Policy
Smart card authentication
Citrix Workspace
Policy overview
Key metadata and intent for this policy.
Use this policy to control how the client uses smart cards attached to the client device. When enabled, this policy allows the remote server to access smart cards attached to the client device for authentication and other purposes. When disabled, the server cannot access smart cards attached to the client device. Troubleshooting: When using smart cards in a Citrix environment, the smart card device driver must be installed on the server. When using a different operating system on the client machine, it may be necessary to ensure that the smart card device drivers in use interoperate correctly.
Registry values
How enabled and disabled states update the registry.
| Scope | Registry location | Type | Enabled value | Disabled value | Copy |
|---|---|---|---|---|---|
Path Software\Policies\Citrix\ICA Client\Engine\Lockdown Profiles\All Regions\Lockdown\Virtual Channels\Smartcard Value name SmartCardAllowed | REG_SZ | HKLM * HKCU * | HKLM HKCU |
Policy elements
Inputs and configuration options exposed by this policy.
| Scope | Element | Type | Registry mapping | Constraints & behavior | Copy |
|---|---|---|---|---|---|
Allow smart card authentication ID Part_Smartcard_Enable | boolean | Path Software\Policies\Citrix\ICA Client\Engine\Lockdown Profiles\All Regions\Lockdown\Virtual Channels\Smartcard Value name SmartCardAllowed Type REG_SZ | Options: true (*), false () True: Set value = "*" · False: Set value = "" | ||
Use pass-through authentication for PIN ID Part_SmartcardPin_Enable | boolean | Path Software\Policies\Citrix\ICA Client\Engine\Lockdown Profiles\All Regions\Lockdown\Virtual Channels\Smartcard Value name DisableCtrlAltDel Type REG_SZ | Options: true (true,false), false (*) True: Set value = "true,false" · False: Set value = "*" |