Touch ID Authentication Requirements

To use Touch ID for user authentication in Horizon Client, you must meet certain requirements.

Mac models

Any Mac model that supports Touch ID, for example, MacBook Pro.

Operating system requirements

Add at least one fingerprint in the Touch ID setting.

Connection Server requirements

• Enable biometric authentication in Connection Server. For information, see the Horizon 8 Administration document.
• The Connection Server instance must present a valid root-signed certificate to Horizon Client.

Horizon Client requirements

• Set the certificate checking mode to Never connect to untrusted servers or Warn before connecting to untrusted servers. For information about setting the certificate checking mode, see Setting the Certificate Checking Mode in Horizon Client.
• Enable Touch ID when you connect to the server. After you successfully log in, your Active Directory credentials are stored securely on the Mac client system. The Touch ID option is shown the first time you log in and does not appear after Touch ID is enabled.

You can use Touch ID with smart card authentication and as part of two-factor authentication with RSA SecurID and RADIUS authentication. If you use Touch ID with smart card authentication, Horizon Client connects to the server after you enter your PIN and the Touch ID login screen does not appear.