I'm no expert, hardly, but I imagine you can do something custom with
mini-CDs, CDs, floppys, or USB keys that hold the certificate data,
and just set the authenticating machine to run the auto-play through
the authenticating program, with the added benefit that they can
function like a USB dongle-l...

[ more ]