This paper provides an integration guide explaining how to integrate a Utimaco CryptoServer Hardware Security Module (HSM) with Symantec Encryption Desktop 10.4.1 on a Windows Server 2012 R2 using the CNG interface to offload cryptographic operations from the server and to protect the private keys within the HSM.
Configuration details - especially relating to Active Directory Domain Services (ADDS) and Active Directory Certificate Services (ADCS) as well as Symantec Encryption Desktop - that go beyond normal configuration for the integration of hardware security module are not explained in this document. For more detailed information on these specific topics, please refer to the Microsoft Developer Network (MSDN) and to the documentation provided by Symantec.