smart cards as hardware security modules

RouterOS General
1

Hi everyone,
I have a question about mikrotik devices and how to store certificates. The CCR1009 has a sim card sized smart card slot which I would like to use for storing private keys. I would also like to store private keys in devices on other machines, like the CCR1036 which do not have the same slot. My questions are

  1. On the CCR1009, can I use a sim card sized openpgp card. I can generate the private key directly on the card on a different machine. Will this be usable for securing the HTTPS web interface and also SSH access?
  2. On the CCR1036, there is a micro usb port. Can I use a CCID card reader in this. For example a yubikey neo or 4? It can work as a hardware security module.
    If anyone has experience of using the smart card feature in routeros, I would also be interested in hearing what cards you are using and if they work.
    Regards
    Pete
2

does anyone have experience with smartcards in general on routeros? or otherwise. Interested to hear views.
Pete

3

I am interested to know also..