Crypto Tokens provide access to the keys and cryptography operations. Each Signer is typically configured with a reference to a Crypto Worker having a Crypto Token configured.

A Crypto Token using a software keystore is the P12CryptoToken and one using a Hardware Security Module (HSM) is the PKCS11CryptoToken.

Available SignServer Crypto Tokens:

A worker can contain a crypto token as a component by defining which crypto token implementation to use with the CRYPTOTOKEN_IMPLEMENTATION_CLASS property and then add any other properties needed by that implementation.

A worker with the sole purpose of holding a crypto token is called a Crypto Worker. Then other workers that need a crypto token can instead simply refer to a crypto token in the other worker by specifying the (crypto) worker name in a CRYPTOTOKEN property.