When configuring Entrust nShield for high availability, add a nethsm_imports section with multiple HSM configurations separated by -----. For example:

[nethsm_imports]
local_module=0
remote_ip=1.2.3.4
remote_port=9084
remote_esn=7321-03E0-D147
keyhash=00681b15d0c79af58b6ac3728c709f0b95940a50
privileged=0
privileged_use_high_port=0
ntoken_esn=
-----
local_module=0
remote_ip=1.2.3.5
remote_port=9084
remote_esn=1A2A-03E0-D147
keyhash=292c91cc2028f4a827d3796f3865075eea3db130
privileged=0
privileged_use_high_port=0
ntoken_esn=
-----
local_module=0
remote_ip=1.2.3.5
remote_port=9124
remote_esn=E1E3-B477-1234
keyhash=97be7af0c16777fcba388e835d46b2e2273c506f
privileged=0
privileged_use_high_port=0
ntoken_esn=
-----
local_module=0
remote_ip=1.2.3.4
remote_port=9124
remote_esn=4C71-9CAA-1234
keyhash=5f12e4b679f3f839b5180545a421f2c5cec5a110
privileged=0
privileged_use_high_port=0
ntoken_esn=