Gateway

Configuring Smart Card Access with the Web Interface

January 8, 2024

Contributed by:

When you configure the Web Interface to use smart card authentication, you can configure the following deployment scenarios in order to integrate Citrix Gateway, depending on how users log on:

If users log on directly to the Web Interface by using Citrix Workspace app and smart card authentication, the Web Interface must be parallel to Citrix Gateway in the DMZ. The server running the Web Interface must also be a domain member.

In this scenario, both Citrix Gateway and the Web Interface perform SSL termination. The Web Interface terminates secure HTTP traffic including user authentication, the display of published applications, and the starting of published applications. Citrix Gateway terminates SSL for incoming ICA connections.
If users log on with the Citrix Gateway plug-in, Citrix Gateway performs the initial authentication. When Citrix Gateway establishes the VPN tunnel, users can log on to the Web Interface by using the smart card. In this scenario, you can install the Web Interface behind Citrix Gateway in the DMZ or in the secure network.

Note: Citrix Gateway can also use the smart card for authentication by using a client certificate.

For more information, see Configuring Smart Card Authentication

The official version of this content is in English. Some of the Cloud Software Group documentation content is machine translated for your convenience only. Cloud Software Group has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Cloud Software Group product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Cloud Software Group, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Cloud Software Group will not be held responsible for any damage or issues that may arise from using machine-translated content.

Configuring Smart Card Access with the Web Interface

January 8, 2024

Contributed by:

January 8, 2024

Contributed by:

Configuring Smart Card Access with the Web Interface

In this article