I'm in the process of obtaining a code signing certificate from a CA that requires the use of a smart card for the generation of the PKI key pair. However, I would like to be in the possession of the private key, and not depend on a physical device.
So here comes the question, who decides if the private key is exportable, the smart card software implementation, or the requester (CA)? I was thinking maybe I could acquire a smart card that allows for such a thing.
I ask this because I'm trying to figure out a way to get in the possession of my own private key, in the event PKCS #11 is not suitable in the future. I don't need PKCS #11 security.