I recently purchased a personal signing certificate from GlobalSign - it wasn't cheap either.
It arrived yesterday. GlobalSign gave me a "blank" USB security token device - a SafeNet eToken 5100. Unfortunately the user-experience is terrible. It requires its own special driver instead of using Microsoft's own standard USB security token driver or emulating a smart-card device. The UI is horribly designed and covered in logos. It's also impossible to get drivers directly from SafeNet / Gemalto, they're distributed by the CA (in this case, GlobalSign). I had issues with the driver's background service refusing to start and my Windows logon-screen now has 6 extra buttons for duplicate token devices even when the USB token isn't plugged in.
GlobalSign also requires the use of Internet Explorer on Windows (not even Edge) to provision the USB token because it uses the Windows Certificate provisioning ActiveX control - you're SOL if you're on Linux or Mac, but at least after the token is provisioned you can use the token with a Mac. This provisioning process is what puts my private-key and the CA-issued cert on the token.
I would like to extract my information from the token and move it to a better-implemented device, such as another USB token that doesn't require special drivers, similar to the experience I had with my old employer's smartcard-based PKI).
What options do I have?