DXZC-AM and DXZC-AMC Manual
Security Edition
www.amulethotkey.com |
20
6.4 Smart card authentication
Applies to DXZC-AMC only.
The DXZC-AMC features an integral smart card reader that
supports 5V, 3V and 1.8V smart cards, including support
for Common Access Card (CAC) smart cards and SIPRNet
hardware tokens.
Important!
Users must always insert smart cards into the
smart card reader with the integrated circuit chip (ICC)
facing down and forward-most. For example, this means
that CAC cards are inserted upside down and with the
chip towards the slot.
Depending on your security requirements, the integral smart
card reader can be configured for
pre-session
or
in-session
authentication:
■
Pre-session authentication:
The smart card is used to
authenticate the user before a PCoIP session is established.
This allows the user to log on directly to their virtual
desktop. After supplying their smart card PIN, they do not
need to separately connect to their remote PCoIP host or log
into their desktop OS (typically Windows) .
The requirements for pre-session authentication are
summarized in Teradici Knowledge Base article
Do PCoIP
zero clients support pre-session smart card authentication?
(15134-299)
. Teradici Knowledge Base articles are available
to registered users at
■
In-session authentication:
The smart card is used to
authenticate the user after a PCoIP session has been
established. That is, the user first connects to their virtual
desktop or remote workstation in the normal way (see
and
. The smart card is then used to
log the user into their desktop OS.
For further information about zero client security, see the
Teradici PCoIP Zero Client and Host Admin Guide
, particularly
the ‘PCoIP Zero Client Security Overview’ and ‘Security settings
Checklist’ sections. This manual is available on the Doc Center
page of the Teradici Support site at
DXZC-AMC front panel:
Flip the smart card over and insert with
integrated circuit chip
(
1
)
facing down and forward-most.
Typically, DXZC-AMC zero clients require no additional
PCoIP
configuration to support smart card user authentication (but
see the note below).
Note:
For CAC cards that support both the modern
Personal Identity Verification (PIV) interface and old-style
CAC (GSC-IS) interface, it is possible to configure zero
clients to prefer the GSC-IS interface. For details see the
Teradici PCoIP Zero Client and Host Admin Guide.
ü
û
1
1
Chip on underside of card