mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-05-12 21:37:22 +00:00
bulk metadata updates
This commit is contained in:
parent
1374a4251c
commit
9598eeac99
@ -1,37 +1,22 @@
|
|||||||
---
|
---
|
||||||
title: Multi-factor Unlock
|
title: Multi-factor Unlock
|
||||||
description: Learn how Windows 10 and Windows 11 offer multi-factor device unlock by extending Windows Hello with trusted signals.
|
description: Learn how Windows 10 and Windows 11 offer multi-factor device unlock by extending Windows Hello with trusted signals.
|
||||||
ms.prod: windows-client
|
|
||||||
ms.collection: M365-identity-device-management
|
|
||||||
ms.topic: article
|
|
||||||
localizationpriority: medium
|
|
||||||
ms.date: 03/20/2018
|
ms.date: 03/20/2018
|
||||||
author: paolomatarazzo
|
|
||||||
ms.author: paoloma
|
|
||||||
ms.reviewer: prsriva
|
|
||||||
manager: aaroncz
|
|
||||||
appliesto:
|
appliesto:
|
||||||
- ✅ <b>Windows 10</b>
|
- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10 and later</a>
|
||||||
- ✅ <b>Windows 11</b>
|
|
||||||
ms.technology: itpro-security
|
|
||||||
---
|
---
|
||||||
# Multi-factor Unlock
|
# Multi-factor Unlock
|
||||||
|
|
||||||
**Requirements:**
|
Windows Hello for Business supports the use of a single credential (PIN and biometrics) for unlocking a device. Therefore, if any of those credentials are compromised (shoulder surfed), an attacker could gain access to the system.
|
||||||
* Windows Hello for Business deployment (Cloud, Hybrid or On-premises)
|
|
||||||
* Azure AD, Hybrid Azure AD, or Domain Joined (Cloud, Hybrid, or On-Premises deployments)
|
|
||||||
* Windows 10, version 1709 or newer, or Windows 11
|
|
||||||
* Bluetooth, Bluetooth capable phone - optional
|
|
||||||
|
|
||||||
Windows, today, natively only supports the use of a single credential (password, PIN, fingerprint, face, etc.) for unlocking a device. Therefore, if any of those credentials are compromised (shoulder surfed), an attacker could gain access to the system.
|
Windows Hello for Business can be configured with multi-factor device unlock, by extending Windows Hello with trusted signals. Administrators can configure devices to request a combination of factors and trusted signals to unlock theim.
|
||||||
|
|
||||||
Windows 10 and Windows 11 offer multi-factor device unlock by extending Windows Hello with trusted signals. Administrators can configure their Windows to request a combination of factors and trusted signals to unlock their devices.
|
|
||||||
|
|
||||||
Which organizations can take advantage of Multi-factor unlock? Those who:
|
Which organizations can take advantage of Multi-factor unlock? Those who:
|
||||||
* Have expressed that PINs alone do not meet their security needs.
|
|
||||||
* Want to prevent Information Workers from sharing credentials.
|
- Have expressed that PINs alone do not meet their security needs
|
||||||
* Want their organizations to comply with regulatory two-factor authentication policy.
|
- Want to prevent Information Workers from sharing credentials
|
||||||
* Want to retain the familiar Windows sign-in user experience and not settle for a custom solution.
|
- Want their organizations to comply with regulatory two-factor authentication policy
|
||||||
|
- Want to retain the familiar Windows sign-in user experience and not settle for a custom solution
|
||||||
|
|
||||||
You enable multi-factor unlock using Group Policy. The **Configure device unlock factors** policy setting is located under **Computer Configuration\Administrative Templates\Windows Components\Windows Hello for Business**.
|
You enable multi-factor unlock using Group Policy. The **Configure device unlock factors** policy setting is located under **Computer Configuration\Administrative Templates\Windows Components\Windows Hello for Business**.
|
||||||
|
|
||||||
|
@ -1,25 +1,15 @@
|
|||||||
---
|
---
|
||||||
title: Azure Active Directory join cloud only deployment
|
title: Azure Active Directory join cloud only deployment
|
||||||
description: Use this deployment guide to successfully use Azure Active Directory to join a Windows 10 or Windows 11 device.
|
description: Use this deployment guide to successfully use Azure Active Directory to join a Windows 10 or Windows 11 device.
|
||||||
ms.prod: windows-client
|
|
||||||
ms.collection: M365-identity-device-management
|
|
||||||
ms.topic: article
|
|
||||||
localizationpriority: medium
|
|
||||||
ms.date: 06/23/2021
|
ms.date: 06/23/2021
|
||||||
author: paolomatarazzo
|
|
||||||
ms.author: paoloma
|
|
||||||
ms.reviewer: prsriva
|
|
||||||
manager: aaroncz
|
|
||||||
appliesto:
|
appliesto:
|
||||||
- ✅ <b>Windows 10</b>
|
- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10 and later</a>
|
||||||
- ✅ <b>Windows 11</b>
|
|
||||||
ms.technology: itpro-security
|
|
||||||
---
|
---
|
||||||
# Azure Active Directory join cloud only deployment
|
# Azure Active Directory join cloud only deployment
|
||||||
|
|
||||||
## Introduction
|
## Introduction
|
||||||
|
|
||||||
When you Azure Active Directory (Azure AD) join a Windows 10 or Windows 11 device, the system prompts you to enroll in Windows Hello for Business by default. If you want to use Windows Hello for Business in your cloud only environment, then there's no additional configuration needed.
|
When you Azure Active Directory (Azure AD) join a Windows device, the system prompts you to enroll in Windows Hello for Business by default. If you want to use Windows Hello for Business in your cloud-only environment, then there's no additional configuration needed.
|
||||||
|
|
||||||
You may wish to disable the automatic Windows Hello for Business enrollment prompts if you aren't ready to use it in your environment. Instructions on how to disable Windows Hello for Business enrollment in a cloud only environment are included below.
|
You may wish to disable the automatic Windows Hello for Business enrollment prompts if you aren't ready to use it in your environment. Instructions on how to disable Windows Hello for Business enrollment in a cloud only environment are included below.
|
||||||
|
|
||||||
|
@ -1,22 +1,12 @@
|
|||||||
---
|
---
|
||||||
title: Having enough Domain Controllers for Windows Hello for Business deployments
|
title: Having enough Domain Controllers for Windows Hello for Business deployments
|
||||||
description: Guide for planning to have an adequate number of Windows Server 2016 or later Domain Controllers for Windows Hello for Business deployments
|
description: Guide for planning to have an adequate number of Windows Server 2016 or later Domain Controllers for Windows Hello for Business deployments
|
||||||
ms.prod: windows-client
|
|
||||||
ms.collection: M365-identity-device-management
|
|
||||||
ms.topic: article
|
|
||||||
localizationpriority: medium
|
|
||||||
ms.date: 08/20/2018
|
ms.date: 08/20/2018
|
||||||
author: paolomatarazzo
|
|
||||||
ms.author: paoloma
|
|
||||||
ms.reviewer: prsriva
|
|
||||||
manager: aaroncz
|
|
||||||
appliesto:
|
appliesto:
|
||||||
- ✅ <b>Windows 10</b>
|
- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10 and later</a>
|
||||||
- ✅ <b>Windows 11</b>
|
- ✅ <a href=https://learn.microsoft.com/en-us/windows/release-health/windows-server-release-info target=_blank>Windows Server 2016 and later</a>
|
||||||
- ✅ <b>Windows Server 2016 or later</b>
|
|
||||||
- ✅ <b>Hybrid or On-Premises deployment</b>
|
- ✅ <b>Hybrid or On-Premises deployment</b>
|
||||||
- ✅ <b>Key trust</b>
|
- ✅ <b>Key trust</b>
|
||||||
ms.technology: itpro-security
|
|
||||||
---
|
---
|
||||||
# Planning an adequate number of Windows Server 2016 or later Domain Controllers for Windows Hello for Business deployments
|
# Planning an adequate number of Windows Server 2016 or later Domain Controllers for Windows Hello for Business deployments
|
||||||
|
|
||||||
|
@ -1,19 +1,9 @@
|
|||||||
---
|
---
|
||||||
title: Windows Hello and password changes (Windows)
|
title: Windows Hello and password changes (Windows)
|
||||||
description: When you change your password on a device, you may need to sign in with a password on other devices to reset Hello.
|
description: When you change your password on a device, you may need to sign in with a password on other devices to reset Hello.
|
||||||
ms.prod: windows-client
|
|
||||||
ms.collection: M365-identity-device-management
|
|
||||||
ms.topic: article
|
|
||||||
ms.localizationpriority: medium
|
|
||||||
ms.date: 07/27/2017
|
ms.date: 07/27/2017
|
||||||
author: paolomatarazzo
|
|
||||||
ms.author: paoloma
|
|
||||||
ms.reviewer: prsriva
|
|
||||||
manager: aaroncz
|
|
||||||
appliesto:
|
appliesto:
|
||||||
- ✅ <b>Windows 10</b>
|
- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10 and later</a>
|
||||||
- ✅ <b>Windows 11</b>
|
|
||||||
ms.technology: itpro-security
|
|
||||||
---
|
---
|
||||||
# Windows Hello and password changes
|
# Windows Hello and password changes
|
||||||
|
|
||||||
|
@ -1,21 +1,9 @@
|
|||||||
---
|
---
|
||||||
title: Windows Hello biometrics in the enterprise (Windows)
|
title: Windows Hello biometrics in the enterprise (Windows)
|
||||||
description: Windows Hello uses biometrics to authenticate users and guard against potential spoofing, through fingerprint matching and facial recognition.
|
description: Windows Hello uses biometrics to authenticate users and guard against potential spoofing, through fingerprint matching and facial recognition.
|
||||||
ms.prod: windows-client
|
|
||||||
ms.collection:
|
|
||||||
- M365-identity-device-management
|
|
||||||
ms.topic: article
|
|
||||||
localizationpriority: medium
|
|
||||||
ms.date: 01/12/2021
|
ms.date: 01/12/2021
|
||||||
author: paolomatarazzo
|
|
||||||
ms.author: paoloma
|
|
||||||
ms.reviewer: prsriva
|
|
||||||
manager: aaroncz
|
|
||||||
appliesto:
|
appliesto:
|
||||||
- ✅ <b>Windows 10</b>
|
- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10 and later</a>
|
||||||
- ✅ <b>Windows 11</b>
|
|
||||||
- ✅ <b>Windows Holographic for Business</b>
|
|
||||||
ms.technology: itpro-security
|
|
||||||
---
|
---
|
||||||
|
|
||||||
# Windows Hello biometrics in the enterprise
|
# Windows Hello biometrics in the enterprise
|
||||||
|
@ -1,25 +1,16 @@
|
|||||||
---
|
---
|
||||||
title: Prepare and Deploy Windows AD FS certificate trust (Windows Hello for Business)
|
title: Prepare and Deploy Windows AD FS certificate trust (Windows Hello for Business)
|
||||||
description: Learn how to Prepare and Deploy Windows Server 2016 Active Directory Federation Services (AD FS) for Windows Hello for Business, using certificate trust.
|
description: Learn how to Prepare and Deploy Windows Server 2016 Active Directory Federation Services (AD FS) for Windows Hello for Business, using certificate trust.
|
||||||
ms.prod: windows-client
|
|
||||||
ms.collection: M365-identity-device-management
|
|
||||||
ms.topic: article
|
|
||||||
localizationpriority: medium
|
|
||||||
ms.date: 01/14/2021
|
ms.date: 01/14/2021
|
||||||
author: paolomatarazzo
|
|
||||||
ms.author: paoloma
|
|
||||||
ms.reviewer: prsriva
|
|
||||||
manager: aaroncz
|
|
||||||
appliesto:
|
appliesto:
|
||||||
- ✅ <b>Windows 10</b>
|
- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10 and later</a>
|
||||||
- ✅ <b>Windows 11</b>
|
- ✅ <a href=https://learn.microsoft.com/en-us/windows/release-health/windows-server-release-info target=_blank>Windows Server 2016 and later</a>
|
||||||
- ✅ <b>On-premises deployments</b>
|
- ✅ <b>On-premises deployments</b>
|
||||||
- ✅ <b>Certificate trust</b>
|
- ✅ <b>Certificate trust</b>
|
||||||
ms.technology: itpro-security
|
|
||||||
---
|
---
|
||||||
# Prepare and Deploy Windows Server 2016 Active Directory Federation Services - Certificate Trust
|
# Prepare and Deploy Active Directory Federation Services (AD FS)
|
||||||
|
|
||||||
Windows Hello for Business works exclusively with the Active Directory Federation Service role included with Windows Server 2016 and requires an additional server update. The on-premises certificate trust deployment uses Active Directory Federation Services roles for key registration, device registration, and as a certificate registration authority.
|
Windows Hello for Business works exclusively with the Active Directory Federation Service (AD FS). The on-premises certificate trust deployment uses Active Directory Federation Services roles for key registration, device registration, and as a certificate registration authority.
|
||||||
|
|
||||||
The following guidance describes deploying a new instance of Active Directory Federation Services 2016 using the Windows Information Database as the configuration database, which is ideal for environments with no more than 30 federation servers and no more than 100 relying party trusts.
|
The following guidance describes deploying a new instance of Active Directory Federation Services 2016 using the Windows Information Database as the configuration database, which is ideal for environments with no more than 30 federation servers and no more than 100 relying party trusts.
|
||||||
|
|
||||||
|
@ -1,28 +1,20 @@
|
|||||||
---
|
---
|
||||||
title: Configure Windows Hello for Business Policy settings - certificate trust
|
title: Configure Windows Hello for Business Policy settings - certificate trust
|
||||||
description: Configure Windows Hello for Business Policy settings for Windows Hello for Business. Certificate-based deployments need three group policy settings.
|
description: Configure Windows Hello for Business Policy settings for Windows Hello for Business. Certificate-based deployments need three group policy settings.
|
||||||
ms.prod: windows-client
|
|
||||||
ms.collection:
|
ms.collection:
|
||||||
- M365-identity-device-management
|
- M365-identity-device-management
|
||||||
- highpri
|
- highpri
|
||||||
ms.topic: article
|
|
||||||
localizationpriority: medium
|
|
||||||
ms.date: 08/20/2018
|
ms.date: 08/20/2018
|
||||||
author: paolomatarazzo
|
|
||||||
ms.author: paoloma
|
|
||||||
ms.reviewer: prsriva
|
|
||||||
manager: aaroncz
|
|
||||||
appliesto:
|
appliesto:
|
||||||
- ✅ <b>Windows 10</b>
|
- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10 and later</a>
|
||||||
- ✅ <b>Windows 11</b>
|
- ✅ <a href=https://learn.microsoft.com/en-us/windows/release-health/windows-server-release-info target=_blank>Windows Server 2016 and later</a>
|
||||||
- ✅ <b>On-premises deployments</b>
|
- ✅ <b>On-premises deployments</b>
|
||||||
- ✅ <b>Certificate trust</b>
|
- ✅ <b>Certificate trust</b>
|
||||||
ms.technology: itpro-security
|
|
||||||
---
|
---
|
||||||
# Configure Windows Hello for Business Policy settings - Certificate Trust
|
# Configure Windows Hello for Business Policy settings - Certificate Trust
|
||||||
|
|
||||||
You need at least a Windows 10, version 1703 workstation to run the Group Policy Management Console, which provides the latest Windows Hello for Business and PIN Complexity Group Policy settings. To run the Group Policy Management Console, you need to install the Remote Server Administration Tools for Windows. You can download these tools from the [Microsoft Download Center](https://www.microsoft.com/download/details.aspx?id=45520).
