User manual

Table Of Contents
Configure Smart Card Authentication for Mobile Clients
Configuration tasks include connecting and pairing the card reader with the mobile device and setting the
smart card removal policy.
Prerequisites
n
Verify that you are using the correct version of the client, desktop agent, server, mobile device
operating system, smart card reader, and smart card. See “Smart Card Authentication Requirements,”
on page 9.
n
If you have not already done so, perform the tasks described in "Prepare Active Directory for Smart
Card Authentication," in the View Installation document.
n
Configure View servers to support smart card use. See the topic "Configure Smart Card
Authentication," in the View Administration document.
Procedure
1 Pair the mobile device with the smart card reader, according to the documentation provided by the
manufacturer of the reader.
If your iOS device has a 30-pin connector, you can plug the smart card reader into the connector. For
iPad Air and iPhone 5S, which have Lightning interfaces, you must use a 30-pin adapter to plug the
smart card reader into the device's 30-pin connector.
2 Configure the smart card removal policy.
Option Description
Set the policy on the server
If you use View Administrator to set a policy, the choices are to disconnect
users from View Connection Server when they remove their smart cards or
to keep users connected to the desktop while locking the desktop screen.
In View Administrator, go to View Configuration > Servers > View
Connection Server (Edit) > Authentication > Smart card authentication >
Smart card removal policy.
If you select the Disconnect user sessions on smart card removal option in
View Administrator, what happens when a user unplugs a smart card
reader after logging in to a desktop depends on the View version running
on the server. For Horizon 6.0 with View, Horizon Client returns to the
remote desktop and application selection screen and the user can log into
the desktop again without reauthenticating. For View 5.3 and earlier, the
user must reauthenticate to log into the desktop again.
Set the policy on the desktop
If you use the Group Policy Editor (gpedit.msc) you have four possible
settings: no action, lock workstation, force log off, or Disconnect if a
Remote Desktop Services session.
After you open gpedit.msc in the desktop operating system, go to
Windows settings > Security settings > Local policies > Security options >
Interactive logon: smart card removal behavior.
Using VMware Horizon Client for iOS
10 VMware, Inc.