You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@guacamole.apache.org by Sean Hulbert <sh...@securitycentric.net> on 2026/09/02 16:22:01 UTC
WebUSB CAC/SmartCard pass
Hello Nick
Question, is Guacamole going to add in a SmartCard (CAC) Pass-through to
VDI to be mapped; in order to access protected websites inside the VDI OS?
A good control would be in the connection profile add in the serial
number (Machine ID) of the Card Reader, so Guacamole maps the correct
device.
--
*Thank You*
Sean Hulbert
*Security Centric Inc. | MSP *
A Cybersecurity Virtualization Enablement Company
/StormCloud Gov, Protected CUI Environment!/
Industry's most secure CMMC/iTAR virtual desktops!
*/CMMC Level 2 Certified/*
System Award Management
*CAGE: 8AUV4*
*SAM ID: UMJLJ8A7BMT3*
AFCEA San Francisco Chapter President
If you have heard of a hacker by name, he/she has failed, fear the
hacker you haven’t heard of!
CONFIDENTIALITY NOTICE: This communication with its contents may contain
confidential and/or legally privileged information. It is solely for the
use of the intended recipient(s). Unauthorized interception, review, use
or disclosure is prohibited and may violate applicable laws including
the Electronic Communications Privacy Act. If you are not the intended
recipient, please contact the sender and destroy all copies of the
communication. Content within this email communication is not legally
binding as a contract and no promises are guaranteed unless in a formal
contract outside this email communication.
igitur qui desiderat pacem, praeparet bellum!!!
Epitoma Rei Militaris
Re: WebUSB CAC/SmartCard pass
Posted by Nick Couchman <vn...@apache.org>.
On Wed, Sep 2, 2026 at 12:22 PM Sean Hulbert <sh...@securitycentric.net>
wrote:
> Hello Nick
>
> Question, is Guacamole going to add in a SmartCard (CAC) Pass-through to
> VDI to be mapped; in order to access protected websites inside the VDI OS?
>
I don't know that there's a definitive "yes" or "no" answer to this - USB
pass-through support is in the works, with a couple of existing PRs out
there, and I don't know of any reason why we wouldn't include Smart Card or
other SSL certificates as possibilities for that, but I also don't know
that anyone has specifically addressed the topic of Smart Card passthrough.
I'd expect it would be done at some point, just no idea when.
-Nick
>
Re: WebUSB CAC/SmartCard pass
Posted by Sean Hulbert <sh...@securitycentric.net>.
Nick
Any thoughts on this?
*Thank You*
Sean Hulbert
*Security Centric Inc. | MSP *
A Cybersecurity Virtualization Enablement Company
/StormCloud Gov, Protected CUI Environment!/
Industry's most secure CMMC/iTAR virtual desktops!
*/CMMC Level 2 Certified/*
System Award Management
*CAGE: 8AUV4*
*SAM ID: UMJLJ8A7BMT3*
AFCEA San Francisco Chapter President
If you have heard of a hacker by name, he/she has failed, fear the
hacker you haven’t heard of!
CONFIDENTIALITY NOTICE: This communication with its contents may contain
confidential and/or legally privileged information. It is solely for the
use of the intended recipient(s). Unauthorized interception, review, use
or disclosure is prohibited and may violate applicable laws including
the Electronic Communications Privacy Act. If you are not the intended
recipient, please contact the sender and destroy all copies of the
communication. Content within this email communication is not legally
binding as a contract and no promises are guaranteed unless in a formal
contract outside this email communication.
igitur qui desiderat pacem, praeparet bellum!!!
Epitoma Rei Militaris
On 9/8/2026 6:50 AM, Sean Hulbert wrote:
>
> Bringing up to top of list....
>
> *Thank You*
> Sean Hulbert
>
>
> *Security Centric Inc. | MSP *
> A Cybersecurity Virtualization Enablement Company
> /StormCloud Gov, Protected CUI Environment!/
>
>
> Industry's most secure CMMC/iTAR virtual desktops!
>
>
> */CMMC Level 2 Certified/*
>
> System Award Management
> *CAGE: 8AUV4*
> *SAM ID: UMJLJ8A7BMT3*
>
> AFCEA San Francisco Chapter President
> If you have heard of a hacker by name, he/she has failed, fear the
> hacker you haven’t heard of!
>
> CONFIDENTIALITY NOTICE: This communication with its contents may
> contain confidential and/or legally privileged information. It is
> solely for the use of the intended recipient(s). Unauthorized
> interception, review, use or disclosure is prohibited and may violate
> applicable laws including the Electronic Communications Privacy Act.
> If you are not the intended recipient, please contact the sender and
> destroy all copies of the communication. Content within this email
> communication is not legally binding as a contract and no promises are
> guaranteed unless in a formal contract outside this email communication.
