I selected single factor when I encrypted the HDD, and now wonder if I can add a second factor such as a generic USB drive during login at boot-up?
This Knowledge Base Article may be what you are looking for.