Cannot login with a smart card on Citrix web interface

[isterios]

Hello,

I try to set the Citrix web interface authentication on "Smart Card". No problem to set it. But after, each time I launch the Citrix default web page: "the page cannot be displayed".
The address is:

https://mycitrixserver/Citrix/MetaFrame/certificate/default.aspx

It works with the other authentication methods.

I tried to restart IIis, uncheck the proxy, put the security level in Internet Explorer to low, restart completely the server: idem.

An idea?

 

[isterios]

I tried with Presentation server 3.0 and 4.0 on Windows 2003 server (same trouble)

 

[dts01]

what type of smart cards are you using.
Do you have any virus software installed on the servers.
Do you have the CPS software installed on the servers and on the clients

 

[isterios]

Ok I think "I" found the solution:
"You must ensure the Windows Directory Service Mapper is enabled on the server running the Web Interface.
To enable the Windows Directory Service Mapper on IIS 6.0
1. Open the Internet Information Services Snap-in tool within the Management
Console for MetaFrame Presentation Server on the server running the Web
Interface.
2. Right-click on the Web Sites directory located under the server running the Web
Interface and click Properties.
3. From the Directory Security tab, select Enable the Windows directory
service mapper in the Secure Communications section.
4. Click OK to enable the Directory Service Mapper."


I tried and now the login page loads successfully.

 

[isterios]

Was too optimist.

When I made this modification, it worked once, on the authetincation web page. I just clic on login and "the page cannot be displayed".

Now when I retry, I have everytime "the page cannot be displayed", even on the first authentication page.

So that's curious: it seems each time I made a modification directly on the IIis, I can see the first page (web authentication) working, but after, trying to go further, the IIis doesn't work anymore.

 

[enigma99]

What SP do you have on your 2k3 servers?

You might want to read this and see if this has anything to do with your issue.

Hope that helps.

http://support.citrix.com/kb/entry.jspa?entryID=6027

 

[isterios]

Ok I forgot something: for smart card, I have to install a SSL certificate.

In fact the problem occured each time the web interface went through a HTTPS page ("page cannot be displayed").

I will install a SSL certificate and will inform you.

 

[isterios]

Ok so I installed the SSL certificate and I forced
the SSL use (so only access by https). The SSL port is by default (443).
I installed the smart card software on the server.
I set the web interface with authentication with Smart Card.

And now, each time I try to launch citrix (by the web interface), the login web page loads correctly. I enter my login (we are still in http). And when I validate, the page alternates in https and I win a "the page cannot be
displayed".

So it seems the swap in https doesn't work... It looks like as if my IIis and SSL have a problem... (perhaps)

Do you have any idea?

Thanks.

 

[isterios]

Forgot to specify:
it works on my configuration with the full client (but i have to use web interface).