I want to develop a system for digital signature services. here is the summary of my system scenario:
Private keys are stored on HSM(e.g. nShield Connect) rather than smart card
HSM is connected with a central application server where Cryptographic operation or digital signing process is performed
Users upload documents and send signing request to application server through third party applications (e.g. internet explorer)
Application server extract private keys from HSM
Then server sign the document and return it to the user.
How I can create a virtual server in Windows platform? Or from where I will start?
Note:
Biometric authentication may be applied to access private key in future
extract private keys from HSM
. Do you mean the app server has the HSM sign?