FreeIPA CLI installer offer the following HSM options:
- --token-name=NAME
The PKCS#11 token name if using an HSM to store and generate private keys.
- --token-library-path=NAME
The full path to the PKCS#11 shared library needed toaccess an HSM device.
- --token-password=NAME
The PKCS#11 token password for the HSM.
- --token-password-file=NAME
The full path to a file containing the password to the PKCS#11 token password.
These options are not available for the ipaserver role.