Installation and Setup Guide

Additional Smart Card Authentication Requirements
In addition to meeting the smart card requirements for Horizon Client systems, other Horizon components
must meet certain configuration requirements to support smart cards.
Connection Server and
security server hosts
An administrator must add all applicable Certificate Authority (CA)
certificates for all trusted user certificates to a server truststore file on the
Connection Server host or security server host. These certificates include
root certificates and must include intermediate certificates if the user's
smart card certificate was issued by an intermediate certificate authority.
For information about configuring Connection Server to support smart card
use, see the View Administration document.
Active Directory For information about tasks that an administrator might need to perform in
Active Directory to implement smart card authentication, see the View
Administration document.
Configure Smart Card Authentication
To use a physical smart card, you must connect and pair the card reader with the device and set the
smart card removal policy.
Prerequisites
Verify that the client device, remote desktops, RDS hosts, Connection Server host, and other Horizon
components meet the smart card authentication requirements. See Smart Card Authentication
Requirements.
Procedure
1 Install the smart card middleware app on the device.
2 Pair the device with the smart card reader, according to the documentation provided by the
manufacturer of the reader.
If you are using a Bluetooth smart card reader, a randomly generated number is displayed on both
devices during this process. When you confirm that the numbers match, you establish secure
Bluetooth communication.
VMware Horizon Client for Android Installation and Setup Guide
VMware, Inc. 10