[woodruffw]

That does seem exceptionally slow, although RSA key generation is also notoriously slow.

(In most settings where an HSM is used, you shouldn’t be generating keys all that often. So these times are often acceptable.)