For smart card authentication to a Windows desktop, the certificate authority (CA) that signs the smart card certificate must exist in the Windows certificate store. If not, you can add the CA to the Windows certificate store.

Prerequisites

Verify that Microsoft Management Console (MMC) has the Certificates snap-in. See "Add the Certificate Snap-In to MMC" in the Horizon Installation document.

Procedure

  1. Start MMC.
  2. In the MMC console, expand the Certificates (Local Computer) node and go to the Trusted Root Certification Authorities > Certificates folder.
    If the root certificate is present and there are no intermediate certificates in the certificate chain, exit MMC.
  3. Right-click the Trusted Root Certification Authorities > Certificates folder and click All Tasks > Import.
  4. In the Certificate Import wizard, click Next and browse to the location where the root CA certificate is stored.
  5. Select the root CA certificate file and click Open.
  6. Click Next, click Next, and click Finish.
  7. If the smart card certificate is issued by an intermediate CA, import all intermediate certificates in the certificate chain.
    1. Go to the Certificates (Local Computer) > Intermediate Certification Authorities > Certificates folder.
    2. Repeat steps 3 through 6 for each intermediate certificate.