Is it possible to distribute EDS using Active Directory?

Question

Active Directory

There is an EDS in the form of a flash drive and the idea was to connect the flash drive to the server and distribute this signature using Active Directory, so as not to produce flash drives and do everything centrally. Is this possible or is it sick fantasies?

As an option, I came across DistKontrolUSB and Donglify solutions. But again, you need to stick several keys so that each user can use the key.

Answer 1

There is such a thing usb over ethernet, it completely solves your problem. But as indicated in the comment, this is formally a compromise of one of the authentication factors, although the token lying around in the accounting department and available to everyone passing by is probably no better.
The question is why in such a scenario there is a token at all and why not put the certificate locally on the computer?