When and under what circumstances to I enable the above setting when configuring a Cisco VPN Concentrator 3015 ?

I have a Cisco Concentrator 3015 running Software Rev: Cisco Systems, Inc./VPN 3000 Concentrator Version 3.6.7. We implmented a 2 factor authentication mechanism using Netrust digital certificates stored on Rainbow iKey USB tokens with the Entrust En...