I'm not sure EEPC6 supports this token?
Yeah, its the first one on the list ActivIdentity/CAC PKI Smart card.
It works fine, the only problem is a after you have done a recovery to password only token, how to set it back.
A heads up for anyone else with this query.
Currently there is no function to change the authenication type back again, unless you delete the user and recreate(this is not proven either), which isnt an option if you are pulling in via security groups/OU.
V5 had the option on pre-boot screen to select token type, this has been removed in V6