How do you automate testing for systems that require physical or secure hardware (like eID cards, smartcards, or signature devices)?

Hi everyone!
I’m working on a digital notary solution where end-to-end flows include web, mobile, desktop apps, and video conferencing. There are strict security requirements and some steps require physical hardware (eID, smartcard, etc.). We also have integrations with SMS/OTP, qualified signature providers (TSP/CA), and video modules.

  • How do you simulate or mock physical/secure hardware interactions in automated tests?
  • Any tips for handling these kinds of external integrations (SMS, TSP, video) in CI/CD pipelines?
  • Any lessons learned or best practices from similar highly regulated, distributed systems?

I’m planning to use Playwright for web automation and possibly Appium for mobile, but open to suggestions.

Thanks in advance for any advice or references!