Thanks, Christian. I tried the PKCS#11 interface for my HSM (Thales nShield Connect),...
Is there a way to get XCA to leverage OpenSSL engines, like chil or capi?