Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > alt.comp.os.windows-11 > #16573

Re: FIDO2

Show all headers | View raw

On Mon, 1/27/2025 11:47 AM, Andy Burns wrote:
> My last couple of laptops had integrated fingerprint readers, and I used that for login, when shopping for this machine I had to choose one without fingerprint to get other features I wanted ... ho hum.
> 
> Anyway, I don't like face unlock, and got quite pissed off with the number of times a day I have to enter my pretty complex password, so decided to buy a FIDO2 security key with fingerprint reader.
> 
> This Kensington one seemed up to the job
> 
> <https://www.kensington.com/en-gb/p/products/data-protection/fingerprint-security-keys/verimark-guard-usb-a-fingerprint-security-key-fido2-webauthnctap2-fido-u2f-cross-platform-1/>
> 
> Plugged in the dongle, recognised without needing a driver, enrolled my fingerprint and set a PIN, so far so good.
> 
> Locked the PC, expecting that "security key" would be added as a new method on the lock screen along with password/pin/face unlock
> 
> But no, I can't logon or unlock using the key. This is a Windows11 Home PC (so can't belong to a domain) it all seems to want to use Microsoft Entra to login, is there any way to do this on a "Home" pc?
> 
> Was also expecting my Password Manager (EnPass) which accepts Windows Hello would also unlock using the security key, but no dice there either
> 
> Anyone get similar working?
> 

Was all of your setup done in a Windows Hello dialog ?

From your description, you must have been in here.

   https://www.yubion.com/post/fido2-security-key-pin-setting-fingerprint-setting-for-windows?lang=en

This isn't the ARM64 laptop is it, the Qualcomm one ?

Your device is a security key (with biometric credential transmission) and it
probably isn't the PIN setup option here but the security key option. The fingerprint
one would be for a captive fingerprint reading device in the laptop.

   https://static1.xdaimages.com/wordpress/wp-content/uploads/wm/2023/09/windows-11-settings-remove-windows-hello.png?q=49&fit=crop&w=825&dpr=2

   ( https://www.xda-developers.com/how-to-set-up-windows-hello/ )

Apparently, it is possible to use a third party App from the Store,
to accept the security key at login, but that strikes me as poor
security. You want only Windows goods, with Windows signing, in
that path.

   Paul

Back to alt.comp.os.windows-11 | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

FIDO2 Andy Burns <usenet@andyburns.uk> - 2025-01-27 16:47 +0000
  Re: FIDO2 Paul <nospam@needed.invalid> - 2025-01-27 12:49 -0500
    Re: FIDO2 Andy Burns <usenet@andyburns.uk> - 2025-01-27 18:06 +0000
      Re: FIDO2 Paul <nospam@needed.invalid> - 2025-01-27 14:09 -0500
        Re: FIDO2 Andy Burns <usenet@andyburns.uk> - 2025-01-27 19:43 +0000
          Re: FIDO2 Andy Burns <usenet@andyburns.uk> - 2025-01-27 20:06 +0000
        Re: FIDO2 Andy Burns <usenet@andyburns.uk> - 2025-01-28 16:38 +0000

csiph-web