windows-itpro-docs/windows/security/identity-protection/hello-for-business/hello-hybrid-key-whfb-settings.md

title, description, keywords, ms.prod, ms.mktglfcycl, ms.sitesec, ms.pagetype, audience, author, ms.author, manager, ms.collection, ms.topic, localizationpriority, ms.date, ms.reviewer

title	description	keywords	ms.prod	ms.mktglfcycl	ms.sitesec	ms.pagetype	audience	author	ms.author	manager	ms.collection	ms.topic	localizationpriority	ms.date	ms.reviewer
Configure Hybrid Windows Hello for Business key trust Settings (Windows Hello for Business)	Configuring Windows Hello for Business Settings in Hybrid deployment	identity, PIN, biometric, Hello, passport, WHFB, hybrid, certificate-trust	w10	deploy	library	security, mobile	ITPro	mapalko	mapalko	dansimp	M365-identity-device-management	article	medium	08/19/2018

Configure Hybrid Windows Hello for Business key trust settings

Applies to

• Windows 10, version 1703 or later
• Hybrid deployment
• Key trust

You are ready to configure your hybrid key trust environment for Windows Hello for Business.

Important

Ensure your environment meets all the prerequisites before proceeding. Review the New Installation baseline section of this deployment document to learn how to prepare your environment for your Windows Hello for Business deployment.

The configuration for Windows Hello for Business is grouped in four categories. These categories are:

• Active Directory
• Azure AD Connect
• Public Key Infrastructure
• Group Policy

For the most efficient deployment, configure these technologies in order beginning with the Active Directory configuration

[!div class="step-by-step"] Configure Active Directory >

---

Follow the Windows Hello for Business hybrid key trust deployment guide

1. Overview
2. Prerequisites
3. New Installation Baseline
4. Configure Directory Synchronization
5. Configure Azure Device Registration
6. Configure Windows Hello for Business settings (You are here)
7. Sign-in and Provision