Discuss this help topic in SecureBlackbox Forum

Sign with a key stored on a hardware device

To produce a signature using the private key stored on a hardware device, e.g., sign a certificate signing request (CSR), the following steps should be performed:

• First, set up your TElPKCS11CertStorage component and open a session to the token as described in the corresponding how-to article.
• Create an instance of TElCertificateRequest.
• Set its PreserveKeyMaterial property to True.
• Call its SetKeyMaterial method and pass the key material stored on the hardware device (HSM) as a parameter.
• Call Generate.

How To articles related to PKCS#11

Discuss this help topic in SecureBlackbox Forum