You can create a virtual smart card to use when you log in to a server and connect to a remote desktop. With a virtual smart card, you do not need to connect a traditional smart card reader to the iOS device.

One virtual smart card can hold only one certificate. If you have different certificates for multiple Horizon environments, you can create multiple virtual smart cards, one for each Horizon environment.


Use the Purebred app to create a derived credential and provision the credential on the iOS device.


  1. Tap Settings at the bottom of the Horizon Client window.
  2. Tap Derived Credentials and then tap Create new virtual smartcard.
  3. Enter and confirm a PIN for the virtual smart card.
  4. Tap Continue and import the derived credential from the Purebred key chain.
    1. Tap PIV Authentication Certificate.
    2. Select the Purebred Key Chain location.
    3. Select the derived credential to import.
  5. Tap Done to create the virtual smart card.

    The derived credential appears in Settings window.

  6. Toggle the Use Derived Credentials setting to on.
  7. If you need to create another virtual smart card for a different Horizon environment, tap Create new virtual smartcard and repeat these steps.

What to do next

Use the virtual smart card when you log in to the server and connect to a remote desktop. The process is the same as when you use a physical smart card. See Connect to a Remote Desktop or Application.


If you enter the wrong PIN more than five times when using a virtual smart card to authenticate, the virtual smart card is removed and you must create a new virtual smart card.