Can the keystore be generated by a Hardware Security Module (HSM) and stored and managed by the HSM?

[nathanaw]

I refer to https://docs.apigee.com/api-platform/system-administration/keystores-and-truststores

1. Where are the TLS keystores and truststores stored at? In Cassandra Database?
2. Are these keystores and truststores stored in a secure fashion where it is encrypted and hashed?
3. How can we further enhance the security of these private keys by storing in tamperproof memory?
4. Can the keystore be generated by a Hardware Security Module (HSM) and stored and managed by the HSM?
5. If none of the above, when will this be implemented in the roadmap?

Thank you.

Nathan Aw (Singapore)