[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 969
  • Last Modified:

How to stop Smartcards impacting on Anonymous Login via .ica file?

Hi,
I have a .ica file which connects through to a published application on my Citrix farm.  The app is set to connect via anonymous login.  Testing this from one workstation gives the required result with the application being delivered by Citrix as expected.
Copying the same .ica file to a workstation (on the same network) with an integrated smartcard reader on the keyboard causes the following result:
1. Connection is established to Citrix server & splash screen is displayed about connecting to remote computer.
2. Prompt remains on "Checking your credentials" for about  2-3 minutes.
3. Splash screen is displayed again.
4. Windows login prompt is displayed.

(If I enter a valid username/password here then the published application launches)
On the published application I have inherit client config unchecked and passthrough authentication unchecked in PN.
I have tried adding the [Smartcard] section settings to the .ica file (and the appsrv.ini file for connecting through PN) - these have made no difference.
BypassSmartcardDomain=yes
BypassSmartcardUsername=yes
BypassSmartcardPassword=yes

There seems to be a lot of advice on how to get smartcard authentication to work but I've found nothing that works on how to turn it off entirely.

I have tried running it from the workstation with jsut the web client installed and also with PN installed - Same result.

Anyone able to offer any advice?
0
rgmacfarlane
Asked:
rgmacfarlane
1 Solution
 
thegordoCommented:
Hi there

As far as I can remember smart card authentication is part of the client OS (ie Windows) - have you tried disabling the Smart Card service on a client? I think there is also a GPO setting which disables it for PCs which are members of a particular ou...

Hope this helps!
0
 
rgmacfarlaneAuthor Commented:
Hi,
Have now resolved this.  Thanks for comment above - the o/s on the client severely locked down and we were unable to disable the smart cards.

This was resolved by removing the hklm\sw\citrix\CtxHook\AppInit_DLLs\Smart Card Hook key from the Citrix server registry.  
0

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now