I have recently implemented a RSA SecurID infrastructure to provide secure two-factor authentication over both local login to servers and workstations and also EAP VPN authentication.  This was initially using SID700 tokens and worked brilliantly.  Since then we have purchased a number of SID800 tokens which have USB connectors built-in to automatically passthrough the code on the display.

Unfortunatly I have been unable to get them to fully integrate with the logon GINA and still allow full VPN EAP support, until now!

There is not a lot of documentation around doing this with the SID800 tokens so below is the highlevel overview of what I have installed to get them to work, in order:

• Microsoft USB CCID hardware drivers
• RSA Authentication Agent 6.1
• RSA Authentication Agent 6.1.2 patch
• RSA Authenticator Utility

If anyone would like further details please drop me an email and I will do my best to help you out.