After the initial virtual test system has been running successfully through various test scenarios and the initial manual on deployment and operation is finished and validated with DevOps, at least two physical HSMs need to be acquired.

To establish a Signstar host for an HSM backend, a dedicated machine with integrated or discrete TPM 2.0 and remote management access support needs to be used.