I'm using dnn 4.7, and am building a site for my company, where customers can log in and submit requests and also our internal employees will use it for project management modules, etc.  The nature of our business is such that we work with people's personal information: social security numbers, medical information, etc.

My boss has asked how secure the site is and what else we can do to secure it up.  I was also looking to add some type of 2-factor authentication, something besides username and password.  I've searched in the DNN marketplace and on Snowcovered and don't see to be able to find anything like this.

Is there such a thing as a 2-factor authentication module anywhere out there?  And what else can I do secure my site.

Any help is greatly appreciated, thanks!

Ok, thanks.  After doing a fresh install of dnn 4.7 I saw a new authentication method called Cardspace, but I don't know what this is, and I can't seem to get a lot of information on it.

It looks like it's some type of SSL certificate to authenticate, and this may be what I'm looking for.  Where can I read more about what this is?  Thanks again!