2.21 Windows Hello

The Windows Hello method enable you to use your Windows Hello fingerprint authentication to log in to Windows 10. Advanced Authentication supports the Windows Hello fingerprint.

NOTE:To use Windows Hello for authentication, you must install the Advanced Authentication Device Service. For more information on Device Service, see the Advanced Authentication - Device Service guide.

2.21.1 Configuring the System Settings for Windows Hello

Before enrolling Windows Hello, you must configure the system settings. Perform the following steps to do this:

  1. Click Start > Settings > Accounts > Sign-in options.

    Under Windows Hello, the options for fingerprint are displayed if your PC has a fingerprint reader.

  2. Click Set up under Fingerprint.

  3. Click Get started.

  4. Specify your PIN.

    NOTE:If you do not have a PIN, you must create one to set up the fingerprint.

  5. Scan your finger on the fingerprint reader.

    You will have to place your finger multiple times to provide the scanner a good picture of your fingerprints.

  6. Click Add Another if you want to add another fingerprint.

For more information about Windows Hello, see the Microsoft Windows website https://support.microsoft.com/en-in/help/17215/windows-10-what-is-hello.

NOTE:To enable Windows Hello for all domain-joined Windows 10 workstations and for Windows 10 Enterprise, see https://community.spiceworks.com/topic/1840001-windows-10-fingerprint-some-settings-are-managed-by-your-organization.

2.21.2 Enrolling the Windows Hello Authenticator

  1. Click the Windows Hello icon.

  2. (Optional) Specify a Comment in Add Windows Hello authenticator.

  3. Select the preferred category from Category.

    The Category option is displayed only if the administrator has set the Event Categories option in the Administration portal.

  4. Specify your username for which Windows Hello is enrolled.

    NOTE: If you have enrolled Windows Hello for a local account, you must specify the <workstationname>\<username>.

    If you want to enroll Windows Hello that is set for a Microsoft account, you can specify microsoftaccount\user@outlook.com as the user name. This is helpful if you must login to the Windows operating system using your Microsoft account.

  5. Click Save.

NOTE:Advanced Authentication does not support enrollment of Windows Hello on an RDP session.

2.21.3 Testing the Windows Hello Authenticator

  1. Click the Windows Hello icon in Enrolled authenticators.

  2. Click Test.

  3. Place your finger on the reader or swipe your finger on the swipe sensor.

    An appropriate message is displayed indicating the result of the test.