The Linux VDA uses the same smart card environment with the Windows VDA. Manually configure the smart card environment Sudo /opt/Citrix/VDA/sbin/ctxsmartlogon.sh Insert your smart card, and run the following command to verify that CoolKey supports your smart card:
For information about the CoolKey installation, see Install the smart card driver. If your organization requires some other more advanced smart card, prepare a physical machine with RHEL 7.7 and the CoolKey package installed. YubiKey 4 is an all-in-one USB CCID PIV device that can easily be purchased from Amazon or other retail vendors. In this article, the YubiKey 4 smart card is used as an example to illustrate the configuration. But the number of cards that are formally supported and validated is still limited (see Smart Card Support in Red Hat Enterprise Linux). CoolKey supports four types of smart cards, which are CoolKey cards, CAC, PIV, and PKCS#15.
Ensure that CoolKey supports your smart cardĬoolKey is a widely used smart card driver on RHEL.
Install the Linux VDA software using the RPM package manager or easy install, see the Installation overview section.Īfter the VDA installation is complete, verify that the VDA can register to the Delivery Controller and the published Linux desktop sessions can be launched successfully using password authentication. Install the Linux VDA software on RHEL 7.7 Using a mapped smart card within a Linux VDA session to sign on to Citrix Gateway is not officially supported. Citrix Workspace app for Windows is used.Smart cards supported by CoolKey are used.The Linux VDA is installed on RHEL 7.7.
The availability of pass-through authentication by using smart cards is contingent on the following conditions: For more information, see the Configure the smart card environment section in this article. The Linux VDA uses the same configuration as the Windows VDA for this feature. Use cases include adding a digital signature to a document, encrypting or decrypting an email, or authenticating to a website that requires smart card authentication. You can also use the smart card within the session. This feature is implemented through smart card redirection over the ICA smart card virtual channel. You can use a smart card connected to the client device for authentication when logging on to a Linux virtual desktop session. Monitor Linux sessions in Citrix Director Install Linux Virtual Delivery Agent for Ubuntu manuallyĬonfigure Delivery Controllers for XenDesktop 7.6 and earlier versionsĬlient IME user interface synchronization Install Linux Virtual Delivery Agent for SUSE manually Install Linux Virtual Delivery Agent for RHEL/CentOS manually Quick installation by using easy install (Recommended)