Keep cryptographic keys under dedicated hardware control when operating signing and trust-service workloads. The ENTRUST nShield 5c MID eIDAS CC configuration is a hardware security module configuration for environments where key generation, storage, and cryptographic operations must be separated from the application systems requesting them. It provides a focused platform for protecting keys associated with certificates, digital signatures, and related cryptographic services. Place a hardware security module at the cryptographic trust boundary for services that need to create signatures, safeguard private keys, or perform protected cryptographic operations. Applications and services can request those operations while private key material remains under hardware security module control. This deployment approach applies to certificate services, document-signing systems, digital identity infrastructure, and trust-service environments using eIDAS-oriented workflows. The NH2096-M-CC ordering code identifies the MID configuration carrying the eIDAS CC designation. MID differentiates this selection within the nShield 5c range, while the eIDAS CC wording identifies its named cryptographic trust-service configuration. Match the designation to the required trust-service architecture and cryptographic policy, particularly where protected key custody and controlled signing operations are central to the service.