Ensure that you have created an HSM user that can manage crypto operations (CryptoUser). The byoktool supports all key types (PKCS#11, CNG, JCE, CXI). In this guide we will create a PKCS#11 key, see [CSPKCS11RM] for more information. For other types, refer to the documentation provided to you on the Utimaco Product CD.