Easier self-enrollment
With this new feature, the IT department no longer needs to create certificates and enroll tokens on users’ behalf, even if they don’t have a token to log in to their computer, such as on their first day of work.
Instead, the users will be able to enroll their own tokens directly on the Windows login screen, either with the help of an OTP (one-time password) or if they have a smartphone enrolled with a certificate.
This is perfect for enrolling large numbers of users. By letting all users pick up an empty token and batch-sending OTPs to all users, IT can save enormous amounts of time when deploying certificate-based authentication.