To use Face ID for user authentication in Horizon Client, you must meet certain requirements.

iPad and iPhone models

Any iPad or iPhone model that supports Face ID, such as iPhone X.

Operating system requirements

  • iOS 11 or later.

  • Add a Face ID scan in the Face ID & Passcode setting.

Connection Server requirements

  • Horizon 6 version 6.2 or a later release.

  • Enable biometric authentication in Connection Server. For information, see "Configure Biometric Authentication" in the Horizon 7 Administration document.

  • The Connection Server instance must present a valid root-signed certificate to Horizon Client.

Horizon Client requirements

  • Set the certificate checking mode to Never connect to untrusted servers or Warn before connecting to untrusted servers. For information about setting the certificate checking mode, see Setting the Certificate Checking Mode in Horizon Client.

  • Enable Face ID by tapping Enable Face ID on the server login window. After you successfully log in, your Active Directory credentials are stored securely in the iOS device's Keychain. The Enable Face ID option is shown the first time you log in and does not appear after Face ID is enabled.

You can use Face ID with smart card authentication and as part of two-factor authentication with RSA SecurID and RADIUS authentication. If you use Face ID with smart card authentication, Horizon Client connects to the server after you enter your PIN and the Face ID login window does not appear.