This scenario allows ICA session roaming with a smartcard.

in addition to the configuration of the ICA Session, the following settings are necessary:

Check Use local login window and Enable smartcard logon under Sessions > Citrix XenDesktop/XenApp > HDX/ICA Global > Local Logon.

Smartcard Logon


Select the appropriate PKCS#11 module for the smartcard under Security > Smartcard > Middleware.

  • Gemalto/SafeNet eToken
  • cryptovision sc/interface
  • Gemalto IDPrime
  • Athena IDProtect
  • A.E.T. SafeSign
  • Secmaker Net iD
  • Custom PKCS#11 Module

For the CoolKey cryptographic library, plesae refer to the FAQ Using a Custom PKCS#11 Library.