[NTLUG:Discuss] hardware tokens + OpenVPN

[Richard]

Can anyone recommend hardware tokens to use with OpenVPN?  I'm looking 
for a way to issue a little device that gives a code that a VPN user 
would use when attaching to the VPN.   Is that little device called a 
hardware token? 

Ultimately I want to have a physical device that can be retrieved from 
VPN users upon termination of VPN privileges as well as a certificate 
that can be revoked on the server side.

Am I asking the correct questions?

-- 
Richard