Procedure
1 Pair the mobile device with the smart card reader, according to the documentation provided by the
manufacturer of the reader.
If your iOS device has a 30-pin connector, you can plug the smart card reader into the connector. For
iPad Air and iPhone 5S, which have Lightning interfaces, you must use a 30-pin adapter to plug the
smart card reader into the device's 30-pin connector.
2 Configure the smart card removal policy.
Option Description
Set the policy on the server
If you use View Administrator to set a policy, the choices are to disconnect
users from View Connection Server when they remove their smart cards or
to keep users connected to View Connection Server when they remove
their smart cards and let them start new desktop or application sessions
without reauthenticating.
a In View Administrator, select View Configuration > Servers.
b On the Connection Servers tab, select the View Connection Server
instance and click Edit.
c On the Authentication tab, select or deselect the Disconnect user
sessions on smart card removal check box to configure the smart card
removal policy.
d Click OK to save your changes.
e Restart the View Connection Server service to make your changes take
effect.
If you select the Disconnect user sessions on smart card removal check
box, Horizon Client returns to the Recent Connections screen (
Horizon Client 3.0) or Recent screen (Horizon Client 3.1 and later) when
users remove their smart cards.
Set the policy on the desktop
If you use the Group Policy Editor (gpedit.msc), you have the following
possible settings: no action, lock workstation, force log off, or Disconnect if
a Remote Desktop Services session.
After you open gpedit.msc in the desktop operating system, go to
Windows settings > Security settings > Local policies > Security options >
Interactive logon: smart card removal behavior. Run the
gpupdate /force command after you change the configuration to force a
group policy refresh.
Using Embedded RSA SecurID Software Tokens
If you create and distribute RSA SecurID software tokens to end users, they need enter only their PIN, rather
than PIN and token code, to authenticate.
Setup Requirements
You can use Compressed Token Format (CTF) or dynamic seed provisioning, which is also called CT-KIP
(Cryptographic Token Key Initialization Protocol), to set up an easy-to-use RSA authentication system. With
this system, you generate a URL to send to end users. To install the token, end users paste this URL directly
into Horizon Client on their client devices. The dialog box for pasting this URL appears when end users
connect to View Connection Server with Horizon Client.
After the software token is installed, end users enter a PIN to authenticate. With external RSA tokens, end
users must enter a PIN and the token code generated by a hardware or software authentication token.
The following URL prefixes are supported if end users will be copying and pasting the URL into
Horizon Client when Horizon Client is connected to an RSA-enabled View Connection Server:
n
viewclient-securid://
Using VMware Horizon Client for iOS
10 VMware, Inc.