windows-itpro-docs/windows/security/identity-protection/hello-for-business/hello-deployment-cert-trust.md

title, description, ms.date, appliesto, ms.topic

title	description	ms.date	appliesto	ms.topic
Windows Hello for Business Deployment Guide - On Premises Certificate Trust Deployment	A guide to on premises, certificate trust Windows Hello for Business deployment.	08/19/2018	✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10 and later</a> ✅ <a href=https://learn.microsoft.com/en-us/windows/release-health/windows-server-release-info target=_blank>Windows Server 2016 and later</a>	article

On Premises Certificate Trust Deployment

[!INCLUDE hello-on-premises-cert-trust]

Windows Hello for Business replaces username and password sign-in to Windows with authentication using an asymmetric key pair. This deployment guide provides the information you'll need to successfully deploy Windows Hello for Business in an existing environment.

Below, you can find all the information needed to deploy Windows Hello for Business in a Certificate Trust Model in your on-premises environment:

1. Validate Active Directory prerequisites
2. Validate and Configure Public Key Infrastructure
3. Prepare and Deploy Windows Server 2016 Active Directory Federation Services
4. Validate and Deploy Multi-factor Authentication Services (MFA)
5. Configure Windows Hello for Business Policy settings