Required reading/other resources – Sun Microsystems and Citrix User Manual
Page 14
10
Sun Ray, Smart Cards, and Citrix • May 2004
Note –
Unless your Windows environment is configured to perform PIN-based
logins (either via a Microsoft Certificate Server infrastructure or via middleware)
you should disable the Allow Smart Card Logon option for your Citrix Connection.
It is important to note that this does NOT disable the smart card channel for use
with other smart card-aware applications; it is just a very simple way to test the
channel.
Required Reading/Other Resources
Smart card support in a Citrix environment depends on more than just the
communication channel being established. Out-of-the-box Citrix smart card support
is limited to logins only. Unfortunately, smart card-based logins are not trivial and
require a fair amount of work to ensure proper operation. For more information on
configuring the Windows environment for smart card logins see the following
Microsoft article:
http://support.microsoft.com/default.aspx?scid=kb;en-us;257480
For information on enabling Smart Card Logon with Third Party Certification
Authorities (such as would be the case with the Common Access Card) please see
the following Microsoft Knowledge Base article:
http://support.microsoft.com/default.aspx?scid=kb;en-us;281245
Administrators of Citrix environments must configure Citrix to allow other
applications, such as Outlook, middleware utilities, etc., to use the smart card
channel. Use the
SCCONFIG
utility. For more information on using smart cards and
Citrix please see the Citrix Advanced Concepts Guide.
http://support.citrix.com/servlet/KbServlet/download/2951-102-
9534/Feature_Release_3_Advanced_Concepts.pdf