Smart Card Reader not able to detect in remote host

Question

Hi everyone,

I have a situation where Host A (USB smart card reader connected) trying to rdp to Host B, however, Host B was not able to detect the smart card reader on Host A in the remote session.

Thing I have tried:

1. Directly connect the USB smart card reader on Host B. Host B able to detect the reader. I have also confirmed that the smart card able to detect on host A when connected directly.
2. When specifying IP in mstsc.exe, smart card option was checked under Local devices and resources on Host A. But Host B still unable to detect the reader on Host A.
3. In Host A and B group policy, I have confirmed that every policy in Computer Configuration >Administrative Templates > Windows Components > Remote Desktop Services > Remote Desktop Session Host > Device and Resource Redirection were Not Configured.

Host B Specification:
Edition: Windows 10 Enterprise LTSC
Version: 1809

What I wanted to achieve is Host B able to detect the smart card reader connected to Host A in the remote session from Host A to Host B.
I have spent quite sometime for this issue but still not able to find out what is the issue.
Anyone can shed some lights regarding this ?

Thanks in advance

Answer 1

Hi there,

Before you create your Remote Desktop session, click on "Show options". Under the "Local Resources" tab there is a "Local devices and resources" panel. Click the "More" button. Click on "Smart Cards". You can't use the locally plugged smartcard of the server you RDP into, as your session is redirected to the client then only the client's smartcard is accessible in the RDP session. Microsoft made it like this for security reasons.

As a part of the Common Criteria compliance, the RDC client must be configurable to use Credential Manager to acquire and save the user's password or smart card PIN. https://learn.microsoft.com/en-us/windows/security/identity-protection/smart-cards/smart-card-and-remote-desktop-services

Hope this resolves your Query!!

------
--If the reply is helpful, please Upvote and Accept it as an answer--

Answer 2

Try these so I understand where you are?

1) With USB smart card in Host A - type certutil -scinfo * you should get an output

2) With USB smart card in Host A and you are now RDP'ed onto Host B - type certutil -scinfo *do you get an output.

In my own case I do, I have to install the smart card drivers on Host B in a different way as per vendor guidance.