How to configure a soft token for second factor authentication (2FA) to ECS Enterprise account. (Jump to solution) If you decide to use soft tokens for authentication to the Entrust Certificate Management Service (CMS), you must install the Entrust IdentityGuard Soft Token application. Supported platforms include the following: I/OS (iPhone, iPad, iPod Touch) : iOS 3.0 or newer.