Windows 10: How to setup YubiKey with Windows Hello?

I'm trying to setup my Windows PC to be able to sign in With a YubiKey, and need help to use it to log in to my computer directly. Attempting to use the key will not work, it says that I need to use my password. Is there any way I can set it up to use only a security key or use it in combination with a password?

:)

 

Yubikey login support

Hi,

Log in issues can be caused by invalid password or username. For us to assist you further, kindly answer the questions below:

• What troubleshooting steps have you done so far?
• Have you made any recent changes before this issue occur?
• Have you tried using Yubikey before?

We're looking forward for your response.

 

Windows 10 1909 breaks Windows Hello with YubiKey 4

Hi. Been using Windows 10 ever since it came out. Windows Hello with YubiKey 4 never had a problem. All updates to 1903 were fine but then, recently I upgraded to 1909 because someone suggested that might fix an issue I had with Your Phone companion.

Now, Windows Hello no longer works with YubiKey 4. Windows security key sign-In management refuses to recognize that its a valid security key.

To eliminate the possibility that the key has somehow gone bad, I jumped onto the Yubico website and downloaded Yubico Client for Windows and the key is recognized fine and validated working with that client. I would have stuck with that client but it doesn't
have the convenience of Windows Hello.

After uninstalling the Yubico client, I went about to try a standard
Yubico Security Key. This worked fine.

I am now suspecting that Microsoft has removed support for FIDO U2F from Windows Hello security key functionality and replaced it with a FIDO2 implementation (instead of supporting both) because that is the only significant difference. YubiKey 4 also supports
a number of other authentication standards such as OTP, OAUTH, OpenPGP, smart cards, etc which the Yubico Security Key does not support but I don't believe Windows Hello implements these capabilities in security keys.

Can anyone confirm? It just means I have to buy a YubiKey 5 with FIDO2 support but its a real pain for Microsoft to simply dump support for FIDO U2F when a year or two ago, it was considered the mainstream security 2nd factor key implementation before OAUTH
and FIDO2 specifications were solid.

 

yubikey

So...you've never heard of yubikey? 2fa, OATH, OTP?