Windows 10: Windows Hello FIDO2 certification gets you closer to passwordless

Brink · May 6, 2019

With the FIDO2 certification of Windows Hello, Microsoft is putting the 800 million people who use Windows 10 one step closer to a world without passwords.

No one likes passwords (except hackers). People don’t like passwords because we have to remember them. As a result, we often create passwords that are easy to guess—which makes them the first target for hackers trying to access your computer or network at work.

Since 2015, Microsoft has been building a path to a secure and passwordless world with Windows Hello, enabling Windows 10 users everywhere to sign in to their devices using biometrics or a PIN and leave the world of passwords behind. Continuing this momentum, Microsoft announced in November of 2018 the ability to use Windows Hello or a FIDO2 security key to securely sign in to your Microsoft account on the web, without a password!

Today, the FIDO Alliance that, with the upcoming release of Windows 10, version 1903, Windows Hello is a FIDO2 Certified authenticator. FIDO2 enables developers to leverage standards-based protocols and devices to provide users easy authentication to online services—in both mobile and desktop environments. Microsoft is a leading member of the FIDO Alliance and is working closely with alliance members to enable passwordless login for websites supporting FIDO2 authentication. Collectively, these standards enable users to more easily and securely login to online services with FIDO2-compliant security keys and Windows Hello.

Every month, more than 800 million people use a Microsoft account to access email, play a game, or access files in the cloud. That’s why, in addition to FIDO2 certification, Windows 10, version 1903 will enable users of the latest version of Mozilla Firefox to log in to their Microsoft account or other FIDO-supporting websites. Chromium-based browsers, including Microsoft Edge on Chromium, will support the same capability soon.

We encourage companies and software developers to adopt a strategy for achieving a passwordless future and start today by supporting password alternatives—such as Windows Hello—for their users. For more details on deploying Windows Hello, see www.aka.ms/whfb.

To support secure authentication on shared Windows 10 PCs, such as those used by Firstline Workers, FIDO2 compliant Microsoft-compatible security keys offer a portable solution that enables users to log in to Windows 10 without a password. Learn more about this scenario by reading Windows Hello and FIDO2 Security Keys enable secure and easy authentication for shared devices.

Finally, Microsoft Authenticator can enable users to authenticate their Microsoft accounts using their mobile phones. Built on secure technology similar to Windows Hello, Microsoft Authenticator packages authentication into a simple app on your mobile device.

Windows Hello, FIDO2 security keys, and the mobile Microsoft Authenticator app are great alternatives to passwords. To truly create a world without passwords; however, we need interoperable solutions that work across all industry platforms and browsers. We will continue to invest in this space and look forward to sharing future updates. In the meantime, if you’re a developer, you can help by supporting FIDO2 authentication in your web services and applications today.
Click to expand...

Source: Windows Hello FIDO2 certification gets you closer to passwordless - Microsoft Tech Community - 534592

:)

Brink · May 6, 2019

Windows Hello & FIDO2 Security Keys authentication for shared devices

Are you tired of entering usernames and passwords? Windows Hello and FIDO2 Security keys allow you to carry your identity with you.

We have been on a journey to eliminate passwords. Today, we are delighted to announce an important milestone.

Microsoft has been aligned with the Fast Identity Online (FIDO) working group from the start, the alliance represents 250 organizations from various industries on a joint mission to replace passwords with an easy to use strong credential. With the recent ratification of FIDO2 security keys by the FIDO working group, we’re updating Windows Hello to enable secure authentication for many new scenarios.

FIDO2 Security Key

Imagine a helpdesk scenario where an employee can walk up to any device and simply log in using Windows Hello and not username and password. Another scenario is hospital medical staff that need access a patient records on a device no matter where the patient is located. Or a public-sector organization that wants secure authentication on devices while adhering to security policies and directives where the users credential needs to be physically separate from the device itself.

