Keychain Access app does not refresh when Smartcard is unplugged and re-plugged
On macOS 10.13 or later, if you are using a TokenD driver, the Keychain Access app does not refresh when you unplug and re-plug in a smart card/smart card reader, and the Mac client cannot obtain the update status for the smart card. Because of this issue, the following problems might occur in Horizon Client on macOS 10.14 or later:
-
Smart card authentication does not work after you unplug and re-plug in a smart card/smart card reader.
-
Smart card redirection might not work after you unplug and re-plug in a smart card/smart card reader several times.
-
The Disconnect user sessions on smart card removal option in Horizon Administrator does not work.
-
The smart card removal policy on the agent machine might not work.
Workaround: Switch to the CryptoTokenKit driver on macOS 10.14 or later. If you want to continue using the TokenD driver, for the smart card authentication issue, quit both Keychain Access and the Horizon Client app, relaunch Horizon Client, and perform smart card authentication again, making sure that Keychain Access is not launched. For the smart card redirection issue, reboot the Mac client machine, launch Horizon Client, and perform smart card authentication again, making sure that Keychain Access isn't launched. There is no workaround for the smart card removal policy issue with a TokenD driver.