Hi Sasha,
Thanks very much for your reply!
The Escrow Gateway seems interesting for some of our customers: where can we grab more information, like the calls for the Credential Provider? The documentation gives some good insights already, but not the details of the calls.
Also i'm not sure this architecture would fit in some use cases, where we need to be able to recover the certificate/key onto another device, such as a smart card.