Yes, you can use NCryptoki, together with your HSM, to manage ZMK under LMK in order to have a ZPK for PIN encryption/decryption.

NCryptoki allows you to manage easily your HSM in a .NET application (or JCryptoki for a Java application if you are using Java) by using the PKCS#11 module supplied by your HSM vendor.

NCryptoki (and PKCS#11) suppliess you the primitives to implement your key management process, i.e. you should implement your logic behind ZMK, LMK and ZPK by using the high level PKCS#11 functions supplied by NCryptoki. 

For example, NCryptoki (and PKCS#11) supplies functions to create and store any kind of simmetric keys such as AES, DES, 3DES, etc., for ZMK,LMK and ZPK, to wrap and unwrap low level keys, such as ZPK, by using ZMK or LMK.   

I suggest to design your flows and processes to manage keys end then to map your process on the primitives supplied by NCryptoki and PKCS#11. 

If you need we may help you on your project.

NCryptoki needs an HSM, a smart card or a cryptographic token compliant with PKCS#11 specifications.

You may use our virtual HSM, VirtualCryptoki, that you find in the download section: http://www.ncryptoki.com/download.aspx

VirtualCryptoki is a software HSM that can be used as replacement for a real HSM. It is PKCS#11 compliant and supplies the same functions as a real HSM.

Our free Virtual HSM (the one that you can download in our download page) doesn't support 5000 transactions per day.

We have another, more robust, virtual (software) HSM that allows you to manage more transactions per second, i.e. more than 86400 transactions per day.

This software HSM is not free. I'll send you our offer for that HSM with all details to your email (the one you used to register to this forum).