Hi,
You can use digital certificates and preshared, with no problems.
You only need to create another isakmp policy sequence, with authentication rsa-sig (the default) and another crypto map sequence.
Plus generation of certificates and authentication to CA.
Please rate if this helped.
Regards,
Daniel