Can I use scsh3gui with Nitrokey HSM to sign a certificate? I found the option to generate a PKCS#10 / CSR but do no see an option to sign them? Do I need to do this on the cli?
BTW: Is there dedicated documentation on the GUI?
There is no dedicated functionality in the Smart Card Shell to sign certificates. But you can use an OpenSCDP script with the provided modules to issue certificates.
Or you use the PKI-as-a-Service to setup a full X.509 PKI. For smaller setups I’d recommend to use XCA for certificate issuing.
The Key Manager in the Smart Card Shell has some documentation and the tool itself is documented as part of the OpenSCDP project.
Nice. XCA works great for our purpose.
