Ondrej Sevecek's English Pages

Hello!
Great article, but I have a question. How do you manage backup/restore when using smartcard? HSM have this functionality builtin (without exposing the private key), but not smartcards.
One way could perhaps be to create a soft certificate in Windows, export to pfx, import the pfx to a smart card and then use that certificate on the smartcard when installing the CA. That way you have the backup (the pfx file), but the private key is more exposed then if it is was generated directly on the smart card itself.
Do you have any more information or tips about this?