The key generator in the TeleSec trust center does not store any keys, keys are transferred to the smartcard via encrypted lines in T Systems' security-certified trust center. This completely excludes the possibility of any duplicates, the secret key is therefore located exclusively in the TCOS chip.