IPSec RAVPN with Certificate-based Authentication + 2FA

[fatalXerror]

Hi Experts,

I would like to ask if it is possible to have 2FA and certificate at the same time? My 2FA will run via RADIUS protocol, how can I configure it in the tunnel-groups?

Thanks

[fatalXerror]

Also, I do have 3 ASA and above my ASA is a load balancer. Can I use 1 generic certificate for the outside certificate so that once the user tries to connect, they will not ask about untrusted warning?

Thanks