Before adding HSM authentication to your TDE enabled database, perform required backups.

Use PROBKUP to back up the database. See Back Up a Database.

PROBKUP does not back up the keystore file, so you should back it up each time you back up the database. Use an operating system backup utility to back up the keystore (.ks) file. Do not co-locate the keystore backup with the database backup.