To apply the package on a machine double-click on it and select Yes, add it.Change or confirm output directory and and click Next.If you have signing certificate add it and then click Next.Verify attributes (increment version if you are making changes) and select Next.Next, select Export > Provisioning package from the top menu.Now, expand Runtime settings > WindowsHelloForBusiness > SecurityKeys > UseSecurityKeyForSignIn.Select Finish (or import my package here and then click Finish).Click Next again and then select All Windows desktop editions (note!) followed by Next.Provide a project name, set a path and select Next.

Select File > New project from the top menu.

Select Yes when prompted to run the app in elevated mode.

Press the Windows key and type Windows Configuration.

With the Windows Configuration Designer installed:

Note: To create or edit a package you will need the Windows Configuration Designer app found here. You can also merge this package into a new project. One such setting is security key sign-in.įor your benefit a ready-made package can be found here. You have local administrator privilege on the machineĮnable security key sign-in with a provisioning packageĪ provisioning package can apply various client-side settings without the use of MDM.Computer is Azure-joined (verify with command: dsregcmd /status ).The following prerequisites must be met to successfully follow these instructions: Which approach you use is really up to the circumstances (you configure one or multiple machines) as well as preference 🤓Īlso, “server-side” configuration (Azure) is out of scope for the time being. Note that most (all) of these approaches do the same thing: they set a registry key. Differing circumstances have had me try a few variations of achieving this task (the client-side task) and for the greater good of all, these are listed here in an easy to follow fashion complete with screen shots. Over the course of the last year or so I have had to configure FIDO2 security key sign-in support on a number of occasions. Without further ado then, here are three ways of enabling security key sign-in in Windows 10 & 11! Background and Scope Many times there are several viable approaches to achieving the same goal. Three ways of enabling security key sign-in on Windows 10 & Windows 11

Microsoft fido key