The export of the encryption keys can be done on any machine capable of logging in to the Sophos SafeGuard Enterprise console. You’ll need an account with security officer privileges to be able to manage the keys you want to export. Depending on your security officer configuration, not all security officer accounts might be able to manage all available keys of your environment.