The document is signed on your own machine using the private key inside the connected SecureSign dongle — the key itself never leaves the device.
The same commands from the Testing Guide's Level 1 (raw APDU) and Level 2 (PKCS#15/PKCS#11) tables, run for real against the connected device, with the actual output shown below each one. Commands marked PIN use the PIN entered above.
opensc-tool --list-readersopensc-tool --atropensc-tool --send-apdu 00A4000C023F00opensc-tool --send-apdu 00A4080C06501550154331 --send-apdu 00B0000000opensc-tool --send-apdu 0020000104<pin-hex>pkcs15-tool --dumppkcs15-tool --list-certificatespkcs11-tool --module opensc-pkcs11.dll --list-objectspkcs11-tool --login --pin <pin> --testpkcs11-tool --sign --mechanism ECDSA --login --pin <pin> -i data.bin -o data.sig