Enable Single Sign-On for smart card authentication

Enables Single Sign-On for smart card authentication. This requires the Horizon Client to store the encrypted smart card PIN in memory momentarily before submitting it to the View Connection Server.

Supported on:

Registry Hive	HKEY_LOCAL_MACHINE
Registry Path	Software\Policies\VMware, Inc.\VMware VDM\Client\Security
Value Name	EnableSmartCardSSO
Value Type	REG_SZ
Enabled Value	true
Disabled Value	false

vdm_client.admx

Administrative Templates (Computers)

PCoIP Client Session Variables
- Overridable Administrator Defaults
PCoIP Session Variables
- Overridable Administrator Defaults
VMware Blast
VMware Horizon Client Configuration
VMware Horizon Performance Tracker
VMware Horizon Printer Redirection
- Specify a filter in redirecting client printers
VMware Horizon URL Redirection
VMware Integrated Printing
VMware View Agent Configuration
- Agent Configuration
  - AllowDirectRDP
  - AllowSingleSignon
  - CommandsToRunOnConnect
  - CommandsToRunOnDisconnect
  - CommandsToRunOnReconnect
  - ConnectionTicketTimeout
  - CredentialFilterExceptions
  - Disable Time Zone Synchronization
  - DPI Synchronization Per Connection
  - DPI Synchronization
  - Enable multi-media acceleration
  - Enable Unauthenticated Access
  - Force MMR to use software overlay
  - ShowDiskActivityIcon
  - Single sign-on retry timeout
  - Toggle Display Settings Control
- Agent Security
  - Accept SSL encrypted framework channel
- Collaboration
  - Allow control passing to collaborators
  - Allow inviting collaborators by e-mail
  - Allow inviting collaborators by IM
  - Maximum number of invited collaborators
  - Separator used for multiple e-mail addresses in mailto: links
  - Server URLs to include in invitation message
  - Turn off collaboration
- Persona Management
  - Desktop UI
  - Folder Redirection
  - Logging
  - Roaming & Synchronization
  - Troubleshooting
- Scanner Redirection
  - Default Color Mode
  - Default Duplex
  - Default Scanner
  - Disable functionality
  - Hide Webcam
  - Lock Config
- Serial COM
  - PortSettings
  - Bandwidth limit
  - COM Port Isolation Mode
  - Disable functionality
  - Local settings priority
  - Lock configuration
- Smartcard Redirection
  - Local Reader Access
- True SSO Configuration
  - All key sizes
  - Certificate wait timeout
  - Disable True SSO
  - Minimum key size
  - Minimum validity period required for a certificate
  - Number of keys to pre-create
- Unity Touch and Hosted Apps
  - Enable system tray redirection for Hosted Apps
  - Enable Unity Touch
  - Enable user profile customization for Hosted Apps
  - Limit usage of Windows hooks
  - Only launch new instances of Hosted Apps if arguments are different
  - Send updates for empty or offscreen windows
  - Unity Filter rule list
- View Agent Direct-Connection Configuration
  - Applications Enabled
  - Client Config Name Value Pairs
  - Client Credential Cache Timeout
  - Client Session Timeout
  - Client setting: AlwaysConnect
  - Client setting: AutoConnect
  - Client setting: ScreenSize
  - Default Protocol
  - Disclaimer Enabled
  - Disclaimer Text
  - External Blast Port
  - External Framework Channel Port
  - External IP Address
  - External PCoIP Port
  - External RDP Port
  - HTTPS Port Number
  - Multimedia redirection (MMR) Enabled
  - Reset Enabled
  - Session Timeout
  - USB AutoConnect
  - USB Enabled
  - User Idle Timeout
  - X509 Certificate Authentication
  - X509 SSL Certificate Authentication Enabled
- View RTAV Configuration
  - View RTAV Webcam Settings
  - Disable RTAV
- View USB Configuration
  - Client Downloadable only Settings
  - Exclude All Devices
  - Exclude Device Family
  - Exclude Vid/Pid Device
  - Include Device Family
  - Include Vid/Pid Device
- VMware Client IP Transparency
  - Default auto detect proxy
  - Default proxy server
  - Enable
  - Set proxy for Java applet
- VMware Device Bridge
  - Disable Device Bridge BAS Plugin
- VMware FlashMMR
  - Enable flash multi-media redirection
  - Minimum rect size to enable FlashMMR
- VMware Horizon Client Drive Redirection
  - Display redirected device with drive letter
  - Timeout for drive letter initialization
- VMware HTML5 Features
  - VMware Geolocation Redirection
  - Disable Automatically Detect Intranet
  - Enable VMware HTML5 Features
- VMware HTML5 Multimedia Redirection
  - Disable Automatically Detect Intranet
  - Enable Chrome Browser for VMware HTML5 Multimedia Redirection
  - Enable Edge Browser for VMware HTML5 Multimedia Redirection
  - Enable URL list for VMware HTML5 Multimedia Redirection.
  - Enable VMware HTML5 Multimedia Redirection
- VMware Virtualization Pack for Skype for Business
  - EnableDetectProxySettings
  - Force Skype for Business in non-optimized mode
  - Show Icon
  - Show Messages
  - Suppress Minor Version Mismatch Warning
- Recursive Enumeration of Trusted Domains
VMware View Common Configuration
VMware View Server Configuration
Windows Components
- Horizon View RDSH Services
  - Remote Desktop Session Host
    - Application Compatibility
Turn off Fair Share CPU Scheduling

Enable Single Sign-On for smart card authentication

Administrative Templates (Computers)

Administrative Templates (Users)