Nih Piv Card Reader For Mac Not Recognized
I just purchased SCM SCR3500 Smart Card reader so I am trying to use centrify to access AKO and email with my CAC. 1) I checked to make sure my Mac was finding the reader by going to About this mac --> system report --> hardware --> USB --> and I see the SCR3500 reader (it says version 2.02). Solution 1-2: If you have an SCR-331 CAC Reader and using Vista, Windows 7, or 8, and are still having problems getting the reader to be recognized by ActivClient, or your CAC reader shows up as STCII Smart Card Reader follow these instructions for updating the firmware on the reader.
Even if you only have a moderately sized VDI deployment chances are high you will face the problem of getting USB smart card readers to work on the virtual desktops. Given that this is such a basic requirement it is astonishingly hard to implement correctly. To save you the pain of having to start from scratch here is my description of how to do it.
Basics
Nih Piv Card Reader For Mac Not Recognized
Smart card readers are USB devices, so the only thing you have to do is plug them into the thin or fat client sitting on your desk and Citrix XenDesktop auto-magically makes them appear in your virtual desktop, right? Wrong. We are going to get to that magic, but we have got a bit of configuring to do first. To auto-map smart card readers like the Reiner SCT or Omnikey devices into virtual desktops we need:
- USB redirection must be allowed
- A redirection rule for the device type smart card via Citrix policies
- A redirection rule for the device type smart card on the end user device
- The USB redirection module must be enabled on the end user device (applies to some Linux thin clients)
- Smart card hooks may have to be removed on the virtual desktop
- The Windows Smart Card service needs to be started
The following chapters elaborate on these points.
Allow USB Device Redirection
Configure a Citrix user policy to allow USB device redirection by setting ICA ->USB Devices ->Client USB device redirection to allowed.
Smart Card Redirection Rule in Citrix Policies
Add a redirection rule for smart cards to the Citrix policy setting ICA ->USB Devices ->Client USB device redirection rules:
Make sure there is no deny rule overriding it.
Piv Card Reader Driver
Smart Card Redirection Rule on the End User Device
Funnily, some people seem to think that smart card readers are typically used on the end user’s device, not the virtual desktop. While this just might be true for fat clients it is downright ridiculous for thin clients. When I connect a smart card reader to a thin client I most definitely want to use it in the remote session, not on the device itself.
Inside of each and every.NEF file is a.JPEG file. Nef reader for mac. Photoshop does a similar thing unless you have the appropriate RAW plug-in.
However, the thinking that the endpoint comes first has led to the situation that the ICA client also has redirection rules. In contrast to the rules in the Citrix policy the endpoint’s rules are even preconfigured, and in such a way that redirection of smart card readers is disabled. Obviously, we need to get rid of this.
Thin Clients with Linux ICA Client (Citrix Receiver)
USB redirection rules are stored in the file usb.conf which is located in the directory /setup/ica on Fujitsu eLux thin clients. The default content of usb.conf includes the line:
Either delete that line or comment it out by putting a hash (#) in front of DENY.
Windows ICA Client (Citrix Receiver)
On a Windows machine USB redirection rules are stored in the registry value HKLMSoftwareCitrixICA ClientGenericUSBDeviceRules. The format of that multiline string is identical to the file usb.conf on Linux. As described above locate the entry that denies smart card redirection and either delete it or comment it out.
Enable USB Redirection Module (Linux Thin Clients)
Some Linux thin clients have a modular ICA client. Thus it is possible that the component for accessing XenApp and XenDesktop is installed, but the HDX Plug-n-Play module is missing. In case of eLux make sure to install HDX Plug-n-Play USB 2.0.
Adobe reader download. For instructions, see Install an older version of Adobe Reader on Mac OS. Double-click the.dmg file. (If you don't see the Safari Downloads window, click Finder > (User Name) > Downloads.) Double-click Install Adobe Acrobat Reader DC to start the installation. Jun 07, 2018 Hello, I have Mac OS Sierra version 10.12.6 and every time I try opening a PDF with Adobe the application image will pop up on my dock but nothing appears on the screen. Announcement for those of you using Mac OS X 10.6 (Snow Leopard) and 10.7 (Lion): Acrobat and Reader will be ending support for these operating systems after the next quarterly update, expected in. Adobe has tested the latest versions of Adobe Creative Cloud applications for reliability, performance, and user experience when installed on Intel-based systems running macOS Sierra (version 10.12). The latest versions of all Creative Cloud products are compatible.
Optionally Remove Smart Card Hooks
Piv Card Reader For Computer
If you have followed the steps above you have done everything that is required to get smart card readers working in your virtual desktops – theoretically. In practice it can happen that the readers do not work reliably. In that case Citrix’s smart card hooks may interfere with the redirection. This can be resolved by deleting the hooks. To do that delete the following registry keys on the virtual desktop:
- HKEY_LOCAL_MACHINESOFTWARECitrixCtxHookAppInit_DllsSmart Card Hook [32-bit and 64-bit systems]
- HKEY_LOCAL_MACHINESOFTWAREWow6432NodeCitrixCtxHookAppInit_DllsSmart Card Hook [64-bit systems]
Windows Smart Card Service
Make sure the Windows Smart Card service is started on the virtual desktops or all of the above will have no effect.
Tested Platforms and Devices
I have tested this configuration with Citrix XenDesktop 5.6. The virtual desktops were running Windows 7 x64 with the XenDesktop VDA 5.6.200. Smart card readers tested were Reiner SCT cyberJack e-com and Omnikey CardMan 3121.
More Information
CTX132716: Case Study: Preventing or Allowing Mapping of Specific USB Devices to Virtual Desktops
CTX129558: How to Redirect USB Devices in XenDesktop