Sources a PrivateKey from somewhere other than the local
filesystem (an HSM, a KMS, ...). When configured on CertificateManager,
it overrides disk entirely — the on-disk own/private/private_key.pem is
neither generated nor read. CertificateAuthority does not support a
provider (its signing paths are openssl reading a key file); it does
support privateKeyPassphrase.
Sources a PrivateKey from somewhere other than the local filesystem (an HSM, a KMS, ...). When configured on
CertificateManager, it overrides disk entirely — the on-diskown/private/private_key.pemis neither generated nor read.CertificateAuthoritydoes not support a provider (its signing paths are openssl reading a key file); it does supportprivateKeyPassphrase.