To export a user's private key and certificate chain, call NPKIExportUserKey to create a PFX file. Store the PFX file in a secure place.
For a sample implementation of this task, see ExportUserCerts.