3.29 Windows Hello

The Windows Hello method facilitates you to use your Windows Hello fingerprint and facial recognition authentication to log in to the Windows 10 operating system. Advanced Authentication supports the Windows Hello fingerprint and facial recognition.

NOTE:To use Windows Hello for authentication, you must install the Advanced Authentication Device Service. For more information on Device Service, see the Advanced Authentication - Device Service guide.

This method supports all the devices that Windows Hello works with. For example, the Windows Hello facial recognition works with only the infrared cameras. Therefore, the Advanced Authentication Windows Hello method also supports only the infrared camera for facial recognition.

3.29.1 Configuring the System Settings for Windows Hello

Before enrolling Windows Hello, you must configure the system settings.

NOTE:You cannot enroll the Windows Hello authentication on an RDP session.

Configuring Settings for Windows Hello Fingerprint

  1. Click Start > Settings > Accounts > Sign-in options.

    Under Windows Hello, the options for fingerprint is displayed if your PC has a fingerprint reader.

  2. Click Set up under Fingerprint.

  3. Click Get started.

  4. Specify your PIN.

    NOTE:If you do not have a PIN, you must create one to set up the fingerprint.

  5. To enroll fingerprint, scan your finger on the fingerprint reader.

    You will have to place your finger multiple times to provide the scanner a good picture of your fingerprints.

  6. Click Add Another if you want to add another fingerprint.

Configuring Settings for Windows Hello Face Recognition

  1. Click Start > Settings > Accounts > Sign-in options.

    Under Windows Hello, the option for face recognition is displayed if your computer has an external camera.

  2. Click Set up under Face Recognition.

  3. Click Get started.

  4. Specify your PIN.

    NOTE:If you do not have a PIN, you must create one to set up the face recognition.

  5. To enroll the face, present your face to the camera. Scan your face by following the on-screen instructions.

  6. Select Finish to complete scanning or choose Improve Recognition to continue scanning.

    NOTE:It is recommended that you select to improve recognition if you change your appearance often. Scanning your face again does not erase the earlier scans. It just helps Windows Hello get better at recognizing you.

For more information about Windows Hello, see the Microsoft Windows website https://support.microsoft.com/en-in/help/17215/windows-10-what-is-hello.

NOTE:To enable Windows Hello for all domain-joined Windows 10 workstations and for Windows 10 Enterprise, see https://community.spiceworks.com/topic/1840001-windows-10-fingerprint-some-settings-are-managed-by-your-organization.

3.29.2 Enrolling the Windows Hello Authenticator

  1. Click the Add icon in Your Enrolled Single Methods for sign in on the Authentication Methods page.

  2. Click the Windows Hello icon in Available Methods for Enrollment.

  3. (Optional) Specify the Display Name.

  4. Specify your username for which Windows Hello is enrolled in Windows User Name.

    NOTE:If you have enrolled Windows Hello for a local account, you must specify the <workstationname>\<username>.

    If you want to enroll Windows Hello that is set for a Microsoft account, you can specify microsoftaccount\user@outlook.com as the user name. This is helpful if you must login to the Windows operating system using your Microsoft account.

  5. Click Save.

    A message The "Windows Hello" authentication has been saved is displayed.

3.29.3 Testing the Windows Hello Authenticator

  1. Click the Windows Hello icon in Your Enrolled Single Methods for sign in.

  2. Click Test Method.

  3. Place your finger on the reader or swipe your finger on the swipe sensor for the fingerprint authentication. Present your face for the facial recognition.

    An appropriate message is displayed indicating the result of the test.