|
To run the Group Policy Management Console, you need to install the Remote Server Administration Tools for Windows. You can download these tools from the [Microsoft Download Center](https://www.microsoft.com/download/details.aspx?id=45520).
|
||||||
Install the Remote Server Administration Tools for Windows on a computer running Windows 10, version 1703 or later.
|
Install the Remote Server Administration Tools for Windows on a computer running Windows 10 or later.
|
||||||
|
|
||||||
On-premises certificate-based deployments of Windows Hello for Business needs three Group Policy settings:
|
On-premises certificate-based deployments of Windows Hello for Business needs three Group Policy settings:
|
||||||
* Enable Windows Hello for Business
|
* Enable Windows Hello for Business
|
||||||
|
@ -1,21 +1,12 @@
|
|||||||
---
|
---
|
||||||
title: Update Active Directory schema for cert-trust deployment (Windows Hello for Business)
|
title: Update Active Directory schema for cert-trust deployment (Windows Hello for Business)
|
||||||
description: How to Validate Active Directory prerequisites for Windows Hello for Business when deploying with the certificate trust model.
|
description: How to Validate Active Directory prerequisites for Windows Hello for Business when deploying with the certificate trust model.
|
||||||
ms.prod: windows-client
|
|
||||||
ms.collection: M365-identity-device-management
|
|
||||||
ms.topic: article
|
|
||||||
localizationpriority: medium
|
|
||||||
ms.date: 08/19/2018
|
ms.date: 08/19/2018
|
||||||
author: paolomatarazzo
|
|
||||||
ms.author: paoloma
|
|
||||||
ms.reviewer: prsriva
|
|
||||||
manager: aaroncz
|
|
||||||
appliesto:
|
appliesto:
|
||||||
- ✅ <b>Windows 10</b>
|
- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10 and later</a>
|
||||||
- ✅ <b>Windows 11</b>
|
- ✅ <a href=https://learn.microsoft.com/en-us/windows/release-health/windows-server-release-info target=_blank>Windows Server 2016 and later</a>
|
||||||
- ✅ <b>On-premises deployments</b>
|
- ✅ <b>On-premises deployments</b>
|
||||||
- ✅ <b>Certificate trust</b>
|
- ✅ <b>Certificate trust</b>
|
||||||
ms.technology: itpro-security
|
|
||||||
---
|
---
|
||||||
# Validate Active Directory prerequisites for cert-trust deployment
|
# Validate Active Directory prerequisites for cert-trust deployment
|
||||||
|
|
||||||
@ -30,7 +21,9 @@ Manually updating Active Directory uses the command-line utility **adprep.exe**
|
|||||||
|
|
||||||
To locate the schema master role holder, open and command prompt and type:
|
To locate the schema master role holder, open and command prompt and type:
|
||||||
|
|
||||||
```Netdom query fsmo | findstr -i “schema”```
|
```cmd
|
||||||
|
netdom.exe query fsmo | findstr.exe -i "schema"
|
||||||
|
```
|
||||||
|
|
||||||

|

|
||||||
|
|
||||||
|
@ -1,21 +1,12 @@
|
|||||||
---
|
---
|
||||||
title: Validate and Deploy MFA for Windows Hello for Business with certificate trust
|
title: Validate and Deploy MFA for Windows Hello for Business with certificate trust
|
||||||
description: How to Validate and Deploy Multi-factor Authentication (MFA) Services for Windows Hello for Business with certificate trust
|
description: How to Validate and Deploy Multi-factor Authentication (MFA) Services for Windows Hello for Business with certificate trust
|
||||||
ms.prod: windows-client
|
|
||||||
ms.collection: M365-identity-device-management
|
|
||||||
ms.topic: article
|
|
||||||
localizationpriority: medium
|
|
||||||
ms.date: 08/19/2018
|
ms.date: 08/19/2018
|
||||||
author: paolomatarazzo
|
|
||||||
ms.author: paoloma
|
|
||||||
ms.reviewer: prsriva
|
|
||||||
manager: aaroncz
|
|
||||||
appliesto:
|
appliesto:
|
||||||
- ✅ <b>Windows 10</b>
|
- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10 and later</a>
|
||||||
- ✅ <b>Windows 11</b>
|
- ✅ <a href=https://learn.microsoft.com/en-us/windows/release-health/windows-server-release-info target=_blank>Windows Server 2016 and later</a>
|
||||||
- ✅ <b>On-premises deployments</b>
|
- ✅ <b>On-premises deployments</b>
|
||||||
- ✅ <b>Certificate trust</b>
|
- ✅ <b>Certificate trust</b>
|
||||||
ms.technology: itpro-security
|
|
||||||
---
|
---
|
||||||
# Validate and Deploy Multi-Factor Authentication feature
|
# Validate and Deploy Multi-Factor Authentication feature
|
||||||
|
|
||||||
|
@ -1,21 +1,12 @@
|
|||||||
---
|
---
|
||||||
title: Validate Public Key Infrastructure - certificate trust model (Windows Hello for Business)
|
title: Validate Public Key Infrastructure - certificate trust model (Windows Hello for Business)
|
||||||
description: How to Validate Public Key Infrastructure for Windows Hello for Business, under a certificate trust model.
|
description: How to Validate Public Key Infrastructure for Windows Hello for Business, under a certificate trust model.
|
||||||
ms.prod: windows-client
|
|
||||||
ms.collection: M365-identity-device-management
|
|
||||||
ms.topic: article
|
|
||||||
localizationpriority: medium
|
|
||||||
ms.date: 08/19/2018
|
ms.date: 08/19/2018
|
||||||
author: paolomatarazzo
|
|
||||||
ms.author: paoloma
|
|
||||||
ms.reviewer: prsriva
|
|
||||||
manager: aaroncz
|
|
||||||
appliesto:
|
appliesto:
|
||||||
- ✅ <b>Windows 10</b>
|
- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10 and later</a>
|
||||||
- ✅ <b>Windows 11</b>
|
- ✅ <a href=https://learn.microsoft.com/en-us/windows/release-health/windows-server-release-info target=_blank>Windows Server 2016 and later</a>
|
||||||
- ✅ <b>On-premises deployments</b>
|
- ✅ <b>On-premises deployments</b>
|
||||||
- ✅ <b>Certificate trust</b>
|
- ✅ <b>Certificate trust</b>
|
||||||
ms.technology: itpro-security
|
|
||||||
---
|
---
|
||||||
# Validate and Configure Public Key Infrastructure - Certificate Trust Model
|
# Validate and Configure Public Key Infrastructure - Certificate Trust Model
|
||||||
|
|
||||||
@ -23,7 +14,7 @@ Windows Hello for Business must have a public key infrastructure regardless of t
|
|||||||
|
|
||||||
## Deploy an enterprise certificate authority
|
## Deploy an enterprise certificate authority
|
||||||
|
|
||||||
This guide assumes most enterprise have an existing public key infrastructure. Windows Hello for Business depends on a Windows enterprise public key infrastructure running the Active Directory Certificate Services role from Windows Server 2012 or later.
|
This guide assumes most enterprise have an existing public key infrastructure. Windows Hello for Business depends on a Windows enterprise public key infrastructure running Active Directory Certificate Services.
|
||||||
|
|
||||||
### Lab-based public key infrastructure
|
### Lab-based public key infrastructure
|
||||||
|
|
||||||
@ -34,13 +25,13 @@ Sign-in using _Enterprise Admin_ equivalent credentials on Windows Server 2012 o
|
|||||||
>[!NOTE]
|
>[!NOTE]
|
||||||
>Never install a certificate authority on a domain controller in a production environment.
|
>Never install a certificate authority on a domain controller in a production environment.
|
||||||
|
|
||||||
1. Open an elevated Windows PowerShell prompt.
|
1. Open an elevated Windows PowerShell prompt
|
||||||
2. Use the following command to install the Active Directory Certificate Services role.
|
2. Use the following command to install the Active Directory Certificate Services role
|
||||||
```PowerShell
|
```PowerShell
|
||||||
Add-WindowsFeature Adcs-Cert-Authority -IncludeManagementTools
|
Add-WindowsFeature Adcs-Cert-Authority -IncludeManagementTools
|
||||||
```
|
```
|
||||||
|
|
||||||
3. Use the following command to configure the Certificate Authority using a basic certificate authority configuration.
|
3. Use the following command to configure the Certificate Authority using a basic certificate authority configuration
|
||||||
```PowerShell
|
```PowerShell
|
||||||
Install-AdcsCertificationAuthority
|
Install-AdcsCertificationAuthority
|
||||||
```
|
```
|
||||||
|
@ -1,21 +1,12 @@
|
|||||||
---
|
---
|
||||||
title: Windows Hello for Business Deployment Guide - On Premises Certificate Trust Deployment
|
title: Windows Hello for Business Deployment Guide - On Premises Certificate Trust Deployment
|
||||||
description: A guide to on premises, certificate trust Windows Hello for Business deployment.
|
description: A guide to on premises, certificate trust Windows Hello for Business deployment.
|
||||||
ms.prod: windows-client
|
|
||||||
ms.collection: M365-identity-device-management
|
|
||||||
ms.topic: article
|
|
||||||
localizationpriority: medium
|
|
||||||
ms.date: 08/19/2018
|
ms.date: 08/19/2018
|
||||||
author: paolomatarazzo
|
|
||||||
ms.author: paoloma
|
|
||||||
ms.reviewer: prsriva
|
|
||||||
manager: aaroncz
|
|
||||||
appliesto:
|
appliesto:
|
||||||
- ✅ <b>Windows 10</b>
|
- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10 and later</a>
|
||||||
- ✅ <b>Windows 11</b>
|
- ✅ <a href=https://learn.microsoft.com/en-us/windows/release-health/windows-server-release-info target=_blank>Windows Server 2016 and later</a>
|
||||||
- ✅ <b>On-premises deployments</b>
|
- ✅ <b>On-premises deployments</b>
|
||||||
- ✅ <b>Certificate trust</b>
|
- ✅ <b>Certificate trust</b>
|
||||||
ms.technology: itpro-security
|
|
||||||
---
|
---
|
||||||
# On Premises Certificate Trust Deployment
|
# On Premises Certificate Trust Deployment
|
||||||
|
|
||||||
|
@ -1,25 +1,12 @@
|
|||||||
---
|
---
|
||||||
title: Windows Hello for Business Deployment Overview
|
title: Windows Hello for Business Deployment Overview
|
||||||
description: Use this deployment guide to successfully deploy Windows Hello for Business in an existing environment.
|
description: Use this deployment guide to successfully deploy Windows Hello for Business in an existing environment.
|
||||||
ms.prod: windows-client
|
|
||||||
author: paolomatarazzo
|
|
||||||
ms.author: paoloma
|
|
||||||
manager: aaroncz
|
|
||||||
ms.reviewer: prsriva
|
|
||||||
ms.collection:
|
|
||||||
- M365-identity-device-management
|
|
||||||
ms.topic: article
|
|
||||||
localizationpriority: medium
|
|
||||||
ms.date: 02/15/2022
|
ms.date: 02/15/2022
|
||||||
ms.technology: itpro-security
|
appliesto:
|
||||||
|
- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10 and later</a>
|
||||||
---
|
---
|
||||||
# Windows Hello for Business Deployment Overview
|
# Windows Hello for Business Deployment Overview
|
||||||
|
|
||||||
**Applies to**
|
|
||||||
|
|
||||||
- Windows 10, version 1703 or later
|
|
||||||
- Windows 11
|
|
||||||
|
|
||||||
Windows Hello for Business is the springboard to a world without passwords. It replaces username and password sign-in to Windows with strong user authentication based on an asymmetric key pair.
|
Windows Hello for Business is the springboard to a world without passwords. It replaces username and password sign-in to Windows with strong user authentication based on an asymmetric key pair.
|
||||||
|
|
||||||
This deployment overview is to guide you through deploying Windows Hello for Business. Your first step should be to use the Passwordless Wizard in the [Microsoft 365 admin center](https://admin.microsoft.com/AdminPortal/Home#/modernonboarding/passwordlesssetup) or the [Planning a Windows Hello for Business Deployment](hello-planning-guide.md) guide to determine the right deployment model for your organization.
|
This deployment overview is to guide you through deploying Windows Hello for Business. Your first step should be to use the Passwordless Wizard in the [Microsoft 365 admin center](https://admin.microsoft.com/AdminPortal/Home#/modernonboarding/passwordlesssetup) or the [Planning a Windows Hello for Business Deployment](hello-planning-guide.md) guide to determine the right deployment model for your organization.
|
||||||
|
@ -1,17 +1,9 @@
|
|||||||
---
|
---
|
||||||
title: Windows Hello for Business Deployment Known Issues
|
title: Windows Hello for Business Deployment Known Issues
|
||||||
description: A Troubleshooting Guide for Known Windows Hello for Business Deployment Issues
|
description: A Troubleshooting Guide for Known Windows Hello for Business Deployment Issues
|
||||||
params: siblings_only
|
|
||||||
ms.prod: windows-client
|
|
||||||
author: paolomatarazzo
|
|
||||||
ms.author: paoloma
|
|
||||||
manager: aaroncz
|
|
||||||
ms.reviewer: prsriva
|
|
||||||
ms.collection: M365-identity-device-management
|
|
||||||
ms.topic: article
|
|
||||||
localizationpriority: medium
|
|
||||||
ms.date: 05/03/2021
|
ms.date: 05/03/2021
|
||||||
ms.technology: itpro-security
|
appliesto:
|
||||||
|
- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10 and later</a>
|
||||||
---
|
---
|
||||||
# Windows Hello for Business Known Deployment Issues
|
# Windows Hello for Business Known Deployment Issues
|
||||||
|
|
||||||
@ -19,12 +11,6 @@ The content of this article is to help troubleshoot and workaround known deploym
|
|||||||
|
|
||||||
## PIN Reset on Azure AD Join Devices Fails with "We can't open that page right now" error
|
## PIN Reset on Azure AD Join Devices Fails with "We can't open that page right now" error
|
||||||
|
|
||||||
Applies to:
|
|
||||||
|
|
||||||
- Azure AD joined deployments
|
|
||||||
- Windows 10, version 1803 and later
|
|
||||||
- Windows 11
|
|
||||||
|
|
||||||
PIN reset on Azure AD-joined devices uses a flow called web sign-in to authenticate the user above lock. Web sign in only allows navigation to specific domains. If it attempts to navigate to a domain that is not allowed it will show a page with the error message "We can't open that page right now".
