Hi,
The HSM is enabled via DCF record.
All details are available in HSM security reference manual which is not public, and therefore I cannot share this information on public community.
Please enter the ticket at www.nxp.com with your question or look at security reference manual appendix A: security DCF records.
Peter