HSM PKI features?

Hello,

We would like to use the HSM stick for basic CA functionality using openssl. That is, we will be our own CA, starting the chain with a self-signed certificate.

Is the stick covering the full spectrum of CA functionality or just a subset ?

TIA !

J