hi, Could one use the FIM CM solution (smart card issuance, revocation, logon, etc) for Citrix, thin clients and other operating systems? If yes - what would be the limitations? thank you, SK

On Wed, 18 May 2011 13:22:46 +0000, S.Kwan wrote: Could one use the FIM CM solution (smart card issuance, revocation, logon, etc) for Citrix, thin clients and other operating systems? If?yes - what would be the limitations? All card management requires an ActiveX control so both the OS and the browser would need to fully support the ActiveX control. You need to keep in mind that FIM CM is strictly used for certificate and smart card lifecycle management and short of the offline unblock scenario that is built into Vista and above, it plays absolutely no part in the logon process. For non-Windows clients, probably the best solution is to perform management at a dedicated management workstation that runs Windows with a supported browser. Paul Adare MVP - Identity Lifecycle Manager http://www.identit.ca Dreams are free, but you get soaked on the connect time.

So if we have a dedicated management workstation for smart card management - then users could still essentially logon to a thin client using the smart card? But they woould not be able to perform any FIM CM client functionality - like reset PIN for example?

On Wed, 18 May 2011 14:35:24 +0000, S.Kwan wrote: So if we have a dedicated management workstation for smart card management - then users could still essentially logon to a thin client using the smart card? That would depend on the card, the middleware, and the support in the thin client OS for smart card logon, but yes, it is possible and has nothing at all to do with FIM CM. Paul Adare MVP - Identity Lifecycle Manager http://www.identit.ca Save energy: Drive a smaller shell.

Thank you Paul