A computing system comprising: a processor; a memory; and a server synchronization module, the server synchronization module adapted to: attest a first client device (101 1) having a first protected environment isolated from other components of the first client device (101 1); register the first client device (101 1) in association with a synchronization pool identified, by the first client device (101 1), to the computing system, said synchronization pool including an indication of a plurality of client devices (101 n) with which the first client device (101 1) is to be synchronized and to which one or more templates can be sent; receive a first encrypted template comprising a first template encrypted with a first sync wrapping key, SWK 1, within the first protected environment of the first client device (101 1), the first template including biometric reference information of a user; register the first encrypted template in association with a record of the first client device (101 1); and responsive to a request message, MSG24, from the first client device (101 1): send the first encrypted template to a second client device (101 n) included in the synchronization pool, and if the encryption of the first encrypted template is symmetric, send a copy of the first sync wrapping key, SWK 1, that is encrypted with a second sync wrapping key, SWK n, of the second client device (101 n) to the second client device (101 n). a processor; a memory; and a server synchronization module, the server synchronization module adapted to: attest a first client device (101 1) having a first protected environment isolated from other components of the first client device (101 1); register the first client device (101 1) in association with a synchronization pool identified, by the first client device (101 1), to the computing system, said synchronization pool including an indication of a plurality of client devices (101 n) with which the first client device (101 1) is to be synchronized and to which one or more templates can be sent; receive a first encrypted template comprising a first template encrypted with a first sync wrapping key, SWK 1, within the first protected environment of the first client device (101 1), the first template including biometric reference information of a user; register the first encrypted template in association with a record of the first client device (101 1); and responsive to a request message, MSG24, from the first client device (101 1): send the first encrypted template to a second client device (101 n) included in the synchronization pool, and if the encryption of the first encrypted template is symmetric, send a copy of the first sync wrapping key, SWK 1, that is encrypted with a second sync wrapping key, SWK n, of the second client device (101 n) to the second client device (101 n). attest a first client device (101 1) having a first protected environment isolated from other components of the first client device (101 1); register the first client device (101 1) in association with a synchronization pool identified, by the first client device (101 1), to the computing system, said synchronization pool including an indication of a plurality of client devices (101 n) with which the first client device (101 1) is to be synchronized and to which one or more templates can be sent; receive a first encrypted template comprising a first template encrypted with a first sync wrapping key, SWK 1, within the first protected environment of the first client device (101 1), the first template including biometric reference information of a user; register the first encrypted template in association with a record of the first client device (101 1); and responsive to a request message, MSG24, from the first client device (101 1): send the first encrypted template to a second client device (101 n) included in the synchronization pool, and if the encryption of the first encrypted template is symmetric, send a copy of the first sync wrapping key, SWK 1, that is encrypted with a second sync wrapping key, SWK n, of the second client device (101 n) to the second client device (101 n).