windows-itpro-docs/windows/security/identity-protection/hello-for-business/hello-deployment-key-trust.md

title, description, ms.prod, author, ms.author, manager, ms.reviewer, ms.collection, ms.topic, localizationpriority, ms.date, appliesto

title	description	ms.prod	author	ms.author	manager	ms.reviewer	ms.collection	ms.topic	localizationpriority	ms.date	appliesto
Windows Hello for Business Deployment Guide - On Premises Key Deployment	A guide to on premises, key trust Windows Hello for Business deployment.	m365-security	paolomatarazzo	paoloma	aaroncz	prsriva	M365-identity-device-management	article	medium	08/20/2018	✅ <b>Windows 10</b> ✅ <b>Windows 11</b> ✅ <b>On-premises deployment</b> ✅ <b>Key trust</b>

On Premises Key Trust Deployment

Windows Hello for Business replaces username and password sign-in to Windows with strong user authentication based on asymmetric key pair. The following deployment guide provides the information needed to successfully deploy Windows Hello for Business in an existing environment.

Below, you can find all the information you need to deploy Windows Hello for Business in a key trust model in your on-premises environment:

1. Validate Active Directory prerequisites
2. Validate and Configure Public Key Infrastructure
3. Prepare and Deploy Windows Server 2016 Active Directory Federation Services
4. Validate and Deploy Multifactor Authentication Services (MFA)
5. Configure Windows Hello for Business Policy settings