|
PIN reset on Azure AD-joined devices uses a flow called web sign-in to authenticate the user above lock. Web sign in only allows navigation to specific domains. If it attempts to navigate to a domain that is not allowed it will show a page with the error message "We can't open that page right now".
|
||||||
|
|
||||||
### Identifying Azure AD joined PIN Reset Allowed Domains Issue
|
### Identifying Azure AD joined PIN Reset Allowed Domains Issue
|
||||||
|
@ -1,21 +1,11 @@
|
|||||||
---
|
---
|
||||||
title: Windows Hello for Business Deployment Guide - On Premises Key Deployment
|
title: Windows Hello for Business Deployment Guide - On Premises Key Deployment
|
||||||
description: A guide to on premises, key trust Windows Hello for Business deployment.
|
description: A guide to on premises, key trust Windows Hello for Business deployment.
|
||||||
ms.prod: windows-client
|
|
||||||
author: paolomatarazzo
|
|
||||||
ms.author: paoloma
|
|
||||||
manager: aaroncz
|
|
||||||
ms.reviewer: prsriva
|
|
||||||
ms.collection: M365-identity-device-management
|
|
||||||
ms.topic: article
|
|
||||||
localizationpriority: medium
|
|
||||||
ms.date: 08/20/2018
|
ms.date: 08/20/2018
|
||||||
appliesto:
|
appliesto:
|
||||||
- ✅ <b>Windows 10</b>
|
- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10 and later</a>
|
||||||
- ✅ <b>Windows 11</b>
|
|
||||||
- ✅ <b>On-premises deployment</b>
|
- ✅ <b>On-premises deployment</b>
|
||||||
- ✅ <b>Key trust</b>
|
- ✅ <b>Key trust</b>
|
||||||
ms.technology: itpro-security
|
|
||||||
---
|
---
|
||||||
# On Premises Key Trust Deployment
|
# On Premises Key Trust Deployment
|
||||||
|
|
||||||
|
@ -1,24 +1,15 @@
|
|||||||
---
|
---
|
||||||
title: Deploying Certificates to Key Trust Users to Enable RDP
|
title: Deploying Certificates to Key Trust Users to Enable RDP
|
||||||
description: Learn how to deploy certificates to a Key Trust user to enable remote desktop with supplied credentials
|
description: Learn how to deploy certificates to a Key Trust user to enable remote desktop with supplied credentials
|
||||||
ms.prod: windows-client
|
|
||||||
author: paolomatarazzo
|
|
||||||
ms.author: paoloma
|
|
||||||
manager: aaroncz
|
|
||||||
ms.reviewer: prsriva
|
|
||||||
ms.collection:
|
ms.collection:
|
||||||
- M365-identity-device-management
|
- M365-identity-device-management
|
||||||
- ContentEngagementFY23
|
- ContentEngagementFY23
|
||||||
ms.topic: article
|
|
||||||
localizationpriority: medium
|
|
||||||
ms.date: 02/22/2021
|
ms.date: 02/22/2021
|
||||||
appliesto:
|
appliesto:
|
||||||
- ✅ <b>Windows 10</b>
|
- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10 and later</a>
|
||||||
- ✅ <b>Windows 11</b>
|
|
||||||
- ✅ <b>Hybrid deployment</b>
|
- ✅ <b>Hybrid deployment</b>
|
||||||
- ✅ <b>Key trust</b>
|
- ✅ <b>Key trust</b>
|
||||||
- ✅ <b>Cloud Kerberos trust</b>
|
- ✅ <b>Kerberos trust</b>
|
||||||
ms.technology: itpro-security
|
|
||||||
---
|
---
|
||||||
|
|
||||||
# Deploy Certificates to Key Trust and Cloud Kerberos Trust Users to Enable RDP
|
# Deploy Certificates to Key Trust and Cloud Kerberos Trust Users to Enable RDP
|
||||||
|
@ -1,20 +1,10 @@
|
|||||||
---
|
---
|
||||||
title: Windows Hello errors during PIN creation (Windows)
|
title: Windows Hello errors during PIN creation (Windows)
|
||||||
description: When you set up Windows Hello in Windows 10/11, you may get an error during the Create a work PIN step.
|
description: When you set up Windows Hello in Windows 10/11, you may get an error during the Create a work PIN step.
|
||||||
ms.prod: windows-client
|
|
||||||
author: paolomatarazzo
|
|
||||||
ms.author: paoloma
|
|
||||||
manager: aaroncz
|
|
||||||
ms.reviewer: prsriva
|
|
||||||
ms.collection:
|
|
||||||
- M365-identity-device-management
|
|
||||||
ms.topic: troubleshooting
|
ms.topic: troubleshooting
|
||||||
ms.localizationpriority: medium
|
|
||||||
ms.date: 05/05/2018
|
ms.date: 05/05/2018
|
||||||
appliesto:
|
appliesto:
|
||||||
- ✅ <b>Windows 10</b>
|
- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10 and later</a>
|
||||||
- ✅ <b>Windows 11</b>
|
|
||||||
ms.technology: itpro-security
|
|
||||||
---
|
---
|
||||||
|
|
||||||
# Windows Hello errors during PIN creation
|
# Windows Hello errors during PIN creation
|
||||||
|
@ -1,19 +1,9 @@
|
|||||||
---
|
---
|
||||||
title: Event ID 300 - Windows Hello successfully created (Windows)
|
title: Event ID 300 - Windows Hello successfully created (Windows)
|
||||||
description: This event is created when a Windows Hello for Business is successfully created and registered with Azure Active Directory (Azure AD).
|
description: This event is created when a Windows Hello for Business is successfully created and registered with Azure Active Directory (Azure AD).
|
||||||
ms.prod: windows-client
|
|
||||||
author: paolomatarazzo
|
|
||||||
ms.author: paoloma
|
|
||||||
manager: aaroncz
|
|
||||||
ms.reviewer: prsriva
|
|
||||||
ms.collection: M365-identity-device-management
|
|
||||||
ms.topic: article
|
|
||||||
ms.localizationpriority: medium
|
|
||||||
ms.date: 07/27/2017
|
ms.date: 07/27/2017
|
||||||
appliesto:
|
appliesto:
|
||||||
- ✅ <b>Windows 10</b>
|
- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10 and later</a>
|
||||||
- ✅ <b>Windows 11</b>
|
|
||||||
ms.technology: itpro-security
|
|
||||||
---
|
---
|
||||||
|
|
||||||
# Event ID 300 - Windows Hello successfully created
|
# Event ID 300 - Windows Hello successfully created
|
||||||
|
@ -19,8 +19,7 @@ metadata:
|
|||||||
localizationpriority: medium
|
localizationpriority: medium
|
||||||
ms.date: 11/11/2022
|
ms.date: 11/11/2022
|
||||||
appliesto:
|
appliesto:
|
||||||
- ✅ <b>Windows 10</b>
|
- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10 and later</a>
|
||||||
- ✅ <b>Windows 11</b>
|
|
||||||
|
|
||||||
title: Windows Hello for Business Frequently Asked Questions (FAQ)
|
title: Windows Hello for Business Frequently Asked Questions (FAQ)
|
||||||
summary: |
|
summary: |
|
||||||
|
@ -1,16 +1,9 @@
|
|||||||
---
|
---
|
||||||
title: Conditional Access
|
title: Conditional Access
|
||||||
description: Ensure that only approved users can access your devices, applications, and services from anywhere by enabling single sign-on with Azure Active Directory.
|
description: Ensure that only approved users can access your devices, applications, and services from anywhere by enabling single sign-on with Azure Active Directory.
|
||||||
ms.prod: windows-client
|
|
||||||
author: paolomatarazzo
|
|
||||||
ms.author: paoloma
|
|
||||||
manager: aaroncz
|
|
||||||
ms.reviewer: prsriva
|
|
||||||
ms.collection: M365-identity-device-management
|
|
||||||
ms.topic: article
|
|
||||||
localizationpriority: medium
|
|
||||||
ms.date: 09/09/2019
|
ms.date: 09/09/2019
|
||||||
ms.technology: itpro-security
|
appliesto:
|
||||||
|
- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10 and later</a>
|
||||||
---
|
---
|
||||||
|
|
||||||
# Conditional access
|
# Conditional access
|
||||||
|
@ -1,16 +1,9 @@
|
|||||||
---
|
---
|
||||||
title: Dual Enrollment
|
title: Dual Enrollment
|
||||||
description: Learn how to configure Windows Hello for Business dual enrollment. Also, learn how to configure Active Directory to support Domain Administrator enrollment.
|
description: Learn how to configure Windows Hello for Business dual enrollment. Also, learn how to configure Active Directory to support Domain Administrator enrollment.
|
||||||
ms.prod: windows-client
|
|
||||||
author: paolomatarazzo
|
|
||||||
ms.author: paoloma
|
|
||||||
manager: aaroncz
|
|
||||||
ms.reviewer: prsriva
|
|
||||||
ms.collection: M365-identity-device-management
|
|
||||||
ms.topic: article
|
|
||||||
localizationpriority: medium
|
|
||||||
ms.date: 09/09/2019
|
ms.date: 09/09/2019
|
||||||
ms.technology: itpro-security
|
appliesto:
|
||||||
|
- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10 and later</a>
|
||||||
---
|
---
|
||||||
|
|
||||||
# Dual Enrollment
|
# Dual Enrollment
|
||||||
@ -19,7 +12,6 @@ ms.technology: itpro-security
|
|||||||
|
|
||||||
* Hybrid and On-premises Windows Hello for Business deployments
|
* Hybrid and On-premises Windows Hello for Business deployments
|
||||||
* Enterprise joined or Hybrid Azure joined devices
|
* Enterprise joined or Hybrid Azure joined devices
|
||||||
* Windows 10, version 1709 or later
|
|
||||||
* Certificate trust
|
* Certificate trust
|
||||||
|
|
||||||
> [!NOTE]
|
> [!NOTE]
|
||||||
|
@ -1,19 +1,9 @@
|
|||||||
---
|
---
|
||||||
title: Dynamic lock
|
title: Dynamic lock
|
||||||
description: Learn how to set Dynamic lock on Windows 10 and Windows 11 devices, by configuring group policies. This feature locks a device when a Bluetooth signal falls below a set value.
|
description: Learn how to set Dynamic lock on Windows 10 and Windows 11 devices, by configuring group policies. This feature locks a device when a Bluetooth signal falls below a set value.
|
||||||
ms.prod: windows-client
|
|
||||||
author: paolomatarazzo
|
|
||||||
ms.author: paoloma
|
|
||||||
manager: aaroncz
|
|
||||||
ms.reviewer: prsriva
|
|
||||||
ms.collection: M365-identity-device-management
|
|
||||||
ms.topic: article
|
|
||||||
localizationpriority: medium
|
|
||||||
ms.date: 07/12/2022
|
ms.date: 07/12/2022
|
||||||
appliesto:
|
appliesto:
|
||||||
- ✅ <b>Windows 10</b>
|
- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10 and later</a>
|
||||||
- ✅ <b>Windows 11</b>
|
|
||||||
ms.technology: itpro-security
|
|
||||||
---
|
---
|
||||||
|
|
||||||
# Dynamic lock
|
# Dynamic lock
|
||||||
|
@ -1,21 +1,12 @@
|
|||||||
---
|
---
|
||||||
title: Pin Reset
|
title: Pin Reset
|
||||||
description: Learn how Microsoft PIN reset services enable you to help users recover who have forgotten their PIN.
|
description: Learn how Microsoft PIN reset services enable you to help users recover who have forgotten their PIN.
|
||||||
ms.prod: windows-client
|
|
||||||
author: paolomatarazzo
|
|
||||||
ms.author: paoloma
|
|
||||||
manager: aaroncz
|
|
||||||
ms.reviewer: prsriva
|
|
||||||
ms.collection:
|
ms.collection:
|
||||||
- M365-identity-device-management
|
- M365-identity-device-management
|
||||||
- highpri
|
- highpri
|
||||||
ms.topic: article
|
|
||||||
localizationpriority: medium
|
|
||||||
ms.date: 07/29/2022
|
ms.date: 07/29/2022
|
||||||
appliesto:
|
appliesto:
|
||||||
- ✅ <b>Windows 10</b>
|
- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10 and later</a>
|
||||||
- ✅ <b>Windows 11</b>
|
|
||||||
ms.technology: itpro-security
|
|
||||||
---
|
---
|
||||||
|
|
||||||
# PIN reset
|
# PIN reset
|
||||||
|
@ -1,24 +1,14 @@
|
|||||||
---
|
---
|
||||||
title: Remote Desktop
|
title: Remote Desktop
|
||||||
description: Learn how Windows Hello for Business supports using biometrics with remote desktop
|
description: Learn how Windows Hello for Business supports using biometrics with remote desktop
|
||||||
ms.prod: windows-client
|
|
||||||
author: paolomatarazzo
|
|
||||||
ms.author: paoloma
|
|
||||||
manager: aaroncz
|
|
||||||
ms.reviewer: prsriva
|
|
||||||
ms.collection: M365-identity-device-management
|
|
||||||
ms.topic: article
|
|
||||||
localizationpriority: medium
|
|
||||||
ms.date: 02/24/2021
|
ms.date: 02/24/2021
|
||||||
ms.technology: itpro-security
|
appliesto:
|
||||||
|
- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10 and later</a>
|
||||||
---
|
---
|
||||||
|
|
||||||
# Remote Desktop
|
# Remote Desktop
|
||||||
|
|
||||||
**Requirements**
|
**Requirements**
|
||||||
|
|
||||||
- Windows 10
|
|
||||||
- Windows 11
|
|
||||||
- Hybrid and On-premises Windows Hello for Business deployments
|
- Hybrid and On-premises Windows Hello for Business deployments
|
||||||
- Azure AD joined, Hybrid Azure AD joined, and Enterprise joined devices
|
- Azure AD joined, Hybrid Azure AD joined, and Enterprise joined devices
|
||||||
|
|
||||||
|
@ -1,19 +1,9 @@
|
|||||||
---
|
---
|
||||||
title: How Windows Hello for Business works - Authentication
|
title: How Windows Hello for Business works - Authentication
|
||||||
description: Learn about the authentication flow for Windows Hello for Business.
|
description: Learn about the authentication flow for Windows Hello for Business.
|
||||||
ms.prod: windows-client
|
|
||||||
author: paolomatarazzo
|
|
||||||
ms.author: paoloma
|
|
||||||
manager: aaroncz
|
|
||||||
ms.reviewer: prsriva
|
|
||||||
ms.collection: M365-identity-device-management
|
|
||||||
ms.topic: article
|
|
||||||
localizationpriority: medium
|
|
||||||
ms.date: 02/15/2022
|
ms.date: 02/15/2022
|
||||||
appliesto:
|
appliesto:
|
||||||
- ✅ <b>Windows 10</b>
|
- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10 and later</a>
|
||||||
- ✅ <b>Windows 11</b>
|
|
||||||
ms.technology: itpro-security
|
|
||||||
---
|
---
|
||||||
# Windows Hello for Business and Authentication
|
# Windows Hello for Business and Authentication
|
||||||
|
|
||||||
|
@ -1,19 +1,9 @@
|
|||||||
---
|
---
|
||||||
title: How Windows Hello for Business works - Provisioning
|
title: How Windows Hello for Business works - Provisioning
|
||||||
description: Explore the provisioning flows for Windows Hello for Business, from within a variety of environments.
