors (NSPs) provide unrivaled protection for
Triple Data Encryption Standard (3DES) and other cryptographic keys when safeguarding
• Atalla Key Block for advanced triple DES
value-based transactions. They are designed as the hardware security module complement to
key management
the Atalla Key Block, an industry-leading advanced key management solution.
• Plug-and-play fast host connectivity
• Dual power supplies The Ax160 NSPs consist of three models. Each model offers identical PCI security functionality,
with different performance levels:
• Dual NIC (optional)

• PIN and component printing option • HPE Atalla A10160 NSP

(optional)
At 1060 PIN translates per second, when used with the Atalla Key Block, the A10160 NSP
• Cryptographically protected remote efficiently handles high-volume environments.
key loading
• HPE Atalla A9160 NSP
• Space-saving, state-of-the-art,
rack-mountable platform At 280 PIN translates per second, the A9160 NSP hardware security module is a
cost-effective solution for mid-level transaction environments.
• Command-set compatibility with all
Atalla network security processors • HPE Atalla A8160 NSP
• Enhanced security and user-friendly At 80 PIN translates per second, the A8160 NSP works well in low-volume transaction
firmware upgrades environments while still encompassing the same security and functionality of
high-performing NSP models.
Institutions like yours can match security processors to current throughput demands and
expand capacity as needed.

From a hardened, rack-mountable, 2U perimeter to a state-of-the-art tamper-resistant

A fast and secure hardware-based
architecture, the Atalla Ax160 NSP hardware security module raises the bar for physical and
cryptographic processing solution for logical security, flexibility, and ease of use. Atalla NSPs also interoperate transparently with
ATM/EFT/POS networks. non-Atalla hardware security modules. As an efficient platform for the industry-standard Atalla
Key Block, the Atalla Ax160 NSPs derive the full security value of two and three key triple DES
and public key encryption—alone or in a mixed encryption environment—while providing you a
cost-effective migration path to even stronger future algorithms.

The new-generation Atalla Ax160 NSPs incorporate more than three decades of
standards-based cryptographic expertise coupled with the latest open systems technologies
from Hewlett Packard Enterprise—making the Atalla Ax160 NSPs a fast and safe security
processor solution for your ATM/EFT/POS networks.
Data sheet Page 2

Advanced key management solution using Atalla Key Block

The Atalla Key Block and Atalla Ax160 Atalla Key Block is the advanced key management complement to the Atalla Ax160 NSPs and
NSPs offer benefits, such as: other Atalla NSP models. Leading financial industry independent software vendors (ISVs)
• A single HSM solution with have embraced Atalla Key Block. It has also been adopted as part of the industry-standard
simultaneous support of single-length
DES, two and three key triple DES, and ANSI X9.24 Part 1-2009 Retail Financial Services Symmetric Key Management Part 1: Using
RSA public or private keys Symmetric Techniques and ANSI X9.24 Part 2-2006 Retail Financial Services Symmetric Key
• Support for future algorithms, key types,
Management Part 2: Using Asymmetric Techniques for Distribution of Symmetric Keys.
and key lengths
Physical security
• Full support for mixed encryption
environments with masking of
• FIPS 140–2 Level 3 certification for physical security
vulnerable keys and strong control over • Rack-mountable (2U), physically fortified form factor
the usage of shorter cryptographic keys
• Double-locking bezel with Medeco locks
• Penetration detection (protective grid)
• Out-of-range temperature and voltage detection
• Low-battery voltage detection
• PIN security and key management implemented within a tamper-resistant, tamper-responsive
hardware perimeter for protection against manipulation
Logical security
• Industry-standard Atalla Key Block key management technology
• Advanced security architecture that prevents retrieval of PINs, keys, and other sensitive data
in cleartext form
• Automated and manual key management options
• Encrypted, convenient configuration, management, and key loading via HPE Atalla Secure
Configuration Assistant (no cleartext passing of keys or key components)
• Remote ATM key initialization and rekeying via the optional Atalla Remote Key feature
• Payment Card Industry (PCI) Security Standards Council PIN Transaction Security (PTS)
approved device
Performance
• Rated at 1060, 280, and 80 triple DES PIN translates per second using the Atalla Key Block
• Tailored to entry-level, mid-level, or high-volume environments to meet processing
performance needs and demanding security requirements
• Linear performance scaling with additional hardware security module units
Fast host connectivity
• Auto-sensing 10/100/1000BASE-T Ethernet interface for point‑to‑point TCP/IP
• Integrated high-performance TCP/IP stack and communications processor
• Asynchronous connection for legacy applications
Flexibility and extensibility
• Broad application support (ATM/EFT/POS, stored value, loyalty cards, and corporate funds
transfer)
• Customer-defined security policies enforced
• Easy command set customization
• Seamless interoperability with non-Atalla environments
• Remote rekey support for NCR, Diebold, and other ATM vendor devices
• Command set compatibility with earlier models of Atalla NSPs
Data sheet Page 3

Easy to use and manage

• Encrypted, convenient key loading via the Atalla Secure Configuration Assistant
• Simple-to-use GUI for key loading and configuration
• Fast, convenient software upgrades
• No need to replace components (for example, EPROM) when upgrading
Global support
Hewlett Packard Enterprise provides worldwide support and services to help you maintain the
security and availability of your business environment.

