In case folks are curious how we do a similar thing with HSMs to store private keys for encrypted email, I wrote this up a week ago: https://medium.com/ink-different/how-inky-stores-encryption-...
Nice write up. What HSM vendors do you recommend?
Is Apple's Cloud Key Vault a Crypto Backdoor?
21–22 of 22 posts
Re: Is Apple's Cloud Key Vault a Crypto Backdoor?
#22What happens if the HSM decays or malfunctions in some way? Sounds like it's not possible to backup, and no computer/tech will last forever.
There are usually ways securely to backup HSMs to other HSMs.