|
description: Explore the provisioning flows for Windows Hello for Business, from within a variety of environments.
|
||||||
ms.prod: windows-client
|
|
||||||
author: paolomatarazzo
|
|
||||||
ms.author: paoloma
|
|
||||||
manager: aaroncz
|
|
||||||
ms.reviewer: prsriva
|
|
||||||
ms.collection: M365-identity-device-management
|
|
||||||
ms.topic: article
|
|
||||||
localizationpriority: medium
|
|
||||||
ms.date: 2/15/2022
|
ms.date: 2/15/2022
|
||||||
appliesto:
|
appliesto:
|
||||||
- ✅ <b>Windows 10</b>
|
- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10 and later</a>
|
||||||
- ✅ <b>Windows 11</b>
|
|
||||||
ms.technology: itpro-security
|
|
||||||
---
|
---
|
||||||
# Windows Hello for Business Provisioning
|
# Windows Hello for Business Provisioning
|
||||||
|
|
||||||
|
@ -1,19 +1,9 @@
|
|||||||
---
|
---
|
||||||
title: How Windows Hello for Business works - technology and terms
|
title: How Windows Hello for Business works - technology and terms
|
||||||
description: Explore technology and terms associated with Windows Hello for Business. Learn how Windows Hello for Business works.
|
description: Explore technology and terms associated with Windows Hello for Business. Learn how Windows Hello for Business works.
|
||||||
ms.prod: windows-client
|
|
||||||
author: paolomatarazzo
|
|
||||||
ms.author: paoloma
|
|
||||||
manager: aaroncz
|
|
||||||
ms.reviewer: prsriva
|
|
||||||
ms.collection: M365-identity-device-management
|
|
||||||
ms.topic: article
|
|
||||||
localizationpriority: medium
|
|
||||||
ms.date: 10/08/2018
|
ms.date: 10/08/2018
|
||||||
appliesto:
|
appliesto:
|
||||||
- ✅ <b>Windows 10</b>
|
- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10 and later</a>
|
||||||
- ✅ <b>Windows 11</b>
|
|
||||||
ms.technology: itpro-security
|
|
||||||
---
|
---
|
||||||
|
|
||||||
# Technology and terms
|
# Technology and terms
|
||||||
|
@ -1,18 +1,9 @@
|
|||||||
---
|
---
|
||||||
title: How Windows Hello for Business works
|
title: How Windows Hello for Business works
|
||||||
description: Learn how Windows Hello for Business works, and how it can help your users authenticate to services.
|
description: Learn how Windows Hello for Business works, and how it can help your users authenticate to services.
|
||||||
ms.prod: windows-client
|
|
||||||
author: paolomatarazzo
|
|
||||||
ms.author: paoloma
|
|
||||||
manager: aaroncz
|
|
||||||
ms.reviewer: prsriva
|
|
||||||
ms.collection: M365-identity-device-management
|
|
||||||
ms.topic: article
|
|
||||||
localizationpriority: medium
|
|
||||||
ms.date: 05/05/2018
|
ms.date: 05/05/2018
|
||||||
appliesto:
|
appliesto:
|
||||||
- ✅ <a href="https://learn.microsoft.com/windows/release-health/supported-versions-windows-client" target="_blank">Windows 10 and later</a>
|
- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10 and later</a>
|
||||||
ms.technology: itpro-security
|
|
||||||
---
|
---
|
||||||
# How Windows Hello for Business works in Windows Devices
|
# How Windows Hello for Business works in Windows Devices
|
||||||
|
|
||||||
|
@ -1,23 +1,12 @@
|
|||||||
---
|
---
|
||||||
title: Configure Azure AD-joined devices for On-premises Single-Sign On using Windows Hello for Business
|
title: Configure Azure AD-joined devices for On-premises Single-Sign On using Windows Hello for Business
|
||||||
description: Before adding Azure Active Directory (Azure AD) joined devices to your existing hybrid deployment, you need to verify the existing deployment can support them.
|
description: Before adding Azure Active Directory (Azure AD) joined devices to your existing hybrid deployment, you need to verify the existing deployment can support them.
|
||||||
ms.prod: windows-client
|
|
||||||
author: paolomatarazzo
|
|
||||||
ms.author: paoloma
|
|
||||||
manager: aaroncz
|
|
||||||
ms.reviewer: prsriva
|
|
||||||
ms.collection:
|
|
||||||
- M365-identity-device-management
|
|
||||||
ms.topic: article
|
|
||||||
localizationpriority: medium
|
|
||||||
ms.date: 01/14/2021
|
ms.date: 01/14/2021
|
||||||
appliesto:
|
appliesto:
|
||||||
- ✅ <b>Windows 10</b>
|
- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10 and later</a>
|
||||||
- ✅ <b>Windows 11</b>
|
|
||||||
- ✅ <b>Azure Active Directory-join</b>
|
- ✅ <b>Azure Active Directory-join</b>
|
||||||
- ✅ <b>Hybrid Deployment</b>
|
- ✅ <b>Hybrid Deployment</b>
|
||||||
- ✅ <b>Key trust</b>
|
- ✅ <b>Key trust</b>
|
||||||
ms.technology: itpro-security
|
|
||||||
---
|
---
|
||||||
# Configure Azure AD-joined devices for On-premises Single-Sign On using Windows Hello for Business
|
# Configure Azure AD-joined devices for On-premises Single-Sign On using Windows Hello for Business
|
||||||
## Prerequisites
|
## Prerequisites
|
||||||
|
@ -1,22 +1,12 @@
|
|||||||
---
|
---
|
||||||
title: Using Certificates for AADJ On-premises Single-sign On single sign-on
|
title: Using Certificates for AADJ On-premises Single-sign On single sign-on
|
||||||
description: If you want to use certificates for on-premises single-sign on for Azure Active Directory-joined devices, then follow these additional steps.
|
description: If you want to use certificates for on-premises single-sign on for Azure Active Directory-joined devices, then follow these additional steps.
|
||||||
ms.prod: windows-client
|
|
||||||
author: paolomatarazzo
|
|
||||||
ms.author: paoloma
|
|
||||||
manager: aaroncz
|
|
||||||
ms.reviewer: prsriva
|
|
||||||
ms.collection: M365-identity-device-management
|
|
||||||
ms.topic: article
|
|
||||||
localizationpriority: medium
|
|
||||||
ms.date: 08/19/2018
|
ms.date: 08/19/2018
|
||||||
appliesto:
|
appliesto:
|
||||||
- ✅ <b>Windows 10</b>
|
- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10 and later</a>
|
||||||
- ✅ <b>Windows 11</b>
|
|
||||||
- ✅ <b>Azure AD-join</b>
|
- ✅ <b>Azure AD-join</b>
|
||||||
- ✅ <b>Hybrid Deployment</b>
|
- ✅ <b>Hybrid Deployment</b>
|
||||||
- ✅ <b>Certificate trust</b>
|
- ✅ <b>Certificate trust</b>
|
||||||
ms.technology: itpro-security
|
|
||||||
---
|
---
|
||||||
|
|
||||||
# Using Certificates for AADJ On-premises Single-sign On
|
# Using Certificates for AADJ On-premises Single-sign On
|
||||||
|
@ -1,19 +1,9 @@
|
|||||||
---
|
---
|
||||||
title: Azure AD Join Single Sign-on Deployment
|
title: Azure AD Join Single Sign-on Deployment
|
||||||
description: Learn how to provide single sign-on to your on-premises resources for Azure Active Directory-joined devices, using Windows Hello for Business.
|
description: Learn how to provide single sign-on to your on-premises resources for Azure Active Directory-joined devices, using Windows Hello for Business.
|
||||||
ms.prod: windows-client
|
|
||||||
author: paolomatarazzo
|
|
||||||
ms.author: paoloma
|
|
||||||
manager: aaroncz
|
|
||||||
ms.reviewer: prsriva
|
|
||||||
ms.collection: M365-identity-device-management
|
|
||||||
ms.topic: article
|
|
||||||
localizationpriority: medium
|
|
||||||
ms.date: 08/19/2018
|
ms.date: 08/19/2018
|
||||||
appliesto:
|
appliesto:
|
||||||
- ✅ <b>Windows 10</b>
|
- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10 and later</a>
|
||||||
- ✅ <b>Windows 11</b>
|
|
||||||
ms.technology: itpro-security
|
|
||||||
---
|
---
|
||||||
# Azure AD Join Single Sign-on Deployment
|
# Azure AD Join Single Sign-on Deployment
|
||||||
|
|
||||||
|
@ -1,21 +1,11 @@
|
|||||||
---
|
---
|
||||||
title: Hybrid Azure AD joined Windows Hello for Business Trust New Installation (Windows Hello for Business)
|
title: Hybrid Azure AD joined Windows Hello for Business Trust New Installation (Windows Hello for Business)
|
||||||
description: Learn about new installations for Windows Hello for Business certificate trust and the various technologies hybrid certificate trust deployments rely on.
|
description: Learn about new installations for Windows Hello for Business certificate trust and the various technologies hybrid certificate trust deployments rely on.
|
||||||
ms.prod: windows-client
|
|
||||||
author: paolomatarazzo
|
|
||||||
ms.author: paoloma
|
|
||||||
manager: aaroncz
|
|
||||||
ms.reviewer: prsriva
|
|
||||||
ms.collection: M365-identity-device-management
|
|
||||||
ms.topic: article
|
|
||||||
localizationpriority: medium
|
|
||||||
ms.date: 4/30/2021
|
ms.date: 4/30/2021
|
||||||
appliesto:
|
appliesto:
|
||||||
- ✅ <b>Windows 10</b>
|
- ✅ <a href=https: //learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10 and later</a>
|
||||||
- ✅ <b>Windows 11</b>
|
|
||||||
- ✅ <b>Hybrid deployment</b>
|
- ✅ <b>Hybrid deployment</b>
|
||||||
- ✅ <b>Certificate trust</b>
|
- ✅ <b>Certificate trust</b>
|
||||||
ms.technology: itpro-security
|
|
||||||
---
|
---
|
||||||
# Hybrid Azure AD joined Windows Hello for Business Certificate Trust New Installation
|
# Hybrid Azure AD joined Windows Hello for Business Certificate Trust New Installation
|
||||||
|
|
||||||
|
@ -1,21 +1,11 @@
|
|||||||
---
|
---
|
||||||
title: Configure Device Registration for Hybrid Azure AD joined Windows Hello for Business
|
title: Configure Device Registration for Hybrid Azure AD joined Windows Hello for Business
|
||||||
description: Azure Device Registration for Hybrid Certificate Trust Deployment (Windows Hello for Business)
|
description: Azure Device Registration for Hybrid Certificate Trust Deployment (Windows Hello for Business)
|
||||||
ms.prod: windows-client
|
|
||||||
author: paolomatarazzo
|
|
||||||
ms.author: paoloma
|
|
||||||
manager: aaroncz
|
|
||||||
ms.reviewer: prsriva
|
|
||||||
ms.collection: M365-identity-device-management
|
|
||||||
ms.topic: article
|
|
||||||
localizationpriority: medium
|
|
||||||
ms.date: 4/30/2021
|
ms.date: 4/30/2021
|
||||||
appliesto:
|
appliesto:
|
||||||
- ✅ <b>Windows 10</b>
|
- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10 and later</a>
|
||||||
- ✅ <b>Windows 11</b>
|
|
||||||
- ✅ <b>Hybrid deployment</b>
|
- ✅ <b>Hybrid deployment</b>
|
||||||
- ✅ <b>Certificate trust</b>
|
- ✅ <b>Certificate trust</b>
|
||||||
ms.technology: itpro-security
|
|
||||||
---
|
---
|
||||||
# Configure Device Registration for Hybrid Azure AD joined Windows Hello for Business
|
# Configure Device Registration for Hybrid Azure AD joined Windows Hello for Business
|
||||||
|
|
||||||
|
@ -1,21 +1,11 @@
|
|||||||
---
|
---
|
||||||
title: Hybrid Azure AD joined Windows Hello for Business Prerequisites
|
title: Hybrid Azure AD joined Windows Hello for Business Prerequisites
|
||||||
description: Learn these prerequisites for hybrid Windows Hello for Business deployments using certificate trust.
|
description: Learn these prerequisites for hybrid Windows Hello for Business deployments using certificate trust.
|
||||||
ms.prod: windows-client
|
|
||||||
author: paolomatarazzo
|
|
||||||
ms.author: paoloma
|
|
||||||
manager: aaroncz
|
|
||||||
ms.reviewer: prsriva
|
|
||||||
ms.collection: M365-identity-device-management
|
|
||||||
ms.topic: article
|
|
||||||
localizationpriority: medium
|
|
||||||
ms.date: 4/30/2021
|
ms.date: 4/30/2021
|
||||||
appliesto:
|
appliesto:
|
||||||
- ✅ <b>Windows 10</b>
|
- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10 and later</a>
|
||||||
- ✅ <b>Windows 11</b>
|
|
||||||
- ✅ <b>Hybrid deployment</b>
|
- ✅ <b>Hybrid deployment</b>
|
||||||
- ✅ <b>Certificate trust</b>
|
- ✅ <b>Certificate trust</b>
|
||||||
ms.technology: itpro-security
|
|
||||||
---
|
---
|
||||||
# Hybrid Azure AD joined Windows Hello for Business Prerequisites
|
# Hybrid Azure AD joined Windows Hello for Business Prerequisites
|
||||||
|
|
||||||
|
@ -1,21 +1,11 @@
|
|||||||
---
|
---
|
||||||
title: Hybrid Certificate Trust Deployment (Windows Hello for Business)
|
title: Hybrid Certificate Trust Deployment (Windows Hello for Business)
|
||||||
description: Learn the information you need to successfully deploy Windows Hello for Business in a hybrid certificate trust scenario.
|
description: Learn the information you need to successfully deploy Windows Hello for Business in a hybrid certificate trust scenario.
