Nearly all laptops, desktops, and servers sold in the last decade have a Trusted Platform Module (TPM) which is in fact a HSM. You need drivers and utilities to

Nearly all laptops, desktops, and servers sold in the last decade have a Trusted Platform Module (TPM) which is in fact a HSM. You need drivers and utilities to use it but it's there. TPMs generally aren't fast enough to do RSA signatures a on busy webserver though, but they're wonderful for protecting VPN certificates (tools for managing this are built into windows Group Policy, I imagine it's very painful on Linux)