Enumerate about the Specialised hardware
Specialised hardware such as protected memory or cryptographic memory module for storing and protecting the keys proves to be a good solution. The keys are stored in a highly encrypted format. When loaded for signing, the keys are decrypted using complex encryption/decryption algorithms and loaded into the memory of the secure server, which then performs all the signing operations required on behalf of the server. It should be noted that the keys are never displayed in their unencrypted form to the server or any other user, so even if an intruder manages to access the network, the keys remains safe.