Tokens are used to generate a key pair

The token used to generate a key pair is inserted into a card reader connected to a PIN entry device. The PIN device is connected in turn to the computers where the operator is using the Certificate Authority application. The device also reads the data off the plastic USB shares that the shareholders have in their possession.