see comments
From the comments section:
Currently, acceleration only providers can not support key generation without adding suppport for session and object management. For providers such as NCP (Niagara I), this is significant additional overhead just to add RSA and DSA key generation. Ideally, providers such as NCP and DCA could advertise key generation operations w/o having to effectively support their own keystore.