Yes. All mobile credentials are securely stored in an encrypted database on the local mobile device. The solution employs a combination of symmetric and asymmetric encryption keys, incorporating local device attributes to ensure device uniqueness. All primary key information is safeguarded within Hardware Security Modules (HSMs).
Each credential is digitally signed by the issuing organization, preventing any tampering with credential data. Mobile credentials are stored in a specialized security database on the user's mobile device, utilizing FIPS 140-2 encryption. Additionally, each mobile device's local database encryption key is securely stored within the device’s Trusted Platform Module (TPM).