If for some reason, it is not possible to download tokens at all, either automatically or manually, then the last option is to export tokens from the admin or service console & import tokens into users' computers.
Tokens can be exported from the admin console by the administrator or from the service console by the users themselves.
Export a token from the admin console (by the administrator)
A token can be exported and saved as a file. The main purpose of exporting a token is that the token file can be sent to the user by other means and imported into the user's computer so that it will be used at offline logon.
To export a user's token, locate the token in the user's account
Click the token's context menu
Select "Export"
Select the Application with that the token will be used, and enter a password to be used to encrypt the token file.
Click "Export" to export the token
The token file "TokenData.dat" should be automatically downloaded and saved on the local hard drive.
Export a token from the service console (by the user)
Locate the token to be exported
Click its context menu
Select "Export Token"
Select the Application with that the token will be used, and enter a password to be used to encrypt the token file
Click the "Export" button to export the token
The token file "TokenData.dat" should be automatically downloaded and saved on your local hard drive.