The PIN (Personal Identification Number) of the HSM (Hardware Security Module). 

Mandatory: When the Vendor value is nshield or thales.

JSON  data type: The string identifier of a secret holding the PIN value. See the Entrust PKI Hub for how to set secret values with the following command.

clusterctl solution secret set

Remove this parameter from the JSON file if Vendor is none.