A digital certificate where the private key is generated directly onto a token, from where it cannot be copied. This does not stop it being exported and imported using the PKCS standard #12.
Source: http://identityaccessman.blogspot.com/2006/08/identity-dictionary.html