After the VPN connection has been established, the HSM can be accessed from an Azure VM. For the rest of the document, we assume that the environment variable CRYPTOSERVER is set to the IP address of the HSM, reachable via the VPN. Then, running csadm getstate should return status information of the CryptoServer.