diff --git a/doc/arm/notes.xml b/doc/arm/notes.xml
index 6f01389949..63351ad89e 100644
--- a/doc/arm/notes.xml
+++ b/doc/arm/notes.xml
@@ -179,6 +179,13 @@
     <itemizedlist>
       <listitem>
         <para>
+          When using native PKCS#11 cryptography (i.e.,
+          <command>configure --enable-native-pkcs11</command>) HSM PINs
+          of up to 256 characters can now be used.
+        </para>
+      </listitem>
+      <listitem>
+	<para>
           NXDOMAIN responses to queries of type DS are now cached separately
           from those for other types. This helps when using "grafted" zones
           of type forward, for which the parent zone does not contain a