Symptoms
Applications running in an ICA session cannot access the smart card for authentication or do not recognize the smart card.
Cause
Originally, only processes required for smart card logon functionality (that is, Winlogon.exe and Lsass.exe) were turned on in MetaFrame XP (from the Advanced Concepts Guide).
MFAPHook.dll now hooks into all of the processes.
CTX107824 – Citrix API Hooks (mfaphook.dll) Explained and Enumerated
CTX107825 – Disabling Citrix API Hooks on a Per Application Basis
Resolution
As of this update, the current platforms of MetaFrame XP Service Pack 4, Presentation Server 3.0 Rollup 5, Presentation Server 4.0 Rollup 1 and later no longer requires the use the smart card utility (Scconfig.exe) to enable smart card functionality for specific processes.
If there is a problem accessing a particular application using a smart card, use CDF tracing with the scardhook modules to investigate the issue.
CTX104578 – Using Citrix Diagnostic Facility and the Access Suite Console for Tracing
Additional Information
For details regarding the syntax, see the Advanced Concepts Guide or on a command line, type SCCONFIG /?
To determine for which processes the smart card functionality is enabled, type SCCONFIG /q on a command line.