From your description it sounds more like process changes were needed rather than hardware. If the sensitive data is all in a web app, you don&#x27;t really need pre-boot authentication, and could even allow windows to automatically sign in. I&#x27;m guessing you exposed your web app to the internet with 2 factor for the iPad, you could have done the same thing for windows clients and eliminated the VPN.