That's the whole point of an HSM... A somewhat tamper resistant device that executes all encryption operations. You give it the hash and a reference to the the

That's the whole point of an HSM... A somewhat tamper resistant device that executes all encryption operations. You give it the hash and a reference to the the key, and it returns the signed data.