When launching a Citrix session using pass-through with smart card authentication you are prompted for a PIN, even though the initial pass-through authentication to Web Interface works.
Check the following:
1. ssonsvr.exe
Ensure this process is running on the workstation. A known issue is listed here:
http://theether.net/kb/100018
2. Program Neighbourhood
Ensure only the Program Neighbourhood client is installed. Ensure to select Yes to the prompt "Would you like to enable and automatically use your local user name and password for Citrix sessions from this client?"
Ensure the following are checked:
- Select Tools | ICA Settings
- Pass-Through Authentication should be checked
- Use local credentials to logon should be checked
3. APPSRV.INI
Add the following two entries to the [WFClient] section of APPSRV.INI in %SystemDrive%\Program Files\Citrix\ICA Client, any existing profiles in %USERPROFILE%\Application Data\ICAClient, and any redirected Application Data folders
EnableSSOnThruICAFile=On
SSOnUserSetting=On
Ensure there are no existing entries turning these options off.
4. Web Interface Site
From the Access Suite Console:
- Select MetaFrame Presentation Server Management | Suite Components | Configuration Tools | Web Interface | <Web Interface site>
- Select Configure Authentication Methods
- Select Pass-through with smart card
- Click Finish