You have to buy the following product.
KEY-CCM-ADMIN-K9. Its a 300 $ list price and you can run the CTL client (available in the CCM plugins page). Make sure your smartcard services are running prior to running the client. It will prompt you for 1 key at a time. Once you run the client, your cluster will be converted to Mixed mode. Autoregistration also gets disabled. You may rerun the client to convert it back to regular mode.
HTH
Sankar
PS: please remember to rate posts!
Sankar Nair
UC Solutions Architect
Pacific Northwest | CDW
CCIE Collaboration #17135 Emeritus