|
||||||
ms.prod: windows-client
|
|
||||||
author: paolomatarazzo
|
|
||||||
ms.author: paoloma
|
|
||||||
manager: aaroncz
|
|
||||||
ms.reviewer: prsriva
|
|
||||||
ms.collection: M365-identity-device-management
|
|
||||||
ms.topic: article
|
|
||||||
localizationpriority: medium
|
|
||||||
ms.date: 09/08/2017
|
ms.date: 09/08/2017
|
||||||
appliesto:
|
appliesto:
|
||||||
- ✅ <b>Windows 10</b>
|
- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10 and later</a>
|
||||||
- ✅ <b>Windows 11</b>
|
|
||||||
- ✅ <b>Hybrid deployment</b>
|
- ✅ <b>Hybrid deployment</b>
|
||||||
- ✅ <b>Certificate trust</b>
|
- ✅ <b>Certificate trust</b>
|
||||||
ms.technology: itpro-security
|
|
||||||
---
|
---
|
||||||
# Hybrid Azure AD joined Certificate Trust Deployment
|
# Hybrid Azure AD joined Certificate Trust Deployment
|
||||||
|
|
||||||
|
@ -1,21 +1,11 @@
|
|||||||
---
|
---
|
||||||
title: Hybrid Azure AD joined Windows Hello for Business Certificate Trust Provisioning (Windows Hello for Business)
|
title: Hybrid Azure AD joined Windows Hello for Business Certificate Trust Provisioning (Windows Hello for Business)
|
||||||
description: In this article, learn about provisioning for hybrid certificate trust deployments of Windows Hello for Business.
|
description: In this article, learn about provisioning for hybrid certificate trust deployments of Windows Hello for Business.
|
||||||
ms.prod: windows-client
|
|
||||||
author: paolomatarazzo
|
|
||||||
ms.author: paoloma
|
|
||||||
manager: aaroncz
|
|
||||||
ms.reviewer: prsriva
|
|
||||||
ms.collection: M365-identity-device-management
|
|
||||||
ms.topic: article
|
|
||||||
localizationpriority: medium
|
|
||||||
ms.date: 4/30/2021
|
ms.date: 4/30/2021
|
||||||
appliesto:
|
appliesto:
|
||||||
- ✅ <b>Windows 10</b>
|
- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10 and later</a>
|
||||||
- ✅ <b>Windows 11</b>
|
|
||||||
- ✅ <b>Hybrid deployment</b>
|
- ✅ <b>Hybrid deployment</b>
|
||||||
- ✅ <b>Certificate trust</b>
|
- ✅ <b>Certificate trust</b>
|
||||||
ms.technology: itpro-security
|
|
||||||
---
|
---
|
||||||
# Hybrid Azure AD joined Windows Hello for Business Certificate Trust Provisioning
|
# Hybrid Azure AD joined Windows Hello for Business Certificate Trust Provisioning
|
||||||
|
|
||||||
|
@ -1,21 +1,11 @@
|
|||||||
---
|
---
|
||||||
title: Configure Hybrid Azure AD joined Windows Hello for Business - Active Directory (AD)
|
title: Configure Hybrid Azure AD joined Windows Hello for Business - Active Directory (AD)
|
||||||
description: Discussing the configuration of Active Directory (AD) in a Hybrid deployment of Windows Hello for Business
|
description: Discussing the configuration of Active Directory (AD) in a Hybrid deployment of Windows Hello for Business
|
||||||
ms.prod: windows-client
|
|
||||||
author: paolomatarazzo
|
|
||||||
ms.author: paoloma
|
|
||||||
manager: aaroncz
|
|
||||||
ms.reviewer: prsriva
|
|
||||||
ms.collection: M365-identity-device-management
|
|
||||||
ms.topic: article
|
|
||||||
localizationpriority: medium
|
|
||||||
ms.date: 4/30/2021
|
ms.date: 4/30/2021
|
||||||
appliesto:
|
appliesto:
|
||||||
- ✅ <b>Windows 10</b>
|
- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10 and later</a>
|
||||||
- ✅ <b>Windows 11</b>
|
|
||||||
- ✅ <b>Hybrid deployment</b>
|
- ✅ <b>Hybrid deployment</b>
|
||||||
- ✅ <b>Certificate trust</b>
|
- ✅ <b>Certificate trust</b>
|
||||||
ms.technology: itpro-security
|
|
||||||
---
|
---
|
||||||
# Configure Hybrid Azure AD joined Windows Hello for Business: Active Directory
|
# Configure Hybrid Azure AD joined Windows Hello for Business: Active Directory
|
||||||
|
|
||||||
|
@ -1,21 +1,11 @@
|
|||||||
---
|
---
|
||||||
title: Configuring Hybrid Azure AD joined Windows Hello for Business - Active Directory Federation Services (ADFS)
|
title: Configuring Hybrid Azure AD joined Windows Hello for Business - Active Directory Federation Services (ADFS)
|
||||||
description: Discussing the configuration of Active Directory Federation Services (ADFS) in a Hybrid deployment of Windows Hello for Business
|
description: Discussing the configuration of Active Directory Federation Services (ADFS) in a Hybrid deployment of Windows Hello for Business
|
||||||
ms.prod: windows-client
|
|
||||||
author: paolomatarazzo
|
|
||||||
ms.author: paoloma
|
|
||||||
manager: aaroncz
|
|
||||||
ms.reviewer: prsriva
|
|
||||||
ms.collection: M365-identity-device-management
|
|
||||||
ms.topic: article
|
|
||||||
localizationpriority: medium
|
|
||||||
ms.date: 4/30/2021
|
ms.date: 4/30/2021
|
||||||
appliesto:
|
appliesto:
|
||||||
- ✅ <b>Windows 10</b>
|
- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10 and later</a>
|
||||||
- ✅ <b>Windows 11</b>
|
|
||||||
- ✅ <b>Hybrid deployment</b>
|
- ✅ <b>Hybrid deployment</b>
|
||||||
- ✅ <b>Certificate trust</b>
|
- ✅ <b>Certificate trust</b>
|
||||||
ms.technology: itpro-security
|
|
||||||
---
|
---
|
||||||
# Configure Hybrid Azure AD joined Windows Hello for Business: Active Directory Federation Services
|
# Configure Hybrid Azure AD joined Windows Hello for Business: Active Directory Federation Services
|
||||||
|
|
||||||
|
@ -1,21 +1,11 @@
|
|||||||
---
|
---
|
||||||
title: Configure Hybrid Azure AD joined Windows Hello for Business Directory Synch
|
title: Configure Hybrid Azure AD joined Windows Hello for Business Directory Synch
|
||||||
description: Discussing Directory Synchronization in a Hybrid deployment of Windows Hello for Business
|
description: Discussing Directory Synchronization in a Hybrid deployment of Windows Hello for Business
|
||||||
ms.prod: windows-client
|
|
||||||
author: paolomatarazzo
|
|
||||||
ms.author: paoloma
|
|
||||||
manager: aaroncz
|
|
||||||
ms.reviewer: prsriva
|
|
||||||
ms.collection: M365-identity-device-management
|
|
||||||
ms.topic: article
|
|
||||||
localizationpriority: medium
|
|
||||||
ms.date: 4/30/2021
|
ms.date: 4/30/2021
|
||||||
appliesto:
|
appliesto:
|
||||||
- ✅ <b>Windows 10</b>
|
- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10 and later</a>
|
||||||
- ✅ <b>Windows 11</b>
|
|
||||||
- ✅ <b>Hybrid deployment</b>
|
- ✅ <b>Hybrid deployment</b>
|
||||||
- ✅ <b>Certificate trust</b>
|
- ✅ <b>Certificate trust</b>
|
||||||
ms.technology: itpro-security
|
|
||||||
---
|
---
|
||||||
|
|
||||||
# Configure Hybrid Azure AD joined Windows Hello for Business- Directory Synchronization
|
# Configure Hybrid Azure AD joined Windows Hello for Business- Directory Synchronization
|
||||||
|
@ -1,21 +1,11 @@
|
|||||||
---
|
---
|
||||||
title: Configuring Hybrid Azure AD joined Windows Hello for Business - Public Key Infrastructure (PKI)
|
title: Configuring Hybrid Azure AD joined Windows Hello for Business - Public Key Infrastructure (PKI)
|
||||||
description: Discussing the configuration of the Public Key Infrastructure (PKI) in a Hybrid deployment of Windows Hello for Business
|
description: Discussing the configuration of the Public Key Infrastructure (PKI) in a Hybrid deployment of Windows Hello for Business
|
||||||
ms.prod: windows-client
|
|
||||||
author: paolomatarazzo
|
|
||||||
ms.author: paoloma
|
|
||||||
manager: aaroncz
|
|
||||||
ms.reviewer: prsriva
|
|
||||||
ms.collection: M365-identity-device-management
|
|
||||||
ms.topic: article
|
|
||||||
localizationpriority: medium
|
|
||||||
ms.date: 4/30/2021
|
ms.date: 4/30/2021
|
||||||
appliesto:
|
appliesto:
|
||||||
- ✅ <b>Windows 10</b>
|
- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10 and later</a>
|
||||||
- ✅ <b>Windows 11</b>
|
|
||||||
- ✅ <b>Hybrid deployment</b>
|
- ✅ <b>Hybrid deployment</b>
|
||||||
- ✅ <b>Certificate trust</b>
|
- ✅ <b>Certificate trust</b>
|
||||||
ms.technology: itpro-security
|
|
||||||
---
|
---
|
||||||
|
|
||||||
# Configure Hybrid Azure AD joined Windows Hello for Business - Public Key Infrastructure
|
# Configure Hybrid Azure AD joined Windows Hello for Business - Public Key Infrastructure
|
||||||
|
@ -1,21 +1,11 @@
|
|||||||
---
|
---
|
||||||
title: Configuring Hybrid Azure AD joined Windows Hello for Business - Group Policy
|
title: Configuring Hybrid Azure AD joined Windows Hello for Business - Group Policy
|
||||||
description: Discussing the configuration of Group Policy in a Hybrid deployment of Windows Hello for Business
|
description: Discussing the configuration of Group Policy in a Hybrid deployment of Windows Hello for Business
|
||||||
ms.prod: windows-client
|
|
||||||
author: paolomatarazzo
|
|
||||||
ms.author: paoloma
|
|
||||||
manager: aaroncz
|
|
||||||
ms.reviewer: prsriva
|
|
||||||
ms.collection: M365-identity-device-management
|
|
||||||
ms.topic: article
|
|
||||||
localizationpriority: medium
|
|
||||||
ms.date: 4/30/2021
|
ms.date: 4/30/2021
|
||||||
appliesto:
|
appliesto:
|
||||||
- ✅ <b>Windows 10</b>
|
- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10 and later</a>
|
||||||
- ✅ <b>Windows 11</b>
|
|
||||||
- ✅ <b>Hybrid deployment</b>
|
- ✅ <b>Hybrid deployment</b>
|
||||||
- ✅ <b>Certificate trust</b>
|
- ✅ <b>Certificate trust</b>
|
||||||
ms.technology: itpro-security
|
|
||||||
---
|
---
|
||||||
# Configure Hybrid Azure AD joined Windows Hello for Business - Group Policy
|
# Configure Hybrid Azure AD joined Windows Hello for Business - Group Policy
|
||||||
|
|
||||||
|
@ -1,21 +1,11 @@
|
|||||||
---
|
---
|
||||||
title: Configure Hybrid Windows Hello for Business Settings (Windows Hello for Business)
|
title: Configure Hybrid Windows Hello for Business Settings (Windows Hello for Business)
|
||||||
description: Learn how to configure Windows Hello for Business settings in hybrid certificate trust deployment.
|
description: Learn how to configure Windows Hello for Business settings in hybrid certificate trust deployment.
|
||||||
ms.prod: windows-client
|
|
||||||
author: paolomatarazzo
|
|
||||||
ms.author: paoloma
|
|
||||||
manager: aaroncz
|
|
||||||
ms.reviewer: prsriva
|
|
||||||
ms.collection: M365-identity-device-management
|
|
||||||
ms.topic: article
|
|
||||||
localizationpriority: medium
|
|
||||||
ms.date: 4/30/2021
|
ms.date: 4/30/2021
|
||||||
appliesto:
|
appliesto:
|
||||||
- ✅ <b>Windows 10</b>
|
- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10 and later</a>
|
||||||
- ✅ <b>Windows 11</b>
|
|
||||||
- ✅ <b>Hybrid deployment</b>
|
- ✅ <b>Hybrid deployment</b>
|
||||||
- ✅ <b>Certificate trust</b>
|
- ✅ <b>Certificate trust</b>
|
||||||
ms.technology: itpro-security
|
|
||||||
---
|
---
|
||||||
# Configure Hybrid Azure AD joined Windows Hello for Business
|
# Configure Hybrid Azure AD joined Windows Hello for Business
|
||||||
|
|
||||||
|
@ -1,18 +1,9 @@
|
|||||||
---
|
---
|
||||||
title: Hybrid cloud Kerberos trust deployment (Windows Hello for Business)
|
title: Hybrid cloud Kerberos trust deployment (Windows Hello for Business)
|
||||||
description: Learn the information you need to successfully deploy Windows Hello for Business in a hybrid cloud Kerberos trust scenario.
|
description: Learn the information you need to successfully deploy Windows Hello for Business in a hybrid cloud Kerberos trust scenario.
|
||||||
ms.prod: windows-client
|
|
||||||
author: paolomatarazzo
|
|
||||||
ms.author: paoloma
|
|
||||||
manager: aaroncz
|
|
||||||
ms.reviewer: prsriva
|
|
||||||
ms.collection: M365-identity-device-management
|
|
||||||
ms.topic: article
|
|
||||||
localizationpriority: medium
|
|
||||||
ms.date: 11/1/2022
|
ms.date: 11/1/2022
|
||||||
appliesto:
|
appliesto:
|
||||||
- ✅ <a href="https://learn.microsoft.com/windows/release-health/supported-versions-windows-client" target="_blank">Windows 10, version 21H2 and later</a>
|
- ✅ <a href=https: //learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10, version 21H2 and later</a>
|
||||||
ms.technology: itpro-security
|
|
||||||
---
|
---
|
||||||
# Hybrid cloud Kerberos trust deployment
|
# Hybrid cloud Kerberos trust deployment
|
||||||
|
|
||||||
|
@ -1,21 +1,11 @@
|
|||||||
---
|
---
|
||||||
title: Windows Hello for Business Hybrid Azure AD joined Key Trust New Installation
|
title: Windows Hello for Business Hybrid Azure AD joined Key Trust New Installation
|
||||||
description: Learn how to configure a hybrid key trust deployment of Windows Hello for Business for systems with no previous installations.
|
description: Learn how to configure a hybrid key trust deployment of Windows Hello for Business for systems with no previous installations.
