ZoltanSarosi (Customer) asked a question.

Is there a safe token exchange/renewal/issuing method in RSA AM to make sure that the one who receives the hardware token is the one it was intended to assuming no personal handover is possible?

There must be some kind of method for this. How do large international enterprises do this task? What if the employees already have a certificate maybe on a smart card, could it be used for the authentication of the user before the HW token gets activated? Or use the cellphone to send an SMS with a code, or use of an Authenticator-app?