title: Can I use PKCS#11 to create a signature in a HSM?
body: <p>Can I configure XAdES4J to <strong>delegate the signature creation</strong> to a hardware-security-module (HSM) using a PKCS#11 infrastructure? If yes - how?</p>
  
  <p>Infos on these sites let me assume, that only a key-transfer using PKCS#11 is possible:</p>
  
  <ul>
  <li><a href="https://code.google.com/p/xades4j/wiki/DefiningKeyingData" rel="nofollow">https://code.google.com/p/xades4j/wiki/DefiningKeyingData</a> (the terms keying-data, -provider)</li>
  <li><a href="http://code.google.com/p/xades4j/wiki/QeA" rel="nofollow">http://code.google.com/p/xades4j/wiki/QeA</a> (discussion of onur)</li>
  <li><a href="http://xades4j.googlecode.com/svn/release/1.3.0/javadoc/reference/xades4j/providers/impl/KeyStoreKeyingDataProvider.html" rel="nofollow">http://xades4j.googlecode.com/svn/release/1.3.0/javadoc/reference/xades4j/providers/impl/KeyStoreKeyingDataProvider.html</a> (Step 3: "Return the entry's private key")</li>
  </ul>