USB Smartcard Reader Passthrough on Wyse V10L to XenApp

  • This topic is empty.
Viewing 8 posts - 1 through 8 (of 8 total)
  • Author
    Posts
  • #7296
    karmakoma
    Member
    • Total Post: 73
    • Back Stage Pass
    • ★★★★

    Hello,

    I’m trying to get USB smartcard reader to pass through and become available in a XenApp 6.5 session. The smart card reader contains a certificate for secure authentication to a banking site (ANZ Transactive to be precise).
    When I insert the USB key, Wyse recognises it as “Found a new device “CCID reader” on port 2″, however when I log into the XenApp published desktop I don’t see it.

    I’ve confirmed that the passthrough works on a Windows 7 PC with Citrix Receiver running so I know I have my Citrix policies configured correctly.

    I’m running 7.1_033 of WTOS

    Is this passthrough not possible?

    Thanks!

    #22198
    ConfGen
    Keymaster
    • Total Post: 10696
    • Jedi Master
    • ★★★★★★★

    Are you mapping the reader in your wnos.ini?

    CG

    #22204
    karmakoma
    Member
    • Total Post: 73
    • Back Stage Pass
    • ★★★★

    Do I simply need to add this line?

    SessionConfig=ALL Smartcards=yes

    #22208
    ConfGen
    Keymaster
    • Total Post: 10696
    • Jedi Master
    • ★★★★★★★

    That should do the trick, yes.

    CG

    #22216
    karmakoma
    Member
    • Total Post: 73
    • Back Stage Pass
    • ★★★★

    Hi,

    I added that entry to my wnos.ini

    After restart I receive the following info in system information

    6: USB: Found a new device “CCID reader” on port 2
    17: Accessing system profile …
    18: Checking Software ftp:/wnos/VL10_wnos …
    19: Contacting SNTP [10.32.0.1] …
    20: This card is not supported
    21: ATR: 3b 7d 94 00 00 80 31 80 65 b0 83 11 48 c8 83 00 90 00

    I contacted support and they suggested the following:
    You will need to specify a command in your existing INI file to redirect the device.
    During the detection when you plug the USB SC in, under the event log, it will come up as Found new device….” and also will give you a device detail reading, showing the PID, VID etc.
    Note this down.
    Then add the following command to your existing INI file

    Device=VUSB ForceRedirect=(specify the device details that you have obtain from the above) Type=HDX

    Reboot your terminal so that the new commands take effect.
    Plug your device in, boot up the terminal and connect to your session.

    This brought up the same message and with either config I am not able to see the smartcard in my session.

    #22220
    ConfGen
    Keymaster
    • Total Post: 10696
    • Jedi Master
    • ★★★★★★★

    For me it looks like the card reader is recognized and mapped in the session. But only the card itself is not supported.
    Which card are you using?

    CG

    #22224
    karmakoma
    Member
    • Total Post: 73
    • Back Stage Pass
    • ★★★★

    Hi,

    Success! The smart card is a GEMSAFE by GEMALCO. I had to install the card reader software on my Citrix XenApp server and then it was able to read the card and subsequently ANZ Transaction was able to read the certificate.

    Currently I’m using the command Smartcards=yes in the wnos.ini file. As I have other smartcards I need to setup should I use this option instead of the ForceRedirect command suggested by support? These cards will be used as secure authentication to external sites and not as domain signin cards.

    Thank you!

    #22230
    ConfGen
    Keymaster
    • Total Post: 10696
    • Jedi Master
    • ★★★★★★★

    I have never success with ForceRedirect and smartcards.
    I would stick with smartcards=yes

    CG

Viewing 8 posts - 1 through 8 (of 8 total)
  • You must be logged in to reply to this topic.