|
||||||
ms.prod: windows-client
|
|
||||||
author: paolomatarazzo
|
|
||||||
ms.author: paoloma
|
|
||||||
manager: aaroncz
|
|
||||||
ms.reviewer: prsriva
|
|
||||||
ms.collection: M365-identity-device-management
|
|
||||||
ms.topic: article
|
|
||||||
localizationpriority: medium
|
|
||||||
ms.date: 4/30/2021
|
ms.date: 4/30/2021
|
||||||
appliesto:
|
appliesto:
|
||||||
- ✅ <b>Windows 10</b>
|
- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10 and later</a>
|
||||||
- ✅ <b>Windows 11</b>
|
|
||||||
- ✅ <b>Hybrid deployment</b>
|
- ✅ <b>Hybrid deployment</b>
|
||||||
- ✅ <b>Key trust</b>
|
- ✅ <b>Key trust</b>
|
||||||
ms.technology: itpro-security
|
|
||||||
---
|
---
|
||||||
# Windows Hello for Business Hybrid Azure AD joined Key Trust New Installation
|
# Windows Hello for Business Hybrid Azure AD joined Key Trust New Installation
|
||||||
|
|
||||||
|
@ -1,21 +1,11 @@
|
|||||||
---
|
---
|
||||||
title: Configure Device Registration for Hybrid Azure AD joined key trust Windows Hello for Business
|
title: Configure Device Registration for Hybrid Azure AD joined key trust Windows Hello for Business
|
||||||
description: Azure Device Registration for Hybrid Certificate Key Deployment (Windows Hello for Business)
|
description: Azure Device Registration for Hybrid Certificate Key Deployment (Windows Hello for Business)
|
||||||
ms.prod: windows-client
|
|
||||||
author: paolomatarazzo
|
|
||||||
ms.author: paoloma
|
|
||||||
manager: aaroncz
|
|
||||||
ms.reviewer: prsriva
|
|
||||||
ms.collection: M365-identity-device-management
|
|
||||||
ms.topic: article
|
|
||||||
localizationpriority: medium
|
|
||||||
ms.date: 05/04/2022
|
ms.date: 05/04/2022
|
||||||
appliesto:
|
appliesto:
|
||||||
- ✅ <b>Windows 10</b>
|
- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10 and later</a>
|
||||||
- ✅ <b>Windows 11</b>
|
|
||||||
- ✅ <b>Hybrid deployment</b>
|
- ✅ <b>Hybrid deployment</b>
|
||||||
- ✅ <b>Key trust</b>
|
- ✅ <b>Key trust</b>
|
||||||
ms.technology: itpro-security
|
|
||||||
---
|
---
|
||||||
# Configure Device Registration for Hybrid Azure AD joined key trust Windows Hello for Business
|
# Configure Device Registration for Hybrid Azure AD joined key trust Windows Hello for Business
|
||||||
|
|
||||||
|
@ -1,21 +1,11 @@
|
|||||||
---
|
---
|
||||||
title: Configure Directory Synchronization for Hybrid Azure AD joined key trust Windows Hello for Business
|
title: Configure Directory Synchronization for Hybrid Azure AD joined key trust Windows Hello for Business
|
||||||
description: Azure Directory Synchronization for Hybrid Certificate Key Deployment (Windows Hello for Business)
|
description: Azure Directory Synchronization for Hybrid Certificate Key Deployment (Windows Hello for Business)
|
||||||
ms.prod: windows-client
|
|
||||||
author: paolomatarazzo
|
|
||||||
ms.author: paoloma
|
|
||||||
manager: aaroncz
|
|
||||||
ms.reviewer: prsriva
|
|
||||||
ms.collection: M365-identity-device-management
|
|
||||||
ms.topic: article
|
|
||||||
localizationpriority: medium
|
|
||||||
ms.date: 4/30/2021
|
ms.date: 4/30/2021
|
||||||
appliesto:
|
appliesto:
|
||||||
- ✅ <b>Windows 10</b>
|
- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10 and later</a>
|
||||||
- ✅ <b>Windows 11</b>
|
|
||||||
- ✅ <b>Hybrid deployment</b>
|
- ✅ <b>Hybrid deployment</b>
|
||||||
- ✅ <b>Key trust</b>
|
- ✅ <b>Key trust</b>
|
||||||
ms.technology: itpro-security
|
|
||||||
---
|
---
|
||||||
# Configure Directory Synchronization for Hybrid Azure AD joined key trust Windows Hello for Business
|
# Configure Directory Synchronization for Hybrid Azure AD joined key trust Windows Hello for Business
|
||||||
|
|
||||||
|
@ -1,20 +1,11 @@
|
|||||||
---
|
---
|
||||||
title: Hybrid Azure AD joined Key trust Windows Hello for Business Prerequisites (Windows Hello for Business)
|
title: Hybrid Azure AD joined Key trust Windows Hello for Business Prerequisites (Windows Hello for Business)
|
||||||
description: Learn about the prerequisites for hybrid Windows Hello for Business deployments using key trust and what the next steps are in the deployment process.
|
description: Learn about the prerequisites for hybrid Windows Hello for Business deployments using key trust and what the next steps are in the deployment process.
|
||||||
ms.prod: windows-client
|
|
||||||
author: paolomatarazzo
|
|
||||||
ms.author: paoloma
|
|
||||||
manager: aaroncz
|
|
||||||
ms.collection: M365-identity-device-management
|
|
||||||
ms.topic: article
|
|
||||||
localizationpriority: medium
|
|
||||||
ms.date: 4/30/2021
|
ms.date: 4/30/2021
|
||||||
appliesto:
|
appliesto:
|
||||||
- ✅ <b>Windows 10</b>
|
- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10 and later</a>
|
||||||
- ✅ <b>Windows 11</b>
|
|
||||||
- ✅ <b>Hybrid deployment</b>
|
- ✅ <b>Hybrid deployment</b>
|
||||||
- ✅ <b>Key trust</b>
|
- ✅ <b>Key trust</b>
|
||||||
ms.technology: itpro-security
|
|
||||||
---
|
---
|
||||||
# Hybrid Azure AD joined Key trust Windows Hello for Business Prerequisites
|
# Hybrid Azure AD joined Key trust Windows Hello for Business Prerequisites
|
||||||
|
|
||||||
|
@ -1,21 +1,11 @@
|
|||||||
---
|
---
|
||||||
title: Hybrid Key Trust Deployment (Windows Hello for Business)
|
title: Hybrid Key Trust Deployment (Windows Hello for Business)
|
||||||
description: Review this deployment guide to successfully deploy Windows Hello for Business in a hybrid key trust scenario.
|
description: Review this deployment guide to successfully deploy Windows Hello for Business in a hybrid key trust scenario.
|
||||||
ms.prod: windows-client
|
|
||||||
author: paolomatarazzo
|
|
||||||
ms.author: paoloma
|
|
||||||
manager: aaroncz
|
|
||||||
ms.reviewer: prsriva
|
|
||||||
ms.collection: M365-identity-device-management
|
|
||||||
ms.topic: article
|
|
||||||
localizationpriority: medium
|
|
||||||
ms.date: 08/20/2018
|
ms.date: 08/20/2018
|
||||||
appliesto:
|
appliesto:
|
||||||
- ✅ <b>Windows 10</b>
|
- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10 and later</a>
|
||||||
- ✅ <b>Windows 11</b>
|
|
||||||
- ✅ <b>Hybrid deployment</b>
|
- ✅ <b>Hybrid deployment</b>
|
||||||
- ✅ <b>Key trust</b>
|
- ✅ <b>Key trust</b>
|
||||||
ms.technology: itpro-security
|
|
||||||
---
|
---
|
||||||
# Hybrid Azure AD joined Key Trust Deployment
|
# Hybrid Azure AD joined Key Trust Deployment
|
||||||
|
|
||||||
|
@ -1,21 +1,11 @@
|
|||||||
---
|
---
|
||||||
title: Hybrid Azure AD joined Windows Hello for Business key trust Provisioning (Windows Hello for Business)
|
title: Hybrid Azure AD joined Windows Hello for Business key trust Provisioning (Windows Hello for Business)
|
||||||
description: Learn about provisioning for hybrid key trust deployments of Windows Hello for Business and learn where to find the hybrid key trust deployment guide.
|
description: Learn about provisioning for hybrid key trust deployments of Windows Hello for Business and learn where to find the hybrid key trust deployment guide.
|
||||||
ms.prod: windows-client
|
|
||||||
author: paolomatarazzo
|
|
||||||
ms.author: paoloma
|
|
||||||
manager: aaroncz
|
|
||||||
ms.reviewer: prsriva
|
|
||||||
ms.collection: M365-identity-device-management
|
|
||||||
ms.topic: article
|
|
||||||
localizationpriority: medium
|
|
||||||
ms.date: 4/30/2021
|
ms.date: 4/30/2021
|
||||||
appliesto:
|
appliesto:
|
||||||
- ✅ <b>Windows 10</b>
|
- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10 and later</a>
|
||||||
- ✅ <b>Windows 11</b>
|
|
||||||
- ✅ <b>Hybrid deployment</b>
|
- ✅ <b>Hybrid deployment</b>
|
||||||
- ✅ <b>Key trust</b>
|
- ✅ <b>Key trust</b>
|
||||||
ms.technology: itpro-security
|
|
||||||
---
|
---
|
||||||
# Hybrid Azure AD joined Windows Hello for Business Key Trust Provisioning
|
# Hybrid Azure AD joined Windows Hello for Business Key Trust Provisioning
|
||||||
## Provisioning
|
## Provisioning
|
||||||
|
@ -1,24 +1,13 @@
|
|||||||
---
|
---
|
||||||
title: Configuring Hybrid Azure AD joined key trust Windows Hello for Business - Active Directory (AD)
|
title: Configuring Hybrid Azure AD joined key trust Windows Hello for Business - Active Directory (AD)
|
||||||
description: Configuring Hybrid key trust Windows Hello for Business - Active Directory (AD)
|
description: Configuring Hybrid key trust Windows Hello for Business - Active Directory (AD)
|
||||||
ms.prod: windows-client
|
|
||||||
author: paolomatarazzo
|
|
||||||
ms.author: paoloma
|
|
||||||
manager: aaroncz
|
|
||||||
ms.reviewer: prsriva
|
|
||||||
ms.collection: M365-identity-device-management
|
|
||||||
ms.topic: article
|
|
||||||
localizationpriority: medium
|
|
||||||
ms.date: 4/30/2021
|
ms.date: 4/30/2021
|
||||||
ms.technology: itpro-security
|
|
||||||
---
|
|
||||||
# Configuring Hybrid Azure AD joined key trust Windows Hello for Business: Active Directory
|
|
||||||
appliesto:
|
appliesto:
|
||||||
- ✅ <b>Windows 10</b>
|
- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10 and later</a>
|
||||||
- ✅ <b>Windows 11</b>
|
|
||||||
- ✅ <b>Hybrid deployment</b>
|
- ✅ <b>Hybrid deployment</b>
|
||||||
- ✅ <b>Key trust</b>
|
- ✅ <b>Key trust</b>
|
||||||
|
---
|
||||||
|
# Configuring Hybrid Azure AD joined key trust Windows Hello for Business: Active Directory
|
||||||
|
|
||||||
Configure the appropriate security groups to efficiently deploy Windows Hello for Business to users.
|
Configure the appropriate security groups to efficiently deploy Windows Hello for Business to users.
|
||||||
|
|
||||||
|
@ -1,21 +1,11 @@
|
|||||||
---
|
---
|
||||||
title: Hybrid Azure AD joined Windows Hello for Business - Directory Synchronization
|
title: Hybrid Azure AD joined Windows Hello for Business - Directory Synchronization
|
||||||
description: How to configure Hybrid key trust Windows Hello for Business - Directory Synchronization
|
description: How to configure Hybrid key trust Windows Hello for Business - Directory Synchronization
|
||||||
ms.prod: windows-client
|
|
||||||
author: paolomatarazzo
|
|
||||||
ms.author: paoloma
|
|
||||||
manager: aaroncz
|
|
||||||
ms.reviewer: prsriva
|
|
||||||
ms.collection: M365-identity-device-management
|
|
||||||
ms.topic: article
|
|
||||||
localizationpriority: medium
|
|
||||||
ms.date: 4/30/2021
|
ms.date: 4/30/2021
|
||||||
appliesto:
|
appliesto:
|
||||||
- ✅ <b>Windows 10</b>
|
- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10 and later</a>
|
||||||
- ✅ <b>Windows 11</b>
|
|
||||||
- ✅ <b>Hybrid deployment</b>
|
- ✅ <b>Hybrid deployment</b>
|
||||||
- ✅ <b>Key trust</b>
|
- ✅ <b>Key trust</b>
|
||||||
ms.technology: itpro-security
|
|
||||||
---
|
---
|
||||||
# Configure Hybrid Azure AD joined Windows Hello for Business: Directory Synchronization
|
# Configure Hybrid Azure AD joined Windows Hello for Business: Directory Synchronization
|
||||||
|
|
||||||
|
@ -1,21 +1,11 @@
|
|||||||
---
|
---
|
||||||
title: Configure Hybrid Azure AD joined key trust Windows Hello for Business
|
title: Configure Hybrid Azure AD joined key trust Windows Hello for Business
|
||||||
description: Configuring Hybrid key trust Windows Hello for Business - Public Key Infrastructure (PKI)
|
description: Configuring Hybrid key trust Windows Hello for Business - Public Key Infrastructure (PKI)
|
||||||
ms.prod: windows-client
|
|
||||||
author: paolomatarazzo
|
|
||||||
ms.author: paoloma
|
|
||||||
manager: aaroncz
|
|
||||||
ms.reviewer: prsriva
|
|
||||||
ms.collection: M365-identity-device-management
|
|
||||||
ms.topic: article
|
|
||||||
localizationpriority: medium
|
|
||||||
ms.date: 04/30/2021
|
ms.date: 04/30/2021
|
||||||
appliesto:
|
appliesto:
|
||||||
- ✅ <b>Windows 10</b>
|
- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10 and later</a>
|
||||||
- ✅ <b>Windows 11</b>
|
|
||||||
- ✅ <b>Hybrid deployment</b>
|
- ✅ <b>Hybrid deployment</b>
|
||||||
- ✅ <b>Key trust</b>
|
- ✅ <b>Key trust</b>
|
||||||
ms.technology: itpro-security
|
|
||||||
---
|
---
|
||||||
# Configure Hybrid Azure AD joined Windows Hello for Business: Public Key Infrastructure
|
# Configure Hybrid Azure AD joined Windows Hello for Business: Public Key Infrastructure
|
||||||
|
|
||||||
|
@ -1,21 +1,11 @@
|
|||||||
---
|
---
|
||||||
title: Configure Hybrid Azure AD joined Windows Hello for Business - Group Policy
|
title: Configure Hybrid Azure AD joined Windows Hello for Business - Group Policy
|
||||||
description: Configuring Hybrid key trust Windows Hello for Business - Group Policy
|
description: Configuring Hybrid key trust Windows Hello for Business - Group Policy
|
||||||
ms.prod: windows-client
|
|
||||||
author: paolomatarazzo
|
|
||||||
ms.author: paoloma
|
|
||||||
manager: aaroncz
|
|
||||||
ms.reviewer: prsriva
|
|
||||||
ms.collection: M365-identity-device-management
|
|
||||||
ms.topic: article
|
|
||||||
localizationpriority: medium
|
|
||||||
ms.date: 4/30/2021
|
ms.date: 4/30/2021
|
||||||
appliesto:
|
appliesto:
|
||||||
- ✅ <b>Windows 10</b>
|
- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10 and later</a>
|
||||||
- ✅ <b>Windows 11</b>
|
|
||||||
- ✅ <b>Hybrid deployment</b>
|
- ✅ <b>Hybrid deployment</b>
|
||||||
- ✅ <b>Key trust</b>
|
- ✅ <b>Key trust</b>
|
||||||
ms.technology: itpro-security
|
|
||||||
---
|
---
|
||||||
# Configure Hybrid Azure AD joined Windows Hello for Business: Group Policy
|
# Configure Hybrid Azure AD joined Windows Hello for Business: Group Policy
|
||||||
|
|
||||||
|
@ -1,21 +1,11 @@
|
|||||||
---
|
---
|
||||||
title: Configure Hybrid Azure AD joined Windows Hello for Business key trust Settings
|
title: Configure Hybrid Azure AD joined Windows Hello for Business key trust Settings
|
||||||
description: Begin the process of configuring your hybrid key trust environment for Windows Hello for Business. Start with your Active Directory configuration.
