

In contrast to the rules in the Citrix policy the endpoint’s rules are even preconfigured, and in such a way that redirection of smart card readers is disabled. However, the thinking that the endpoint comes first has led to the situation that the ICA client also has redirection rules. When I connect a smart card reader to a thin client I most definitely want to use it in the remote session, not on the device itself. While this just might be true for fat clients it is downright ridiculous for thin clients. Smart Card Redirection Rule on the End User Deviceįunnily, some people seem to think that smart card readers are typically used on the end user’s device, not the virtual desktop. Make sure there is no deny rule overriding it. Smart Card Redirection Rule in Citrix PoliciesĪdd a redirection rule for smart cards to the Citrix policy setting ICA -> USB Devices -> Client USB device redirection rules: Allow: Class=0b # smart cards Allow USB Device RedirectionĬonfigure a Citrix user policy to allow USB device redirection by setting ICA -> USB Devices -> Client USB device redirection to allowed. The following chapters elaborate on these points.
Microsoft usbccid smart card reader windows#

To auto-map smart card readers like the Reiner SCT or Omnikey devices into virtual desktops we need: We are going to get to that magic, but we have got a bit of configuring to do first.

Smart card readers are USB devices, so the only thing you have to do is plug them into the thin or fat client sitting on your desk and Citrix XenDesktop auto-magically makes them appear in your virtual desktop, right? Wrong.
Microsoft usbccid smart card reader how to#
To save you the pain of having to start from scratch here is my description of how to do it. Given that this is such a basic requirement it is astonishingly hard to implement correctly. Even if you only have a moderately sized VDI deployment chances are high you will face the problem of getting USB smart card readers to work on the virtual desktops.
