Blog Post

Windows IT Pro Blog
2 MIN READ

Windows Hello FIDO2 certification gets you closer to passwordless

Yogesh Mehta's avatar
Yogesh Mehta
Icon for Microsoft rankMicrosoft
May 06, 2019
With the FIDO2 certification of Windows Hello, Microsoft is putting the 800 million people who use Windows 10 one step closer to a world without passwords. No one likes passwords (except hackers). ...
Updated May 07, 2019
Version 2.0
security
Neil Goldstein's avatar
Neil Goldstein
Iron Contributor
Jun 17, 2019

JonasBack 

 

Jonas,

 

I have picked up the Feitian BiosPass2 K27 https://www.ftsafe.com/Products/FIDO2

----

 

Windows 10 Fido2 Key usage notes:

Disclaimer: I am NOT in the AzureAD Fido2 preview please don't assume that anything I am saying is correct for when AzureAD supports Fido2. (I hope not)

 

The out of the box experience with just Windows 10 1903 Pro/Enterprise has been as follows:

  • BAD:  Windows 10 so far does not seem to support using Fido2 Key as part of the windows login process (i.e. <ctrl-alt-del> OR when a elevation of privilege's occurs [such as Run As Administrator])
  • GOOD: WebAuthN with Edge and EdgeChromium-Dev-channel build is working for websites that support AuthN login. 

 

I really hope that AzureAD Fido2 can support the <ctrl-alt-del> login scenario even though Microsoft Accounts aren't doing so.