It is very important to keep the PUK and PIN of a TSE stored securely.
If the TSE is still in state
CREATED, an idempotent request to the SIGN DE API endpoint createTss with the corresponding
tss_id as path parameter will return the PUK of the TSS.
In case the TSE already has a different state, unfortunately there is currently no direct way to read the PUK. In this case, please send us a support ticket with the
tss_id (firstname.lastname@example.org), so that we can coordinate the further procedure.