• Use the encryption-settings tool with the export subcommand to export the definition to a file.
    $ bin/encryption-settings export --id F635E109A8549651025D01D9A6A90F7C9017C66D \
      --output-file /tmp/exported-key
    Enter the PIN to use to encrypt the definition: 
    Re-enter the encryption PIN:
    Successfully exported encryption settings definition 
    F635E109A8549651025D01D9A6A90F7C9017C66D to file /tmp/exported-key