Feature, enhancement (describe the feature or enhancement from the user’s point of view): IPA has added support for the two Hardware Security Modules (HSM) that the Red Hat Certificate System supports to store the CA and KRA private keys and certificates. This relies on the networking features of the HSM to share the keys between machines to create replicas. Reason (why has the feature or enhancement been implemented): This adds physical security to the private key material. Result (what is the current user experience):An HSM provides additional security without visibly affecting most IPA operations. When using low-level tooling the certificates and keys will be addressed differently but this will be seamless for most users.