Genz,
It is not taking longer than it should in my opinion, only longer than I would like. Steven & co. artificially raised expectations on the timing and it has given the perception of a slow rate of adoption. Old solutions are really tough to displace once they become woven into the fabric of an organization. I am speaking purely on opinion, but I would guess a big problem has been transition. Few organizations replace all computers at a time and this creates the need to support legacy solutions and any new solutions. Additionally, any new technology and especially hardware security are going to get special attention. Who wants to make a fundamental mistake on security? These solutions are slowly becoming time-tested and there should be a certain inevitability of moving to a higher standard of security. Additionally, broader support and recognition will only serve to further increase the pace of change.