Checking sign-in…
Admin sign-in required
The smart card console is admin-only.
Copy a Windows certificate to a phone
A certificate that Windows rolled out into the CodeB Key Storage Provider can be handed over to CodeB Wallet, which then answers as a smart card at the PC. The PC keeps its copy. The key travels only encrypted for the phone’s attested hardware key; the server never sees it. Both sides must be signed in as the same account. Test use only.
Hand-over on this site
…
While switched off, the CodeB Key Storage Provider and CodeB Wallet get “feature_off”; open hand-overs cannot continue. Each hand-over ends after 10 minutes; a user can have at most 3 open.
How it works
- On the PC the user picks the certificate in the CodeB Key Storage Provider and signs in; it proves it holds the key and shows a QR code.
- The user scans it with CodeB Wallet, signed in as the same account. The phone creates a wrapping key in StrongBox / TEE and proves it with an Android key attestation.
- The PC encrypts the key for that wrapping key and sends it; the phone imports it into its secure hardware and confirms. The server then deletes the encrypted key.
Hand-overs
| User | Certificate | State | Phone key | Actions |
|---|
No hand-overs yet.