Installation and Setup Guide

Table Of Contents
2 Configure the smart card removal policy.
Option Description
Set the policy on the Connection
Server instance
When you set the policy on the Connection Server instance, you can disconnect
users from the Connection Server instance when they remove their smart cards,
or keep users connected to Connection Server when they remove their smart
cards and let them start new desktop or application sessions without
reauthenticating.
a In Horizon Administrator, select View Configuration > Servers.
b On the Connection Servers tab, select the Connection Server instance and
click Edit.
c On the Authentication tab, select or deselect the Disconnect user
sessions on smart card removal check box to configure the smart card
removal policy.
d Click OK to save your changes.
e Restart the Connection Server service to make your changes take effect.
If you select the Disconnect user sessions on smart card removal check box,
Horizon Client returns to the Recent window when users remove their smart
cards.
Set the policy on the remote desktop When you set the policy on the remote desktop, you can use the Group Policy
Editor (gpedit.msc) to configure one of the following settings: no action, lock
workstation, force log off, or Disconnect if a Remote Desktop Services session.
a Open gpedit.msc in the desktop operating system.
b Navigate to Windows settings > Security settings > Local policies >
Security options > Interactive logon: smart card removal behavior.
c Run the gpupdate /force command after you change the configuration to
force a group policy refresh.
Create a Virtual Smart Card
You can create a virtual smart card to use when you log in to a server and connect to a remote desktop.
With a virtual smart card, you do not need to connect a traditional smart card reader to the iOS device.
One virtual smart card can hold only one certificate. If you have different certificates for multiple Horizon
environments, you can create multiple virtual smart cards, one for each Horizon environment.
Prerequisites
Use the Purebred app to create a derived credential and provision the credential on the iOS device.
Procedure
1 Tap Settings at the bottom of the Horizon Client window.
2 Tap Derived Credentials and then tap Create new virtual smartcard.
3 Enter and confirm a PIN for the virtual smart card.
VMware Horizon Client for iOS Installation and Setup Guide
VMware, Inc. 17