The second factor in AD and the use of ACOS3 smart cards?

Question

Active Directory

We are going to implement the second factor in AD. Preliminarily, the choice fell on certificates on smart cards. Certificates will be issued on the internal MS CA. The question is:
1. Is it possible to use ACOS3 smart cards for the second factor without additional software, but only using standard Windows tools?
2. If it is not possible to do this with this smart card, then what is the best smart card for this purpose?

Answer 1

And how are you going to read the card when you log in?
Usually, tokens are used for these purposes.