Kasm Smartcard Pass-Through for ChromeOS

[embed]

Seamless Security and Enhanced Productivity: Kasm Workspaces Now Offers Smartcard Passthrough for ChromeOS to Windows

Kasm Technologies is excited to announce a powerful new feature for Kasm Workspaces: Smartcard Passthrough for Windows Workspaces accessed from ChromeOS endpoints. This enhancement significantly boosts security and productivity for users who rely on smart cards for authentication, digital signing, and certificate-based operations within their virtualized Windows environments.

Leveraging RDP-based Kasm sessions, Kasm Workspaces now supports passing through physical smart card devices directly from a ChromeOS device into the Windows workspace. This means users can utilize their existing smart cards and readers just as they would on a local machine, eliminating the need for complex workarounds or reduced functionality in their virtual sessions.

The integration of smartcard access into your virtual desktop infrastructure (VDI) offers tangible productivity gains. Users can seamlessly perform tasks requiring smart card authentication, such as logging into secure applications, digitally signing documents, or accessing sensitive systems, directly from their Kasm session. This streamlined workflow saves time and reduces frustration, making the virtual workspace a more complete and efficient work environment.

Enabling this feature involves straightforward configuration steps on both the Kasm platform and the ChromeOS endpoint. Administrators can enable smartcard passthrough for specific user groups within the Kasm admin interface by adding and setting the allow_kasm_rdp_smartcard_passthrough setting to 'true' for the desired group (e.g., the default administrators group).

On the ChromeOS device, users or administrators need to install a few key extensions from the Chrome Web Store to facilitate the passthrough:

1. Drive Lock smart card middleware: This provides the necessary middleware for smart card interaction on ChromeOS.
2. Smart Card Connector app: This app manages the connection between the smart card reader and the ChromeOS device. Users will need to grant the requested permissions upon installation.
3. Kasm smart Card bridge extension: This extension specifically facilitates the communication between the ChromeOS smart card services and the Kasm RDP session. Again, users should allow the necessary permissions.

Once these steps are completed, connecting to a Windows workspace in Kasm from the configured ChromeOS device should result in the automatic detection of the smart card within the Windows session. Users can then interact with their smart card as needed, including entering their PIN for authentication or operations. The functionality can be easily tested using tools or websites designed to detect smart cards and their associated certificates within the Windows environment.

By enabling direct smartcard access, Kasm Workspaces removes a common barrier for organizations and users who require this layer of security for daily tasks. This feature underscores Kasm’s commitment to providing a flexible, secure, and productive virtual workspace experience across a variety of endpoints.

Detailed documentation is available at: https://www.kasmweb.com/docs/latest/guide/smartcard_passthrough.html