Prepare Active Directory for Smart Card Authentication.Third-party solutions such as load balancers and gateways can perform smart card authentication by passing a SAML assertion that contains the smart card's X.590 certificate and encrypted PIN. Configure Smart Card Authentication on Third-Party Solutions.Depending on your particular environment, you might need to perform additional steps. To configure smart card authentication, you must obtain a root certificate and add it to a server truststore file, modify the Connection Server configuration properties, and configure smart card authentication settings. Configure Smart Card Authentication on Horizon Connection Server.The certificates in the local certificate store are available to all of the applications running on the client computer, including Horizon Client. When a user or administrator inserts a smart card into a smart card reader, the user certificates on the smart card are copied to the local certificate store on the client system if the client operating system is Windows. For information about whether a particular type of Horizon Client supports smart cards, see the Horizon Client documentation at. To install certificates on smart cards, you must set up a computer to act as an enrollment station. To use smart cards, client machines must have smart card middleware and a smart card reader. The Microsoft TechNet Web site includes detailed information on planning and implementing smart card authentication for Windows systems. See the Horizon 7 Installation document for information about hardware and software requirements for implementing smart card authentication. Smart card authentication provides two-factor authentication by verifying both what the person has (the smart card) and what the person knows (the PIN).
With smart card authentication, a user or administrator inserts a smart card into a smart card reader attached to the client computer and enters a PIN. One type of smart card used by the United States Department of Defense is called a Common Access Card (CAC). The chip, which is like a miniature computer, includes secure storage for data, including private keys and public key certificates. For added security, you can configure a Connection Server instance or security server so that users and administrators can authenticate by using smart cards.Ī smart card is a small plastic card that contains a computer chip.
0 kommentar(er)
