Two-factor authentication cannot be configured because DirectAccess is not configured to use computer certificates for IPsec ...