:_mod-docs-content-type: ASSEMBLY
ifdef::context[:parent-context: {context}]

[id="adopting-key-manager-service-with-hsm_{context}"]

:context: hsm-integration

= Adopting the {key_manager} with HSM integration

[role="_abstract"]
Adopt the {key_manager_first_ref} from {OpenStackPreviousInstaller} to {rhos_long} when your source environment includes hardware security module (HSM) integration to preserve HSM functionality and maintain access to HSM-backed secrets. HSM provides enhanced security for cryptographic operations by storing encryption keys in dedicated hardware devices.

For additional information about the {key_manager} before you start the adoption, see the following resources:

* {key_manager} service configuration documentation
* Hardware security module vendor-specific documentation
* OpenStack Barbican PKCS#11 plugin documentation

include::../modules/con_key-manager-service-hsm-adoption-approaches.adoc[leveloffset=+1]

include::../modules/proc_adopting-key-manager-service-with-proteccio-hsm.adoc[leveloffset=+1]

include::../modules/proc_adopting-key-manager-service-with-hsm-integration.adoc[leveloffset=+1]

include::../assemblies/assembly_troubleshooting-key-manager-hsm-adoption.adoc[leveloffset=+1]

include::../assemblies/assembly_troubleshooting-key-manager-proteccio-adoption.adoc[leveloffset=+1]

include::../modules/proc_rolling-back-the-hsm-adoption.adoc[leveloffset=+1]



ifdef::parent-context[:context: {parent-context}]
ifndef::parent-context[:!context:]