Offline Rook CA Private Key Store

hello

while running in a PKI project we will build an offline root CA.
on the security side, it is recommendet to use a HSM module for storing the private key's.

does anyone has the experience if we can migrate the private keys to a hsm module after installing the offline root CA?

thanks.



.