STANDARD SUPPORT
Cryptographic support Data encryption algorithm (DEA) standard (ANSI X3.92-1987, ISO 10126-2), DES, and two- and three-key triple DES;
Banking procedures for message encipherment, general principles (ISO 10126-2); PIN management and security,
part 1 and 2 (ANSI X9.8, ISO 9564–1 and 2); Message authentication (ISO 9797-1, ANSI X9.9-1987, ISO 9807);
MasterCard CVC, Visa CVV, and American Express CSC; MasterCard CVC3, Visa dCVV, and Discover dCVV;
Unique key per transaction (ANSI X9.24-2004); EMV-based smart card support
PIN block formats ISO 9564; PIN pad; IBM 3624 ATM PIN format; IBM 4731 PIN block;
IBM Encrypting PIN pad; Unisys (Burroughs); Diebold; Docutel/Olivetti
PIN verification methods IBM 3624; Visa PVV; Atalla Bi-Level DES; Diebold; NCR
Key management standards ANSI X9.24 Parts 1 & 2; ANSI X9.52; Triple DES derived unique key per transaction

Note: Card validation code: (CVC), card verification value (CVV), card security code (CSC), card validation code 3 (CVC3), dynamic card verification value (dCVV), and PIN
verification value (PVV)

HPE Atalla Ax160 Network Security Processors

TECHNICAL SPECIFICATIONS
Physical dimensions
Height 8.75 cm (3.45 in.)
Width 48.26 cm (19.00 in.)
Depth 82.57 cm 9 (32.51 in.)
Weight Weight 20.13 kg (43.0 lb)
Controls Power on/off switch, unit ID switch
Electrical
Dual input voltage, auto-sensing 90–132 VAC; 180–260 VAC
Rated input current 7.1 A at 120 VAC; 3.5 A at 240 VAC
Rated input frequency 50 Hz to 60 Hz
Power consumption 460 W at 100 VAC; 460 W at 200 VAC
Operating environment
Temperature 10°–35° C (50° to 95° F)
Relative humidity 10% to 90% (non-condensing 28° C)
Certification/compliance
Safety ULC, CE, TUV approved
Emissions FCC, C-Tick, GOST
Environmental RoHS
Connectivity
Communications Ethernet running TCP/IP
Connection 10/100/1000BASE-T (RJ45) auto-sensing
Data sheet

HPE Atalla Ax160 Network Security Processors (continued)

ORDERING INFORMATION
Product ID Description
AJ560D HPE Atalla A10160 Network Security Processor with Atalla Key Block

AJ561D HPE Atalla A10160 Network Security Processor with variant key management
AJ558D HPE Atalla A9160 Network Security Processor with Atalla Key Block

AJ559D HPE Atalla A9160 Network Security Processor with variant key management
AJ556D HPE Atalla A8160 Network Security Processor with Atalla Key Block

AJ557D HPE Atalla A8160 Network Security Processor with variant key management
T16/ARKEY Atalla Remote Key feature (optional)
AADDFUNC Premium Value Commands (optional)
AJ592A Chain of Trust—notification for tracking of serial number of NSPs attached to order for on-site delivery
authentication (Optional)
C8Z36AA HPE NSP Ax160 Enhanced AKB SW 1 per Appl. LTU
C8Z37AA HPE NSP Ax160 Enhanced VAR SW 1 per Appl. LTU

Resources
About Atalla Key Block
Worldwide sales assistance:
[email protected] Atalla Key Block is the advanced key management complement to the Atalla Ax160 NSPs and
other Atalla NSP models. Leading financial industry independent software vendors (ISVs)
Atalla sales orders have embraced Atalla Key Block. It has also been adopted as part of the industry-standard
[email protected] ANSI X9.24 Part 1-2009 Retail Financial Services Symmetric Key Management Part 1: Using
Worldwide technical support Symmetric Techniques and ANSI X9.24 Part 2-2006 Retail Financial Services Symmetric Key
Atalla support Management Part 2: Using Asymmetric Techniques for Distribution of Symmetric Keys.
[email protected]
U.S. only: +1-800-500-7858
Outside US: +1-916-414-0216
About HPE Security - Data Security
HPE Security - Data Security drives leadership in data-centric security and encryption solutions.
With over 80 patents and 51 years of expertise we protect the world’s largest brands and
neutralize breach impact by securing sensitive data at rest, in use and in motion. Our solutions
provide advanced encryption, tokenization, and key management that protect sensitive data
across enterprise applications, data processing IT, cloud, payments ecosystems, mission critical
transactions, storage, and big data platforms. HPE Security - Data Security solves one of the
industry’s biggest challenges: simplifying the protection of sensitive data in even the most
complex use cases. hpe.com/software/DataSecurity

Learn more at
hpe.com/software/DataSecurity

Sign up for updates

Rate this document

© Copyright 2010, 2012, 2014–2015 Hewlett Packard Enterprise Development LP. The information contained herein is subject to
change without notice. The only warranties for Hewlett Packard Enterprise products and services are set forth in the express warranty
statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty.
Hewlett Packard Enterprise shall not be liable for technical or editorial errors or omissions contained herein.
4AA1-6651ENW, December 2015, Rev. 6