User experience with Nitrokey HSM2 for a root CA

[kaputt]

Are you a sock puppet of mine?

I had pretty much the same use case and similar complaint(s) I voiced in this thread:

Documentation wrong about maximum PIN length

Thank you for the clarification. Working in this whole token ecosystem is just a plain horrible experience. Very confusing, inconsistent and incomplete documentation, misleading error messages, tons of tools with lackluster maintenance and similar naming and functionality (e.g. pkcs11-tool vs p11tool). Then suddenly Java and GUIs (SCShell), too. Just terrible if you want to have a robust, reproducible procedure you can trust to work for decades to come, let’s say for an internal root CA. It’s …