Reference Guide
...
Using Hardware Tokens for MFA
Assigning Hardware Tokens
users can assign tokens that have not been assigned before user access to this menu should be restricted by the portal functions rules to assign hardware tokens log in to the kron pam web gui navigate to administration > multi factor authentication click on to add button and select assign hardware token enter the serial number of the hardware token save the configuration