If for some reason, it is not possible to download tokens at all, either automatically or manually, then the last option is to export tokens from the admin or service console & import tokens into users' computers.
Tokens can be exported from the authentication server by the administrator or by the users themselves.
Export a token from the admin console (by the administrator)
Export a token from the service console (by the user)
Locate the token to be exported
Click its context menu
Select "Export Token"
Select the Application with that the token will be used, and enter a password to be used to encrypt the token file
Click the "Export" button to export the token
The token file "TokenData.dat" should be automatically downloaded and saved on your local hard drive.