World of EUC

Anyone know if there are restrictions on the FIDO2 Virtual Channel on sessions connecting via storefront instead of netscaler gateway? I have two Windows server 2022 set up in two different sites, and it's not prompting me locally for the security key in one of the desktops, which I access via storefront.

Or any restrictions at all? Most documentation says no configuration needed, other than up to date VDA/Workspace App / Functional level <https://www.jasonsamuel.com/2020/11/11/a-deep-dive-into-the-citrix-hdx-fido2-and-windows-hello-optimized-virtual-channel-with-virtual-desktops-and-apps-using-usb-nfc-ble-and-built-in-authenticators/|https://www.jasonsamuel.com/2020/11/11/a-deep-dive-into-the-citrix-hdx-fido2-and-windo[…]ops-and-apps-using-usb-nfc-ble-and-built-in-authenticators/>