Horizon client not prompting for smartcard

[murbot]

We have an older VDI environment where smart card behavior is as expected. We have a new VDI environment where smart card behavior is not as expected. When we open the Horizon client, we have both environments available. Insert a smart card, select the old environment and we're prompted for a PIN. Insert a smart cart, select the new environment in the same (or different) client session and we're prompted for a username and password. It's not getting to the individual pools so it can't be a pool setting.

Both environments have the same settings on each connection server.  Connection server settings > Authentication tab > View Authentication > Smart card auth for users (and admins) are both set to Optional.

Thanks for any help or suggestions.

Both env on different ESXi's, but same version - 6.0.0

Old env - Persona mgt

New env - UEM

Old env - agent, connection, security and composer servers - 7.1

New env - agent, connection, security and composer servers - 7.3.2

[pengwang]

Hi murbot,

It might configuration related, Have you tried Horizon clients in different OS? e.g. Window, Linux etc and how about enable smartcard auth for view admin and use web brower connect to see if smartcard auth works?

[murbot]

Thanks for the reply Pengwang. We've tried connecting from Windows 10 and Windows 7 and Mac with the same failure. I haven't found a way for HTML (Browser) access to work with smart cards. Horizon 7 HTML Blast and smart cards

Also tried forcing smartcards. But it fails to see the card when I select the newer environment. Same scenario. Open Horizon client, select env 1 and it prompts for a card. In the same Horizon client on the same machine, just a moment later, select env 2 and it will not see the card. The Host sees the card, env 1 sees the card, but env 2 does not.

[AFA1K]

Is this a Windows 10 VM that you connect to?  If yes, what version of Windows 10 is it?

[murbot]

@ AFA1K - Thanks. Windows 7. Windows 10 was no fun at all with VDI so we're sticking with Windows 7 for now.

[pengwang]

HI Murbot,

I meant accessing the view admin UI through the browser, to enable smartcard auth for administrators, log in https://connection server/admin -> View configuration->servers->Authentication->View administrator authentication->smartcard auth for administrators->allow. and then relog in by the browser to see if SC works, It looks like backend env issue per your comment, thanks.