windows-itpro-docs/windows/security/identity-protection/hello-for-business/hello-hybrid-cert-whfb-settings.md

title, description, keywords, ms.prod, ms.mktglfcycl, ms.sitesec, ms.pagetype, audience, author, ms.author, manager, ms.collection, ms.topic, localizationpriority, ms.date, ms.reviewer

title	description	keywords	ms.prod	ms.mktglfcycl	ms.sitesec	ms.pagetype	audience	author	ms.author	manager	ms.collection	ms.topic	localizationpriority	ms.date	ms.reviewer
Configure Hybrid Windows Hello for Business Settings (Windows Hello for Business)	Configuring Windows Hello for Business Settings in Hybrid deployment	identity, PIN, biometric, Hello, passport, WHFB, hybrid, certificate-trust	w10	deploy	library	security, mobile	ITPro	mapalko	mapalko	dansimp	M365-identity-device-management	article	medium	08/19/2018

Configure Windows Hello for Business

Applies to

• Windows 10, version 1703 or later
• Hybrid deployment
• Certificate trust

Your environment is federated and you are ready to configure your hybrid environment for Windows Hello for business using the certificate trust model.

Important

If your environment is not federated, review the New Installation baseline section of this deployment document to learn how to federate your environment for your Windows Hello for Business deployment.

The configuration for Windows Hello for Business is grouped in four categories. These categories are:

• Active Directory
• Public Key Infrastructure
• Active Directory Federation Services
• Group Policy

For the most efficient deployment, configure these technologies in order beginning with the Active Directory configuration

[!div class="step-by-step"] Configure Active Directory >

---

Follow the Windows Hello for Business hybrid certificate trust deployment guide

1. Overview
2. Prerequisites
3. New Installation Baseline
4. Configure Azure Device Registration
5. Configure Windows Hello for Business settings (You are here)
6. Sign-in and Provision