The PIN (Personal Identification Number) of the HSM (Hardware Security Module).

Mandatory: When the Vendor - tsa value is nshield or thales.

JSON  data type: The string identifier of a secret holding the PIN value. See the Entrust PKI Hub for how to set secret values with the following command.

clusterctl solution secret set