SmartCard-HSM and PKI-as-a-Service Documentation

I think I miss some informations, I start from zero.

I read nitrokey documentation (nitrokey website) and some docs linked that are in openscdp.

But for exemple if I take your new documentation:

image

I suppose that this step is some of the steps explained in N-of-m Schemes - Nitrokey Documentation ?

Then for the next step:

image

I have downloaded scsh3gui from here : Smart Card Shell 3

When I start the software I get this:

How do we log into ‘the personal SmartCard-HSM’ ?

The nitrokey HSM 2 is supposed to appear automatically in the software ?

Also:

  • Do I really need to access the GIT of openscdp or scsh3 is enought for what I need ?

What I know:

  • I am running ubuntu 24.04 fresh
  • The Nitrokey HSM 2 is plugged in the computer
  • It doesn’t seems to appear in scsh3gui.
  • it correctly appear with pkcs11-tool (so the dongle is working)
  • Same issues on a 22.04 computer
  • The dongle is also not recognised by nitrokey-app but I don’t know if it is supposed to be recognised or not by this app (it’s not clear if Nitrokey HSM 2 use it or not). (I tried two versions of nitrokey-app (1.x and 2.x)

Maybe there 2 options

  1. I miss some information somewhere, this is just “wrong usage” of the solution.
  2. There is a problem with my setups on Ubuntu 22.04 and 24.04

Any help will be apreciated, possibly on another post to avoid spoiling on this post.

My objective is: Be able to use a Nitrokey HSM 2 with pkcs11 for signature of firmwares (using openssl + pkcs11). AND lock/unlock the access to the dongle with n-of-m scheme