It sounds like that's exactly how it works (two months ago): https://news.ycombinator.com/item?id=12069784 https://news.ycombinator.com/item?id=12069784 The N

It sounds like that's exactly how it works (two months ago): https://news.ycombinator.com/item?id=12069784 https://news.ycombinator.com/item?id=12069784 The NitroKey HSM requires all previous setup (DKEK?) passwords and PINs. Anecdotal random unnamed vendor? Not so much: They did, with undocumented commands, export the key from the device in an unencrypted format and loaded it into the other model