To use the derived credentials feature, you must create a virtual smart card to use when you log in to a server and connect to a remote desktop. One virtual smart card can hold multiple certificates.
Prerequisites
- Verify that the client device, remote desktops, RDS hosts, Connection Server host, and other Horizon components meet the smart card authentication requirements. See Smart Card Authentication Requirements.
- Use the Purebred app to create a derived credential and provision the credential on the client device.
- Verify that the device has a passcode. A passcode is required to create a virtual smart card.
Procedure
- Tap Settings at the bottom of the Horizon Client window.
- Tap Derived Credentials and then tap Create New Virtual Smartcard.
- Perform device authentication.
- If either Touch ID or Face ID is enabled, authenticate with Touch ID or Face ID.
- If neither Touch ID nor Face ID is enabled, authenticate with a passcode.
- Enter and confirm a PIN for the virtual smart card.
- Tap Continue and import the derived credential from the Purebred key chain.
- Tap PIV Authentication Certificate.
- Select the Purebred Key Chain location.
- Select the certificate to import.
- (Optional) To import a digital signature certificate or encryption certificate after you import the PIV authentication certificate, tap Digital Signature Certificate or Encryption Certificate and follow the prompts.
- To create the virtual smart card, tap Done.
The derived credential appears in the
Settings window. The
Use Derived Credentials setting is set to on.
- To create another virtual smart card for a different Horizon environment, tap Create new virtual smartcard and repeat these steps.
