Unsolved
1 Rookie
•
22 Posts
0
1237
November 21st, 2022 05:00
Dell Wyse Optiplex 3000 ThinOS - SmartCard not available in RDP session
Hello,
I just configured an Optiplex 3000 ThinOS v9.3
The RDP connection works fine, and I can map an USB drive in the RDP session.
However, we also need to have the SmartCard certificates available in the RDP session. It was not a problem with previous models (4 years ago).
Remark : it is not a SmartCard used to login, but an Identity Card containing official certificate. We should be able to access this certificate in the RDP session.
The RDP server does not block use of SmartCard redirection (all users with PC or old Thin Clients uses it).
In Smart Card Self-Service menu : card reader (ACS ACR 38U-CCID 00/Q) is visible when inserted.
In global session settings : Map SmartCard is enabled.
In RDP session settings : Map SmartCard is enabled.
In login experience : Require SmartCard (for login) is disabled
In RDP, the SmartCard reader (and the ID card also) is not seen at all…
Could you please to solve this issue ?
Thanks in advance for your help.
Athena0501
1 Rookie
•
22 Posts
0
November 28th, 2022 02:00
Is there any other option about SmartCard ?
And what would happen if I enable SmartCard login ?
Athena0501
1 Rookie
•
22 Posts
0
November 28th, 2022 08:00
Hi,
Thanks for this good news !
I will wait a few weeks the next release, and then test it again.
DELL-Scott H
Moderator
•
879 Posts
0
November 28th, 2022 08:00
Smart Card redirection for pre session auth with RDS/AVD will be supported in ThinOS 2211 (Due by the end of November). The Smart card usage you are describing is in session, which would require Generic USB device redirection into session.
The RDS client provided by Microsoft and used by ThinOS does not support generic USB redirection yet.
https://dl.dell.com/content/manual14711976-dell-wyse-thinos-2205-and-2208-release-notes.pdf?language=en-us&ps=true
Page 22
Athena0501
1 Rookie
•
22 Posts
0
December 14th, 2022 03:00
Hello,
As suggested, I downloaded the latest Firmware and tried to install it via Admin Policy Tool.
Current version is 2205 (9.3.1129)
I followed the procedures as written in the manual :
- Browse the USB key and upload : OK
- Select the new Firmware (ThinOS_2211_9_3_3096.pkh) : OK
Open the file, accept EULA : Success in uploading files
- Select the uploaded Firmware
- Click Save & Publish
Then : "Alert - Do not clsoe this window while settings are applying"
Then... "system information : still 2205" No reboot, nothing...
Waiting a few minutes (10 minutes)... nothing
After manual restart : still 2205
Could you please help me to find where the problem is ?
Thanks in advance for your help.
Athena0501
1 Rookie
•
22 Posts
0
December 18th, 2022 04:00
Any idea, please ?
jaatkinson20
1 Rookie
•
1 Message
0
April 3rd, 2024 11:00
Has anyone got this to work? We have the latest version of Dell thin client and AVD. We still can't get smartcards to the Azure VDI.
James
jbeat001
1 Rookie
•
2 Posts
0
March 7th, 2025 14:38
@jaatkinson20
Sorry to resurrect a thread, but I've been trying to figure this out myself for a while.
I haven't been able to get it to work on 9.x or even the brand new 10.x. In the documentation, it doesn't show as supported. Smartcard authentication is only supported with RDS. I'm not sure why AVD can't function like Horizon, Citrix, or RDS, but I assume it's because with AVD there isn't an initial connection broker. AVD launches as a web login, and for whatever reason that web session does not give you the option to use a smartcard.
If I try using AVD as the Remote Connection, after entering my email address, it takes me to the correct page, but it says Certificate validation failed immediately, without ever asking for a PIN.
If I try using my company's web client AVD portal (client.wvd.azure.us/army/webclient), I can enter my email address but it gives me a different error: "The endpoint only accepts POST requests. Received a GET request."
Using the Chrome or Firefox browser packages and navigating to the webclient give me the Certificate validation error as well.
I have a ticket in with Dell support looking for a workaround, but I doubt they can do anything.
I don't know enough about how ThinOS and the smartcard system work, but I think for AVD to function with a smartcard, Dell or Dell+Microsoft are going to have to enable the smartcard authentication to be passed into the web session.
I'm sure there are some security caveats that make this difficult, but it would be nice to be able to give my users the option of Horizon or AVD like they have wanted for months.
(edited)
edv_mhl
1 Rookie
•
1 Message
0
June 2nd, 2025 08:38
@jbeat001
Hello,
for whatever reason, here is my solution from support. It also worked after a short switch to another group and then back again:
“and as long as ThinOs 2505 is not yet in use (should be released in the next few days) please also install the Horizon PKG:”
https://www.dell.com/support/home/de-de/drivers/driversdetails?driverid=cmg8c&oscode=thn10&productcode=optiplex-3000-thin-client