Nitrokey HSM unter Windows 10

One of the users in Self signed certificate authority: pkcs11 engine and openssl has recommended XCA. I have never used it myself, but perhaps you will find it useful: