SmartCard-HSM Integration

[CardContact]

We are the developer of the SmartCard-HSM, an affordable Hardware Security Module (HSM) based on smart card technology.

We are wondering, what it would take to integrate with step-ca ?

The SmartCard-HSM supports PKCS#11 via OpenSC and has very strong key management mechanisms for creating, backup, use and distribution of keys. It also supports key attestation, public key authentication for access control and functions to use it as Cloud-HSM.

If I understand the documentation here correctly, we would need the commercial product for PKCS#11 support, right ?

[CardContact]

We have documented our initial findings.

Btw. the Nitrokey-HSM you refer to in your documentation is actually a SmartCard-HSM. They are one of our licensees.

[CardContact]

What is the recommended way to bootstrap a CA with Dockerfile.hsm ?

Apparently there is no way to pass the PKCS11 URI for existing root and intermediate private keys to step ca init.

Any hints on this ?

[CardContact]

We are working on a SmartCard-HSM Cloud Service to better integrate with step-ca.