How to generate a unique and uncopyable VPN certificate/key for a specific client hardware device?

The problem is : Nothing prevents the user to copy the certficate/key on a different hardware device and use it from a different hardware device…

Is it possible to generate a really unique certificate taking hardware in consideration ?
Continue reading How to generate a unique and uncopyable VPN certificate/key for a specific client hardware device?