It should be possible to generate EC keys and store them on an HSM.
Later EJBCA should be able to use them
Support SHA256WithRSAandMGF1 (RSA-PSS) on PKCS11 HSMs that does not hash/pad on their own
CVC support for EC keys
Support SHA224WithECDSA on PKCS11 HSMs
Support signing with SHA256WithRSAandMGF1 on PKCS11 HSMs
Generate new keys on HSM in Admin GUI does not support ECC
Support named curves for Brainpool ECC in PKCS11 HSMs