Windows 10: Windows 11 22H2 - FIDO2 Security Key logon not working

mrs117 · Nov 14, 2022

Hi - I am currently aware of the issues with FIDO2 security logon after updating to Windows 11 22H2.My machine is currently running build 22621.819 just updated with KB5019980 this morning.Even after reinstalling windows, I am unable to logon with my FIDO2 security key. I am able to enter my PIN... the key does not recognize my touch input. If I raise my laptop lid slightly after touching the key, I am able to log on. Firmware, etc on my computer and dock are up to date. This issue only began affecting me after my machine updated to 22H2 on 10.5.2022. I am able to log on with my passwor

:)

Brink · Nov 14, 2022

Windows Hello & FIDO2 Security Keys authentication for shared devices

Are you tired of entering usernames and passwords? Windows Hello and FIDO2 Security keys allow you to carry your identity with you.

We have been on a journey to eliminate passwords. Today, we are delighted to announce an important milestone.

Microsoft has been aligned with the Fast Identity Online (FIDO) working group from the start, the alliance represents 250 organizations from various industries on a joint mission to replace passwords with an easy to use strong credential. With the recent ratification of FIDO2 security keys by the FIDO working group, we’re updating Windows Hello to enable secure authentication for many new scenarios.

FIDO2 Security Key

Imagine a helpdesk scenario where an employee can walk up to any device and simply log in using Windows Hello and not username and password. Another scenario is hospital medical staff that need access a patient records on a device no matter where the patient is located. Or a public-sector organization that wants secure authentication on devices while adhering to security policies and directives where the users credential needs to be physically separate from the device itself.

Microsoft and its partners have been working together on FIDO2 security keys for Windows Hello to enable easy and secure authentication on shared devices. Security keys allow you to carry your credential with you and safely authenticate to an Azure AD joined Windows 10 PC that’s part of your organization. A user can walk up to any device belonging to the organization and authenticate in a secure way – no need to enter a username and password or set-up Windows Hello beforehand. Unlike traditional passwords, these keys rely on high-security, public-key cryptography to provide strong authentication. These keys have all the benefits of a Trusted Platform Module (TPM) while also being portable enabling the increasing number of mobile workers.

FIDO2 compliant security keys provide secure authentication, independent of the form factor. The security key holds your credential and can be protected with an additional second factor like fingerprint (integrated into the security key) or a PIN to be entered at the Windows sign-in.

Our partners are working on a variety of security key form factors. Some examples include USB security keys and NFC enabled smartcards, just to name a few. We are looking forward to seeing new form factors and possibly applications on your phone that comply with the FIDO2 specification.

Here’s a glimpse into the security keys from our partners we’ve been working closely with

Yubico – Security key for Windows Hello

wl479T2t6eo

HID – Security key for Windows Hello

kGoinG7ru1U

Feitian – Security key for Windows Hello with biometric sensor

bgyNfUawXJo
Click to expand...

Source: Windows Hello and FIDO2 Security Keys enable secure and easy authentication for shared devices - Windows For Your Business

Brink · Nov 14, 2022

Windows Hello & FIDO2 Security Keys authentication for shared devices

Are you tired of entering usernames and passwords? Windows Hello and FIDO2 Security keys allow you to carry your identity with you.

We have been on a journey to eliminate passwords. Today, we are delighted to announce an important milestone.

Microsoft has been aligned with the Fast Identity Online (FIDO) working group from the start, the alliance represents 250 organizations from various industries on a joint mission to replace passwords with an easy to use strong credential. With the recent ratification of FIDO2 security keys by the FIDO working group, we’re updating Windows Hello to enable secure authentication for many new scenarios.

FIDO2 Security Key

Imagine a helpdesk scenario where an employee can walk up to any device and simply log in using Windows Hello and not username and password. Another scenario is hospital medical staff that need access a patient records on a device no matter where the patient is located. Or a public-sector organization that wants secure authentication on devices while adhering to security policies and directives where the users credential needs to be physically separate from the device itself.

Microsoft and its partners have been working together on FIDO2 security keys for Windows Hello to enable easy and secure authentication on shared devices. Security keys allow you to carry your credential with you and safely authenticate to an Azure AD joined Windows 10 PC that’s part of your organization. A user can walk up to any device belonging to the organization and authenticate in a secure way – no need to enter a username and password or set-up Windows Hello beforehand. Unlike traditional passwords, these keys rely on high-security, public-key cryptography to provide strong authentication. These keys have all the benefits of a Trusted Platform Module (TPM) while also being portable enabling the increasing number of mobile workers.

FIDO2 compliant security keys provide secure authentication, independent of the form factor. The security key holds your credential and can be protected with an additional second factor like fingerprint (integrated into the security key) or a PIN to be entered at the Windows sign-in.

Our partners are working on a variety of security key form factors. Some examples include USB security keys and NFC enabled smartcards, just to name a few. We are looking forward to seeing new form factors and possibly applications on your phone that comply with the FIDO2 specification.

Here’s a glimpse into the security keys from our partners we’ve been working closely with

Yubico – Security key for Windows Hello

HID – Security key for Windows Hello

Feitian – Security key for Windows Hello with biometric sensor

Click to expand...

Source: Windows Hello and FIDO2 Security Keys enable secure and easy authentication for shared devices - Windows For Your Business

DanteMach · Nov 14, 2022

Security Key

Hi

you can't simply put your logon onto a usb device to logon

you need to purchase a FIDO2 security key and then go to settings -> accounts -> sign-in options

click on security key click manage and follow the instructions to set it up
Click to expand...

Hi Martmcd, Thank you for your assistance. I went to the Fido2 website and came across info that may be of interest to you:

"announced today that Microsoft has achieved FIDO2 certification for Windows Hello. With this news, any compatible device running Windows 10 is now FIDO2 Certified out-of-the-box following the Windows
10 May 2019 update. Windows 10 users can now move beyond centrally-stored passwords and leverage Windows Hello biometrics or PINs to access their devices, apps, online services and networks with FIDO Certified security."

As far as I can recall I had this working until a few weeks back, having being given access when I chose to cover my email logon with 2step verification. That went down the tube when my email logon was hacked by an outfit in Sweden, that eventually turned
out to be in Switzerland, and I changed my email logon password. That hack is still in place despite my doing all that I can to overcome it; Root kit, Bitdefender, Virus sweep, Iobit's Advanced System Care, VPN, etc, et al.

Thanks to your advice I am hoping that having a new Security Key will head them off at the Boot up.

I am obliged to you for your help in this. Wishing you a pleasant weekend

Best regards, Dante

Windows 10: Windows 11 22H2 - FIDO2 Security Key logon not working

Windows 11 22H2 - FIDO2 Security Key logon not working

Windows 11 22H2 - FIDO2 Security Key logon not working

Windows 11 22H2 - FIDO2 Security Key logon not working

Windows 11 22H2 - FIDO2 Security Key logon not working - Similar Threads - 22H2 FIDO2 Security

How do I use the Yubikey Security key FIDO2 for passwordless secure logon to Windows?

How do I use the Yubikey Security key FIDO2 for passwordless secure logon to Windows?

Windows 11 22H2 - FIDO2 Security Key logon not working

logon security

logon security

logon security

update on Azure AD support for FIDO2 security keys in hybrid environments

List/Remove Windows Hello FIDO2 resident Keys

Windows Hello & FIDO2 Security Keys authentication for shared devices