Configure Windows Hello (Windows)

Windows Hello is a more secure way to get instant access to the Windows 10 devices using biometric gestures (fingerprint/facial recognition) or PIN gesture. This profile allows admins to configure fingerprint/facial recognition or set a PIN on the enrolled devices that help the users to get access to the applications, websites, and networks.

Note: The device must be Azure AD Joined and enrolled through Windows EMM or Dual Enrollment mode. The device should support Windows Hello for this feature to work.

To configure fingerprint/facial recognition or set a PIN on the enrolled device(s), follow these steps:

1. Navigate to SureMDM Web Console > Profiles > Windows > Add > Windows Hello > Configure.

2. Enter a Profile Name.

3. Configure Windows Hello settings and click Save.

Settings	Description
Windows Hello	Allow the use of Windows Hello for business.
Use Biometrics	Allow the use of biometric gestures such as fingerprint or face recognition instead of PIN gesture.
TPM	Enable this option to disallow TPM (Trusted Protection Module revision 1.2) from using with Windows Hello profile.
Minimum Pin Length	Enter the minimum number of digits for setting a PIN.
Maximum Pin Length	Enter the maximum number of digits for setting a PIN.
Digits	Set the usage of digits (Allowed/Required/Not Allowed).
Upper Case Letters	Configure the use of upper case letters (Allowed/Required/Not Allowed).
Lower Case Letter	Configure the use of lower case letters (Allowed/Required/Not Allowed).
Special Characters	Configure the use of special characters (Allowed/Required/Not Allowed).
Use Security Key For Sign In	Use this option for the users to sign-in to their device with FIDO security key.

The newly created profile will be listed under the Profiles section.

4. Go to the Home tab and select the Windows device(s) or group(s).

5. Click Apply to launch the Apply Job/Profile To Device prompt.

6. In the Apply Job/Profile To Device prompt, select the created profile and click Apply.