The problem has nothing to do with NSIS, instead you must sign your application with a ev cert that requires a hardware device to use.