Securosys Simplifies eIDAS 2.0 Remote Signing with Integrated SAM Functionality in Primus HSMs

Securosys provides the secure cryptographic foundation for eIDAS-compliant remote signing services, enabling Qualified Trust Service Providers (QTSPs), and technology partners to build compliant infrastructures with both HSM and SAM functionality integrated in one single platform.

Zurich, Switzerland – 22.09.2026 – Securosys, a leading provider of Hardware Security Modules (HSMs), announced the availability of its integrated Signature Activation Module (SAM) functionality within Primus HSM for eIDAS-compliant remote signing architectures. By combining both the Cryptographic Module (CM – here HSM) and SAM within a single Securosys Primus HSM, organizations can simplify the deployment of Qualified Signature Creation Devices (QSCDs) and accelerate their journey toward QTSP services.

As organizations build eIDAS-compliant remote signing services, they must ensure that signing keys remain under the sole control of their legitimate owners. This is the role of SAM, a key component in modern qualified remote signing environments.

Traditionally, organizations building remote signing infrastructures have relied on separate HSM and SAM solutions, often sourced from different vendors. This approach introduces additional integration complexity, certification efforts, operational dependencies, and long-term maintenance challenges.

Securosys takes a different approach.

Securosys enables SAM functionality directly within the tamper-protected boundary of the Primus HSM. This integrated design eliminates the need for a separate SAM solution while maintaining the security controls required for qualified remote signing architectures.

The Securosys solution builds on a certification framework aligned with eIDAS requirements. Primus HSM is certified to natively meet both the Cryptographic Module (CM) requirements defined in CEN EN 419 221-5 and the Signature Activation Module (SAM) requirements defined in CEN EN 419 241-2.

"As eIDAS requirements continue to evolve, organizations need a simpler path to delivering qualified remote signing services," said Robert Rogenmoser, CEO of Securosys. "Our approach is to provide the secure cryptographic foundation on which QTSPs, and technology partners can build. By integrating SAM functionality directly into the Primus HSM, we help customers reduce complexity, accelerate deployment, and focus on delivering trusted digital services rather than integrating multiple security components."

The integrated architecture provides several advantages for organizations developing qualified trust services:

• Eliminate the need to develop and certify a separate SAM solution
• Avoid dependency on third-party SAM vendors
• Run SAM functionality entirely within the tamper-protected HSM boundary
• Preserve existing application integrations without major code changes.
• Obtain the complete QSCD foundation from a single supplier
• Build on a modern architecture designed for eIDAS remote signing
• Prepare for future requirements with PQC-ready HSM technology
• Leverage a unified certification path through a single HSM and SAM platform

While focusing exclusively on HSMs and the integrated SAM functionality, the company works alongside QTSPs and solution providers that deliver complete end-user signing solutions.

Securosys Primus HSM and CloudHSM form the secure cryptographic foundation for scalable and compliant remote signing infrastructures, with integrated SAM functionality designed specifically for modern eIDAS requirements.

For more information check out Securosys SAM product page or download our white paper.