I have a use case, the IoT system sending a signed file to the data center and I have an internal CA to read the corresponding public key to verify the signature on the signed file.
I am not sure how the flow work functions if I am sending a signed file from the data center to IoT. Does the CA help to sign the files? And I don't want to read the private key out from a HSM to sign the file--isn't that correct?
Can someone please help with how I could send the signed files from the client to server and server to the client?
To make it a bit more complex, I want to sign and encrypt as well. My requirement is to store the private key on a HSM (server-side) on TPM (IoT).