Same as other computer equipment, get another one from tech support and revoke the old one. Or at least, that's how it worked when people still went to the office.

Employees can revoke access for any of their keys/dongles once they realize they are missing. The company can also send an automated warning and auto-expire a key that's not been used for a while.