Microsoft and its partners have been working together on FIDO2 security keys for Windows Hello to enable easy and secure authentication on shared devices. Security keys allow you to carry your credential with you and safely authenticate to an Azure AD joined Windows 10 PC that’s part of your organization. A user can walk up to any device belonging to the organization and authenticate in a secure way – no need to enter a username and password or set-up Windows Hello beforehand. Unlike traditional passwords, these keys rely on high-security, public-key cryptography to provide strong authentication. These keys have all the benefits of a Trusted Platform Module (TPM) while also being portable enabling the increasing number of mobile workers.

FIDO2 compliant security keys provide secure authentication, independent of the form factor. The security key holds your credential and can be protected with an additional second factor like fingerprint (integrated into the security key) or a PIN to be entered at the Windows sign-in.

Our partners are working on a variety of security key form factors. Some examples include USB security keys and NFC enabled smartcards, just to name a few. We are looking forward to seeing new form factors and possibly applications on your phone that comply with the FIDO2 specification.

Here’s a glimpse into the security keys from our partners we’ve been working closely with

Yubico – Security key for Windows Hello

wl479T2t6eo

HID – Security key for Windows Hello

kGoinG7ru1U

Feitian – Security key for Windows Hello with biometric sensor

bgyNfUawXJo
Click to expand...

Source: Windows Hello and FIDO2 Security Keys enable secure and easy authentication for shared devices - Windows For Your Business

dalchina · May 6, 2019

Problems with installing a security key

Hi, I suppose you have tried
Support : Yubico Support

or
Submit a ticket : Yubico Support

- would be the most likely place to get help for this product... otherwise you are relying on there being a member here who uses one.

Is this a hint?

To give you a clear example, let's set up a YubiKey to work with Facebook. Note that for Facebook, the YubiKey can only log you in if you're using the latest version of Chrome or Opera. The hardware keys will work with Mozilla Firefox and Microsoft Edge on some services, but other services are more fickle—check the browser requirements for each of your most commonly used web services. For the ones that don't support your hardware key, you can use a 2FA code-generator app instead.
Click to expand...

https://www.wired.com/story/how-to-use-a-yubikey/

https://www.yubico.com/2018/08/one-...o2-webauthn/" target="_blank" rel="nofollow">

The industry moved one step closer to passwordless login with this week’s Microsoft announcement that starting with Microsoft Edge build 17723, the browser will support FIDO2 strong first-factor and multifactor passwordless login, and second-factor authentication.
Click to expand...

satindemon4u · May 6, 2019

Certification Questions....

Hello all!

I am looking over various certifications and am wondering what would be best for me. Here are is my current state..

Have no certifications at all

Have Associates degree in I.T. and am working on Bachelors. Will have that in about a year.

Have a job as a help desk tech at a bank

With that being said I am looking at the Microsoft Server 2016 cert (MCSA). But now I also see an MCSA cert for Windows 10.

Is the Windows 10 cert worth it at all or should I just go right for the Server 2016? I don't know a TON about Microsoft Servers so I would be learning and things along the way. Thankfully I work with a network admin who is also very willing to teach.

Lastly, the bank will pay for the courses and pay for the cost of the exam, if I pass it.

Thoughts?

Windows 10: Windows Hello FIDO2 certification gets you closer to passwordless

Windows Hello FIDO2 certification gets you closer to passwordless

Windows Hello FIDO2 certification gets you closer to passwordless

Windows Hello FIDO2 certification gets you closer to passwordless

Windows Hello FIDO2 certification gets you closer to passwordless - Similar Threads - Hello FIDO2 certification

Passwordless?

Passwordless?

Passwordless?

Windows hello for business on premise certification trust

RDP Passwordless with windows hello

List/Remove Windows Hello FIDO2 resident Keys

How to list / delete FIDO2 Resident Key credentials from Windows Hello

Passwordless FIDO2 verification on Android for Google Accounts

Windows Hello & FIDO2 Security Keys authentication for shared devices