Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
The OpenConnect VPN client ( http://www.infradead.org/openconnect/ ) supports the use of certificates from PKCS#11 tokens. See http://www.gooze.eu/forums/support/howto-connect-to-cisco-anyconnect-vpn-using-openconnect-and-pki-token for details.