Over the past few weeks, I’ve been setting up a test PKI setup for a client, consisting of an offline ROOT CA and an Enterprise SUB CA. For the offline ROOT CA, we wanted to further protect the private key by placing it on a hardware HSM. There are several brands on the market, ranging…