Blog Post

Core Infrastructure and Security Blog
7 MIN READ

Passwordless RDP Authentication for On-Prem Servers with Smart Cards (FIDO2 Security Key)

Farooque's avatar
Farooque
Icon for Microsoft rankMicrosoft
Apr 07, 2025

Enable secure, passwordless RDP access to on-prem servers using Smart Cards with FIDO2 Security Keys. This approach leverages Kerberos PKINIT and certificate-based authentication to enhance protection and eliminate password risks.

Hello Everyone, in my previous blog, I discussed how to use FIDO2 Security Key Passwordless Authentication with Entra or Hybrid Joined devices for Remote Desktop Connection. In this blog, we will dis...
Updated Apr 06, 2025
Version 1.0
Active Directory
Domain
fido2
passwordless
Passwordless Authentication
smartcard
armandolopezo's avatar
armandolopezo
Brass Contributor
Apr 08, 2025

thank you. I was thinking some time ago that I would like to use certificates or security keys for RDP and passwordless is better.

  • Farooque's avatar
    Farooque
    Icon for Microsoft rankMicrosoft
    Apr 08, 2025

    Hey armdan passwordless is the way to go. The deployment is very straight forward and simple. You use it for your PAW system as well.

    • nexsys-verona's avatar
      nexsys-verona
      Copper Contributor
      Jun 06, 2025

      HI, I followed all the instructions, but when I connect via RDP and enter the correct PIN, the remote system returns the following error: "This smart card could not be used. Additional details may be available in the system log"....but nothing showed into event viewer related to this error. I'm using yubico 5 NFC...