Windows 10: Will Virtual Passkeys be Coming to Windows Login Anytime Soon? Separate from WHFB

Hello everyone,I was just curious if anyone has any insight on what Microsoft's plans are for the future with Passkey use for logging into Windows like you can with Physical FIDO2 keys. I understand that they are allowing users to set up passkeys on windows to authenticate to websites and that WHFB uses passkeys to store your credentials, but I am thinking more along the lines of how you can currently use FIDO2 keys like a Yubikey to login to Windows passwordlessly with the physical key and a PIN that the user sets up and is tied to the their Microsoft Account. For example, there is a company

:)

 

Missing WHFB pin sign-in option while login Windows

Windows device enrolled into Intune successfully by autopilot, and it prompt to configure Windows hello for business after provision.

The WHFB has configure successfully but after restart the device, I do not have the option to login with WHFB, only username and password available.

In Intune, I have enabled WHFB in Devices>Windows Enrollment>Windows Hello for Business, and also configured identity protection configuration profile to enabled windows hello for Business.

On target device, Settings>Sign-in options, there is no error shows in this page.

May I ask if there are any steps we are missing? Or if there is anything else we need to check?

 

Is Windows 8 Phone coming up anytime soon?

Is Windows 8 Phone coming up anytime soon

 

WHFB Cloud Trust - Dual Enrollment not supported - Any other solution ?

Hello,

We are using WHFB Certificate Trust for few years now and we are going to migrate to WHFB Cloud Trust.

• When the user is correctly registered on the device, we disable the use of the password for all users ( including local account) on the computer for security reason so the only way to access the session is with the WHFB authentification define by the user.
  
• For specific user that need elevated privilege on the computer we ask them to register their admin account with Dual Enrollment that was supported with WHFB Certificate Trust : Dual Enrollment - Windows Security | Microsoft Lear
  
  --> So from the user standard session, it was possible to select the WHFB smart card of the admin account to do elevated action and everything was fine for everyone ! No need to switch to admin session.
  

I am now testing WHFB Cloud Trust and this not possible anymore. After ready MS link above, I see that Dual Enrollment was only supported with Certifcate trust.

From your experience on WHFB Cloud trust and considering that security team will not allow us to reactive the use of password on the device , do you know any other solution to be able to do elevated privilege action on the device from a standard session and without switching to the admin session ?

Usecase : validate a prompt that ask for admin privilege on the user session

Thanks for your help !