How to set up the FIDO2 Security Key for Windows 10/11

-

Presentation

Windows Hello allows the use of many authentication methods, known as passwordless. Here we will see how to configure a FIDO2 security key in Windows 10/11.

Prerequisites

  • Have internet access to configure the key
  • Multi-Factor authentication activated on Azure Services
  • A FIDO2 security Key
  • The following network streams must be accessible
    • *.microsoftonline.com
    • *.microsoftonline-p.com
    • *.msauth.net
    • *.msauthimages.net
    • *.msecnd.net
    • *.msftauth.net
    • *.msftauthimages.net
    • *.phonefactor.net
    • enterpriseregistration.windows.net
    • management.azure.com
    • policykeyservice.dc.ad.msft.net
    • secure.aadcdn.microsoftonline-p.com

Configuration 

  • Go to https://mysignins.microsoft.com/
  • Click Security info
  • Select Add sign-in method

  • Select Security Key and click Add

  • Click Next


  • Enter your account credentials and click Verify

  • Select the type of security key used

Click Next


Select External Security Key or built-in sensor



Click OK


Click OK


Insert your Security Key



Enter the security key PIN Code and click OK


Touch your Security Key


Enter a name of security Key and click Next



Your security key is set up. You can now use your FIDO2 key to validate your authentication on Windows.


Use security key for Windows Authentication

Select FIDO Security Key



Enter your FIDO key PIN



Touch your Security Key


You are now authenticated, you have access to your Windows desktop

Popular posts from this blog

How to reset computer in OOBE mode

-
Image
When you receive a new computer, it may contain various applications that are useless in a business context. To solve this problem and start with a clean PC, it may be interesting to reset it.  Here is two procedures that can be performed in OOBE mode Manual process Click CTRL + Shift + F3 , your computer restart. The Windows session is automatically opened Go to Start Menu \ Parameters \ Update & Security \ Recovery and click on Get Started Select Remove everything Select Local reinstall Click Next Click Reset Your computer restarts and proceeds to a complete reinstallation. With Command Line Click  Shift + F10 , your computer restart. Used this command line : systemreset -factoryreset Select Remove everything Select Remove files and clean the drive Click Reset Your computer restarts and proceeds to a complete reinstallation.
Read more »

How to implement Applocker with Microsoft Intune

-
Image
Applocker is tool included in Windows 10 and 11. It permit to set up policies or rules for allow or deny apps from running on your device.  We can create Applocker rules for below file types:  EXE files : .exe and .com Windows Installer files : .msi, mst, and .msp Scripts : .ps1, .bat, .cmd, .vbs, and .js DLLs : .dll and .ocx Packaged apps and packaged app installers : .appx and .msix. Sources :  https://learn.microsoft.com/fr-fr/windows/security/threat-protection/windows-defender-application-control/applocker/understanding-applocker-rule-collections The Applocker solution purpose a multiple possibilities for secure your device. We have possibilities to block or allow apps. By default, it is recommended to allow all applications and add a custom rules for a scpecific application. Prérequisites for used Applocker Device with Windows 10 or 11 for prepare the Applocker rules Application Identity service enabled Enable Applocker For create an Applocker policy, you need t...
Read more »

Windows Autopilot and Pre-Provisioned deployment

-
Image
Windows Autopilot offers several deployment scenarios, including pre-provisioning. This allows to respond to some use cases such as:  Provide a workstation prepared via Windows Autopilot and then send it to low bandwidth sites for example.   But also to provide the end user, a ready-to-use experience by relieving them of sometimes tedious provisioning tasks. In the following, I will detail all the prerequisites as well as the steps to pre-provision a workstation with Microsoft Intune and Windows Autopilot. 1. Prerequisites Device : Microsoft Intune tenant  with MDM authority  "Set to Intune" Windows Autopilot User Driven AAD or HAAD join devices Windows 10 1903 and above  (Enterprise, Pro and Education) Physical devices with TPM 2.0 with device attestation  (check your hardware compatibility) Virtual machines are not supported Network : Wired ethernet connection   TPM attestation validation process  requires access to the URLs below : *.microsofta...
Read more »