Timestamping Authority requires restoring the HSM settings with the tsactl import-nshield command.