>
> igitur qui desiderat pacem, praeparet bellum!!!
>
> Epitoma Rei Militaris
>
>
>
> On 9/2/2026 9:22 AM, Sean Hulbert wrote:
>>
>> Hello Nick
>>
>> Question, is Guacamole going to add in a SmartCard (CAC) Pass-through
>> to VDI to be mapped; in order to access protected websites inside the
>> VDI OS?
>>
>> A good control would be in the connection profile add in the serial
>> number (Machine ID) of the Card Reader, so Guacamole maps the correct
>> device.
>>
>> --
>>
>> *Thank You*
>> Sean Hulbert
>>
>>
>> *Security Centric Inc. | MSP *
>> A Cybersecurity Virtualization Enablement Company
>> /StormCloud Gov, Protected CUI Environment!/
>>
>>
>> Industry's most secure CMMC/iTAR virtual desktops!
>>
>>
>> */CMMC Level 2 Certified/*
>>
>> System Award Management
>> *CAGE: 8AUV4*
>> *SAM ID: UMJLJ8A7BMT3*
>>
>> AFCEA San Francisco Chapter President
>> If you have heard of a hacker by name, he/she has failed, fear the
>> hacker you haven’t heard of!
>>
>> CONFIDENTIALITY NOTICE: This communication with its contents may
>> contain confidential and/or legally privileged information. It is
>> solely for the use of the intended recipient(s). Unauthorized
>> interception, review, use or disclosure is prohibited and may violate
>> applicable laws including the Electronic Communications Privacy Act.
>> If you are not the intended recipient, please contact the sender and
>> destroy all copies of the communication. Content within this email
>> communication is not legally binding as a contract and no promises
>> are guaranteed unless in a formal contract outside this email
>> communication.
>>
>> igitur qui desiderat pacem, praeparet bellum!!!
>>
>> Epitoma Rei Militaris
>>
>>
>>
Re: WebUSB CAC/SmartCard pass
Posted by Sean Hulbert <sh...@securitycentric.net>.
Bringing up to top of list....
*Thank You*
Sean Hulbert
*Security Centric Inc. | MSP *
A Cybersecurity Virtualization Enablement Company
/StormCloud Gov, Protected CUI Environment!/
Industry's most secure CMMC/iTAR virtual desktops!
*/CMMC Level 2 Certified/*
System Award Management
*CAGE: 8AUV4*
*SAM ID: UMJLJ8A7BMT3*
AFCEA San Francisco Chapter President
If you have heard of a hacker by name, he/she has failed, fear the
hacker you haven’t heard of!
CONFIDENTIALITY NOTICE: This communication with its contents may contain
confidential and/or legally privileged information. It is solely for the
use of the intended recipient(s). Unauthorized interception, review, use
or disclosure is prohibited and may violate applicable laws including
the Electronic Communications Privacy Act. If you are not the intended
recipient, please contact the sender and destroy all copies of the
communication. Content within this email communication is not legally
binding as a contract and no promises are guaranteed unless in a formal
contract outside this email communication.
igitur qui desiderat pacem, praeparet bellum!!!
Epitoma Rei Militaris
On 9/2/2026 9:22 AM, Sean Hulbert wrote:
>
> Hello Nick
>
> Question, is Guacamole going to add in a SmartCard (CAC) Pass-through
> to VDI to be mapped; in order to access protected websites inside the
> VDI OS?
>
> A good control would be in the connection profile add in the serial
> number (Machine ID) of the Card Reader, so Guacamole maps the correct
> device.
>
> --
>
> *Thank You*
> Sean Hulbert
>
>
> *Security Centric Inc. | MSP *
> A Cybersecurity Virtualization Enablement Company
> /StormCloud Gov, Protected CUI Environment!/
>
>
> Industry's most secure CMMC/iTAR virtual desktops!
>
>
> */CMMC Level 2 Certified/*
>
> System Award Management
> *CAGE: 8AUV4*
> *SAM ID: UMJLJ8A7BMT3*
>
> AFCEA San Francisco Chapter President
> If you have heard of a hacker by name, he/she has failed, fear the
> hacker you haven’t heard of!
>
> CONFIDENTIALITY NOTICE: This communication with its contents may
> contain confidential and/or legally privileged information. It is
> solely for the use of the intended recipient(s). Unauthorized
> interception, review, use or disclosure is prohibited and may violate
> applicable laws including the Electronic Communications Privacy Act.
> If you are not the intended recipient, please contact the sender and
> destroy all copies of the communication. Content within this email
> communication is not legally binding as a contract and no promises are
> guaranteed unless in a formal contract outside this email communication.
>
> igitur qui desiderat pacem, praeparet bellum!!!
>
> Epitoma Rei Militaris
>
>
>