windows-itpro-docs/windows/security/identity-protection/hello-for-business/includes/use-certificate-for-on-premises-authentication.md

1.1 KiB

author, ms.author, ms.date, ms.topic
author ms.author ms.date ms.topic
paolomatarazzo paoloma 03/12/2024 include

Use certificate for on-premises authentication

Use this policy setting to configure Windows Hello for Business to enroll a sign-in certificate used for on-premises authentication.

  • If you enable this policy setting, Windows Hello for Business enrolls a sign-in certificate that is used for on-premises authentication
  • If you disable or don't configure this policy setting, Windows Hello for Business will use a key or a Kerberos ticket (depending on other policy settings) for on-premises authentication
Path
CSP ./Device/Vendor/MSFT/PassportForWork/{TenantId}/Policies/UseCertificateForOnPremAuth
GPO Computer Configuration > Administrative Templates > Windows Components > Windows Hello for Business

User Configuration > Administrative Templates > Windows Components > Windows Hello for Business