So this post is a follow-up since Microsoft now has support for passwordless and Fido2 with Windows 10 (still only preview). In March I posted a blog post about using Yubikey with Azure AD, (Background: I don't need this feature but I am interested in the technology and would find it fun to try out.Look at these guys! They are so happy, they have gotten their Yubikey’s and are ready for some Passwordless Authentication with Windows 10.
Is there any way I might get this to work without purchasing a TPM that I don't need and won't actually use? If this is correct, why does Microsoft require Windows Hello, and therefore a motherboard TPM? If it's an oversight or deliberate corner-cutting, are they likely to fix it any time soon? This implies that using FIDO2 login does not store any secrets in the TPM on the motherboard, since the security key stores them (as expected). the public key is sent to the Microsoft account system in the cloud. The private key is stored securely on the device.
I assume this is because I have not set up Windows Hello.Īccording to the same Microsoft blog post, However, the setting "Windows Hello and security keys" mentioned here is not available to me. However, I am not able to set up Windows Hello, a prerequisite for FIDO2 sign-in, because my PC motherboard does not have a TPM installed.Įdit: The comments correctly point out that the article does not mention that Windows Hello is a prerequisite. I own a Yubikey 5, which supports this standard. I just installed the Windupdate, which includes support for FIDO2 passwordless sign-in.
0 kommentar(er)
