Smart Card Reader not able to detect in remote host

Kit Ying Hao 1 Reputation point
2021-12-14T04:13:50.697+00:00

Hi everyone,

I have a situation where Host A (USB smart card reader connected) trying to rdp to Host B, however, Host B was not able to detect the smart card reader on Host A in the remote session.

Thing I have tried:

  1. Directly connect the USB smart card reader on Host B. Host B able to detect the reader. I have also confirmed that the smart card able to detect on host A when connected directly.
  2. When specifying IP in mstsc.exe, smart card option was checked under Local devices and resources on Host A. But Host B still unable to detect the reader on Host A.
  3. In Host A and B group policy, I have confirmed that every policy in Computer Configuration >Administrative Templates > Windows Components > Remote Desktop Services > Remote Desktop Session Host > Device and Resource Redirection were Not Configured.

Host B Specification:
Edition: Windows 10 Enterprise LTSC
Version: 1809

What I wanted to achieve is Host B able to detect the smart card reader connected to Host A in the remote session from Host A to Host B.
I have spent quite sometime for this issue but still not able to find out what is the issue.
Anyone can shed some lights regarding this ?

Thanks in advance

Windows
Windows
A family of Microsoft operating systems that run across personal computers, tablets, laptops, phones, internet of things devices, self-contained mixed reality headsets, large collaboration screens, and other devices.
5,823 questions
Remote Desktop
Remote Desktop
A Microsoft app that connects remotely to computers and to virtual apps and desktops.
4,773 questions
{count} votes

2 answers

Sort by: Most helpful
  1. Fred Smith 4230 1 Reputation point
    2021-12-14T16:37:04.5+00:00

    Try these so I understand where you are?

    1) With USB smart card in Host A - type certutil -scinfo * you should get an output

    2) With USB smart card in Host A and you are now RDP'ed onto Host B - type certutil -scinfo *do you get an output.

    In my own case I do, I have to install the smart card drivers on Host B in a different way as per vendor guidance.


  2. Limitless Technology 39,851 Reputation points
    2022-01-06T15:11:48.693+00:00

    Hi there,

    Before you create your Remote Desktop session, click on "Show options". Under the "Local Resources" tab there is a "Local devices and resources" panel. Click the "More" button. Click on "Smart Cards". You can't use the locally plugged smartcard of the server you RDP into, as your session is redirected to the client then only the client's smartcard is accessible in the RDP session. Microsoft made it like this for security reasons.

    As a part of the Common Criteria compliance, the RDC client must be configurable to use Credential Manager to acquire and save the user's password or smart card PIN. https://learn.microsoft.com/en-us/windows/security/identity-protection/smart-cards/smart-card-and-remote-desktop-services

    Hope this resolves your Query!!

    ------
    --If the reply is helpful, please Upvote and Accept it as an answer--

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.