The main auth is a certificate auth via a CA(certificate authority). A IT department could backup your key but that wouldn't make sense for security. Ideally you would have them generate a new certificate to put on your new card for you. At the same time they would revoke your previous certificate at the CA as someone could have it.