|
description: Begin the process of configuring your hybrid key trust environment for Windows Hello for Business. Start with your Active Directory configuration.
|
||||||
ms.prod: windows-client
|
|
||||||
author: paolomatarazzo
|
|
||||||
ms.author: paoloma
|
|
||||||
manager: aaroncz
|
|
||||||
ms.reviewer: prsriva
|
|
||||||
ms.collection: M365-identity-device-management
|
|
||||||
ms.topic: article
|
|
||||||
localizationpriority: medium
|
|
||||||
ms.date: 4/30/2021
|
ms.date: 4/30/2021
|
||||||
appliesto:
|
appliesto:
|
||||||
- ✅ <b>Windows 10</b>
|
- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10 and later</a>
|
||||||
- ✅ <b>Windows 11</b>
|
|
||||||
- ✅ <b>Hybrid deployment</b>
|
- ✅ <b>Hybrid deployment</b>
|
||||||
- ✅ <b>Key trust</b>
|
- ✅ <b>Key trust</b>
|
||||||
ms.technology: itpro-security
|
|
||||||
---
|
---
|
||||||
# Configure Hybrid Azure AD joined Windows Hello for Business key trust settings
|
# Configure Hybrid Azure AD joined Windows Hello for Business key trust settings
|
||||||
|
|
||||||
|
@ -1,18 +1,12 @@
|
|||||||
---
|
---
|
||||||
title: Windows Hello for Business Deployment Prerequisite Overview
|
title: Windows Hello for Business Deployment Prerequisite Overview
|
||||||
description: Overview of all the different infrastructure requirements for Windows Hello for Business deployment models
|
description: Overview of all the different infrastructure requirements for Windows Hello for Business deployment models
|
||||||
ms.prod: windows-client
|
|
||||||
author: paolomatarazzo
|
|
||||||
ms.author: paoloma
|
|
||||||
manager: aaroncz
|
|
||||||
ms.reviewer: prsriva
|
|
||||||
ms.collection:
|
ms.collection:
|
||||||
- M365-identity-device-management
|
- M365-identity-device-management
|
||||||
- highpri
|
- highpri
|
||||||
ms.topic: article
|
|
||||||
localizationpriority: medium
|
|
||||||
ms.date: 2/15/2022
|
ms.date: 2/15/2022
|
||||||
ms.technology: itpro-security
|
appliesto:
|
||||||
|
- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10 and later</a>
|
||||||
---
|
---
|
||||||
|
|
||||||
# Windows Hello for Business Deployment Prerequisite Overview
|
# Windows Hello for Business Deployment Prerequisite Overview
|
||||||
|
@ -1,21 +1,11 @@
|
|||||||
---
|
---
|
||||||
title: Prepare & Deploy Windows Active Directory Federation Services with key trust (Windows Hello for Business)
|
title: Prepare & Deploy Windows Active Directory Federation Services with key trust (Windows Hello for Business)
|
||||||
description: How to Prepare and Deploy Windows Server 2016 Active Directory Federation Services for Windows Hello for Business using key trust.
|
description: How to Prepare and Deploy Windows Server 2016 Active Directory Federation Services for Windows Hello for Business using key trust.
|
||||||
ms.prod: windows-client
|
|
||||||
author: paolomatarazzo
|
|
||||||
ms.author: paoloma
|
|
||||||
manager: aaroncz
|
|
||||||
ms.reviewer: prsriva
|
|
||||||
ms.collection: M365-identity-device-management
|
|
||||||
ms.topic: article
|
|
||||||
localizationpriority: medium
|
|
||||||
ms.date: 08/19/2018
|
ms.date: 08/19/2018
|
||||||
appliesto:
|
appliesto:
|
||||||
- ✅ <b>Windows 10</b>
|
- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10 and later</a>
|
||||||
- ✅ <b>Windows 11</b>
|
|
||||||
- ✅ <b>On-premises deployment</b>
|
- ✅ <b>On-premises deployment</b>
|
||||||
- ✅ <b>Key trust</b>
|
- ✅ <b>Key trust</b>
|
||||||
ms.technology: itpro-security
|
|
||||||
---
|
---
|
||||||
# Prepare and Deploy Windows Server 2016 Active Directory Federation Services with Key Trust
|
# Prepare and Deploy Windows Server 2016 Active Directory Federation Services with Key Trust
|
||||||
|
|
||||||
|
@ -1,21 +1,11 @@
|
|||||||
---
|
---
|
||||||
title: Configure Windows Hello for Business Policy settings - key trust
|
title: Configure Windows Hello for Business Policy settings - key trust
|
||||||
description: Configure Windows Hello for Business Policy settings for Windows Hello for Business
|
description: Configure Windows Hello for Business Policy settings for Windows Hello for Business
|
||||||
ms.prod: windows-client
|
|
||||||
author: paolomatarazzo
|
|
||||||
ms.author: paoloma
|
|
||||||
manager: aaroncz
|
|
||||||
ms.reviewer: prsriva
|
|
||||||
ms.collection: M365-identity-device-management
|
|
||||||
ms.topic: article
|
|
||||||
localizationpriority: medium
|
|
||||||
ms.date: 08/19/2018
|
ms.date: 08/19/2018
|
||||||
appliesto:
|
appliesto:
|
||||||
- ✅ <b>Windows 10</b>
|
- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10 and later</a>
|
||||||
- ✅ <b>Windows 11</b>
|
|
||||||
- ✅ <b>On-premises deployment</b>
|
- ✅ <b>On-premises deployment</b>
|
||||||
- ✅ <b>Key trust</b>
|
- ✅ <b>Key trust</b>
|
||||||
ms.technology: itpro-security
|
|
||||||
---
|
---
|
||||||
# Configure Windows Hello for Business Policy settings - Key Trust
|
# Configure Windows Hello for Business Policy settings - Key Trust
|
||||||
|
|
||||||
|
@ -1,21 +1,11 @@
|
|||||||
---
|
---
|
||||||
title: Key registration for on-premises deployment of Windows Hello for Business
|
title: Key registration for on-premises deployment of Windows Hello for Business
|
||||||
description: How to Validate Active Directory prerequisites for Windows Hello for Business when deploying with the key trust model.
|
description: How to Validate Active Directory prerequisites for Windows Hello for Business when deploying with the key trust model.
|
||||||
ms.prod: windows-client
|
|
||||||
author: paolomatarazzo
|
|
||||||
ms.author: paoloma
|
|
||||||
manager: aaroncz
|
|
||||||
ms.reviewer: prsriva
|
|
||||||
ms.collection: M365-identity-device-management
|
|
||||||
ms.topic: article
|
|
||||||
localizationpriority: medium
|
|
||||||
ms.date: 08/19/2018
|
ms.date: 08/19/2018
|
||||||
appliesto:
|
appliesto:
|
||||||
- ✅ <b>Windows 10</b>
|
- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10 and later</a>
|
||||||
- ✅ <b>Windows 11</b>
|
|
||||||
- ✅ <b>On-premises deployment</b>
|
- ✅ <b>On-premises deployment</b>
|
||||||
- ✅ <b>Key trust</b>
|
- ✅ <b>Key trust</b>
|
||||||
ms.technology: itpro-security
|
|
||||||
---
|
---
|
||||||
# Validate Active Directory prerequisites - Key Trust
|
# Validate Active Directory prerequisites - Key Trust
|
||||||
|
|
||||||
|
@ -1,21 +1,11 @@
|
|||||||
---
|
---
|
||||||
title: Validate and Deploy MFA for Windows Hello for Business with key trust
|
title: Validate and Deploy MFA for Windows Hello for Business with key trust
|
||||||
description: How to Validate and Deploy Multifactor Authentication (MFA) Services for Windows Hello for Business with key trust
|
description: How to Validate and Deploy Multifactor Authentication (MFA) Services for Windows Hello for Business with key trust
|
||||||
ms.prod: windows-client
|
|
||||||
author: paolomatarazzo
|
|
||||||
ms.author: paoloma
|
|
||||||
manager: aaroncz
|
|
||||||
ms.reviewer: prsriva
|
|
||||||
ms.collection: M365-identity-device-management
|
|
||||||
ms.topic: article
|
|
||||||
localizationpriority: medium
|
|
||||||
ms.date: 08/19/2018
|
ms.date: 08/19/2018
|
||||||
appliesto:
|
appliesto:
|
||||||
- ✅ <b>Windows 10</b>
|
- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10 and later</a>
|
||||||
- ✅ <b>Windows 11</b>
|
|
||||||
- ✅ <b>On-premises deployment</b>
|
- ✅ <b>On-premises deployment</b>
|
||||||
- ✅ <b>Key trust</b>
|
- ✅ <b>Key trust</b>
|
||||||
ms.technology: itpro-security
|
|
||||||
---
|
---
|
||||||
# Validate and Deploy Multifactor Authentication (MFA)
|
# Validate and Deploy Multifactor Authentication (MFA)
|
||||||
|
|
||||||
|
@ -1,21 +1,11 @@
|
|||||||
---
|
---
|
||||||
title: Validate Public Key Infrastructure - key trust model (Windows Hello for Business)
|
title: Validate Public Key Infrastructure - key trust model (Windows Hello for Business)
|
||||||
description: How to Validate Public Key Infrastructure for Windows Hello for Business, under a key trust model.
|
description: How to Validate Public Key Infrastructure for Windows Hello for Business, under a key trust model.
|
||||||
ms.prod: windows-client
|
|
||||||
author: paolomatarazzo
|
|
||||||
ms.author: paoloma
|
|
||||||
manager: aaroncz
|
|
||||||
ms.reviewer: prsriva
|
|
||||||
ms.collection: M365-identity-device-management
|
|
||||||
ms.topic: article
|
|
||||||
localizationpriority: medium
|
|
||||||
ms.date: 08/19/2018
|
ms.date: 08/19/2018
|
||||||
appliesto:
|
appliesto:
|
||||||
- ✅ <b>Windows 10</b>
|
- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10 and later</a>
|
||||||
- ✅ <b>Windows 11</b>
|
|
||||||
- ✅ <b>On-premises deployment</b>
|
- ✅ <b>On-premises deployment</b>
|
||||||
- ✅ <b>Key trust</b>
|
- ✅ <b>Key trust</b>
|
||||||
ms.technology: itpro-security
|
|
||||||
---
|
---
|
||||||
# Validate and Configure Public Key Infrastructure - Key Trust
|
# Validate and Configure Public Key Infrastructure - Key Trust
|
||||||
|
|
||||||
|
@ -1,31 +1,20 @@
|
|||||||
---
|
---
|
||||||
title: Manage Windows Hello in your organization (Windows)
|
title: Manage Windows Hello in your organization (Windows)
|
||||||
description: You can create a Group Policy or mobile device management (MDM) policy that will implement Windows Hello for Business on devices running Windows 10.
|
description: You can create a Group Policy or mobile device management (MDM) policy that will implement Windows Hello for Business on devices running Windows 10.
|
||||||
ms.prod: windows-client
|
|
||||||
author: paolomatarazzo
|
|
||||||
ms.author: paoloma
|
|
||||||
manager: aaroncz
|
|
||||||
ms.reviewer: prsriva
|
|
||||||
ms.collection:
|
ms.collection:
|
||||||
- M365-identity-device-management
|
- M365-identity-device-management
|
||||||
- highpri
|
- highpri
|
||||||
ms.topic: article
|
|
||||||
ms.localizationpriority: medium
|
|
||||||
ms.date: 2/15/2022
|
ms.date: 2/15/2022
|
||||||
appliesto:
|
appliesto:
|
||||||
- ✅ <b>Windows 10</b>
|
- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10 and later</a>
|
||||||
- ✅ <b>Windows 11</b>
|
|
||||||
ms.technology: itpro-security
|
|
||||||
---
|
---
|
||||||
|
|
||||||
# Manage Windows Hello for Business in your organization
|
# Manage Windows Hello for Business in your organization
|
||||||
|
|
||||||
You can create a Group Policy or mobile device management (MDM) policy that will implement Windows Hello on devices running Windows 10.
|
You can create a Group Policy or mobile device management (MDM) policy to configure Windows Hello for Business on Windows devices.
|
||||||
|
|
||||||
>[!IMPORTANT]
|
>[!IMPORTANT]
|
||||||
>The Group Policy setting **Turn on PIN sign-in** does not apply to Windows Hello for Business. It still prevents or enables the creation of a convenience PIN for Windows 10, version 1507 and 1511.
|
>Windows Hello as a convenience PIN is disabled by default on all domain joined and Azure AD joined devices. To enable a convenience PIN, enable the Group Policy setting **Turn on convenience PIN sign-in**.
|
||||||
>
|
|
||||||
>Beginning in version 1607, Windows Hello as a convenience PIN is disabled by default on all domain-joined computers. To enable a convenience PIN for Windows 10, version 1607, enable the Group Policy setting **Turn on convenience PIN sign-in**.
|
|
||||||
>
|
>
|
||||||
>Use **PIN Complexity** policy settings to manage PINs for Windows Hello for Business.
|
>Use **PIN Complexity** policy settings to manage PINs for Windows Hello for Business.
|
||||||
|
|
||||||
|
@ -1,25 +1,16 @@
|
|||||||
---
|
---
|
||||||
title: Windows Hello for Business Overview (Windows)
|
title: Windows Hello for Business Overview (Windows)
|
||||||
description: Learn how Windows Hello for Business replaces passwords with strong two-factor authentication on PCs and mobile devices in Windows 10 and Windows 11.
|
description: Learn how Windows Hello for Business replaces passwords with strong two-factor authentication on PCs and mobile devices in Windows 10 and Windows 11.
