How to configure local logon (authentication) in Windows using a certificate using Windows tools?

Question

Windows

The task is as follows: to organize regular Windows login (OS: Windows 7 or 8.1) (local authentication, without AD) using a personal user certificate using standard tools. It is advisable to use a USB flash drive as a carrier of key information.
In Google I found the following for smart cards :

Necessary Network Infrastructure Requirements for Smart Card Implementation
Before you begin the smart card implementation process, please note that the following components are required.
...
Active Directory® directory service.

But this is for smart cards. Perhaps, according to certificates, it is still possible to work without AD and without third-party software?
ps Rutoken support says that when using rutoken as a certificate carrier:

By means of Windows it is possible to make authentication IN the DOMAIN! This is not possible on a local machine without additional software.

Answer 1

No