Forum Discussion

Bronze Contributor

Jul 24, 2018

Solved

Logging on to Remote Desktop using Windows Hello for Business & Biometrics

In the release notes for build 17713, support was announced for logging into remote desktop sessions using biometrics via windows hello. I have a few questions I'm hoping someone can answer: The...

Dani Halfin
Oct 03, 2018
Although late, we have published information around WHfB with RDP :

https://docs.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/hello-features#remote-desktop-with-biometrics

Micah Castorina

Copper Contributor

Feb 04, 2019

It would be nice to actually get a reply to one question I ask on this forum.

Matthew_Palko

Microsoft

Feb 04, 2019

RDP with Windows Hello for Business only works with certificate based deployments. Support for RDP with Windows Hello for Business PIN has been available for multiple releases. The changes in 1809 add support for biometric auth in addition to PIN.

Micah Castorina
Copper Contributor
Feb 04, 2019
Unfortunately Microsoft documentation did not state that as a limitation for key trust deployments and Microsoft support didn't know that either. So we will have to switch to a certificate deployment in order to use PINs for RDP.
- Clint Lechner
  Iron Contributor
  Apr 17, 2019
  Please don't recommend keytrust everywhere, then make it incompatible with remote desktop. I can't tell you the irritation this created for us.
  
  Certificates are vastly more complicated to set up and ADFS is mandatory for authentication, which we just found out after two weeks of troubleshooting with Microsoft. To be clear, with certificate trust, you can't be using SSO with Azure connect pass through, adfs must be used.
  
  Very disappointing