Citrix Receiver for Mac supports smart card authentication in the following configurations:
About smart card authentication to NetScaler
When using a smart card to authenticate a connection when there are multiple usable certificates on the smart card, Citrix Receiver for Mac prompts you to select a certificate. Upon selecting a certificate, Citrix Receiver for Mac prompts you to enter the smart card password; once authenticated, the session launches.
If there is only one suitable certificate on the smart card, Citrix Receiver for Mac uses that certificate and will not prompt you to select it. However, you must still enter the password associated with the smart card to authenticate the connection and to start the session.
Specifying a PKCS#11 module for smart card authentication
Note: Installing PKCS#11 module is not mandatory. This section only applies to ICA sessions. It does not apply to Citrix Receiver access to NetScaler Gateway or StoreFront where a smart card is required.
To specify PKCS#11 module for smart card authentication:
- In Citrix Receiver, select Preferences.
- Click Security & Privacy.
- In the Security & Privacy section, click Smart Card.
- In the PKCS#11 field, select the appropriate module; click Other to browse to the location of the PKCS#11 module if the desired one is not listed.
- After selecting the appropriate module, click Add.
Supported readers, middleware, and smart card profiles
Citrix Receiver for Mac supports most macOS-compatible smart card readers and cryptographic middleware. Citrix has validated operation with the following.
- Common USB connect smart card readers
- Activeidentity client version
- Charismathics client version
Supported smart cards:
- PIV cards
- Common Access Card (CAC)
- Gemalto .NET cards
Follow the instructions provided by your vendor’s macOS-compatible smart card reader and cryptographic middleware for configuring user devices.