Best practices for storing (private) keys on servers?

1

AWS CloudHSM

#Security & Privacy #Network & Admin #Password Management 5 social mentions

What I'm really trying to understand from a high level is how private key management is done with large server farms that terminate TLS. Do they share private keys? Do they issue multiple certs for example.com bound to different private keys? Are there single points of failure? I'm kinda clueless about a lot of the "in the large" considerations.