windows-itpro-docs/windows/security/identity-protection/hello-for-business/hello-deployment-key-trust.md

title, description, keywords, ms.prod, ms.mktglfcycl, ms.sitesec, ms.pagetype, author, ms.author, localizationpriority, ms.date

title	description	keywords	ms.prod	ms.mktglfcycl	ms.sitesec	ms.pagetype	author	ms.author	localizationpriority	ms.date
Windows Hello for Business Deployment Guide - On Premises Key Deployment	A guide to an On Premises, Certificate trust Windows Hello for Business deployment	identity, PIN, biometric, Hello, passport	w10	deploy	library	security, mobile	mikestephens-MS	mstephen	high	10/23/2017

On Premises Key Trust Deployment

Applies to

• Windows 10

This guide only applies to Windows 10, version 1703 or higher.

Windows Hello for Business replaces username and password sign-in to Windows with strong user authentication based on asymmetric key pair. The following deployment guide provides the information needed to successfully deploy Windows Hello for Business in an existing environment.

Below, you can find all the infromation you need to deploy Windows Hello for Business in a key trust model in your on-premises environment:

1. Validate Active Directory prerequisites
2. Validate and Configure Public Key Infrastructure
3. Prepare and Deploy Windows Server 2016 Active Directory Federation Services
4. Validate and Deploy Multifactor Authentication Services (MFA)
5. Configure Windows Hello for Business Policy settings