Document the HSM setup
What commands was run on the provisioning system?
What commands was run on another system, for signing the shim?
What commands was run on the provisioning system?
What commands was run on another system, for signing the shim?