Read only doesn't cover what's needed. You need something that holds a keys that cannot be extracted. Ideally, the institution sends it a challenge, it signs the challenge and returns it. You need the keys not to be retrievable.
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments