diff --git a/windows/security/identity-protection/passkeys/index.md b/windows/security/identity-protection/passkeys/index.md index 7c11a4de1d..deaf3a8a2c 100644 --- a/windows/security/identity-protection/passkeys/index.md +++ b/windows/security/identity-protection/passkeys/index.md @@ -327,8 +327,8 @@ Some organizations restrict the use of Bluetooth, preventing the use of passkeys | OMA-URI: `./Device/Vendor/MSFT/Policy/Config/Bluetooth/`[AllowDiscoverableMode](/windows/client-management/mdm/policy-csp-bluetooth#allowdiscoverablemode)
  • Data type: **Integer**
  • Value:`0`
  • Details: When set to `0`, other devices won't be able to detect the device.
    • | | OMA-URI: `./Device/Vendor/MSFT/Policy/Config/Bluetooth/`[AllowPrepairing](/windows/client-management/mdm/policy-csp-bluetooth#allowprepiaring)
  • Data type: **Integer**
  • Value:`0`
  • Details: Prevents specific bundled Bluetooth peripherals to automatically pair with the host device.
    • | | OMA-URI: `./Device/Vendor/MSFT/Policy/Config/Bluetooth/`[AllowPromptedProximalConnections](/windows/client-management/mdm/policy-csp-bluetooth#allowpromptedproximalconnections)
  • Data type: **Integer**
  • Value:`0`
  • Details:Prevents users from using Swift Pair and other proximity-based scenarios.
    • | -| OMA-URI: `./Device/Vendor/MSFT/Policy/Config/Bluetooth/`[ServicesAllowedList](/windows/client-management/mdm/policy-csp-bluetooth#servicesallowedlist)
  • Data type: **String**
  • Value:`{0000FFFD-0000-1000-8000-00805F9B34FB};{0000FFF9-0000-1000-8000-00805F9B34FB}`

    Set a list of allowable Bluetooth services and profiles:
    - FIDO Alliance Universal Second Factor Authenticator service
    - FIDO2 secure client-to-authenticator transport service.
    • | -| OMA-URI: `./Device/Vendor/MSFT/Policy/Config/DeviceInstallation/`[PreventInstallationOfMatchingDeviceIDs](/windows/client-management/mdm/policy-csp-deviceinstallation#preventinstallationofmatchingdeviceids)
  • Data type: **String**
  • Value:``


    • This configuration:
    - disables the existing Bluetooth Personal Area Network (PAN) network adapter
    - prevents the installation of the Bluetooth Network Adapter that can be used for network connectivity\tethering from a Bluetooth device and the endpoint.

    For more information see:
    - [FIDO CTAP 2.1 standard specification][BT-1]
    - [Bluetooth Assigned Numbers document][BT-2]| +| OMA-URI: `./Device/Vendor/MSFT/Policy/Config/Bluetooth/`[ServicesAllowedList](/windows/client-management/mdm/policy-csp-bluetooth#servicesallowedlist)
  • Data type: **String**
  • Value:`{0000FFFD-0000-1000-8000-00805F9B34FB};{0000FFF9-0000-1000-8000-00805F9B34FB}`

    Set a list of allowable Bluetooth services and profiles:
    - FIDO Alliance Universal Second Factor Authenticator service (`0000fffd-0000-1000-8000-00805f9b34fb`)
    - FIDO2 secure client-to-authenticator transport service (`0000FFF9-0000-1000-8000-00805F9B34FB`)
    • | +| OMA-URI: `./Device/Vendor/MSFT/Policy/Config/DeviceInstallation/`[PreventInstallationOfMatchingDeviceIDs](/windows/client-management/mdm/policy-csp-deviceinstallation#preventinstallationofmatchingdeviceids)
  • Data type: **String**
  • Value:``


    • This configuration disables the existing Bluetooth Personal Area Network (PAN) network adapter, preventing the installation of the Bluetooth Network Adapter that can be used for network connectivity or tethering.

    For more information see:
    - [FIDO CTAP 2.1 standard specification][BT-1]
    - [Bluetooth Assigned Numbers document][BT-2]|