You can run the WiKID token on any USB device. Since the WiKID client
uses asymmetric cryptography instead of a shared secret, there is no
need to assign a particular token to each user. The keys are generated
on the device and a key pair swap is performed as part of the
registration process which can be automated using AD credentials on
your LAN with the ASP scripts we provide.
So you could put the Cisco VPN client and the WiKID token onto a USB
drive and hand them out like candy. Then direct the users to the ASP
scripts on your LAN and have them set up their tokens.
I like the idea of having the token and the VPN client on the same USB
token. I wonder if there are security risks though of allowing the
users to use any windows pc. They could plug into a malicious machine.
BTW, with the WiKID J2SE client, you can use Mac and Linux too and each
user could have more than one token.