Note – Unless your Windows environment is configured to perform PIN-based logins (either via a Microsoft Certificate Server infrastructure or via middleware) you should disable the Allow Smart Card Logon option for your Citrix Connection. It is important to note that this does NOT disable the smart card channel for use with other smart card-aware applications; it is just a very simple way to test the channel.
Required Reading/Other Resources
Smart card support in a Citrix environment depends on more than just the communication channel being established. Out-of-the-box Citrix smart card support is limited to logins only. Unfortunately, smart card-based logins are not trivial and require a fair amount of work to ensure proper operation. For more information on configuring the Windows environment for smart card logins see the following Microsoft article:
http://support.microsoft.com/default.aspx?scid=kb;en-us;257480
For information on enabling Smart Card Logon with Third Party Certification Authorities (such as would be the case with the Common Access Card) please see the following Microsoft Knowledge Base article:
http://support.microsoft.com/default.aspx?scid=kb;en-us;281245
Administrators of Citrix environments must configure Citrix to allow other applications, such as Outlook, middleware utilities, etc., to use the smart card channel. Use the SCCONFIG utility. For more information on using smart cards and Citrix please see the Citrix Advanced Concepts Guide.
http://support.citrix.com/servlet/KbServlet/download/2951-102- 9534/Feature_Release_3_Advanced_Concepts.pdf
10 Sun Ray, Smart Cards, and Citrix • May 2004