|
||||||
ms.prod: windows-client
|
|
||||||
author: paolomatarazzo
|
|
||||||
ms.author: paoloma
|
|
||||||
manager: aaroncz
|
|
||||||
ms.reviewer: prsriva
|
|
||||||
ms.collection:
|
ms.collection:
|
||||||
- M365-identity-device-management
|
- M365-identity-device-management
|
||||||
- highpri
|
- highpri
|
||||||
ms.topic: conceptual
|
ms.topic: conceptual
|
||||||
localizationpriority: medium
|
|
||||||
appliesto:
|
appliesto:
|
||||||
- ✅ <b>Windows 10</b>
|
- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10 and later</a>
|
||||||
- ✅ <b>Windows 11</b>
|
|
||||||
- ✅ <b>Windows Holographic for Business</b>
|
|
||||||
ms.technology: itpro-security
|
|
||||||
---
|
---
|
||||||
# Windows Hello for Business Overview
|
# Windows Hello for Business Overview
|
||||||
|
|
||||||
In Windows 10, Windows Hello for Business replaces passwords with strong two-factor authentication on devices. This authentication consists of a new type of user credential that is tied to a device and uses a biometric or PIN.
|
Windows Hello for Business replaces passwords with strong two-factor authentication on devices. This authentication consists of a type of user credential that is tied to a device and uses a biometric or PIN.
|
||||||
|
|
||||||
>[!NOTE]
|
>[!NOTE]
|
||||||
> When Windows 10 first shipped, it included Microsoft Passport and Windows Hello, which worked together to provide multi-factor authentication. To simplify deployment and improve supportability, Microsoft has combined these technologies into a single solution under the Windows Hello name. Customers who have already deployed these technologies will not experience any change in functionality. Customers who have yet to evaluate Windows Hello will find it easier to deploy due to simplified policies, documentation, and semantics.
|
> When Windows 10 first shipped, it included Microsoft Passport and Windows Hello, which worked together to provide multi-factor authentication. To simplify deployment and improve supportability, Microsoft has combined these technologies into a single solution under the Windows Hello name. Customers who have already deployed these technologies will not experience any change in functionality. Customers who have yet to evaluate Windows Hello will find it easier to deploy due to simplified policies, documentation, and semantics.
|
||||||
|
@ -1,20 +1,9 @@
|
|||||||
---
|
---
|
||||||
title: Planning a Windows Hello for Business Deployment
|
title: Planning a Windows Hello for Business Deployment
|
||||||
description: Learn about the role of each component within Windows Hello for Business and how certain deployment decisions affect other aspects of your infrastructure.
|
description: Learn about the role of each component within Windows Hello for Business and how certain deployment decisions affect other aspects of your infrastructure.
|
||||||
ms.prod: windows-client
|
|
||||||
author: paolomatarazzo
|
|
||||||
ms.author: paoloma
|
|
||||||
manager: aaroncz
|
|
||||||
ms.reviewer: prsriva
|
|
||||||
ms.collection:
|
|
||||||
- M365-identity-device-management
|
|
||||||
ms.topic: article
|
|
||||||
localizationpriority: conceptual
|
|
||||||
ms.date: 09/16/2020
|
ms.date: 09/16/2020
|
||||||
appliesto:
|
appliesto:
|
||||||
- ✅ <b>Windows 10</b>
|
- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10 and later</a>
|
||||||
- ✅ <b>Windows 11</b>
|
|
||||||
ms.technology: itpro-security
|
|
||||||
---
|
---
|
||||||
# Planning a Windows Hello for Business Deployment
|
# Planning a Windows Hello for Business Deployment
|
||||||
|
|
||||||
|
@ -1,19 +1,9 @@
|
|||||||
---
|
---
|
||||||
title: Prepare people to use Windows Hello (Windows)
|
title: Prepare people to use Windows Hello (Windows)
|
||||||
description: When you set a policy to require Windows Hello for Business in the workplace, you will want to prepare people in your organization.
|
description: When you set a policy to require Windows Hello for Business in the workplace, you will want to prepare people in your organization.
|
||||||
ms.prod: windows-client
|
|
||||||
author: paolomatarazzo
|
|
||||||
ms.author: paoloma
|
|
||||||
manager: aaroncz
|
|
||||||
ms.reviewer: prsriva
|
|
||||||
ms.collection: M365-identity-device-management
|
|
||||||
ms.topic: article
|
|
||||||
localizationpriority: medium
|
|
||||||
ms.date: 08/19/2018
|
ms.date: 08/19/2018
|
||||||
appliesto:
|
appliesto:
|
||||||
- ✅ <b>Windows 10</b>
|
- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10 and later</a>
|
||||||
- ✅ <b>Windows 11</b>
|
|
||||||
ms.technology: itpro-security
|
|
||||||
---
|
---
|
||||||
# Prepare people to use Windows Hello
|
# Prepare people to use Windows Hello
|
||||||
|
|
||||||
|
@ -1,19 +1,9 @@
|
|||||||
---
|
---
|
||||||
title: Windows Hello for Business Videos
|
title: Windows Hello for Business Videos
|
||||||
description: View several informative videos describing features and experiences in Windows Hello for Business in Windows 10 and Windows 11.
|
description: View several informative videos describing features and experiences in Windows Hello for Business in Windows 10 and Windows 11.
|
||||||
ms.prod: windows-client
|
|
||||||
author: paolomatarazzo
|
|
||||||
ms.author: paoloma
|
|
||||||
manager: aaroncz
|
|
||||||
ms.reviewer: prsriva
|
|
||||||
ms.collection: M365-identity-device-management
|
|
||||||
ms.topic: article
|
|
||||||
localizationpriority: medium
|
|
||||||
ms.date: 07/26/2022
|
ms.date: 07/26/2022
|
||||||
appliesto:
|
appliesto:
|
||||||
- ✅ <b>Windows 10</b>
|
- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10 and later</a>
|
||||||
- ✅ <b>Windows 11</b>
|
|
||||||
ms.technology: itpro-security
|
|
||||||
---
|
---
|
||||||
# Windows Hello for Business Videos
|
# Windows Hello for Business Videos
|
||||||
## Overview of Windows Hello for Business and Features
|
## Overview of Windows Hello for Business and Features
|
||||||
|
@ -1,25 +1,16 @@
|
|||||||
---
|
---
|
||||||
title: Why a PIN is better than an online password (Windows)
|
title: Why a PIN is better than an online password (Windows)
|
||||||
description: Windows Hello in Windows 10 enables users to sign in to their device using a PIN. How is a PIN different from (and better than) an online password.
|
description: Windows Hello enables users to sign in to their device using a PIN. How is a PIN different from (and better than) an online password.
|
||||||
ms.prod: windows-client
|
|
||||||
author: paolomatarazzo
|
|
||||||
ms.author: paoloma
|
|
||||||
manager: aaroncz
|
|
||||||
ms.reviewer: prsriva
|
|
||||||
ms.collection:
|
ms.collection:
|
||||||
- M365-identity-device-management
|
- M365-identity-device-management
|
||||||
- highpri
|
- highpri
|
||||||
ms.topic: article
|
|
||||||
ms.localizationpriority: medium
|
|
||||||
ms.date: 10/23/2017
|
ms.date: 10/23/2017
|
||||||
appliesto:
|
appliesto:
|
||||||
- ✅ <b>Windows 10</b>
|
- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10 and later</a>
|
||||||
- ✅ <b>Windows 11</b>
|
|
||||||
ms.technology: itpro-security
|
|
||||||
---
|
---
|
||||||
# Why a PIN is better than an online password
|
# Why a PIN is better than an online password
|
||||||
|
|
||||||
Windows Hello in Windows 10 enables users to sign in to their device using a PIN. How is a PIN different from (and better than) a local password?
|
Windows Hello enables users to sign in to their device using a PIN. How is a PIN different from (and better than) a local password?
|
||||||
On the surface, a PIN looks much like a password. A PIN can be a set of numbers, but enterprise policy might allow complex PINs that include special characters and letters, both upper-case and lower-case. Something like **t758A!** could be an account password or a complex Hello PIN. It isn't the structure of a PIN (length, complexity) that makes it better than an online password, it's how it works. First we need to distinguish between two types of passwords: `local` passwords are validated against the machine's password store, whereas `online` passwords are validated against a server. This article mostly covers the benefits a PIN has over an online password, and also why it can be considered even better than a local password.
|
On the surface, a PIN looks much like a password. A PIN can be a set of numbers, but enterprise policy might allow complex PINs that include special characters and letters, both upper-case and lower-case. Something like **t758A!** could be an account password or a complex Hello PIN. It isn't the structure of a PIN (length, complexity) that makes it better than an online password, it's how it works. First we need to distinguish between two types of passwords: `local` passwords are validated against the machine's password store, whereas `online` passwords are validated against a server. This article mostly covers the benefits a PIN has over an online password, and also why it can be considered even better than a local password.
|
||||||
|
|
||||||
Watch Dana Huang explain why a Windows Hello for Business PIN is more secure than an online password.
|
Watch Dana Huang explain why a Windows Hello for Business PIN is more secure than an online password.
|
||||||
|
@ -1,16 +1,9 @@
|
|||||||
---
|
---
|
||||||
title: Microsoft-compatible security key
|
title: Microsoft-compatible security key
|
||||||
description: Learn how a Microsoft-compatible security key for Windows is different (and better) than any other FIDO2 security key.
|
description: Learn how a Microsoft-compatible security key for Windows is different (and better) than any other FIDO2 security key.
|
||||||
ms.prod: windows-client
|
|
||||||
author: paolomatarazzo
|
|
||||||
ms.author: paoloma
|
|
||||||
manager: aaroncz
|
|
||||||
ms.reviewer: prsriva
|
|
||||||
ms.collection: M365-identity-device-management
|
|
||||||
ms.topic: article
|
|
||||||
localizationpriority: medium
|
|
||||||
ms.date: 11/14/2018
|
ms.date: 11/14/2018
|
||||||
ms.technology: itpro-security
|
appliesto:
|
||||||
|
- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10 and later</a>
|
||||||
---
|
---
|
||||||
# What is a Microsoft-compatible security key?
|
# What is a Microsoft-compatible security key?
|
||||||
|
|
||||||
|
@ -1,24 +1,15 @@
|
|||||||
---
|
---
|
||||||
title: Password-less strategy
|
title: Password-less strategy
|
||||||
description: Learn about the password-less strategy and how Windows Hello for Business implements this strategy in Windows 10 and Windows 11.
|
description: Learn about the password-less strategy and how Windows Hello for Business implements this strategy in Windows 10 and Windows 11.
|
||||||
ms.prod: windows-client
|
|
||||||
author: paolomatarazzo
|
|
||||||
ms.author: paoloma
|
|
||||||
manager: aaroncz
|
|
||||||
ms.reviewer: prsriva
|
|
||||||
ms.collection: M365-identity-device-management
|
|
||||||
ms.topic: conceptual
|
ms.topic: conceptual
|
||||||
localizationpriority: medium
|
|
||||||
ms.date: 05/24/2022
|
ms.date: 05/24/2022
|
||||||
appliesto:
|
appliesto:
|
||||||
- ✅ <b>Windows 10</b>
|
- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10 and later</a>
|
||||||
- ✅ <b>Windows 11</b>
|
|
||||||
ms.technology: itpro-security
|
|
||||||
---
|
---
|
||||||
|
|
||||||
# Password-less strategy
|
# Password-less strategy
|
||||||
|
|
||||||
This article describes Windows' password-less strategy. Learn how Windows Hello for Business implements this strategy in Windows 10 and Windows 11.
|
This article describes Windows' password-less strategy and how Windows Hello for Business implements this strategy.
|
||||||
|
|
||||||
## Four steps to password freedom
|
## Four steps to password freedom
|
||||||
|
|
||||||
|
@ -1,16 +1,9 @@
|
|||||||
---
|
---
|
||||||
title: Reset-security-key
|
title: Reset-security-key
|
||||||
description: Windows 10 and Windows 11 enables users to sign in to their device using a security key. How to reset a security key
|
description: Windows 10 and Windows 11 enables users to sign in to their device using a security key. How to reset a security key
|
||||||
ms.prod: windows-client
|
|
||||||
author: paolomatarazzo
|
|
||||||
ms.author: paoloma
|
|
||||||
manager: aaroncz
|
|
||||||
ms.reviewer: prsriva
|
|
||||||
ms.collection: M365-identity-device-management
|
|
||||||
ms.topic: article
|
|
||||||
localizationpriority: medium
|
|
||||||
ms.date: 11/14/2018
|
ms.date: 11/14/2018
|
||||||
ms.technology: itpro-security
|
appliesto:
|
||||||
|
- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10 and later</a>
|
||||||
---
|
---
|
||||||
# How to reset a Microsoft-compatible security key?
|
# How to reset a Microsoft-compatible security key?
|
||||||
> [!Warning]
|
> [!Warning]
|
||||||
|
@ -1,17 +1,10 @@
|
|||||||
---
|
---
|
||||||
title: How Windows Hello for Business works (Windows)
|
title: How Windows Hello for Business works (Windows)
|
||||||
description: Learn about registration, authentication, key material, and infrastructure for Windows Hello for Business.
|
description: Learn about registration, authentication, key material, and infrastructure for Windows Hello for Business.
|
||||||
ms.prod: windows-client
|
|
||||||
ms.localizationpriority: high
|
|
||||||
author: paolomatarazzo
|
|
||||||
ms.author: paoloma
|
|
||||||
ms.date: 10/16/2017
|
ms.date: 10/16/2017
|
||||||
manager: aaroncz
|
|
||||||
ms.topic: article
|
|
||||||
appliesto:
|
appliesto:
|
||||||
- ✅ <b>Windows 10</b>
|
- ✅ <b>Windows 10</b>
|
||||||
- ✅ <b>Windows 11</b>
|
- ✅ <b>Windows 11</b>
|
||||||
ms.technology: itpro-security
|
|
||||||
---
|
---
|
||||||
# How Windows Hello for Business works in Windows devices
|
# How Windows Hello for Business works in Windows devices
|
||||||
|
|
||||||
|
@ -1,19 +1,9 @@
|
|||||||
---
|
---
|
||||||
title: WebAuthn APIs
|
title: WebAuthn APIs
|
||||||
description: Learn how to use WebAuthn APIs to enable passwordless authentication for your sites and apps.
|
description: Learn how to use WebAuthn APIs to enable passwordless authentication for your sites and apps.
|
||||||
ms.prod: windows-client
|
|
||||||
author: paolomatarazzo
|
|
||||||
ms.author: paoloma
|
|
||||||
manager: aaroncz
|
|
||||||
ms.reviewer: prsriva
|
|
||||||
ms.collection: M365-identity-device-management
|
|
||||||
ms.topic: article
|
|
||||||
localizationpriority: medium
|
|
||||||
ms.date: 09/15/2022
|
ms.date: 09/15/2022
|
||||||
appliesto:
|
appliesto:
|
||||||
- ✅ <b>Windows 10</b>
|
- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10 and later</a>
|
||||||
- ✅ <b>Windows 11</b>
|
|
||||||
ms.technology: itpro-security
|
|
||||||
---
|
---
|
||||||
# WebAuthn APIs for passwordless authentication on Windows
|
# WebAuthn APIs for passwordless authentication on Windows
|
||||||
<!--MAXADO-6021798-->
|
<!--MAXADO-6021798-->
|
||||||
|
Loading…
x
Reference in New Issue
Block a user