18.13. Smart Cards

18.13.1. How to Enable Smart Card Redirection on a Per-Connection Basis
18.13.2. How to Set Up Smart Card Login for Windows

In addition to normal Sun Ray smart card functionality, such as hotdesking, the Windows connector enables additional smart card functionality, such as the following:

For this purpose, the Windows connector uses the smart card services on the Sun Ray server and smart card middleware on the Windows system. See Chapter 8, Smart Card Services for more information about the smart card services provided with Sun Ray Software.

See Microsoft's Smart Card documentation at: http://technet.microsoft.com/en-us/library/dd277362.aspx.

18.13.1. How to Enable Smart Card Redirection on a Per-Connection Basis

Smart card redirection is disabled by default. To enable smart card redirection, use the -r scard:on of the uttsc command.

18.13.2. How to Set Up Smart Card Login for Windows

This procedure describes how to set up smart card login for Windows.

  1. Set up Active Directory and Certification Authority (CA) on the Windows system.

  2. Install the smart card middleware product on the Windows system.

    Note

    If you use ActivClient middleware, set the Disable PIN Obfuscation option to Yes through the ActivClient user console on the Windows system.

  3. Enroll the necessary certificates onto the smart card using either a Sun Ray token reader or an external smart card reader connected to the Windows system.